Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 521:

  HOTSPOT

  You have an Azure Functions app using the Consumption hosting plan for a company. The app contains the following functions:

  

  You plan to enable dynamic concurrency on the app. The company requires that each function has its concurrency level managed separately.

  

  

• Question 522:

  You develop a Python application for image rendering that uses GPU resources to optimize rendering processes. You deploy the application to an Azure Container Instances (ACI) Linux container.

  The application requires a secret value to be passed when the container is started. The value must only be accessed from within the container.

  You need to pass the secret value.

  What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Create an environment variable Set the secureValue property to the secret value.
  B. Add the secret value to the container image. Use a managed identity.
  C. Add the secret value to the application code Set the container startup command.
  D. Add the secret value to an Azure Blob storage account. Generate a SAS token.
  E. Mount a secret volume containing the secret value in a secrets file.
  A. Create an environment variable Set the secureValue property to the secret value.
  E. Mount a secret volume containing the secret value in a secrets file.

  ---

  Explanation

  A: Secure environment variables - Another method (another than a secret volume) for providing sensitive information to containers (including Windows containers) is through the use of secure environment variables.

  E: Use a secret volume to supply sensitive information to the containers in a container group. The secret volume stores your secrets in files within the volume, accessible by the containers in the container group. By storing secrets in a secret volume, you can avoid adding sensitive data like SSH keys or database credentials to your application code.

  https://docs.microsoft.com/en-us/azure/container-instances/container-instances-volume-secret

• Question 523:

  DRAG DROP

  You need to ensure that PolicyLib requirements are met.

  How should you complete the code segment? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Scenario: You have a shared library named PolicyLib that contains functionality common to all ASP.NET Core web services and applications. The PolicyLib library must:

  1. Exclude non-user actions from Application Insights telemetry.

  2. Provide methods that allow a web service to scale itself.

  3. Ensure that scaling actions do not disrupt application usage.

  Box 1: ITelemetryInitializer

  Use telemetry initializers to define global properties that are sent with all telemetry; and to override selected behavior of the standard telemetry modules.

  Box 2: Initialize

  Box 3: Telemetry.Context

  Box 4: ((EventTelemetry)telemetry).Properties["EventID"]

  https://docs.microsoft.com/en-us/azure/azure-monitor/app/api-filtering-sampling

• Question 524:

  You need to implement farmer authentication.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Add the shared access signature (SAS) token to the app
  B. Create a shared access signature (SAS) token.
  C. Register the app in Microsoft Entra ID.
  D. Create a user flow.
  E. Add the app to the user flow.
  C. Register the app in Microsoft Entra ID.
  D. Create a user flow.
  E. Add the app to the user flow.

• Question 525:

  HOTSPOT

  You are developing an application that uses a premium block blob storage account. The application will process a large volume of transactions daily. You enable Blob storage versioning.

  You are optimizing costs by automating Azure Blob Storage access tiers. You apply the following policy rules to the storage account. (Line numbers are included for reference only.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Would be true if daysAfterModificationGreaterThan was used, but here daysAfterCreationGreaterThan

  Box 2: No

  Would need to use the daysAfterLastAccessTimeGreaterThan predicate.

  Box 3: Yes

  Box 4: Yes

  With the lifecycle management policy, you can: Transition blobs from cool to hot immediately when they are accessed, to optimize for performance.

  https://docs.microsoft.com/en-us/azure/storage/blobs/lifecycle-management-overview

• Question 526:

  You manage an Azure App Service web app named App1 and an associated Azure Application Insights resource named AppInsights1.

  You require alerts about any unusual increase in the rate of failed HTTP requests targeting App1.

  You need to implement push notifications.

  What should you do?

  A. From the Azure portal, create a service health alert in Azure Monitor.
  B. From the Azure portal, modify a smart detection rule in AppInsights1.
  C. Deploy an Azure Resource Manager template that configures AppInsights1.
  D. From the Azure portal, modify an action group in Azure Monitor.
  B. From the Azure portal, modify a smart detection rule in AppInsights1.

• Question 527:

  HOTSPOT

  You are developing an Azure Web App. You configure TLS mutual authentication for the web app.

  You need to validate the client certificate in the web app. To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Accessing the client certificate from App Service.

  If you are using ASP.NET and configure your app to use client certificate authentication, the certificate will be available through the HttpRequest.ClientCertificate property. For other application stacks, the client cert will be available in your app through a base64 encoded value in the "X-ARR-ClientCert" request header. Your application can create a certificate from this value and then use it for authentication and authorization purposes in your application.

  References:

  https://docs.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth

• Question 528:

  You are a developing a SaaS application that stores data as key value pairs.

  You must make multiple editions of the application available. In the lowest cost edition, the performance must be best-effort, and there is no regional failover.

  In higher cos! editions customers must be able to select guaranteed performance and support for multiple regions. Azure costs must be minimized.

  Which Azure Cosmos OB API should you use for the application?

  A. Core
  B. MongoDB
  C. Cassandra
  D. Table API
  D. Table API

• Question 529:

  DRAG DROP

  You are deploying an Azure Kubernetes Services (AKS) cluster that will use multiple containers

  You need to create the cluster and verify that the services for the containers are configured correctly and available.

  Which four commands should you use to develop the solution? To answer, move the appropriate command segments from the list of command segments to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 530:

  Your company purchases an Azure subscription and plans to migrate several on-premises virtual machines to Azure. You need to design the infrastructure required for the Azure virtual machines solution.

  What should you include in the design?

  A. the number of Azure Storage accounts
  B. the settings of the Azure virtual networks
  C. the size of the virtual machines
  D. the number of Azure regions
  C. the size of the virtual machines