Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 271:

  You develop and deploy an ASP.NET Core application that connects to an Azure Database for MySQL instance.

  Connections to the database appear to drop intermittently and the application code does not handle the connection failure.

  You need to handle the transient connection errors in code by implementing retries.

  What are three possible ways to achieve this goal? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Increase connection repeat attempts exponentially up to 120 seconds.

  B. Close the database connection and immediately report an error.

  C. Wait five seconds before repeating the connection attempt to the database.

  D. Disable connection pooling and configure a second Azure Database for MySQL instance.

  E. Set a maximum number of connection attempts to 10 and report an error on subsequent connections.

  Correct Answer: ACE

  A transient error is an error that will resolve itself. Transient errors can occur for example when hardware or network failure happens.

  A best practice for designing and developing applications in the cloud is to expect transient errors. Assume they can happen in any component at any time and have the appropriate logic to handle these situations.

  Transient errors should be handled using retry logic.

  A good pattern to follow is:

  Wait for 5 seconds before your first retry.

  For each following retry, the increase the wait exponentially, up to 60 seconds.

  Set a max number of retries at which point your application considers the operation failed.

  Reference: https://learn.microsoft.com/en-us/azure/mysql/single-server/concepts-connectivity#handling-transient-errors

• Question 272:

  A company maintains multiple web and mobile applications. Each application uses custom in-house identity providers as well as social identity providers.

  You need to implement single sign-on (SSO) for all the applications. What should you do?

  A. Use Azure Active Directory B2C (Azure AD B2C) with custom policies.

  B. Use Azure Active Directory B2B (Azure AD B2B) and enable external collaboration.

  C. Use Azure Active Directory B2C (Azure AD B2C) with user flows.

  D. Use Azure Active Directory B2B (Azure AD B2B).

  Correct Answer: A

  Based on this article: https://docs.microsoft.com/en-us/azure/active-directory/external-identities/external-collaboration-settings-configure External collaboration settings let you specify what roles in your organization can invite external users for B2B collaboration. These settings also include options for allowing or blocking specific domains, and options for restricting what external guest users can see in your Azure AD directory. https://docs.microsoft.com/en-us/azure/active-directory-b2c/custom-policy-reference-sso

• Question 273:

  You are developing a user portal for a company.

  You need to create a report for the portal that lists information about employees who are subject matter experts for a specific topic. You must ensure that administrators have full control and cosent over the data.

  Which technology should you use?

  A. Microsoft Graph connectors

  B. Microosft graph API

  C. Microsoft Graph data connect

  Correct Answer: C

  Data Connect grants a more granular control and consent model: you can manage data, see who is accessing it, and request specific properties of an entity. This enhances the Microsoft Graph model, which grants or denies applications

  access to entire entities.

  Microsoft Graph Data Connect augments Microsoft Graph's transactional model with an intelligent way to access rich data at scale. The data covers how workers communicate, collaborate, and manage their time across all the applications

  and services in Microsoft 365.

  Incorrect:

  Not B: The Microsoft Graph API is a RESTful web API that enables you to access Microsoft Cloud service resources. After you register your app and get authentication tokens for a user or service, you can make requests to the Microsoft

  Graph API.

  A simplistic definition of a Graph API is an API that models the data in terms of nodes and edges (objects and relationships) and allows the client to interact with multiple nodes in a single request.

  Not C: Microsoft Graph connectors, your organization can index third-party data so that it appears in Microsoft Search results.

  With Microsoft Graph connectors, your organization can index third-party data so that it appears in Microsoft Search results.

  Reference: https://docs.microsoft.com/en-us/graph/data-connect-concept-overview

• Question 274:

  You develop Azure Web Apps for a commercial diving company. Regulations require that all divers fill out a health questionnaire every 15 days after each diving job starts.

  You need to configure the Azure Web Apps so that the instance count scales up when divers are filling out the questionnaire and scales down after they are complete.

  You need to configure autoscaling.

  What are two possible auto scaling configurations to achieve this goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Recurrence profile

  B. CPU usage-based autoscaling

  C. Fixed date profile

  D. Predictive autoscaling

  Correct Answer: BD

  B. CPU usage-based autoscaling

  D. Predictive autoscaling

  A. Recurrence profile is used to schedule the scaling of resources at specific times or dates, but it does not meet the requirement to scale up when divers are filling out the questionnaire and scale down after they are complete. It only triggers scaling based on a set schedule, not based on actual usage.

  C. Fixed date profile is used to specify the number of instances at a specific date and time, but it also does not meet the requirement to dynamically scale based on actual usage. It only sets a fixed number of instances and does not adjust based on changing workloads.

• Question 275:

  You are developing several microservices to deploy to a Azure Service cluster. The microservices manage data stored in Azure Cosmos DB and Azure Blob storage. The data is secured by using customer-managed keys stored in Aue Key

  Vault.

  You must automate key rotation for all Key Vault keys and allow for manual key rotation. Keys must rotate every three months. Notifications Of expiring keys must be sent before key expiry.

  You need to configure key rotation and enable key expiry notifications.

  Which two actions should you perform? Each correct answer presents part Of solution.

  NOTE: Each correct selection is worth

  A. Create and configure a new Azure Event Grid instance.

  B. Create configure a key rotation policy during key creation

  C. Create and assign an Azure Key Vault access

  D. Configure Azure Key Vault

  Correct Answer: AB

  https://learn.microsoft.com/en-us/azure/key-vault/keys/how-to-configure-key-rotation

• Question 276:

  You are developing a .Net web application that stores data is Azure Consmos DB. The application must use the Core API and allow millions of reads and writes. The Azure Cosmos DII account has been created with multiple write region

  enabled. The application has been deployed to the East US2 and Central US region.

  You need to update the application to support multi-region writes.

  What are two possible ways to achieve this goal? Each correct answer presents parts of the solutions.

  NOTE: Each correct selection is worth one point.

  A. Update the ConnectionPolicy class for the Cosmos client and populate the PreferredLocations property based on the geo-proximity of the application.

  B. Update Azure Cosmos DB to use the Strong consistency level. Add indexed properties to the container to indicate region.

  C. Update the ConnectionPolicy class for the Cosmos client and set the UseMultipleWriteLocations property to true.

  D. Create and deploy a custom conflict resolution policy.

  E. Update Azure Cosmos DB to use the Session consistency level. Send the SessionToken property value from the FeedResponse object of the write action to the end- user by using a cookie.

  Correct Answer: CD

  C: The UseMultipleWriteLocations of the ConnectionPolicy class gets or sets the flag to enable writes on any locations (regions) for geo-replicated database accounts in the Azure Cosmos DB service.

  Note: Once an account has been created with multiple write regions enabled, you must make two changes in your application to the ConnectionPolicy for the Cosmos client to enable the multi-region writes in Azure Cosmos DB. Within the ConnectionPolicy, set UseMultipleWriteLocations to true and pass the name of the region where the application is deployed to ApplicationRegion. This will populate the PreferredLocations property based on the geo-proximity from location passed in. If a new region is later added to the account, the application does not have to be updated or redeployed, it will automatically detect the closer region and will auto-home on to it should a regional event occur.

  Azure core API application " ConnectionPolicy class" cosmos db multiple write regions enabled

  D: With multi-region writes, when multiple clients write to the same item, conflicts may occur. When a conflict occurs, you can resolve the conflict by using different conflict resolution policies.

  Note: Conflict resolution policy can only be specified at container creation time and cannot be modified after container creation.

  Reference: https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.documents.client.connectionpolicy https://docs.microsoft.com/en-us/azure/cosmos-db/sql/how-to-multi-master https://docs.microsoft.com/en-us/azure/cosmos-db/sql/how-to-manage-conflicts

• Question 277:

  You are developing a mobile app that uses an API which stores geospabal data in Azure Cosmos Dand The app will be used to find restaurants in a particular area and related information including food types, menu information and the optimal route to a selected restaurant from the user's current location.

  Which Azure Cosmos DB API should you use for the API?

  A. MongoDB

  B. Gremlin

  C. Cassandra

  D. Core

  Correct Answer: A

• Question 278:

  You are developing an application to store information about the organizational structure for a company.

  Users must be able to determine which people report to a particular manager, the office where employees work, and the projects that are assigned to an employee.

  Which Azure Cosmos DB API should you use for the application?

  A. Core

  B. Cassandra

  C. Table API

  D. Gremlin

  E. MongoDB

  Correct Answer: E

• Question 279:

  You are a developing a SaaS application that stores data as key value pairs.

  You must make multiple editions of the application available. In the lowest cost edition, the performance must be best-effort, and there is no regional failover.

  In higher cos! editions customers must be able to select guaranteed performance and support for multiple regions. Azure costs must be minimized.

  Which Azure Cosmos OB API should you use for the application?

  A. Core

  B. MongoDB

  C. Cassandra

  D. Table API

  Correct Answer: C

• Question 280:

  You are developing an application to store business-critical data in Azure Blob storage. The application must meet the following requirements:

  1.

  Data must not be modified or deleted for a user-specified interval.

  2.

  Data must be protected from overwntes and deletes.

  3.

  Data must be written once and allowed to be read many times.

  You need to protect the data fen the Azure Blob storage account.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Configure a time-based retention policy for the storage account.

  B. Create an account shared-access signature (SAS).

  C. Enable the blob change feed for the storage account.

  D. Enable version-level immutability support for the storage account.

  E. Enable point-in-time restore for containers in the storage account.

  F. Create a service shared-access signature (SAS).

  Correct Answer: AD

  A. Configure a time-based retention policy for the storage account

  -

  A time-based retention policy stores blob data in a Write-Once, Read-Many (WORM) format for a specified interval. When a time-based retention policy is set, clients can create and read blobs, but can't modify or delete them. After the retention interval has expired, blobs can be deleted but not overwritten. https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-time-based-retention-policy-overview

  D.

  Before you can apply a time-based retention policy to a blob version, you must enable support for version-level immutability. https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-policy-configure-version-scope?tabs=azure-portal