- (Exam Topic 4)
You are implementing an Azure DevOps strategy for mobile devices using App Center. You plan to use distribution groups to control access to releases.
You need to create the distribution groups shown in the following table.

Which type of distribution group should you use for each group? To answer, drag the appropriate group types to the correct locations. Each group type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Solution:
Box1: Private
In App Center, distribution groups are private by default. Only testers invited via email can access the releases available to this group.
Box 2: Public
Distribution groups must be public to enable unauthenticated installs from public links. Box 3: Shared
Shared distribution groups are private or public distribution groups that are shared across multiple apps in a single organization.
Reference:
https://docs.microsoft.com/en-us/appcenter/distribution/groups

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have an Azure subscription. The subscription contains virtual machines that run either Windows Server or Linux.
You plan to use Prometheus to monitor performance metrics. You need to integrate Prometheus and Azure Monitor.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

1. A. Install a Prometheus server on a Windows virtual machine in Azure.
2. B. On each virtual machine, expose the metrics endpoint.
3. C. On each virtual machine, enable the Azure Diagnostics extension.
4. D. On each virtual machine, enable the containerized agent for Azure Monitor.
5. E. Expose a virtual network service endpoint for Azure Storage.
6. F. Install a Prometheus server on a Linux virtual machine in Azure.

Correct Answer: AB

- (Exam Topic 4)
Your company uses ServiceNow for incident management. You develop an application that runs on Azure.
The company needs to generate a ticket in ServiceNow when the application fails to authenticate.
Which Azure Log Analytics solution should you use?

1. A. Application Insights Connector
2. B. Automation & Control
3. C. IT Service Management Connector (ITSM)
4. D. Insight & Analytics

Correct Answer: C
The IT Service Management Connector (ITSMC) allows you to connect Azure and a supported IT Service Management (ITSM) product/service.
ITSMC supports connections with the following ITSM tools: ServiceNow
System Center Service Manager Provance
Cherwell
With ITSMC, you can
Create work items in ITSM tool, based on your Azure alerts (metric alerts, Activity Log alerts and Log Analytics alerts).
Optionally, you can sync your incident and change request data from your ITSM tool to an Azure Log Analytics workspace.
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/itsmc-overview

- (Exam Topic 4)
You manage build pipelines and deployment pipelines by using Azure DevOps.
Your company has a team of 500 developers. New members are added continual lo the team You need to automate me management of users and licenses whenever possible
Which task must you perform manually?

1. A. modifying group memberships
2. B. procuring licenses
3. C. adding users
4. D. assigning entitlements

Correct Answer: B
References:
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/migrate-to-group-based-resource-manage https://docs.microsoft.com/en-us/rest/api/azure/devops/memberentitlementmanagement/?view=azure-devops-res

- (Exam Topic 4)
You plan to create a GitHub workflow that will use GitHub Actions. The actions will require a 256-KB secret. You need to recommend a solution to store and encrypt the secret. The secret value must be accessible only to the workflow. The solution must minimize administrative effort
What should you recommend?

1. A. Store the secret in the organization-level GitHub secrets.
2. B. Store the secret in the repository-level GitHub secrets.
3. C. Encrypt the secret value and store the value in the repositor
4. D. Store the decryption key in the repository-level GitHub secrets.
5. E. Encrypt the secret value and store the value in the repositor
6. F. Store the decryption key in the organization-level GitHub secrets.

Correct Answer: C
https://docs.github.com/en/actions/security-guides/encrypted-secrets "To use secrets that are larger than 48 KB, you can use a workaround to store encrypted secrets in your repository and save the decryption passphrase as a secret on GitHub." Because it requires less administrative privilege it's at repository level