nerdexam
Microsoft

AZ-500 · Question #637

Drag and Drop Question You have an Azure subscription. You have the standards shown in the following table. You plan to use Azure Pipelines to build and release web apps. You need to recommend a…

The correct answer is An extends template; An includes template. An 'extends template' is the correct choice for Standard1 because it enforces security requirements by requiring all new pipelines to extend from a base template, preventing pipelines from running unless they comply with the defined structure - this is a security enforcement…

Submitted by anna_se· Mar 6, 2026Design and Implement Pipelines - specifically using Azure Pipelines templates (extends and includes) to enforce organizational standards and security requirements across CI/CD pipelines

Question

Drag and Drop Question You have an Azure subscription. You have the standards shown in the following table. You plan to use Azure Pipelines to build and release web apps. You need to recommend a solution to build the pipelines. The solution must meet the following requirements: - Ensure that all new pipelines meet the security requirements defined in Standard1. - Ensure that the first stage of all new pipelines contains the software prerequisites defined in Standard2. - Minimize administrative effort. What should you use to implement each standard? To answer, drag the appropriate options to the correct standards. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Exhibit

AZ-500 question #637 exhibit

Answer Area

Drag items

A pipeline permissionA self-hosted agentA stageAn extends templateAn includes template

Correct arrangement

  • An extends template
  • An includes template

Explanation

An 'extends template' is the correct choice for Standard1 because it enforces security requirements by requiring all new pipelines to extend from a base template, preventing pipelines from running unless they comply with the defined structure - this is a security enforcement mechanism in Azure Pipelines. An 'includes template' (steps/stage template referenced via 'template:' include) is correct for Standard2 because it allows you to define reusable software prerequisite steps that are inserted into the first stage of new pipelines, minimizing duplication and administrative effort without mandating the entire pipeline structure.

Topics

#Azure Pipelines#Pipeline Templates#Extends Templates#DevSecOps

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice