Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 211:

  DRAG DROP

  You plan to create a Docker image that runs an ASP.NET Core application named ContosoApp. You have a setup script named setupScript.ps1 and a series of application files including ContosoApp.dll.

  You need to create a Dockerfile document that meets the following requirements:

  1.

  Call setupScripts.ps1 when the container is built.

  2.

  Run ContosoApp.dll when the container starts.

  The Dockerfile document must be created in the same folder where ContosoApp.dll and setupScript.ps1 are stored.

  Which five commands should you use to develop the solution? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Box 1: CMD [..]

  Cmd starts a new instance of the command interpreter, Cmd.exe.

  Syntax: CMD

  Specifies the command you want to carry out.

  Box 2: FROM microsoft/aspnetcore-build:latest Box 3: WORKDIR /apps/ContosoApp Bxo 4: COPY ./ . Box 5: RUN powershell ./setupScript.ps1

• Question 212:

  DRAG DROP

  You develop a web application.

  You need to register the application with an active Azure Active Directory (Azure AD) tenant.

  Which three actions should you perform in sequence? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Register a new application using the Azure portal

  1.

  Sign in to the Azure portal using either a work or school account or a personal Microsoft account.

  2.

  If your account gives you access to more than one tenant, select your account in the upper right corner. Set your portal session to the Azure AD tenant that you want.

  3.

  Search for and select Azure Active Directory. Under Manage, select App registrations.

  4.

  Select New registration. (Step 1)

  5.

  In Register an application, enter a meaningful application name to display to users.

  6.

  Specify who can use the application. Select the Azure AD instance. (Step 2)

  7.

  Under Redirect URI (optional), select the type of app you're building: Web or Public client (mobile and desktop). Then enter the redirect URI, or reply URL, for your application. (Step 3)

  8.

  When finished, select Register.

• Question 213:

  DRAG DROP

  You are developing an application. You have an Azure user account that has access to two subscriptions.

  You need to retrieve a storage account key secret from Azure Key Vault.

  In which order should you arrange the PowerShell commands to develop the solution? To answer, move all commands from the list of commands to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Get-AzSubscription

  If you have multiple subscriptions, you might have to specify the one that was used to create your key vault. Enter the following to see the subscriptions for your account:

  Get-AzSubscription

  Step 2: Set-AzContext -SubscriptionId

  To specify the subscription that's associated with the key vault you'll be logging, enter:

  Set-AzContext -SubscriptionId

  Step 3: Get-AzStorageAccountKey

  You must get that storage account key.

  Step 4: $secretvalue = ConvertTo-SecureString -AsPlainText -Force

  Set-AzKeyVaultSecret -VaultName -Name -SecretValue $secretvalue

  After retrieving your secret (in this case, your storage account key), you must convert that key to a secure string, and then create a secret with that value in your key vault.

  Step 5: Get-AzKeyVaultSecret

  Next, get the URI for the secret you created. You'll need this URI in a later step to call the key vault and retrieve your secret. Run the following PowerShell command and make note of the ID value, which is the secret's URI:

  Get-AzKeyVaultSecret –VaultName

  Reference:

  https://docs.microsoft.com/bs-latn-ba/Azure/key-vault/key-vault-key-rotation-log-monitoring

• Question 214:

  DRAG DROP

  Contoso, Ltd. provides an API to customers by using Azure API Management (APIM). The API authorizes users with a JWT token.

  You must implement response caching for the APIM gateway. The caching mechanism must detect the user ID of the client that accesses data for a given location and cache the response for that user ID.

  You need to add the following policies to the policies file:

  a set-variable policy to store the detected user identity

  a cache-lookup-value policy a cache-store-value policy a find-and-replace policy to update the response body with the user profile information

  To which policy section should you add the policies? To answer, drag the appropriate sections to the correct policies. Each section may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll

  to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Inbound.

  A set-variable policy to store the detected user identity.

  Example:

  name="enduserid"

  value="@(context.Request.Headers.GetValueOrDefault("Authorization","").Split(' ')[1].AsJwt()?.Subject)" />

  Box 2: Inbound A cache-lookup-value policy Example:

  parameter name

  Box 3: Outbound

  A cache-store-value policy.

  Example:

  Box 4: Outbound

  A find-and-replace policy to update the response body with the user profile information.

  Example:

  from='"$userprofile$"'

  to="@((string)context.Variables["userprofile"])" />

  Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-caching-policies

  https://docs.microsoft.com/en-us/azure/api-management/api-management-sample-cache-by-key

• Question 215:

  DRAG DROP

  You are developing a microservices solution. You plan to deploy the solution to a multinode Azure Kubernetes Service (AKS) cluster.

  You need to deploy a solution that includes the following features:

  1.

  reverse proxy capabilities

  2.

  configurable traffic routing

  3.

  TLS termination with a custom certificate

  Which component should you use? To answer, drag the appropriate components to the correct requirements. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Helm

  To create the ingress controller, use Helm to install nginx-ingress.

  Box 2: kubectl

  To find the cluster IP address of a Kubernetes pod, use the kubectl get pod command on your local machine, with the option -o wide .

  Box 3: Ingress Controller

  An ingress controller is a piece of software that provides reverse proxy, configurable traffic routing, and TLS termination for Kubernetes services. Kubernetes ingress resources are used to configure the ingress rules and routes for individual

  Kubernetes services.

  Incorrect Answers:

  Virtual Kubelet: Virtual Kubelet is an open-source Kubernetes kubelet implementation that masquerades as a kubelet. This allows Kubernetes nodes to be backed by Virtual Kubelet providers such as serverless cloud container platforms.

  CoreDNS: CoreDNS is a flexible, extensible DNS server that can serve as the Kubernetes cluster DNS. Like Kubernetes, the CoreDNS project is hosted by the CNCF.

  Reference:

  https://docs.microsoft.com/bs-cyrl-ba/azure/aks/ingress-basic

  https://www.digitalocean.com/community/tutorials/how-to-inspect-kubernetes-networking

• Question 216:

  DRAG DROP

  You are developing a new page for a website that uses Azure Cosmos DB for data storage. The feature uses documents that have the following format:

  

  You must display data for the new page in a specific order. You create the following query for the page:

  

  You need to configure a Cosmos DB policy to the support the query.

  How should you configure the policy? To answer, drag the appropriate JSON segments to the correct locations. Each JSON segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: compositeIndexes

  You can order by multiple properties. A query that orders by multiple properties requires a composite index.

  Box 2: descending

  Example: Composite index defined for (name ASC, age ASC):

  It is optional to specify the order. If not specified, the order is ascending.

  {

  "automatic":true,

  "indexingMode":"Consistent",

  "includedPaths":[

  {

  "path":"/*"

  }

  ],

  "excludedPaths":[],

  "compositeIndexes":[

  [

  {

  "path":"/name",

  },

  {

  "path":"/age",

  }

  ]

  ]

  }

• Question 217:

  DRAG DROP

  You are a developer for a software as a service (SaaS) company that uses an Azure Function to process orders. The Azure Function currently runs on an Azure Function app that is triggered by an Azure Storage queue.

  You are preparing to migrate the Azure Function to Kubernetes using Kubernetes-based Event Driven Autoscaling (KEDA).

  You need to configure Kubernetes Custom Resource Definitions (CRD) for the Azure Function.

  Which CRDs should you configure? To answer, drag the appropriate CRD types to the correct locations. Each CRD type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Deployment

  To deploy Azure Functions to Kubernetes use the func kubernetes deploy command has several attributes that directly control how our app scales, once it is deployed to Kubernetes.

  Box 2: ScaledObject

  With --polling-interval, we can control the interval used by KEDA to check Azure Service Bus Queue for messages.

  Example of ScaledObject with polling interval

  apiVersion: keda.k8s.io/v1alpha1

  kind: ScaledObject

  metadata:

  name: transformer-fn

  namespace: tt

  labels:

  deploymentName: transformer-fn spec: scaleTargetRef:

  deploymentName: transformer-fn

  pollingInterval: 5

  minReplicaCount: 0

  maxReplicaCount: 100

  Box 3: Secret

  Store connection strings in Kubernetes Secrets.

  Example: to create the Secret in our demo Namespace:

  # create the k8s demo namespace

  kubectl create namespace tt

  # grab connection string from Azure Service Bus

  KEDA_SCALER_CONNECTION_STRING=$(az servicebus queue authorization-rule keys list \ -g $RG_NAME \ --namespace-name $SBN_NAME \ --queue-name inbound \ -n keda-scaler \ --query "primaryConnectionString" \ -o tsv)

  # create the kubernetes secret

  kubectl create secret generic tt-keda-auth \ --from-literal KedaScaler=$KEDA_SCALER_CONNECTION_STRING \ --namespace tt

  Reference: https://www.thinktecture.com/en/kubernetes/serverless-workloads-with-keda/

• Question 218:

  DRAG DROP

  You are developing an application to use Azure Blob storage. You have configured Azure Blob storage to include change feeds.

  A copy of your storage account must be created in another region. Data must be copied from the current storage account to the new storage account directly between the storage servers.

  You need to create a copy of the storage account in another region and copy the data.

  In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  To move a storage account, create a copy of your storage account in another region. Then, move your data to that account by using AzCopy, or another tool of your choice. The steps are:

  1.

  Export a template.

  2.

  Modify the template by adding the target region and storage account name.

  3.

  Deploy the template to create the new storage account.

  4.

  Configure the new storage account.

  5.

  Move data to the new storage account.

  6.

  Delete the resources in the source region.

  Note: You must enable the change feed on your storage account to begin capturing and recording changes. You can enable and disable changes by using Azure Resource Manager templates on Portal or Powershell.

  Reference:

  https://docs.microsoft.com/en-us/azure/storage/common/storage-account-move

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-change-feed

• Question 219:

  DRAG DROP

  You are developing a software solution for an autonomous transportation system. The solution uses large data sets and Azure Batch processing to simulate navigation sets for entire fleets of vehicles.

  You need to create compute nodes for the solution on Azure Batch.

  What should you do?

  Put the actions in the correct order.

  Select and Place:

  

  Correct Answer:

  

  With the Azure CLI:

  Step 1: In the Azure CLI, run the command: az batch account create

  First we create a batch account.

  Step 2: In Azure CLI, run the command: az batch pool create

  Now that you have a Batch account, create a sample pool of Linux compute nodes using the az batch pool create command.

  Step 3: In Azure CLI, run the command: az batch job create

  Now that you have a pool, create a job to run on it. A Batch job is a logical group for one or more tasks. A job includes settings common to the tasks, such as priority and the pool to run tasks on. Create a Batch job by using the az batch job

  create command.

  Step 4: In Azure CLI, run the command: az batch task create

  Now use the az batch task create command to create some tasks to run in the job.

  References:

  https://docs.microsoft.com/en-us/azure/batch/quick-create-cli

• Question 220:

  DRAG DROP

  You are developing a software solution for an autonomous transportation system. The solution uses large data sets and Azure Batch processing to simulate navigation sets for entire fleets of vehicles.

  You need to create compute nodes for the solution on Azure Batch.

  What should you do?

  Put the actions in the correct order.

  Select and Place:

  

  Correct Answer: