Correct Answer: C  🗳️

Correct Answer: D  🗳️

Explanation: Only visible for ITExamDownload members. You can sign-up / login (it's free).

Correct Answer:

Explanation:

Step 1: Create an agent pool
Azure Pipelines provides a pre-defined agent pool named Azure Pipelines with Microsoft-hosted agents.
Step 2: Create a deployment group
Deployment groups make it easy to define logical groups of target machines for deployment, and install the required agent on each machine.
Step 3: Execute the Azure Pipelines Agent extension to the virtual machines Install the Azure Pipelines Agent Azure VM extension Step 4: Add and configure a deployment group job for the pipeline Tasks that you define in a deployment group job run on some or all of the target servers, depending on the arguments you specify for the tasks and the job itself.
Reference:
https://docs.microsoft.com/en-us/azure/devops/pipelines/release/deployment-groups/howto-provision-deployment-group-agents

Correct Answer:

See solution below.
Explanation:
With the storage account ready, you can configure backs up in the web app or App Service.
Open the App Serviceaz400-11566895-main, which you want to protect, in the Azure Portal and browse to Settings > Backups. Click Configure and a Backup Configuration blade should appear.
Select the storage account.
Click + to create a private container. You could name this container after the web app or App Service.
Select the container.
If you want to schedule backups, then set Scheduled Backup to On and configure a schedule: every five hours Select your retention. Note that 0 means never delete backups.
Decide if at least onebackup should always be retained.
Choose if any connected databases should be included in the web app backup.
Click Save to finalize the backup configuration.

Reference:
https://petri.com/backing-azure-app-service

Correct Answer:

To prepare a Network Security Group (NSG) namedaz400-38443478-nsg1for hosting an Azure DevOps pipeline agent, while allowing only the required outbound port for Azure DevOps and denying all other inbound and outbound access to the Internet, follow these steps:
Create the NSG:
Navigate to the Azure Portal.
Go toNetwork Security Groupsand click on+ Create.
Fill in the details, including the nameaz400-38443478-nsg1, and create the NSG.
ConfigureOutbound Security Rules:
Once the NSG is created, go to its settings.
Navigate toOutbound security rules.
Click on+ Addto create a new rule.
Set theDestination port rangesto443, which is the required port for Azure DevOps12.
Set theProtocoltoTCP.
Set theActiontoAllow.
Assign aPrioritynumber (e.g.,100) that does not conflict with existing rules.
Provide a meaningfulNamefor the rule (e.g.,AllowAzureDevOps).
Configure Default Rules to Deny All Other Traffic:
In the sameOutbound security rulessection, edit the default rule to deny alltraffic.
Change theActiontoDenyfor the rule with the lowest priority (highest number).
Ensure that this rule applies to all protocols, source and destination IP ranges, and port ranges.
Associate the NSG with the Appropriate Resource:
Associate the NSGwith the subnet or network interface of the virtual machine or resource where the Azure DevOps pipeline agent will be hosted.
By following these steps, you will ensure that the Azure DevOps pipeline agent can communicate with Azure DevOps services over the required port while blocking all other inbound and outbound Internet access, adhering to the principle of least privilege and security best practices.