See solution below.
Explanation:
To enable streaming of diagnostic telemetry for a single or a pooled database, follow these steps:
1. Go to Azure SQL database resource.
2. Select Diagnostics settings.
3.Select Turn on diagnostics if no previous settings exist, or select Edit setting to edit a previous setting. You can create up to three parallel connections to stream diagnostic telemetry.
4. Select Add diagnostic setting to configure parallel streaming ofdiagnostics data to multiple resources.

5. Enter a setting name for your own reference.
6. Select a destination resource for the streaming diagnostics data: Archive to storage account, Stream to an event hub, or Send to Log Analytics.
7. For the standard, event-based monitoring experience, select the following check boxes for database diagnostics log telemetry: QueryStoreRuntimeStatistics

8. For an advanced, one-minute-based monitoring experience, select the check box for Basic metrics.
9. SelectSave.
Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/metrics-diagnostic-telemetry-logging-streaming- export-configure

See the solution below in explanation.
Explanation:
To prepare a Network Security Group (NSG) namedaz400-38443478-nsg1for hosting an Azure DevOps pipeline agent, while allowing only the required outbound port for Azure DevOps and denying all other inbound and outbound access to the Internet, follow these steps:
Create the NSG:
Navigate to the Azure Portal.
Go toNetwork Security Groupsand click on+ Create.
Fill in the details, including the nameaz400-38443478-nsg1, and create the NSG.
ConfigureOutbound Security Rules:
Once the NSG is created, go to its settings.
Navigate toOutbound security rules.
Click on+ Addto create a new rule.
Set theDestination port rangesto443, which is the required port for Azure DevOps12.
Set theProtocoltoTCP.
Set theActiontoAllow.
Assign aPrioritynumber (e.g.,100) that does not conflict with existing rules.
Provide a meaningfulNamefor the rule (e.g.,AllowAzureDevOps).
Configure Default Rules to Deny All Other Traffic:
In the sameOutbound security rulessection, edit the default rule to deny alltraffic.
Change theActiontoDenyfor the rule with the lowest priority (highest number).
Ensure that this rule applies to all protocols, source and destination IP ranges, and port ranges.
Associate the NSG with the Appropriate Resource:
Associate the NSGwith the subnet or network interface of the virtual machine or resource where the Azure DevOps pipeline agent will be hosted.
By following these steps, you will ensure that the Azure DevOps pipeline agent can communicate with Azure DevOps services over the required port while blocking all other inbound and outbound Internet access, adhering to the principle of least privilege and security best practices.

Explanation:

Deployment 1: Kubernetes.io/azure-file
You can use Azure Files to connect using the Server Message Block (SMB) protocol.
Deployment 2: Kubernetes.io/azure-disk
Deployment 3: azurekeyvault-flexvolume
azurekeyvault-flexvolume: Key Vault FlexVolume: Seamlessly integrate your key management systems with Kubernetes.
Secrets, keys, and certificates in a key management system become a volume accessible to pods. Once the volume is mounted, its data is available directly in the container filesystem for your application.
References:
htt ps://docs.mic rosoft.com/bs-cyrl-ba/azure/aks/azure-files-dynamic-pv
https://docs.microsoft.com/en-us/azure/aks/azure-disks-dynamic-pv