Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 121:

  HOTSPOT

  You have an App Service plan named aspl based on the Free pricing tier.

  You plan to use aspl to implement an Azure Function app with a queue trigger. Your solution must minimize cost.

  You need to identify the configuration options that will meet the requirements.

  Which value should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Azure App Service feature: Managed identity Azure App Service pricing tier: Basic

• Question 122:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing an application that processes Azure Blob storage events.

  Your application has the following requirements:

  Process transaction logs asynchronously for changes that occur to the blobs and the blob metadata.

  Process changes in the order in which they occurred.

  Retain changes for compliance reasons.

  Solution: You use Azure Monitor HTTP Data Collector API.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

• Question 123:

  HOTSPOT

  A company is developing a Node.js web app. The web app code is hosted in a GitHub repository located at https://github.com/TailSpinToys/webapp.

  The web app must be reviewed before it is moved to production. You must deploy the initial code release to a deployment slot named review.

  You need to create the web app and deploy the code.

  How should you complete the commands? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: New-AzResourceGroup

  The New-AzResourceGroup cmdlet creates an Azure resource group.

  Box 2: New-AzAppServicePlan

  The New-AzAppServicePlan cmdlet creates an Azure App Service plan in a given location

  Box 3: New-AzWebApp

  The New-AzWebApp cmdlet creates an Azure Web App in a given a resource group

  Box 4: New-AzWebAppSlot

  The New-AzWebAppSlot cmdlet creates an Azure Web App slot.

  https://docs.microsoft.com/en-us/powershell/module/az.resources/new-azresourcegroup?view=azps-2.3.2

  https://docs.microsoft.com/en-us/powershell/module/az.websites/new-azappserviceplan?view=azps-2.3.2

  https://docs.microsoft.com/en-us/powershell/module/az.websites/new-azwebapp?view=azps-2.3.2

  https://docs.microsoft.com/en-us/powershell/module/az.websites/new-azwebappslot?view=azps-2.3.2

• Question 124:

  You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic volumes after it is published.

  You must ensure that the website remains available and responsive while minimizing cost.

  You need to deploy the website.

  What should you do?

  A. Deploy the website to a virtual machine. Configure the virtual machine to automatically scale when the CPU load is high.
  B. Deploy the website to an App Service that uses the Shared service tier. Configure the App service plan to automatically scale when the CPU load is high.
  C. Deploy the website to an App Service that uses the Standard service tier. Configure the App service plan to automatically scale when the CPU load is high.
  D. Deploy the website to a virtual machine. Configure a Scale Set to increase the virtual machine instance count when the CPU load is high.
  C. Deploy the website to an App Service that uses the Standard service tier. Configure the App service plan to automatically scale when the CPU load is high.

  ---

  Explanation

  Windows Azure Web Sites (WAWS) offers 3 modes: Standard, Free, and Shared.

  Standard mode carries an enterprise-grade SLA (Service Level Agreement) of 99.9% monthly, even for sites with just one instance.

  Standard mode runs on dedicated instances, making it different from the other ways to buy Windows Azure Web Sites.

  Incorrect Answers:

  B: Shared and Free modes do not offer the scaling flexibility of Standard, and they have some important limits.

  Shared mode, just as the name states, also uses shared Compute resources, and also has a CPU limit. So, while neither Free nor Shared is likely to be the best choice for your production environment due to these limits.

• Question 125:

  DRAG DROP

  You develop and deploy an Azure App Service web app. The web app accesses data in an Azure SQL database.

  You must update the web app to store frequently used data in a new Azure Cache for Redis Premium instance.

  You need to implement the Azure Cache for Redis features.

  Which feature should you implement? To answer, drag the appropriate feature to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  https://www.red-gate.com/simple-talk/development/dotnet-development/overview-of-azure-cache-for-redis/

  https://docs.microsoft.com/en-us/azure/architecture/best-practices/caching

• Question 126:

  You are preparing to deploy a website to an Azure Web App from a GitHub repository. The website includes static content generated by a script.

  You plan to use the Azure Web App continuous deployment feature.

  You need to run the static generation script before the website starts serving traffic.

  What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Add the path to the static content generation tool to WEBSITE_RUN_FROM_PACKAGE setting in the host.json file.
  B. Add a PreBuild target in the websites csproj project file that runs the static content generation script.
  C. Create a file named run.cmd in the folder /run that calls a script which generates the static content and deploys the website.
  D. Create a file named .deployment in the root of the repository that calls a script which generates the static content and deploys the website.
  A. Add the path to the static content generation tool to WEBSITE_RUN_FROM_PACKAGE setting in the host.json file.
  D. Create a file named .deployment in the root of the repository that calls a script which generates the static content and deploys the website.

  ---

  Explanation

  A: In Azure, you can run your functions directly from a deployment package file in your function app. The other option is to deploy your files in the d:\home\site\wwwroot directory of your function app (see A above).

  To enable your function app to run from a package, you just add a WEBSITE_RUN_FROM_PACKAGE setting to your function app settings.

  Note: The host.json metadata file contains global configuration options that affect all functions for a function app.

  D: To customize your deployment, include a .deployment file in the repository root. You just need to add a file to the root of your repository with the name .deployment and the content:

  [config] command = YOUR COMMAND TO RUN FOR DEPLOYMENT this command can be just running a script (batch file) that has all that is required for your deployment, like copying files from the repository to the web root directory for example.

  https://github.com/projectkudu/kudu/wiki/Custom-Deployment-Script

  https://docs.microsoft.com/bs-latn-ba/azure/azure-functions/run-functions-from-deployment-package

• Question 127:

  HOTSPOT

  You develop and deploy the following staticwebapp.config.json file to the app_location value specified in the workflow file of an Azure Static Web app:

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Unauthenticated users are challenged to authenticate with Azure Active Directory.

  Note:

  401

  Unauthorized

  Request to restricted pages while unauthenticated.

  Note: Restricting access to entire application

  It's common to require authentication for every route in an application. To enable this, add a rule that matches all routes and include the built-in authenticated role in the allowedRoles array.

  The following example configuration blocks anonymous access and redirects all unauthenticated users to the Azure Active Directory login page.

  {

  "routes": [

  {

  "route": "/*",

  "allowedRoles": ["authenticated"]

  }

  ],

  "responseOverrides": {

  "401": {

  "statusCode": 302,

  "redirect": "/.auth/login/aad"

  }

  }

  } Box 2: No

  It depends on the file extension of the file. 404 response codes is only generated for png, jpg and gif files.

  Note: Fallback routes

  Single Page Applications often rely on client-side routing. These client-side routing rules update the browser's window location without making requests back to the server. If you refresh the page, or navigate directly to URLs generated by client-side routing rules, a server-side fallback route is required to serve the appropriate HTML page (which is generally the index.html for your client-side app).

  You can define a fallback rule by adding a navigationFallback section. The following example returns /index.html for all static file requests that do not match a deployed file.

  {

  "navigationFallback": {

  "rewrite": "/index.html"

  }

  }

  You can control which requests return the fallback file by defining a filter. In the following example, requests for certain routes in the /images folder and all files in the /css folder are excluded from returning the fallback file.

  {

  "navigationFallback": {

  "rewrite": "/index.html",

  "exclude": ["/images/*.{png,jpg,gif}", "/css/*"]

  }

  }

  The example file structure below, the following outcomes are possible with this rule.

  Requests to...

  /images/unknown.png

  Return File not found error

  With status: 404

  /images/icon.svg

  Returns the /index.html file - since the svg file extension is not listed in the /images/*.{png,jpg,gif} filter With status: 200

  Box 3: Yes

  Only the route and methods (if specified) properties are used to determine whether a rule matches a request.

  Routes are secured by adding one or more role names into a rule's allowedRoles array.

  For instance, to restrict a route to only authenticated users, add the built-in authenticated role to the allowedRoles array.

  {

  "route": "/profile*",

  "allowedRoles": ["authenticated"]

  } Box 4: No

  Unauthenticated users are challanged to authenticate with Azure Active Directory.

  See box 1 above.

  https://learn.microsoft.com/en-us/azure/static-web-apps/configuration

• Question 128:

  Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-joined device. The cluster is located in a resource group.

  Developers have created an application named MyApp. MyApp was packaged into a container image.

  You need to deploy the YAML manifest file for the application.

  Solution: You install the docker client on the device and run the docker run -it microsoft/azure- cli:0.10.17 command.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 129:

  DRAG DROP

  Contoso, Ltd. provides an API to customers by using Azure API Management (APIM). The API authorizes users with a JWT token.

  You must implement response caching for the APIM gateway. The caching mechanism must detect the user ID of the client that accesses data for a given location and cache the response for that user ID.

  You need to add the following policies to the policies file:

  a set-variable policy to store the detected user identity a cache-lookup-value policy a cache-store-value policy a find-and-replace policy to update the response body with the user profile information

  To which policy section should you add the policies? To answer, drag the appropriate sections to the correct policies. Each section may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: Inbound.

  A set-variable policy to store the detected user identity.

  Example:

  <policies>

  <inbound>

  <!-- How you determine user identity is application dependent -->

  <set-variable

  name="enduserid" value="@(context.Request.Headers.GetValueOrDefault("Authorization","").Split(' ')[1].AsJwt()?.Subject)" />

  Box 2: Inbound

  A cache-lookup-value policy

  Example:

  <inbound>

  <base />

  <cache-lookup vary-by-developer="true | false" vary-by-developer-groups="true | false" downstream-caching-type="none | private | public" must-revalidate="true | false">

  <vary-by-query-parameter>parameter name</vary-by-query-parameter> <!-- optional, can repeated several times -->

  </cache-lookup>

  </inbound> Box 3: Outbound

  A cache-store-value policy.

  Example:

  <outbound>

  <base />

  <cache-store duration="3600" /> </outbound>

  Box 4: Outbound

  A find-and-replace policy to update the response body with the user profile information.

  Example:

  <outbound>

  <!-- Update response body with user profile-->

  <find-and-replace

  from='"$userprofile$"' to="@((string)context.Variables["userprofile"])" />

  <base />

  </outbound> Reference:

  https://docs.microsoft.com/en-us/azure/api-management/api-management-caching-policies

  https://docs.microsoft.com/en-us/azure/api-management/api-management-sample-cache-by-key

• Question 130:

  You need to secure the Azure Functions to meet the security requirements.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled.
  B. Store the RSA-HSM key in Azure Blob storage with an immutability policy applied to the container.
  C. Create a free tier Azure App Configuration instance with a new Azure AD service principal.
  D. Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.
  E. Store the RSA-HSM key in Azure Cosmos DB. Apply the built-in policies for customer-managed keys and allowed locations.
  A. Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled.
  D. Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

  ---

  Explanation

  Scenario: All Azure Functions must centralize management and distribution of configuration data for different environments and geographies, encrypted by using a company-provided RSA-HSM key.

  Microsoft Azure Key Vault is a cloud-hosted management service that allows users to encrypt keys and small secrets by using keys that are protected by hardware security modules (HSMs).

  You need to create a managed identity for your application.

  https://docs.microsoft.com/en-us/azure/app-service/app-service-key-vault-references