Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 231:

  DRAG DROP

  You are creating a script that will run a large workload on an Azure Batch pool. Resources will be reused and do not need to be cleaned up after use.

  You have the following parameters:

  

  You need to write an Azure CLI script that will create the jobs, tasks, and the pool.

  In which order should you arrange the commands to develop the solution? To answer, move the appropriate commands from the list of command segments to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: az batch pool create

  # Create a new Linux pool with a virtual machine configuration.

  az batch pool create \

  --id mypool \

  --vm-size Standard_A1 \

  --target-dedicated 2 \

  --image canonical:ubuntuserver:16.04-LTS \

  --node-agent-sku-id "batch.node.ubuntu 16.04"

  Step 2: az batch job create

  # Create a new job to encapsulate the tasks that are added.

  az batch job create \

  --id myjob \

  --pool-id mypool

  Step 3: az batch task create

  # Add tasks to the job. Here the task is a basic shell command.

  az batch task create \

  --job-id myjob \

  --task-id task1 \

  --command-line "/bin/bash -c 'printenv AZ_BATCH_TASK_WORKING_DIR'"

  Step 4: for i in {1..$numberOfJobs} do

  References:

  https://docs.microsoft.com/bs-latn-ba/azure/batch/scripts/batch-cli-sample-run-job

• Question 232:

  DRAG DROP

  You are preparing to deploy a medical records application to an Azure virtual machine (VM). The application will be deployed by using a VHD produced by an on-premises build server.

  You need to ensure that both the application and related data are encrypted during and after deployment to Azure.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Encrypt the on-premises VHD by using BitLocker without a TPM. Upload the VM to Azure Storage

  Step 2: Run the Azure PowerShell command Set-AzureRMVMOSDisk

  To use an existing disk instead of creating a new disk you can use the Set-AzureRMVMOSDisk command.

  Example:

  $osDiskName = $vmname+'_osDisk'

  $osDiskCaching = 'ReadWrite'

  $osDiskVhdUri = "https://$stoname.blob.core.windows.net/vhds/"+$vmname+"_os.vhd"

  $vm = Set-AzureRmVMOSDisk -VM $vm -VhdUri $osDiskVhdUri -name $osDiskName -Create

  Step 3: Run the Azure PowerShell command Set-AzureRmVMDiskEncryptionExtension

  Use the Set-AzVMDiskEncryptionExtension cmdlet to enable encryption on a running IaaS virtual machine in Azure.

  Incorrect:

  Not TPM: BitLocker can work with or without a TPM. A TPM is a tamper resistant security chip on the system board that will hold the keys for encryption and check the integrity of the boot sequence and allows the most secure BitLocker

  implementation. A VM does not have a TPM.

  References:

  https://www.itprotoday.com/iaaspaas/use-existing-vhd-azurerm-vm

• Question 233:

  DRAG DROP

  You are developing a solution for a hospital to support the following use cases:

  1.

  The most recent patient status details must be retrieved even if multiple users in different locations have updated the patient record.

  2.

  Patient health monitoring data retrieved must be the current version or the prior version.

  3.

  After a patient is discharged and all charges have been assessed, the patient billing record contains the final charges.

  You provision a Cosmos D6 NoSQL database and set the default consistency level for the database account to Strong.

  You set the value for Indexing Mode to Consistent.

  You need to configure the consistency levels to support each scenario.

  You must minimize latency and any impact to the availability of the solution.

  You must override the default consistency level at the query level to meet the required consistency guarantees for the scenarios.

  Which consistency levels should you implement? To answer, drag the appropriate consistency levels to the correct requirements. Each consistency level may be used once, more than once, or not at all. You may need to drag the split bar

  between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Strong

  Strong: Strong consistency offers a linearizability guarantee. The reads are guaranteed to return the most recent committed version of an item. A client never sees an uncommitted or partial write. Users are always guaranteed to read the

  latest committed write.

  Box 2: Bounded staleness

  Bounded staleness: The reads are guaranteed to honor the consistent-prefix guarantee. The reads might lag behind writes by at most "K" versions (that is "updates") of an item or by "t" time interval. When you choose bounded staleness, the

  "staleness" can be configured in two ways:

  The number of versions (K) of the item

  The time interval (t) by which the reads might lag behind the writes

  Box 3: Eventual

  Eventual: There's no ordering guarantee for reads. In the absence of any further writes, the replicas eventually converge.

• Question 234:

  DRAG DROP

  You develop software solutions for a mobile delivery service. You are developing a mobile app that users can use to order from a restaurant in their area; The app uses the following workflow:

  1.

  A driver selects the restaurants for which they will deliver orders.

  2.

  Orders are sent to all available drivers in an area;

  3.

  Only orders for the selected restaurants will appear for the driver.

  4.

  The first driver to accept an order removes it from the list of available orders.

  You need to implement an Azure Service Bus solution.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Create a single Service Bus Namespace

  To begin using Service Bus messaging entities in Azure, you must first create a namespace with a name that is unique across Azure. A namespace provides a scoping container for addressing Service Bus resources within your application.

  Box 2: Create a Service Bus Topic for each restaurant for which a driver can receive messages.

  Create topics.

  Box 3: Create a Service Bus subscription for each restaurant for which a driver can receive orders.

  Topics can have multiple, independent subscriptions.

  References: https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-messaging- overview

• Question 235:

  DRAG DROP

  You have an application that provides weather forecasting data to external partners. You use Azure API Management to publish APIs.

  You must change the behavior of the API to meet the following requirements:

  1.

  Support alternative input parameters

  2.

  Remove formatting text from responses

  3.

  Provide additional context to back-end services

  Which types of policies should you implement? To answer, drag the policy types to the correct scenarios. Each policy type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

• Question 236:

  DRAG DROP

  You develop a gateway solution for a public facing news API.

  The news API back end is implemented as a RESTful sen/ice and hosted in an Azure App Service instance.

  You need to configure back-end authentication for the API Management service instance.

  Which target and gateway credential type should you use? To answer, drag the appropriate values to the correct parameters. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Azure Resource

  Box 2: Client cert

  API Management allows to secure access to the back-end service of an API using client certificates.

• Question 237:

  DRAG DROP

  You are developing a .NET Core model-view controller (MVC) application hosted on Azure for a health care system that allows providers access to their information. You develop the following code:

  

  You define a role named SysAdmin.

  You need to ensure that the application meets the following authorization requirements:

  Allow the ProviderAdmin and SysAdmin roles access to the Partner controller regardless of whether the user holds an editor claim of partner.

  Limit access to the Manage action of the controller to users with an editor claim of partner who are also members of the SysAdmin role.

  How should you complete the code? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to

  view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1:

  Allow the ProviderAdmin and SysAdmin roles access to the Partner controller regardless of whether the user holds an editor claim of partner.

  Box 2:

  Limit access to the Manage action of the controller to users with an editor claim of partner who are also members of the SysAdmin role.

• Question 238:

  DRAG DROP

  Contoso, Ltd. provides an API to customers by using Azure API Management (APIM). The API authorizes users with a JWT token.

  You must implement response caching for the APIM gateway. The caching mechanism must detect the user ID of the client that accesses data for a given location and cache the response for that user ID.

  You need to add the following policies to the policies file:

  1.

  a set-variable policy to store the detected user identity

  2.

  a cache-lookup-value policy

  3.

  a cache-store-value policy

  4.

  a find-and-replace policy to update the response body with the user profile information

  To which policy section should you add the policies? To answer, drag the appropriate sections to the correct policies. Each section may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll

  to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Inbound.

  A set-variable policy to store the detected user identity.

  Example:

  name="enduserid"

  value="@(context.Request.Headers.GetValueOrDefault("Authorization","").Split(' ')[1].AsJwt()?.Subject)" />

  Box 2: Inbound A cache-lookup-value policy Example:

  parameter name

  Box 3: Outbound

  A cache-store-value policy.

  Example:

  Box 4: Outbound

  A find-and-replace policy to update the response body with the user profile information.

  Example:

  from='"$userprofile$"'

  to="@((string)context.Variables["userprofile"])" />

  Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-caching-policies https://docs.microsoft.com/en-us/azure/api-management/api-management-sample-cache-by-key

• Question 239:

  DRAG DROP

  You are implementing an order processing system. A point of sale application publishes orders to topics in an Azure Service Bus queue. The Label property for the topic includes the following data:

  

  The system has the following requirements for subscriptions:

  

  You need to implement filtering and maximize throughput while evaluating filters.

  Which filter types should you implement? To answer, drag the appropriate filter types to the correct subscriptions. Each filter type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to

  view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  FutureOrders: SQLFilter HighPriortyOrders: CorrelationFilter CorrelationID only InternationalOrders: SQLFilter Country NOT USA requires an SQL Filter HighQuantityOrders: SQLFilter Need to use relational operators so an SQL Filter is needed. AllOrders: No Filter SQL Filter: SQL Filters - A SqlFilter holds a SQL-like conditional expression that is evaluated in the broker against the arriving messages' user-defined properties and system properties. All system properties must be prefixed with sys. in the conditional expression. The SQL-language subset for filter conditions tests for the existence of properties (EXISTS), as well as for null-values (IS NULL), logical NOT/AND/OR, relational operators, simple numeric arithmetic, and simple text pattern matching with LIKE. Correlation Filters - A CorrelationFilter holds a set of conditions that are matched against one or more of an arriving message's user and system properties. A common use is to match against the CorrelationId property, but the application can also choose to match against ContentType, Label, MessageId, ReplyTo, ReplyToSessionId, SessionId, To, and any user-defined properties. A match exists when an arriving message's value for a property is equal to the value specified in the correlation filter. For string expressions, the comparison is case-sensitive. When specifying multiple match properties, the filter combines them as a logical AND condition, meaning for the filter to match, all conditions must match. Boolean filters - The TrueFilter and FalseFilter either cause all arriving messages (true) or none of the arriving messages (false) to be selected for the subscription. References: https://docs.microsoft.com/en-us/azure/service-bus-messaging/topic-filters

• Question 240:

  DRAG DROP

  You are developing Azure WebJobs.

  You need to recommend a WebJob type for each scenario.

  Which WebJob type should you recommend? To answer, drag the appropriate WebJob types to the correct scenarios. Each WebJob type may be used once more than once, or not at all. You may need to drag the split bar between panes or scroll to view content

  NOTE: Each correct selection s worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Continuous

  Continuous runs on all instances that the web app runs on. You can optionally restrict the WebJob to a single instance.

  Box 2: Triggered

  Triggered runs on a single instance that Azure selects for load balancing.

  Box 3: Continuous

  Continuous supports remote debugging.

  Note:

  The following table describes the differences between continuous and triggered WebJobs.

  

  References: https://docs.microsoft.com/en-us/azure/app-service/web-sites-create-web-jobs