Practice Pipelines Questions Now

Start a timed practice session focusing on Azure Pipelines topics from the AZ-400 question bank.

AZ-400 Pipelines Question Bank (51 Questions)

Browse all 51 practice questions covering Azure Pipelines for the AZ-400 certification exam. Answers are intentionally hidden on this page so you can self-test first before checking results in quiz mode.

Question 1Design and implement build and release pipelines
An Azure Pipelines YAML pipeline uses a variable group linked to Azure Key Vault. What happens when a Key Vault secret is rotated?
AThe pipeline must be manually updated with the new secret value
BThe pipeline automatically retrieves the latest secret value from Key Vault on each run, as the variable group fetches values at pipeline execution time
CThe Key Vault integration caches secrets and must be refreshed manually
DThe pipeline fails until the variable group is re-linked
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 2Design and implement build and release pipelines
An engineer configures a YAML pipeline with the 'extends' keyword pointing to a secure pipeline template. What is the primary security benefit of using 'extends' in Azure Pipelines?
AFaster pipeline execution
BTemplate enforcement — the secure template can control which steps, resources, and permissions are allowed, preventing injection of malicious steps
CAutomatic secret rotation
DReduced YAML file size
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 3Design and implement build and release pipelines
A team uses multi-stage YAML pipelines with deployment jobs. They want deployments to track which version is deployed to which environment. Which Azure Pipelines feature provides this environment visibility?
AAzure Boards sprint tracking
BAzure Pipelines Environments — each deployment to an environment is recorded with the pipeline run, commit SHA, and deployment status
CGit tags on deployment commits
DAzure Monitor deployment markers
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 4Design and implement build and release pipelines
An Azure Pipelines YAML pipeline deploys to Azure App Service using the AzureWebApp@1 task. The task requires an Azure service connection. Which permission must the service connection's service principal have on the App Service?
AOwner on the App Service
BContributor or Website Contributor on the App Service resource (or resource group)
CGlobal Administrator in Azure AD
DStorage Blob Data Contributor
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 5Design and implement build and release pipelines
An Azure Pipelines release pipeline uses a classic (non-YAML) release definition. The team wants to migrate to YAML multi-stage pipelines. What is the recommended migration approach?
AExport the classic pipeline and import as YAML automatically
BManually recreate the pipeline logic in YAML using multi-stage jobs, deployment jobs, and Environment approval checks; test in parallel before decommissioning the classic pipeline
CUse the Azure DevOps migration tool
DClassic pipelines are automatically converted to YAML
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 6Design and implement build and release pipelines
A team uses Azure Pipelines with YAML templates. A template parameter is used to specify the deployment environment. How should the template validate that only allowed values ('dev', 'staging', 'prod') are passed?
AThe template cannot validate parameter values
BUse the parameters: section with type: string and values: [dev, staging, prod] — the pipeline engine rejects invalid values at queue time
CAdd an if condition inside the template
DUse a script to validate the parameter at runtime
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 7Design and implement build and release pipelines
A team runs Azure Pipelines jobs on self-hosted agents and wants to clean the build directory between runs to prevent stale artifacts contaminating builds. Which YAML workspace configuration achieves this?
ADelete the workspace folder in a script step
Bworkspace: clean: all (in the job definition) — cleans the entire workspace before the job starts
CUse a fresh Microsoft-hosted agent instead
Dworkspace: clean: outputs (cleans only output directory)
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 8Design and implement build and release pipelines
A DevOps engineer needs to deploy an ARM template using Azure Pipelines. Which task deploys ARM templates to Azure?
AAzureCLI@2 with az deployment group create
BAzureResourceManagerTemplateDeployment@3 (ARM template deployment task)
CBoth A and B can deploy ARM templates
DPowerShell@2 with New-AzResourceGroupDeployment
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 9Design and implement build and release pipelines
An Azure Pipelines agent pool uses Microsoft-hosted agents. A pipeline runs a build that takes 45 minutes. The team wants to reduce costs. Which approach reduces Microsoft-hosted agent minutes?
ARun fewer pipelines
BOptimize the pipeline: parallelize independent tasks, add dependency caching, remove unused steps, and use container jobs with pre-built images
CSwitch to a cheaper Azure region
DReduce the number of test cases
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 10Design and implement build and release pipelines
A company has multiple teams each with their own Azure Pipelines agent pool. A security team requires that production deployments only run on dedicated, hardened agents. How is this enforced in the pipeline?
ASet the pool name in each deployment job's pool: property pointing to the dedicated agent pool
BUse pipeline conditions to filter agents
CConfigure environment variables on agents
DUse approval gates to pause before choosing an agent
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 11Design and implement build and release pipelines
A team uses Azure Pipelines and wants to publish a NuGet package to an Azure Artifacts feed when a build succeeds on the main branch. Which task performs NuGet package publishing?
APublishBuildArtifacts@1
BNuGetCommand@2 with command: push and specifying the Azure Artifacts feed
CUniversalPackages@0 task
Ddotnet publish command only
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 12Design and implement build and release pipelines
A DevOps engineer needs to connect an Azure Pipelines pipeline to an Azure subscription. The service connection must allow deployment to resource groups without storing a client secret (certificate or secret rotation concerns). What is the most secure authentication method?
AUsername/password service connection
BWorkload Identity Federation service connection (Federated credentials / OIDC — no secret stored)
CService principal with client secret rotated manually
DPersonal Access Token
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 13Design and implement build and release pipelines
A DevOps engineer wants to re-run only the failed jobs in a multi-stage Azure Pipeline run rather than re-running the entire pipeline. Which Azure Pipelines feature supports this?
ARe-run from stage (available in multi-stage YAML pipelines)
BRe-run failed jobs only (available in the pipeline run UI for each failed stage)
CBoth A and B — stages can be re-run from a specific point or only failed jobs re-run
DNot possible — full pipeline re-run is required
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 14Design and implement build and release pipelines
A company's release pipeline deploys ARM templates across multiple Azure subscriptions. Each subscription requires different credentials. How should the multi-subscription deployment be configured in Azure Pipelines?
AUse a single service connection with Owner role on the management group
BCreate separate service connections per subscription, each with minimum required permissions, and use the appropriate connection in each deployment stage
CUse an Azure AD service principal with Contributor on all subscriptions
DUse a single service connection with a wildcard subscription parameter
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 15Design and implement build and release pipelines
An Azure Pipelines pipeline uses a variable group linked to Azure Key Vault. The pipeline has a step that echoes all variables for debugging. What happens to Key Vault secret values when echoed?
AThey are printed in plaintext for debugging
BThey are masked (shown as ***) in pipeline logs because Key Vault-linked variables are automatically treated as secret
CThe pipeline fails if secrets are echoed
DThey are printed but only visible to admins
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 16Design and implement build and release pipelines
A team deploys infrastructure using Terraform and wants to store the plan output as a pipeline artifact for audit purposes. How is the Terraform plan file preserved in Azure Pipelines?
Aterraform plan automatically saves to pipeline storage
BRun terraform plan -out=tfplan.binary, then use PublishPipelineArtifact@1 to publish the plan file as a named artifact
CUse terraform show to export the plan to Key Vault
DPlan files are automatically retained in the Terraform backend
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 17Design and implement build and release pipelines
A team uses GitHub Actions and wants to use a reusable workflow (equivalent to Azure Pipelines templates) across multiple repositories. Which GitHub Actions feature provides this?
AComposite actions
BReusable workflows defined with workflow_call trigger, referenced from other workflows using uses: org/repo/.github/workflows/workflow.yml@main
CGitHub Actions marketplace actions
DGitHub Actions workflow templates
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 18Design and implement build and release pipelines
A company's Azure Pipelines uses a service connection backed by a service principal. The service principal's client secret expires in 30 days. How should this be managed proactively?
AWait for the pipeline to fail and then rotate
BSet up an Azure Monitor alert or Entra ID app credential expiry notification to alert the team 60+ days before expiry; rotate the secret and update the service connection before expiry
CIncrease the secret lifetime to maximum (2 years)
DDelete the service connection and recreate it monthly
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 19Design and implement build and release pipelines
A company's pipeline produces build artifacts that should be retained for 30 days for rollback purposes. Which Azure Pipelines retention policy achieves this?
AAzure Artifacts feed retention
BPipeline-level retention policy setting minimum retention to 30 days for pipeline runs, or using Retain artifacts on specific runs
CAzure Storage lifecycle management
DManual download and storage of artifacts
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 20Design and implement build and release pipelines
A company runs a complex multi-stage pipeline that takes 2 hours to complete. The team wants to re-run only the production deployment stage after a failed swap operation, without re-running the build and test stages. Which Azure Pipelines feature supports this?
AQueue a new full pipeline run
BRe-run stages feature — select the specific failed stage to re-run from the pipeline run UI without re-running successful preceding stages
CUse the 'Retry failed jobs' option which re-runs the entire pipeline
DManually trigger the deployment stage via the Azure DevOps REST API
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 21Design and implement build and release pipelines
An Azure Pipelines pipeline deploys a Bicep template. The deployment fails with 'Conflict' error because another deployment is in progress for the same resource group. Which deployment mode resolves conflicts and handles concurrent deployments correctly?
AComplete mode (deletes unspecified resources)
BIncremental mode (the default) with a retry mechanism or deployment locking strategy to handle concurrent deployment conflicts
CWhatIf mode
DAtomic mode (not supported in ARM)
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 22Design and implement build and release pipelines
An Azure Pipelines build uses the PublishBuildArtifacts@1 task. A downstream pipeline uses DownloadBuildArtifacts@0. What is the recommended modern replacement for this artifact workflow?
AAzure Artifacts NuGet feeds
BPublishPipelineArtifact@1 (upload) and DownloadPipelineArtifact@2 (download) — uses Azure Blob Storage backend and is faster than Build Artifacts
CAzure Blob Storage with AzureCLI tasks
DAzure Container Registry for all artifacts
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 23Design and implement build and release pipelines
A team uses Azure Pipelines and has a variable group with sensitive values. They want only specific pipelines (from a security repository) to access this variable group. Which Azure DevOps security feature achieves this?
AVariable group access is all-or-nothing
BProtected variable group: enables pipeline permissions that restrict which pipelines can reference the group — specify approved pipelines; all others are blocked
CService connection permissions for variable groups
DAzure AD group-based variable access
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 24Design and implement build and release pipelines
A company uses Azure Pipelines to build a .NET application. They want to run tests and publish test results automatically. Which YAML pipeline task publishes test results to Azure Pipelines?
APublishTestResults@2 task with the test results format and file path
BCopyFiles@2
CPublishBuildArtifacts@1
DDotNetCoreCLI@2 with 'test' command only
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 25Design and implement build and release pipelines
An Azure Pipelines YAML pipeline needs to run a step only when the current branch is 'main'. Which YAML construct achieves this?
AA when: condition
BA condition: expression using and(succeeded(), eq(variables['Build.SourceBranchName'], 'main'))
CA trigger: branches: include: [main]
DA filter step with branch name
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 26Design and implement build and release pipelines
A team uses YAML pipelines and wants to reuse common build steps (e.g., restore, build, test) across 10 different service pipelines without duplicating YAML. Which Azure Pipelines feature enables this?
ACopy-paste the YAML into each pipeline
BTemplate files referenced from multiple pipelines using the template: keyword
CPipeline variables shared across pipelines
DVariable groups
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 27Design and implement build and release pipelines
An engineer wants to run Azure Pipelines jobs in parallel to reduce build time. A build has a compile stage and a test stage. The test stage has three independent test suites. How should the YAML be structured?
AThree sequential jobs in the test stage
BThree parallel jobs in the test stage with no dependsOn, or dependsOn: Compile (same dependency)
CA single job with three sequential steps
DThree separate pipelines
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 28Design and implement build and release pipelines
A company uses multi-stage YAML pipelines. They want the production stage to only run if the QA stage succeeds and if the build was triggered by the main branch. How is this expressed?
AUsing a condition on the production stage: and(succeeded('QA'), eq(variables['Build.SourceBranchName'], 'main'))
BUsing a trigger filter on the production stage
CAdding a manual gate before QA
DUsing a build tag to flag main branch builds
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 29Design and implement build and release pipelines
A DevOps engineer configures a YAML pipeline and wants to ensure that sensitive values (e.g., API keys) are never printed in pipeline logs. Which Azure Pipelines feature prevents this?
AUsing environment variables only
BMarking variables as secret (issecret: true in YAML or marked secret in the pipeline UI) — Azure Pipelines automatically masks secret variables in all log output
CEncrypting the YAML file
DUsing Azure Key Vault only
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 30Design and implement build and release pipelines
An Azure Pipelines YAML pipeline uses a matrix strategy to run the same tests on multiple Node.js versions. How is this configured?
ACreate multiple identical jobs with different variable values
BUse the strategy: matrix: section in the job definition with entries for each Node.js version
CUse pipeline parameters with an array type
DRun the job multiple times with different trigger conditions
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 31Develop a security and compliance plan
An organisation needs to scan all Azure Pipelines YAML files for insecure patterns (e.g., inline secrets, overly permissive permissions). Which approach implements this?
AManual code review of pipeline YAML files
BA policy-as-code tool (e.g., checkov, OPA/Rego) run as a build validation pipeline on all PR changes to pipeline YAML files
CAzure Security Center recommendation
DAzure Policy for Pipelines
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 32Design and implement build and release pipelines
An Azure Pipelines YAML pipeline uses a pipeline resource to trigger from another pipeline. What does the 'trigger: true' setting on a pipeline resource mean?
AThe current pipeline runs when the referenced pipeline completes
BThe referenced pipeline triggers the current pipeline automatically when it completes successfully
CBoth pipelines run simultaneously
DThe pipeline resource is monitored but no trigger fires
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 33Design and implement build and release pipelines
A team wants to store their pipeline configuration as a YAML template in a central 'pipeline-templates' repository and reference it from multiple project pipelines. Which YAML syntax imports a template from another repository?
Ainclude: @templates syntax
Btemplate: path/to/template.yml@templates (where 'templates' is the repository resource name)
Cimport: repository/pipeline.yml
Dextends: templates/base.yml only works in the same repo
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 34Design and implement build and release pipelines
A team stores Bicep infrastructure code in a GitHub repository and wants every push to the main branch to trigger an Azure Pipelines deployment. Which YAML trigger configuration enables this for a pipeline connected to GitHub?
Atrigger: branches: include: [main]
Bpr: branches: include: [main]
Cschedules: cron trigger on main
Dresources: repositories: trigger on main
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 35Design and implement build and release pipelines
An Azure Pipelines YAML pipeline uses runtime parameters to allow the deployer to choose the environment (dev/staging/prod) at queue time. Which YAML construct defines these parameters?
Avariables: section with allowed values
Bparameters: section at the top of the pipeline with type: string and values: [dev, staging, prod]
Ctrigger: parameters
Dresources: parameters
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 36Design and implement build and release pipelines
A company uses Azure Pipelines to build and deploy microservices. Each service has an independent pipeline. A change in the shared library service should trigger rebuilds of all dependent service pipelines. Which YAML feature implements this?
AScheduled triggers on all dependent pipelines
BPipeline resources with trigger: true in each dependent service pipeline, referencing the library pipeline
CService hooks from the library pipeline
DAzure Event Grid triggering all pipelines
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 37Design and implement build and release pipelines
A team uses Azure Pipelines YAML and wants to define environment variables that are different per stage (dev, staging, prod). Which approach manages stage-level variable overrides?
AGlobal pipeline variables only
BStage-level variables: section within each stage definition, overriding pipeline-level variables for that stage
CSeparate variable groups per stage
DRuntime parameters for all environment variables
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 38Design and implement build and release pipelines
A DevOps engineer configures a YAML pipeline to deploy to Azure Kubernetes Service. The deployment uses kubectl apply. Which Kubernetes service connection type is recommended for AKS?
AAzure Subscription service connection
BKubernetes service connection using Azure Subscription authentication (uses AAD workload identity or service principal to authenticate to AKS)
CDocker Registry service connection
DGeneric service connection with kubeconfig
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 39Design and implement build and release pipelines
An Azure Pipelines YAML pipeline builds a Java Maven project. The team wants to run SonarQube code quality analysis as part of the build. Which tasks are required in the correct order?
AMaven build → SonarQube analysis separately
BSonarQubePrepare@5 → Maven@3 with sonarQubeRunAnalysis: true → SonarQubePublish@5
CSonarQubePublish → Maven build → SonarQubePrepare
DMaven build → SonarQubePrepare → SonarQubePublish
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 40Design and implement build and release pipelines
A team uses Azure Pipelines and wants to restrict which agent capabilities a specific job requires. For example, a compilation job needs an agent with Node.js 18 installed. Which YAML field specifies agent capability requirements?
Arequires: section in the pool definition
Bdemands: in the pool: section of the job (e.g., demands: node.js; demands: Agent.Version -gtVersion 3.0)
Ccapabilities: in the agent configuration
Dfilter: in the trigger section
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 41Design and implement build and release pipelines
An Azure Pipelines YAML pipeline is configured to trigger on every commit to any branch except 'release/*' branches. Which trigger configuration achieves this?
Atrigger: - '*'
Btrigger: branches: include: ['*'] exclude: ['release/*']
Ctrigger: branches: exclude: ['release/*']
Dpr: branches: exclude: ['release/*']
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 42Design and implement build and release pipelines
A team builds and deploys a Python Flask application using Azure Pipelines. They want to package the application as a Docker image and store it in Azure Container Registry. Which YAML pipeline sequence is correct?
ABuild Python → Push to ACR → Build Docker image
BDocker@2 buildAndPush (builds the Docker image from the Dockerfile, which installs Python dependencies, and pushes to ACR in one step)
CPublish Python artifact → Docker@2 build → Push separately
DUsePythonVersion → pip install → Docker push
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 43Design and implement build and release pipelines
A DevOps team uses YAML pipelines and wants to implement a conditional deployment where the pipeline only deploys if the build artifact size is under 100 MB. How is this implemented?
AUse a parameter with the artifact size
BAdd a script step that checks artifact size and sets a pipeline variable (using ##vso[task.setvariable]), then use that variable as a condition on the deployment stage
CUse Azure Policy to check artifact size
DConfigure a size limit in PublishBuildArtifacts@1
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 44Design and implement build and release pipelines
An Azure Pipelines YAML pipeline uses a deployment job with the 'canary' strategy. What are the three lifecycle hooks in a canary deployment strategy?
ApreDeployment, deployment, postDeployment
BpreDeploy, deploy (with canary percentage), routeTraffic, postRouteTraffic, on: failure/success
Cbuild, test, release
Dvalidate, deploy, verify
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 45Design and implement build and release pipelines
A team needs to pass outputs from a Build stage to a Deploy stage in a multi-stage YAML pipeline. Which mechanism transfers output variables between stages?
APipeline global variables
BOutput variables set with isOutput=true in the Build stage and referenced in Deploy stage using stageDependencies.Build.BuildJob.outputs['taskName.varName']
CAzure Key Vault shared variables
DPipeline artifacts containing variables
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 46Design and implement build and release pipelines
A company stores secrets in Azure Key Vault and wants to use them in a YAML pipeline without linking a variable group. Which pipeline task directly loads Key Vault secrets into pipeline variables?
AAzureKeyVault@2 task — fetches specified secrets from Key Vault and makes them available as pipeline variables
BAzureResourceManagerTemplateDeployment@3
CAzureCLI@2 with az keyvault secret show (manual variable mapping)
DBoth A and C work; A is the standard task, C requires manual scripting
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 47Design and implement build and release pipelines
A team uses Azure Pipelines YAML and wants to create a 'nightly build' that runs at 2 AM UTC daily on the main branch. Which YAML trigger achieves this?
Atrigger: schedule: - cron: 0 2 * * *
Bschedules: - cron: '0 2 * * *' displayName: Nightly Build branches: include: [main]
Cschedule: daily at 2:00
Dtrigger: nightly: true
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 48Design and implement build and release pipelines
A team uses Azure Pipelines and wants their YAML pipeline to fail fast — if any step in any parallel job fails, all other running jobs should be cancelled immediately. Which YAML property controls this?
AtimeoutInMinutes: 0 on all jobs
BcancelTimeoutInMinutes: 0 on each job + workspace.clean: all
CNo YAML property controls cross-job cancellation; jobs run to completion
DJob-level condition: succeeded() on all parallel jobs
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 49Design and implement build and release pipelines
A team's Azure Pipelines YAML pipeline occasionally fails with 'No hosted parallelism' errors during peak hours. The team cannot purchase more parallel jobs. Which configuration reduces the impact of this limitation?
AAccept longer queue times
BUse a self-hosted agent for the most critical pipeline stages, reserving Microsoft-hosted agents for less time-sensitive builds
CRun fewer pipelines
DIncrease pipeline timeout settings
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 50Design and implement build and release pipelines
A DevOps team uses YAML multi-stage pipelines and wants a 'changelog' stage that generates release notes from Git commit messages since the last tag. Which approach implements this?
AManual release notes in the pipeline
BA script step using git log --oneline <last-tag>..HEAD to collect commits, formatted into a release notes file published as a pipeline artifact
CAzure DevOps built-in release notes generation
DGitHub Releases API from a pipeline step
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz
Question 51Design and implement build and release pipelines
A team's Azure Pipelines YAML pipeline needs to pass a JSON configuration file content as a pipeline variable. The content may contain special characters. Which approach handles this safely?
ABase64-encode the JSON and decode in the consuming step
BStore the JSON in a Key Vault secret, reference it via a variable group linked to Key Vault — the task reads it as a pipeline secret variable
CStore the raw JSON in a pipeline variable (limited by variable value size of ~32KB)
DBoth B and C are valid; B is safer for sensitive data, C works for non-sensitive JSON
Answer hidden for practice.
Use the interactive quiz to reveal the correct answer and explanation.
Start AZ-400 Quiz

Key Pipelines Concepts for AZ-400

azure pipelinesyamlmulti-stagetemplatevariable groupservice connectionagent poolartifact

AZ-400 Pipelines Exam Tips

Azure Pipelines questions in AZ-400 are typically scenario-based. Focus on DevOps process maturity, release strategy, and secure delivery pipelines. Priority concepts: azure pipelines, yaml, multi-stage, template, variable group, service connection.

What AZ-400 Expects

Anchor your answer in prefer automated, testable, and observable delivery mechanisms across environments.
Pipelines scenarios for AZ-400 are frequently mapped to Domain 3 (50-55%), so read the objective carefully before picking controls or architecture.
Expect multi-topic scenarios where Pipelines interacts with identity, networking, governance, or monitoring patterns rather than appearing as an isolated question.
When two options are both technically valid, prefer the choice that best aligns with the exam's operational scope (Expert) and vendor best practices.

High-Value Pipelines Concepts

Know the core Pipelines building blocks cold: azure pipelines, yaml, multi-stage, template.
Review the edge-case features and limits for variable group, service connection; these details are commonly used to differentiate answer choices.
Practice service-integration reasoning: how Pipelines pairs with Azure DevOps, GitHub Actions, Release Management in real deployment patterns.
For AZ-400, explain why the chosen Pipelines design meets reliability, security, and cost expectations better than the alternatives.

Common AZ-400 Traps

Watch for building pipelines without quality or security gates.
Questions in Design and Implement Build and Release Pipelines often include distractors that look correct for Pipelines but violate least-privilege, compliance, or availability requirements.
Avoid picking options purely by feature name; validate data path, failure handling, and governance impact before answering.
If the prompt hints at automation or repeatability, eliminate manual-only operational answers first.

Fast Review Checklist

Can you compare at least two Pipelines implementation paths and justify which one best fits the scenario?
Can you map the chosen answer back to Design and Implement Build and Release Pipelines (50-55%) outcomes for AZ-400?
Can you explain security and access boundaries for Pipelines without relying on default-open assumptions?
Can you describe how Pipelines integrates with Azure DevOps and GitHub Actions during failure, scaling, and monitoring events?

Exam Domains Covering Pipelines

Domain 3Design and Implement Build and Release Pipelines50-55%

Related Resources

🎯 Free AZ-400 Mock Exam Azure DevOps Questions GitHub Actions Questions Release Management Questions

More AZ-400 Study Resources

← AZ-400 Study Hub 30-Day Study Plan Full Practice Exam

🔧 Azure Pipelines - AZ-400 Practice Questions