Designing and Implementing Microsoft DevOps Solutions (AZ-400) Practice Questions
Domain coverage
- Design and Implement Processes and Communications
- Design and Implement a Source Control Strategy
- Design and Implement Build and Release Pipelines
- Develop a Security and Compliance Plan
- Implement an Instrumentation Strategy
Sample Questions (10 of 100 shown)
You've viewed 3 of 100 questions. Start the free practice exam to answer all questions with instant feedback.
Exam overview
The most effective DevOps engineers bridge the gap between development and operations by designing automated pipelines that enforce consistency, security, and observability. AZ-400, the DevOps Engineer Expert exam, measures your ability to architect end-to-end continuous integration and continuous delivery (CI/CD) strategies using Azure Pipelines and GitHub Actions, implement Infrastructure as Code with Bicep and Terraform, integrate security scanning through GitHub Advanced Security, and build instrumentation strategies with Application Insights and Kusto Query Language (KQL). Unlike associate-level exams that test individual service configuration, AZ-400 expects you to reason about the entire software delivery lifecycle — from source control branching strategies through production deployment gating.
To earn the DevOps Engineer Expert designation, you must pass AZ-400 and hold at least one active prerequisite: Azure Administrator Associate (AZ-104) or Azure Developer Associate (AZ-204). Microsoft recommends 1–2 years of practical Azure administration or development experience, with solid scripting skills in PowerShell or Bash and working knowledge of YAML pipeline syntax. The official preparation course is AZ-400T00, a four-day deep-dive curriculum that covers source control strategy, CI/CD architecture, security and compliance, and instrumentation — all mapped to the exam blueprint.
Five domains shape the AZ-400 blueprint, with one dominating the weight distribution. Design and Implement Build and Release Pipelines (50–55%) is by far the largest domain, covering multi-stage YAML pipeline authoring, self-hosted vs. Microsoft-hosted agent selection, variable groups and secure files, blue-green and canary deployment patterns, deployment slot swaps, and Infrastructure as Code provisioning using Bicep, ARM templates, and Terraform with drift control. Design and Implement Processes and Communications (10–15%) covers Azure Boards and GitHub Projects configuration, work item traceability, and Mermaid diagram documentation. Design and Implement a Source Control Strategy (10–15%) tests branching strategies (GitFlow, trunk-based, feature branching), branch policies, pull request requirements, and Git Large File Storage (LFS). Develop a Security and Compliance Plan (10–15%) covers GitHub Advanced Security for SAST/SCA/DAST scanning, Azure Key Vault secret abstraction, and OSS licensing compliance. Implement an Instrumentation Strategy (5–10%) tests Application Insights telemetry SDK deployment, KQL log analytics queries, and synthetic availability monitoring.
The practice questions here reproduce the YAML-heavy scenarios you will face in the real exam, including multi-stage pipeline debugging where variable scope and dependency ordering are the primary failure points. Each question includes a detailed explanation that walks through the pipeline logic — why a specific YAML trigger expression is correct, how to configure Azure Key Vault service connections for secret retrieval, which KQL query filters Application Insights exceptions by custom dimension, and when to choose a blue-green deployment over canary for a given risk profile. The downloadable PDF packages the same question bank for offline review, so you can practice YAML syntax patterns, Bicep module references, and GitHub Advanced Security workflow configurations during commutes or in environments without stable internet. Because the Expert-level exam grants access to Microsoft Learn documentation during the test, our practice questions are designed to be attempted without documentation first, forcing you to internalize the pipeline patterns and security scanning workflows before relying on the searchable reference.
Official Exam Domains & Weighting
To successfully pass the AZ-400 exam, candidates must master the following core domains:- Domain 1: Design and Implement Processes and Communications — 10–15%
- Domain 2: Design and Implement a Source Control Strategy — 10–15%
- Domain 3: Design and Implement Build and Release Pipelines — 50–55%
- Domain 4: Develop a Security and Compliance Plan — 10–15%
- Domain 5: Implement an Instrumentation Strategy — 5–10%
What Our Customers Say 557 verified reviews
I was skeptical about paying for exam prep, but the AZ-400 bank saved me. Covered everything I needed.
First time using online prep for a certification. The AZ-400 questions were clear, accurate, and well worth the price.
I was preparing for the AZ-400 exam while juggling a newborn at home. The flexibility of this platform was a lifesaver.
I was pleasantly surprised by the quality of the AZ-400 questions for the price. Comparable to much more expensive prep courses.
Three of my coworkers used this for AZ-400 and all passed. Figured I’d give it a shot — worked like a charm.
The AZ-400 question bank is very comprehensive. I went through all 120+ questions and felt completely ready for exam day.
Frequently Asked Questions
The most demanding portion of the exam centers around YAML pipeline troubleshooting. Candidates are routinely tripped up by questions displaying slightly broken multi-stage build scripts or variable scope dependencies across Azure Pipelines and GitHub Actions. Furthermore, selecting the exact configuration variables for secret offloading using Azure Key Vault service connections, or determining the precise KQL queries needed to filter custom application exceptions within Application Insights, serve as frequent high-failure components. Our practice questions reproduce these exact failure points with step-by-step YAML debugging walkthroughs.
Upon earning the DevOps Engineer Expert designation, your certification stays active for exactly 12 months. Microsoft opens a free online renewal eligibility window 6 months prior to the expiration date. To renew your credential for an additional year without paying a fee or retaking the proctored exam, you must complete a short, unproctored, open-book assessment via Microsoft Learn that assesses core technical shifts and tool changes that occurred during the preceding 12 months.
If you do not achieve a passing score on the first attempt, you must observe a strict 24-hour waiting period before rescheduling. For a third, fourth, or fifth attempt, a mandatory 14-day cooling-off window is enforced between each subsequent test date. Candidates are restricted to a maximum of 5 sittings for the same exam code within a rolling 12-month window, and each attempt requires a standard $165 USD payment unless covered by an Exam Replay voucher.
Yes. Like all Expert-level Microsoft exams, AZ-400 provides access to live Microsoft Learn documentation via a split-screen interface inside the Pearson VUE secure delivery environment. You can search and read official documentation during the exam, but external code execution sandboxes, GitHub repositories, and community forums are blocked. Our practice tests are designed to be attempted without documentation access first, building the YAML pipeline and KQL query mental models you will need to navigate the docs efficiently under time pressure.
The mock exam includes multi-stage YAML pipeline questions where you must debug variable scope issues, correct trigger expression syntax, and configure appropriate deployment strategies (blue-green, canary, ring-based) for given risk profiles. Topics covered include Azure Pipelines and GitHub Actions YAML schema validation, Azure Key Vault service connection integration for secret retrieval, Bicep and ARM template deployment with drift detection, GitHub Advanced Security workflow configuration for SAST and SCA scanning, and KQL query authoring for Application Insights exception diagnostics. Every practice question includes a detailed walkthrough of the pipeline logic and deployment architecture decisions.
Yes, our complete AZ-400 practice test is available as a downloadable PDF package that includes all scenario-based questions, YAML debugging exercises, case studies, and detailed answer explanations. The PDF covers every domain: Design and Implement Processes and Communications (Azure Boards traceability, Mermaid diagrams), Design and Implement a Source Control Strategy (GitFlow vs. trunk-based, branch policies, Git LFS), Design and Implement Build and Release Pipelines (YAML multi-stage pipelines, blue-green deployment, Bicep IaC, self-hosted agents), Develop a Security and Compliance Plan (GitHub Advanced Security SAST/SCA, Azure Key Vault secrets, OSS licensing), and Implement an Instrumentation Strategy (Application Insights telemetry, KQL queries, synthetic monitoring). Download the PDF for offline review during commutes or in restricted network environments.
To earn the full Microsoft Certified: DevOps Engineer Expert credential, you must pass AZ-400 AND hold at least one of the following active prerequisite certifications: Azure Administrator Associate (AZ-104) or Azure Developer Associate (AZ-204). The exams can be completed in any order, but the Expert badge only unlocks once the associate prerequisite is validated. If you have not yet passed AZ-104 or AZ-204, our corresponding practice tests cover the administrator-level or developer-level skills you will need before tackling the DevOps-level CI/CD architecture decisions in AZ-400. The DevOps Engineer Expert certification is valid for 12 months and can be renewed for free via Microsoft Learn within the final 6 months.