You need to configure access to Azure DevOps agent pools to meet the following requirements:
Use a project agent pool when authoring build or release pipelines.
View the agent pool and agents of the organization.
Use the principle of least privilege.
Which role memberships are required for the Azure DevOps organization and the project? To answer, drag the appropriate role memberships to the correct targets. Each role membership may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

Box 1: Reader
Members of the Reader role can view the organization agent pool as well as agents. You typically use this to add operators that are responsible for monitoring the agents and their health.
Box 2: Service account
Members of the Service account role can use the organization agent pool to create a project agent pool in a project. If you follow the guidelines above for creating new project agent pools, you typically do not have to add any members here.
Reference:
https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/pools-queues

Comment: *

Name: *

Email: *

Verification: *

How should you confrere the release retention policy for the investment planning depletions suite? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Every request made against a storage service must be authorized, unless the request is for a blob or container resource that has been made available for public or signed access. One option for authorizing a request is by using Shared Key.
Scenario: The mobile applications must be able to call the share pricing service of the existing retirement fund management system. Until the system is upgraded, the service will only support basic authentication over HTTPS.
The investment planning applications suite will include one multi-tier web application and two iOS mobile application. One mobile application will be used by employees; the other will be used by customers.
References: https://docs.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key

Comment: *

Name: *

Email: *

Verification: *

Hotspot Question
You have a project in Azure DevOps that has three teams as shown in the Teams exhibit. (Click the Teams tab.)

You create a new dashboard named Dash1.
You configure the dashboard permissions for the Control project as shown in the Permissions exhibit. (Click the Permissions tab.)

All other permissions have the default values set.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: No
According to the configuration in the second screenshot, Delete dashboards permission is disabled.
Box 2: Yes
Everyone can view a dashboard.
Box 3: Yes
Only project administrators can manage dashboards.
By default, all team members have permissions to create and edit dashboards for their teams.
https://docs.microsoft.com/en-us/azure/devops/report/dashboards/dashboard- permissions?view=azure-devops

Comment: *

Name: *

Email: *

Verification: *

You need to increase the security of your team's development process.
Which type of security tool should you recommend for each stage of the development process? To answer, drag the appropriate security toots to the correct stages. Each security tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

SIMULATION
You need to prepare a network security group (NSG) named az400-9940427-nsg1 to host an Azure DevOps pipeline agent. The solution must allow only the required outbound port for Azure DevOps and deny all other inbound and outbound access to the Internet.
To complete this task, sign in to the Microsoft Azure portal.

• A.1. Open Microsoft Azure Portal and Log into your Azure account.
  2. Select network security group (NSG) named az400-9940427-nsg1
  3. Select Settings, Outbound security rules, and click Add
  4. Click Advanced
  
  5. Change the following settings:
  * Destination Port range: 8080
  * Protocol. TCP
  * Action: Allow
  Note: By default, Azure DevOps Server uses TCP Port 8080.
• B.1. Open Microsoft Azure Portal and Log into your Azure account.
  2. Select network security group (NSG) named az400-9940427-nsg1
  3. Select Settings, Outbound security rules, and click Add
  4. Click Advanced
  
  5. Change the following settings:
  * Destination Port range: 9090
  * Protocol. TCP
  * Action: Allow
  Note: By default, Azure DevOps Server uses TCP Port 8080.

Comment: *

Name: *

Email: *

Verification: *