AZ-400 Question 198
Select 2You are a DevOps engineer at an organization that wants to provide on-demand self-deployment of ephemeral environments for every developer. These environments should be easily created for testing new features with minimal overhead and automatically cleaned up once no longer needed. Which two actions should you implement to meet these requirements using Azure Deployment Environments?
- A
- Store standardized environment templates (ARM/Bicep) in a source control repository and integrate them with Azure Deployment Environments.
- B
- Give each developer full subscription-level permissions to manually create and destroy their own environments via the Azure Portal.
- C
- Configure policies or automation to automatically decommission deployed environments after a designated period.
- D
- Adjust the default environment definition to always remain active, disabling automated cleanup tasks.
Show answer and explanation
Correct answers: A, C
Explanation
When designing and implementing Azure Deployment Environments for on-demand self-deployment, organizations should rely on Infrastructure as Code definitions stored in a source control system for consistency, use controlled role assignments to ensure security, and automate resource cleanup to control costs. Refer to Azure Deployment Environments documentation (https://learn.microsoft.com/azure/deployment-environments/) for best practices on creating reproducible, ephemeral environments that can be quickly provisioned and decommissioned.
- A. Correct.
Option 1 is correct. By storing your environment definitions (e.g., ARM or Bicep templates) in a version-controlled repository and referencing them in Azure Deployment Environments, you ensure consistency and repeatability. This aligns with best practices for Infrastructure as Code and allows developers to self-deploy a standardized environment on demand.
- B. Incorrect.
Option 2 is incorrect. Although giving full subscription-level permissions would allow developers to create resources, it violates the principle of least privilege and can introduce operational risk. Fine-grained role assignments and using Deployment Environments is more secure and manageable.
- C. Correct.
Option 3 is correct. Implementing automated cleanup helps manage cost and avoid lingering resources. Azure Deployment Environments supports policies or scripting (e.g., using Azure DevOps pipelines or Azure Functions) that automatically clean up resources after a certain time period.
- D. Incorrect.
Option 4 is incorrect. Keeping environments permanently active increases cost and resource sprawl. Automating the removal process is a key feature of ephemeral or on-demand environments, preventing resource waste.