01. External contributors need independent server-side copies of a Git repository. Each contributor must be able to push branches to that copy and submit changes to the upstream repository without receiving write permission on upstream. Which collaboration strategy should the organization use?
a) Centralized workflow
b) Trunk-based workflow in the upstream repository
c) GitFlow workflow in the upstream repository
d) Forking workflow
02. A team is building a Power BI report from Azure DevOps Analytics. The report requires server-side filtering and aggregation of Azure Pipelines run data before Power BI imports the result. Which connection method should the team use?
a) An Azure Synapse Analytics pipeline
b) An Azure Data Factory pipeline
c) An Analytics OData query
d) A GraphQL feed
03. Several YAML and classic pipelines in one Azure DevOps project need the same centrally maintained non-secret values. Each consuming pipeline will be explicitly authorized to use the shared asset. Which Azure Pipelines feature should the team use?
a) Release pipeline variables
b) A variable group
c) Predefined variables
d) Stage variables
04. A GitHub Actions workflow needs encrypted secret values. The team is deciding where Actions secrets can be defined so their scope matches one environment, one repository, or multiple authorized repositories in an organization. At which three scopes can GitHub Actions secrets be created?
Select three.
a) Environment scope
b) Organization scope
c) Workflow scope
d) Repo scope
e) Action scope
05. Windows Server virtual machines in Azure must keep the IIS role installed. If the guest configuration drifts, the platform must restore the desired state. The organization is adopting Azure Machine Configuration rather than onboarding new nodes to the retiring Azure Automation State Configuration service.
Which three actions should you take?
(Choose three.)
a) Add each VM as a node in an Azure DevOps project.
b) Create an audit-only package and take no remediation action.
c) Assign the policy at the VM scope and create a remediation task for existing noncompliant machines.
d) Create a Machine Configuration policy definition in ApplyAndAutoCorrect mode for the package.
e) Create and publish a custom Machine Configuration package that defines the required IIS state.
f) Register the VMs as nodes in a new Azure Automation State Configuration account.
06. An Azure Pipelines YAML definition in MyProject must reference the features/tools branch of the Azure Repos Git repository MyRepo as a repository resource. Which two repository-resource URI forms identify that branch?
Select two.
a) https://MyProject/MyRepo@features/tools
b) https://MyProject/MyRepo@refs/heads/features/tools
c) git://MyProject/MyRepo@refs/heads/features/tools
d) git://MyProject/MyRepo@features/tools
07. Two applications are built on the same self-hosted Windows agent. Their build dependencies conflict, but each dependency set is available in a compatible container image. The team must isolate both builds without provisioning another agent machine. What should the team configure?
a) Add a Docker Compose task to both pipelines.
b) Create a container job for each build.
c) Add another self-hosted agent.
d) Change the agent operating system to RHEL.
08. A team is migrating Classic Azure Pipelines releases to GitHub Actions. Its migration inventory must identify Azure Pipelines-specific constructs that have no same-named portable definition in the GitHub Actions workflow and therefore require redesign.
Which two constructs should the team flag?
(Choose two.)
a) Repository and schedule triggers
b) Workflow artifacts
c) Approvals
d) Azure Pipelines service connections
e) Classic deployment groups
09. One hundred on-premises Windows and Linux servers are already Azure Arc-enabled. The team needs one telemetry agent family that can send Linux data to multiple Log Analytics workspaces through data collection rules and filter collected Windows events with XPath queries.
Which data-collection agent should the team deploy?
a) Azure Monitor Agent
b) Telegraf agent
c) Dependency agent
d) Azure Connected Machine agent
10. A developer must clone a private Azure Repos Git repository from Windows using Git for Windows. Organization policy prohibits personal access tokens and Git Credential Manager. The developer can register a public key in the Azure DevOps user profile and verify the server fingerprint on first connection.
Which authentication mechanism meets the policy?
a) A managed identity
b) SSH public-key authentication
c) Kerberos
d) OAuth through Git Credential Manager