Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Automating IaC Deployments with Azure Pipelines
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An engineering team is adopting Infrastructure as Code (IaC) to standardize cloud resource provisioning in Azure. The team stores their template files in a centralized Git repository and requires a solution that can automatically validate template syntax, run automated compliance checks, and deploy the defined infrastructure whenever changes are merged.
Which Azure DevOps service should the team implement to automate their IaC continuous integration and continuous deployment (CI/CD) workflows?
Explanations
Azure Pipelines
Azure Pipelines
What Azure Pipelines Is
Azure Pipelines is a cloud-hosted continuous integration (CI) and continuous delivery (CD) service provided within the Azure DevOps suite. It enables teams to automatically build, test, validate, and deploy code or declarative infrastructure templates across multi-cloud environments and on-premises platforms.
How It Meets the Requirements
- Automated CI Validation: Whenever infrastructure templates (such as Bicep, ARM templates, or Terraform) are committed to a version control repository, Azure Pipelines can trigger an automated build pipeline to run linter checks, syntax validation, and security scans.
- Automated CD Deployments: Upon successful validation and pull request approval, release pipelines can execute deployment jobs to automatically create, update, or decommission Azure infrastructure in development, staging, and production environments.
- Environment Gating and Approvals: It provides release gates, manual approvals, and service connection security to prevent unverified infrastructure changes from reaching production.
Key Capabilities
- Cross-Platform Support: Works seamlessly with any operating system (Linux, macOS, Windows) and supports both YAML definitions and classic visual pipelines.
- Native Cloud Integration: Connects directly to Azure subscriptions using secure service principals or workload identity federation.
- Integration with Repositories: Natively integrates with Azure Repos, GitHub, and Bitbucket to trigger automation on code commits or pull requests.
- Extensible Task Marketplace: Offers hundreds of pre-built tasks for validating, testing, and deploying templates and application code.
Why This Is Optimal
Azure Pipelines provides the end-to-end automation needed to turn static Infrastructure as Code templates into a fully automated, repeatable, and audited cloud deployment pipeline.
Azure App Configuration
Azure App Configuration
What Azure App Configuration Is
Azure App Configuration is a centrally managed service designed to store and manage application settings, dynamic feature flags, and configuration key-values separately from application code.
Why It Doesn't Meet the Requirement
- Configuration Management: Azure App Configuration handles runtime configuration data and feature toggles, not pipeline execution or resource provisioning workflows.
- No CI/CD Execution: It cannot parse Infrastructure as Code templates, validate syntax, evaluate dependencies, or trigger deployment tasks across cloud subscriptions.
Key Characteristics and Limitations
- Centralized Key-Value Store: Provides a single location to manage environment-specific parameters (such as connection strings or operational flags).
- Dynamic Configuration: Allows applications to refresh settings dynamically without requiring a full redeployment or restart.
- Complementary Role: Can supply variables to CI/CD pipelines via export tasks, but does not execute the CI/CD pipeline itself.
This Answer Would Be Correct If
The organization required a central repository to manage feature flags and application configuration parameters across multiple environments independently of the application source code.
Azure Monitor
Azure Monitor
What Azure Monitor Is
Azure Monitor is a centralized monitoring and observability platform designed to collect, analyze, and act on telemetry data generated by Azure resources, applications, operating systems, and hybrid environments.
Why It Doesn't Meet the Requirement
- Observability Focus: Azure Monitor tracks resource performance, metrics, and application logs; it does not build, test, or execute deployment tasks for Infrastructure as Code files.
- Lacks CI/CD Functionality: It does not include automated build runners, deployment orchestration engines, or version control triggers.
Key Characteristics and Limitations
- Telemetry Ingestion: Gathers platform metrics, resource health logs, and diagnostic events.
- Alerting and Dashboards: Notifies administrators of operational anomalies and visualizes system health through workbooks and dashboards.
- Post-Deployment Operation: Operates primarily after infrastructure is provisioned to maintain ongoing health rather than executing the provisioning process itself.
This Answer Would Be Correct If
The team needed an Azure service to collect diagnostic telemetry, configure alerts on resource health, or monitor the operational performance of already-deployed cloud infrastructure.
Azure Container Registry
Azure Container Registry
What Azure Container Registry Is
Azure Container Registry (ACR) is a managed, private Docker registry service based on the open-source Docker Registry 2.0 specification. It stores, manages, and secures container images and related Open Container Initiative (OCI) artifacts.
Why It Doesn't Meet the Requirement
- Storage Boundary: ACR is a repository designed for storing container images and Helm charts, not an orchestration engine for executing CI/CD deployment pipelines.
- No IaC Pipeline Orchestration: While ACR can hold packaged artifacts, it does not validate declarative templates, manage pull request release approvals, or orchestrate multi-stage cloud infrastructure provisioning.
Key Characteristics and Limitations
- Artifact Repository: Houses container images for deployment targets such as Azure Kubernetes Service (AKS) and Azure Container Apps.
- Security and Geo-Replication: Supports image vulnerability scanning, role-based access control, and replication across multiple Azure regions.
- Target Asset Mismatch: Specialized for container images rather than managing the continuous lifecycle of general cloud infrastructure code.
This Answer Would Be Correct If
The scenario required a private, secure repository in Azure to store, manage, and replicate OCI-compliant container images and Helm charts.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Bicep vs ARM Templates
Describe infrastructure as code (IaC)
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
ARM Templates Declarative IaC
Describe infrastructure as code (IaC)
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Policy Compliance Enforcement
Describe infrastructure as code (IaC)
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure TCO Calculator vs Pricing Calculator
Explore the pricing calculator
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Virtual Network Subnets
Describe virtual networking, including the purpose of Azure virtual networks, subnets, peering, Azure DNS, Azure VPN Gateway, and ExpressRoute
IntermediateAZ-400 Designing and Implementing Microsoft DevOps Solutions Exam
Managed Identity for Azure DevOps Service Connections
Implement and manage Azure DevOps service connections and personalaccess tokens
Last updated Validated