Back to the course
Test yourself

Azure DevOps Engineer Professional

Final exam · 60 questions · answers explained as you pick
Azure Pipelines & CI
12 questions
01Azure Pipelines is…
Incorrect — That is Azure Container Registry.
Correct — The automation engine of Azure DevOps.
Incorrect — That is Azure Monitor.
Incorrect — That is Entra ID.
02A YAML pipeline is preferred over the classic editor because it…
Correct — The pipeline evolves and is reviewed with the code.
Incorrect — Speed is not the reason.
Incorrect — It is edited like any code file.
Incorrect — It still runs on agents.
03The pipeline hierarchy is…
Incorrect — That is reversed.
Correct — Stages group jobs; jobs group steps; steps run tasks.
Incorrect — Not the hierarchy.
Incorrect — Pipelines are clearly structured.
04A Microsoft-hosted agent…
Correct — Convenient; a clean environment each run.
Incorrect — That is a self-hosted agent.
Incorrect — Hosted agents run in Azure.
Incorrect — They can.
05You choose a self-hosted agent when you need…
Incorrect — Hosted agents are lower-maintenance.
Correct — e.g. reach internal resources or preinstall tooling.
Incorrect — Pipelines require an agent.
Incorrect — Not a reason.
06A pipeline trigger on push to main…
Correct — Continuous integration on every change.
Incorrect — Triggers run pipelines, not delete.
Incorrect — That is a manual trigger.
Incorrect — Unrelated.
07Running tests in the CI pipeline matters because…
Incorrect — Fast feedback speeds delivery overall.
Correct — Shift-left quality: fail the build on broken tests.
Incorrect — CI is exactly where to run them.
Incorrect — They complement each other.
08Publishing build artifacts lets you…
Correct — Build once, deploy the same artifact everywhere.
Incorrect — Unrelated.
Incorrect — Artifacts are the build output.
Incorrect — Unrelated.
09A pipeline template is used to…
Incorrect — That is a variable group / Key Vault.
Correct — Standardize build/deploy logic centrally.
Incorrect — Templates are for reuse, not a test type.
Incorrect — Unrelated.
10Caching in a pipeline (e.g. dependencies) primarily…
Correct — Avoid re-downloading the same dependencies each time.
Incorrect — Unrelated.
Incorrect — Unrelated.
Incorrect — Unrelated.
11A variable group backed by Key Vault lets a pipeline…
Incorrect — The opposite — it avoids that.
Correct — Secrets stay in Key Vault, referenced by the pipeline.
Incorrect — You mark them secret to prevent that.
Incorrect — Unrelated.
12A good CI pipeline is…
Correct — Speed and trust keep the team using it.
Incorrect — CI should give fast, per-change feedback.
Incorrect — That defeats continuous integration.
Incorrect — Pipelines are code and should be validated.
12 questions · explanations appear as you answer
Repos, artifacts & flow
12 questions
01Azure Repos provides…
Incorrect — That is Blob storage.
Correct — Hosted Git with collaboration and branch protection.
Incorrect — That is Azure Pipelines.
Incorrect — Unrelated.
02A branch policy on main can require…
Correct — Enforce quality gates on the protected branch.
Incorrect — The opposite — it prevents direct pushes.
Incorrect — Unrelated.
Incorrect — Unrelated.
03A pull request is used to…
Incorrect — Not its purpose.
Correct — Review + policy checks before code lands.
Incorrect — That is a release/pipeline.
Incorrect — Unrelated.
04Trunk-based development favors…
Correct — Reduces merge pain and enables continuous integration.
Incorrect — That causes painful, risky merges.
Incorrect — Short-lived branches are still used.
Incorrect — Frequent integration is the point.
05Feature flags allow you to…
Incorrect — Unrelated.
Correct — Decouple deploy from release; test in prod safely.
Incorrect — Unrelated.
Incorrect — Unrelated.
06Azure Artifacts is used to…
Correct — A private, versioned package registry for your org.
Incorrect — That is Azure Pipelines.
Incorrect — That is Azure Repos.
Incorrect — Unrelated.
07Pinning dependencies to exact versions in a feed helps…
Incorrect — Not the effect.
Correct — Deterministic, reviewable dependencies.
Incorrect — Unrelated.
Incorrect — The feed hosts the pinned versions.
08Linking commits/PRs to work items provides…
Correct — Audit and reporting across the delivery lifecycle.
Incorrect — Unrelated.
Incorrect — Unrelated.
Incorrect — Unrelated.
09Azure Boards is used for…
Incorrect — That is AKS/ACI.
Correct — Plan and track work alongside code and pipelines.
Incorrect — Unrelated.
Incorrect — Unrelated.
10Requiring a passing CI build as a branch policy means…
Correct — A quality gate that protects main.
Incorrect — The opposite.
Incorrect — That would defeat the policy.
Incorrect — The build (with tests) must pass.
11A monorepo vs multi-repo choice affects…
Incorrect — It is a structural decision.
Correct — Shared tooling vs independent lifecycles.
Incorrect — Unrelated.
Incorrect — Unrelated.
12Good version-control hygiene includes…
Correct — The foundation of safe, collaborative delivery.
Incorrect — A serious security risk.
Incorrect — Bypasses review and quality gates.
Incorrect — They cause painful merges.
12 questions · explanations appear as you answer
Infrastructure as code
12 questions
01Infrastructure as code (IaC) means…
Correct — Reproducible, reviewable, automated provisioning.
Incorrect — That is manual, drift-prone provisioning.
Incorrect — Unrelated.
Incorrect — Unrelated.
02ARM templates and Bicep are…
Incorrect — Unrelated.
Correct — Declarative Azure resource definitions.
Incorrect — Unrelated.
Incorrect — Unrelated.
03Bicep is preferred over raw ARM JSON because it…
Correct — A friendlier authoring experience for Azure IaC.
Incorrect — It is Azure-specific.
Incorrect — It still deploys resources.
Incorrect — Unrelated.
04Terraform differs from Bicep in that it…
Incorrect — Terraform is multi-cloud; Bicep is Azure-only.
Correct — One tool across clouds, with explicit state.
Incorrect — It manages Azure well via the azurerm provider.
Incorrect — It is declarative code (HCL).
05Terraform state is important because it…
Correct — State can contain secrets — use a secured remote backend.
Incorrect — It is the source of truth for managed resources.
Incorrect — It may contain secrets; use a remote backend.
Incorrect — Terraform relies on it.
06Running IaC through a pipeline (plan → apply) gives you…
Incorrect — The opposite — automation.
Correct — plan in PR, apply on merge, with approvals.
Incorrect — IaC in git gives full history.
Incorrect — Not the main benefit.
07Scanning IaC (Checkov/tfsec) in the pipeline catches…
Correct — Shift-left security on infrastructure.
Incorrect — Unrelated.
Incorrect — Unrelated.
Incorrect — It prevents insecure infra shipping.
08Configuration drift is…
Incorrect — Unrelated.
Correct — Detect and reconcile drift to keep IaC authoritative.
Incorrect — Not drift.
Incorrect — That fails validation.
09Idempotent IaC means…
Correct — Safe to run repeatedly — declarative convergence.
Incorrect — Idempotency is about safe repeats.
Incorrect — The opposite.
Incorrect — Terraform still uses state.
10Azure App Configuration and Key Vault in IaC/pipelines help…
Incorrect — They manage config and secrets.
Correct — Fetch settings/secrets at deploy/runtime by identity.
Incorrect — They complement them.
Incorrect — Unrelated.
11Modularizing IaC (Bicep modules / Terraform modules) helps…
Correct — Build vetted building blocks once, consume everywhere.
Incorrect — Not the effect.
Incorrect — Modules are versioned too.
Incorrect — Unrelated.
12The core benefit of IaC for DevOps is…
Incorrect — The opposite of IaC.
Correct — Dev/test/prod provisioned identically and auditable.
Incorrect — IaC speeds and de-risks delivery.
Incorrect — IaC runs best through pipelines.
12 questions · explanations appear as you answer
Continuous delivery
12 questions
01A release pipeline / deployment stage…
Correct — CD: promote the same artifact through dev → prod.
Incorrect — Build happens in CI; CD deploys the artifact.
Incorrect — Unrelated.
Incorrect — Unrelated.
02An Azure Pipelines "environment" with approvals lets you…
Incorrect — The opposite.
Correct — Human/automated gates before a sensitive deploy.
Incorrect — Unrelated.
Incorrect — Unrelated.
03A blue/green deployment…
Correct — Instant cutover and rollback by switching back.
Incorrect — That is a riskier in-place update.
Incorrect — It avoids downtime.
Incorrect — The old stays until cutover.
04A canary deployment…
Incorrect — That is a full rollout, not canary.
Correct — Limit blast radius; roll back if metrics degrade.
Incorrect — Canary is designed to roll back fast.
Incorrect — Unrelated.
05App Service deployment slots enable…
Correct — Deploy to a staging slot, warm it, then swap.
Incorrect — Unrelated.
Incorrect — Unrelated.
Incorrect — The opposite.
06Automated rollback on a failed deployment means…
Incorrect — Automation removes the manual step.
Correct — Contain a bad release in seconds.
Incorrect — The opposite.
Incorrect — Not rollback.
07Decoupling deploy from release (via feature flags) lets you…
Correct — Ship safely; release on a business decision.
Incorrect — You still deploy.
Incorrect — Unrelated.
Incorrect — Unrelated.
08Progressive delivery rollout should be paired with…
Incorrect — Monitoring is essential to it.
Correct — Canary/blue-green depend on watching signals.
Incorrect — Automate where possible.
Incorrect — The opposite.
09Deploying the same artifact through environments (not rebuilding) ensures…
Correct — Build once, promote the identical artifact.
Incorrect — Unrelated.
Incorrect — That is the risk you avoid.
Incorrect — Unrelated.
10Multi-stage YAML pipelines let you…
Incorrect — They span build and deploy stages.
Correct — CI and CD together, reviewable and reproducible.
Incorrect — The opposite.
Incorrect — Unrelated.
11A deployment gate (e.g. query monitoring before promoting) provides…
Correct — e.g. no active incidents / healthy metrics before prod.
Incorrect — Not a gate.
Incorrect — Unrelated.
Incorrect — Unrelated.
12The goal of continuous delivery is…
Incorrect — The opposite of CD.
Correct — Small changes shipped safely and often.
Incorrect — CD is about deploying reliably.
Incorrect — CD includes gates and monitoring.
12 questions · explanations appear as you answer
Secure DevOps & observability
12 questions
01DevSecOps means…
Correct — Shift-left; security is everyone’s job, automated.
Incorrect — That is the bottleneck DevSecOps removes.
Incorrect — The opposite.
Incorrect — It is a practice, not a product.
02A pipeline should manage secrets by…
Incorrect — A serious leak risk.
Correct — Secrets stay in Key Vault, referenced securely.
Incorrect — Mark secrets to prevent this.
Incorrect — Insecure.
03A service connection with workload identity federation…
Correct — OIDC federation removes long-lived credentials.
Incorrect — The opposite of federation.
Incorrect — Unrelated.
Incorrect — Unrelated.
04Scanning tools in the pipeline (SAST, dependency, IaC, image) provide…
Incorrect — They add real security value.
Correct — Shift-left security across the artifact.
Incorrect — They catch issues early and cheaply.
Incorrect — Unrelated.
05Gating on scan results should…
Correct — Precise gates keep the pipeline both secure and usable.
Incorrect — That gets the scanner disabled.
Incorrect — Then it is not a gate.
Incorrect — Criticals are exactly what to gate on.
06Least-privilege for pipeline identities means…
Incorrect — Far too broad; a compromised pipeline owns everything.
Correct — Limit blast radius of a compromised pipeline.
Incorrect — Maximal risk.
Incorrect — It needs scoped access.
07Azure Monitor / Application Insights in a DevOps context…
Correct — Observability closes the delivery feedback loop.
Incorrect — That is Pipelines.
Incorrect — That is Key Vault.
Incorrect — Unrelated.
08Microsoft Defender for DevOps / cloud posture helps by…
Incorrect — Its value is security posture.
Correct — Unified visibility into DevOps and cloud risk.
Incorrect — Unrelated.
Incorrect — It complements them.
09Compliance/policy as code in the pipeline (e.g. Azure Policy, Conftest) ensures…
Correct — Controls enforced continuously, not at a late review.
Incorrect — It automates compliance.
Incorrect — It produces enforcement + evidence.
Incorrect — Unrelated.
10A blameless post-mortem after an incident focuses on…
Incorrect — Blame suppresses honest learning.
Correct — Fix the process; each incident improves the system.
Incorrect — The opposite of learning.
Incorrect — Discourages transparency.
11Monitoring feeds continuous improvement by…
Correct — The DevOps feedback loop: observe, learn, improve.
Incorrect — Then it adds no value.
Incorrect — It complements it.
Incorrect — Monitoring is continuous.
12The essence of secure DevOps is…
Incorrect — That trades safety for speed.
Correct — Ship quickly AND safely, with feedback and controls as code.
Incorrect — Shift it left across the pipeline.
Incorrect — Automate the controls.
12 questions · explanations appear as you answer