Summer Sale - Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: dpt65

AZ-204 Questions and Answers

Question # 6

You need to secure the Azure Functions to meet the security requirements.

Which two actions should you perform? Each correct answer presents part of the solution

NOTE: Each correct selection is worth one point.

A.

Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled

B.

Store the RSA-HSM key in Azure Blob storage with an immutability policy applied to the container.

C.

Store the RSA-HSM key in Azure Cosmos DB. Apply the built-in policies for customer-managed Keys and allowed locations

D.

Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

E.

Create a free tier Azure App Configuration instance with a new Azure AD service principal.

Full Access
Question # 7

You need to provide internal staff access to the production site after a validation.

How should you complete the code segment? To answer, select the appropriate options in the answer area

NOTE: Each correct selection is worth one point.

Full Access
Question # 8

You need to correct the internal staff issue with webpages.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 9

You need to resolve the authentication errors for developers.

Which Service Bus security configuration should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 10

You need to ensure the security policies are met.

What code do you add at line CS07 of ConfigureSSE.ps1?

A.

–PermissionsToKeys create, encrypt, decrypt

B.

–PermissionsToCertificates create, encrypt, decrypt

C.

–PermissionsToCertificates wrapkey, unwrapkey, get

D.

–PermissionsToKeys wrapkey, unwrapkey, get

Full Access
Question # 11

You need to secure the corporate website to meet the security requirements.

What should you do?

A.

Create an App Service instance with a standard plan. Configure the custom domain with a TLS/SSL certificate.

B.

Create an Azure Application Gateway with a Web Application Firewall (WAF). Configure end-to-end TLS encryption and the WAF.

C.

Create an Azure Cache for Radis instance. Update the code to support the cache.

D.

Create an Azure Content Delivery Network profile and endpoint. Configure the endpoint.

Full Access
Question # 12

You need to configure App Service to support the corporate website migration.

Which configuration should you use? To answer, select the appropriate options in the answer area

NOTE: Each correct selection is worth one point.

Full Access
Question # 13

you need to reduce read latency for the retail store solution.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

Create a new composite index for the store location data queries in Azure Cosmos DB. Modify the queries to support parameterized SQL and update the Azure function app to call the new Queries.

B.

Configure Azure Cosmos DB consistency to strong consistency Increase the RUs for the container supporting store location data.

C.

Provision an Azure Cosmos OB dedicated gateway, update blob storage to use the new dedicated gateway endpoint.

D.

Configure Azure Cosmos DB consistency to session consistency. Cache session tokens in a new Azure Redis cache instance after every write. Update reads to use the session token stored in Azure Redis.

E.

Provision an Azure Cosmos DB dedicated gateway Update the Azure Function app connection string to use the new dedicated gateway endpoint.

Full Access
Question # 14

You need to secure the Azure Functions to meet the security requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Store the RSA-HSM key in Azure Cosmos DB. Apery the built-in policies for customer-managed keys and allowed locations.

B.

Create a free tier Azure App Configuration instance with a new Azure AD service principal.

C.

Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled.

D.

Store the RSA-HSM key in Azure Blob storage with an Immutability policy applied to the container.

E.

Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

Full Access
Question # 15

You need to implement farmer authentication.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Add the shared access signature (SAS) token to the app

B.

Create a shared access signature (SAS) token.

C.

Register the app in Microsoft Entra ID.

D.

Create a user flow.

E.

Add the app to the user flow.

Full Access
Question # 16

You need to correct the errors for farmers and distributors.

Which solution should you use? To answer, select the appropriate options in the answer area

NOTE: Each correct selection is worth one point.

Full Access
Question # 17

You need to implement event routing for retail store location data.

Which configuration should you use?

Full Access
Question # 18

You need to implement the delivery service telemetry data

How should you configure the solution?

NOTE: Each correct selection is worth one point.

Full Access
Question # 19

YOU need to reliably identify the delivery driver profile information.

How should you configure the system? To answer, select the appropriate options in the answer area.

NOTE Each correct selection is worth one point.

Full Access
Question # 20

You need to audit the retail store sales transactions.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

Update the retail store location data upload process to include blob index tags. Create an Azure Function to process the blob index tags and filter by store location

B.

Enable blob versioning for the storage account. Use an Azure Function to process a list of the blob versions per day.

C.

Process an Azure Storage blob inventory report by using an Azure Function. Create rule filters on the blob inventory report,

D.

Subscribe to blob storage events by using an Azure Function and Azure Event Grid. Filter the events by store location.

E.

Process the change feed logs of the Azure Blob storage account by using an Azure Function. Specify a time range for the change feed data.

Full Access
Question # 21

You need to add code at line PC26 of Processing.cs to ensure that security policies are met.

How should you complete the code that you will add at line PC26? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 22

You need to ensure receipt processing occurs correctly.

What should you do?

A.

Use blob properties to prevent concurrency problems

B.

Use blob SnapshotTime to prevent concurrency problems

C.

Use blob metadata to prevent concurrency problems

D.

Use blob leases to prevent concurrency problems

Full Access
Question # 23

You need to test the availability of the corporate website.

Which two test types can you use?

A.

Custom testing using the TrackAvailability API method

B.

Standard

C.

URL Ping

D.

Multi-step

Full Access
Question # 24

You need to Implement the retail store location Azure Function.

How should you configure the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 25

You need to retrieve all order line items from Order.json and sort the data alphabetically by the city.

How should you complete the code? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 26

You need to configure Azure Cosmos DB.

Which settings should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 27

You need to access data from the user claim object in the e-commerce web app.

What should you do first?

A.

Write custom code to make a Microsoft Graph API call from the e-commerce web app.

B.

Assign the Contributor RBAC role to the e-commerce web app by using the Resource Manager create role assignment API.

C.

Update the e-commerce web app to read the HTTP request header values.

D.

Using the Azure CLI, enable Cross-origin resource sharing (CORS) from the e-commerce checkout API to the e-commerce web app.

Full Access
Question # 28

You need to deploy a new version of the LabelMaker application to ACR.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 29

You need to configure the Account Kind, Replication, and Storage tier options for the corporate website’s Azure Storage account.

How should you complete the configuration? To answer, select the appropriate options in the dialog box in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 30

You need to authenticate the user to the corporate website as indicated by the architectural diagram.

Which two values should you use? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

ID token signature

B.

ID token claims

C.

HTTP response code

D.

Azure AD endpoint URI

E.

Azure AD tenant ID

Full Access
Question # 31

You need to configure API Management for authentication.

Which policy values should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 32

You need to implement the processing of enqueuer inventory items.

Which message value should you use?

A.

Session identifier

B.

Sequence number

C.

Partition key

D.

Time stamp

Full Access
Question # 33

You need to implement a function by using Azure Functions to process customized items.

How should you implement the function? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 34

You need to save customized items to Azure Cosmos DB.

Which Azure Cosmos DB configuration should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 35

You need to correct the Azure Logic app error message.

Which configuration values should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 36

You need to resolve the Shipping web site error.

How should you configre the Azure Table Storage service? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 37

You need to support the message processing for the ocean transport workflow.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 38

You need to secure the corporate website for users.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order

NOTE: More than one order of answer choices is correct You will receive credit for any of the correct orders you select.

Full Access
Question # 39

You need to securely access inventory items when developing the Inventory Items API.

What are three possible ways to achieve this goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

Create a custom Microsoft Entra role

Assign the custom role to the Azure Cosmos DB account Update the function app to use certificate-based authentication.

B.

Create a SQL role definition under the Azure Cosmos DB account.

Create a user-assigned managed identity and assign the identity to the function app.

Assign the user-assigned managed identity the SQL role definition.

Update the function app code to implement the DefaultAzurecredential class and reference the user-assigned managed identity.

C.

Create a system-assigned managed identity for the function app with read access to secrets in Azure Key Vault. Store the Azure Cosmos DB primary key and URI in Azure Key Vault as secrets.

Use function app settings to reference the secret values.

D.

Create a custom Microsoft Entra role. Assign the custom role to Azure Key Vault. Assign the custom role to the function app.

Reference the custom role in the function app code when accessing Azure Key Vault values.

E.

Create a SQL role definition under the Azure Cosmos DB account. Assign the role to the function app's system-assigned managed identity. Programmatically access the Azure Cosmos OB keys from the function app.

Full Access
Question # 40

You need to support local development testing for developers. Which tool should you use?

A.

Azurite

B.

Azure Storage Emulator

C.

SQL Server Management Studio (SSMS)

D.

Azure Storage Explorer

Full Access
Question # 41

You need to investigate the Azure Function app error message in the development environment.

What should you do?

A.

Connect Live Metrics Stream from Application Insights to the Azure Function app and filter the metrics.

B.

Create a new Azure Log Analytics workspace and instrument the Azure Function app with Application Insights.

C.

Update the Azure Function app with extension methods from Microsoft.Extensions.Logging to log events by using the log instance.

D.

Add a new diagnostic setting to the Azure Function app to send logs to Log Analytics.

Full Access
Question # 42

You need to serve static content from the corporate website.

What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

Store all static content in Azure Blob Storage. Enable Azure Content Delivery Network for the storage account.

B.

Configure App Service networking to create a Content Delivery Network profile and endpoint.

C.

Configure the Azure App Service Local Cache feature and set the app setting WEBSITE_LOCAL_CACHE_SIZEINMB value.

D.

Update the Azure Traffic Manager routing method to priority.

E.

Create a nested Azure Traffic Manager profile. Configure the parent profile to the performance traffic routing method and the chtld profile to the priority traffic routing method.

Full Access
Question # 43

You need to mitigate the Azure Cache for Redis issue.

What are two possible ways to achieve this goal? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Increase the maxmemory-reserved and maxfragmenTationmemory-reserved values

B.

Modify the maxmemory policy to evict the least frequently used keys out of all keys.

C.

Configure client connections to retry commands with exponential backoff.

D.

Test application code by purging the cache in the test environment.

E.

Test application code by rebooting all nodes in the test environment.

Full Access
Question # 44

You need to configure the ContentUploadService deployment.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Add the following markup to line CS23:

types: Private

B.

Add the following markup to line CS24:

osType: Windows

C.

Add the following markup to line CS24:

osType: Linux

D.

Add the following markup to line CS23:

types: Public

Full Access
Question # 45

You need to implement the bindings for the CheckUserContent function.

How should you complete the code segment? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 46

You need to ensure that PolicyLib requirements are met.

How should you complete the code segment? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 47

You need to add code at line EG15 in EventGridController.cs to ensure that the Log policy applies to all services.

How should you complete the code? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 48

You need to store inventory item images.

Which Azure Blob Storage feature should you use? To answer, move the appropriate Azure Blob Storage features to the correct requirements. You may use each Azure Blob Storage feature once, more than once, or not at all. You may need to move the split bar between panes or scroll to view content

NOTE: Each correct selection is worth one point.

Full Access
Question # 49

You need to configure Azure App Service to support the REST API requirements.

Which values should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 50

You need to migrate on-premises shipping data to Azure.

What should you use?

A.

Azure Migrate

B.

Azure Cosmos DB Data Migration tool (dt.exe)

C.

AzCopy

D.

Azure Database Migration service

Full Access
Question # 51

You need to update the APIs to resolve the testing error.

How should you complete the Azure CLI command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 52

You need to configure Azure CDN for the Shipping web site.

Which configuration options should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 53

You need to secure the Shipping Function app.

How should you configure the app? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 54

You need to support the requirements for the Shipping Logic App.

What should you use?

A.

Azure Active Directory Application Proxy

B.

Point-to-Site (P2S) VPN connection

C.

Site-to-Site (S2S) VPN connection

D.

On-premises Data Gateway

Full Access
Question # 55

You need to secure the Shipping Logic App.

What should you use?

A.

Azure App Service Environment (ASE)

B.

Azure AD B2B integration

C.

Integration Service Environment (ISE)

D.

VNet service endpoint

Full Access
Question # 56

You are developing a mobile instant messaging app for a company.

The mobile app must meet the following requirements:

• Support offline data sync.

• Update the latest messages during normal sync cycles.

You need to implement Offline Data Sync.

Which two actions should you perform? Each conn I answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Retrieve records from Offline Data Sync on every call to the PullAsync method.

B.

Retrieve records from Offline Data Sync using an Incremental Sync.

C.

Push records to Offline Data Sync using an Incremental Sync.

D.

Return the updatedAt column from the Mobile Service Backend and implement sorting by using the column.

E.

Return the updatedAt column from the Mobile Service Backend and implement sorting by the message id.

Full Access
Question # 57

You are maintaining an existing application that uses an Azure Blob GPv1 Premium storage account. Data older than three months is rarely used.

Data newer than three months must be available immediately. Data older than a year must be saved but does not need to be available immediately.

You need to configure the account to support a lifecycle management rule that moves blob data to archive storage for data not modified in the last year.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 58

You develop and deploy a web app to Azure App Service. The Azure App Service uses a Basic plan in a region.

Users report that the web app is responding must capture the complete call stack to help performance issues in code. Call stack data must be correlated across app instances. You must minimize cost and impact to users on the web app.

You need to capture the telemetry.

Which three actions should you perform? Each answer presents part Of the solution

NOTE: Each correct selection is worth point

A.

Enable Application Insights site extensions.

B.

Enable Profiler.

C.

Restart all apps in the App Service plan.

D.

Enable Snapshot debugger.

E.

Enable remote debugging.

F.

Enable the Always On setting for the app service.

G.

Upgrade the Azure App Service plan to Premium

Full Access
Question # 59

You are developing an ASP.NET Core app hosted in Azure App Service.

The app requires custom claims to be returned from Microsoft Entra ID for user authorization. The claims must be removed when the app registration is removed. You need to include the custom claims in the user access token. What should you do?

A.

Configure the app to use the OAuth 2.0 authorization code flow.

B.

Implement custom middleware to retrieve role information from Microsoft Entra ID.

C.

Add the groups to the groupMembershipClaims attribute in the app manifest.

D.

Require the https://graph.microsoft.eom/.default scope during authentication.

E.

Add the roles to the appRoles attribute in the app manifest.

Full Access
Question # 60

You need to monitor ContentUploadService accourding to the requirements.

Which command should you use?

A.

az monitor metrics alert create –n alert –g … - -scopes … - -condition "avg

Percentage CPU > 8"

B.

az monitor metrics alert create –n alert –g … - -scopes … - -condition "avg

Percentage CPU > 800"

C.

az monitor metrics alert create –n alert –g … - -scopes … - -condition "CPU

Usage > 800"

D.

az monitor metrics alert create –n alert –g … - -scopes … - -condition "CPU

Usage > 8"

Full Access
Question # 61

You need to add markup at line AM04 to implement the ContentReview role.

How should you complete the markup? To answer, drag the appropriate json segments to the correct locations. Each json segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 62

You need to investigate the http server log output to resolve the issue with the ContentUploadService.

Which command should you use first?

A.

az webapp log

B.

az ams live-output

C.

az monitor activity-log

D.

az container attach

Full Access
Question # 63

You need to ensure that network security policies are met.

How should you configure network security? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 64

You need to store the user agreements.

Where should you store the agreement after it is completed?

A.

Azure Storage queue

B.

Azure Event Hub

C.

Azure Service Bus topic

D.

Azure Event Grid topic

Full Access
Question # 65

You need to add code at line AM10 of the application manifest to ensure that the requirement for manually reviewing content can be met.

How should you complete the code? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 66

You need to deploy the CheckUserContent Azure function. The solution must meet the security and cost requirements.

Which hosting model should you use?

A.

Consumption plan

B.

Premium plan

C.

App Service plan

Full Access
Question # 67

You need to add YAML markup at line CS17 to ensure that the ContentUploadService can access Azure Storage access keys.

How should you complete the YAML markup? To answer, drag the appropriate YAML segments to the correct locations. Each YAML segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 68

You need to ensure that validation testing is triggered per the requirements.

How should you complete the code segment? To answer, select the appropriate values in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 69

You need to add code at line AM09 to ensure that users can review content using ContentAnalysisService.

How should you complete the code? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access