A. Correct.
--no-verify bypasses pre-commit and commit-msg hooks for the commit.

B. Incorrect.
--squash prepares a squashed commit during merge workflows and does not bypass hooks.

C. Incorrect.
--amend-only is not the standard Git option for bypassing hooks.

D. Incorrect.
--no-post-rewrite affects post-rewrite hook behavior and does not bypass commit-msg validation.

A. Incorrect.
Main-only can be useful for trunk-based workflows, but it does not meet the stated isolation requirement by itself.

B. Incorrect.
Long-lived customer branches make merging expensive and can increase defects.

C. Correct.
Feature isolation uses feature branches to develop and validate new work independently.

D. Incorrect.
Manual ZIP copies are not a controlled branching strategy.

A. Incorrect.
A variable alone does not query active quality conditions before deployment.

B. Correct.
Deployment gates can query external quality signals and block promotion.

C. Incorrect.
A scheduled trigger starts a run and does not enforce release quality.

D. Incorrect.
Retention policies keep releases and do not block stages based on bugs.

A. Incorrect.
Branch policies protect source changes and do not control release retention.

B. Incorrect.
Azure Boards tracks work and does not retain releases.

C. Incorrect.
Agent pools execute jobs and do not set release retention.

D. Correct.
Stage-specific retention can keep production releases longer than defaults.

A. Incorrect.
DNS MX records route email and are unrelated to build agents.

B. Correct.
Unattended agent setup needs values such as organization URL, credentials, and target pool or deployment group details.

C. Incorrect.
Blob tiers do not configure an agent.

D. Incorrect.
WAF rules protect web traffic and do not register pipeline agents.

A. Incorrect.
Owner for everyone violates least privilege.

B. Incorrect.
Anonymous access would weaken package governance.

C. Correct.
Azure Artifacts feed roles separate package consumption from feed administration.

D. Incorrect.
A delete lock does not manage package feed permissions.

A. Incorrect.
DNS does not collect mobile crashes.

B. Incorrect.
Firewall filters network traffic and does not report app crashes.

C. Incorrect.
Azure Files provides SMB/NFS file shares and does not collect mobile diagnostics.

D. Correct.
App Center diagnostics centralizes crash and device telemetry for mobile apps.

A. Correct.
Automation State Configuration uses DSC to apply and check configuration over time.

B. Incorrect.
Traffic Manager routes DNS requests.

C. Incorrect.
Blob archive stores data cheaply and does not configure servers.

D. Incorrect.
Private Resolver forwards DNS queries and does not enforce OS state.

A. Incorrect.
Disabling logging removes the signals needed for proactive detection.

B. Correct.
Monitoring, alerts, and telemetry surface issues before customer reports.

C. Incorrect.
Manual screenshots are not reliable operational monitoring.

D. Incorrect.
Branch strategy does not detect runtime failures.

A. Incorrect.
A README is not secure secret storage.

B. Incorrect.
Unprotected public variables can leak secrets.

C. Correct.
Secure variables or Key Vault integration protects sensitive pipeline values.

D. Incorrect.
Commit messages are stored in repository history and are not secret stores.