Microsoft AZ-204 Online Practice Questions and Exam Preparation

Microsoft AZ-204 Online Questions & Answers

• Question 81:

  HOTSPOT

  You are developing an ASP.NET Core web application, using the latest .NET runtime, hosted in Azure App Service.

  You must collect traces, metrics, logs, and exceptions to monitor application performance and diagnose issues. You have the following requirements:

  1. All data must be sent to a new Application Insights instance.

  2. The connection to the Application Insights resource must be secure.

  3. The resource connection value must allow updating by code deployment pipelines.

  4. You must enable the selection and filtering of metrics and performance counters to examine in near real-time.

  5. You must inspect stack traces from sample failed requests and exceptions.

  You start by creating a new Application Insights instance in the Azure Portal and installing the latest Azure.Monitor.OpenTelemetry.AspNetCore NuGet package in your application.

  You need to enable and configure OpenTelemetry-based data collection.

  Which configuration should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 82:

  You need to troubleshoot the order workflow.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Review the API connections.
  B. Review the activity log.
  C. Review the run history.
  D. Review the trigger history.
  C. Review the run history.
  D. Review the trigger history.

  ---

  Explanation

  Scenario: The order workflow fails to run upon initial deployment to Azure.

  Check runs history: Each time that the trigger fires for an item or event, the Logic Apps engine creates and runs a separate workflow instance for each item or event. If a run fails, follow these steps to review what happened during that run, including the status for each step in the workflow plus the inputs and outputs for each step.

  Check the workflow's run status by checking the runs history. To view more information about a failed run, including all the steps in that run in their status, select the failed run.

  Example:

  

  Check the trigger's status by checking the trigger history

  To view more information about the trigger attempt, select that trigger event, for example:

  

  https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-diagnosing-failures

• Question 83:

  DRAG DROP

  Fourth Coffee has an ASP.NET Core web app that runs in Docker. The app is mapped to the www.fourthcoffee.com domain.

  Fourth Coffee is migrating this application to Azure.

  You need to provision an App Service Web App to host this docker image and map the custom domain to the App Service web app.

  A resource group named FourthCoffeePublicWebResourceGroup has been created in the WestUS region that contains an App Service Plan named AppServiceLinuxDockerPlan.

  Which order should the CLI commands be used to develop the solution? To answer, move all of the Azure CLI command from the list of commands to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Step 1: #bin/bash

  The appName is used when the webapp-name is created in step 2.

  Step 2: az webapp config hostname add

  The webapp-name is used when the webapp is created in step 3.

  Step 3: az webapp create

  Create a web app. In the Cloud Shell, create a web app in the myAppServicePlan App Service plan with the az webapp create command.

  Step : az webapp confing container set

  In Create a web app, you specified an image on Docker Hub in the az webapp create command. This is good enough for a public image. To use a private image, you need to configure your Docker account ID and password in your Azure web app.

  In the Cloud Shell, follow the az webapp create command with az webapp config container set.

  References:

  https://docs.microsoft.com/en-us/azure/app-service/containers/tutorial-custom-docker-image

• Question 84:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You are developing a solution for a public facing API.

  The API back end is hosted in an Azure App Service instance. You have implemented a RESTful service for the API back end.

  You must configure back-end authentication for the API Management service instance.

  Solution: You configure Basic gateway credentials for the Azure resource.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  API Management allows to secure access to the back-end service of an API using client certificates.

  https://docs.microsoft.com/en-us/rest/api/apimanagement/apimanagementrest/azure-api-management-rest-api-backend-entity

• Question 85:

  HOTSPOT

  You have an Azure API Management instance named API1 that uses a managed gateway.

  You plan to implement a policy that will apply at a product scope and will set the header of inbound requests to include information about the region hosting the gateway of API1. The policy definition contains the following content:

  

  You have the following requirements for the policy definition:

  Ensure that the header contains the information about the region hosting the gateway of API1.

  Ensure the policy applies only after any global level policies are processed first.

  You need to complete the policy definition.

  Which values should you choose? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 86:

  You need to securely access inventory items when developing the Inventory Items API.

  What are three possible ways to achieve this goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Create a custom Microsoft Entra role Assign the custom role to the Azure Cosmos DB account Update the function app to use certificate-based authentication.
  B. Create a SQL role definition under the Azure Cosmos DB account. Create a user-assigned managed identity and assign the identity to the function app. Assign the user-assigned managed identity the SQL role definition. Update the function app code to implement the DefaultAzurecredential class and reference the user-assigned managed identity.
  C. Create a system-assigned managed identity for the function app with read access to secrets in Azure Key Vault. Store the Azure Cosmos DB primary key and URI in Azure Key Vault as secrets. Use function app settings to reference the secret values.
  D. Create a custom Microsoft Entra role. Assign the custom role to Azure Key Vault. Assign the custom role to the function app. Reference the custom role in the function app code when accessing Azure Key Vault values.
  E. Create a SQL role definition under the Azure Cosmos DB account. Assign the role to the function app's system-assigned managed identity. Programmatically access the Azure Cosmos OB keys from the function app.
  B. Create a SQL role definition under the Azure Cosmos DB account. Create a user-assigned managed identity and assign the identity to the function app. Assign the user-assigned managed identity the SQL role definition. Update the function app code to implement the DefaultAzurecredential class and reference the user-assigned managed identity.
  C. Create a system-assigned managed identity for the function app with read access to secrets in Azure Key Vault. Store the Azure Cosmos DB primary key and URI in Azure Key Vault as secrets. Use function app settings to reference the secret values.
  E. Create a SQL role definition under the Azure Cosmos DB account. Assign the role to the function app's system-assigned managed identity. Programmatically access the Azure Cosmos OB keys from the function app.

• Question 87:

  DRAG DROP

  You need to implement telemetry for non-user actions.

  How should you complete the Filter class? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Scenario: Exclude non-user actions from Application Insights telemetry.

  Box 1: ITelemetryProcessor

  To create a filter, implement ITelemetryProcessor. This technique gives you more direct control over what is included or excluded from the telemetry stream.

  Box 2: ITelemetryProcessor

  Box 3: ITelemetryProcessor

  Box 4: RequestTelemetry

  Box 5: /health

  To filter out an item, just terminate the chain.

  https://docs.microsoft.com/en-us/azure/azure-monitor/app/api-filtering-sampling

• Question 88:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.

  When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.

  You need to design the process that starts the photo processing.

  Solution: Create an Azure Function app that uses the Consumption hosting model and that is triggered from the blob upload.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  In the Consumption hosting plan, resources are added dynamically as required by your functions.

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-storage-blob-triggered-function

• Question 89:

  HOTSPOT

  You develop a containerized application. The application must be deployed to an existing Azure Kubernetes Service (AKS) cluster from an Azure Container Registry (ACR) instance. You use the Azure command-line interface (Azure CLI) to deploy the application image to AKS.

  Images must be pulled from the registry. You must be able to view all registries within the current Azure subscription. Authentication must be managed by Microsoft Entra ID and removed when the registry is deleted. The solution must use the principle of least privilege.

  You need to configure authentication to the registry.

  Which authentication configuration should you use? To answer, select the appropriate configuration values in the answer area,

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: System-assigned managed identity Registry authentication method

  Authenticate with Azure Container Registry (ACR) from Azure Kubernetes Service (AKS)

  The AKS to ACR integration assigns the AcrPull role to the Microsoft Entra ID managed identity associated with the agent pool in your AKS cluster.

  System-assigned managed identities have their lifecycle tied to the resource that created them, which we need in this scenario.

  Incorrect:

  * User-assigned managed identities can be used on multiple resources.

  Box 2: AcrPull

  Registry Azure role-based access control (Azure RBAC) role

  https://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration

• Question 90:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Margie's Travel is an international travel and bookings management service. The company is expanding into restaurant bookings. You are tasked with implementing Azure Search for the restaurants listed in their solution.

  You create the index in Azure Search.

  You need to import the restaurant data into the Azure Search service by using the Azure Search .NET SDK.

  Solution:

  1. Create a SearchIndexClient object to connect to the search index

  2. Create an IndexBatch that contains the documents which must be added.

  3. Call the Documents.Index method of the SearchIndexClient and pass the IndexBatch.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  1. The index needs to be populated. To do this, we will need a SearchIndexClient. There are two ways to obtain one: by constructing it, or by calling Indexes.GetClient on the SearchServiceClient. Here we will use the first method.

  2. Create the indexBatch with the documents

  Something like:

  var hotels = new Hotel[];

  {

  new Hotel()

  {

  HotelId = "3",

  BaseRate = 129.99, Description = "Close to town hall and the river"

  }

  };

  ...

  var batch = IndexBatch.Upload(hotels);

  3. The next step is to populate the newly-created index

  Example:

  var batch = IndexBatch.Upload(hotels);

  try

  {

  indexClient.Documents.Index(batch);

  } References:

  https://docs.microsoft.com/en-us/azure/search/search-howto-dotnet-sdk