AZ-400 — Designing and Implementing Microsoft DevOps Solutions
Microsoft

Designing and Implementing Microsoft DevOps Solutions (AZ-400) Practice Questions

4.8 557 verified reviews
100 questions
June 11, 2026 updated
Online quiz simulator

Domain coverage

  • Design and Implement Processes and Communications
  • Design and Implement a Source Control Strategy
  • Design and Implement Build and Release Pipelines
  • Develop a Security and Compliance Plan
  • Implement an Instrumentation Strategy

Sample Questions (10 of 100 shown)

Q1 Design and Implement Processes and Communications
You are configuring a project dashboard in Azure DevOps. You need to configure a chart widget that measures the elapsed time for a work item to complete once it enters an active state. Which of the following widgets should you use?
  1. Cumulative Flow Diagram
  2. Burnup
  3. Cycle Time
  4. Burndown
✓ Correct Answer: C
Cycle Time measures the time taken for a work item to move from "active" to "completed". Burnup and Burndown charts show work scope trends over time, while the Cumulative Flow Diagram shows the distribution of work items across states — none of which directly measure the active-to-completion time span.
Q2 Design and Implement Processes and Communications
You need to evaluate whether the underlined portion is accurate. The Burnup widget measures the time that elapses from the creation of work items to their completion. If the underlined portion is accurate, select "No adjustment required." If it is inaccurate, select the accurate option.
  1. No adjustment required
  2. Lead time
  3. Test results trend
  4. Burndown
✓ Correct Answer: B
The description — "time from creation to completion" — is the definition of Lead Time, not Burnup. Burnup charts show completed and remaining work scope over time. Lead Time tracks the full journey from work item creation to completion.
Q3 Design and Implement Processes and Communications
You are using Azure DevOps to manage build and deployment pipelines. The development team is large, and new members join regularly. You have been informed that management of users and licenses must be automated where possible. Which of the following tasks CANNOT be automated?
  1. Group membership changes
  2. License assignment
  3. Assigning entitlements
  4. License procurement
✓ Correct Answer: D
Group membership changes, license assignment, and entitlement assignment can all be automated via the Azure DevOps REST API. However, license procurement involves commercial purchasing through agreements with Microsoft and cannot be automated programmatically — it requires human or enterprise procurement workflow involvement.
Q4 Design and Implement Processes and Communications
A development team wants to implement DevOps practices but struggles with siloed communication between development and operations teams. Which Azure DevOps feature should they use to improve cross-team collaboration?
  1. Azure Boards only for developers and separate project management tools for operations
  2. Azure Boards with integrated work items visible to all teams, using tags and area paths
  3. Email distribution lists for status updates
  4. Separate Azure DevOps organizations for each team
✓ Correct Answer: B
Azure Boards provides integrated work item tracking configurable with area paths and tags to organize work across teams. Giving both development and operations visibility into shared boards breaks down silos. Separate organizations reinforce the silo problem, and email lacks the traceability needed for effective DevOps.
Q5 Design and Implement Processes and Communications
Your organization wants to implement a feedback loop to continuously improve deployment quality. Which combination of Azure DevOps features provides the best feedback mechanism?
  1. Azure Repos and Azure Artifacts only
  2. Azure Pipelines with Azure Test Plans integration, plus Azure Boards for bug tracking
  3. Azure Boards with manual status reports
  4. Azure DevOps Wiki for documentation
✓ Correct Answer: B
Azure Pipelines integrated with Azure Test Plans creates a comprehensive feedback loop — pipelines automatically run tests, results feed back into the system, and failed tests can automatically create work items in Azure Boards. This closed-loop system ensures quality issues are tracked and resolved.
Q6 Design and Implement Processes and Communications
A company needs to establish traceability from business requirements through to production deployments. Which Azure DevOps approach should they implement?
  1. Use separate tools for requirements and deployments without integration
  2. Link work items in Azure Boards to commits, builds, releases, and deployments
  3. Maintain traceability in spreadsheets updated manually
  4. Use Git tags for all traceability needs
✓ Correct Answer: B
Azure DevOps provides end-to-end traceability by linking work items to commits (via commit messages with #workitemID), which are then linked to builds and releases. The Deployment section in work items shows where code changes have been deployed, creating a complete audit trail from requirements to production.
Q7 Design and Implement Processes and Communications
Your team needs to measure DevOps performance using DORA metrics. Which Azure DevOps features help track deployment frequency and lead time for changes?
  1. Azure Repos commit history only
  2. Azure Pipelines deployment history combined with Azure Boards cycle time reports
  3. Azure Artifacts download statistics
  4. Azure DevOps audit logs only
✓ Correct Answer: B
DORA (DevOps Research and Assessment) metrics include deployment frequency and lead time for changes. Azure Pipelines tracks deployment frequency through release history, while Azure Boards Analytics provides cycle time and lead time reports. Together these provide the data needed for DORA metrics.
Q8 Design and Implement Processes and Communications
An organization wants to improve team effectiveness by visualizing work in progress limits. Which Azure Boards feature supports this?
  1. Git repository branch policies
  2. Kanban board with WIP limits configured for each column
  3. Pipeline approval gates
  4. Wiki page for team guidelines
✓ Correct Answer: B
Azure Boards Kanban boards support Work In Progress (WIP) limits on each column. When WIP limits are exceeded, the column is highlighted, signaling the team to focus on completing work before starting new items. This Kanban practice improves flow and reduces context switching.
Q9 Design and Implement Processes and Communications
A distributed team across multiple time zones needs to improve asynchronous communication about work status. Which approach should they implement in Azure DevOps?
  1. Daily video calls for all team members
  2. Comprehensive work item comments, @mentions, and automated status updates with dashboard visibility
  3. Email threads for each work item
  4. Shared text documents for status tracking
✓ Correct Answer: B
Azure DevOps supports asynchronous communication through work item discussions with @mentions that notify team members, automated status updates from pipeline executions, and dashboards providing real-time visibility. This allows teams in different time zones to stay informed without requiring synchronous meetings.
Q10 Design and Implement Processes and Communications
A development team wants to optimize their value stream by identifying bottlenecks in their delivery process. Which Azure DevOps analytics feature should they use?
  1. Git blame annotations
  2. Cumulative Flow Diagram and cycle time trends in Azure Boards Analytics
  3. Pipeline run duration logs only
  4. Work item count by assignee
✓ Correct Answer: B
Azure Boards Analytics provides Cumulative Flow Diagrams showing work distribution across stages over time, and cycle time trend charts showing how long work takes to complete. These visualizations help identify bottlenecks where work accumulates. Git blame shows code authorship but not process bottlenecks.

You've viewed 3 of 100 questions. Start the free practice exam to answer all questions with instant feedback.

Exam overview

The most effective DevOps engineers bridge the gap between development and operations by designing automated pipelines that enforce consistency, security, and observability. AZ-400, the DevOps Engineer Expert exam, measures your ability to architect end-to-end continuous integration and continuous delivery (CI/CD) strategies using Azure Pipelines and GitHub Actions, implement Infrastructure as Code with Bicep and Terraform, integrate security scanning through GitHub Advanced Security, and build instrumentation strategies with Application Insights and Kusto Query Language (KQL). Unlike associate-level exams that test individual service configuration, AZ-400 expects you to reason about the entire software delivery lifecycle — from source control branching strategies through production deployment gating.

To earn the DevOps Engineer Expert designation, you must pass AZ-400 and hold at least one active prerequisite: Azure Administrator Associate (AZ-104) or Azure Developer Associate (AZ-204). Microsoft recommends 1–2 years of practical Azure administration or development experience, with solid scripting skills in PowerShell or Bash and working knowledge of YAML pipeline syntax. The official preparation course is AZ-400T00, a four-day deep-dive curriculum that covers source control strategy, CI/CD architecture, security and compliance, and instrumentation — all mapped to the exam blueprint.

Five domains shape the AZ-400 blueprint, with one dominating the weight distribution. Design and Implement Build and Release Pipelines (50–55%) is by far the largest domain, covering multi-stage YAML pipeline authoring, self-hosted vs. Microsoft-hosted agent selection, variable groups and secure files, blue-green and canary deployment patterns, deployment slot swaps, and Infrastructure as Code provisioning using Bicep, ARM templates, and Terraform with drift control. Design and Implement Processes and Communications (10–15%) covers Azure Boards and GitHub Projects configuration, work item traceability, and Mermaid diagram documentation. Design and Implement a Source Control Strategy (10–15%) tests branching strategies (GitFlow, trunk-based, feature branching), branch policies, pull request requirements, and Git Large File Storage (LFS). Develop a Security and Compliance Plan (10–15%) covers GitHub Advanced Security for SAST/SCA/DAST scanning, Azure Key Vault secret abstraction, and OSS licensing compliance. Implement an Instrumentation Strategy (5–10%) tests Application Insights telemetry SDK deployment, KQL log analytics queries, and synthetic availability monitoring.

The practice questions here reproduce the YAML-heavy scenarios you will face in the real exam, including multi-stage pipeline debugging where variable scope and dependency ordering are the primary failure points. Each question includes a detailed explanation that walks through the pipeline logic — why a specific YAML trigger expression is correct, how to configure Azure Key Vault service connections for secret retrieval, which KQL query filters Application Insights exceptions by custom dimension, and when to choose a blue-green deployment over canary for a given risk profile. The downloadable PDF packages the same question bank for offline review, so you can practice YAML syntax patterns, Bicep module references, and GitHub Advanced Security workflow configurations during commutes or in environments without stable internet. Because the Expert-level exam grants access to Microsoft Learn documentation during the test, our practice questions are designed to be attempted without documentation first, forcing you to internalize the pipeline patterns and security scanning workflows before relying on the searchable reference.

Official Exam Domains & Weighting

To successfully pass the AZ-400 exam, candidates must master the following core domains:
  • Domain 1: Design and Implement Processes and Communications — 10–15%
Covers agile tool configuration inside Azure Boards and GitHub Projects, structural traceability mapping across work items, user stories, commits, and deployment releases. Includes documentation automation using Markdown and Mermaid diagram syntax inside Azure DevOps Wikis and GitHub repos, and real-time platform alerting via native webhooks.
  • Domain 2: Design and Implement a Source Control Strategy — 10–15%
Focuses on branching strategies (GitFlow, trunk-based development, feature branching), enforcing branch policies and pull request requirements, and setting up Git Hooks. Repository optimization covers Git Large File Storage (LFS), Scalar for large repos, and cross-repository sharing configurations with appropriate permissions and authentication models.
  • Domain 3: Design and Implement Build and Release Pipelines — 50–55%
Tests multi-stage CI/CD architecture using YAML schemas in Azure Pipelines and GitHub Actions, build agent optimization (self-hosted vs. Microsoft-hosted), and pipeline tuning with variable groups, secure files, and artifact retention. Deployment engineering covers blue-green, canary, progressive exposure, ring deployments, feature flags, and automated deployment slot swaps. Infrastructure as Code topics include Bicep, ARM templates, and Terraform with drift control and Desired State Configuration (DSC).
  • Domain 4: Develop a Security and Compliance Plan — 10–15%
Covers shifting security left with SAST, SCA, and DAST tools — specifically GitHub Advanced Security and Microsoft Defender for Cloud. Secret and license management includes Azure Key Vault service connections for API tokens and certificates, and Open Source Software (OSS) licensing compliance checking.
  • Domain 5: Implement an Instrumentation Strategy — 5–10%
Tests Application Insights telemetry SDK deployment and configuration, Kusto Query Language (KQL) script authoring inside Azure Monitor for diagnostics, and feedback loop automation via smart detection alerts, multi-step synthetic availability tests, and ITSM connector integration.

What Our Customers Say 557 verified reviews

4.8 Based on 557 reviews
I was skeptical about paying for exam prep, but the AZ-400 bank saved me. Covered everything I needed.
— Nathan R.
First time using online prep for a certification. The AZ-400 questions were clear, accurate, and well worth the price.
— Abigail M.
I was preparing for the AZ-400 exam while juggling a newborn at home. The flexibility of this platform was a lifesaver.
— Cooper D.
I was pleasantly surprised by the quality of the AZ-400 questions for the price. Comparable to much more expensive prep courses.
— Blake C.
Three of my coworkers used this for AZ-400 and all passed. Figured I’d give it a shot — worked like a charm.
— Derek S.
The AZ-400 question bank is very comprehensive. I went through all 120+ questions and felt completely ready for exam day.
— Sebastian M.

Log in to rate this exam and leave a review.

Submitted for moderation before publishing. Keep it helpful and respectful.

Frequently Asked Questions

The most demanding portion of the exam centers around YAML pipeline troubleshooting. Candidates are routinely tripped up by questions displaying slightly broken multi-stage build scripts or variable scope dependencies across Azure Pipelines and GitHub Actions. Furthermore, selecting the exact configuration variables for secret offloading using Azure Key Vault service connections, or determining the precise KQL queries needed to filter custom application exceptions within Application Insights, serve as frequent high-failure components. Our practice questions reproduce these exact failure points with step-by-step YAML debugging walkthroughs.

Upon earning the DevOps Engineer Expert designation, your certification stays active for exactly 12 months. Microsoft opens a free online renewal eligibility window 6 months prior to the expiration date. To renew your credential for an additional year without paying a fee or retaking the proctored exam, you must complete a short, unproctored, open-book assessment via Microsoft Learn that assesses core technical shifts and tool changes that occurred during the preceding 12 months.

If you do not achieve a passing score on the first attempt, you must observe a strict 24-hour waiting period before rescheduling. For a third, fourth, or fifth attempt, a mandatory 14-day cooling-off window is enforced between each subsequent test date. Candidates are restricted to a maximum of 5 sittings for the same exam code within a rolling 12-month window, and each attempt requires a standard $165 USD payment unless covered by an Exam Replay voucher.

Yes. Like all Expert-level Microsoft exams, AZ-400 provides access to live Microsoft Learn documentation via a split-screen interface inside the Pearson VUE secure delivery environment. You can search and read official documentation during the exam, but external code execution sandboxes, GitHub repositories, and community forums are blocked. Our practice tests are designed to be attempted without documentation access first, building the YAML pipeline and KQL query mental models you will need to navigate the docs efficiently under time pressure.

The mock exam includes multi-stage YAML pipeline questions where you must debug variable scope issues, correct trigger expression syntax, and configure appropriate deployment strategies (blue-green, canary, ring-based) for given risk profiles. Topics covered include Azure Pipelines and GitHub Actions YAML schema validation, Azure Key Vault service connection integration for secret retrieval, Bicep and ARM template deployment with drift detection, GitHub Advanced Security workflow configuration for SAST and SCA scanning, and KQL query authoring for Application Insights exception diagnostics. Every practice question includes a detailed walkthrough of the pipeline logic and deployment architecture decisions.

Yes, our complete AZ-400 practice test is available as a downloadable PDF package that includes all scenario-based questions, YAML debugging exercises, case studies, and detailed answer explanations. The PDF covers every domain: Design and Implement Processes and Communications (Azure Boards traceability, Mermaid diagrams), Design and Implement a Source Control Strategy (GitFlow vs. trunk-based, branch policies, Git LFS), Design and Implement Build and Release Pipelines (YAML multi-stage pipelines, blue-green deployment, Bicep IaC, self-hosted agents), Develop a Security and Compliance Plan (GitHub Advanced Security SAST/SCA, Azure Key Vault secrets, OSS licensing), and Implement an Instrumentation Strategy (Application Insights telemetry, KQL queries, synthetic monitoring). Download the PDF for offline review during commutes or in restricted network environments.

To earn the full Microsoft Certified: DevOps Engineer Expert credential, you must pass AZ-400 AND hold at least one of the following active prerequisite certifications: Azure Administrator Associate (AZ-104) or Azure Developer Associate (AZ-204). The exams can be completed in any order, but the Expert badge only unlocks once the associate prerequisite is validated. If you have not yet passed AZ-104 or AZ-204, our corresponding practice tests cover the administrator-level or developer-level skills you will need before tackling the DevOps-level CI/CD architecture decisions in AZ-400. The DevOps Engineer Expert certification is valid for 12 months and can be renewed for free via Microsoft Learn within the final 6 months.