nerdexam
Microsoft

AZ-400 · Question #405

You have an Azure subscription named Subscription1 that contains a custom Azure policy named Policy1. Policy1 is an audit policy that monitors naming convention compliance for the resources deployed t

The correct answer is A. a pre-deployment task that runs a security and compliance assessment. Check policy compliance with gates. 1. Create an Azure Policy in the Azure portal. There are several predefined sample policies that can be applied to a management group, subscription, and resource group. 2. In Azure DevOps create a release pipeline that contains at least one sta

Submitted by cyberguy42· Mar 6, 2026Develop a security and compliance plan

Question

You have an Azure subscription named Subscription1 that contains a custom Azure policy named Policy1. Policy1 is an audit policy that monitors naming convention compliance for the resources deployed to Subscription1. You have a pipeline named Pipeline1 in Azure Pipelines. Pipeline1 deploys Azure Resource Manager (ARM) resources to Subscription1. You need to ensure that the resources deployed by Pipeline1 comply with Policy1. What should you add to Pipeline1?

Exhibit

AZ-400 question #405 exhibit

Options

  • Aa pre-deployment task that runs a security and compliance assessment
  • Ba post-deployment task that runs a security and compliance assessment
  • Can ARM template deployment task to assign Policy1 to Subscription1
  • Dan ARM template deployment task to deploy Policy1 to Subscription1

How the community answered

(21 responses)
  • A
    81% (17)
  • B
    5% (1)
  • C
    5% (1)
  • D
    10% (2)

Explanation

Check policy compliance with gates. 1. Create an Azure Policy in the Azure portal. There are several predefined sample policies that can be applied to a management group, subscription, and resource group. 2. In Azure DevOps create a release pipeline that contains at least one stage, or open an existing release pipeline. 3. Add a pre- or post-deployment condition that includes the Security and compliance assessment task as a gate. https://docs.microsoft.com/en-us/azure/devops/pipelines/policies/azure-policy

Community Discussion

No community discussion yet for this question.

Full AZ-400 Practice