Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 561:

  HOTSPOT

  A company develops a series of mobile games. All games use a single leaderboard service.

  You have the following requirements:

  1. Code must be scalable and allow for growth.

  2. Each record must consist of a playerId, gameId, score, and time played.

  3. When users reach a new high score, the system will save the new score using the SaveScore function below.

  4. Each game is assigned an Id based on the series title.

  You plan to store customer information in Azure Cosmos DB. The following data already exists in the database:

  

  You develop the following code to save scores in the data store. (Line numbers are included for reference only.)

  

  You develop the following code to query the database. (Line numbers are included for reference only.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  Create a table.

  A CloudTableClient object lets you get reference objects for tables and entities. The following code creates a CloudTableClient object and uses it to create a new CloudTable object, which represents a table

  // Retrieve storage account from connection-string.

  CloudStorageAccount storageAccount =

  CloudStorageAccount.parse(storageConnectionString);

  // Create the table client.

  CloudTableClient tableClient = storageAccount.createCloudTableClient();

  // Create the table if it doesn't exist.

  String tableName = "people"; CloudTable cloudTable = tableClient.getTableReference(tableName);

  cloudTable.createIfNotExists(); Box 2: No

  New records are inserted with TableOperation.insert. Old records are not updated.

  To update old records TableOperation.insertOrReplace should be used instead.

  Box 3: No

  Box 4: Yes

  https://docs.microsoft.com/en-us/azure/cosmos-db/table-storage-how-to-use-java

• Question 562:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing an Azure Service application that processes queue data when it receives a message from a mobile application. Messages may not be sent to the service consistently.

  You have the following requirements:

  1. Queue size must not grow larger than 80 gigabytes (GB).

  2. Use first-in-first-out (FIFO) ordering of messages.

  3. Minimize Azure costs.

  You need to implement the messaging solution.

  Solution: Use the .Net API to add a message to an Azure Storage Queue from the mobile application. Create an Azure Function App that uses an Azure Storage Queue trigger.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Create an Azure Function App that uses an Azure Service Bus Queue trigger.

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-storage-queue-triggered-function

• Question 563:

  HOTSPOT

  You develop two Python scripts to process data.

  The Python scripts must be deployed to two, separate Linux containers running in an Azure Container Instance container group. The containers must access external data by using the Server Message Block (SMB) protocol. Containers in the container group must run only once.

  You need to configure the Azure Container Instance.

  Which configuration value should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Azure file share

  Mount an Azure file share in Azure Container Instances

  By default, Azure Container Instances are stateless. If the container is restarted, crashes, or stops, all of its state is lost. To persist state beyond the lifetime of the container, you must mount a volume from an external store. As shown in this article, Azure Container Instances can mount an Azure file share created with Azure Files. Azure Files offers fully managed file shares hosted in Azure Storage that are accessible via the industry standard Server Message Block (SMB) protocol. Using an Azure file share with Azure Container Instances provides file-sharing features similar to using an Azure file share with Azure virtual machines.

  Box 2: Never

  To run only once we use Never.

  Note: Container restart policy

  When you create a container group in Azure Container Instances, you can specify one of three restart policy settings.

  * Always

  Containers in the container group are always restarted. This is the default setting applied when no restart policy is specified at container creation.

  * Never

  Containers in the container group are never restarted. The containers run at most once.

  * OnFailure

  Containers in the container group are restarted only when the process executed in the container fails (when it terminates with a nonzero exit code). The containers are run at least once.

  https://learn.microsoft.com/en-us/azure/container-instances/container-instances-volume-azure-files

• Question 564:

  You are a developer for a SaaS company that offers many web services.

  All web services for the company must meet the following requirements:

  Use API Management to access the services Use OpenID Connect for authentication Prevent anonymous usage

  A recent security audit found that several web services can be called without any authentication.

  Which API Management policy should you implement?

  A. jsonp
  B. authentication-certificate
  C. check-header
  D. validate-jwt
  D. validate-jwt

  ---

  Explanation

  Add the validate-jwt policy to validate the OAuth token for every incoming request.

  Incorrect Answers:

  A: The jsonp policy adds JSON with padding (JSONP) support to an operation or an API to allow cross-domain calls from JavaScript browser-based clients. JSONP is a method used in JavaScript programs to request data from a server in a different domain. JSONP bypasses the limitation enforced by most web browsers where access to web pages must be in the same domain.

  JSONP - Adds JSON with padding (JSONP) support to an operation or an API to allow cross-domain calls from JavaScript browser-based clients.

  https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-protect-backend-with-aad

• Question 565:

  DRAG DROP

  You need to secure the corporate website for users.

  Which four actions should you perform in sequence?

  To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order

  NOTE: More than one order of answer choices is correct You will receive credit for any of the correct orders you select.

  Select and Place:

  

  

• Question 566:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing a mobile app that uses an Azure SQL Database named Weyland.

  The database contains a table names Customers that has a field named email_address.

  You want to implement dynamic data masking to hide the data in the email_address field.

  Solution: You run the follows transact-SQL statement:

  ALTER TABLE [dbo].[Weyland].[Customers]

  ALTER COLUMN [email_address]

  ADD MASKED WITH (FUNCTION = 'email()') Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  https://docs.microsoft.com/en-us/sql/t-sql/statements/alter-table-transact-sql?view=sql-server-ver15

  https://docs.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking?view=sql-server-

  ver15

• Question 567:

  HOTSPOT

  You are working for Contoso, Ltd.

  You define an API Policy object by using the following XML markup:

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  Use the set-backend-service policy to redirect an incoming request to a different backend than the one specified in the API settings for that operation.

  Syntax: <set-backend-service base-url="base URL of the backend service" />

  Box 2: No

  The condition is on 512k, not on 256k.

  Box 3: No

  The set-backend-service policy changes the backend service base URL of the incoming request to the one specified in the policy.

  https://docs.microsoft.com/en-us/azure/api-management/api-management-transformation-policies

• Question 568:

  You develop a solution that uses an Azure SQL Database to store user information for a mobile app.

  The app stores sensitive information about users.

  You need to hide sensitive information from developers that query the data for the mobile app.

  Which three items must you identify when configuring dynamic data masking? Each correct answer presents a part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Column
  B. Table
  C. Trigger
  D. Index
  E. Schema
  A. Column
  B. Table
  E. Schema

  ---

  Explanation

  In the Dynamic Data Masking configuration page, you may see some database columns that the recommendations engine has flagged for masking. In order to accept the recommendations, just click Add Mask for one or more columns and a mask is created based on the default type for this column. You can change the masking function by clicking on the masking rule and editing the masking field format to a different format of your choice.

  

  References:

  https://docs.microsoft.com/en-us/azure/sql-database/sql-database-dynamic-data-masking-get-started-portal

• Question 569:

  You are developing an application that uses keys stored in Azure Key Vault.

  You need to enforce a specific cryptographic algorithm and key size for keys stored in the vault.

  What should you use?

  A. Secret versioning
  B. Azure Policy
  C. Key Vault Firewall
  D. Access policies
  B. Azure Policy

  ---

  Explanation

  You can integrate Azure Key Vault with Azure Policy.

  Example Usage Scenarios:

  * You want to improve the security posture of your company by implementing requirements around minimum key sizes and maximum validity periods of certificates in your company's key vaults but you don't know which teams will be compliant and which aren't.

  Available Built-In Policy Definitions urrent built-ins for Azure Key Vault are categorized in four major groups: key vault, certificates, keys, and secrets management. Within each category, policies are grouped towards driving specific security goals.

  https://learn.microsoft.com/en-us/azure/key-vault/general/azure-policy

• Question 570:

  HOTSPOT

  You are developing an ASP.NET Core app that includes feature flags which are managed by Azure App Configuration. You create an Azure App Configuration store named AppFeatureflagStore as shown in the exhibit:

  

  You must be able to use the feature in the app by using the following markup:

  

  You need to update the app to use the feature flag.

  Which values should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: FeatureGate

  You can use the FeatureGate attribute to control whether a whole controller class or a specific action is enabled.

  Box 2: AddAzureAppConfiguration

  The extension method AddAzureAppConfiguration is used to add the Azure App Configuration Provider.

  Box 3:

  https://appfeatureflagstore.azconfig.io

  You need to request the access token with resource=

  https://<yourstorename>.azconfig.io

  https://docs.microsoft.com/en-us/azure/azure-app-configuration/use-feature-flags-dotnet-core

  https://csharp.christiannagel.com/2020/05/19/azureappconfiguration/

  https://stackoverflow.com/questions/61899063/how-to-use-azure-app-configuration-rest-api