AZ-400 study notes
- Processes and communications AZ-400 notes on flow of work and GitHub Flow, feedback cycles, Azure Boards and GitHub Projects integration, traceability, DevOps metrics and dashboards, wikis with Markdown and Mermaid, release notes, webhooks and Teams integration. 10–15%
- Source control strategy AZ-400 notes on branching strategies, pull request workflow, branch policies and branch protection rules and rulesets, merge restrictions, Git LFS, Scalar and large repositories, repository permissions, tags, recovering data with reflog, and removing sensitive data from history. 10–15%
- Build and release pipelines AZ-400 notes on package management with Azure Artifacts and GitHub Packages, SemVer and CalVer, testing strategy and gates, GitHub Actions vs Azure Pipelines, agents and runners, YAML pipelines, templates, environments and approvals, deployment strategies, feature flags, infrastructure as code, Azure Deployment Environments and pipeline maintenance. 50–55%
- Security and compliance plan AZ-400 notes on service principals and managed identities, GitHub authentication (GitHub Apps, GITHUB_TOKEN, PATs), Azure DevOps service connections and permissions, Key Vault, workload identity federation and OIDC, secure files, secret leakage, GitHub Advanced Security, Defender for Cloud DevOps security, container scanning, CodeQL and Dependabot. 10–15%
- Instrumentation strategy AZ-400 notes on Azure Monitor and Log Analytics, Application Insights, VM insights, Container insights, storage and network monitoring, alerts and action groups, GitHub insights and Actions alerts, performance metrics, distributed tracing and basic KQL. 5–10%