Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 101:

  You are building a web application that performs image analysis on user photos and returns metadata containing objects identified. The image analysis is very costly in terms of time and compute resources. You are planning to use Azure Redo Cache so Cache uploads do not need to be reprocessed.

  In case of an Azure data center outage metadata loss must be kept to a minimum.

  You need to configure the Azure Redis cache instance.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection in worth one point.

  A. Configure Azure Redis with persistence
  B. Configure second storage account for persistence
  C. Set backup frequency to the minimum value
  D. Configure Azure Redis with RDS persistence
  B. Configure second storage account for persistence
  D. Configure Azure Redis with RDS persistence

• Question 102:

  HOTSPOT

  You develop and deploy an Azure App Service web app that connects to Azure Cache for Redis as a content cache. All resources have been deployed to the East US 2 region.

  The security team requires the following audit information from Azure Cache for Redis:

  1. The number of Redis client connections from an associated IP address.

  2. Redis operations completed on the content cache.

  3. The location (region) in which the Azure Cach3e for Redis instance was accessed.

  The audit information must be captured and analyzed by a security team application deployed to the Central US region.

  You need to log information on all client connections to the cache.

  Which configuration values should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Log Analytics workspace

  The regions are different so we must the Log Analytics workspace as Log Destinations

  Note: Log Destinations

  You can turn on diagnostic settings for Azure Cache for Redis instances and send resource logs to the following destinations:

  Log Analytics workspace - doesn't need to be in the same region as the resource being monitored.

  Storage account - must be in the same region as the cache.

  Event hub - diagnostic settings can't access event hub resources when virtual networks are enabled. The event hub must be in the same region as the cache.

  Box 2: Diagnostic settings

  Monitor Azure Cache for Redis data using diagnostic settings

  Diagnostic settings in Azure are used to collect resource logs. An Azure resource emits resource logs and provides rich, frequent data about the operation of that resource. These logs are captured per request and are also referred to as "data plane logs".

  https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-monitor-diagnostic-settings

• Question 103:

  You are developing an e-commerce solution that uses a microservice architecture.

  You need to design a communication backplane for communicating transactional messages between various parts of the solution. Messages must be communicated in first-in-first-out (FIFO) order.

  What should you use?

  A. Azure Storage Queue
  B. Azure Event Hub
  C. Azure Service Bus
  D. Azure Event Grid
  C. Azure Service Bus

  ---

  Explanation

  As a solution architect/developer, you should consider using Service Bus queues when: Your solution requires the queue to provide a guaranteed first-in-first-out (FIFO) ordered delivery.

  https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-azure-and-service-bus-queues-compared-contrasted

• Question 104:

  HOTSPOT

  You are developing a ticket reservation system for an airline.

  The storage solution for the application must meet the following requirements:

  Ensure at least 99/99% availability and provide low latency.

  Accept reservations even in network outages or other unforseen failures

  Process reservations in the exact sequence as reservation are submitted to minimize overbooking or selling the same seat to multiple travelers.

  Allow simultaneous and out-of-order reservations with a maximum five-second tolerance window.

  You provision a resource group named airlineResourceGroup in the Azure South-Central US region.

  You need to provision a SQL API Cosmos DB account to support the app.

  How should you complete the Azure CLI commands? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Strong

  Strong consistency offers a linearizability guarantee. The reads are guaranteed to return the most recent committed version of an item. A client never sees an uncommitted or partial write. Users are always guaranteed to read the latest committed write.

  " Process reservations in the exact sequence as reservation are submitted to minimize overbooking or selling the same seat to multiple travelers."

  Box 2: Enable-automatic-failover

  For multi-region Cosmos accounts that are configured with a single-write region, enable automatic-failover by using Azure CLI or Azure portal. After you enable automatic failover, whenever there is a regional disaster, Cosmos DB will automatically failover your account.

  " Accept reservations even in network outages or other unforseen failures"

  Box 3: southcentralus

  " You provision a resource group named airlineResourceGroup in the Azure South-Central US region."

  References:

  https://docs.microsoft.com/en-us/azure/cosmos-db/consistency-levels

  https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/cosmos-db/high-availability.md

• Question 105:

  You provide an Azure API Management managed web service to clients. The back-end web service implements HTTP Strict Transport Security (HSTS).

  Every request to the backend service must include a valid HTTP authorization header.

  You need to configure the Azure API Management instance with an authentication policy.

  Which two policies can you use? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. OAuth Client Credential Grant
  B. Basic Authentication
  C. Certificate Authentication
  D. Digest Authentication
  A. OAuth Client Credential Grant
  D. Digest Authentication

• Question 106:

  DRAG DROP

  You manage several existing Logic Apps.

  You need to change definitions, add new logic and optimize these apps on a regular basis.

  What should you use? To answer, drag the appropriate tools to the coned functionalities. Each tool may be used once, more than once, or not at all- You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 107:

  You need to test the availability of the corporate website.

  Which two test types can you use? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Standard
  B. URL ping
  C. Custom testing using the TrackAvailability API method
  D. Multi-step
  A. Standard
  C. Custom testing using the TrackAvailability API method

  ---

  Explanation

  Note: Corporate website, Implement monitoring by using Application Insights and availability web tests including SSL certificate validity and custom header value verification.

  A: Standard tests are a single request test that is similar to the URL ping test but more advanced. In addition to validating whether an endpoint is responding and measuring the performance, Standard tests also includes SSL certificate validity, proactive lifetime check, HTTP request verb (for example GET,HEAD,POST, etc.), custom headers, and custom data associated with your HTTP request.

  C: You can create an Azure Function with TrackAvailability() that will run periodically according to the configuration given in TimerTrigger function with your own business logic. The results of this test will be sent to your Application Insights resource, where you will be able to query for and alert on the availability results data. This allows you to create customized tests similar to what you can do via Availability Monitoring in the portal. Customized tests will allow you to write more complex availability tests than is possible using the portal UI, monitor an app inside of your Azure VNET, change the endpoint address, or create an availability test even if this feature is not available in your region.

  Incorrect:

  * URL ping

  The name URL ping test is a bit of a misnomer. These tests don't use the Internet Control Message Protocol (ICMP) to check your site's availability. Instead, they use more advanced HTTP request functionality to validate whether an endpoint is responding. They measure the performance associated with that response. They also add the ability to set custom success criteria, coupled with more advanced features like parsing dependent requests and allowing for retries.

  * Multi-step

  You can monitor a recorded sequence of URLs and interactions with a website via multi-step web tests.

  Multi-step web tests depend on Visual Studio webtest files. It was announced that Visual Studio 2019 will be the last version with webtest functionality. It's important to understand that while no new features will be added, webtest functionality in Visual Studio 2019 is still currently supported and will continue to be supported during the support lifecycle of the product.

  We recommend using the TrackAvailability to submit custom availability tests instead of Multi-step web tests. This is the long term supported solution for multi request or authentication test scenarios. With TrackAvailability() and custom availability tests, you can run tests on any compute you want and use C# to easily author new tests.

  https://learn.microsoft.com/en-us/azure/azure-monitor/app/availability-standard-tests

• Question 108:

  HOTSPOT

  You need to resolve the Shipping web site error.

  How should you configure the Azure Table Storage service? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: AllowedOrigins

  A CORS request will fail if Access-Control-Allow-Origin is missing.

  Scenario:

  The following error message displays while you are testing the website:

  Box 2:

  http://test-shippingapi.wideworldimporters.comSyntax:Access-Control-Allow-Origin:

  Access-Control-Allow-Origin: <origin>

  Access-Control-Allow-Origin: null

  <origin> Specifies an origin. Only a single origin can be specified.

  Box 3: AllowedOrigins

  Box 4: POST

  The only allowed methods are GET, HEAD, and POST. In this case POST is used.

  "<Corsrule>" "allowedmethods" Failed to load no "Access-control-Origin" header is present

  References:

  https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin

• Question 109:

  Vou have an on-premises, public-facing website named www.contoso.com.

  You plan to test availability of www.contoso.com by using Application Insights availability tests.

  You need to configure a test that will generate HTTP POST requests that include custom headers.

  Your solution must minimize development effort.

  Which type of test should you configure?

  A. Multi-step web test
  B. Standard test
  C. URL ping test
  D. Custom TrackAvailability test
  A. Multi-step web test

• Question 110:

  DRAG DROP

  You need to implement the Log policy.

  How should you complete the Azure Event Grid subscription? To answer, drag the appropriate JSON segments to the correct locations. Each JSON segment may be used once, more than once, or not at all. You may need to drag the split bar between panes to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1:WebHook

  Scenario: If an anomaly is detected, an Azure Function that emails administrators is called by using an HTTP WebHook.

  endpointType: The type of endpoint for the subscription (webhook/HTTP, Event Hub, or queue).

  Box 2: SubjectBeginsWith

  Box 3: Microsoft.Storage.BlobCreated

  Scenario: Log Policy

  All Azure App Service Web Apps must write logs to Azure Blob storage. All log files should be saved to a container named logdrop. Logs must remain in the container for 15 days.

  Example subscription schema

  {

  "properties": {

  "destination": {

  "endpointType": "webhook",

  "properties": {

  "endpointUrl": "

  https://example.azurewebsites.net/api/HttpTriggerCSharp1?code=VXbGWce53l48Mt8wuotr0GPmyJ/nDT4hgdFj9DpBiRt38qqnnm5OFg=="

  }

  },

  "filter": {

  "includedEventTypes": [ "Microsoft.Storage.BlobCreated", "Microsoft.Storage.BlobDeleted" ], "subjectBeginsWith": "blobServices/default/containers/mycontainer/log",

  "subjectEndsWith": ".jpg",

  "isSubjectCaseSensitive ": "true"

  }

  }

  } Reference:

  https://docs.microsoft.com/en-us/azure/event-grid/subscription-creation-schema