Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 41:

  HOTSPOT

  You are a developer building a web site using a web app. The web site stores configuration data in Azure App Configuration.

  Access to Azure App Configuration has been configured to use the identity of the web app for authentication. Security requirements specify that no other authentication systems must be used.

  You need to load configuration data from Azure App Configuration.

  How should you complete the code? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: DefaultAzureCredential

  Azure App Configuration client library for Python, Create a client

  Once the AZURE_CLIENT_ID, AZURE_CLIENT_SECRET and AZURE_TENANT_ID environment variables are set, DefaultAzureCredential will be able to authenticate the AzureAppConfigurationClient.

  Constructing the client also requires your configuration store's URL, which you can get from the Azure CLI or the Azure Portal. In the Azure Portal, the URL can be found listed as the service "Endpoint" from azure.identity import DefaultAzureCredential from azure.appconfiguration import AzureAppConfigurationClient

  credential = DefaultAzureCredential() client = AzureAppConfigurationClient(base_url="your_endpoint_url", credential

  Box 2: AddAppConfigurationClient

  The AzureAppConfigurationClient Class represents a client that calls restful API of Azure App Configuration service.

  Box 3: DefaultAzureCredential

  Box 4: AddAppConfigurationClient

  https://learn.microsoft.com/en-us/python/api/overview/azure/appconfiguration-readme

• Question 42:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.

  When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.

  You need to design the process that starts the photo processing.

  Solution: Trigger the photo processing from Blob storage events.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  You need to catch the triggered event, so move the photo processing to an Azure Function triggered from the blob upload

  Note: Azure Storage events allow applications to react to events. Common Blob storage event scenarios include image or video processing, search indexing, or any file-oriented workflow.

  Events are pushed using Azure Event Grid to subscribers such as Azure Functions, Azure Logic Apps, or even to your own http listener.

  Note: Only storage accounts of kind StorageV2 (general purpose v2) and BlobStorage support event integration. Storage (general purpose v1) does not support integration with Event Grid.

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-event-overview

• Question 43:

  HOTSPOT

  You need to configure Azure CDN for the Shipping web site.

  Which configuration options should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Scenario: Shipping website

  Use Azure Content Delivery Network (CDN) and ensure maximum performance for dynamic content while minimizing latency and costs.

  Tier: Standard

  Profile: Akamai

  Optimization: Dynamic site acceleration

  Dynamic site acceleration (DSA) is available for Azure CDN Standard from Akamai, Azure CDN Standard from Verizon, and Azure CDN Premium from Verizon profiles.

  DSA includes various techniques that benefit the latency and performance of dynamic content. Techniques include route and network optimization, TCP optimization, and more.

  You can use this optimization to accelerate a web app that includes numerous responses that aren't cacheable. Examples are search results, checkout transactions, or real-time data. You can continue to use core Azure CDN caching capabilities for static data.

  https://docs.microsoft.com/en-us/azure/cdn/cdn-optimization-overview

• Question 44:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are designing an Azure WebJob that will run on the same instances as a web app.

  You want to make use of a suitable WebJob type. The webjob type should also allow for the option to restrict the WebJob to a single instance.

  Solution: You configure the use of the Continuous WebJob type.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/app-service/webjobs-create#webjob-types

• Question 45:

  DRAG DROP

  You need to add YAML markup at line CS17 to ensure that the ContentUploadService can access Azure Storage access keys.

  How should you complete the YAML markup? To answer, drag the appropriate YAML segments to the correct locations. Each YAML segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: volumeMounts

  Example:

  volumeMounts:

  - mountPath: /mnt/secrets

  name: secretvolume1

  volumes:

  - name: secretvolume1

  secret:

  mysecret1: TXkgZmlyc3Qgc2VjcmV0IEZPTwo=

  Box 2: volumes

  Box 3: secret

  https://docs.microsoft.com/en-us/azure/container-instances/container-instances-volume-secret

• Question 46:

  A company is developing a solution that allows smart refrigerators to send temperature information to a central location.

  The solution must receive and store messages until they can be processed. You create an Azure Service Bus instance by providing a name, pricing tier, subscription, resource group, and location.

  You need to complete the configuration.

  Which Azure CLI or PowerShell command should you run?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

  ---

  Explanation

  A service bus instance has already been created (Step 2 below). Next is step 3, Create a Service Bus queue.

  Note:

  Steps:

  Step 1: # Create a resource group resourceGroupName="myResourceGroup" az group create --name $resourceGroupName --location eastus

  Step 2: # Create a Service Bus messaging namespace with a unique name namespaceName=myNameSpace$RANDOM az servicebus namespace create --resource-group $resourceGroupName --name $namespaceName --location eastus

  Step 3: # Create a Service Bus queue az servicebus queue create --resource-group $resourceGroupName --namespace-name $namespaceName --name BasicQueue

  Step 4: # Get the connection string for the namespace connectionString=$(az servicebus namespace authorization-rule keys list --resource-group $resourceGroupName --namespace-name $namespaceName --name RootManageSharedAccessKey --query primaryConnectionString --output tsv)

  https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli

• Question 47:

  HOTSPOT

  You develop a containerized application. You plan to deploy the application to a new Azure Container instance by using a third-party continuous integration and continuous delivery (CI/CD) utility.

  The deployment must be unattended and include all application assets. The third-party utility must only be able to push and pull images from the registry. The authentication must be managed by Azure Active Directory (Azure AD). The solution must use the principle of least privilege.

  You need to ensure that the third-party utility can access the registry.

  Which authentication options should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Service principal

  Applications and container orchestrators can perform unattended, or "headless," authentication by using an Azure Active Directory (Azure AD) service principal.

  Incorrect Answers:

  1. Individual AD identity does not support unattended push/pull 2. Repository-scoped access token is not integrated with AD identity

  3. Managed identity for Azure resources is used to authenticate to an Azure container registry from another Azure resource.

  Box 2: AcrPush

  AcrPush provides pull/push permissions only and meets the principle of least privilege.

  Incorrect Answers:

  1. AcrPull only allows pull permissions it does not allow push permissions.

  2. Owner and Contributor allow pull/push permissions but does not meet the principle of least privilege.

  https://docs.microsoft.com/en-us/azure/container-registry/container-registry-authentication?tabs=azure-cli

  https://docs.microsoft.com/en-us/azure/container-registry/container-registry-roles?tabs=azure-cli

• Question 48:

  You need to mitigate the Azure Cache for Redis issue.

  What are two possible ways to achieve this goal? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Increase the maxmemory-reserved and maxfragmenTationmemory-reserved values
  B. Modify the maxmemory policy to evict the least frequently used keys out of all keys.
  C. Configure client connections to retry commands with exponential backoff.
  D. Test application code by purging the cache in the test environment.
  E. Test application code by rebooting all nodes in the test environment.
  A. Increase the maxmemory-reserved and maxfragmenTationmemory-reserved values
  C. Configure client connections to retry commands with exponential backoff.

• Question 49:

  HOTSPOT

  You need to configure the Account Kind, Replication, and Storage tier options for the corporate website's Azure Storage account.

  How should you complete the configuration? To answer, select the appropriate options in the dialog box in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Account Kind: StorageV2 (general-purpose v2)

  Scenario: Azure Storage blob will be used (refer to the exhibit). Data storage costs must be minimized.

  General-purpose v2 accounts: Basic storage account type for blobs, files, queues, and tables. Recommended for most scenarios using Azure Storage.

  Incorrect Answers:

  BlockBlobStorage accounts: Storage accounts with premium performance characteristics for block blobs and append blobs. Recommended for scenarios with high transactions rates, or scenarios that use smaller objects or require consistently low storage latency.

  General-purpose v1 accounts: Legacy account type for blobs, files, queues, and tables. Use general-purpose v2 accounts instead when possible.

  https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview

  https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal

• Question 50:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You develop an HTTP triggered Azure Function app to process Azure Storage blob data. The app is triggered using an output binding on the blob.

  The app continues to time out after four minutes. The app must process the blob data.

  You need to ensure the app does not time out and processes the blob data.

  Solution: Update the functionTimeout property of the host.json project file to 10 minutes.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead pass the HTTP trigger payload into an Azure Service Bus queue to be processed by a queue trigger function and return an immediate HTTP success response.

  Note: Large, long-running functions can cause unexpected timeout issues. General best practices include:

  Whenever possible, refactor large functions into smaller function sets that work together and return responses fast. For example, a webhook or HTTP trigger function might require an acknowledgment response within a certain time limit; it's common for webhooks to require an immediate response. You can pass the HTTP trigger payload into a queue to be processed by a queue trigger function. This approach lets you defer the actual work and return an immediate response.

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-best-practices