Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 311:

  Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-joined device. The cluster is located in a resource group.

  Developers have created an application named MyApp. MyApp was packaged into a container image.

  You need to deploy the YAML manifest file for the application.

  Solution: You install the Azure CLI on the device and run the kubectl apply myapp.yaml command.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  kubectl apply -f myapp.yaml applies a configuration change to a resource from a file or stdin.

  https://kubernetes.io/docs/reference/kubectl/overview/

  https://docs.microsoft.com/en-us/cli/azure/aks

• Question 312:

  HOTSPOT

  You are developing a solution that uses the Azure Storage Client library for .NET. You have the following code: (Line numbers are included for reference only.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  AcquireLeaseAsync does not specify leaseTime.

  leaseTime is a TimeSpan representing the span of time for which to acquire the lease, which will be rounded down to seconds. If null, an infinite lease will be acquired. If not null, this must be 15 to 60 seconds.

  Box 2: No

  The GetBlockBlobReference method just gets a reference to a block blob in this container.

  Box 3: Yes

  The BreakLeaseAsync method initiates an asynchronous operation that breaks the current lease on this container.

  https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.storage.blob.cloudblobcontainer.acquireleaseasync

  https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.storage.blob.cloudblobcontainer.getblockblobreference

  https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.storage.blob.cloudblobcontainer.breakleaseasync

• Question 313:

  You are developing a project management service by using ASP.NET. The service hosts conservations, files, to-do lists, and a calendar that users can interact with at any time.

  The application uses Azure Search for allowing users to search for keywords in the project data.

  You need to implement code that creates the object which is used to create indexes in the Azure Search service.

  Which two objects should you use? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. SearchCredentials
  B. SearchIndexClient
  C. SearchServiceClient
  D. SearchService
  B. SearchIndexClient
  C. SearchServiceClient

  ---

  Explanation

  The various client libraries define classes like Index, Field, and Document, as well as operations like Indexes.Create and Documents.Search on the SearchServiceClient and SearchIndexClient classes.

  Example:

  The sample application we'll be exploring creates a new index named "hotels", populates it with a few documents, then executes some search queries. Here is the main program, showing the overall flow:

  / This sample shows how to delete, create, upload documents and query an index static void Main(string[] args)

  {

  IConfigurationBuilder builder = new ConfigurationBuilder().AddJsonFile("appsettings.json");

  IConfigurationRoot configuration = builder.Build();

  SearchServiceClient serviceClient = CreateSearchServiceClient(configuration);

  Console.WriteLine("{0}", "Deleting index...\n");

  DeleteHotelsIndexIfExists(serviceClient); Console.WriteLine("{0}", "Creating index...\n");

  CreateHotelsIndex(serviceClient); ISearchIndexClient indexClient = serviceClient.Indexes.GetClient("hotels");

  References:

  https://docs.microsoft.com/en-us/azure/search/search-howto-dotnet-sdk

• Question 314:

  You develop Azure solutions.

  A .NET application needs to receive a message each time an Azure virtual machine finishes processing data. The messages must NOT persist after being processed by the receiving application.

  You need to implement the .NET object that will receive the messages.

  Which object should you use?

  A. QueueClient
  B. SubscriptionClient
  C. TopicClient
  D. CloudQueueClient
  A. QueueClient

  ---

  Explanation

  A queue allows processing of a message by a single consumer. Need a CloudQueueClient to access the Azure VM.

  Incorrect Answers:

  B, C: In contrast to queues, topics and subscriptions provide a one-to-many form of communication in a publish and subscribe pattern. It's useful for scaling to large numbers of recipients.

  https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-queues-topics-subscriptions

• Question 315:

  HOTSPOT

  You develop several Azure Functions app functions to process JSON documents from a third-party system. The third-party system publishes events to Azure Event Grid to include hundreds of event types, such as billing, inventory, and shipping updates.

  Events must be sent to a single endpoint for the Azure Functions app to process. The events must be filtered by event type before processing. You must have authorization and authentication control to partition your tenants to receive the event data.

  You need to configure Azure Event Grid.

  Which configuration should you use? To answer, select the appropriate values in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: custom topic

  Third party system endpoint to send events.

  Custom topics in Azure Event Grid

  An event grid topic provides an endpoint where the source sends events. The publisher creates the event grid topic, and decides whether an event source needs one topic or more than one topic. A topic is used for a collection of related events. To respond to certain types of events, subscribers decide which topics to subscribe to.

  Custom topics are application and third-party topics. When you create or are assigned access to a custom topic, you see that custom topic in your subscription.

  Box 2: event domain

  An event domain is a management tool for large numbers of Event Grid topics related to the same application. You can think of it as a meta-topic that can have thousands of individual topics.

  Event domains provide you the same architecture used by Azure services like Storage and IoT Hub to publish their events. They allow you to publish events to thousands of topics. Domains also give you authorization and authentication control over each topic so you can partition your tenants.

  Incorrect:

  * event subscription

  When designing your application, you have flexibility when deciding how many topics to create. For large solutions, create a custom topic for each category of related events. For example, consider an application that sends events related to modifying user accounts and processing orders. It's unlikely any event handler wants both categories of events. Create two custom topics and let event handlers subscribe to the one that interests them. For small solutions, you might prefer to send all events to a single topic. Event subscribers can filter for the event types they want.

  * system topic

  Azure Resource Manager template

  Here's some more sections around the filter section from the example in the quickstart. The ARM template defines the following resources.

  Azure storage account

  System topic for the storage account

  Event subscription for the system topic. You'll see the filter subsection in the event subscription section.

  In the following example, the event subscription filters for Microsoft.Storage.BlobCreated and Microsoft.Storage.BlobDeleted events.

  type": "Microsoft.EventGrid/systemTopics",

  "apiVersion": "2021-12-01",

  "name": "[parameters('systemTopicName')]",

  "location": "[parameters('location')]",

  "properties": {

  "source": "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccountName'))]",

  "topicType": "Microsoft.Storage.StorageAccounts"

  }, Reference:

  https://learn.microsoft.com/en-us/azure/event-grid/custom-topics

  https://learn.microsoft.com/en-us/azure/event-grid/event-domains

• Question 316:

  You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers.

  The Azure AD group must not be able to access the keys that are required to access the data.

  You need to restrict access to the Azure AD group.

  Which role-based access control should you use?

  A. DocumentDB Accounts Contributor
  B. Cosmos Backup Operator
  C. Cosmos DB Operator
  D. Cosmos DB Account Reader
  C. Cosmos DB Operator

  ---

  Explanation

  Azure Cosmos DB now provides a new RBAC role, Cosmos DB Operator. This new role lets you provision Azure Cosmos accounts, databases, and containers, but can't access the keys that are required to access the data. This role is intended for use in scenarios where the ability to grant access to Azure Active Directory service principals to manage deployment operations for Cosmos DB is needed, including the account, database, and containers.

  https://azure.microsoft.com/en-us/updates/azure-cosmos-db-operator-role-for-role-based-access-control-rbac-is-now-available/

• Question 317:

  HOTSPOT

  You are developing a web application that uses the Microsoft Identity platform for user and resource authentication. The web application called several REST APIs.

  You are implementing various authentication and authorization flows for the web application.

  You need to validate the claims in the authentication token.

  Which token type should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: ID

  The ID token is the core extension that OpenID Connect makes to OAuth 2.0. ID tokens are issued by the authorization server and contain claims that carry information about the user. They can be sent alongside or instead of an access token. Information in ID Tokens allows the client to verify that a user is who they claim to be. ID tokens are intended to be understood by third-party applications. ID tokens should not be used for authorization purposes.

  Box 2: Access

  An access token contains claims that you can use in Azure Active Directory B2C (Azure AD B2C) to identify the granted permissions to your APIs. When calling a resource server, an access token must be present in the HTTP request. An access token is denoted as access_token in the responses from Azure AD B2C.

  Box 3: Refresh

  Refresh token - Refresh tokens are used to acquire new ID tokens and access tokens in an OAuth 2.0 flow. They provide your application with long-term access to resources on behalf of users without requiring interaction with those users.

  Box 4: SAML

  https://learn.microsoft.com/en-us/azure/active-directory-b2c/tokens-overview

  https://learn.microsoft.com/en-us/samples/azure-samples/active-directory-dotnet-webapp-wsfederation/active-directory-dotnet-webapp-wsfederation/

• Question 318:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure App Service plan named APSPlan1 set to the Basic B1 pricing tier. APSPlan1 contains an App Service web app named WebApp1.

  You plan to enable schedule-based autoscaling for APSPlan1.

  You need to minimize the cost of running WebApp1.

  Solution: Scale out APSPlan1.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

• Question 319:

  DRAG DROP

  You have an Azure Cosmos DB for NoSQL account.

  You plan to develop two apps named App1 and App2 that will use the change feed functionality to track changes to containers. App1 will use the pull model and App2 will use the push model.

  You need to choose the method to track the most recently processed change in App1 and App2.

  Which component should you use? To answer, drag the appropriate components to the correct apps. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: Continuation token

  App1

  App1 will use the pull model.

  Change feed pull model in Azure Cosmos DB

  You can use the change feed pull model to consume the Azure Cosmos DB change feed at your own pace. Similar to the change feed processor, you can use the change feed pull model to parallelize the processing of changes across multiple change feed consumers.

  Compare to the change feed processor

  Many scenarios can process the change feed by using either the change feed processor or the change feed pull model. The pull model's continuation tokens and the change feed processor's lease container both work as bookmarks for the last processed item or batch of items in the change feed.

  Note: Reading change feed with a pull model

  The change feed pull model allows you to consume the change feed at your own pace. Changes must be requested by the client and there's no automatic polling for changes. If you want to permanently "bookmark" the last processed change (similar to the push model's lease container), you'll need to save a continuation token.

  Box 2: Lease container

  App2

  App2 will use the push model.

  The change feed processor's lease container works as bookmark for the last processed item or batch of items in the change feed.

  Note: Change feed processor library

  The change feed processor gives you more control of the change feed and still hides most complexity. The change feed processor library follows the observer pattern, where your processing function is called by the library. The change feed processor will automatically check for changes and, if changes are found, "push" them to the client.

  https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/change-feed-pull-model

  https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/read-change-feed

• Question 320:

  You develop a solution that uses Azure Virtual Machines (VMs).

  The VMs contain code that must access resources in an Azure resource group. You grant the VM access to the resource group in Resource Manager.

  You need to obtain an access token that uses the VMs system-assigned managed identity.

  Which two actions should you perform? Each correct answer presents part of the solution.

  A. Use PowerShell on a remote machine to make a request to the local managed identity for Azure resources endpoint.
  B. Use PowerShell on the VM to make a request to the local managed identity for Azure resources endpoint.
  C. From the code on the VM. call Azure Resource Manager using an access token.
  D. From the code on the VM. call Azure Resource Manager using a SAS token.
  E. From the code on the VM. generate a user delegation SAS token.
  B. Use PowerShell on the VM to make a request to the local managed identity for Azure resources endpoint.
  C. From the code on the VM. call Azure Resource Manager using an access token.