Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 11:

  You need to resolve a notification latency issue.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Set Always On to true.

  B. Ensure that the Azure Function is using an App Service plan.

  C. Set Always On to false.

  D. Ensure that the Azure Function is set to use a consumption plan.

  Correct Answer: AB

  Azure Functions can run on either a Consumption Plan or a dedicated App Service Plan. If you run in a dedicated mode, you need to turn on the Always On setting for your Function App to run properly. The Function runtime will go idle after a few minutes of inactivity, so only HTTP triggers will actually "wake up" your functions. This is similar to how WebJobs must have Always On enabled.

  Scenario: Notification latency: Users report that anomaly detection emails can sometimes arrive several minutes after an anomaly is detected.

  Anomaly detection service: You have an anomaly detection service that analyzes log information for anomalies. It is implemented as an Azure Machine Learning model. The model is deployed as a web service. If an anomaly is detected, an Azure Function that emails administrators is called by using an HTTP WebHook.

  Reference: https://github.com/Azure/Azure-Functions/wiki/Enable-Always-On-when-running-on-dedicated-App-Service-Plan

• Question 12:

  You need to ensure that the solution can meet the scaling requirements for Policy Service. Which Azure Application Insights data model should you use?

  A. an Application Insights dependency

  B. an Application Insights event

  C. an Application Insights trace

  D. an Application Insights metric

  Correct Answer: D

  Application Insights provides three additional data types for custom telemetry:

  Trace - used either directly, or through an adapter to implement diagnostics logging using an instrumentation framework that is familiar to you, such as Log4Net or System.Diagnostics.

  Event - typically used to capture user interaction with your service, to analyze usage patterns.

  Metric - used to report periodic scalar measurements.

  Scenario:

  Policy service must use Application Insights to automatically scale with the number of policy actions that it is performing.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-monitor/app/data-model

• Question 13:

  You need to ensure the security policies are met.

  What code do you add at line CS07 of ConfigureSSE.ps1?

  A. -PermissionsToKeys create, encrypt, decrypt

  B. -PermissionsToCertificates create, encrypt, decrypt

  C. -PermissionsToCertificates wrapkey, unwrapkey, get

  D. -PermissionsToKeys wrapkey, unwrapkey, get

  Correct Answer: B

  Scenario: All certificates and secrets used to secure data must be stored in Azure Key Vault.

  You must adhere to the principle of least privilege and provide privileges which are essential to perform the intended function.

  The Set-AzureRmKeyValutAccessPolicy parameter -PermissionsToKeys specifies an array of key operation permissions to grant to a user or service principal. The acceptable values for this parameter: decrypt, encrypt, unwrapKey, wrapKey,

  verify, sign, get, list, update, create, import, delete, backup, restore, recover, purge

  Incorrect Answers:

  A, C: The Set-AzureRmKeyValutAccessPolicy parameter -PermissionsToCertificates specifies an array of certificate permissions to grant to a user or service principal. The acceptable values for this parameter: get, list, delete, create, import,

  update, managecontacts, getissuers, listissuers, setissuers, deleteissuers, manageissuers, recover, purge, backup, restore

  Reference:

  https://docs.microsoft.com/en-us/powershell/module/azurerm.keyvault/set-azurermkeyvaultaccesspolicy

• Question 14:

  You need to resolve the capacity issue. What should you do?

  A. Convert the trigger on the Azure Function to an Azure Blob storage trigger

  B. Ensure that the consumption plan is configured correctly to allow scaling

  C. Move the Azure Function to a dedicated App Service Plan

  D. Update the loop starting on line PC09 to process items in parallel

  Correct Answer: D

  If you want to read the files in parallel, you cannot use forEach. Each of the async callback function calls does return a promise. You can await the array of promises that you'll get with Promise.all. Scenario: Capacity issue: During busy periods, employees report long delays between the time they upload the receipt and when it appears in the web application.

  

  Reference: https://stackoverflow.com/questions/37576685/using-async-await-with-a-foreach-loop

• Question 15:

  You need to resolve the log capacity issue. What should you do?

  A. Create an Application Insights Telemetry Filter

  B. Change the minimum log level in the host.json file for the function

  C. Implement Application Insights Sampling

  D. Set a LogCategoryFilter during startup

  Correct Answer: C

  Scenario, the log capacity issue: Developers report that the number of log message in the trace output for the processor is too high, resulting in lost log messages.

  Sampling is a feature in Azure Application Insights. It is the recommended way to reduce telemetry traffic and storage, while preserving a statistically correct analysis of application data. The filter selects items that are related, so that you can

  navigate between items when you are doing diagnostic investigations. When metric counts are presented to you in the portal, they are renormalized to take account of the sampling, to minimize any effect on the statistics.

  Sampling reduces traffic and data costs, and helps you avoid throttling.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-monitor/app/sampling

• Question 16:

  You need to implement a solution to resolve the retail store location data issue.

  Which three Azure Blob features should you enable? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Soft delete

  B. Change feed

  C. Snapshots

  D. Versioning

  E. Object replication

  F. Immutability

  Correct Answer: ABD

  Scenario: You must perform a point-in-time restoration of the retail store location data due to an unexpected and accidental deletion of data.

  Before you enable and configure point-in-time restore, enable its prerequisites for the storage account: soft delete, change feed, and blob versioning.

  Reference:

  https://docs.microsoft.com/en-us/azure/storage/blobs/point-in-time-restore-manage

• Question 17:

  You need to ensure receipt processing occurs correctly. What should you do?

  A. Use blob properties to prevent concurrency problems

  B. Use blob SnapshotTime to prevent concurrency problems

  C. Use blob metadata to prevent concurrency problems

  D. Use blob leases to prevent concurrency problems

  Correct Answer: D

  You can create a snapshot of a blob. A snapshot is a read-only version of a blob that's taken at a point in time. Once a snapshot has been created, it can be read, copied, or deleted, but not modified. Snapshots provide a way to back up a blob as it appears at a moment in time.

  Scenario: Processing is performed by an Azure Function that uses version 2 of the Azure Function runtime. Once processing is completed, results are stored in Azure Blob Storage and an Azure SQL database. Then, an email summary is sent to the user with a link to the processing report. The link to the report must remain valid if the email is forwarded to another user.

  Reference: https://docs.microsoft.com/en-us/rest/api/storageservices/creating-a-snapshot-of-a-blob

• Question 18:

  You need to secure the Azure Functions to meet the security requirements.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled.

  B. Store the RSA-HSM key in Azure Blob storage with an immutability policy applied to the container.

  C. Create a free tier Azure App Configuration instance with a new Azure AD service principal.

  D. Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

  E. Store the RSA-HSM key in Azure Cosmos DB. Apply the built-in policies for customer-managed keys and allowed locations.

  Correct Answer: AD

  Scenario: All Azure Functions must centralize management and distribution of configuration data for different environments and geographies, encrypted by using a company-provided RSA-HSM key.

  Microsoft Azure Key Vault is a cloud-hosted management service that allows users to encrypt keys and small secrets by using keys that are protected by hardware security modules (HSMs).

  You need to create a managed identity for your application.

  Reference:

  https://docs.microsoft.com/en-us/azure/app-service/app-service-key-vault-references

• Question 19:

  You need to audit the retail store sales transactions.

  What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Update the retail store location data upload process to include blob index tags. Create an Azure Function to process the blob index tags and filter by store location.

  B. Process the change feed logs of the Azure Blob storage account by using an Azure Function. Specify a time range for the change feed data.

  C. Enable blob versioning for the storage account. Use an Azure Function to process a list of the blob versions per day.

  D. Process an Azure Storage blob inventory report by using an Azure Function. Create rule filters on the blob inventory report.

  E. Subscribe to blob storage events by using an Azure Function and Azure Event Grid. Filter the events by store location.

  Correct Answer: BE

  Scenario: Audit store sale transaction information nightly to validate data, process sales financials, and reconcile inventory.

  "Process the change feed logs of the Azure Blob storage account by using an Azure Function. Specify a time range for the change feed data": Change feed support is well-suited for scenarios that process data based on objects that have

  changed. For example, applications can:

  Store, audit, and analyze changes to your objects, over any period of time, for security, compliance or intelligence for enterprise data management.

  "Subscribe to blob storage events by using an Azure Function and Azure Event Grid. Filter the events by store location": Azure Storage events allow applications to react to events, such as the creation and deletion of blobs. It does so without

  the need for complicated code or expensive and inefficient polling services. The best part is you only pay for what you use.

  Blob storage events are pushed using Azure Event Grid to subscribers such as Azure Functions, Azure Logic Apps, or even to your own http listener. Event Grid provides reliable event delivery to your applications through rich retry policies

  and dead-lettering.

  Incorrect Answers:

  "Enable blob versioning for the storage account. Use an Azure Function to process a list of the blob versions per day": You can enable Blob storage versioning to automatically maintain previous versions of an object. When blob versioning is

  enabled, you can access earlier versions of a blob to recover your data if it is modified or deleted.

  Reference:

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-change-feed

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-event-overview

• Question 20:

  You need to reduce read latency for the retail store solution.

  What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Create a new composite index for the store location data queries in Azure Cosmos DB. Modify the queries to support parameterized SQL and update the Azure function app to call the new Queries.

  B. Configure Azure Cosmos DB consistency to strong consistency Increase the RUs for the container supporting store location data.

  C. Provision an Azure Cosmos OB dedicated gateway, update blob storage to use the new dedicated gateway endpoint.

  D. Configure Azure Cosmos DB consistency to session consistency. Cache session tokens in a new Azure Redis cache instance after every write. Update reads to use the session token stored in Azure Redis.

  E. Provision an Azure Cosmos DB dedicated gateway Update the Azure Function app connection string to use the new dedicated gateway endpoint.

  Correct Answer: AE

  Azure Cosmos DB queries from the Azure Function exhibit high Request Unit (RU) usage and contain multiple, complex queries that exhibit high point read latency for large items as the function app is scaling.

  Reference:

  https://docs.microsoft.com/en-us/azure/architecture/solution-ideas/articles/data-cache-with-redis-cache https://docs.microsoft.com/en-us/azure/cosmos-db/dedicated-gateway