Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 221:

  You need to serve static content from the corporate website.

  What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Store all static content in Azure Blob Storage. Enable Azure Content Delivery Network for the storage account.
  B. Configure App Service networking to create a Content Delivery Network profile and endpoint.
  C. Configure the Azure App Service Local Cache feature and set the app setting WEBSITE_LOCAL_CACHE_SIZEINMB value.
  D. Update the Azure Traffic Manager routing method to priority.
  E. Create a nested Azure Traffic Manager profile. Configure the parent profile to the performance traffic routing method and the chtld profile to the priority traffic routing method.
  A. Store all static content in Azure Blob Storage. Enable Azure Content Delivery Network for the storage account.
  B. Configure App Service networking to create a Content Delivery Network profile and endpoint.

• Question 222:

  DRAG DROP

  You are preparing to deploy an Azure virtual machine (VM)-based application.

  The VMs that run the application have the following requirements:

  1. When a VM is provisioned the firewall must be automatically configured before it can access Azure resources.

  2. Supporting services must be installed by using an Azure PowerShell script that is stored in Azure Storage.

  You need to ensure that the requirements are met.

  Which features should you use? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  https://docs.microsoft.com/en-us/azure/automation/automation-hybrid-runbook-worker

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/run-command

• Question 223:

  You need to resolve the capacity issue.

  What should you do?

  A. Convert the trigger on the Azure Function to an Azure Blob storage trigger
  B. Ensure that the consumption plan is configured correctly to allow scaling
  C. Move the Azure Function to a dedicated App Service Plan
  D. Update the loop starting on line PC09 to process items in parallel
  D. Update the loop starting on line PC09 to process items in parallel

  ---

  Explanation

  If you want to read the files in parallel, you cannot use forEach. Each of the async callback function calls does return a promise. You can await the array of promises that you'll get with Promise.all.

  Scenario: Capacity issue: During busy periods, employees report long delays between the time they upload the receipt and when it appears in the web application.

  

  https://stackoverflow.com/questions/37576685/using-async-await-with-a-foreach-loop

• Question 224:

  HOTSPOT

  You are developing an application that uses Azure Storage to store customer data. The data must only be decrypted by the customer and the customer must be provided a script to rotate keys.

  You need to provide a script to rotate keys to the customer.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: key

  When you manually update the key version, you'll need to update the storage account's encryption settings to use the new version. First, query for the key vault URI by calling az keyvault show, and for the key version by calling az keyvault key list-versions. Then call az storage account update to update the storage account's encryption settings to use the new version of the key, as shown in the example below.

  Box 2: Microsoft.Keyvault

  Call az storage account update to update the storage account's encryption settings, as shown in the following example. Include the --encryption-key-source parameter and set it to Microsoft.Keyvault to enable customer-managed keys for the account.

  hsmurl = $(az keyvault show \

  --hsm-name <hsm-name> \

  --query properties.hsmUri \

  --output tsv)

  az storage account update \

  --name <storage-account> \

  --resource-group <resource_group> \

  --encryption-key-name <key> \

  --encryption-key-source Microsoft.Keyvault \

  --encryption-key-vault $hsmurl

  https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/storage/common/customer-managed-keys-configure-key-vault-hsm.md

• Question 225:

  You develop a Web App on a tier D1 app service plan.

  You notice that page load times increase during periods of peak traffic.

  You want to implement automatic scaling when CPU load is above 80 percent. Your solution must minimize costs.

  What should you do first?

  A. Enable autoscaling on the Web App.
  B. Switch to the Premium App Service tier plan.
  C. Switch to the Standard App Service tier plan.
  D. Switch to the Azure App Services consumption plan.
  C. Switch to the Standard App Service tier plan.

  ---

  Explanation

  Configure the web app to the Standard App Service Tier. The Standard tier supports auto-scaling, and we should minimize the cost. We can then enable autoscaling on the web app, add a scale rule and add a Scale condition.

  https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-autoscale-get-started

  https://azure.microsoft.com/en-us/pricing/details/app-service/plans/

• Question 226:

  DRAG DROP

  You are developing several microservices to run on Azure Container Apps.

  The microservices must allow HTTPS access by using a custom domain.

  You need to configure the custom domain in Azure Container Apps.

  In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Step 1: Enable ingress

  Step 2: Add the custom domain name

  Step 3: Validate the custom domain name

  Step 4: Bind certificate

  Step 5: Add DNS records to the domain

  Custom domain names and bring your own certificates in Azure Container Apps

  Add a custom domain and certificate 1. Navigate to your container app in the Azure portal

  2. Verify that your app has ingress enabled by selecting Ingress in the Settings section. If ingress is not enabled, enable it. (Step 1) 3. Under the Settings section, select Custom domains.

  4. Select the Add custom domain button. (Step 2) 5. In the Add custom domain and certificate window, in TLS/SSL certificate, select Bring your own certificate. (Step 3)

  6. In domain, enter the domain you want to add.

  7. Select Add a certificate.

  8. In the Add certificate window, in Certificate name, enter a name for this certificate. (Step 4) 9. In Certificate file section, browse for the certificate file you want to upload.

  10. Select Validate.

  11. Once validation succeeds, select Add.

  12. In the Add custom domain and certificate window, in Certificate, select the certificate you just added.

  13. Select the Hostname record type based on the type of your domain.

  14. Using the DNS provider that is hosting your domain, create DNS records based on the Hostname record type you selected using the values shown in the Domain validation section. The records point the domain to your container app and verify that you own it. (Step 5)

  15. Select the Validate button.

  16. Once validation succeeds, select the Add button.

  17. Once the operation is complete, you see your domain name in the list of custom domains with a status of Secured. Navigate to your domain to verify that it's accessible.

  https://learn.microsoft.com/en-us/azure/container-apps/custom-domains-certificates

• Question 227:

  You are developing an Azure Function App that runs in an App Service Plan. The Azure Function is triggered by a Timer object. You observe that the Azure Function does not reliably trigger when scheduled.

  Which two actions should you perform?

  A. Verify that Always On is enabled.
  B. Modify the trigger to use a SignaIR trigger.
  C. Ensure that the function has a retry configured.
  D. Modify the trigger to use Consumption mode instead of the App Service plan.
  A. Verify that Always On is enabled.
  C. Ensure that the function has a retry configured.

• Question 228:

  HOTSPOT

  You are configuring a new development environment for a Java application.

  The environment requires a Virtual Machine Scale Set (VMSS), several storage accounts, and networking components.

  The VMSS must not be created until the storage accounts have been successfully created and an associated load balancer and virtual network is configured.

  How should you complete the Azure Resource Manager template? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: copyIndex

  Notice that the name of each resource includes the copyIndex() function, which returns the current iteration in the loop. copyIndex() is zero-based.

  Box 2: copy

  By adding the copy element to the resources section of your template, you can dynamically set the number of resources to deploy.

  Box 3: dependsOn

  Example:

  "type": "Microsoft.Compute/virtualMachineScaleSets",

  "apiVersion": "2020-06-01",

  "name": "[variables('namingInfix')]",

  "location": "[parameters('location')]",

  "sku": {

  "name": "[parameters('vmSku')]",

  "tier": "Standard",

  "capacity": "[parameters('instanceCount')]"

  },

  "dependsOn": [

  "[resourceId('Microsoft.Network/loadBalancers', variables('loadBalancerName'))]", "[resourceId('Microsoft.Network/virtualNetworks', variables('virtualNetworkName'))]"

  ], Reference:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/copy-resources

  https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-template-windows

• Question 229:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You are developing a solution for a public facing API.

  The API back end is hosted in an Azure App Service instance. You have implemented a RESTful service for the API back end.

  You must configure back-end authentication for the API Management service instance.

  Solution: You configure Client cert gateway credentials for the HTTP(s) endpoint.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  The API back end is hosted in an Azure App Service instance. It is an Azure resource and not an HTTP(s) endpoint.

  https://docs.microsoft.com/en-us/rest/api/apimanagement/apimanagementrest/azure-api-management-rest-api-backend-entity

• Question 230:

  HOTSPOT

  You develop new functionality in a web application for a company that provides access to seismic data from around the world. The seismic data is stored in Redis Streams within an Azure Cache for Redis instance.

  The new functionality includes a real-time display of seismic events as they occur.

  You need to implement the Azure Cache for Redis command to receive seismic data.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: XREAD

  Data is consumed from a stream using the XREAD command.

  Syntax XREAD [COUNT count] [BLOCK milliseconds] STREAMS key [key ...] id [id ...]

  Box 2: BLOCK 0

  Apart from the fact that XREAD can access multiple streams at once, and that we are able to specify the last ID we own to just get newer messages, in this simple form the command is not doing something so different compared to XRANGE.

  However, the interesting part is that we can turn XREAD into a blocking command easily, by specifying the BLOCK argument:

  > XREAD BLOCK 0 STREAMS mystream $

  BLOCK 0 is a timeout of 0 milliseconds, which means to never timeout.

  Box 3: $

  The $ operator indicates to start reading the stream from the end. Effectively, this example will only receive new entries instead of historical entries.

  The special ID $ means that XREAD should use as last ID the maximum ID already stored in the stream mystream, so that we will receive only new messages, starting from the time we started listening.

  Incorrect:

  * COUNT COUNT specifies how many elements should be read from the stream. It is not obligatory.

  * XRANGE, XLEN

  XRANGE

  Querying entries in a stream

  Once there are entries in a stream, clients can manually count the number of entries or retrieve entries directly.

  Redis includes an XRANGE command to directly get all or a subset of the entries in a stream. Redis also contains an XLEN command to count the number of entries in a specific stream.

  Querying ranges of entries

  The XRANGE command is used with three core parameters:

  The name of the stream to query

  The starting point of the result set

  The endpoint point of the result set

  https://redis.io/commands/xread/

  https://redis.io/docs/data-types/streams-tutorial/