Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 251:

  DRAG DROP

  You are preparing to deploy a medical records application to an Azure virtual machine (VM). The application will be deployed by using a VHD produced by an on-premises build server.

  You need to ensure that both the application and related data are encrypted during and after deployment to Azure.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Step 1: Encrypt the on-premises VHD by using BitLocker without a TPM. Upload the VM to Azure Storage

  Step 2: Run the Azure PowerShell command Set-AzureRMVMOSDisk

  To use an existing disk instead of creating a new disk you can use the Set-AzureRMVMOSDisk command.

  Example:

  $osDiskName = $vmname+'_osDisk'

  $osDiskCaching = 'ReadWrite'

  $osDiskVhdUri = "

  https://$stoname.blob.core.windows.net/vhds/"+$vmname+"_os.vhd"

  $vm = Set-AzureRmVMOSDisk -VM $vm -VhdUri $osDiskVhdUri -name $osDiskName -Create

  Step 3: Run the Azure PowerShell command Set-AzureRmVMDiskEncryptionExtension

  Use the Set-AzVMDiskEncryptionExtension cmdlet to enable encryption on a running IaaS virtual machine in Azure.

  Incorrect:

  Not TPM: BitLocker can work with or without a TPM. A TPM is a tamper resistant security chip on the system board that will hold the keys for encryption and check the integrity of the boot sequence and allows the most secure BitLocker implementation. A VM does not have a TPM.

  References:

  https://www.itprotoday.com/iaaspaas/use-existing-vhd-azurerm-vm

• Question 252:

  You develop and deploy a web app to Azure App Service. The Azure App Service uses a Basic plan in a single region.

  Users report that the web app is responding slow. You must capture the complete call stack to help identify performance issues in the code. Call stack data must be correlated across app instances. You must minimize cost and impact to users on the web app.

  You need to capture the telemetry.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Restart all apps in the App Service plan.
  B. Enable Application Insights site extensions.
  C. Upgrade the Azure App Service plan to Premium.
  D. Enable Profiler.
  E. Enable the Always On setting for the app service.
  F. Enable Snapshot debugger.
  G. Enable remote debugging.
  D. Enable Profiler.
  E. Enable the Always On setting for the app service.
  F. Enable Snapshot debugger.

  ---

  Explanation

  Azure Web Apps as well as API Apps and WebJobs can now be remotely profiled. If your process is running slower than expected, or the latency of HTTP requests are higher than normal and the CPU usage of the process is also pretty high, you can remotely profile your process and get the CPU sampling call stacks to analyze the process activity and code hot paths.

  DE: Let's say you're running a web performance test. You'll need traces to understand how your web app is running under load.

  Generate traffic to your web app by starting a web performance test or starting a Profiler on-demand session.

  View the Profiler traces after your load test or Profiler session.

  Read the Profiler performance data and call stack.

  Enable Profiler for Azure App Service apps

  First Verify "Always On" setting is enabled, and then Enable Application Insights and Profiler.

  F (not G): Enhancements in Application Insights Profiler and Snapshot Debugger (2018)

  We are pleased to announce a series of improvements on Application Insights Profiler and Snapshot Debugger. Profiler identifies the line of code that slowed down the web app performance under load. Snapshot Debugger captures runtime exception call stack and local variables to identify the issue in code. To ensure users can easily and conveniently use the tools, we delivered the following new features for Profiler and Snapshot Debugger.

  Incorrect:

  Not B: Application monitoring for Azure App Service and ASP.NET

  Enabling monitoring on your ASP.NET-based web applications running on Azure App Service is now easier than ever. Previously, you needed to manually instrument your app. Now the latest extension/agent is built into the App Service image by default.

  Manually adding an Application Insights site extension via Development Tools > Extensions is deprecated. This method of extension installation was dependent on manual updates for each new version. The latest stable release of the extension is now preinstalled as part of the App Service image.

  Not C: While you can use the Profiler at no extra cost, your web app must be hosted in the basic tier of the Web Apps feature of Azure App Service, at minimum.

  https://learn.microsoft.com/en-us/azure/azure-monitor/profiler/profiler-data

  https://azure.microsoft.com/en-us/blog/enhancements-in-application-insights-profiler-and-snapshot-debugger/

• Question 253:

  HOTSPOT

  You have an app that stores player scores for an online game. The app stores data in Azure tables using a class named PlayerScore as the table entity. The table is populated with 100,000 records.

  You are reviewing the following section of code that is intended to retrieve 20 records where the player score exceeds 15,000. (Line numbers are included for reference only.)

  

  You have the following code. (Line numbers are included for reference only.)

  

  You store customer information in an Azure Cosmos database. The following data already exists in the database:

  

  You develop the following code. (Line numbers are included for reference only.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Box 2: Yes

  The TableQuery.Take method defines the upper bound for the number of entities the query returns.

  Example:

  query.Take(10);

  Box 3: Yes

  Box 4: Yes

  References: https://www.vkinfotek.com/azureqa/how-do-i-query-azure-table-storage-using-tablequery-class.html

• Question 254:

  You need to implement an aggregate of telemetry values for distributor API calls.

  Which Application Insights API method should you use?

  A. TrackTrace
  B. Track Exception
  C. TrackEvent
  D. TrackDependency
  E. TrackMetric
  E. TrackMetric

• Question 255:

  You have an Azure subscription named Sub1 that contains a resource group named RG1 and a Service Bus queue named SB1.

  You plan to implement an Azure Event Grid push event subscription that will deliver an event to SB1 whenever a resource is created, modified, or deleted in RG1. You must minimize the development and configuration efforts.

  You need to create an Event Grid topic for your planned implementation.

  Which type of event topic should you create?

  A. event domain
  B. custom
  C. system
  D. namespace
  C. system

• Question 256:

  HOTSPOT

  You are creating a CLI script that creates an Azure web app related services in Azure App Service. The web app uses the following variables:

  

  You need to automatically deploy code from GitHub to the newly created web app.

  How should you complete the script? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: az appservice plan create

  The azure group creates command successfully returns JSON result. Now we can use resource group to create a azure app service plan

  Box 2: az webapp create

  Create a new web app..

  Box 3: --plan $webappname

  ..with the serviceplan we created in step.

  Box 4: az webapp deployment

  Continuous Delivery with GitHub. Example:

  az webapp deployment source config --name firstsamplewebsite1 --resource-group websites--repo-url $gitrepo --branch master --git-token $token

  Box 5: --repo-url $gitrepo --branch master --manual-integration

  References:

  https://medium.com/@satish1v/devops-your-way-to-azure-web-apps-with-azure-cli-206ed4b3e9b1

• Question 257:

  You are developing a web application that runs as an Azure Web App. The web application stores data in Azure SQL Database and stores files in an Azure Storage account. The web application makes HTTP requests to external services as part of normal operations.

  The web application is instrumented with Application Insights. The external services are OpenTelemetry compliant.

  You need to ensure that the customer ID of the signed in user is associated with all operations throughout the overall system.

  What should you do?

  A. Add the customer ID for the signed in user to the CorrelationContext in the web application
  B. On the current SpanContext, set the TraceId to the customer ID for the signed in user
  C. Set the header Ocp-Apim-Trace to the customer ID for the signed in user
  D. Create a new SpanContext with the TraceFlags value set to the customer ID for the signed in user
  A. Add the customer ID for the signed in user to the CorrelationContext in the web application

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/azure-monitor/app/correlation

• Question 258:

  DRAG DROP

  You need to add code at line EG15 in EventGridController.cs to ensure that the Log policy applies to all services.

  How should you complete the code? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Scenario, Log policy: All Azure App Service Web Apps must write logs to Azure Blob storage.

  Box 1: Status

  Box 2: Succeeded

  Box 3: operationName

  Microsoft.Web/sites/write is resource provider operation. It creates a new Web App or updates an existing one.

  https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations

• Question 259:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You develop Azure solutions.

  You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.

  You need to obtain an Azure Resource Manager access token.

  Solution: Use the Reader role-based access control (RBAC) role to authenticate the VM with Azure Resource Manager.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead run the Invoke-RestMethod cmdlet to make a request to the local managed identity for Azure resources endpoint.

  https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm

• Question 260:

  HOTSPOT

  You need to insert code at line LE03 of LoginEvent.cs to ensure that all authentication events are processed correctly.

  How should you complete the code? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: id

  id is a unique identifier for the event.

  Box 2: eventType

  eventType is one of the registered event types for this event source.

  Box 3: dataVersion

  dataVersion is the schema version of the data object. The publisher defines the schema version.

  Scenario: Authentication events are used to monitor users signing in and signing out. All authentication events must be processed by Policy service. Sign outs must be processed as quickly as possible.

  The following example shows the properties that are used by all event publishers:

  [

  {

  "topic": string,

  "subject": string,

  "id": string,

  "eventType": string,

  "eventTime": string,

  "data":{

  object-unique-to-each-publisher

  },

  "dataVersion": string,

  "metadataVersion": string

  }

  ] Reference:

  https://docs.microsoft.com/en-us/azure/event-grid/event-schema