Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 341:

  You need to ensure receipt processing occurs correctly.

  What should you do?

  A. Use blob properties to prevent concurrency problems
  B. Use blob SnapshotTime to prevent concurrency problems
  C. Use blob metadata to prevent concurrency problems
  D. Use blob leases to prevent concurrency problems
  D. Use blob leases to prevent concurrency problems

  ---

  Explanation

  You can create a snapshot of a blob. A snapshot is a read-only version of a blob that's taken at a point in time. Once a snapshot has been created, it can be read, copied, or deleted, but not modified. Snapshots provide a way to back up a blob as it appears at a moment in time.

  Scenario: Processing is performed by an Azure Function that uses version 2 of the Azure Function runtime. Once processing is completed, results are stored in Azure Blob Storage and an Azure SQL database. Then, an email summary is sent to the user with a link to the processing report. The link to the report must remain valid if the email is forwarded to another user.

  https://docs.microsoft.com/en-us/rest/api/storageservices/creating-a-snapshot-of-a-blob

• Question 342:

  DRAG DROP

  You are creating a script that will run a large workload on an Azure Batch pool. Resources will be reused and do not need to be cleaned up after use.

  You have the following parameters:

  

  You need to write an Azure CLI script that will create the jobs, tasks, and the pool.

  In which order should you arrange the commands to develop the solution? To answer, move the appropriate commands from the list of command segments to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Step 1: az batch pool create

  # Create a new Linux pool with a virtual machine configuration.

  az batch pool create \

  --id mypool \

  --vm-size Standard_A1 \

  --target-dedicated 2 \

  --image canonical:ubuntuserver:16.04-LTS \

  --node-agent-sku-id "batch.node.ubuntu 16.04"

  Step 2: az batch job create

  # Create a new job to encapsulate the tasks that are added.

  az batch job create \

  --id myjob \

  --pool-id mypool Step 3: az batch task create

  # Add tasks to the job. Here the task is a basic shell command.

  az batch task create \

  --job-id myjob \

  --task-id task1 \

  --command-line "/bin/bash -c 'printenv AZ_BATCH_TASK_WORKING_DIR'"

  Step 4: for i in {1..$numberOfJobs} do

  References:

  https://docs.microsoft.com/bs-latn-ba/azure/batch/scripts/batch-cli-sample-run-job

• Question 343:

  You need to deploy the CheckUserContent Azure Function. The solution must meet the security and cost requirements.

  Which hosting model should you use?

  A. Premium plan
  B. App Service plan
  C. Consumption plan
  B. App Service plan

  ---

  Explanation

  Scenario:

  You must minimize costs for all Azure services.

  All Internal services must only be accessible from internal Virtual Networks (VNets).

  Best for long-running scenarios where Durable Functions can't be used. Consider an App Service plan in the following situations:

  1. You have existing, underutilized VMs that are already running other App Service instances.

  2. You want to provide a custom image on which to run your functions.

  3. Predictive scaling and costs are required.

  Note: When you create a function app in Azure, you must choose a hosting plan for your app. There are three basic hosting plans available for Azure Functions: Consumption plan, Premium plan, and Dedicated (App Service) plan.

  Incorrect Answers:

  A: A Premium plan would be more costly.

  C: Need the VNET functionality.

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-scale

• Question 344:

  HOTSPOT

  You have a single page application (SPA) web application that manages information based on data returned by Microsoft Graph from another company's Azure Active Directory (Azure AD) instance.

  Users must be able to authenticate and access Microsoft Graph by using their own company's Azure AD instance.

  You need to configure the application manifest for the app registration.

  How should you complete the manifest? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: true

  The oauth2AllowImplicitFlow attribute Specifies whether this web app can request OAuth2.0 implicit flow access tokens. The default is false. This flag is used for browser-based apps, like JavaScript single-page apps.

  In implicit flow, the app receives tokens directly from the Azure Active Directory (Azure AD) authorize endpoint, without any server-to-server exchange. All authentication logic and session handling is done entirely in the JavaScript client with either a page redirect or a pop-up box.

  Box 2: requiredResourceAccess

  With dynamic consent, requiredResourceAccess drives the admin consent experience and the user consent experience for users who are using static consent. However, this parameter doesn't drive the user consent experience for the general case.

  resourceAppId is the unique identifier for the resource that the app requires access to. This value should be equal to the appId declared on the target resource app. resourceAccess is an array that lists the OAuth2.0 permission scopes and app roles that the app requires from the specified resource. Contains the id and type values of the specified resources.

  Example:

  "requiredResourceAccess": [

  {

  "resourceAppId": "00000002-0000-0000-c000-000000000000",

  "resourceAccess": [

  {

  "id": "311a71cc-e848-46a1-bdf8-97ff7156d8e6",

  "type": "Scope"

  }

  ]

  }

  ], Incorrect Answers:

  1. The legacy attribute availableToOtherTenants is no longer supported.

  2. The addIns attribute defines custom behavior that a consuming service can use to call an app in specific contexts. For example, applications that can render file streams may set the addIns property for its "FileHandler" functionality. This parameter will let services like Microsoft 365 call the application in the context of a document the user is working on.

  Example:

  "addIns": [

  {

  "id": "968A844F-7A47-430C-9163-07AE7C31D407",

  "type":" FileHandler",

  "properties": [

  {

  "key": "version",

  "value": "2"

  }

  ]

  }

  ], Box 3: AzureADMyOrg

  The signInAudience attribute specifies what Microsoft accounts are supported for the current application. Supported values are:

  1. AzureADMyOrg - Users with a Microsoft work or school account in my organization's Azure AD tenant (for example, single tenant) 2. AzureADMultipleOrgs - Users with a Microsoft work or school account in any organization's Azure AD tenant (for example, multi-tenant)

  3. AzureADandPersonalMicrosoftAccount - Users with a personal Microsoft account, or a work or school account in any organization's Azure AD tenant

  https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest

  https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-implicit-grant-flow

• Question 345:

  You are developing an application to store information about the organizational structure for a company.

  Users must be able to determine which people report to a particular manager, the office where employees work, and the projects that are assigned to an employee.

  Which Azure Cosmos DB API should you use for the application?

  A. Core
  B. Cassandra
  C. Table API
  D. Gremlin
  E. MongoDB
  E. MongoDB

• Question 346:

  HOTSPOT

  You are developing a static website hosted on Azure Blob Storage. You create a storage account and enable static website hosting.

  The website must support the following requirements:

  Custom domain name

  Custom header values for all responses Custom SSL certificate

  You need to implement the static website.

  What should you configure? To answer, select the appropriate values in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Azure Content Delivery Network (CDN) Custom domain name

  Integrate a static website with Azure CDN

  You can enable Azure Content Delivery Network (CDN) to cache content from a static website that is hosted in an Azure storage account. You can use Azure CDN to configure the custom domain endpoint for your static website, provision custom TLS/SSL certificates, and configure custom rewrite rules. Configuring Azure CDN results in additional charges, but provides consistent low latencies to your website from anywhere in the world. Azure CDN also provides TLS encryption with your own certificate.

  Box 2: Azure Content Delivery Network (CDN) Custom header values for all responses

  Static websites have some limitations. For example, If you want to configure headers, you'll have to use Azure Content Delivery Network (Azure CDN). There's no way to configure headers as part of the static website feature itself.

  Box 3: Azure Content Delivery Network (CDN) Custom SSL certificate

  https://learn.microsoft.com/en-us/azure/storage/blobs/static-website-content-delivery-network

  https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-static-website

• Question 347:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.

  You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level.

  You need to configure authorization.

  Solution: Configure and use Integrated Windows Authentication in the website. In the website, query Microsoft Graph API to load the group to which the user is a member.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Microsoft Graph is a RESTful web API that enables you to access Microsoft Cloud service resources.

  Instead in the Azure AD application's manifest, set value of the groupMembershipClaims option to All. In the website, use the value of the groups claim from the JWT for the user to determine permissions.

  https://blogs.msdn.microsoft.com/waws/2017/03/13/azure-app-service-authentication-aad-groups/

• Question 348:

  DRAG DROP

  You manage several existing Logic Apps.

  You need to change definitions, add new logic, and optimize these apps on a regular basis.

  What should you use? To answer, drag the appropriate tools to the correct functionalities. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: Enterprise Integration Pack

  For business-to-business (B2B) solutions and seamless communication between organizations, you can build automated scalable enterprise integration workflows by using the Enterprise Integration Pack (EIP) with Azure Logic Apps.

  Box 2: Code View Editor

  Edit JSON - Azure portal

  1. Sign in to the Azure portal.

  2. From the left menu, choose All services. In the search box, find "logic apps", and then from the results, select your logic app.

  3. On your logic app's menu, under Development Tools, select Logic App Code View.

  4. The Code View editor opens and shows your logic app definition in JSON format.

  Box 3: Logic Apps Designer

  https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-enterprise-integration-overview

  https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-author-definitions

• Question 349:

  You need to resolve a notification latency issue.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Set Always On to true.
  B. Ensure that the Azure Function is using an App Service plan.
  C. Set Always On to false.
  D. Ensure that the Azure Function is set to use a consumption plan.
  A. Set Always On to true.
  B. Ensure that the Azure Function is using an App Service plan.

  ---

  Explanation

  Azure Functions can run on either a Consumption Plan or a dedicated App Service Plan. If you run in a dedicated mode, you need to turn on the Always On setting for your Function App to run properly. The Function runtime will go idle after a few minutes of inactivity, so only HTTP triggers will actually "wake up" your functions. This is similar to how WebJobs must have Always On enabled.

  Scenario: Notification latency: Users report that anomaly detection emails can sometimes arrive several minutes after an anomaly is detected.

  Anomaly detection service: You have an anomaly detection service that analyzes log information for anomalies. It is implemented as an Azure Machine Learning model. The model is deployed as a web service.

  If an anomaly is detected, an Azure Function that emails administrators is called by using an HTTP WebHook.

  https://github.com/Azure/Azure-Functions/wiki/Enable-Always-On-when-running-on-dedicated-App-Service-Plan

• Question 350:

  HOTSPOT

  You provisioned an Azure Cosmos DB for NoSQL account named account1 with the default consistency level.

  You plan to configure the consistency level on a per request basis. The level needs to be set for consistent prefix for read and write operations to account1.

  You need to identify the resulting consistency level for read and write operations.

  Which levels should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: consistent prefix

  Note: Override the default consistency level

  Clients can override the default consistency level that is set by the service. Consistency level can be set on a per request, which overrides the default consistency level set at the account level.

  Consistency can only be relaxed at the SDK instance or request level. To move from weaker to stronger consistency, update the default consistency for the Azure Cosmos DB account.

  Azure Cosmos DB offers five well-defined levels. From strongest to weakest, the levels are:

  Strong

  Bounded staleness

  Session

  Consistent prefix

  Eventual Box 2: session

  One of the consistency levels in Azure Cosmos DB is Session consistency. This is the default level applied to Azure Cosmos DB accounts by default.

  Overriding the default consistency level only applies to reads within the SDK client. An account configured for strong consistency by default will still write and replicate data synchronously to every region in the account.

  https://learn.microsoft.com/en-us/azure/cosmos-db/consistency-levels#consistent-prefix-consistency

  https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/how-to-manage-consistency