Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 551:

  HOTSPOT

  You are developing a new API to be hosted by Azure API Management (APIM). The backend service that implements the API has not been completed. You are creating a test API and operation.

  You must enable developers to continue with the implementation and testing of the APIM instance integrations while you complete the backend API development.

  You need to configure a test API response.

  How should you complete the configuration? To answer, select the appropriate options in the answer area.

  

  

  ---

  Box 1:

  Policy

  The mock-response policy, as the name implies, is used to mock APIs and operations. It cancels normal pipeline execution and returns a mocked response to the caller. The policy always tries to return responses of highest fidelity. It prefers response content examples, when available. It generates sample responses from schemas, when schemas are provided and examples aren't. If neither examples or schemas are found, responses with no content are returned.

  <mock-response status-code="code" content-type="media type"/>

  Attributes

  * status-code

  Specifies response status code and is used to select corresponding example or schema. Policy expressions aren't allowed.

  Default: 200

  * Etc.

  Box 2: backend

  Policy section

  Set backend service

  Use the set-backend-service policy to redirect an incoming request to a different backend than the one specified in the API settings for that operation. This policy changes the backend service base URL of the incoming request to the one specified in the policy.

  Policy statement

  <set-backend-service base-url="base URL of the backend service" backend-id="name of the backend entity specifying base URL of the backend service" sf-resolve-condition="condition" sf-service-instance-name="Service Fabric service name" sf-listener-name="Service Fabric listener name" />

  Box 3: 200

  HTTP response code Reference:

  https://learn.microsoft.com/en-us/azure/api-management/set-backend-service-policy

  https://learn.microsoft.com/en-us/azure/api-management/mock-response-policy

• Question 552:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure App Service plan named APSPlan1 set to the Basic B1 pricing tier. APSPlan1 contains an App Service web app named WebApp1.

  You plan to enable schedule-based autoscaling for APSPlan1.

  You need to minimize the cost of running WebApp1.

  Solution: Scale down ASPPlan1 to the Shared pricing tier.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

• Question 553:

  HOTSPOT

  You have an Azure App Service web app named App1. App1 has Application Insights enabled.

  You plan to review the configuration of telemetry sampling for Application Insights of App1.

  You need to author an analytics query that will return the sampling rate.

  How should you complete the provided query? To answer, select the appropriate options in the answer area.

  

  

• Question 554:

  You ate developing an application that allows users to find musicians that ate looking for work. The application must store information about musicians, the instruments that they play, and other related data.

  The application must also allow users to determine which musicians have played together, including groups of three or more musicians that have performed together at a specific location.

  Which Azure Cosmos D6 API should you use for the application?

  A. Core
  B. MongoDB
  C. Cassandra
  D. Gremlin
  B. MongoDB

• Question 555:

  DRAG DROP

  You are developing an application to store millions of images in Azure blob storage. The images are uploaded to an Azure blob storage container named companyimages contained in an Azure blob storage account named companymedia.

  The stored images are uploaded with multiple blob index tags across multiple blobs in the container.

  You must find all blobs whose tags match a search expression in the container. The search expression must evaluate an index tag named status with a value of final.

  You need to construct the GET method request URI.

  How should you complete the URI? To answer, drag the appropriate parameters to the correct request URI targets. Each parameter may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

  ---

  Box 1: companymedia

  List Blobs

  The List Blobs operation returns a list of the blobs under the specified container.

  Request

  You can construct the List Blobs request as follows. HTTPS is recommended. Replace myaccount with the name of your storage account.

  Method, Request URI GET

  https://myaccount.blob.core.windows.net/mycontainer?restype=container&comp=list

  Box 2: companyimages

  Box 3: Status='Final'

  https://learn.microsoft.com/en-us/rest/api/storageservices/list-blobs

• Question 556:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing a mobile app that uses an Azure SQL Database named Weyland.

  The database contains a table names Customers that has a field named email_address.

  You want to implement dynamic data masking to hide the data in the email_address field.

  Solution: You run the Set-AzSqlDatabaseDataMaskingPolicy -DatabaseName "Weyland" Powershell cmdlet Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  The Set-AzSqlDatabaseDataMaskingPolicy cmdlet sets the masking policy for the database but does not set the masking rule.

  Note: Masking is enabled by default.

  https://docs.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview

  https://docs.microsoft.com/en-us/powershell/module/az.sql/set-azsqldatabasedatamaskingrule?view=azps-4.2.0

• Question 557:

  HOTSPOT

  You are creating a CLI script that creates an Azure web app and related services in Azure App Service. The web app uses the following variables:

  

  You need to automatically deploy code from Git-Hub to the newly created web app.

  How should you complete the script? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: az appservice plan create

  The azure group creates command successfully returns JSON result. Now we can use resource group to create a azure app service plan

  Box 2: az webapp create

  Create a new web app..

  Box 3: --plan $webappname

  ..with the serviceplan we created in step 1.

  Box 4: az webapp deployment

  Continuous Delivery with GitHub. Example:

  az webapp deployment source config --name firstsamplewebsite1 --resource-group websites--repo-url $gitrepo --branch master --git-token $token

  Box 5: --repo-url $gitrepo --branch master --manual-integration

  https://medium.com/@satish1v/devops-your-way-to-azure-web-apps-with-azure-cli-206ed4b3e9b1

• Question 558:

  You have an application that includes an Azure Web app and several Azure Function apps. Application secrets including connection strings and certificates are stored in Azure Key Vault.

  Secrets must not be stored in the application or application runtime environment. Changes to Azure Active Directory (Azure AD) must be minimized.

  You need to design the approach to loading application secrets.

  What should you do?

  A. Create a single user-assigned Managed Identity with permission to access Key Vault and configure each App Service to use that Managed Identity.
  B. Create a single Azure AD Service Principal with permission to access Key Vault and use a client secret from within the App Services to access Key Vault.
  C. Create a system assigned Managed Identity in each App Service with permission to access Key Vault.
  D. Create an Azure AD Service Principal with Permissions to access Key Vault for each App Service and use a certificate from within the App Services to access Key Vault.
  C. Create a system assigned Managed Identity in each App Service with permission to access Key Vault.

  ---

  Explanation

  Use Key Vault references for App Service and Azure Functions. Key Vault references currently only support system-assigned managed identities. User-assigned identities cannot be used.

  https://docs.microsoft.com/en-us/azure/app-service/app-service-key-vault-references

• Question 559:

  DRAG DROP

  You are developing an ASP.NET Core website that can be used to manage photographs which are stored in Azure Blob Storage containers.

  Users of the website authenticate by using their Azure Active Directory (Azure AD) credentials.

  You implement role-based access control (RBAC) role permission on the containers that store photographs. You assign users to RBAC role.

  You need to configure the website's Azure AD Application so that user's permissions can be used with the Azure Blob containers.

  How should you configure the application? To answer, drag the appropriate setting to the correct location. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: user_impersonation

  Box 2: delegated

  Example:

  1.Select the API permissions section 2.Click the Add a permission button and then: Ensure that the My APIs tab is selected 3.In the list of APIs, select the API TodoListService-aspnetcore. 4.In the Delegated permissions section, ensure that the right permissions are checked: user_impersonation. 5.Select the Add permissions button.

  Box 3: delegated

  Example 1.Select the API permissions section 2.Click the Add a permission button and then, Ensure that the Microsoft APIs tab is selected 3.In the Commonly used Microsoft APIs section, click on Microsoft Graph 4.In the Delegated permissions section, ensure that the right permissions are checked: User.Read. Use the search box if necessary. 5.Select the Add permissions button

  References:

  https://docs.microsoft.com/en-us/samples/azure-samples/active-directory-dotnet-webapp-webapi-openidconnect-aspnetcore/calling-a-web-api-in-an-aspnet-core-web-application-using-azure-ad/

• Question 560:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet.

  You need to ensure that users who connect to Azure AD via the internet using an unidentified IP address, are automatically instructed to change their passwords.

  Solution: You configure the use of Azure AD Identity Protection.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy