Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 241:

  HOTSPOT

  You have developed a Web App for your company. The Web App provides services and must run in multiple regions.

  You want to be notified whenever the Web App uses more than 85 percent of the available CPU cores over a 5 minute period. Your solution must minimize costs.

  Which command should you use? To answer, select the appropriate settings to the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/sv-se/cli/azure/monitor/metrics/alert

• Question 242:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.

  You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level. You need to configure authorization.

  Solution: Configure the Azure Web App for the website to allow only authenticated requests and require Azure AD log on.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead in the Azure AD application's manifest, set value of the groupMembershipClaims option to All.

  References:

  https://blogs.msdn.microsoft.com/waws/2017/03/13/azure-app-service-authentication-aad-groups/

• Question 243:

  HOTSPOT

  You create the following PowerShell script:

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No,

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  The AzScheduledQueryRuleSource is Heartbeat, not CPU.

  Box 2: Yes

  The AzScheduledQueryRuleSource is Heartbeat!

  Note: New-AzScheduledQueryRuleTriggerCondition creates an object of type Trigger Condition. This object is to be passed to the command that creates Alerting Action object.

  Box 3: No

  The schedule is 60 minutes, not two hours.

  -FrequencyInMinutes: The alert frequency.

  -TimeWindowInMinutes: The alert time window

  The New-AzAscheduledQueryRuleSchedule command creates an object of type Schedule. This object is to be passed to the command that creates Log Alert Rule.

• Question 244:

  You are developing an Azure App Service web app.

  The web app must securely store session information in Azure Redis Cache.

  You need to connect the web app to Azure Redis Cache.

  Which three Azure Redis Cache properties should you use? Each correct answer presents part of the solution.

  Each correct selection is worth one point.

  A. SSL port
  B. Subscription name
  C. Location
  D. Host name
  E. Access key
  F. Subscription id
  A. SSL port
  C. Location
  D. Host name

  ---

  Explanation

  https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-web-app-howto

• Question 245:

  DRAG DROP

  An organization has web apps hosted in Azure.

  The organization wants to track events and telemetry data in the web apps by using Application Insights.

  You need to configure the web apps for Application Insights.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Step 1: Create an Application Insights resource

  Creating an Application Insights workspace-based resource us a prerequisite.

  Step 2: Copy the connection string

  A connection string identifies the resource that you want to associate with your telemetry data. It also allows you to modify the endpoints that your resource will use as a destination for your telemetry. You'll need to copy the connection string and add it to your application's code or to an environment variable.

  Step 3: Configure the Application Insights SDK in the app

  The Application Insights SDK for ASP.NET Core can monitor your applications no matter where or how they run.

  Install the Application Insights SDK NuGet package for ASP.NET Core.

  https://docs.microsoft.com/en-us/azure/azure-monitor/app/asp-net-core

• Question 246:

  You need to test the availability of the corporate website.

  Which two test types can you use?

  A. Custom testing using the TrackAvailability API method
  B. Standard
  C. URL Ping
  D. Multi-step
  A. Custom testing using the TrackAvailability API method
  B. Standard

• Question 247:

  HOTSPOT

  You are developing a solution to store documents in Azure Blob storage. Customers upload documents to multiple containers. Documents consist of PDF, CSV, Microsoft Office format and plain text files.

  The solution must process millions of documents across hundreds of containers. The solution must meet the following requirements:

  1. Documents must be categorized by a customer identifier as they are uploaded to the storage account.

  2. Allow filtering by the customer identifier.

  3. Allow searching of information contained within a document

  4. Minimize costs.

  You create and configure a standard general-purpose v2 storage account to support the solution.

  You need to implement the solution.

  What should you implement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Azure Blob index tags

  As datasets get larger, finding a specific object in a sea of data can be difficult. Blob index tags provide data management and discovery capabilities by using key-value index tag attributes. You can categorize and find objects within a single container or across all containers in your storage account. As data requirements change, objects can be dynamically categorized by updating their index tags. Objects can remain in-place with their current container organization.

  Box 2: Azure Cognitive Search

  Only index tags are automatically indexed and made searchable by the native Blob Storage service. Metadata can't be natively indexed or searched. You must use a separate service such as Azure Search.

  Azure Cognitive Search is the only cloud search service with built-in AI capabilities that enrich all types of information to help you identify and explore relevant content at scale. Use cognitive skills for vision, language, and speech, or use custom machine learning models to uncover insights from all types of content.

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-manage-find-blobs

  https://azure.microsoft.com/en-us/services/search/

• Question 248:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.

  If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.

  You need to store the intake forms according to the requirements.

  Solution:

  1. Create an Azure Cosmos DB database with Storage Service Encryption enabled.

  2. Store the intake forms in the Azure Cosmos DB database.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead use an Azure Key vault and public key encryption. Store the encrypted from in Azure Storage Blob storage.

• Question 249:

  HOTSPOT

  You are building a website to access project data related to teams within your organization. The website does not allow anonymous access. Authentication is performed using an Azure Active Directory (Azure AD) app named internal.

  The website has the following authentication requirements:

  1. Azure AD users must be able to login to the website.

  2. Personalization of the website must be based on membership in Active Directory groups.

  You need to configure the application's manifest to meet the authentication requirements.

  How should you configure the manifest? To answer, select the appropriate configuration in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: groupMembershipClaims

  Scenario: Personalization of the website must be based on membership in Active Directory groups.

  Group claims can also be configured in the Optional Claims section of the Application Manifest.

  Enable group membership claims by changing the groupMembershipClaim

  The valid values are:

  "All"

  "SecurityGroup"

  "DistributionList"

  "DirectoryRole" Box 2: oauth2Permissions

  Scenario: Azure AD users must be able to login to the website.

  oauth2Permissions specifies the collection of OAuth 2.0 permission scopes that the web API (resource) app exposes to client apps. These permission scopes may be granted to client apps during consent.

  Incorrect Answers:

  oauth2AllowImplicitFlow. oauth2AllowImplicitFlow specifies whether this web app can request OAuth2.0 implicit flow access tokens. The default is false. This flag is used for browser-based apps, like Javascript single-page apps.

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-fed-group-claims

• Question 250:

  You are developing a web application that uses the Microsoft identity platform for user and resource authentication. The web application calls several REST APIs.

  A REST API call must read the user's calendar. The web application requires permission to send an email as the user.

  You need to authorize the web application and the API.

  Which parameter should you use?

  A. tenant
  B. code_challenge
  C. state
  D. client_id
  E. scope
  E. scope

  ---

  Explanation

  Microsoft identity platform and OAuth 2.0 authorization code flow, Request an authorization code

  https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize?

  The authorization code flow begins with the client directing the user to the /authorize endpoint. In this request, the client requests the openid, offline_access, and

  https://graph.microsoft.com/mail.read

  permissions from the user.

  Parameters include:

  * scope required

  A space-separated list of scopes that you want the user to consent to. For the /authorize leg of the request, this parameter can cover multiple resources. This value allows your app to get consent for multiple web APIs you want to call.

  Incorrect:

  * tenant required

  The {tenant} value in the path of the request can be used to control who can sign into the application. Valid values are common, organizations, consumers, and tenant identifiers. For guest scenarios where you sign a user from one tenant into another tenant, you must provide the tenant identifier to sign them into the resource tenant.

  * code_challenge recommended / required

  Used to secure authorization code grants by using Proof Key for Code Exchange (PKCE). Required if code_challenge_method is included. This parameter is now recommended for all application types, both public and confidential clients, and required by the Microsoft identity platform for single page apps using the authorization code flow.

  * client_id

  The Application (client) ID that the Azure portal - App registrations experience assigned to your app.

  https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow