Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 471:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.

  You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level.

  You need to configure authorization.

  Solution:

  1. Create a new Azure AD application. In the application's manifest, define application roles that match the required permission levels for the application.

  2. Assign the appropriate Azure AD group to each role. In the website, use the value of the roles claim from the JWT for the user to determine permissions.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  To configure Manifest to include Group Claims in Auth Token 1. Go to Azure Active Directory to configure the Manifest. Click on Azure Active Directory, and go to App registrations to find your application:

  2. Click on your application (or search for it if you have a lot of apps) and edit the Manifest by clicking on it.

  3. Locate the "groupMembershipClaims" setting. Set its value to either "SecurityGroup" or "All". To help you decide which:

  1. "SecurityGroup" - groups claim will contain the identifiers of all security groups of which the user is a member.

  2. "All" - groups claim will contain the identifiers of all security groups and all distribution lists of which the user is a member

  Now your application will include group claims in your manifest and you can use this fact in your code.

  https://blogs.msdn.microsoft.com/waws/2017/03/13/azure-app-service-authentication-aad-groups/

• Question 472:

  You are developing a solution that will use a multi-partitioned Azure Cosmos DB database. You plan to use the latest Azure Cosmos DB SDK for development.

  The solution must meet the following requirements:

  1. Send insert and update operations to an Azure Blob storage account.

  2. Process changes to all partitions immediately.

  3. Allow parallelization of change processing.

  You need to process the Azure Cosmos DB operations.

  What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Create an Azure App Service API and implement the change feed estimator of the SDK. Scale the API by using multiple Azure App Service instances.
  B. Create a background job in an Azure Kubernetes Service and implement the change feed feature of the SDK.
  C. Create an Azure Function to use a trigger for Azure Cosmos DB. Configure the trigger to connect to the container.
  D. Create an Azure Function that uses a FeedIterator object that processes the change feed by using the pull model on the container. Use a FeedRange objext to parallelize the processing of the change feed across multiple functions.
  C. Create an Azure Function to use a trigger for Azure Cosmos DB. Configure the trigger to connect to the container.
  D. Create an Azure Function that uses a FeedIterator object that processes the change feed by using the pull model on the container. Use a FeedRange objext to parallelize the processing of the change feed across multiple functions.

  ---

  Explanation

  Azure Functions is the simplest option if you are just getting started using the change feed. Due to its simplicity, it is also the recommended option for most change feed use cases. When you create an Azure Functions trigger for Azure Cosmos DB, you select the container to connect, and the Azure Function gets triggered whenever there is a change in the container. Because Azure Functions uses the change feed processor behind the scenes, it automatically parallelizes change processing across your container's partitions.

  Note: You can work with change feed using the following options:

  1. Using change feed with Azure Functions 2. Using change feed with change feed processor

  https://docs.microsoft.com/en-us/azure/cosmos-db/read-change-feed

  https://docs.microsoft.com/en-us/azure/cosmos-db/change-feed-pull-model

  https://docs.microsoft.com/en-us/azure/cosmos-db/read-change-feed#azure-functions

  https://docs.microsoft.com/en-us/azure/cosmos-db/change-feed-pull-model#using-feedrange-for-parallelization

• Question 473:

  HOTSPOT

  You are preparing to deploy a Python website to an Azure Web App using a container. The solution will use multiple containers in the same container group. The Dockerfile that builds the container is as follows:

  

  You build a container by using the following command. The Azure Container Registry instance named images is a private registry.

  

  The user name and password for the registry is admin.

  The Web App must always run the same version of the website regardless of future builds.

  You need to create an Azure Web App to run the website.

  How should you complete the commands? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: --SKU B1 --hyper-v

  --hyper-v

  Host web app on Windows container.

  Box 2: --deployment-source-url images.azurecr.io/website:v1.0.0

  --deployment-source-url -u

  Git repository URL to link with manual integration.

  The Web App must always run the same version of the website regardless of future builds.

  Incorrect:

  --deployment-container-image-name -i

  Linux only. Container image name from Docker Hub, e.g. publisher/image-name:tag.

  Box 3: az webapp config container set -url

  https://images.azurecr.io-u

  admin -p admin az webapp config container set

  Set a web app container's settings.

  Paremeter: --docker-registry-server-url -r

  The container registry server url.

  The Azure Container Registry instance named images is a private registry.

  Example:

  az webapp config container set --docker-registry-server-url

  https://{azure-container-registry-name}.azurecr.io

  https://docs.microsoft.com/en-us/cli/azure/appservice/plan

• Question 474:

  You develop an app that allows users to upload photos and videos to Azure storage. The app uses a storage REST API call to upload the media to a blob storage account named Account1. You have blob storage containers named

  Container1 and Container2.

  Uploading of videos occurs on an irregular basis.

  You need to copy specific blobs from Container1 to Container2 when a new video is uploaded.

  What should you do?

  A. Copy blobs to Container2 by using the Put Blob operation of the Blob Service REST API
  B. Create an Event Grid topic that uses the Start-AzureStorageBlobCopy cmdlet
  C. Use AzCopy with the Snapshot switch to copy blobs to Container2
  D. Download the blob to a virtual machine and then upload the blob to Container2
  B. Create an Event Grid topic that uses the Start-AzureStorageBlobCopy cmdlet

  ---

  Explanation

  The Start-AzureStorageBlobCopy cmdlet starts to copy a blob.

  Example 1: Copy a named blob

  C:\PS>Start-AzureStorageBlobCopy -SrcBlob "ContosoPlanning2015" -DestContainer "ContosoArchives" -SrcContainer "ContosoUploads"

  This command starts the copy operation of the blob named ContosoPlanning2015 from the container named ContosoUploads to the container named ContosoArchives.

  https://docs.microsoft.com/en-us/powershell/module/azure.storage/start-azurestorageblobcopy?view=azurermps-6.13.0

• Question 475:

  DRAG DROP

  You are a developer for a Software as a Service (SaaS) company. You develop solutions that provide the ability to send notifications by using Azure Notification Hubs.

  You need to create sample code that customers can use as a reference for how to send raw notifications to Windows Push Notification Services (WNS) devices. The sample code must not use external packages.

  How should you complete the code segment? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: windows

  Example code:

  var request = new HttpRequestMessage(method, $"{resourceUri}?api-version=2017-04");

  request.Headers.Add("Authorization", createToken(resourceUri, KEY_NAME,

  KEY_VALUE));

  request.Headers.Add("X-WNS-Type", "wns/raw");

  request.Headers.Add("ServiceBusNotification-Format", "windows");

  return request; Box 2: application/octet-stream

  Example code capable of sending a raw notification:

  string resourceUri = $"

  https://{NH_NAMESPACE}.servicebus.windows.net/{HUB_NAME}/messages/";

  using (var request = CreateHttpRequest(HttpMethod.Post, resourceUri))

  { request.Content = new StringContent(content, Encoding.UTF8,

  "application/octet-stream");

  request.Content.Headers.ContentType.CharSet = string.Empty;

  var httpClient = new HttpClient();

  var response = await httpClient.SendAsync(request);

  Console.WriteLine(response.StatusCode);

  } Reference:

  https://stackoverflow.com/questions/31346714/how-to-send-raw-notification-to-azure-notification-hub/31347901

• Question 476:

  You are developing a road tollway tracking application that sends tracking events by using Azure Event Hubs using premium tier.

  Each road must have a throttling policy uniquely assigned.

  You need to configure the event hub to allow for per-road throttling.

  What should you do?

  A. Use a unique consumer group for each road.
  B. Ensure each road stores events in a different partition.
  C. Ensure each road has a unique connection string.
  D. Use a unique application group for each road.
  B. Ensure each road stores events in a different partition.

• Question 477:

  HOTSPOT

  You need to implement the bindings for the CheckUserContent function.

  How should you complete the code segment? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: [BlobTrigger(..)]

  Box 2: [Blob(..)]

  Azure Blob storage output binding for Azure Functions. The output binding allows you to modify and delete blob storage data in an Azure Function.

  The attribute's constructor takes the path to the blob and a FileAccess parameter indicating read or write, as shown in the following example:

  [FunctionName("ResizeImage")]

  public static void Run(

  [BlobTrigger("sample-images/{name}")] Stream image, [Blob("sample-images-md/{name}", FileAccess.Write)] Stream imageSmall)

  {

  ...

  } Scenario: You must create an Azure Function named CheckUserContent to perform the content checks.

  The company's data science group built ContentAnalysisService which accepts user generated content as a string and returns a probable value for inappropriate content. Any values over a specific threshold must be reviewed by an employee of Contoso, Ltd.

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-blob-output

• Question 478:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.

  When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.

  You need to design the process that starts the photo processing.

  Solution: Move photo processing to an Azure Function triggered from the blob upload.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  Azure Storage events allow applications to react to events. Common Blob storage event scenarios include image or video processing, search indexing, or any file-oriented workflow.

  Events are pushed using Azure Event Grid to subscribers such as Azure Functions, Azure Logic Apps, or even to your own http listener.

  Note: Only storage accounts of kind StorageV2 (general purpose v2) and BlobStorage support event integration. Storage (general purpose v1) does not support integration with Event Grid.

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-event-overview

• Question 479:

  HOTSPOT

  You need to implement the Azure Function for delivery driver profile information.

  Which configurations should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Azure Identity library

  Store delivery driver profile information in Azure Active Directory (Azure AD) by using an Azure Function called from the corporate website.

  We recommend that you use a managed identity for applications deployed to Azure.

  The preceding authentication scenarios are supported by the Azure Identity client library and integrated with Key Vault SDKs.

  Note: What is Managed Service Identity?

  Azure Key Vault avoids the need to store keys and secrets in application code or source control. However, in order to retrieve keys and secrets from Azure Key Vault, you need to authorize a user or application with Azure Key Vault, which in its turn needs another credential. Managed Service Identity avoids the need of storing credentials for Azure Key Vault in application or environment settings by creating a Service Principal for each application or cloud service on which Managed Service Identity is enabled. This Service Principal enables you to call a local MSI endpoint to get an access token from Azure AD using the credentials of the Service Principal. This token is then used to authenticate to an Azure Service, for example Azure Key Vault.

  Box 2: Azure Key Vault

  Azure Key Vault allows you to securely access sensitive information from within your applications: * Keys, secrets, and certificates are protected without your having to write the code yourself, and you can easily use them from your applications.

  Use Azure Key Vault to store only secrets for your application. Examples of secrets that should be stored in Key Vault include:

  Client application secrets

  Connection strings

  Passwords

  Shared access keys

  SSH keys Reference:

  https://docs.microsoft.com/en-us/azure/key-vault/general/developers-guide

  https://integration.team/blog/retrieve-azure-key-vault-secrets-using-azure-functions-and-managed-service-identity

• Question 480:

  You need to investigate the Azure Function app error message in the development environment.

  What should you do?

  A. Connect Live Metrics Stream from Application Insights to the Azure Function app and filter the metrics.
  B. Create a new Azure Log Analytics workspace and instrument the Azure Function app with Application Insights.
  C. Update the Azure Function app with extension methods from Microsoft.Extensions.Logging to log events by using the log instance.
  D. Add a new diagnostic setting to the Azure Function app to send logs to Log Analytics.
  A. Connect Live Metrics Stream from Application Insights to the Azure Function app and filter the metrics.

  ---

  Explanation

  Azure Functions offers built-in integration with Azure Application Insights to monitor functions.

  The following areas of Application Insights can be helpful when evaluating the behavior, performance, and errors in your functions:

  Live Metrics: View metrics data as it's created in near real-time.

  Failures

  Performance

  Metrics Reference:

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-monitoring