Microsoft DevOps Engineer Expert AZ-400 Practice Question
Your organization hosts its source code in GitHub Enterprise Cloud and uses Azure DevOps Services to run all build and release pipelines. You are asked to create a new multi-stage YAML pipeline stored in the repository and to configure the integration so that:
Azure Pipelines can publish commit statuses and required checks on every pull request.
No long-lived personal access tokens (PATs) are stored in the Azure DevOps project or in the repository.
After creating the pipeline in Azure DevOps, which action must you take in GitHub to satisfy these requirements?
Add an organization-level webhook that targets the Azure DevOps hooks endpoint.
Install the Azure Pipelines GitHub App in the organization and grant it access to the repository.
Enable Dependabot security updates for the repository.
Create a GitHub personal access token scoped to repo:status and store it as a secret variable in the pipeline.
The most secure way for Azure Pipelines to interact with a GitHub repository is through the official Azure Pipelines GitHub App. Installing the app at the organization or repository level creates an OAuth-based trust that allows Azure Pipelines to fetch sources, create webhooks automatically, and publish status checks and commit statuses without storing a PAT inside Azure DevOps. A PAT (even if scoped to repo:status) would violate the stated policy, while webhooks alone cannot authenticate Azure Pipelines to post status checks. Enabling Dependabot is unrelated to build status integration, so the only action that meets both requirements is installing the Azure Pipelines GitHub App and granting it access to the repository.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the Azure Pipelines GitHub App?
Open an interactive chat with Bash
Why is using a PAT less secure compared to the Azure Pipelines GitHub App?
Open an interactive chat with Bash
How do webhooks differ from the Azure Pipelines GitHub App?
Open an interactive chat with Bash
Microsoft DevOps Engineer Expert AZ-400
Design and implement build and release pipelines
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .