Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 271:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.

  When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.

  You need to design the process that starts the photo processing.

  Solution: Use the Azure Blob Storage change feed to trigger photo processing.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  The change feed is a log of changes that are organized into hourly segments but appended to and updated every few minutes. These segments are created only when there are blob change events that occur in that hour.

  Instead catch the triggered event, so move the photo processing to an Azure Function triggered from the blob upload.

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-change-feed

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-event-overview

• Question 272:

  HOTSPOT

  You develop a news and blog content app for Windows devices.

  A notification must arrive on a user's device when there is a new article available for them to view.

  You need to implement push notifications.

  How should you complete the code segment? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: NotificationHubClient

  Box 2: NotificationHubClient

  Box 3: CreateClientFromConnectionString

  // Initialize the Notification Hub

  NotificationHubClient hub = NotificationHubClient.CreateClientFromConnectionString(listenConnString, hubName); Box 4: SendWindowsNativeNotificationAsync

  Send the push notification.

  var result = await hub.SendWindowsNativeNotificationAsync(windowsToastPayload); Reference:

  https://docs.microsoft.com/en-us/azure/notification-hubs/notification-hubs-push-notification-registration-management

  https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/app-service-mobile/app-service-mobile-windows-store-dotnet-get-started-push.md

• Question 273:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.

  You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level. You need to configure authorization.

  Solution:

  1. Create a new Azure AD application's manifest, set value of the groupMembershipClaims option to All.

  2. In the website, use the value of the groups claim from the JWI for the user to determine permissions.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  To configure Manifest to include Group Claims in Auth Token 1. Go to Azure Active Directory to configure the Manifest. Click on Azure Active Directory, and go to App registrations to find your application

  2. Click on your application (or search for it if you have a lot of apps) and edit the Manifest by clicking on it.

  3. Locate the "groupMembershipClaims" setting. Set its value to either "SecurityGroup" or "All". To help you decide which:

  "SecurityGroup" - groups claim will contain the identifiers of all security groups of which the user is a member.

  "All" - groups claim will contain the identifiers of all security groups and all distribution lists of which the user is a member

  Now your application will include group claims in your manifest and you can use this fact in your code.

  References:

  https://blogs.msdn.microsoft.com/waws/2017/03/13/azure-app-service-authentication-aad-groups/

• Question 274:

  DRAG DROP

  You are developing an application to use Azure Blob storage. You have configured Azure Blob storage to include change feeds.

  A copy of your storage account must be created in another region. Data must be copied from the current storage account to the new storage account directly between the storage servers.

  You need to create a copy of the storage account in another region and copy the data.

  In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  To move a storage account, create a copy of your storage account in another region. Then, move your data to that account by using AzCopy, or another tool of your choice.

  The steps are:

  1. Export a template.

  2. Modify the template by adding the target region and storage account name.

  3. Deploy the template to create the new storage account.

  4. Configure the new storage account.

  5. Move data to the new storage account.

  6. Delete the resources in the source region.

  Note: You must enable the change feed on your storage account to begin capturing and recording changes. You can enable and disable changes by using Azure Resource Manager templates on Portal or Powershell.

  https://docs.microsoft.com/en-us/azure/storage/common/storage-account-move

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-change-feed

• Question 275:

  You develop a gateway solution for a public facing news API. The news API back end is implemented as a RESTful service and uses an OpenAPI specification.

  You need to ensure that you can access the news API by using an Azure API Management service instance.

  Which Azure PowerShell command should you run?

  A. Import-AzureRmApiManagementApi -Context $ApiMgmtContext -SpecificationFormat "Swagger" -SpecificationPath $SwaggerPath -Path $Path
  B. New-AzureRmApiManagementBackend -Context $ApiMgmtContext -Url $Url -Protocol http
  C. New-AzureRmApiManagement -ResourceGroupName $ResourceGroup -Name $Name -Location $Location -Organization $Org -AdminEmail $AdminEmail
  D. New-AzureRmApiManagementBackendProxy -Url $ApiUrl
  D. New-AzureRmApiManagementBackendProxy -Url $ApiUrl

  ---

  Explanation

  New-AzureRmApiManagementBackendProxy creates a new Backend Proxy Object which can be piped when creating a new Backend entity.

  Example: Create a Backend Proxy In-Memory Object PS C:\>$secpassword = ConvertTo-SecureString "PlainTextPassword" -AsPlainText -Force

  PS C:\>$proxyCreds = New-Object System.Management.Automation.PSCredential ("foo", $secpassword) PS C:\>$credential = New-AzureRmApiManagementBackendProxy -Url "

  http://12.168.1.1:8080"

  -ProxyCredential $proxyCreds

  PS C:\>$apimContext = New-AzureRmApiManagementContext -ResourceGroupName "Api-Default-WestUS" -ServiceName "contoso" PS C:\>$backend = New-AzureRmApiManagementBackend -Context $apimContext -BackendId 123 -Url '

  https://contoso.com/awesomeapi'

  -Protocol http -Title "first backend" -SkipCertificateChainValidation $true -Proxy $credential - Description "backend with proxy server" Creates a Backend Proxy Object and sets up Backend

  Incorrect Answers:

  A: The Import-AzureRmApiManagementApi cmdlet imports an Azure API Management API from a file or a URL in Web Application Description Language (WADL), Web Services Description Language (WSDL), or Swagger format.

  B: New-AzureRmApiManagementBackend creates a new backend entity in Api Management.

  C: The New-AzureRmApiManagement cmdlet creates an API Management deployment in Azure API Management.

  References:

  https://docs.microsoft.com/en-us/powershell/module/azurerm.apimanagement/new-azurermapimanagementbackendproxy?view=azurermps-6.13.0

• Question 276:

  You develop applications that integrate with a Microsoft Entra tenant.

  You plan to implement a permission classification in the tenant.

  You need to select permissions to include in your classification.

  Which permissions should you select?

  A. delegated permissions that require only user consent
  B. delegated permissions that require admin consent
  C. app-only access permissions that require only user consent
  D. app-only access permissions that require admin consent
  B. delegated permissions that require admin consent

• Question 277:

  HOTSPOT

  You are developing a web application that makes calls to the Microsoft Graph API. You register the application in the Azure portal and upload a valid X509 certificate.

  You create an appsettings.json file containing the certificate name, client identifier for the application, and the tenant identifier of the Microsoft Entra ID. You create a method named ReadCertificate to return the X509 certificate by name.

  You need to implement code that acquires a token by using the certificate.

  

  

  ---

  ConfidentialClientApplication

  scopes

• Question 278:

  You are developing an Azure Function App that processes images that are uploaded to an Azure Blob container.

  Images must be processed as quickly as possible after they are uploaded, and the solution must minimize latency. You create code to process images when the Function App is triggered.

  You need to configure the Function App.

  What should you do?

  A. Use an App Service plan. Configure the Function App to use an Azure Blob Storage input trigger.
  B. Use a Consumption plan. Configure the Function App to use an Azure Blob Storage trigger.
  C. Use a Consumption plan. Configure the Function App to use a Timer trigger.
  D. Use an App Service plan. Configure the Function App to use an Azure Blob Storage trigger.
  E. Use a Consumption plan. Configure the Function App to use an Azure Blob Storage input trigger.
  B. Use a Consumption plan. Configure the Function App to use an Azure Blob Storage trigger.

  ---

  Explanation

  The Blob storage trigger starts a function when a new or updated blob is detected. The blob contents are provided as input to the function.

  The Consumption plan limits a function app on one virtual machine (VM) to 1.5 GB of memory.

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-blob-trigger

• Question 279:

  HOTSPOT

  You plan to deploy a web app to App Service on Linux. You create an App Service plan. You create and push a custom Docker image that contains the web app to Azure Container Registry.

  You need to access the console logs generated from inside the container in real-time.

  How should you complete the Azure CLI command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: config

  To Configure logging for a web app use the command:

  az webapp log config

  Box 2: --docker-container-logging

  Syntax include:

  az webapp log config [--docker-container-logging {filesystem, off}]

  Box 3: webapp

  To download a web app's log history as a zip file use the command:

  az webapp log download

  Box 4: download

  https://docs.microsoft.com/en-us/cli/azure/webapp/log

• Question 280:

  You are developing a web app that uses Azure Active Directory (Azure AD) for authentication.

  You want to configure the web app to use multifactor authentication.

  What should you do?

  A. Enable mobile app authentication.
  B. In Azure AD conditional access, enable the baseline policy.
  C. In Azure AD, create a conditional access policy.
  D. Install the Azure Multi-Factor Authentication Server.
  C. In Azure AD, create a conditional access policy.

  ---

  Explanation

  MFA is enabled by conditional access policy. It is the most flexible means to enable two-step verification for your users. Enabling using conditional access policy only works for Azure MFA in the cloud and is a premium feature of Azure AD.

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-getstarted