Enhance Your Microsoft AZ-204 Exam Readiness with Practice Tests

Question #1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.You are developing and deploying several ASP.NET web applications to Azure App Service. You plan to save session state information and HTML output.You must use a storage mechanism with the following requirements:•Share session state across all ASP.NET web applications.•Support controlled, concurrent access to the sa

A. es

B. o

View answer

Correct Answer: B

Question #2

DRAG DROP (Drag & Drop is not supported)You are developing an application to securely transfer data between on-premises file systems and Azure Blob storage. The application stores keys, secrets, and certificates in Azure Key Vault. The application uses the Azure Key Vault APIs.The application must allow recovery of an accidental deletion of the key vault or key vault objects. Key vault objects must be retained for 90 days after deletion.You need to protect the key vault and key vault objects.Which Azure Key

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #3

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.You are developing a solution for a public facing API.The API back end is hosted in an Azure App Service instance. You have implemented a RESTful service for the API back end.You must configure back-end authentication for the API Management service instance.Solution: You configure Client cert gateway credentials for

A. es

B. o

View answer

Correct Answer: B

Question #4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop Azure solutions.You must grant a virtual machine (VM) access to spec

A. es

B. o

View answer

Correct Answer: A

Question #5

DRAG DROP (Drag & Drop is not supported)An organization plans to deploy Azure storage services.You need to configure shared access signature (SAS) for granting access to Azure Storage.Which SAS types should you use? To answer, drag the appropriate SAS types to the correct requirements. Each SAS type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Select and Place:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #6

DRAG DROP (Drag & Drop is not supported)You develop and deploy a Java application to Azure. The application has been instrumented by using the Application Insights SDK.The telemetry data must be enriched and processed before it is sent to the Application Insights service.You need to modify the telemetry data.Which Application Insights SDK features should you use? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need t

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #7

You have a new Azure subscription. You are developing an internal website for employees to view sensitive data. The website uses Azure Active Directory (Azure AD) for authentication.You need to implement multifactor authentication for the website.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. ocumentDB Accounts Contributor

B. osmos Backup Operator

C. osmos DB Operator

D. osmos DB Account Reader

View answer

Correct Answer: BC

Question #8

You develop a gateway solution for a public facing news API. The news API back end is implemented as a RESTful service and uses an OpenAPI specification.You need to ensure that you can access the news API by using an Azure API Management service instance.Which Azure PowerShell command should you run?

A. mport-AzureRmApiManagementApi -Context $ApiMgmtContext-SpecificationFormat "Swagger" -SpecificationPath $SwaggerPath-Path $Path

B. ew-AzureRmApiManagementBackend -Context $ApiMgmtContext -Url$Url -Protocol http

C. ew-AzureRmApiManagement -ResourceGroupName $ResourceGroup-Name $Name –Location $Location -Organization $Org-AdminEmail $AdminEmail

D. ew-AzureRmApiManagementBackendProxy -Url $ApiUrl

View answer

Correct Answer: D

Question #9

You are developing an Azure-based web application. The application goes offline periodically to perform offline data processing. While the application is offline, numerous Azure Monitor alerts fire which result in the on-call developer being paged.The application must always log when the application is offline for any reason.You need to ensure that the on-call developer is not paged during offline processing.What should you do?

A. dd Azure Monitor alert processing rules to suppress notifications

B. isable Azure Monitor Service Health Alerts during offline processing

C. reate an Azure Monitor Metric Alert

D. uild an Azure Monitor action group that suppresses the alerts

View answer

Correct Answer: D

Question #10

DRAG DROP (Drag & Drop is not supported)You are implementing an order processing system. A point of sale application publishes orders to topics in an Azure Service Bus queue. The Label property for the topic includes the following data:The system has the following requirements for subscriptions:You need to implement filtering and maximize throughput while evaluating filters.Which filter types should you implement? To answer, drag the appropriate filter types to the correct subscriptions. Each filter type ma

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #11

You are preparing to deploy a website to an Azure Web App from a GitHub repository. The website includes static content generated by a script.You plan to use the Azure Web App continuous deployment feature.You need to run the static generation script before the website starts serving traffic.What are two possible ways to achieve this goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. Add the path to the static content generation tool to WEBSITE_RUN_FROM_PACKAGE setting in the host

B. Add a PreBuild target in the websites csproj project file that runs the static content generation script

C. Create a file named run

D. Create a file named

View answer

Correct Answer: AD

Question #12

DRAG DROP (Drag & Drop is not supported)You are developing a web service that will run on Azure virtual machines that use Azure Storage. You configure all virtual machines to use managed identities.You have the following requirements:-Secret-based authentication mechanisms are not permitted for accessing an Azure Storage account.-Must use only Azure Instance Metadata Service endpoints.You need to write code to retrieve an access token to access Azure Storage. To answer, drag the appropriate code segments to

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #13

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.You are developing a solution for a public facing API.The API back end is hosted in an Azure App Service instance. You have implemented a RESTful service for the API back end.You must configure back-end authentication for the API Management service instance.Solution: You configure Basic gateway credentials for the Az

A. es

B. o

View answer

Correct Answer: B

Question #14

HOTSPOT (Drag & Drop is not supported)You develop a containerized application. You plan to deploy the application to a new Azure Container instance by using a third-party continuous integration and continuous delivery (CI/CD) utility.The deployment must be unattended and include all application assets. The third-party utility must only be able to push and pull images from the registry. The authentication must be managed by Azure Active Directory (Azure AD). The solution must use the principle of least privi

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #15

Your company has an Azure subscription.You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.Which of the following is the value that you should configure for the platformFaultDomainCount property?

A. 0

B. 0

C. 0

D. 0

View answer

Correct Answer: D

Question #16

HOTSPOT (Drag & Drop is not supported)You are developing a web application that makes calls to the Microsoft Graph API. You register the application in the Azure portal and upload a valid X509 certificate.You create an appsettings.json file containing the certificate name, client identifier for the application, and the tenant identifier of the Azure Active Directory (Azure AD). You create a method named ReadCertificate to return the X509 certificate by name.You need to implement code that acquires a token b

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #17

DRAG DROP (Drag & Drop is not supported)You need to add code at line PC26 of Processing.cs to ensure that security policies are met.How should you complete the code that you will add at line PC26? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #18

HOTSPOT (Drag & Drop is not supported)You are developing an application to store and retrieve data in Azure Blob storage. The application will be hosted in an on-premises virtual machine (VM). The VM is connected to Azure by using a Site-to-Site VPN gateway connection. The application is secured by using Azure Active Directory (Azure AD) credentials.The application must be granted access to the Azure Blob storage account with a start time, expiry time, and read permissions. The Azure Blob storage account ac

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #19

HOTSPOT (Drag & Drop is not supported)You need to add code at line AM09 to ensure that users can review content using ContentAnalysisService.How should you complete the code? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #20

You are developing a .NET Core MVC application that allows customers to research independent holiday accommodation providers.You want to implement Azure Search to allow the application to search the index by using various criteria to locate documents related to accommodation.You want the application to allow customers to search the index by using regular expressions.What should you do?

A. onfigure the SearchMode property of the SearchParameters class

B. onfigure the QueryType property of the SearchParameters class

C. onfigure the Facets property of the SearchParameters class

D. onfigure the Filter property of the SearchParameters class

View answer

Correct Answer: B

Question #21

You manage an Azure SQL database that allows for Azure AD authentication.You need to make sure that database developers can connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum.Which of the following should you implement?

A. zure AD token

B. zure Multi-Factor authentication

C. ctive Directory integrated authentication

D. ATH software tokens

View answer

Correct Answer: C

Question #22

HOTSPOT (Drag & Drop is not supported)You are building a software-as-a-service (SaaS) application that analyzes DNA data that will run on Azure virtual machines (VMs) in an availability zone. The data is stored on managed disks attached to the VM. The performance of the analysis is determined by the speed of the disk attached to the VM.You have the following requirements:-The application must be able to quickly revert to the previous day’s data if a systemic error is detected.-The application must minimize

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #23

DRAG DROP (Drag & Drop is not supported)You are developing an Azure-hosted application that must use an on-premises hardware security module (HSM) key.The key must be transferred to your existing Azure Key Vault by using the Bring Your Own Key (BYOK) process.You need to securely transfer the key to Azure Key Vault.Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A. reate a user-assigned managed identity and assign role-based access controls

B. reate an Azure AD custom role and assign the role to the Azure Blob storage account

C. reate an Azure Key Vault and issue a client certificate

D. reate a system-assigned managed identity and issue a client certificate

E. reate an Azure AD custom role and assign role-based access controls

View answer

Correct Answer: A

Question #24

DRAG DROP (Drag & Drop is not supported)You develop a web app that uses the tier D1 app service plan by using the Web Apps feature of Microsoft Azure App Service.Spikes in traffic have caused increases in page load times.You need to ensure that the web app automatically scales when CPU load is about 85 percent and minimize costs.Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.NOTE: Mo

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #25

You develop and deploy an ASP.NET web app to Azure App Service. You use Application Insights telemetry to monitor the app.You must test the app to ensure that the app is available and responsive from various points around the world and at regular intervals. If the app is not responding, you must send an alert to support staff.You need to configure a test for the web app.Which two test types can you use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: BC

Question #26

You need to audit the retail store sales transactions.What are two possible ways to achieve the goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. es

B. o

View answer

Correct Answer: BE

Question #27

HOTSPOT (Drag & Drop is not supported)You need to retrieve the database connection string.Which values should you use? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #28

HOTSPOT (Drag & Drop is not supported)You are developing a ticket reservation system for an airline.The storage solution for the application must meet the following requirements:-Ensure at least 99.99% availability and provide low latency.-Accept reservations event when localized network outages or other unforeseen failures occur.-Process reservations in the exact sequence as reservations are submitted to minimize overbooking or selling the same seat to multiple travelers.-Allow simultaneous and out-of-orde

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #29

You are developing an Azure function that connects to an Azure SQL Database instance. The function is triggered by an Azure Storage queue.You receive reports of numerous System.InvalidOperationExceptions with the following message:“Timeout expired. The timeout period elapsed prior to obtaining a connection from the pool. This may have occurred because all pooled connections were in use and max pool size was reached.”You need to prevent the exception.What should you do?

A. es

B. o

View answer

Correct Answer: C

Question #30

DRAG DROP (Drag & Drop is not supported)You have an application that uses Azure Blob storage. You need to update the metadata of the blobs.Which three methods should you use to develop the solution? To answer, move the appropriate methods from the list of methods to the answer area and arrange them in the correct order.Select and Place:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #31

HOTSPOT (Drag & Drop is not supported)You need to add code at line AM10 of the application manifest to ensure that the requirement for manually reviewing content can be met.How should you complete the code? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #32

HOTSPOT (Drag & Drop is not supported)You are preparing to deploy a Python website to an Azure Web App using a container. The solution will use multiple containers in the same container group. The Dockerfile that builds the container is as follows:You build a container by using the following command. The Azure Container Registry instance named images is a private registry.The user name and password for the registry is admin.The Web App must always run the same version of the website regardless of future bui

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #33

You develop and deploy an Azure App Service web app named App1. You create a new Azure Key Vault named Vault1. You import several API keys, passwords, certificates, and cryptographic keys into Vault1.You need to grant App1 access to Vault1 and automatically rotate credentials. Credentials must not be stored in code.What should you do?

A. nable App Service authentication for Appl

B. dd a TLS/SSL binding to App1

C. pload a self-signed client certificate to Vault1

D. ssign a managed identity to App1

View answer

Correct Answer: D

Question #34

You need to authenticate the user to the corporate website as indicated by the architectural diagram. Which two values should you use? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: AD

Question #35

You are developing a web application that uses Azure Cache for Redis. You anticipate that the cache will frequently fill and that you will need to evict keys.You must configure Azure Cache for Redis based on the following predicted usage pattern: A small subset of elements will be accessed much more often than the rest.You need to configure the Azure Cache for Redis to optimize performance for the predicted usage pattern.Which two eviction policies will achieve the goal?NOTE: Each correct selection is worth

A. ee Explanation section for answer

View answer

Correct Answer: BC

Question #36

Your company has a web app named WebApp1.You use the WebJobs SDK to design a triggered App Service background task that automatically invokes a function in the code every time new data is received in a queue.You are preparing to configure the service processes a queue data item.Which of the following is the service you should use?

A. 0

B. 0

C. in Value

D. ax Value

View answer

Correct Answer: B

Question #37

You develop a Web App on a tier D1 app service plan.You notice that page load times increase during periods of peak traffic.You want to implement automatic scaling when CPU load is above 80 percent. Your solution must minimize costs.What should you do first?

A. nable autoscaling on the Web App

B. witch to the Premium App Service tier plan

C. witch to the Standard App Service tier plan

D. witch to the Azure App Services consumption plan

View answer

Correct Answer: C

Question #38

You have two Hyper-V hosts named Host1 and Host2. Host1 has an Azure virtual machine named VM1 that was deployed by using a custom Azure Resource Manager template.You need to move VM1 to Host2.What should you do?

A. rom the Update management blade, click Enable

B. rom the Overview blade, move VM1 to a different subscription

C. rom the Redeploy blade, click Redeploy

D. rom the Profile blade, modify the usage location

View answer

Correct Answer: C

Question #39

Your company’s Azure subscription includes an Azure Log Analytics workspace.Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server 2016, and is linked to the Azure Log Analytics workspace. The Azure Log Analytics workspace is set up to gather performance counters associated with security from these linked servers.You must configure alerts based on the information gathered by the Azure Log Analytics workspace.You have to make sure that alert rules allow for di

A. he Activity log signal type

B. he Application Log signal type

C. he Metric signal type

D. he Audit Log signal type

View answer

Correct Answer: C

Question #40

DRAG DROP (Drag & Drop is not supported)You need to implement telemetry for non-user actions.How should you complete the Filter class? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #41

HOTSPOT (Drag & Drop is not supported)You have an Azure Web app that uses Cosmos DB as a data store. You create a CosmosDB container by running the following PowerShell script:$resourceGroupName = "testResourceGroup"$accountName = "testCosmosAccount"$databaseName = "testDatabase"$containerName = "testContainer"$partitionKeyPath = "/EmployeeId"$autoscaleMaxThroughput = 5000New-AzCosmosDBSqlContainer -ResourceGroupName $resourceGroupName -AccountName $accountName -DatabaseName $databaseName -Name $containerNa

A. D token header

B. D token signature

C. TTP response code

D. enant ID

View answer

Correct Answer: A

Question #42

You need to grant access to the retail store location data for the inventory service development effort.What should you use?

A. zure AD access token

B. zure RBAC role

C. hared access signature (SAS) token

D. zure AD ID token

E. zure AD refresh token

View answer

Correct Answer: C

Question #43

You need to reduce read latency for the retail store solution.What are two possible ways to achieve the goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: BC

Question #44

You need to investigate the http server log output to resolve the issue with the ContentUploadService.Which command should you use first?

A. z webapp log

B. z ams live-output

C. z monitor activity-log

D. z container attach

View answer

Correct Answer: C

Question #45

DRAG DROP (Drag & Drop is not supported)You need to correct the corporate website error.Which four actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #46

You develop an Azure App Service web app and deploy to a production environment. You enable Application Insights for the web app.The web app is throwing multiple exceptions in the environment.You need to examine the state of the source code and variables when the exceptions are thrown.Which Application Insights feature should you configure?

A. mart detection

B. rofiler

C. napshot Debugger

D. tandard test

View answer

Correct Answer: C

Question #47

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.You are developing a solution for a public facing API.The API back end is hosted in an Azure App Service instance. You have implemented a RESTful service for the API back end.You must configure back-end authentication for the API Management service instance.Solution: You configure Client cert gateway credentials for

A. es

B. o

View answer

Correct Answer: A

Question #48

DRAG DROP (Drag & Drop is not supported)You develop an ASP.NET Core MVC application. You configure the application to track webpages and custom events.You need to identify trends in application usage.Which Azure Application Insights Usage Analysis features should you use? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #49

HOTSPOT (Drag & Drop is not supported)You are a developer building a web site using a web app. The web site stores configuration data in Azure App Configuration.Access to Azure App Configuration has been configured to use the identity of the web app for authentication. Security requirements specify that no other authentication systems must be used.You need to load configuration data from Azure App Configuration.How should you complete the code? To answer, select the appropriate options in the answer area.NO

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #50

You are developing a .NET Core MVC application that allows customers to research independent holiday accommodation providers.You want to implement Azure Search to allow the application to search the index by using various criteria to locate documents related to accommodation venues.You want the application to list holiday accommodation venues that fall within a specific price range and are within a specified distance to an airport.What should you do?

A. onfigure the SearchMode property of the SearchParameters class

B. onfigure the QueryType property of the SearchParameters class

C. onfigure the Facets property of the SearchParameters class

D. onfigure the Filter property of the SearchParameters class

View answer

Correct Answer: D

Question #51

You are a developer for a SaaS company that offers many web services. All web services for the company must meet the following requirements:-Use API Management to access the services-Use OpenID Connect for authentication-Prevent anonymous usageA recent security audit found that several web services can be called without any authentication. Which API Management policy should you implement?

A. sonp

B. uthentication-certificate

C. heck-header

D. alidate-jwt

View answer

Correct Answer: D

Question #52

You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days.Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

A. nabledForDeployment

B. nablePurgeProtection

C. nabledForTemplateDeployment

D. nableSoftDelete

View answer

Correct Answer: BD

Question #53

DRAG DROP (Drag & Drop is not supported)You are developing an Azure solution.You need to develop code to access a secret stored in Azure Key Vault.How should you complete the code segment? To answer, drag the appropriate code segments to the correct location. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #54

You need to ensure the security policies are met.What code do you add at line CS07 of ConfigureSSE.ps1?

A. ��PermissionsToKeys create, encrypt, decrypt

B. ��PermissionsToCertificates create, encrypt, decrypt

C. ��PermissionsToCertificates wrapkey, unwrapkey, get

D. ��PermissionsToKeys wrapkey, unwrapkey, get

View answer

Correct Answer: B

Question #55

DRAG DROP (Drag & Drop is not supported)You develop a web application.You need to register the application with an active Azure Active Directory (Azure AD) tenant.Which three actions should you perform in sequence? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #56

Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-joined device. The cluster is located in a resource group.Developers have created an application named MyApp. MyApp was packaged into a container image.You need to deploy the YAML manifest file for the application.Solution: You install the docker client on the device and run the docker run -it microsoft/azure-cli:0.10.17 command.Does this meet the goal?

A. es

B. o

View answer

Correct Answer: B

Question #57

You have two Hyper-V hosts named Host1 and Host2. Host1 has an Azure virtual machine named VM1 that was deployed by using a custom Azure ResourceManager template.You need to move VM1 to Host2.What should you do?

A. rom the Update management blade, click Enable

B. rom the Overview blade, move VM1 to a different subscription

C. rom the Redeploy blade, click Redeploy

D. rom the Profile blade, modify the usage location

View answer

Correct Answer: C

Question #58

You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers.The Azure AD group must not be able to access the keys that are required to access the data. You need to restrict access to the Azure AD group.Which role-based access control should

A. es

B. o

View answer

Correct Answer: C

Question #59

You are building a web application that uses the Microsoft identity platform for user authentication.You are implementing user identification for the web application.You need to retrieve a claim to uniquely identify a user.Which claim type should you use?

A. ud

B. once

C. id

D. dp

View answer

Correct Answer: C

Question #60

DRAG DROP (Drag & Drop is not supported)You are a developer for a company that provides a bookings management service in the tourism industry. You are implementing Azure Search for the tour agencies listed in your company's solution.You create the index in Azure Search. You now need to use the Azure Search .NET SDK to import the relevant data into the Azure Search service.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions from left to right a

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #61

A company maintains multiple web and mobile applications. Each application uses custom in-house identity providers as well as social identity providers.You need to implement single sign-on (SSO) for all the applications.What should you do?

A. se Azure Active Directory B2C (Azure AD B2C) with custom policies

B. se Azure Active Directory B2B (Azure AD B2B) and enable external collaboration

C. se Azure Active Directory B2C (Azure AD B2C) with user flows

D. se Azure Active Directory B2B (Azure AD B2B)

View answer

Correct Answer: B

Question #62

You develop and deploy an Azure App Service web app. The app is deployed to multiple regions and uses Azure Traffic Manager. Application Insights is enabled for the app.You need to analyze app uptime for each month.Which two solutions will achieve the goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: BD

Question #63

HOTSPOT (Drag & Drop is not supported)You are developing a web application that uses the Microsoft Identity platform for user and resource authentication. The web application called several REST APIs.You are implementing various authentication and authorization flows for the web application.You need to validate the claims in the authentication token.Which token type should you use? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #64

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.You are developing and deploying several ASP.NET web applications to Azure App Service. You plan to save session state information and HTML output.You must use a storage mechanism with the following requirements:•Share session state across all ASP.NET web applications.•Support controlled, concurrent access to the sa

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #65

You develop an app that allows users to upload photos and videos to Azure storage. The app uses a storage REST API call to upload the media to a blob storage account named Account1. You have blob storage containers named Container1 and Container2. Uploading of videos occurs on an irregular basis.You need to copy specific blobs from Container1 to Container2 when a new video is uploaded. What should you do?

A. opy blobs to Container2 by using the Put Blob operation of the Blob Service REST API

B. reate an Event Grid topic that uses the Start-AzureStorageBlobCopy cmdlet

C. se AzCopy with the Snapshot switch to copy blobs to Container2

D. ownload the blob to a virtual machine and then upload the blob to Container2

View answer

Correct Answer: B

Question #66

DRAG DROP (Drag & Drop is not supported)You develop an application. You plan to host the application on a set of virtual machines (VMs) in Azure.You need to configure Azure Monitor to collect logs from the application.Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #67

You develop and add several functions to an Azure Function app that uses the latest runtime host. The functions contain several REST API endpoints secured by using SSL. The Azure Function app runs in a Consumption plan.You must send an alert when any of the function endpoints are unavailable or responding too slowly.You need to monitor the availability and responsiveness of the functions.What should you do?

A. reate a URL ping test

B. reate a timer triggered function that calls TrackAvailability() and send the results to Application Insights

C. reate a timer triggered function that calls GetMetric("Request Size") and send the results to Application Insights

D. dd a new diagnostic setting to the Azure Function app

View answer

Correct Answer: B

Question #68

HOTSPOT (Drag & Drop is not supported)You are building an application that stores sensitive customer data in Azure Blob storage. The data must be encrypted with a key that is unique for each customer.If the encryption key has been corrupted it must not be used for encryption.You need to ensure that the blob is encrypted.How should you complete the code segment? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #69

DRAG DROP (Drag & Drop is not supported)You are developing an ASP.NET Core website that can be used to manage photographs which are stored in Azure Blob Storage containers.Users of the website authenticate by using their Azure Active Directory (Azure AD) credentials.You implement role-based access control (RBAC) role permissions on the containers that store photographs. You assign users to RBAC roles.You need to configure the website’s Azure AD Application so that user’s permissions can be used with the Azu

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #70

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.You are developing a solution for a public facing API.The API back end is hosted in an Azure App Service instance. You have implemented a RESTful service for the API back end.You must configure back-end authentication for the API Management service instance.Solution: You configure Basic gateway credentials for the HT

A. es

B. o

View answer

Correct Answer: B

Question #71

You are developing an Azure Function that calls external APIs by providing an access token for the API. The access token is stored in a secret named token in an Azure Key Vault named mykeyvault.You need to ensure the Azure Function can access to the token. Which value should you store in the Azure Function App configuration?

A. eyVault:mykeyvault;Secret:token

B. pp:Settings:Secret:mykeyvault:token

C. ZUREKVCONNSTR_ https://mykeyveult

D. Microsoft

View answer

Correct Answer: D

Question #72

HOTSPOT (Drag & Drop is not supported)You need to add YAML markup at line CS17 to ensure that the ContentUploadService can access Azure Storage access keys.How should you complete the YAML markup? To answer, drag the appropriate YAML segments to the correct locations. Each YAML segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #73

You need to monitor ContentUploadService according to the requirements.Which command should you use?

A. z monitor metrics alert create –n alert –g … - -scopes … - -condition "avg Percentage CPU > 8"

B. z monitor metrics alert create –n alert –g … - -scopes … - -condition "avg Percentage CPU > 800"

C. z monitor metrics alert create –n alert –g … - -scopes … - -condition "CPU Usage > 800"

D. z monitor metrics alert create –n alert –g … - -scopes … - -condition "CPU Usage > 8"

View answer

Correct Answer: B

Question #74

You are a developer at your company.You need to edit the workflows for an existing Logic App.What should you use?

A. he Enterprise Integration Pack (EIP)

B. he Logic App Code View

C. he API Connections

D. he Logic Apps Designer

View answer

Correct Answer: A

Question #75

You need to ensure that the solution can meet the scaling requirements for Policy Service.Which Azure Application Insights data model should you use?

A. n Application Insights dependency

B. n Application Insights event

C. n Application Insights trace

D. n Application Insights metric

View answer

Correct Answer: D

Question #76

DRAG DROP (Drag & Drop is not supported)You are developing a new page for a website that uses Azure Cosmos DB for data storage. The feature uses documents that have the following format:You must display data for the new page in a specific order. You create the following query for the page:You need to configure a Cosmos DB policy to the support the query.How should you configure the policy? To answer, drag the appropriate JSON segments to the correct locations. Each JSON segment may be used once, more than o

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #77

You need to resolve the capacity issue.What should you do?

A. onvert the trigger on the Azure Function to an Azure Blob storage trigger

B. nsure that the consumption plan is configured correctly to allow scaling

C. ove the Azure Function to a dedicated App Service Plan

D. pdate the loop starting on line PC09 to process items in parallel

View answer

Correct Answer: D

Question #78

DRAG DROP (Drag & Drop is not supported)You develop and deploy an Azure App Service web app. The web app accesses data in an Azure SQL database.You must update the web app to store frequently used data in a new Azure Cache for Redis Premium instance.You need to implement the Azure Cache for Redis features.Which feature should you implement? To answer, drag the appropriate feature to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar bet

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #79

HOTSPOT (Drag & Drop is not supported)You have a single page application (SPA) web application that manages information based on data returned by Microsoft Graph from another company’s Azure Active Directory (Azure AD) instance.Users must be able to authenticate and access Microsoft Graph by using their own company’s Azure AD instance.You need to configure the application manifest for the app registration.How should you complete the manifest? To answer, select the appropriate options in the answer area.NOTE

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #80

HOTSPOT (Drag & Drop is not supported)You are building a website that is used to review restaurants. The website will use an Azure CDN to improve performance and add functionality to requests.You build and deploy a mobile app for Apple iPhones. Whenever a user accesses the website from an iPhone, the user must be redirected to the app store.You need to implement an Azure CDN rule that ensures that iPhone users are redirected to the app store.How should you complete the Azure Resource Manager template? To an

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #81

A development team is creating a new REST API. The API will store data in Azure Blob storage. You plan to deploy the API to Azure App Service.Developers must access the Azure Blob storage account to develop the API for the next two months. The Azure Blob storage account must not be accessible by the developers after the two-month time period.You need to grant developers access to the Azure Blob storage account.What should you do?

A. enerate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers

B. reate and apply a new lifecycle management policy to include a last accessed date value

C. rovide all developers with the access key for the Azure Blob storage account

D. rant all developers access to the Azure Blob storage account by assigning role-based access control (RBAC) roles

View answer

Correct Answer: A

Question #82

Your company has an Azure subscription.You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.Which of the following is the value that you should configure for the platformUpdateDomainCount property?

A. 0

B. 0

C. 0

D. 0

View answer

Correct Answer: D

Question #83

HOTSPOT (Drag & Drop is not supported)You are developing a back-end Azure App Service that scales based on the number of messages contained in a Service Bus queue.A rule already exists to scale up the App Service when the average queue length of unprocessed and valid queue messages is greater than 1000.You need to add a new rule that will continuously scale down the App Service as long as the scale up condition is not met.How should you configure the Scale rule? To answer, select the appropriate options in

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #84

HOTSPOT (Drag & Drop is not supported)You are developing an Azure App Service hosted ASP.NET Core web app to deliver video-on-demand streaming media. You enable an Azure Content Delivery Network (CDN) Standard for the web endpoint. Customer videos are downloaded from the web app by using the following example URL: http://www.contoso.com/content.mp4?quality=1.All media content must expire from the cache after one hour. Customer videos with varying quality must be delivered to the closest regional point of pr

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #85

You develop Azure solutions. A .NET application needs to receive a message each time an Azure virtual machine finishes processing data. The messages must NOT persist after being processed by the receiving application.You need to implement the .NET object that will receive the messages.Which object should you use?

A. ueueClient

B. ubscriptionClient

C. opicClient

D. loudQueueClient

View answer

Correct Answer: D

Question #86

You are developing an e-Commerce Web App.You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure Active Directory (AAD).What should you do on the e-Commerce Web App?

A. un the az keyvault secret command

B. nable Azure AD Connect

C. nable Managed Service Identity (MSI)

D. reate an Azure AD service principal

View answer

Correct Answer: C

Question #87

DRAG DROP (Drag & Drop is not supported)You need to add YAML markup at line CS17 to ensure that the ContentUploadService can access Azure Storage access keys.How should you complete the YAML markup? To answer, drag the appropriate YAML segments to the correct locations. Each YAML segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Select and Place:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #88

You develop and deploy an Azure Logic app that calls an Azure Function app. The Azure Function app includes an OpenAPI (Swagger) definition and uses an Azure Blob storage account. All resources are secured by using Azure Active Directory (Azure AD).The Azure Logic app must securely access the Azure Blob storage account. Azure AD resources must remain if the Azure Logic app is deleted.You need to secure the Azure Logic app.What should you do?

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #89

HOTSPOT (Drag & Drop is not supported)You need to add code at line AM10 of the application manifest to ensure that the requirement for manually reviewing content can be met.How should you complete the code? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #90

Your company has a web app named WebApp1.You use the WebJobs SDK to design a triggered App Service background task that automatically invokes a function in the code every time new data is received in a queue.You are preparing to configure the service processes a queue data item.Which of the following is the service you should use?

A. ogic Apps

B. ebJobs

C. low

D. unctions

View answer

Correct Answer: B

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Enhance Your Microsoft AZ-204 Exam Readiness with Practice Tests

View The Updated AZ-204 Exam Questions

View The Updated Microsoft Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Enhance Your Microsoft AZ-204 Exam Readiness with Practice Tests

View The Updated AZ-204 Exam Questions

View The Updated Microsoft Exam Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now