Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 101:

  HOTSPOT

  You are building a website that is used to review restaurants. The website will use an Azure CDN to improve performance and add functionality to requests.

  You build and deploy a mobile app for Apple iPhones. Whenever a user accesses the website from an iPhone, the user must be redirected to the app store.

  You need to implement an Azure CDN rule that ensures that iPhone users are redirected to the app store.

  How should you complete the Azure Resource Manager template? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: iOS

  Azure AD Conditional Access supports the following device platforms:

  Android

  iOS

  Windows Phone

  Windows

  macOS

  Box 2: DeliveryRuleIsDeviceConditionParameters

  The DeliveryRuleIsDeviceCondition defines the IsDevice condition for the delivery rule. parameters defines the parameters for the condition.

  Box 3: HTTP_USER_AGENT

  Box 4: DeliveryRuleRequestHeaderConditionParameters DeliveryRuleRequestHeaderCondition defines the RequestHeader condition for the delivery rule. parameters defines the parameters for the condition.

  Box 5: iOS

  The Require approved client app requirement only supports the iOS and Android for device platform condition.

• Question 102:

  HOTSPOT

  You create the following PowerShell script: For each of the following statements, select Yes if the statement is true. Otherwise, select No, NOTE: Each correct selection is worth one point.

  

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  The AzScheduledQueryRuleSource is Heartbeat, not CPU.

  Box 2: Yes

  The AzScheduledQueryRuleSource is Heartbeat!

  Note: New-AzScheduledQueryRuleTriggerCondition creates an object of type Trigger Condition. This object is to be passed to the command that creates Alerting Action object.

  Box 3: No

  The schedule is 60 minutes, not two hours.

  -FrequencyInMinutes: The alert frequency.

  -TimeWindowInMinutes: The alert time window

  The New-AzAscheduledQueryRuleSchedule command creates an object of type Schedule. This object is to be passed to the command that creates Log Alert Rule.

• Question 103:

  HOTSPOT

  You are developing a web application by using the Azure SDK. The web application accesses data m a zone-redundant BlockBlobStorage storage account

  The application must determine whether the data has changed since the application last reao the data. Update operations must use the latest data changes when writing data to the storages..................

  You need to implement the update operations.

  Which values should you use? To answer, select the appropriate option m the answer area.

  NOTE Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 104:

  HOTSPOT

  You are working for a company that designs mobile applications. They maintain a server where player records are assigned to their different games. The tracking system is new and in development.

  The application uses Entity Framework to connect to an Azure Database. The database holds a Player table and Game table.

  When adding a player, the code should insert a new player record, and add a relationship between an existing game record and the new player record.

  The application will call CreatePlayerWithGame with the correct gameIdand the playerId to start the process. (Line numbers are included for reference only.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Many-to-many relationships without an entity class to represent the join table are not yet supported. However, you can represent a many-to-many relationship by including an entity class for the join table and mapping two separate one-tomany relationships.

  protected override void OnModelCreating(ModelBuilder modelBuilder) {

  modelBuilder.Entity()

  HasKey(t => new { t.PostId, t.TagId });

  modelBuilder.Entity()

  HasOne(pt => pt.Post)

  WithMany(p => p.PostTags)

  HasForeignKey(pt => pt.PostId);

  modelBuilder.Entity()

  HasOne(pt => pt.Tag)

  WithMany(t => t.PostTags)

  HasForeignKey(pt => pt.TagId);

  }

  }

• Question 105:

  HOTSPOT

  You are developing an Azure Function App. You develop code by using a language that is not supported by the Azure Function App host. The code language supports HTTP primitives.

  You must deploy the code to a production Azure Function App environment.

  You need to configure the app for deployment.

  Which configuration values should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Docker container

  A custom handler can be deployed to every Azure Functions hosting option. If your handler requires operating system or platform dependencies (such as a language runtime), you may need to use a custom container. You can create and

  deploy your code to Azure Functions as a custom Docker container.

  Box 2: PowerShell core

  When creating a function app in Azure for custom handlers, we recommend you select .NET Core as the stack. A "Custom" stack for custom handlers will be added in the future.

  PowerShell Core (PSC) is based on the new .NET Core runtime.

  Box 3: 7.0

  On Windows: The Azure Az PowerShell module is also supported for use with PowerShell 5.1 on Windows.

  On Linux: PowerShell 7.0.6 LTS, PowerShell 7.1.3, or higher is the recommended version of PowerShell for use with the Azure Az PowerShell module on all platforms.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-function-linux-custom-image

  https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-7.1.0

• Question 106:

  HOTSPOT

  You are developing an application to collect the following telemetry data for delivery drivers: first name, last name, package count, item id, and current location coordinates. The app will store the data in Azure Cosmos DB.

  You need to configure Azure Cosmos DB to query the data.

  Which values should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Core (SQL)

  Core(SQL) API stores data in document format. It offers the best end-to-end experience as we have full control over the interface, service, and the SDK client libraries. SQL API supports analytics and offers performance isolation between

  operational and analytical workloads.

  Box 2: item id

  item id is a unique identifier and is suitable for the partition key.

  Reference:

  https://docs.microsoft.com/en-us/azure/cosmos-db/choose-api

  https://docs.microsoft.com/en-us/azure/cosmos-db/partitioning-overview

• Question 107:

  HOTSPOT

  You are developing an application to store and retrieve data in Azure Blob storage. The application will be hosted in an on-premises virtual machine (VM). The VM is connected to Azure by using a Site-to-Site VPN gateway connection.

  The application is secured by using Azure Active Directory (Azure AD) credentials.

  The application must be granted access to the Azure Blob storage account with a start time, expiry time, and read permissions. The Azure Blob storage account access must use the Azure AD credentials of the application to secure data

  access. Data access must be able to be revoked if the client application security is breached.

  You need to secure the application access to Azure Blob storage.

  Which security features should you use? To answer select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Shared access signature (SAS) token

  When your application design requires shared access signatures for access to Blob storage, use Azure AD credentials to create a user delegation SAS when possible for superior security.

  Box 2: Stored access policy

  Stored access policies give you the option to revoke permissions for a service SAS without having to regenerate the storage account keys.

  A shared access signature can take one of the following two forms:

  1.

  Service SAS with stored access policy. A stored access policy is defined on a resource container, which can be a blob container, table, queue, or file share. The stored access policy can be used to manage constraints for one or more service shared access signatures. When you associate a service SAS with a stored access policy, the SAS inherits the constraints – the start time, expiry time, and permissions – defined for the stored access policy.

  2.

  Ad hoc SAS.

  Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

• Question 108:

  HOTSPOT

  You have a single page application (SPA) web application that manages information based on data returned by Microsoft Graph from another company's Azure Active Directory (Azure AD) instance.

  Users must be able to authenticate and access Microsoft Graph by using their own company's Azure AD instance.

  You need to configure the application manifest for the app registration.

  How should you complete the manifest? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: true

  The oauth2AllowImplicitFlow attribute Specifies whether this web app can request OAuth2.0 implicit flow access tokens. The default is false. This flag is used for browser-based apps, like JavaScript single-page apps.

  In implicit flow, the app receives tokens directly from the Azure Active Directory (Azure AD) authorize endpoint, without any server-to-server exchange. All authentication logic and session handling is done entirely in the JavaScript client with

  either a page redirect or a pop-up box.

  Box 2: requiredResourceAccess

  With dynamic consent, requiredResourceAccess drives the admin consent experience and the user consent experience for users who are using static consent. However, this parameter doesn't drive the user consent experience for the

  general case.

  resourceAppId is the unique identifier for the resource that the app requires access to. This value should be equal to the appId declared on the target resource app.

  resourceAccess is an array that lists the OAuth2.0 permission scopes and app roles that the app requires from the specified resource. Contains the id and type values of the specified resources.

  Example: "requiredResourceAccess": [

  {

  "resourceAppId": "00000002-0000-0000-c000-000000000000",

  "resourceAccess": [

  {

  "id": "311a71cc-e848-46a1-bdf8-97ff7156d8e6",

  "type": "Scope"

  }

  ]

  }

  ],

  Incorrect Answers:

  1.

  The legacy attribute availableToOtherTenants is no longer supported.

  2.

  The addIns attribute defines custom behavior that a consuming service can use to call an app in specific contexts. For example, applications that can render file streams may set the addIns property for its "FileHandler" functionality. This parameter will let services like Microsoft 365 call the application in the context of a document the user is working on.

  Example: "addIns": [

  {

  "id": "968A844F-7A47-430C-9163-07AE7C31D407",

  "type":" FileHandler",

  "properties": [

  {

  "key": "version",

  "value": "2"

  }

  ]

  }

  ],

  Box 3: AzureADMyOrg

  The signInAudience attribute specifies what Microsoft accounts are supported for the current application. Supported values are:

  1.

  AzureADMyOrg - Users with a Microsoft work or school account in my organization's Azure AD tenant (for example, single tenant)

  2.

  AzureADMultipleOrgs - Users with a Microsoft work or school account in any organization's Azure AD tenant (for example, multi-tenant)

  3.

  AzureADandPersonalMicrosoftAccount - Users with a personal Microsoft account, or a work or school account in any organization's Azure AD tenant

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-implicit-grant-flow

• Question 109:

  HOTSPOT

  You are developing an ASP.NET Core time sheet application that runs as an Azure Web App. Users of the application enter their time sheet information on the first day of every month.

  The application uses a third-party web service to validate data.

  The application encounters periodic server errors due to errors that result from calling a third-party web server. Each request to the third-party server has the same chance of failure.

  You need to configure an Azure Monitor alert to detect server errors unrelated to the third-party service. You must minimize false-positive alerts.

  How should you complete the Azure Resource Manager template? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: DynamicThresholdCriterion

  Box 2: Http5xx Server errors are in the 5xx range. Client errors are in the 4xx range

  Box 3: Low

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-dynamic-thresholds

• Question 110:

  HOTSPOT

  A software as a service (SaaS) company provides document management services. The company has a service that consists of several Azure web apps. All Azure web apps run in an Azure App Service Plan named PrimaryASP.

  You are developing a new web service by using a web app named ExcelParser. The web app contains a third-party library for processing Microsoft Excel files. The license for the third-party library stipulates that you can only run a single

  instance of the library.

  You need to configure the service.

  How should you complete the script? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/app-service/manage-scale-per-app