AZ-400 Question 100

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  Subscription Health scans (like Azure Secure Score or Advisor recommendations) are designed to check for issues in Azure resources, such as VMs, networks, or storage accounts — not Azure DevOps project configurations.

• Chose B1

  Performing a Subscription Health scan when packages are created does not directly prevent the configuration of the project from changing over time. A Subscription Health scan primarily helps identify potential issues related to subscription-level resources and their compliance with best practices, but it does not specifically enforce configuration immutability within a project. To prevent changes to a project’s configuration, you would typically use other mechanisms, such as: Azure DevOps policies: These can be used to enforce rules around code changes, including branch policies and approval requirements, to prevent unwanted configuration changes. Infrastructure as Code (IaC): Using tools like ARM templates, Terraform, or Azure DevOps pipelines to manage and enforce configurations programmatically. Role-Based Access Control (RBAC): Limiting permissions for users who can make changes to the project's configuration.

• Chose B1

  Correct is B