Azure DevOps – Certification

 Configure processes and communications (10—15%)

Configure activity traceability and flow of work

• Plan and implement a structure for the flow of work and feedback cycles
• Identify appropriate metrics related to the flow of work, such as cycle time, time to recovery, and lead time
• Integrate pipeline with work item tracing tools Such as Azure DevOps and Github
• Implement Traceability policies decided by the development
• Integrate repository with Azure Boards

Configure Collaboration and Communication

• Communicate actionable information by using custom Dashboards in Azure DevOps
• Document a project by using tools such as wikis or process diagram
• Configure release documents including release notes and API documentation
• Automate the Creation of documents from Git history
• Configure notification using webhooks.

Design and implement source control (15—20%)

Design and Implement source control strategy

• Design and implement an authentication strategy
• Design a strategy for managing large files, including Git LFS and git fat
• Design a strategy for scaling and optimizing a Git repository including Scalar and cross repository sharing.
• Implement workflow hooks

Plan and Implement a branching strategy for the source code.

• Design a branching strategy, including a trunk-based feature branch and release branch.
• Design and implement a pull request workflow by using branch policies and branch protection.
• Implement branch merging restrictions by using branch policies and branch protection.

Configure and Manage Repositories.

•    Integrate GitHub repositories with Azure pipelines.
•    Configure permission in the source control repositories.
•    Configure tags to organize the source control repository
•    Recover data using Git commands
•    Purge data from source control.

Design and implement build and release pipelines (40—45%)

Design and implement pipeline automation.

• Integrate pipelines with external tools, including dependency scanning, security scanning, and code coverage.
• Design and implement quality and release gates, including security and governance.
• Design Integration of automated tests into the pipeline
• Design and implement a comprehensive testing strategy.
• Implement orchestration tools such as GitHub Actions and Azure Pipelines

Design and Implement a package management strategy

• Design a package management implementation that uses Azure Artifacts, Github Packages, Nuget, and npm.
• Design and implement Package feed, including upstream sources.
• Design and implement a dependency versioning strategy for code assets and package including semantic versioning and date based.
• Design and implement a versioning strategy for pipeline artifacts.

Design and Implement pipelines

• Select a deployment automation solution including GithubActions and Azure pipelines.
• Design and implement an agent infrastructure, including cost, tool selection, license connectivity, and maintainability.
• Develop and implement pipeline trigger rules.
• Develop a pipeline including classic and YAML.
• Design and implement a strategy for job execution order including parallelism and multistage.
• Develop complex pipeline scenarios using a containerization agent.
• Configure and manage self-hosted agents including VM templates containerization
• Create reusably pipeline elements, including YAML templates, task groups, variable, variable groups
• Design and implement checks and approvals by using YAML environments. 

Develop a security and compliance plan (10—15%)

Design and implement a strategy for managing sensitive information in automation

• Implement and manage service connections
• Implement and manage service access tokens.
• Implement and manage secret keys, and certificates by using Azure key Vault, GitHub secrets, and Azure pipeline secrets.
• Design and implement a strategy for managing sensitive files during deployment.
• Design pipelines to prevent leakage and sensitive data.

Automate security and compliance scanning

• Automate the analysis of source code by using Github code scanning, GitHub secret scanning, Pipeline-based scan, and SonarQube.
• Automate security scanning including container scanning and OWASP ZAP.
• Automate the analysis of licensing and vulnerability and versioning of open-source components by using WhiteSource and GitHub Dependency scanning.

Implement an instrumentation strategy (10—15%)

Configure Monitoring for DevOps environment.

• Configure and Integrate monitoring by using Azure Monitor and Applicaiton Insights.
• Manage access control for the monitoring platform.
• Configure alerts and pipeline events.

Analyze Metrics

Inspect distribution tracing by using application insights.

Inspect application performance indicators.

Inspect infrastructure performance indicators, including CPU memory disk and network.

Identify and monitor metrics for business value.

Analyze logs using basic Kusto Query Language (KQL)