Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 21:

  You are a developer for a company that recently transitioned to using workspace-based Application Insights for a C# .NET web application that runs on Azure.

  The application has intermittent performance issues.

  You need to use the Al-powered code analysis feature in Application Insights to help diagnose the problem.

  What should you do?

  A. Enable and configure smart detection.
  B. Use the Application Map to visualize dependencies and interactions, then trace the performance issues through the map.
  C. Configure continuous export of telemetry data to Azure Storage.
  D. Enable the profiler and snapshot debugger.
  E. Enable and configure availability tests.
  D. Enable the profiler and snapshot debugger.

• Question 22:

  HOTSPOT

  An organization deploys a Mob storage account. Users take multiple snapshots of the blob storage account over time.

  You need to delete all snapshots or the blob storage account. You must not delete the blob storage account itself.

  How should you complete the code segment? To answer select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: delete_snapshots - # Delete only the snapshot (blob itself is retained) blob_client.delete_blob(delete_snapshots="only")

  Box 2: only -

  https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/storage/azure-storage-blob/samples/blob_samples_common.py

• Question 23:

  You have a workspace-based Azure Application Insights resource named Insights1 and an Azure App Service Web App named App1. Insights1 collects telemetry generated by App1.

  You plan to test the availability of App1 by using Insights1. The test must include the following tasks:

  1. Parse dependent requests.

  2. Validate TLS certificates.

  3. Configure custom request headers.

  You must minimize development and implementation efforts.

  You need to implement the Application Insights availability test that will deliver the required functionality.

  Which availability test should you implement?

  A. Custom TrackAvailability test
  B. Standard test
  C. URL ping test
  D. Multi-step web test
  D. Multi-step web test

• Question 24:

  HOTSPOT

  You are developing an Azure App Service hosted ASP.NET Core web app to deliver video on-demand streaming media. You enable an Azure Content Delivery Network (CDN) Standard for the web endpoint. Customer videos are downloaded from the web app by using the following example URL:http//www.contoso.com/content.p4?quality=1

  All media content must expire from the cache after one hour. Customer videos with varying quality must be delivered to the closest regional point of presence (POP) node.

  You need to configure Azure CDN caching rules.

  Which options should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Override

  Override: Ignore origin-provided cache duration; use the provided cache duration instead. This will not override cache-control: no-cache.

  Set if missing: Honor origin-provided cache-directive headers, if they exist; otherwise, use the provided cache duration.

  Incorrect:

  Bypass cache: Do not cache and ignore origin-provided cache-directive headers.

  Box 2: 1 hour

  All media content must expire from the cache after one hour.

  Box 3: Cache every unique URL

  Cache every unique URL: In this mode, each request with a unique URL, including the query string, is treated as a unique asset with its own cache. For example, the response from the origin server for a request for example.ashx?q=test1 is cached at the POP node and returned for subsequent caches with the same query string. A request for example.ashx?q=test2 is cached as a separate asset with its own time-to-live setting.

  Incorrect Answers:

  Bypass caching for query strings: In this mode, requests with query strings are not cached at the CDN POP node. The POP node retrieves the asset directly from the origin server and passes it to the requestor with each request.

  Ignore query strings: Default mode. In this mode, the CDN point-of-presence (POP) node passes the query strings from the requestor to the origin server on the first request and caches the asset. All subsequent requests for the asset that are served from the POP ignore the query strings until the cached asset expires.

  References:

  https://docs.microsoft.com/en-us/azure/cdn/cdn-query-string

• Question 25:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet.

  You need to ensure that users who connect to Azure AD via the internet using an unidentified IP address, are automatically instructed to change their passwords.

  Solution: You configure the use of Azure Key Vault.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy

• Question 26:

  DRAG DROP

  You are developing a REST web service. Customers will access the service by using an Azure API Management instance.

  The web service does not correctly handle conflicts. Instead of returning an HTTP status code of 409, the service returns a status code of 500. The body of the status message contains only the word conflict.

  You need to ensure that conflicts produce the correct response.

  How should you complete the policy? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: on-error

  Policies in Azure API Management are divided into inbound, backend, outbound, and on- error.

  If there is no on-error section, callers will receive 400 or 500 HTTP response messages if an error condition occurs.

  Box 2: context

  Box 3: context

  Box 4: set-status

  The return-response policy aborts pipeline execution and returns either a default or custom response to the caller. Default response is 200 OK with no body. Custom response can be specified via a context variable or policy statements.

  Syntax:

  <return-response response-variable-name="existing context variable"> <set-header/>

  <set-body/>

  <set-status/>

  </return-response> Box 5: on-error

• Question 27:

  You need to monitor ContentUploadService accourding to the requirements.

  Which command should you use?

  A. az monitor metrics alert create -n alert -g ... - -scopes ... - -condition "avg Percentage CPU > 8"
  B. az monitor metrics alert create -n alert -g ... - -scopes ... - -condition "avg Percentage CPU > 800"
  C. az monitor metrics alert create -n alert -g ... - -scopes ... - -condition "CPU Usage > 800"
  D. az monitor metrics alert create -n alert -g ... - -scopes ... - -condition "CPU Usage > 8"
  B. az monitor metrics alert create -n alert -g ... - -scopes ... - -condition "avg Percentage CPU > 800"

  ---

  Explanation

  Scenario: An alert must be raised if the ContentUploadService uses more than 80 percent of available CPU-cores

  https://docs.microsoft.com/sv-se/cli/azure/monitor/metrics/alert

• Question 28:

  HOTSPOT

  You need to configure security and compliance for the corporate website files.

  Which Azure Blob storage settings should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: role-based access control (RBAC)

  Azure Storage supports authentication and authorization with Azure AD for the Blob and Queue services via Azure role-based access control (Azure RBAC).

  Scenario: File access must restrict access by IP, protocol, and Azure AD rights.

  Box 2: storage account type

  Scenario: The website uses files stored in Azure Storage

  Auditing of the file updates and transfers must be enabled to comply with General Data Protection Regulation (GDPR).

  Creating a diagnostic setting:

  1. Sign in to the Azure portal.

  2. Navigate to your storage account.

  3. In the Monitoring section, click Diagnostic settings (preview).

  

  4. Choose file as the type of storage that you want to enable logs for.

  5. Click Add diagnostic setting.

  https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction

  https://docs.microsoft.com/en-us/azure/storage/files/storage-files-monitoring

• Question 29:

  You are developing a set of RESTful APIs that will be consumed by external partners.

  You must expose the APIs securely through Azure API Management. You have the following requirements:

  1. Only authenticated and authorized clients must be able to access the APIs.

  2. Control over the number of API calls to prevent abuse and ensure fair usage must be implemented.

  3. Data transformation and validation on incoming requests and outgoing responses must be performed without modifying the back-end services.

  4. Insights into API usage patterns, performance metrics, and anomaly detection must be gathered.

  You need to implement the APIs.

  What should you do?

  A. Use OAuth 2.0 for authentication and authorization. Apply rate limit policies. Use inbound and outbound policies for transformation. Enable Azure Monitor for detailed analytics.
  B. Use subscription keys for authentication. Implement caching policies. Modify API code for transformation. Use Application insights for monitoring.
  C. Require clients to present client certificates. Use response caching policies. Implement request and response transformation in back-end services. Analyze logs with Log Analytics.
  D. Use basic authentication over HTTPS. Apply IP filtering policies. Perform transformation logic in the client application. Enable Azure diagnostics logs.
  A. Use OAuth 2.0 for authentication and authorization. Apply rate limit policies. Use inbound and outbound policies for transformation. Enable Azure Monitor for detailed analytics.

• Question 30:

  HOTSPOT

  You are developing a web application by using the Azure SDK. The web application accesses data m a zone-redundant BlockBlobStorage storage account

  The application must determine whether the data has changed since the application last reao the data. Update operations must use the latest data changes when writing data to the storages..................

  You need to implement the update operations.

  Which values should you use? To answer, select the appropriate option m the answer area.

  NOTE Each correct selection is worth one point.

  

  

  ---

  Box 1: Last Modified

  The Last-Modified response HTTP header contains a date and time when the origin server believes the resource was last modified. It is used as a validator to determine if the resource is the same as the previously stored one. Less accurate than an ETag header, it is a fallback mechanism.

  Box 2: If-Modified-Since

  Conditional Header If-Modified-Since: A DateTime value. Specify this header to perform the operation only if the resource has been modified since the specified time.

  Incorrect:

  Not ETag/If-Match

  Conditional Header If-Match: An ETag value. Specify this header to perform the operation only if the resource's ETag matches the value specified. For versions 2011-08-18 and newer, the ETag can be specified in quotes.

  https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Last-Modified

  https://docs.microsoft.com/en-us/rest/api/storageservices/specifying-conditional-headers-for-blob-service-operations