Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 191:

  A company is developing a solution that allows smart refrigerators to send temperature information to a central location. You have an existing Service Bus.

  The solution must receive and store messages until they can be processed. You create an Azure Service Bus instance by providing a name, pricing tier, subscription, resource group, and location.

  You need to complete the configuration.

  Which Azure CLI or PowerShell command should you run?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  Explanation

  A service bus instance has already been created (Step 2 below). Next is step 3, Create a Service Bus queue.

  Note:

  Steps:

  Step 1: # Create a resource group resourceGroupName="myResourceGroup" az group create --name $resourceGroupName --location eastus

  Step 2: # Create a Service Bus messaging namespace with a unique name namespaceName=myNameSpace$RANDOM az servicebus namespace create --resource-group $resourceGroupName --name $namespaceName --location eastus

  Step 3: # Create a Service Bus queue az servicebus queue create --resource-group $resourceGroupName --namespace-name $namespaceName --name BasicQueue

  Step 4: # Get the connection string for the namespace connectionString=$(az servicebus namespace authorization-rule keys list --resource-group $resourceGroupName --namespace-name $namespaceName --name RootManageSharedAccessKey --query primaryConnectionString --output tsv)

  https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli

• Question 192:

  HOTSPOT

  You have an app that stores player scores for an online game. The app stores data in Azure tables using a class named PlayerScore as the table entity. The table is populated with 100,000 records.

  You are reviewing the following section of code that is intended to retrieve 20 records where the player score exceeds 15,000. (Line numbers are included for reference only.)

  

  You have the following code. (Line numbers are included for reference only.)

  

  You store customer information in an Azure Cosmos database. The following data already exists in the database:

  

  You develop the following code. (Line numbers are included for reference only.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Box 2: Yes

  The TableQuery.Take method defines the upper bound for the number of entities the query returns.

  Example:

  query.Take(10); Box 3: Yes

  Box 4: Yes

  References:

  https://www.vkinfotek.com/azureqa/how-do-i-query-azure-table-storage-using-tablequery-class.html

• Question 193:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You develop Azure solutions.

  You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.

  You need to obtain an Azure Resource Manager access token.

  Solution: Run the Invoke-RestMethod cmdlet to make a request to the local managed identity for Azure resources endpoint.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  Get an access token using the VM's system-assigned managed identity and use it to call Azure Resource Manager

  You will need to use PowerShell in this portion.

  1. In the portal, navigate to Virtual Machines and go to your Windows virtual machine and in the Overview, click Connect.

  2. Enter in your Username and Password for which you added when you created the Windows VM.

  3. Now that you have created a Remote Desktop Connection with the virtual machine, open PowerShell in the remote session.

  4. Using the Invoke-WebRequest cmdlet, make a request to the local managed identity for Azure resources endpoint to get an access token for Azure Resource Manager.

  Example:

  $response = Invoke-WebRequest -Uri '

  http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=

  https://management.azure.com/'

  -Method GET -Headers @{Metadata="true"}

  https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm

• Question 194:

  DRAG DROP

  You need to correct the corporate website error.

  Which four actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Scenario: Corporate website

  While testing the site, the following error message displays:

  CryptographicException: The system cannot find the file specified.

  Step 1: Generate a certificate

  Step 2: Upload the certificate to Azure Key Vault

  Scenario: All SSL certificates and credentials must be stored in Azure Key Vault.

  Step 3: Import the certificate to Azure App Service

  Step 4: Update line SCO5 of Security.cs to include error handling and then redeploy the code

  https://docs.microsoft.com/en-us/azure/app-service/configure-ssl-certificate

• Question 195:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.

  You are developing and deploying several ASP.NET web applications to Azure App Service. You plan to save session state information and HTML output.

  You must use a storage mechanism with the following requirements:

  1. Share session state across all ASP.NET web applications.

  2. Support controlled, concurrent access to the same session state data for multiple readers and a single writer.

  3. Save full HTTP responses for concurrent requests.

  You need to store the information.

  Proposed Solution: Deploy and configure an Azure Database for PostgreSQL. Update the web applications.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead deploy and configure Azure Cache for Redis. Update the web applications.

  https://docs.microsoft.com/en-us/azure/architecture/best-practices/caching#managing-concurrency-in-a-cache

• Question 196:

  Your company has several containers based on the following operating systems:

  1. Windows Server 2019 Nano Server

  2. Windows Server 2019 Server Core

  3. Windows Server 2022 Nano Server

  4. Windows Server 2022 Server Core

  5. Linux

  You plan to migrate the containers to an Azure Kubernetes cluster.

  What is the minimum number of node pools that the cluster must have?

  A. 1
  B. 2
  C. 3
  D. 6
  C. 3

• Question 197:

  HOTSPOT

  You are developing an application that uses a premium block blob storage account. You are optimizing costs by automating Azure Blob Storage access tiers.

  You apply the following policy rules to the storage account. You must determine the implications of applying the rules to the data. (Line numbers are included for reference only.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  

  Box 2: Yes

  

  Box 3: Yes

  Box 4: Yes

  

• Question 198:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an azure subscription that includes a storage account, a resource group, a blob container and a file share.

  A fellow administrator named Jon Ross used an Azure Resource Manager template to deploy a virtual machine and an Azure Storage account.

  You need to identify the Azure Resource Manager template the Jon Ross used.

  Solution: You access the Resource Group blade.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  View template from deployment history

  Go to the resource group for your new resource group. Notice that the portal shows the result of the last deployment. Select this link.

  

  You see a history of deployments for the group. In your case, the portal probably lists only one deployment. Select this deployment.

  

  The portal displays a summary of the deployment. The summary includes the status of the deployment and its operations and the values that you provided for parameters. To see the template that you used for the deployment, select View template.

  

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-export-template

• Question 199:

  HOTSPOT

  You need to configure API Management for authentication.

  Which policy values should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Validate JWT

  The validate-jwt policy enforces existence and validity of a JWT extracted from either a specified HTTP Header or a specified query parameter.

  Scenario: User authentication (see step 5 below)

  The following steps detail the user authentication process:

  1. The user selects Sign in in the website.

  2. The browser redirects the user to the Azure Active Directory (Azure AD) sign in page.

  3. The user signs in.

  4. Azure AD redirects the user's session back to the web application. The URL includes an access token.

  5. The web application calls an API and includes the access token in the authentication header. The application ID is sent as the audience ('aud') claim in the access token.

  6. The back-end API validates the access token.

  Incorrect Answers:

  1. Limit call rate by key - Prevents API usage spikes by limiting call rate, on a per key basis.

  2. Restrict caller IPs - Filters (allows/denies) calls from specific IP addresses and/or address ranges.

  3. Check HTTP header - Enforces existence and/or value of a HTTP Header.

  Box 2: Outbound

  https://docs.microsoft.com/en-us/azure/api-management/api-management-access-restriction-policies

• Question 200:

  Your company's Azure subscription includes an Azure Log Analytics workspace.

  Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server 2016, and is linked to the Azure Log Analytics workspace. The Azure Log Analytics workspace is set up to gather performance counters associated with security from these linked servers.

  You must configure alerts based on the information gathered by the Azure Log Analytics workspace.

  You have to make sure that alert rules allow for dimensions, and that alert creation time should be kept to a minimum. Furthermore, a single alert notification must be created when the alert is created and when the alert is resolved.

  You need to make use of the necessary signal type when creating the alert rules.

  Which of the following is the option you should use?

  A. The Activity log signal type.
  B. The Application Log signal type.
  C. The Metric signal type.
  D. The Audit Log signal type.
  C. The Metric signal type.

  ---

  Explanation

  Metric alerts in Azure Monitor provide a way to get notified when one of your metrics cross a threshold. Metric alerts work on a range of multi-dimensional platform metrics, custom metrics, Application Insights standard and custom metrics.

  Note: Signals are emitted by the target resource and can be of several types. Metric, Activity log, Application Insights, and Log.

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric