Updated Microsoft AZ-204 Exam Questions for Effective Exam Preparation

Question #1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a website that will run as an Azure Web App. Users will authe

A. es

B. o

View answer

Correct Answer: B

Question #2

HOTSPOT (Drag & Drop is not supported)You are developing a C++ application that compiles to a native application named process.exe. The application accepts images as input and returns images in one of the following image formats: GIF, PNG, or JPEG.You must deploy the application as an Azure Function.You need to configure the function and host json files.How should you complete the json files? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #3

HOTSPOT (Drag & Drop is not supported)You are developing an application that includes two Docker containers.The application must meet the following requirements:-The containers must not run as root.-The containers must be deployed to Azure Container Instances by using a YAML file.-The containers must share a lifecycle, resources, local network, and storage volume.-The storage volume must persist through container crashes.-The storage volume must be deployed on stop or restart of the containers.You need to c

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #4

HOTSPOT (Drag & Drop is not supported)You need to correct the Azure Logic app error message.Which configuration values should you use? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #5

HOTSPOT (Drag & Drop is not supported)You are developing a solution that uses the Azure Storage Client library for .NET. You have the following code: (Line numbers are included for reference only.)For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #6

DRAG DROP (Drag & Drop is not supported)You need to ensure that PolicyLib requirements are met.How should you complete the code segment? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #7

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a medical records document management website. The website is

A. es

B. o

View answer

Correct Answer: B

Question #8

This question requires that you evaluate the underlined text to determine if it is correct.Your Azure Active Directory Azure (Azure AD) tenant has an Azure subscription linked to it.Your developer has created a mobile application that obtains Azure AD access tokens using the OAuth 2 implicit grant type.The mobile application must be registered in Azure AD.You require a redirect URI from the developer for registration purposes.Instructions: Review the underlined text. If it makes the statement correct, selec

A. o change required

B. secret

C. login hint

D. client ID

View answer

Correct Answer: A

Question #9

HOTSPOT (Drag & Drop is not supported)You are building a traffic monitoring system that monitors traffic along six highways. The system produces time series analysis-based reports for each highway. Data from traffic sensors are stored in Azure Event Hub.Traffic data is consumed by four departments. Each department has an Azure Web App that displays the time series-based reports and contains a WebJob that processes the incoming data from Event Hub. All Web Apps run on App Service Plans with three instances.D

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #10

DRAG DROP (Drag & Drop is not supported)You are developing a microservices solution. You plan to deploy the solution to a multinode Azure Kubernetes Service (AKS) cluster.You need to deploy a solution that includes the following features:-reverse proxy capabilities-configurable traffic routing-TLS termination with a custom certificateWhich component should you use? To answer, drag the appropriate components to the correct requirements. Each component may be used once, more than once, or not at all. You may

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #11

DRAG DROP (Drag & Drop is not supported)A web service provides customer summary information for e-commerce partners. The web service is implemented as an Azure Function app with an HTTP trigger. Access to the API is provided by an Azure API Management instance. The API Management instance is configured in consumption plan mode. All API calls are authenticated by using OAuth.API calls must be cached. Customers must not be able to view cached data for other customers.You need to configure API Management polic

A. reate a Selenium web test and configure it to run from your workstation as a scheduled task

B. et up a URL ping test to query the home page

C. reate an Azure function to query the home page

D. reate a multi-step web test to query the home page

E. reate a Custom Track Availability Test to query the home page

View answer

Correct Answer: A

Question #12

Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-joined device. The cluster is located in a resource group.Developers have created an application named MyApp. MyApp was packaged into a container image.You need to deploy the YAML manifest file for the application.Solution: You install the Azure CLI on the device and run the kubectl apply –f myapp.yaml command.Does this meet the goal?

A. es

B. o

View answer

Correct Answer: A

Question #13

HOTSPOT (Drag & Drop is not supported)You deploy an ASP.NET web app to Azure App Service.You must monitor the web app by using Application Insights.You need to configure Application Insights to meet the requirements.Which feature should you use? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #14

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a website that will run as an Azure Web App. Users will authe

A. es

B. o

View answer

Correct Answer: B

Question #15

DRAG DROP (Drag & Drop is not supported)You have downloaded an Azure Resource Manager template to deploy numerous virtual machines. The template is based on a current virtual machine, but must be adapted to reference an administrative password.You need to make sure that the password is not stored in plain text.You are preparing to create the necessary components to achieve your goal.Which of the following should you create to achieve your goal? Answer by dragging the correct option from the list to the answ

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #16

HOTSPOT (Drag & Drop is not supported)You are developing an ASP.NET Core app that includes feature flags which are managed by Azure App Configuration. You create an Azure App Configuration store named AppFeatureflagStore as shown in the exhibit:You must be able to use the feature in the app by using the following markup: You need to update the app to use the feature flag.Which values should you use? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #17

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.You need to ensure that the application is highly available and that the users’ streaming experience is constant. You also want to configure the application to store data in a geogr

A. es

B. o

View answer

Correct Answer: A

Question #18

You are developing a solution that will use a multi-partitioned Azure Cosmos DB database. You plan to use the latest Azure Cosmos DB SDK for development.The solution must meet the following requirements:-Send insert and update operations to an Azure Blob storage account.-Process changes to all partitions immediately.-Allow parallelization of change processing.You need to process the Azure Cosmos DB operations.What are two possible ways to achieve this goal? Each correct answer presents a complete solution.N

A. ee Explanation section for answer

View answer

Correct Answer: AC

Question #19

Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-joined device. The cluster is located in a resource group.Developers have created an application named MyApp. MyApp was packaged into a container image.You need to deploy the YAML manifest file for the application.Solution: You install the docker client on the device and run the docker run -it microsoft/azure-cli:0.10.17 command.Does this meet the goal?

A. ogic Apps

B. ebJobs

C. low

D. unctions

View answer

Correct Answer: B

Question #20

HOTSPOT (Drag & Drop is not supported)You need to configure security and compliance for the corporate website files.Which Azure Blob storage settings should you use? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #21

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing an Azure solution to collect point-of-sale (POS) device data

A. es

B. o

View answer

Correct Answer: A

Question #22

DRAG DROP (Drag & Drop is not supported)You develop and deploy an Azure Logic App that calls an Azure Function app. The Azure Function App includes an OpenAPI (Swagger) definition and uses an Azure Blob storage account. All resources are secured by using Azure Active Directory (Azure AD).The Logic App must use Azure Monitor logs to record and store information about runtime data and events. The logs must be stored in the Azure Blob storage account.You need to set up Azure Monitor logs and collect diagnostic

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #23

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop Azure solutions.You must grant a virtual machine (VM) access to spec

A. es

B. o

View answer

Correct Answer: B

Question #24

You are developing an application that applies a set of governance policies for internal and external services, as well as for applications.You develop a stateful ASP.NET Core 2.1 web application named PolicyApp and deploy it to an Azure App Service Web App. The PolicyApp reacts to events from Azure Event Grid and performs policy actions based on those events.You have the following requirements:Authentication events must be used to monitor users when they sign in and sign out.All authentication events must

A. reate a new Azure Event Grid subscription for all authentication events

B. reate a separate Azure Event Grid handler for sign-in and sign-out events

C. reate separate Azure Event Grid topics and subscriptions for sign-in and sign-out events

D. dd a subject prefix to sign-out events

View answer

Correct Answer: D

Question #25

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.You need to ensure that the application is highly available and that the users’ streaming experience is constant. You also want to configure the application to store data in a geogr

A. es

B. o

View answer

Correct Answer: B

Question #26

HOTSPOT (Drag & Drop is not supported)You need to implement the Azure Function for delivery driver profile information.Which configurations should you use? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #27

An organization hosts web apps in Azure. The organization uses Azure Monitor.You discover that configuration changes were made to some of the web apps.You need to identify the configuration changes.Which Azure Monitor log should you review?

A. ppServiceAppLogs

B. ppServiceEnvironmentPlatformlogs

C. ppServiceConsoleLogs

D. ppServiceAuditLogs

View answer

Correct Answer: B

Question #28

You need to ensure receipt processing occurs correctly.What should you do?

A. se blob properties to prevent concurrency problems

B. se blob SnapshotTime to prevent concurrency problems

C. se blob metadata to prevent concurrency problems

D. se blob leases to prevent concurrency problems

View answer

Correct Answer: B

Question #29

HOTSPOT (Drag & Drop is not supported)You need to ensure that network security policies are met.How should you configure network security? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #30

HOTSPOT (Drag & Drop is not supported)A company is developing a gaming platform. Users can join teams to play online and see leaderboards that include player statistics. The solution includes an entity named Team.You plan to implement an Azure Redis Cache instance to improve the efficiency of data operations for entities that rarely change.You need to invalidate the cache when team data is changed.How should you complete the code? To answer, select the appropriate options in the answer area.NOTE: Each corre

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #31

You manage a data processing application that receives requests from an Azure Storage queue.You need to manage access to the queue. You have the following requirements:-Provide other applications access to the Azure queue.-Ensure that you can revoke access to the queue without having to regenerate the storage account keys.-Specify access at the queue level and not at the storage account level.Which type of shared access signature (SAS) should you use?

A. ervice SAS with a stored access policy

B. ccount SAS

C. ser Delegation SAS

D. ervice SAS with ad hoc SAS

View answer

Correct Answer: A

Question #32

HOTSPOT (Drag & Drop is not supported)You are developing an ASP.NET Core time sheet application that runs as an Azure Web App. Users of the application enter their time sheet information on the first day of every month.The application uses a third-party web service to validate data.The application encounters periodic server errors due to errors that result from calling a third-party web server. Each request to the third-party server has the same chance of failure.You need to configure an Azure Monitor alert

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #33

You are developing an ASP.NET Core website that uses Azure FrontDoor. The website is used to build custom weather data sets for researchers. Data sets are downloaded by users as Comma Separated Value (CSV) files. The data is refreshed every 10 hours.Specific files must be purged from the FrontDoor cache based upon Response Header values. You need to purge individual assets from the Front Door cache.Which type of cache purge should you use?

A. ingle path

B. ildcard

C. oot domain

View answer

Correct Answer: A

Question #34

HOTSPOT (Drag & Drop is not supported)You need to secure the Shipping Function app.How should you configure the app? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #35

You develop a REST API. You implement a user delegation SAS token to communicate with Azure Blob storage.The token is compromised.You need to revoke the token.What are two possible ways to achieve this goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: AB

Question #36

You are creating a hazard notification system that has a single signaling server which triggers audio and visual alarms to start and stop.You implement Azure Service Bus to publish alarms. Each alarm controller uses Azure Service Bus to receive alarm signals as part of a transaction. Alarm events must be recorded for audit purposes. Each transaction record must include information about the alarm type that was activated.You need to implement a reply trail auditing solution.Which two actions should you perfo

A. n the host

B. onvert the trigger to Azure Event Hub

C. onvert the Azure Function to the Premium plan

D. n the function

View answer

Correct Answer: AD

Question #37

DRAG DROP (Drag & Drop is not supported)You need to implement the Log policy.How should you complete the Azure Event Grid subscription? To answer, drag the appropriate JSON segments to the correct locations. Each JSON segment may be used once, more than once, or not at all. You may need to drag the split bar between panes to view content.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #38

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a website that will run as an Azure Web App. Users will authe

A. es

B. o

View answer

Correct Answer: A

Question #39

You need to resolve the log capacity issue.What should you do?

A. reate an Application Insights Telemetry Filter

B. hange the minimum log level in the host

C. mplement Application Insights Sampling

D. et a LogCategoryFilter during startup

View answer

Correct Answer: C

Question #40

HOTSPOT (Drag & Drop is not supported)You develop and deploy a web app to Azure App service. The web app allows users to authenticate by using social identity providers through the Azure B2C service. All user profile information is stored in Azure B2C.You must update the web app to display common user properties from Azure B2C to include the following information:-Email address-Job title-First name-Last name-Office locationYou need to implement the user properties in the web app.Which code library and API s

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #41

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a medical records document management website. The website is

A. es

B. o

View answer

Correct Answer: B

Question #42

Your company has an Azure subscription.You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.Which of the following is the value that you should configure for the platformUpdateDomainCount property?

A. o change required

B. ongorestore

C. zure Storage Explorer

D. zCopy

View answer

Correct Answer: D

Question #43

DRAG DROP (Drag & Drop is not supported)You need to add markup at line AM04 to implement the ContentReview role.How should you complete the markup? To answer, drag the appropriate json segments to the correct locations. Each json segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Select and Place:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #44

HOTSPOT (Drag & Drop is not supported)You have an Azure Active Directory (Azure AD) tenant.You want to implement multi-factor authentication by making use of a conditional access policy. The conditional access policy must be applied to all users when they access the Azure portal.Which three settings should you configure? To answer, select the appropriate settings in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #45

You are developing an application to store business-critical data in Azure Blob storage. The application must meet the following requirements.* Data must not be modified or deleted for a user-specified interval.* Data must be protected from overwntes and deletes.* Data must be written once and allowed to be read many times.You need to protect the data fen the Azure Blob storage account.Which two actions should you perform? Each correct answer presents part of the solution.

A. nable version-level immutability support for the storage account

B. reate an account shared-access signature (SAS)

C. nable point-in-time restore for containers in the storage account

D. reate a service shared-access signature (SAS)

E. nable the blob change feed for the storage account

View answer

Correct Answer: DE

Question #46

You develop and deploy an Azure App Service web app to a production environment. You enable the Always On setting and the Application Insights site extensions.You deploy a code update and receive multiple failed requests and exceptions in the web app.You need to validate the performance and failure counts of the web app in near real time.Which Application Insights tool should you use?

A. rofiler

B. mart Detection

C. ive Metrics Stream

D. pplication Map

E. napshot Debugger

View answer

Correct Answer: C

Question #47

You develop Azure solutions.You must connect to a No-SQL globally-distributed database by using the .NET API.You need to create an object to configure and execute requests in the database.Which code segment should you use?

A. ew Container(EndpointUri, PrimaryKey);

B. ew Database(Endpoint, PrimaryKey);

C. ew CosmosClient(EndpointUri, PrimaryKey);

View answer

Correct Answer: C

Question #48

DRAG DROP (Drag & Drop is not supported)You are developing an application to retrieve user profile information. The application will use the Microsoft Graph SDK.The app must retrieve user profile information by using a Microsoft Graph API call.You need to call the Microsoft Graph API from the application.In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #49

DRAG DROP (Drag & Drop is not supported)A company has multiple warehouses. Each warehouse contains IoT temperature devices which deliver temperature data to an Azure Service Bus queue.You need to send email alerts to facility supervisors immediately if the temperature at a warehouse goes above or below specified threshold temperatures.Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #50

You are a developer at your company.You need to update the definitions for an existing Logic App.What should you use?

A. he Enterprise Integration Pack (EIP)

B. he Logic App Code View

C. he API Connections

D. he Logic Apps Designer

View answer

Correct Answer: B

Question #51

Your company is developing an Azure API.You need to implement authentication for the Azure API. You have the following requirements:-All API calls must be secure.-Callers to the API must not send credentials to the API.Which authentication mechanism should you use?

A. asic

B. nonymous

C. anaged identity

D. lient certificate

View answer

Correct Answer: C

Question #52

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop and deploy an Azure App Service API app to a Windows-hosted deployme

A. No

B. Yes

View answer

Correct Answer: A

Question #53

You are developing an online game that includes a feature that allows players to interact with other players on the same team within a certain distance. The calculation to determine the players in range occurs when players move and are cached in an Azure Cache for Redis instance.The system should prioritize players based on how recently they have moved and should not prioritize players who have logged out of the game.You need to select an eviction policy.Which eviction policy should you use?

A. llkeys-Iru

B. olatile-Iru

C. llkeys-lfu

D. olatile-ttl

View answer

Correct Answer: A

Question #54

HOTSPOT (Drag & Drop is not supported)You plan to deploy a new application to a Linux virtual machine (VM) that is hosted in Azure.The entire VM must be secured at rest by using industry-standard encryption technology to address organizational security and compliance requirements.You need to configure Azure Disk Encryption for the VM.How should you complete the Azure CLI commands? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #55

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop a software as a service (SaaS) offering to manage photographs. Users

A. Yes

B. No

View answer

Correct Answer: A

Question #56

You have an existing Azure storage account that stores large volumes of data across multiple containers.You need to copy all data from the existing storage account to a new storage account. The copy process must meet the following requirements:-Automate data movement.-Minimize user input required to perform the operation.-Ensure that the data movement process is recoverable.What should you use?

A. zCopy

B. zure Storage Explorer

C. zure portal

D.

View answer

Correct Answer: A

Question #57

HOTSPOT (Drag & Drop is not supported)You need to configure API Management for authentication.Which policy values should you use? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #58

Note. This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.You are implementing an application by using Azure Event Grid to push near-real-

A. es

B. o

.

View answer

Correct Answer: A

Question #59

You are developing an application to transfer data between on-premises file servers and Azure Blob storage. The application stores keys, secrets, and certificates in Azure Key Vault and makes use of the Azure Key Vault APIs.You want to configure the application to allow recovery of an accidental deletion of the key vault or key vault objects for 90 days after deletion.What should you do?

A. un the Add-AzKeyVaultKey cmdlet

B. un the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI

C. mplement virtual network service endpoints for Azure Key Vault

D. un the az keyvault update --enable-soft-delete false CLI

View answer

Correct Answer: B

Question #60

HOTSPOT (Drag & Drop is not supported)You are developing a content management application for technical manuals. The application is deployed as an Azure Static Web app.Authenticated users can view pages under/manuals but only contributors can access the page /manuals/new.html.You need to configure the routing for the web app.How should you complete the configuration? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #61

Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-joined device. The cluster is located in a resource group.Developers have created an application named MyApp. MyApp was packaged into a container image.You need to deploy the YAML manifest file for the application.Solution: You install the Azure CLI on the device and run the kubectl apply `"f myapp.yaml command.Does this meet the goal?

A. es

B. o

View answer

Correct Answer: A

Question #62

You need to investigate the Azure Function app error message in the development environment.What should you do?

A. onnect Live Metrics Stream from Application Insights to the Azure Function app and filter the metrics

B. reate a new Azure Log Analytics workspace and instrument the Azure Function app with Application Insights

C. pdate the Azure Function app with extension methods from Microsoft

D. dd a new diagnostic setting to the Azure Function app to send logs to Log Analytics

View answer

Correct Answer: A

Question #63

HOTSPOT (Drag & Drop is not supported)You develop and deploy the following staticwebapp.config.json file to the app_location value specified in the workflow file of an Azure Static Web app:For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #64

Your company has an Azure subscription.You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.Which of the following is the value that you should configure for the platformFaultDomainCount property?

A. 0

B. 0

C. in Value

D. ax Value

View answer

Correct Answer: D

Question #65

Your company is developing an Azure API hosted in Azure.You need to implement authentication for the Azure API to access other Azure resources. You have the following requirements:-All API calls must be authenticated.-Callers to the API must not send credentials to the API.Which authentication mechanism should you use?

A. asic

B. nonymous

C. anaged identity

D. lient certificate

View answer

Correct Answer: C

Question #66

This question requires that you evaluate the underlined text to determine if it is correct.You company has an on-premises deployment of MongoDB, and an Azure Cosmos DB account that makes use of the MongoDB API.You need to devise a strategy to migrate MongoDB to the Azure Cosmos DB account.You include the Data Management Gateway tool in your migration strategy.Instructions: Review the underlined text. If it makes the statement correct, select “No change required.” If the statement is incorrect, select the an

A. o change required

B. ongorestore

C. zure Storage Explorer

D. zCopy

View answer

Correct Answer: B

Question #67

DRAG DROP (Drag & Drop is not supported)Contoso, Ltd. provides an API to customers by using Azure API Management (APIM). The API authorizes users with a JWT token.You must implement response caching for the APIM gateway. The caching mechanism must detect the user ID of the client that accesses data for a given location and cache the response for that user ID.You need to add the following policies to the policies file:-a set-variable policy to store the detected user identity-a cache-lookup-value policy-a ca

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #68

You are building a website that uses Azure Blob storage for data storage. You configure Azure Blob storage lifecycle to move all blobs to the archive tier after 30 days.Customers have requested a service-level agreement (SLA) for viewing data older than 30 days. You need to document the minimum SLA for data recovery.Which SLA should you use?

A. t least two days

B. etween one and 15 hours

C. t least one day

D. etween zero and 60 minutes

View answer

Correct Answer: B

Question #69

You need to secure the Shipping Logic App. What should you use?

A. zure App Service Environment (ASE)

B. ntegration Service Environment (ISE)

C. Net service endpoint

D. zure AD B2B integration

View answer

Correct Answer: B

Question #70

HOTSPOT (Drag & Drop is not supported)You plan to deploy a web app to App Service on Linux. You create an App Service plan. You create and push a custom Docker image that contains the web app to Azure Container Registry.You need to access the console logs generated from inside the container in real-time.How should you complete the Azure CLI command? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #71

You develop a Python application for image rendering that uses GPU resources to optimize rendering processes. You deploy the application to an Azure Container Instances (ACI) Linux container.The application requires a secret value to be passed when the container is started. The value must only be accessed from within the container.You need to pass the secret value.What are two possible ways to achieve this goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point

A. icrosoft Graph data connect

B. icrosoft Graph API

C. icrosoft Graph connectors

View answer

Correct Answer: AE

Question #72

DRAG DROP (Drag & Drop is not supported)You are creating an Azure Cosmos DB account that makes use of the SQL API. Data will be added to the account every day by a web application.You need to ensure that an email notification is sent when information is received from IoT devices, and that compute cost is reduced.You decide to deploy a function app.Which of the following should you configure the function app to use? Answer by dragging the correct options from the list to the answer area.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #73

HOTSPOT (Drag & Drop is not supported)You are developing an ASP.NET Core app that includes feature flags which are managed by Azure App Configuration. You create an Azure App Configuration store named AppFeatureFlagStore that contains a feature flag named Export.You need to update the app to meet the following requirements:-Use the Export feature in the app without requiring a restart of the app.-Validate users before users are allowed access to secure resources.-Permit users to access secure resources.How

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #74

A company maintains multiple web and mobile applications. Each application uses custom in-house identity providers as well as social identity providers.You need to implement single sign-on (SSO) for all the applications.What should you do?

A. se Azure Active Directory B2C (Azure AD B2C) with custom policies

B. se Azure Active Directory B2B (Azure AD B2B) and enable external collaboration

C. se Azure Active Directory B2C (Azure AD B2C) with user flows

D. se Azure Active Directory B2B (Azure AD B2B)

View answer

Correct Answer: A

Question #75

HOTSPOT (Drag & Drop is not supported)You are building a website to access project data related to teams within your organization. The website does not allow anonymous access. Authentication is performed using an Azure Active Directory (Azure AD) app named internal.The website has the following authentication requirements:-Azure AD users must be able to login to the website.-Personalization of the website must be based on membership in Active Directory groups.You need to configure the application’s manifest

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #76

DRAG DROP (Drag & Drop is not supported)You are maintaining an existing application that uses an Azure Blob GPv1 Premium storage account. Data older than three months is rarely used.Data newer than three months must be available immediately. Data older than a year must be saved but does not need to be available immediately.You need to configure the account to support a lifecycle management rule that moves blob data to archive storage for data not modified in the last year.Which three actions should you perf

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #77

HOTSPOT (Drag & Drop is not supported)You are authoring a set of nested Azure Resource Manager templates to deploy Azure resources. You author an Azure Resource Manager template named mainTemplate.json that contains the following linked templates: linkedTemplate1.json, linkedTemplate2.json.You add parameters to a parameters template file named mainTemplate.parameters,json. You save all templates on a local device in the C:\templates\ folder.You have the following requirements:-Store the templates in Azure f

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #78

You are developing a web application that uses the Microsoft identity platform for user and resource authentication. The web application calls several REST APIs.A REST API call must read the user’s calendar. The web application requires permission to send an email as the user.You need to authorize the web application and the API.Which parameter should you use?

A. enant

B. ode_challenge

C. tate

D. lient_id

E. cope

View answer

Correct Answer: E

Question #79

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a medical records document management website. The website is

A. es

B. o

View answer

Correct Answer: A

Question #80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.You are developing and deploying several ASP.NET web applications to Azure App Service. You plan to save session state information and HTML output.You must use a storage mechanism with the following requirements:•Share session state across all ASP.NET web applications.•Support controlled, concurrent access to the sa

A. es

B. o

View answer

Correct Answer: B

Question #81

HOTSPOT (Drag & Drop is not supported)You are developing a service where customers can report news events from a browser using Azure Web PubSub. The service is implemented as an Azure Function App that uses the JSON WebSocket subprotocol to receive news events.You need to implement the bindings for the Azure Function App.How should you configure the binding? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #82

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop a software as a service (SaaS) offering to manage photographs. Users

A. Yes

B. No

View answer

Correct Answer: B

Question #83

HOTSPOT (Drag & Drop is not supported)You have developed a Web App for your company. The Web App provides services and must run in multiple regions.You want to be notified whenever the Web App uses more than 85 percent of the available CPU cores over a 5 minute period. Your solution must minimize costs.Which command should you use? To answer, select the appropriate settings in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #84

You have an application that includes an Azure Web app and several Azure Function apps. Application secrets including connection strings and certificates are stored in Azure Key Vault.Secrets must not be stored in the application or application runtime environment. Changes to Azure Active Directory (Azure AD) must be minimized.You need to design the approach to loading application secrets. What should you do?

A. reate a single user-assigned Managed Identity with permission to access Key Vault and configure each App Service to use that Managed Identity

B. reate a single Azure AD Service Principal with permission to access Key Vault and use a client secret from within the App Services to access Key Vault

C. reate a system assigned Managed Identity in each App Service with permission to access Key Vault

D. reate an Azure AD Service Principal with Permissions to access Key Vault for each App Service and use a certificate from within the App Services to access Key Vault

View answer

Correct Answer: C

Question #85

HOTSPOT (Drag & Drop is not supported)You need to ensure that network security policies are met.How should you configure network security? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #86

HOTSPOT (Drag & Drop is not supported)You are developing an Azure Static Web app that contains training materials for a tool company. Each tool’s training material is contained in a static web page that is linked from the tool’s publicly available description page.A user must be authenticated using Azure AD prior to viewing training.You need to ensure that the user can view training material pages after authentication.How should you complete the configuration file? To answer, select the appropriate options

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #87

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.You need to ensure that the application is highly available and that the users’ streaming experience is constant. You also want to configure the application to store data in a geogr

A. es

B. o

View answer

Correct Answer: B

Question #88

You are developing a web app that is protected by Azure Web Application Firewall (WAF). All traffic to the web app is routed through an Azure ApplicationGateway instance that is used by multiple web apps. The web app address is contoso.azurewebsites.net.All traffic must be secured with SSL. The Azure Application Gateway instance is used by multiple web apps.You need to configure the Azure Application Gateway for the web app.Which two actions should you perform? Each correct answer presents part of the solut

A. In the Azure Application Gateway?€?s HTTP setting, enable the Use for App service setting

B. Convert the web app to run in an Azure App service environment (ASE)

C. Add an authentication certificate for contoso

D. In the Azure Application Gateway?€?s HTTP setting, set the value of the Override backend path option to contoso22

View answer

Correct Answer: AD

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Updated Microsoft AZ-204 Exam Questions for Effective Exam Preparation

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Updated Microsoft AZ-204 Exam Questions for Effective Exam Preparation

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now