Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 51:

  DRAG DROP

  You need to add markup at line AM04 to implement the ContentReview role.

  How should you complete the markup? To answer, drag the appropriate json segments to the correct locations. Each json segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: allowedMemberTypes

  allowedMemberTypes specifies whether this app role definition can be assigned to users and groups by setting to "User", or to other applications (that are accessing this application in daemon service scenarios) by setting to "Application", or to both.

  Note: The following example shows the appRoles that you can assign to users.

  "appId": "8763f1c4-f988-489c-a51e-158e9ef97d6a",

  "appRoles": [

  {

  "allowedMemberTypes": [

  "User"

  ],

  "displayName": "Writer",

  "id": "d1c2ade8-98f8-45fd-aa4a-6d06b947c66f",

  "isEnabled": true,

  "description": "Writers Have the ability to create tasks.",

  "value": "Writer"

  }

  ],

  "availableToOtherTenants": false,

  Box 2: User

  Scenario: In order to review content a user must be part of a ContentReviewer role.

  Box 3: value

  value specifies the value which will be included in the roles claim in authentication and access tokens.

  https://docs.microsoft.com/en-us/graph/api/resources/approle

• Question 52:

  You have an Azure subscription that contains an Application Insights resource named AI1 and an Azure App Service web app named App1.

  You create a Standard availability test in AI1. You set its URL to point to App1.

  You need to ensure that any failed tests generate email notifications to the owners of the subscription.

  What should you do?

  A. Enable the test
  B. Create an alert rule.
  C. Create an action group.
  D. Enable the alert.
  B. Create an alert rule.

• Question 53:

  HOTSPOT

  You need to configure Azure Cosmos DB.

  Which settings should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Strong

  When the consistency level is set to strong, the staleness window is equivalent to zero, and the clients are guaranteed to read the latest committed value of the write operation.

  Scenario: Changes to the Order data must reflect immediately across all partitions. All reads to the Order data must fetch the most recent writes.

  Note: You can choose from five well-defined models on the consistency spectrum. From strongest to weakest, the models are: Strong, Bounded staleness, Session, Consistent prefix, Eventual

  Box 2: SQL

  Scenario: You identify the following requirements for data management and manipulation: Order data is stored as nonrelational JSON and must be queried using Structured Query Language (SQL).

• Question 54:

  You need to authenticate the user to the corporate website as indicated by the architectural diagram.

  Which two values should you use? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. ID token signature
  B. ID token claims
  C. HTTP response code
  D. Azure AD endpoint URI
  E. Azure AD tenant ID
  B. ID token claims
  E. Azure AD tenant ID

  ---

  Explanation

  Claims in access tokens JWTs (JSON Web Tokens) are split into three pieces:

  1. Header - Provides information about how to validate the token including information about the type of token and how it was signed.

  2. Payload - Contains all of the important data about the user or app that is attempting to call your service.

  3. Signature - Is the raw material used to validate the token.

  Your client can get an access token from either the v1.0 endpoint or the v2.0 endpoint using a variety of protocols.

  Scenario: User authentication (see step 5 below)

  The following steps detail the user authentication process:

  1. The user selects Sign in in the website.

  2. The browser redirects the user to the Azure Active Directory (Azure AD) sign in page.

  3. The user signs in.

  4. Azure AD redirects the user's session back to the web application. The URL includes an access token.

  5. The web application calls an API and includes the access token in the authentication header. The application ID is sent as the audience ('aud') claim in the access token.

  6. The back-end API validates the access token.

  https://docs.microsoft.com/en-us/azure/api-management/api-management-accessrestriction-policies

• Question 55:

  DRAG DROP

  You are developing an Azure Function app.

  The app must meet the following requirements:

  1. Enable developers to write the functions by using the Rust language.

  2. Declaratively connect to an Azure Blob Storage account.

  You need to implement the app.

  Which Azure Function app features should you use? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: Custom handler

  Custom handlers can be used to create functions in any language or runtime by running an HTTP server process, for example Go or Rust.

  Box 2: Trigger

  Functions are invoked by a trigger and can have exactly one. In addition to invoking the function, certain triggers also serve as bindings. You may also define multiple bindings in addition to the trigger. Bindings provide a declarative way to connect data to your code.

• Question 56:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data.

  You must store the device in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future.

  You need to implement a solution to receive the device data.

  Solution: Provision an Azure Service Bus. Configure a topic to receive the device data by using a correlation filter.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  A message is raw data produced by a service to be consumed or stored elsewhere. The Service Bus is for high-value enterprise messaging, and is used for order processing and financial transactions.

  References:

  https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-programming-guide

• Question 57:

  HOTSPOT

  You need to correct the Azure Logic app error message.

  Which configuration values should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Scenario: You test the Logic app in a development environment. The following error message displays:

  '400 Bad Request'

  Troubleshooting of the error shows an HttpTrigger action to call the RequestUserApproval function.

  Note: If the inbound call's request body doesn't match your schema, the trigger returns an HTTP 400 Bad Request error.

  Box 1: function

  If you have an Azure function where you want to use the system-assigned identity, first enable authentication for Azure functions.

  Box 2: system-assigned

  Your logic app or individual connections can use either the system-assigned identity or a single user-assigned identity, which you can share across a group of logic apps, but not both.

  https://docs.microsoft.com/en-us/azure/logic-apps/create-managed-service-identity

• Question 58:

  You manage an Azure Cosmos DB for a NoSQL API account named account1.

  The account contains a database named db1, which contains a container named container1. You configure account! with a session consistency level.

  You plan to develop an application named Appl that will access container1.

  Individual instances of Appl must perform reads and writes. App1 must allow multiple nodes to participate in the same session.

  You need to configure an object to share the session token between the nodes.

  Which object should you use?

  A. Request options
  B. Feed options
  C. Connection policy
  D. Document response
  A. Request options

• Question 59:

  You are designing a multi-tiered application that will be hosted on Azure virtual machines. The virtual machines will run Windows Server. Front-end servers will be accessible from the Internet over port 443. The other servers will NOT be directly accessible over the internet

  You need to recommend a solution to manage the virtual machines that meets the following requirement:

  1. Allows the virtual machine to be administered by using Remote Desktop.

  2. Minimizes the exposure of the virtual machines on the Internet

  Which Azure service should you recommend?

  A. Azure Bastion
  B. Service Endpoint
  C. Azure Private Link
  D. Azure Front Door
  C. Azure Private Link

• Question 60:

  HOTSPOT

  You need to implement the retail store location Azure Function.

  How should you configure the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Scenario: Retail store locations: Azure Functions must process data immediately when data is uploaded to Blob storage.

  Box 1: HTTP

  Binding configuration example:

  https://<storage_account_name>.blob.core.windows.net

  Box 2: Input

  Read blob storage data in a function: Input binding

  Box 3: Blob storage

  The Blob storage trigger starts a function when a new or updated blob is detected.

  Azure Functions integrates with Azure Storage via triggers and bindings. Integrating with Blob storage allows you to build functions that react to changes in blob data as well as read and write values.

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-blob-trigger