Microsoft DevOps Engineer Expert AZ-400 Practice Question
Your company builds multiple JavaScript microservices in Azure DevOps. Security policy requires that any third-party npm package be stored in an internal repository so that future removals from the public registry do not break builds. In addition, only versions explicitly approved by release engineering may be consumed by production pipelines while development teams should be able to test newer versions quickly. Which approach meets these requirements with minimal administrative effort?
Publish internal packages to a GitHub Packages npm registry for each project and let package.json reference npmjs.org directly for open-source dependencies.
Add a service connection to npmjs.org and lock all package.json dependencies to specific build numbers to prevent unintended changes.
Mirror the entire npmjs.org registry to an Azure Blob Storage static website and configure it as a private npm registry for all pipelines.
Create a single Azure Artifacts npm feed, add npmjs.org as an upstream source, and use feed views to promote packages through Development and Production stages.
An Azure Artifacts npm feed can be configured with an upstream source that transparently caches any package downloaded from npmjs.org, ensuring future builds are not affected if the package is later removed from the public registry. Within the same feed you can create views (for example, Development, Test, and Production) and promote specific package versions between those views after they pass validation. Development pipelines resolve packages from a less-restricted view, while production pipelines are scoped to the Production view, satisfying the approval gate. GitHub Packages, direct registry references, or a custom mirror either fail to cache automatically, lack built-in promotion workflows, or introduce unnecessary management overhead.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is an Azure Artifacts npm feed?
Open an interactive chat with Bash
What are upstream sources in Azure Artifacts?
Open an interactive chat with Bash
What are feed views in Azure Artifacts and how do they work?
Open an interactive chat with Bash
Microsoft DevOps Engineer Expert AZ-400
Design and implement build and release pipelines
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .