Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 131:

  HOTSPOT

  You are configuring a new development environment for a Java application.

  The environment requires a Virtual Machine Scale Set (VMSS), several storage accounts, and networking components.

  The VMSS must not be created until the storage accounts have been successfully created and an associated load balancer and virtual network is configured.

  How should you complete the Azure Resource Manager template? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: copyIndex

  Notice that the name of each resource includes the copyIndex() function, which returns the current iteration in the loop. copyIndex() is zero-based.

  Box 2: copy

  By adding the copy element to the resources section of your template, you can dynamically set the number of resources to deploy.

  Box 3: dependsOn

  Example:

  "type": "Microsoft.Compute/virtualMachineScaleSets", "apiVersion": "2020-06-01", "name": "[variables('namingInfix')]", "location": "[parameters('location')]", "sku": { "name": "[parameters('vmSku')]", "tier": "Standard", "capacity": "[parameters('instanceCount')]" }, "dependsOn": [ "[resourceId('Microsoft.Network/loadBalancers', variables('loadBalancerName'))]", "[resourceId('Microsoft.Network/virtualNetworks', variables('virtualNetworkName'))]" ],

  Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/copy-resources

  https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-template-windows

• Question 132:

  HOTSPOT

  A company is developing a gaming platform. Users can join teams to play online and see leaderboards that include player statistics. The solution includes an entity named Team.

  You plan to implement an Azure Redis Cache instance to improve the efficiency of data operations for entities that rarely change.

  You need to invalidate the cache when team data is changed.

  How should you complete the code? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: IDatabase cache = connection.GetDatabase();

  Connection refers to a previously configured ConnectionMultiplexer.

  Box 2: cache.StringSet("teams",")

  To specify the expiration of an item in the cache, use the TimeSpan parameter of StringSet.

  cache.StringSet("key1", "value1", TimeSpan.FromMinutes(90));

  Reference:

  https://azure.microsoft.com/sv-se/blog/lap-around-azure-redis-cache-preview/

  https://docs.microsoft.com/en-us/cli/azure/webapp/config/container

• Question 133:

  HOTSPOT

  You are preparing to deploy a Python website to an Azure Web App using a container. The solution will use multiple containers in the same container group. The Dockerfile that builds the container is as follows:

  

  You build a container by using the following command. The Azure Container Registry instance named images is a private registry.

  

  The user name and password for the registry is admin.

  The Web App must always run the same version of the website regardless of future builds.

  You need to create an Azure Web App to run the website.

  How should you complete the commands? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: --SKU B1 --hyper-v

  --hyper-v

  Host web app on Windows container.

  Box 2: --deployment-source-url images.azurecr.io/website:v1.0.0

  --deployment-source-url -u

  Git repository URL to link with manual integration.

  The Web App must always run the same version of the website regardless of future builds.

  Incorrect:

  --deployment-container-image-name -i

  Linux only. Container image name from Docker Hub, e.g. publisher/image-name:tag.

  Box 3: az webapp config container set -url https://images.azurecr.io -u admin -p admin

  az webapp config container set

  Set a web app container's settings.

  Paremeter: --docker-registry-server-url -r

  The container registry server url.

  The Azure Container Registry instance named images is a private registry.

  Example:

  az webapp config container set --docker-registry-server-url https://{azure-container-registry-name}.azurecr.io

  Reference:

  https://docs.microsoft.com/en-us/cli/azure/appservice/plan

• Question 134:

  HOTSPOT

  Your company is migrating applications to Azure. The IT department must allow internal developers to communicate with Microsoft support.

  The service agents of the IT department must only have view resources and create support ticket permissions to all subscriptions. A new custom role must be created by reusing a default role definition and changing the permissions.

  You need to create the custom role.

  To answer, select the appropriate options in the answer area;

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Set-AzureRmRoleDefinition Input-File C:\SupportRole.json

  The Set-AzureRmRoleDefinition cmdlet updates an existing custom role in Azure Role- Based Access Control. Provide the updated role definition as an input to the command as a JSON file or a PSRoleDefinition object.

  The role definition for the updated custom role MUST contain the Id and all other required properties of the role even if they are not updated: DisplayName, Description, Actions, AssignableScope

  Box 2: "*/read*."* Microsoft.Support/*"

  Microsoft.Support/* Create and manage support tickets "Microsoft.Support" role definition azure

• Question 135:

  HOTSPOT

  You plan to deploy a new application to a Linux virtual machine (VM) that is hosted in Azure.

  The entire VM must be secured at rest by using industry-standard encryption technology to address organizational security and compliance requirements.

  You need to configure Azure Disk Encryption for the VM.

  How should you complete the Azure CLI commands? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: keyvault

  Create an Azure Key Vault with az keyvault create and enable the Key Vault for use with disk encryption. Specify a unique Key Vault name for keyvault_name as follows:

  keyvault_name=myvaultname$RANDOM

  az keyvault create \

  --name $keyvault_name \

  --resource-group $resourcegroup \

  --location eastus \

  --enabled-for-disk-encryption True

  Box 2: keyvault key

  The Azure platform needs to be granted access to request the cryptographic keys when the VM boots to decrypt the virtual disks. Create a cryptographic key in your Key Vault with az keyvault key create. The following example creates a key

  named myKey:

  az keyvault key create \

  --vault-name $keyvault_name \

  --name myKey \

  --protection software

  Box 3: vm

  Create a VM with az vm create. Only certain marketplace images support disk encryption. The following example creates a VM named myVM using an Ubuntu 16.04 LTS image:

  az vm create \

  --resource-group $resourcegroup \

  --name myVM \

  --image Canonical:UbuntuServer:16.04-LTS:latest \

  --admin-username azureuser \

  --generate-ssh-keys \

  Box 4: vm encryption

  Encrypt your VM with az vm encryption enable:

  az vm encryption enable \

  --resource-group $resourcegroup \

  --name myVM \

  --disk-encryption-keyvault $keyvault_name \

  --key-encryption-key myKey \

  --volume-type all

  Note: seems to an error in the question. Should have enable instead of create.

  Box 5: all

  Encrypt both data and operating system.

  References:

  https://docs.microsoft.com/bs-latn-ba/azure/virtual-machines/linux/encrypt-disks

• Question 136:

  HOTSPOT

  You are developing an Azure App Service hosted ASP.NET Core web app to deliver video on-demand streaming media. You enable an Azure Content Delivery Network (CDN) Standard for the web endpoint. Customer videos are downloaded

  from the web app by using the following example URL:http//www.contoso.com/content.p4?quality=1

  All media content must expire from the cache after one hour. Customer videos with varying quality must be delivered to the closest regional point of presence (POP) node.

  You need to configure Azure CDN caching rules.

  Which options should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Override

  Override: Ignore origin-provided cache duration; use the provided cache duration instead. This will not override cache-control: no-cache.

  Set if missing: Honor origin-provided cache-directive headers, if they exist; otherwise, use the provided cache duration.

  Incorrect:

  Bypass cache: Do not cache and ignore origin-provided cache-directive headers.

  Box 2: 1 hour

  All media content must expire from the cache after one hour.

  Box 3: Cache every unique URL

  Cache every unique URL: In this mode, each request with a unique URL, including the query string, is treated as a unique asset with its own cache. For example, the response from the origin server for a request for example.ashx?q=test1 is

  cached at the POP node and returned for subsequent caches with the same query string. A request for example.ashx?q=test2 is cached as a separate asset with its own time-to-live setting.

  Incorrect Answers:

  Bypass caching for query strings: In this mode, requests with query strings are not cached at the CDN POP node. The POP node retrieves the asset directly from the origin server and passes it to the requestor with each request.

  Ignore query strings: Default mode. In this mode, the CDN point-of-presence (POP) node passes the query strings from the requestor to the origin server on the first request and caches the asset. All subsequent requests for the asset that are

  served from the POP ignore the query strings until the cached asset expires.

  References:

  https://docs.microsoft.com/en-us/azure/cdn/cdn-query-string

• Question 137:

  HOTSPOT

  You have an app that stores player scores for an online game. The app stores data in Azure tables using a class named PlayerScore as the table entity. The table is populated with 100,000 records.

  You are reviewing the following section of code that is intended to retrieve 20 records where the player score exceeds 15,000. (Line numbers are included for reference only.)

  

  You have the following code. (Line numbers are included for reference only.)

  

  You store customer information in an Azure Cosmos database. The following data already exists in the database:

  

  You develop the following code. (Line numbers are included for reference only.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  Box 2: Yes

  The TableQuery.Take method defines the upper bound for the number of entities the query returns.

  Example:

  query.Take(10);

  Box 3: Yes

  Box 4: Yes

  References:

  https://www.vkinfotek.com/azureqa/how-do-i-query-azure-table-storage-using-tablequery-class.html

• Question 138:

  HOTSPOT

  You are developing a ticket reservation system for an airline.

  The storage solution for the application must meet the following requirements:

  Ensure at least 99/99% availability and provide low latency.

  Accept reservations even in network outages or other unforseen failures

  Process reservations in the exact sequence as reservation are submitted to minimize overbooking or selling the same seat to multiple travelers.

  Allow simultaneous and out-of-order reservations with a maximum five-second tolerance window.

  You provision a resource group named airlineResourceGroup in the Azure South-Central US region.

  You need to provision a SQL API Cosmos DB account to support the app.

  How should you complete the Azure CLI commands? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Strong

  Strong consistency offers a linearizability guarantee. The reads are guaranteed to return the most recent committed version of an item. A client never sees an uncommitted or partial write. Users are always guaranteed to read the latest

  committed write.

  " Process reservations in the exact sequence as reservation are submitted to minimize overbooking or selling the same seat to multiple travelers."

  Box 2: Enable-automatic-failover

  For multi-region Cosmos accounts that are configured with a single-write region, enable automatic-failover by using Azure CLI or Azure portal. After you enable automatic failover, whenever there is a regional disaster, Cosmos DB will

  automatically failover your account.

  " Accept reservations even in network outages or other unforseen failures"

  Box 3: southcentralus

  " You provision a resource group named airlineResourceGroup in the Azure South-Central US region."

  References:

  https://docs.microsoft.com/en-us/azure/cosmos-db/consistency-levels

  https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/cosmos-db/high-availability.md

• Question 139:

  HOTSPOT

  You are developing a data storage solution for a social networking app.

  The solution requires a mobile app that stores user information using Azure Table Storage.

  You need to develop code that can insert multiple sets of user information.

  How should you complete the code? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1, Box 2: TableBatchOperation

  Create the batch operation.

  TableBatchOperation op = new TableBatchOperation();

  Box 3: ExecuteBatch

  / Execute the batch operation.

  table.ExecuteBatch(op);

  Note: You can insert a batch of entities into a table in one write operation. Some other notes on batch operations:

  You can perform updates, deletes, and inserts in the same single batch operation.

  A single batch operation can include up to 100 entities.

  All entities in a single batch operation must have the same partition key.

  While it is possible to perform a query as a batch operation, it must be the only operation in the batch.

  References:

  https://docs.microsoft.com/en-us/azure/cosmos-db/table-storage-how-to-use-dotnet

• Question 140:

  HOTSPOT

  A company is developing a mobile app for field service employees using Azure App Service Mobile Apps as the backend.

  The company's network connectivity varies throughout the day. The solution must support offline use and synchronize changes in the background when the app is online app.

  You need to implement the solution.

  How should you complete the code segment? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: var todoTable = client GetSyncTable()

  To setup offline access, when connecting to your mobile service, use the method GetSyncTable instead of GetTable (example):

  IMobileServiceSyncTable todoTable = App.MobileService.GetSyncTable(); /

  Box 2: await todoTable.PullAsync("allTodoItems",todo.Table.CreateQuery());

  Your app should now use IMobileServiceSyncTable (instead of IMobileServiceTable) for CRUD operations. This will save changes to the local database and also keep a log of the changes. When the app is ready to synchronize its changes

  with the Mobile Service, use the methods PushAsync and PullAsync (example):

  await App.MobileService.SyncContext.PushAsync();

  await todoTable.PullAsync();

  References:

  https://azure.microsoft.com/es-es/blog/offline-sync-for-mobile-services/