📝 Infrastructure as Code - AZ-400 Practice Questions

AZ-400 IaC Question Bank (4 Questions)

Browse all 4 practice questions covering Infrastructure as Code for the AZ-400 certification exam. Answers are intentionally hidden on this page so you can self-test first before checking results in quiz mode.

1. Question 1Develop a security and compliance plan

   A team wants to scan their Bicep/ARM templates for security misconfigurations (e.g., storage accounts with public access, overly permissive NSGs) in the CI pipeline. Which tool performs IaC security scanning?

   Aaz bicep build (syntax only)

   BCheckov, Terrascan, or Microsoft Defender for DevOps (which runs Checkov) — scans ARM/Bicep for security misconfigurations

   CAzure Policy compliance scan

   DARM template deployment validation

   Answer hidden for practice.

   Use the interactive quiz to reveal the correct answer and explanation.

   Start AZ-400 Quiz
2. Question 2Design and implement build and release pipelines

   A DevOps team needs to implement infrastructure provisioning that supports both creating new environments and updating existing ones idempotently. Which Terraform command achieves this for Azure?

   Aterraform plan

   Bterraform apply — creates resources that don't exist and updates resources whose configuration has changed, idempotently

   Cterraform destroy followed by terraform apply

   Dterraform import

   Answer hidden for practice.

   Use the interactive quiz to reveal the correct answer and explanation.

   Start AZ-400 Quiz
3. Question 3Design and implement build and release pipelines

   An organisation wants to implement Infrastructure as Code testing to validate that Terraform modules produce the expected resources. Which tool provides unit and integration testing for Terraform?

   Aterraform validate (syntax only)

   BTerratest (Go-based testing framework) or terraform test (built-in HCL testing in Terraform 1.6+)

   Cpytest with Terraform provider

   DPester (PowerShell testing framework)

   Answer hidden for practice.

   Use the interactive quiz to reveal the correct answer and explanation.

   Start AZ-400 Quiz
4. Question 4Design and implement build and release pipelines

   A pipeline for an IaC deployment must validate that the Terraform plan has no critical changes before applying. Which pipeline pattern implements this safely?

   ARun terraform apply directly without plan

   BRun terraform init → terraform plan (save plan file) → manual approval gate → terraform apply -input=false -auto-approve planfile

   CRun terraform apply -auto-approve on every commit

   DRun terraform validate only, skip plan

   Answer hidden for practice.

   Use the interactive quiz to reveal the correct answer and explanation.

   Start AZ-400 Quiz