Microsoft DevOps Engineer Expert AZ-400 Practice Question
Your company uses Azure DevOps Services. Compliance rules require that build agents run inside the company's Azure virtual network and reach the internet only through an existing outbound-only NAT gateway. The .NET 7 build pipeline must:
Restore packages from an internal NuGet feed that is accessible only from the virtual network.
Build Docker images with Docker-in-Docker support.
Minimize ongoing maintenance effort and additional licensing cost.
Which agent infrastructure should you recommend?
Use Microsoft-hosted ubuntu-latest agents and publish the internal NuGet feed to the internet through a NAT rule.
Create a self-hosted Linux agent pool backed by an Azure virtual machine scale set inside the VNet and enable the Azure DevOps VMSS agent extension for automatic scaling.
Migrate the pipeline to GitHub Actions and use GitHub-hosted Linux runners with VNet integration.
Configure an ephemeral self-hosted agent that runs as an Azure Container Instance with VNet integration and start a new container for every pipeline job.
A virtual machine scale set (VMSS) self-hosted agent pool can be placed inside the company VNet, so the agents can reach the private NuGet feed without exposing it publicly while still using the corporate NAT for outbound traffic. Azure DevOps provides a VMSS agent extension that automatically installs and manages the agent on each VM instance and can scale the pool elastically, which keeps operational effort low. Using Ubuntu images avoids additional licensing costs, and Docker-in-Docker is fully supported.
Microsoft-hosted agents cannot be brought into the VNet, so they cannot access the private feed. Migrating the pipeline to GitHub Actions is a significant undertaking that is not required to solve the connectivity problem and moves away from the company's established Azure DevOps platform. Running each job in Azure Container Instances would demand custom orchestration because ACI is not a natively supported backing service for an Azure DevOps agent pool and would therefore increase management overhead.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the Azure DevOps VMSS agent extension?
Open an interactive chat with Bash
How does Docker-in-Docker work in Azure DevOps build pipelines?
Open an interactive chat with Bash
Why is a self-hosted agent pool inside a VNet better for compliance requirements?
Open an interactive chat with Bash
Microsoft DevOps Engineer Expert AZ-400
Design and implement build and release pipelines
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .