March Sale - Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 70dumps

AZ-204 Questions and Answers

Question # 6

You need to retrieve the database connection string.

Which values should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 7

You need to configure the integration for Azure Service Bus and Azure Event Grid.

How should you complete the CLI statement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 8

You need to configure API Management for authentication.

Which policy values should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 9

You need to authenticate the user to the corporate website as indicated by the architectural diagram.

Which two values should you use? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

ID token signature

B.

ID token claims

C.

HTTP response code

D.

Azure AD endpoint URI

E.

Azure AD tenant ID

Full Access
Question # 10

You need to configure security and compliance for the corporate website files.

Which Azure Blob storage settings should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 11

You need to ensure that all messages from Azure Event Grid are processed.

What should you use?

A.

Azure Event Grid topic

B.

Azure Service Bus topic

C.

Azure Service Bus queue

D.

Azure Storage queue

E.

Azure Logic App custom connector

Full Access
Question # 12

You need to correct the Azure Logic app error message.

Which configuration values should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 13

You need to configure Azure Service Bus to Event Grid integration.

Which Azure Service Bus settings should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 14

You need to configure the Account Kind, Replication, and Storage tier options for the corporate website’s Azure Storage account.

How should you complete the configuration? To answer, select the appropriate options in the dialog box in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 15

You need to correct the corporate website error.

Which four actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 16

You need to deploy a new version of the LabelMaker application to ACR.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 17

You need to retrieve all order line items from Order.json and sort the data alphabetically by the city.

How should you complete the code? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 18

You need to configure Azure Cosmos DB.

Which settings should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 19

You need to access data from the user claim object in the e-commerce web app.

What should you do first?

A.

Write custom code to make a Microsoft Graph API call from the e-commerce web app.

B.

Assign the Contributor RBAC role to the e-commerce web app by using the Resource Manager create role assignment API.

C.

Update the e-commerce web app to read the HTTP request header values.

D.

Using the Azure CLI, enable Cross-origin resource sharing (CORS) from the e-commerce checkout API to the e-commerce web app.

Full Access
Question # 20

You need to implement telemetry for non-user actions.

How should you complete the Filter class? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 21

You need to implement the Log policy.

How should you complete the Azure Event Grid subscription? To answer, drag the appropriate JSON segments to the correct locations. Each JSON segment may be used once, more than once, or not at all. You may need to drag the split bar between panes to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 22

You need to implement the Log policy.

How should you complete the EnsureLogging method in EventGridController.cs? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 23

You need to implement the delivery service telemetry data

How should you configure the solution?

NOTE: Each correct selection is worth one point.

Full Access
Question # 24

You need to audit the retail store sales transactions.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

Update the retail store location data upload process to include blob index tags. Create an Azure Function to process the blob index tags and filter by store location

B.

Enable blob versioning for the storage account. Use an Azure Function to process a list of the blob versions per day.

C.

Process an Azure Storage blob inventory report by using an Azure Function. Create rule filters on the blob inventory report,

D.

Subscribe to blob storage events by using an Azure Function and Azure Event Grid. Filter the events by store location.

E.

Process the change feed logs of the Azure Blob storage account by using an Azure Function. Specify a time range for the change feed data.

Full Access
Question # 25

You need to Implement the retail store location Azure Function.

How should you configure the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 26

YOU need to reliably identify the delivery driver profile information.

How should you configure the system? To answer, select the appropriate options in the answer area.

NOTE Each correct selection is worth one point.

Full Access
Question # 27

You need to implement a solution to resolve the retail store location data issue.

Which three Azure Blob features should you enable? Each correct answer presents part of the solution.

NOTE Each correct selection is worth one point

A.

Immutability

B.

Snapshots

C.

Versioning

D.

Soft delete

E.

Object replication

F.

Change feed

Full Access
Question # 28

You need to secure the Azure Functions to meet the security requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Store the RSA-HSM key in Azure Cosmos DB. Apery the built-in policies for customer-managed keys and allowed locations.

B.

Create a free tier Azure App Configuration instance with a new Azure AD service principal.

C.

Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled.

D.

Store the RSA-HSM key in Azure Blob storage with an Immutability policy applied to the container.

E.

Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

Full Access
Question # 29

You need to test the availability of the corporate website.

Which two test types can you use?

A.

Custom testing using the TrackAvailability API method

B.

Standard

C.

URL Ping

D.

Multi-step

Full Access
Question # 30

you need to reduce read latency for the retail store solution.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

Create a new composite index for the store location data queries in Azure Cosmos DB. Modify the queries to support parameterized SQL and update the Azure function app to call the new Queries.

B.

Configure Azure Cosmos DB consistency to strong consistency Increase the RUs for the container supporting store location data.

C.

Provision an Azure Cosmos OB dedicated gateway, update blob storage to use the new dedicated gateway endpoint.

D.

Configure Azure Cosmos DB consistency to session consistency. Cache session tokens in a new Azure Redis cache instance after every write. Update reads to use the session token stored in Azure Redis.

E.

Provision an Azure Cosmos DB dedicated gateway Update the Azure Function app connection string to use the new dedicated gateway endpoint.

Full Access
Question # 31

You need to grant access to the retail store location data for the inventory service development effort. What should you use?

A.

Azure AD access token

B.

Azure RBAC role

C.

Azure AD ID token

D.

Shared access signature (SAS) token

E.

Azure AD refresh token

Full Access
Question # 32

You need to secure the Azure Functions to meet the security requirements.

Which two actions should you perform? Each correct answer presents part of the solution

NOTE: Each correct selection is worth one point.

A.

Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled

B.

Store the RSA-HSM key in Azure Blob storage with an immutability policy applied to the container.

C.

Store the RSA-HSM key in Azure Cosmos DB. Apply the built-in policies for customer-managed Keys and allowed locations

D.

Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

E.

Create a free tier Azure App Configuration instance with a new Azure AD service principal.

Full Access
Question # 33

You need to implement event routing for retail store location data.

Which configuration should you use?

Full Access
Question # 34

You need to implement the corporate website.

How should you configure the solution?

Full Access
Question # 35

You are authoring a set of nested Azure Resource Manager templates to deploy Azure resources. You author an Azure Resource Manager template named mainTempIate.json that contains the following linked templates: linkedTemplatel.json, linkedTemplate2json.

You add parameters to a parameters template file named mainTemplate.parameters.json. You save all templates on a local device in the C:\templates\ folder.

You have the following requirements:

• Store the templates in Azure for later deployment.

• Enable versioning of the templates.

• Manage access to the templates by using Azure RBAC

You need to store the templates in Azure.

How should you complete the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 36

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You develop and deploy an Azure App Service API app to a Windows-hosted deployment slot named Development. You create additional deployment slots named Testing and Production. You enable auto swap on the Production deployment slot.

You need to ensure that scripts run and resources are available before a swap operation occurs.

Solution: Update the web.config file to include the applicationInitialization configuration element. Specify custom initialization actions to run the scripts.

Does the solution meet the goal?

A.

Yes

B.

No

Full Access
Question # 37

You need to configure the ContentUploadService deployment.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Add the following markup to line CS23:

types: Private

B.

Add the following markup to line CS24:

osType: Windows

C.

Add the following markup to line CS24:

osType: Linux

D.

Add the following markup to line CS23:

types: Public

Full Access
Question # 38

You need to add markup at line AM04 to implement the ContentReview role.

How should you complete the markup? To answer, drag the appropriate json segments to the correct locations. Each json segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 39

You need to ensure that network security policies are met.

How should you configure network security? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 40

You need to investigate the http server log output to resolve the issue with the ContentUploadService.

Which command should you use first?

A.

az webapp log

B.

az ams live-output

C.

az monitor activity-log

D.

az container attach

Full Access
Question # 41

You need to add YAML markup at line CS17 to ensure that the ContentUploadService can access Azure Storage access keys.

How should you complete the YAML markup? To answer, drag the appropriate YAML segments to the correct locations. Each YAML segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 42

You are developing a web application that uses the Microsoft identity platform to authenticate users and resources, The web application calls several REST APIs.

The APIs require an access token from the Microsoft identity platform.

You need to request a token.

Which three properties should you use? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Application name

B.

Application secret

C.

Application ID

D.

Supported account type

E.

Redirect URI/URL

Full Access
Question # 43

You develop and deploy an Azure App Service web app. The app is deployed to multiple regions and uses Azure Traffic Manager. Application Insights is enabled for the app.

You need to analyze app uptime for each month.

Which two solutions win achieve the goal? Each correct answer presents a complete solution

NOTE: Each correct selection is worth one point

A.

Application Insights alerts

B.

Application Insights web tests

C.

Azure Monitor logs

D.

Azure Monitor metrics

Full Access
Question # 44

You are developing an Azure App Service REST API.

The API must be called by an Azure App Service web app. The API must retrieve and update user profile information stored in Azure Active Directory (Azure AD).

You need to configure the API to make the updates.

Which two tools should you use? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Microsoft Graph API

B.

Microsoft Authentication Library (MSAL)

C.

Azure API Management

D.

Microsoft Azure Security Center

E.

Microsoft Azure Key Vault SDK

Full Access
Question # 45

You need to add code at line AM10 of the application manifest to ensure that the requirement for manually reviewing content can be met.

How should you complete the code? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 46

You need to implement the bindings for the CheckUserContent function.

How should you complete the code segment? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 47

You need to monitor ContentUploadService accourding to the requirements.

Which command should you use?

A.

az monitor metrics alert create –n alert –g … - -scopes … - -condition "avg

Percentage CPU > 8"

B.

az monitor metrics alert create –n alert –g … - -scopes … - -condition "avg

Percentage CPU > 800"

C.

az monitor metrics alert create –n alert –g … - -scopes … - -condition "CPU

Usage > 800"

D.

az monitor metrics alert create –n alert –g … - -scopes … - -condition "CPU

Usage > 8"

Full Access
Question # 48

Fourth Coffee has an ASP.NET Core web app that runs in Docker. The app is mapped to the www.fourthcoffee.com domain.

Fourth Coffee is migrating this application to Azure.

You need to provision an App Service Web App to host this docker image and map the custom domain to the App Service web app.

A resource group named FourthCoffeePublicWebResourceGroup has been created in the WestUS region that contains an App Service Plan named AppServiceLinuxDockerPlan.

Which order should the CLI commands be used to develop the solution? To answer, move all of the Azure CLI command from the list of commands to the answer area and arrange them in the correct order.

Full Access
Question # 49

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data.

You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future.

You need to implement a solution to receive the device data.

Solution: Provision an Azure Notification Hub. Register all devices with the hub.

Does the solution meet the goal?

A.

Yes

B.

No

Full Access
Question # 50

You have an application that includes an Azure Web app and several Azure Function apps. Application secrets including connection strings and certificates are stored in Azure Key Vault.

Secrets must not be stored in the application or application runtime environment. Changes to Azure Active Directory (Azure AD) must be minimized.

You need to design the approach to loading application secrets.

What should you do?

A.

Create a single user-assigned Managed Identity with permission to access Key Vault and configure each App Service to use that Managed Identity.

B.

Create a single Azure AD Service Principal with permission to access Key Vault and use a client secret from within the App Services to access Key Vault.

C.

Create a system assigned Managed Identity in each App Service with permission to access Key Vault.

D.

Create an Azure AD Service Principal with Permissions to access Key Vault for each App Service and use a certificate from within the App Services to access Key Vault.

Full Access
Question # 51

You are developing several Azure API Management (APIM) hosted APIs.

You must inspect request processing of the APIs in APIM. Requests to APIM by using a REST client must also be included. The request inspection must include the following information:

• requests APIM sent to the API backend and the response it received

• policies applied to the response before sending back to the caller

• errors that occurred during the processing of the request and the policies applied to the errors

• original request APIM received from the caller and the policies applied to the request

You need to inspect the APIs.

Which three actions should you do? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Enable the Allow tracing setting for the subscription used to inspect the API.

B.

Add the Ocp-Apim-Trace header value to the API call with a value set to true

C.

Add the Ocp-Apim-Subscription-Key header value to the key for a subscription that allows access to the API.

D.

Create and configure a custom policy. Apply the policy to the outbound policy section with an API scope.

E.

Create and configure a custom policy. Apply the policy to the inbound policy section with a global scope.

Full Access
Question # 52

You develop and add several functions to an Azure Function app that uses the latest runtime host. The functions contain several REST API endpoints secured by using SSL. The Azure Function app runs in a Consumption plan.

You must send an alert when any of the function endpoints are unavailable or responding too slowly.

You need to monitor the availability and responsiveness of the functions.

What should you do?

A.

Create a URL ping test.

B.

Create a timer triggered function that calls TrackAvailability() and send the results to Application

Insights.

C.

Create a timer triggered function that calls GetMetric("Request Size") and send the results to

Application Insights.

D.

Add a new diagnostic setting to the Azure Function app. Enable the FunctionAppLogs and Send to Log Analytics options.

Full Access
Question # 53

You are debugging an application that is running on Azure Kubernetes cluster named cluster1. The cluster uses Azure Monitor for containers to monitor the cluster.

The application has sticky sessions enabled on the ingress controller.

Some customers report a large number of errors in the application over the last 24 hours.

You need to determine on which virtual machines (VMs) the errors are occurring.

How should you complete the Azure Monitor query? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 54

You develop a web app that uses tier D1 app service plan by using the Web Apps feature of Microsoft Azure App Service.

Spikes in traffic have caused increases in page load times.

You need to ensure that the web app automatically scales when CPU load is about 85 percent and minimize costs.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

Full Access
Question # 55

You have a web app named MainApp. You are developing a triggered App Service background task by using the WebJobs SDK. This task automatically invokes a function code whenever any new data is received in a queue.

You need to configure the services.

Which service should you use for each scenario? To answer, drag the appropriate services to the correct scenarios. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 56

You are a developer building a web site using a web app. The web site stores configuration data in Azure App Configuration. Access to Azure App Configuration has been configured to use the identity of the web app for authentication. Security requirements specify that no other authentication systems must be used.

You need to load configuration data from Azure App Configuration.

How should you complete the code? To answer, select the appropriate options in the answer area.

Full Access
Question # 57

You have an application that uses Azure Blob storage.

You need to update the metadata of the blobs.

Which three methods should you use to develop the solution? To answer, move the appropriate methods from the list of methods to the answer area and arrange them in the correct order.

Full Access
Question # 58

You need to support the requirements for the Shipping Logic App.

What should you use?

A.

Azure Active Directory Application Proxy

B.

Point-to-Site (P2S) VPN connection

C.

Site-to-Site (S2S) VPN connection

D.

On-premises Data Gateway

Full Access
Question # 59

You need to update the APIs to resolve the testing error.

How should you complete the Azure CLI command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 60

You need to secure the Shipping Logic App.

What should you use?

A.

Azure App Service Environment (ASE)

B.

Azure AD B2B integration

C.

Integration Service Environment (ISE)

D.

VNet service endpoint

Full Access
Question # 61

You need to configure Azure App Service to support the REST API requirements.

Which values should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 62

You need to secure the Shipping Function app.

How should you configure the app? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 63

You need to migrate on-premises shipping data to Azure.

What should you use?

A.

Azure Migrate

B.

Azure Cosmos DB Data Migration tool (dt.exe)

C.

AzCopy

D.

Azure Database Migration service

Full Access
Question # 64

You need to correct the VM issues.

Which tools should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 65

You need to resolve the Shipping web site error.

How should you configre the Azure Table Storage service? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 66

You need to resolve the capacity issue.

What should you do?

A.

Convert the trigger on the Azure Function to an Azure Blob storage trigger

B.

Ensure that the consumption plan is configured correctly to allow scaling

C.

Move the Azure Function to a dedicated App Service Plan

D.

Update the loop starting on line PC09 to process items in parallel

Full Access
Question # 67

You need to add code at line PC26 of Processing.cs to ensure that security policies are met.

How should you complete the code that you will add at line PC26? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 68

You need to ensure receipt processing occurs correctly.

What should you do?

A.

Use blob properties to prevent concurrency problems

B.

Use blob SnapshotTime to prevent concurrency problems

C.

Use blob metadata to prevent concurrency problems

D.

Use blob leases to prevent concurrency problems

Full Access
Question # 69

You need to add code at line PC32 in Processing.cs to implement the GetCredentials method in the Processing class.

How should you complete the code? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 70

You need to ensure the security policies are met.

What code do you add at line CS07 of ConfigureSSE.ps1?

A.

–PermissionsToKeys create, encrypt, decrypt

B.

–PermissionsToCertificates create, encrypt, decrypt

C.

–PermissionsToCertificates wrapkey, unwrapkey, get

D.

–PermissionsToKeys wrapkey, unwrapkey, get

Full Access
Question # 71

You need to resolve the log capacity issue.

What should you do?

A.

Create an Application Insights Telemetry Filter

B.

Change the minimum log level in the host.json file for the function

C.

Implement Application Insights Sampling

D.

Set a LogCategoryFilter during startup

Full Access
Question # 72

You need to ensure disaster recovery requirements are met.

What code should you add at line PC16?

To answer, drag the appropriate code fragments to the correct locations. Each code fragment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access