Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 71:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are designing an Azure WebJob that will run on the same instances as a web app. You want to make use of a suitable WebJob type. The webjob type should also allow for the option to restrict the WebJob to a single instance.

  Solution: You configure the use of the Triggered WebJob type.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/app-service/webjobs-create#webjob-types

• Question 72:

  HOTSPOT

  You are developing an application that needs access to an Azure virtual machine (VM).

  The access lifecycle for the application must be associated with the VM service instance.

  You need to enable managed identity for the VM.

  How should you complete the PowerShell segment? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: -IdentityType

  Enable system-assigned managed identity on an existing

  Azure VM: To enable a system-assigned managed identity, use the -IdentityType switch on the Update-AzVM cmdlet (see below).

  Box 2: $SystemAssigned

  $vm = Get-AzVM -ResourceGroupName myResourceGroup -Name myVM

  Update-AzVM -ResourceGroupName myResourceGroup -VM $vm -IdentityType SystemAssigned

  https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/qs-configure-powershell-windows-vm

• Question 73:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing an application that processes Azure Blob storage events.

  Your application has the following requirements:

  Process transaction logs asynchronously for changes that occur to the blobs and the blob metadata.

  Process changes in the order in which they occurred.

  Retain changes for compliance reasons.

  Solution: You use Azure Event Grid with a subscriber Azure Function app.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/event-grid/overview

  https://docs.microsoft.com/en-us/azure/event-grid/event-handlers#azure-functions

• Question 74:

  DRAG DROP

  You are developing an Azure-hosted application that must use an on-premises hardware security module (HSM) key.

  The key must be transferred to your existing Azure Key Vault by using the Bring Your Own Key (BYOK) process.

  You need to securely transfer the key to Azure Key Vault.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  To perform a key transfer, a user performs following steps:

  1. Generate KEK.

  2. Retrieve the public key of the KEK.

  3. Using HSM vendor provided BYOK tool - Import the KEK into the target HSM and exports the Target Key protected by the KEK.

  4. Import the protected Target Key to Azure Key Vault.

  Step 1: Generate a Key Exchange Key (KEK).

  Step 2: Retrieve the Key Exchange Key (KEK) public key.

  Step 3: Generate a key transfer blob file by using the HSM vendor-provided tool.

  Generate key transfer blob using HSM vendor provided BYOK tool

  Step 4: Run the az keyvault key import command

  Upload key transfer blob to import HSM-key.

  Customer will transfer the Key Transfer Blob (".byok" file) to an online workstation and then run a az keyvault key import command to import this blob as a new HSM-backed key into Key Vault.

  To import an RSA key use this command:

  az keyvault key import

  https://docs.microsoft.com/en-us/azure/key-vault/keys/byok-specification

• Question 75:

  You have an Azure Queue Storage account that contains a queue named queue1.

  You plan to use Azure SDK for NET to develop a solution that uses queue1.

  You need to author C# code that will return an approximate number of messages in queue1.

  Your solution must minimize the development effort.

  Which method should you use in your code?

  A. GetProperties method of the QueueClient class
  B. GetProperties method of the QueueServiceClient class
  C. PeekMessages method of the QueueClient class
  D. GetStatlstics method of the QueueServiceClient class
  A. GetProperties method of the QueueClient class

• Question 76:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant.

  You want to implement multi-factor authentication by making use of a conditional access policy. The conditional access policy must be applied to all users when they access the Azure portal.

  Which three settings should you configure? To answer, select the appropriate settings to the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1:

  The conditional access policy must be applied or assigned to Users and Groups.

  Box 2:

  The conditional access policy must be applied when users access the Azure portal, which is a cloud app. That is: Microsoft Azure Management

  Box 3:

  Access control must require multi-factor authentication when granting access.

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-based-mfa

• Question 77:

  A development team is creating a new REST API. The API will store data in Azure Blob storage. You plan to deploy the API to Azure App Service.

  Developers must access the Azure Blob storage account to develop the API for the next two months. The Azure Blob storage account must not be accessible by the developers after the two-month time period.

  You need to grant developers access to the Azure Blob storage account.

  What should you do?

  A. Generate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers.
  B. Create and apply a new lifecycle management policy to include a last accessed date value. Apply the policy to the Azure Blob storage account.
  C. Provide all developers with the access key for the Azure Blob storage account. Update the API to include the Coordinated Universal Time (UTC) timestamp for the request header.
  D. Grant all developers access to the Azure Blob storage account by assigning role-based access control (RBAC) roles.
  A. Generate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers.

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

• Question 78:

  HOTSPOT

  You are working for a company that designs mobile applications. They maintain a server where player records are assigned to their different games. The tracking system is new and in development.

  The application uses Entity Framework to connect to an Azure Database. The database holds a Player table and Game table.

  When adding a player, the code should insert a new player record, and add a relationship between an existing game record and the new player record.

  The application will call CreatePlayerWithGame with the correct gameIdand the playerId to start the process. (Line numbers are included for reference only.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Many-to-many relationships without an entity class to represent the join table are not yet supported. However, you can represent a many-to-many relationship by including an entity class for the join table and mapping two separate one-to- many relationships.

  protected override void OnModelCreating(ModelBuilder modelBuilder) {

  modelBuilder.Entity<PostTag>()

  HasKey(t => new { t.PostId, t.TagId });

  modelBuilder.Entity<PostTag>()

  HasOne(pt => pt.Post)

  WithMany(p => p.PostTags)

  HasForeignKey(pt => pt.PostId);

  modelBuilder.Entity<PostTag>()

  HasOne(pt => pt.Tag)

  WithMany(t => t.PostTags)

  HasForeignKey(pt => pt.TagId);

  }

  }

• Question 79:

  A company is implementing a publish-subscribe (Pub/Sub) messaging component by using Azure Service Bus. You are developing the first subscription application.

  In the Azure portal you see that messages are being sent to the subscription for each topic. You create and initialize a subscription client object by supplying the correct details, but the subscription application is still not consuming the messages.

  You need to complete the source code of the subscription client What should you do?

  A. await subscriptionClient.CloseAsync();
  B. await subscriptionClient.AddRuleAsync(new RuleDescription(RuleDescription.DefaultRuleName, new TrueFilter()));
  C. subscriptionClient.RegisterMessageHandler(ProcessMessagesAsync, messageHandlerOptions);
  D. subscriptionClient = new SubscriptionClient(ServiceBusConnectionString, TopicName, SubscriptionName);
  C. subscriptionClient.RegisterMessageHandler(ProcessMessagesAsync, messageHandlerOptions);

  ---

  Explanation

  Using topic client, call RegisterMessageHandler which is used to receive messages continuously from the entity. It registers a message handler and begins a new thread to receive messages. This handler is waited on every time a new message is received by the receiver.

  subscriptionClient.RegisterMessageHandler(ReceiveMessagesAsync, messageHandlerOptions);

  References:

  https://www.c-sharpcorner.com/article/azure-service-bus-topic-and-subscription-pub-sub/

• Question 80:

  You are developing an Azure Function that calls external APIs by providing an access token for the API. The access token is stored in a secret named token in an Azure Key Vault named mykeyvault.

  You need to ensure the Azure Function can access to the token.

  Which value should you store in the Azure Function App configuration?

  A. KeyVault:mykeyvault;Secret:token
  B. App:Settings:Secret:mykeyvault:token
  C. AZUREKVCONNSTR_ https://mykeyveult.vault.ezure.net/secrets/token/
  D. @Microsoft.KeyVault(SecretUri=https://mykeyvault.vault.azure.net/secrets/token/)
  D. @Microsoft.KeyVault(SecretUri=https://mykeyvault.vault.azure.net/secrets/token/)

  ---

  Explanation

  Add Key Vault secrets reference in the Function App configuration.

  Syntax: @Microsoft.KeyVault(SecretUri={copied identifier for the username secret})

  https://daniel-krzyczkowski.github.io/Integrate-Key-Vault-Secrets-With-Azure-Functions/