Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 121:

  HOTSPOT

  You are developing an Azure-hosted e-commerce web application. The application will use Azure Cosmos DB to store sales orders. You are using the latest SDK to manage the sales orders in the database.

  You create a new Azure Cosmos DB instance. You include a valid endpoint and valid authorization key to an appSettings.json file in the code project.

  You are evaluating the following application code: (Line number are included for reference only.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  The createDatabaseIfNotExistsAsync method checks if a database exists, and if it doesn't, create it.

  The Database.CreateContainerAsync method creates a container as an asynchronous operation in the Azure Cosmos service.

  Box 2: Yes

  The CosmosContainer.CreateItemAsync method creates an item as an asynchronous operation in the Azure Cosmos service.

  Box 3: Yes

  Reference:

  https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.cosmos.cosmosclient.createdatabaseifnotexistsasync

  https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.cosmos.database.createcontainerasync

  https://docs.microsoft.com/en-us/dotnet/api/azure.cosmos.cosmoscontainer.createitemasync

• Question 122:

  HOTSPOT

  You plan to deploy a new application to a Linux virtual machine (VM) that is hosted in Azure.

  The entire VM must be secured at rest by using industry-standard encryption technology to address organizational security and compliance requirements.

  You need to configure Azure Disk Encryption for the VM.

  How should you complete the Azure CLI commands? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: keyvault

  Create an Azure Key Vault with az keyvault create and enable the Key Vault for use with disk encryption. Specify a unique Key Vault name for keyvault_name as follows:

  keyvault_name=myvaultname$RANDOM

  az keyvault create \ --name $keyvault_name \ --resource-group $resourcegroup \ --location eastus \ --enabled-for-disk-encryption True

  Box 2: keyvault key The Azure platform needs to be granted access to request the cryptographic keys when the VM boots to decrypt the virtual disks. Create a cryptographic key in your Key Vault with az keyvault key create. The following example creates a key named myKey:

  az keyvault key create \ --vault-name $keyvault_name \ --name myKey \ --protection software

  Box 3: vm

  Create a VM with az vm create. Only certain marketplace images support disk encryption. The following example creates a VM named myVM using an Ubuntu 16.04 LTS image:

  az vm create \ --resource-group $resourcegroup \ --name myVM \ --image Canonical:UbuntuServer:16.04-LTS:latest \ --admin-username azureuser \ --generate-ssh-keys \

  Box 4: vm encryption

  Encrypt your VM with az vm encryption enable:

  az vm encryption enable \ --resource-group $resourcegroup \ --name myVM \ --disk-encryption-keyvault $keyvault_name \ --key-encryption-key myKey \ --volume-type all

  Note: seems to an error in the question. Should have enable instead of create.

  Box 5: all

  Encrypt both data and operating system.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-cli-quickstart

• Question 123:

  HOTSPOT

  You are developing an application that needs access to an Azure virtual machine (VM).

  The access lifecycle for the application must be associated with the VM service instance.

  You need to enable managed identity for the VM.

  How should you complete the PowerShell segment? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: -IdentityType

  Enable system-assigned managed identity on an existing Azure VM:

  To enable a system-assigned managed identity, use the -IdentityType switch on the Update-AzVM cmdlet (see below).

  Box 2: $SystemAssigned

  $vm = Get-AzVM -ResourceGroupName myResourceGroup -Name myVM

  Update-AzVM -ResourceGroupName myResourceGroup -VM $vm -IdentityType SystemAssigned

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/qs-configure-powershell-windows-vm

• Question 124:

  HOTSPOT

  A company is developing a Node.js web app. The web app code is hosted in a GitHub repository located at https://github.com/TailSpinToys/webapp.

  The web app must be reviewed before it is moved to production. You must deploy the initial code release to a deployment slot named review.

  You need to create the web app and deploy the code.

  How should you complete the commands? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: New-AzResourceGroup

  The New-AzResourceGroup cmdlet creates an Azure resource group. Box 2: New-AzAppServicePlan The New-AzAppServicePlan cmdlet creates an Azure App Service plan in a given location

  Box 3: New-AzWebApp

  The New-AzWebApp cmdlet creates an Azure Web App in a given a resource group Box 4: New-AzWebAppSlot The New-AzWebAppSlot cmdlet creates an Azure Web App slot.

  Reference: https://docs.microsoft.com/en-us/powershell/module/az.resources/new-azresourcegroup?view=azps-2.3.2 https://docs.microsoft.com/en-us/powershell/module/az.websites/new-azappserviceplan?view=azps-2.3.2 https://docs.microsoft.com/en-us/powershell/module/az.websites/new-azwebapp?view=azps-2.3.2 https://docs.microsoft.com/en-us/powershell/module/az.websites/new-azwebappslot?view=azps-2.3.2

• Question 125:

  HOTSPOT

  You are developing an application that uses Azure Storage Queues.

  You have the following code:

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  The code does not configure the lock duration.

  Note: Default lock duration is 30 seconds. Lock duration will be set even if it is not specified in code.

  Box 2: Yes

  Peeking messages will not remove them from the queue.

  Box 3: Yes

  Reference:

  https://docs.microsoft.com/en-us/azure/storage/queues/storage-dotnet-how-to-use-queues

  https://docs.microsoft.com/en-us/dotnet/api/microsoft.servicebus.messaging.queuedescription.lockduration

• Question 126:

  HOTSPOT

  You develop a news and blog content app for Windows devices.

  A notification must arrive on a user's device when there is a new article available for them to view.

  You need to implement push notifications.

  How should you complete the code segment? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: NotificationHubClient Box 2: NotificationHubClient Box 3: CreateClientFromConnectionString // Initialize the Notification Hub

  NotificationHubClient hub = NotificationHubClient.CreateClientFromConnectionString(listenConnString, hubName); Box 4: SendWindowsNativeNotificationAsync Send the push notification. var result = await hub.SendWindowsNativeNotificationAsync(windowsToastPayload);

  Reference: https://docs.microsoft.com/en-us/azure/notification-hubs/notification-hubs-push-notification-registration-management https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/app-service-mobile/app-service-mobile-windows-store-dotnet-get-started-push.md

• Question 127:

  HOTSPOT

  You are developing an ASP.NET Core app that includes feature flags which are managed by Azure App Configuration. You create an Azure App Configuration store named AppFeatureFlagStore that contains a feature flag named Export.

  You need to update the app to meet the following requirements:

  1.

  Use the Export feature in the app without requiring a restart of the app.

  2.

  Validate users before users are allowed access to secure resources.

  3.

  Permit users to access secure resources.

  How should you complete the code segment? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: UseAuthentication

  Need to validate users before users are allowed access to secure resources.

  UseAuthentication adds the AuthenticationMiddleware to the specified IApplicationBuilder, which enables authentication capabilities.

  Box 2: UseAuthorization

  Need to permit users to access secure resources.

  UseAuthorization adds the AuthorizationMiddleware to the specified IApplicationBuilder, which enables authorization capabilities.

  Box 3: UseStaticFiles

  Need to use the Export feature in the app without requiring a restart of the app.

  UseStaticFiles enables static file serving for the current request path

  Reference:

  https://docs.microsoft.com/en-us/dotnet/api/microsoft.aspnetcore.builder.iapplicationbuilder?view=aspnetcore-5.0

• Question 128:

  HOTSPOT

  You are developing a back-end Azure App Service that scales based on the number of messages contained in a Service Bus queue.

  A rule already exists to scale up the App Service when the average queue length of unprocessed and valid queue messages is greater than 1000.

  You need to add a new rule that will continuously scale down the App Service as long as the scale up condition is not met.

  How should you configure the Scale rule? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Service bus queue

  You are developing a back-end Azure App Service that scales based on the number of messages contained in a Service Bus queue.

  Box 2: ActiveMessage Count

  ActiveMessageCount: Messages in the queue or subscription that are in the active state and ready for delivery.

  Box 3: Count

  Box 4: Less than or equal to

  You need to add a new rule that will continuously scale down the App Service as long as the scale up condition is not met.

  Box 5: Decrease count by

• Question 129:

  HOTSPOT

  You are developing an Azure Function App by using Visual Studio. The app will process orders input by an Azure Web App. The web app places the order information into Azure Queue Storage.

  You need to review the Azure Function App code shown below.

  

  NOTE: Each correct selection is worth one point. Hot Area:

  

  Correct Answer:

  

  Box 1: No

  ExpirationTime - The time that the message expires.

  InsertionTime - The time that the message was added to the queue.

  Box 2: Yes

  maxDequeueCount - The number of times to try processing a message before moving it to the poison queue. Default value is 5.

  Box 3: Yes

  When there are multiple queue messages waiting, the queue trigger retrieves a batch of messages and invokes function instances concurrently to process them. By default, the batch size is 16. When the number being processed gets down

  to 8, the runtime gets another batch and starts processing those messages. So the maximum number of concurrent messages being processed per function on one virtual machine (VM) is 24.

  Box 4: Yes

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-queue

• Question 130:

  HOTSPOT

  You are configuring a development environment for your team. You deploy the latest Visual Studio image from the Azure Marketplace to your Azure subscription.

  The development environment requires several software development kits (SDKs) and third-party components to support application development across the organization. You install and customize the deployed virtual machine (VM) for your

  development team. The customized VM must be saved to allow provisioning of a new team member development environment.

  You need to save the customized VM for future provisioning.

  Which tools or services should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Azure Powershell

  Creating an image directly from the VM ensures that the image includes all of the disks associated with the VM, including the OS disk and any data disks.

  Before you begin, make sure that you have the latest version of the Azure PowerShell module.

  You use Sysprep to generalize the virtual machine, then use Azure PowerShell to create the image.

  Box 2: Azure Blob Storage

  You can store images in Azure Blob Storage.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/capture-image-resource#create-an-image-of-a-vm-using-powershell