Azure DevOps Engineer (AZ-400) trap evaluation

Configuration at the wrong stage or scope

AZ-400 trap questions present scenarios where the correct tool is not in question; the failure is in where or how it is configured. Security scanning placed after the build stage rather than before artifact promotion, approval gates scoped to the wrong environment, or feature flags implemented where canary deployment is the appropriate mechanism are the kinds of errors the exam tests. A separate consistent failure is over-engineering: designing custom pipeline scripting when Azure DevOps built-in tasks or GitHub Actions reusable workflows handle the pattern directly. The exam tests professional judgment about where to apply governance controls in the pipeline, not just recognition of available features.