AZ-401 Practice Test
Designing and Implementing Microsoft Agentic DevOps Solutions (beta)
AZ-401 tests whether you can actually design and run a DevOps toolchain end to end β Azure Boards traceability, pipeline testing and release gates, secretless authentication, and Azure Monitor and Log Analytics instrumentation β not just recognize the tool names.
Our 500 scenario-based questions cover the full AZ-401 blueprint across five domains: designing and implementing build and release pipelines (the largest domain at 35-40%, covering package management with Azure Artifacts and GitHub Packages, dependency and artifact versioning, testing strategies for Azure Pipelines and GitHub Actions, and quality and release gates, including with GitHub Copilot and MCP servers), designing and implementing processes and communications (15-20%, covering the flow of work, Azure Boards tracking, traceability between repositories, bugs and quality, feedback cycles and notifications, and translating business KPIs into success metrics), designing and implementing a security and compliance plan (15-20%, covering service principals versus managed identities, GitHub Apps, GITHUB_TOKEN and personal access tokens, secretless authentication, and Azure DevOps service connections), implementing an instrumentation strategy (15-20%, covering flow-of-work, cycle time and lead time dashboards, Azure Monitor and Log Analytics integration, alerts for Azure Pipelines and GitHub Actions, and monitoring Azure workloads with AI agents), and designing and implementing a source control strategy (10-15%). Questions blend single-answer, multi-select, and true/false formats and are written at the practitioner-judgment level the real exam expects.
Start Free Practice β 40 QuestionsNo credit card required. Upgrade to full 500 questions for $19.99 when ready.
Is this for you?
This is NOT for you if:
AZ-401 Exam Details
What to expect on exam day
Questions
40
Duration
100 minutes
Passing Score
700
Exam Cost
$165
Exam Domains Covered
Master all topics tested on the AZ-401 exam
Design and implement processes and communications
Design and implement a source control strategy
Design and implement build and release pipelines
Design and implement a security and compliance plan
Implement an instrumentation strategy
Test Yourself Right Now
Try 5 real practice questions β no signup needed
5 Free AZ-401 Questions
See how ready you are for the AZ-401 exam. Each question includes a detailed explanation so you learn as you go.
Sample AZ-401 Practice Questions
10 real questions from the free AZ-401bank. Pick an answer in your head, then open βShow answerβ for the explanation.
1. Your company keeps source code in GitHub and builds with Azure Pipelines YAML pipelines in an Azure DevOps project that also hosts Azure Boards. The Azure Boards GitHub integration is connected, and developers already use AB# mentions in pull request descriptions. Release managers must be able to open a work item and see which build contains its change, the links must appear without developers adding them by hand, and the team does not want to build or maintain a custom service for this. Which action should you take?
- A. Turn on commit mention linking in the Azure Repos settings so that commits referencing AB# also link the build that contains those commits to the work item
- B. Enable Automatically link new work items in this build in the YAML pipeline settings so Azure Boards adds an Integrated in build link to associated work items
- C. Add the AB# work item number to the pipeline run name template so that each build title references the work items that the build contains for the release managers
- D. Create a service hook subscription on the Build completed event that calls a custom Azure Function to write a build link onto each associated work item
Show answer
Correct answer: B
Enabling Automatically link new work items in this build in the YAML pipeline settings makes Azure Boards add an Integrated in build link in the Development section of each associated work item when the build finishes, and this works for repositories hosted in GitHub. Commit mention linking is an Azure Repos setting that links commits, not builds, and the repository here is in GitHub. An AB# mention creates links from commit messages, pull request descriptions, and issue descriptions, not from a run name. A service hook with a custom function would create the link only by code the team must build and maintain, which breaks the stated constraint.
2. A project has 40 contributors, and the Payments team wants its own team-level notification subscriptions managed without involving a member of the Project Administrators group. Who can manage those team subscriptions?
- A. Any member of the Contributors group for the project and its teams
- B. A team administrator for the Payments team with team-level rights
- C. A user who has Stakeholder access in the organization and project
- D. A member of the Readers group for the project and its teams
Show answer
Correct answer: B
Team notifications can be managed by a team administrator, a Project Administrator, or a Project Collection Administrator. Contributors, Stakeholders, and Readers can manage their own personal notifications but not team subscriptions.
3. A manager wants a scatter-plot chart with a moving average and a standard deviation band that shows how long completed work took after the team started it. Which widget should they add to the dashboard?
- A. The Cycle Time widget, which plots each completed item as a dot
- B. The Velocity widget, which shows completed work per sprint
- C. The Sprint Burndown widget, which shows remaining work in a sprint
- D. The Cumulative Flow Diagram widget, which shows state distribution
Show answer
Correct answer: A
The Cycle Time widget plots completed work items as dots on a scatter chart with a moving average line and a standard deviation band. Velocity, sprint burndown, and the cumulative flow diagram present throughput, remaining work, and state distribution rather than per-item elapsed time.
4. A regulated company needs formal change management with an auditable record of decisions. It wants requirements, change requests, risks, and reviews tracked as work item types in the same Azure Boards project. Which default process should the project use?
- A. Basic, which tracks work with epics, issues, and tasks in a lightweight set for small teams
- B. Agile, which centers the team backlog on user stories, tasks, and bugs for iterative teams
- C. Scrum, which centers the team backlog on product backlog items and bugs for sprint teams
- D. CMMI, which adds Requirement, Change Request, Risk, and Review work item types for formal governance
Show answer
Correct answer: D
CMMI adds Requirement, Change Request, Risk, and Review work item types and supports formal change management and an auditable record of decisions. Basic offers epics, issues, and tasks, Agile centers on user stories, and Scrum centers on product backlog items and bugs, so none of them provide the change request and risk tracking.
5. An analyst uses an AI assistant connected to the Azure DevOps MCP Server to draft a query for Power BI that counts work items by state and work item type. The project has about 400,000 work items, and the grouping must be done on the server before data reaches Power BI so the refresh stays within the dataset size limit. Which query approach should the assistant produce?
- A. A WIQL query that returns the full work item list so Power BI counts the rows after import
- B. A Kusto Query Language summarize statement run against a Log Analytics workspace
- C. An Analytics OData query that uses $apply with groupby and aggregate on the server
- D. A flat list managed query exported to a CSV file that Power BI imports on a schedule
Show answer
Correct answer: C
The Analytics service exposes work tracking data through OData, and $apply with groupby and aggregate performs server-side aggregation so Power BI receives fewer rows. WIQL returns work item lists rather than aggregates, KQL targets Log Analytics data rather than Azure Boards work items, and a CSV export is a static copy.
Show 5 more questions
6. A developer pushes a commit to an Azure Repos Git repository and wants it linked to work item 476 and the work item completed when the commit reaches the default branch. Commit mention linking and commit mention work item resolution are both enabled for the repository, and the repository is not connected to GitHub. The team's convention is to put the reference in the commit message rather than rely on branch names. What should the commit message include?
- A. The text AB#476, because that syntax is how Azure Repos links commits and resolves work items
- B. A keyword such as Fixes followed by #476, which links the commit and completes the work item on reaching the default branch
- C. The number 476 in square brackets at the start of the subject line, which the repository parses as an ID
- D. The number 476 at the end of the branch name that the commit is pushed to, which the repository reads
Show answer
Correct answer: B
With commit mention work item resolution on, a keyword such as fix, fixes, or fixed followed by #WorkItemID links the commit and completes the work item when it reaches the default branch. The AB# syntax is used for GitHub repositories connected to Azure Boards, and bracketed numbers or branch names do not create links on their own.
7. A retail company runs production workloads in Azure and uses Azure Monitor alerts to page the on-call team. The company wants Azure SRE Agent to respond to incidents by correlating each alert with recent deployments from its GitHub repositories and proposing a mitigation. Production change control requires that a human administrator approve any Azure infrastructure change before it runs, and the team does not want the agent to wait for an engineer to read an email before it starts investigating. Which configuration meets the requirements?
- A. Connect the GitHub repositories to the agent and use Autonomous mode so that proposed mitigations run immediately and an administrator reviews the results afterward
- B. Leave the repositories unconnected and send the Azure Monitor alerts to the on-call mailbox so that an engineer correlates deployments manually before approving a change
- C. Connect the repositories and add a pipeline release gate that queries Azure Monitor alerts so that the correlation happens before a deployment starts to run
- D. Connect the GitHub repositories for deployment correlation and use Review mode so that an administrator approves or denies the proposed infrastructure operations
Show answer
Correct answer: D
Connecting source repositories lets Azure SRE Agent correlate incidents with deployment events, and Review mode makes the agent propose Azure infrastructure operations that an SRE Agent administrator approves or denies, which satisfies the change-control requirement. Autonomous mode runs the action without waiting, so approval happens after the change instead of before it. Leaving the repositories unconnected removes the deployment correlation and reintroduces the manual email step. A release gate checks health before a deployment, but it does not investigate incidents or propose mitigations in the operate phase.
8. A developer creates a Web Hooks service hook for the build completed event and enters https://localhost:5001/hooks/build to test a service running on a laptop. The test fails. Company policy requires HTTPS for every webhook receiver, and the developer wants to keep the service running on the laptop while testing. What should the developer do?
- A. Switch the URL to HTTP, because the consumer rejects TLS connections to loopback addresses such as localhost on a laptop
- B. Expose the service through a publicly reachable HTTPS address, because Web Hooks cannot target localhost or loopback addresses
- C. Grant the project's build service identity Contribute permission on the repository that holds the receiving service for the webhook
- D. Set the resource version of the subscription to the latest released version and run the test again to refresh the endpoint
Show answer
Correct answer: B
Web Hooks service hook subscriptions cannot target localhost or special-range loopback addresses, so the receiving service needs an address that Azure DevOps can reach, and HTTPS keeps the company policy intact. Changing to HTTP does not lift the restriction and breaks the policy, repository permissions for the build identity are unrelated, and the resource version only controls the payload shape.
9. A team that uses the Agile process wants to plan the next sprint's commitment from what it completed in its last six sprints, measured in story points, and to see whether the work delivered matches the plan in each sprint. The team uses Azure Boards Analytics widgets on a team dashboard, and the lead wants one built-in widget rather than a custom report. Which widget fits best?
- A. The Lead Time widget configured for the user story backlog level over the last six sprints
- B. The Velocity widget configured with the Story Points field and the last six sprints
- C. The Cumulative Flow Diagram widget configured for the team's board over the last 90 days
- D. The Cycle Time widget configured with a rolling period of 30 days for user stories
Show answer
Correct answer: B
The Velocity widget shows how much work a team completes in a sprint by story points, work item count, or a custom field, and it compares delivered work with the plan, which supports capacity planning. Lead time and cycle time widgets measure elapsed time per item, and the cumulative flow diagram shows work distribution across board columns.
10. Executives want a KPI that shows how long customers wait between requesting a feature and receiving it. Separately, the engineering lead wants to find process bottlenecks after developers start work and wants that measure to exclude time spent waiting in the backlog. The team uses Azure Boards with an Active state mapped to the In Progress category, and both measures must come from built-in Analytics widgets. Which pairing of metrics should the team track?
- A. Cycle time for the executive KPI and lead time for the bottleneck analysis
- B. Velocity for the executive KPI and sprint burndown for the bottleneck analysis
- C. Work in progress for the executive KPI and scope for the bottleneck analysis
- D. Lead time for the executive KPI and cycle time for the bottleneck analysis
Show answer
Correct answer: D
Lead time runs from work item creation to completion, so it reflects the wait a customer experiences from request to delivery. Cycle time starts when work enters an In Progress state, so it isolates process efficiency after work begins and excludes backlog waiting. The reversed pairing mismatches the definitions, velocity and burndown describe sprint throughput and remaining work, and WIP and scope are flow inputs rather than customer wait measures.
Why Practice with MSCertQuiz?
Microsoft Learn teaches concepts. We prepare you for the actual exam.
Weighted to match the blueprint: the build and release pipelines domain (35-40%) carries the largest share of the 500 questions, so your practice time follows where the exam points are
Scenario questions that mix Azure DevOps and GitHub the way real teams do β Azure Boards and GitHub integration behavior, AB# linking keywords, service hooks, and branch and pipeline policy choices
Distractors built from realistic misconceptions, plus multi-select and true/false items, so you practice choosing the single best design rather than recognizing keywords
Every question is checked against live Microsoft Learn and GitHub documentation and carries a reference link, so you can read the source behind any answer you miss, and we keep it current as this beta exam evolves
Not sure if you're ready for the AZ-401 exam?
Take the free AZ-401 Readiness Check βChoose Your Plan
Start free, upgrade when you're ready to get serious
Free
Good for exploring the platform
- 40 practice questions
- Practice mode only
- Progress tracking
- No exam simulation mode
AZ-401 Full Access
Best if your exam is in the next 2-4 weeks
- 500 practice questions
- Practice & Exam modes
- Detailed explanations
- Lifetime access
7-day money-back guarantee
Pro β All Certs
Best if you're planning multiple Microsoft exams
- ALL certifications included
- Unlimited questions
- New certs added free
- Cancel anytime
Save 30% vs buying individually
Your AZ-401Exam Won't Wait
Candidates who complete at least 2 full mock exams pass at significantly higher rates than those who only study passively.
Don't risk $165 on the real exam without testing yourself first.
Start Free Practice NowNo credit card required β’ 40 free questions β’ Upgrade for $19.99 when ready
Official Microsoft Resources
Our practice questions are aligned with official Microsoft exam objectives. We recommend studying with Microsoft Learn first, then using MSCertQuiz to test your readiness.
View Official AZ-401 Exam DetailsAZ-401 Frequently Asked Questions
Everything you need to know about the AZ-401 Agentic DevOps certification
What is AZ-401?
How much does the AZ-401 exam cost and how long is it?
Is AZ-401 a beta exam, and what does that mean for candidates?
What is the passing score for AZ-401?
What topics are covered on AZ-401?
How hard is AZ-401?
How long should I study for AZ-401?
What are the prerequisites for AZ-401?
Who should take AZ-401?
AZ-401 Study Resources
Free guides to use alongside the practice questions.
Also Preparing For
Candidates studying AZ-401 often prepare for these certifications next.