AZ-400 practice question 25 of 35

Note: This question is partof a series of questions that present the same scenario. Each question in the series contains a unique solution that might…

Choose your answer, then check it against the explanation.

Domain Design and implement build and release pipelines

Note: This question is partof a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it As a result, these questions will not appear in the review screen. You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements: • The builds must access an on-premises dependency management system. • The build outputs must be stored as Server artifacts m Azure DevOps. • The source code must be stored in a get repository in Azure DevOps. Solution: Configure the build pipeline to use a Microsoft-hosted agent pool running the Windows Server 2022 with Visual Studio 2022 image, include the Java Tool installer task in the build pipeline. Does this meet the goal?

Answer options

Correct Answer:

Explanation

The proposed solution fails because it specifies using a Microsoft-hosted agent. Microsoft-hosted agents run on the Azure public network and do not have direct network access to on-premises resources, such as the dependency management system located behind a corporate firewall. To meet this requirement, a self-hosted agent must be installed on a machine within the on-premises network. This self-hosted agent would have the necessary network line-of-sight to connect to the dependency management system, pull dependencies, and then proceed with the build and artifact publishing steps.

Why Incorrect

A. Yes: This is incorrect. The core requirement of accessing an on-premises system cannot be met by a Microsoft-hosted agent without significant and unmentioned network configurations (e.g., VPN), making the proposed solution unviable as described.

References

1. Microsoft Corporation. (2023). Azure Pipelines agents. Microsoft Learn.

Reference: In the "Microsoft-hosted agents" section

under the "Capabilities and limitations" subsection

the documentation states: "Microsoft-hosted agents run on the Azure public network. They don't provide access to on-premises resources

such as file shares or databases."

Reference: In the "Self-hosted agents" section

it states: "To build and deploy on-premises

you must use a self-hosted agent." This directly confirms that a self-hosted agent is the correct choice for accessing on-premises resources.

URL: https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops&tabs=browser

2. Microsoft Corporation. (2023). Security considerations for Azure Pipelines. Microsoft Learn.

Reference: In the "Network location" section

it clarifies the network separation: "Pipelines run on agents. Agents can be Microsoft-hosted

which means they're on the public internet

or they can be self-hosted

which means they're on a private network." This distinction highlights why a Microsoft-hosted agent on the public internet cannot reach a private

on-premises resource.

URL: https://learn.microsoft.com/en-us/azure/devops/pipelines/security/overview?view=azure-devops

Question 25 of 35

Keep practicing

Take the free AZ-400 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test