Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 251:

  You are building a loyalty program for a major snack producer. When customers buy a snack at any of 100 participating retailers the event is recorded in Azure Event Hub. Each retailer is given a unique identifier that is used as the primary

  identifier for the loyalty program.

  Retailers must be able to be added or removed at any time. Retailers must only be able to record sales for themselves.

  You need to ensure that retailers can record sales.

  What should you do?

  A. Use publisher policies for retailers.

  B. Create a partition for each retailer.

  C. Define a namespace for each retailer.

  Correct Answer: A

  Event Hubs enables granular control over event publishers through publisher policies. Publisher policies are run-time features designed to facilitate large numbers of independent event publishers. With publisher policies, each publisher uses

  its own unique identifier when publishing events to an event hub.

  Incorrect:

  Not C: An Event Hubs namespace is a management container for event hubs (or topics, in Kafka parlance). It provides DNS-integrated network endpoints and a range of access control and network integration management features such as

  IP filtering, virtual network service endpoint, and Private Link.

  Reference: https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-features

• Question 252:

  You are developing an online game that includes a feature that allows players to interact with other players on the same team within a certain distance. The calculation to determine the players in range occurs when players move and are

  cached in an Azure Cache for Redis instance.

  The system should prioritize players based on how recently they have moved and should not prioritize players who have logged out of the game.

  You need to select an eviction policy.

  Which eviction policy should you use?

  A. allkeys-Iru

  B. volatile-Iru

  C. allkeys-lfu

  D. volatile-ttl

  Correct Answer: A

  allkeys-lru: Keeps most recently used keys; removes least recently used (LRU) keys

  In general, as a rule of thumb:

  Use the allkeys-lru policy when you expect a power-law distribution in the popularity of your requests. That is, you expect a subset of elements will be accessed far more often than the rest. This is a good pick if you are unsure.

  Incorrect:

  volatile-lru: Removes least recently used keys with the expire field set to true.

  volatile-lfu: Removes least frequently used keys with the expire field set to true.

  volatile-ttl: Removes keys with expire field set to true and the shortest remaining time-to-live (TTL) value.

  Use the volatile-ttl if you want to be able to provide hints to Redis about what are good candidate for expiration by using different TTL values when you create your cache objects.

  Reference: https://redis.io/docs/manual/eviction/

• Question 253:

  A company is developing a solution that allows smart refrigerators to send temperature information to a central location. You have an existing Service Bus.

  The solution must receive and store messages until they can be processed. You create an Azure Service Bus instance by providing a name, pricing tier, subscription, resource group, and location.

  You need to complete the configuration.

  Which Azure CLI or PowerShell command should you run?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

  A service bus instance has already been created (Step 2 below). Next is step 3, Create a Service Bus queue.

  Note:

  Steps:

  Step 1: # Create a resource group

  resourceGroupName="myResourceGroup"

  az group create --name $resourceGroupName --location eastus

  Step 2: # Create a Service Bus messaging namespace with a unique name

  namespaceName=myNameSpace$RANDOM

  az servicebus namespace create --resource-group $resourceGroupName --name $namespaceName --location eastus

  Step 3: # Create a Service Bus queue

  az servicebus queue create --resource-group $resourceGroupName --namespace-name $namespaceName --name BasicQueue

  Step 4: # Get the connection string for the namespace

  connectionString=$(az servicebus namespace authorization-rule keys list --resource-group $resourceGroupName --namespace-name $namespaceName --name RootManageSharedAccessKey --query primaryConnectionString --output tsv)

  Reference:

  https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli

• Question 254:

  A company is developing a solution that allows smart refrigerators to send temperature information to a central location. You have an existing Service Bus.

  The solution must receive and store message until they can be processed. You create an Azure Service Bus Instance by providing a name, pricing tier, subscription, resource group, and location.

  You need to complete the configuration.

  Which Azure CLI or PowerShell command should you run?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  A service bus instance has already been created (Step 2 below). Next is step 3, Create a Service Bus queue.

  Note:

  Steps:

  Step 1: # Create a resource group

  resourceGroupName="myResourceGroup"

  az group create --name $resourceGroupName --location eastus

  Step 2: # Create a Service Bus messaging namespace with a unique name

  namespaceName=myNameSpace$RANDOM

  az servicebus namespace create --resource-group $resourceGroupName --name $namespaceName --location eastus

  Step 3: # Create a Service Bus queue

  az servicebus queue create --resource-group $resourceGroupName --namespace-name $namespaceName --name BasicQueue

  Step 4: # Get the connection string for the namespace

  connectionString=$(az servicebus namespace authorization-rule keys list --resource-group $resourceGroupName --namespace-name $namespaceName --name RootManageSharedAccessKey --query primaryConnectionString --output tsv)

  Reference:

  https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli

• Question 255:

  A company is developing a solution that allows smart refrigerators to send temperature information to a central location. You have an existing Service Bus.

  The solution must receive and store messages until they can be processed. You create an Azure Service Bus instance by providing a name, pricing tier, subscription, resource group, and location.

  You need to complete the configuration.

  Which Azure CLI or PowerShell command should you run?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  A service bus instance has already been created (Step 2 below). Next is step 3, Create a Service Bus queue.

  Note:

  Steps:

  Step 1: # Create a resource group

  resourceGroupName="myResourceGroup"

  az group create --name $resourceGroupName --location eastus

  Step 2: # Create a Service Bus messaging namespace with a unique name

  namespaceName=myNameSpace$RANDOM

  az servicebus namespace create --resource-group $resourceGroupName --name $namespaceName --location eastus

  Step 3: # Create a Service Bus queue

  az servicebus queue create --resource-group $resourceGroupName --namespace-name $namespaceName --name BasicQueue

  Step 4: # Get the connection string for the namespace

  connectionString=$(az servicebus namespace authorization-rule keys list --resource-group $resourceGroupName --namespace-name $namespaceName --name RootManageSharedAccessKey --query primaryConnectionString --output tsv)

  Reference:

  https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli

• Question 256:

  A company is developing a solution that allows smart refrigerators to send temperature information to a central location. You have an existing Service Bus.

  The solution must receive and store messages until they can be processed. You create an Azure Service Bus instance by providing a name, pricing tier, subscription, resource group, and location.

  You need to complete the configuration.

  Which Azure CLI or PowerShell command should you run?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  A service bus instance has already been created (Step 2 below). Next is step 3, Create a Service Bus queue.

  Note:

  Steps:

  Step 1: # Create a resource group

  resourceGroupName="myResourceGroup"

  az group create --name $resourceGroupName --location eastus

  Step 2: # Create a Service Bus messaging namespace with a unique name

  namespaceName=myNameSpace$RANDOM

  az servicebus namespace create --resource-group $resourceGroupName --name $namespaceName --location eastus

  Step 3: # Create a Service Bus queue

  az servicebus queue create --resource-group $resourceGroupName --namespace-name $namespaceName --name BasicQueue

  Step 4: # Get the connection string for the namespace

  connectionString=$(az servicebus namespace authorization-rule keys list --resource-group $resourceGroupName --namespace-name $namespaceName --name RootManageSharedAccessKey --query primaryConnectionString --output tsv)

  References:

  https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli

• Question 257:

  A company is developing a solution that allows smart refrigerators to send temperature information to a central location. You have an existing Service Bus.

  The solution must receive and store messages until they can be processed. You create an Azure Service Bus instance by providing a name, pricing tier, subscription, resource group, and location.

  You need to complete the configuration.

  Which Azure CLI or PowerShell command should you run?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

  A service bus instance has already been created (Step 2 below). Next is step 3, Create a Service Bus queue.

  Note:

  Steps:

  Step 1: # Create a resource group

  resourceGroupName="myResourceGroup"

  az group create --name $resourceGroupName --location eastus

  Step 2: # Create a Service Bus messaging namespace with a unique name

  namespaceName=myNameSpace$RANDOM

  az servicebus namespace create --resource-group $resourceGroupName --name $namespaceName --location eastus

  Step 3: # Create a Service Bus queue

  az servicebus queue create --resource-group $resourceGroupName --namespace-name $namespaceName --name BasicQueue

  Step 4: # Get the connection string for the namespace

  connectionString=$(az servicebus namespace authorization-rule keys list --resource-group $resourceGroupName --namespace-name $namespaceName --name RootManageSharedAccessKey --query primaryConnectionString --output tsv)

  References:

  https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli

• Question 258:

  You are developing a Java application to be deployed in Azure. The application stores sensitive data in Azure Cosmos DB. You need to configure Always Encrypted to encrypt the sensitive data inside the application. What should you do first?

  A. Create a customer-managed key (CMK) and store the key in a new Azure Key Vault instance.

  B. Create an Azure AD managed identity and assign the identity to a new Azure Key Vault instance.

  C. Create a data encryption key (DEK) by using the Azure Cosmos DB SDK and store the key in Azure Cosmos DB.

  D. Create a new container to include an encryption policy with the JSON properties to be encrypted.

  Correct Answer: A

  Encryption keys Customer-managed keys Before DEKs get stored in Azure Cosmos DB, they are wrapped by a customer-managed key (CMK). By controlling the wrapping and unwrapping of DEKs, CMKs effectively control the access to the data that's encrypted with their corresponding DEKs. CMK storage is designed as an extensible, with a default implementation that expects them to be stored in Azure Key Vault.

  Incorrect:

  * Create a data encryption key (DEK) by using the Azure Cosmos DB SDK and store the key in Azure Cosmos DB.

  It must be wrapped by a CMK before it is stored.

  Data encryption keys

  When using Always Encrypted, data is encrypted with data encryption keys (DEK) that should be created ahead. These DEKs are stored in the Azure Cosmos DB service and are defined at the database level, so a DEK can be shared across

  multiple containers. The creation of the DEKs is done client-side by using the Azure Cosmos DB SDK.

  You can:

  Create one DEK per property to encrypt, or Use the same DEK to encrypt multiple properties.

  Reference: https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-always-encrypted

• Question 259:

  A company is developing a solution that allows smart refrigerators to send temperature information to a central location.

  The solution must receive and store messages until they can be processed. You create an Azure Service Bus instance by providing a name, pricing tier, subscription, resource group, and location.

  You need to complete the configuration.

  Which Azure CLI or PowerShell command should you run?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

  # Create a Service Bus messaging namespace with a unique name. Example:

  namespaceName=myNameSpace$RANDOM az servicebus namespace create --resource-group $resourceGroupName --name $namespaceName --location eastus

  References: https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli

• Question 260:

  You develop an ASP.NET Core app that uses Azure App Configuration. You also create an App Configuration containing 100 settings. The app must meet the following requirements:

  1.

  Ensure the consistency of all configuration data when changes to individual settings occur.

  2.

  Handle configuration data changes dynamically without causing the application to restart.

  3.

  Reduce the overall number of requests made to App Configuration APIs.

  You must implement dynamic configuration updates in the app.

  What are two ways to achieve this goal? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Increase the App Configuration cache expiration from the default value.

  B. Create and implement environment variables for each App Configuration store setting.

  C. Decrease the App Configuration cache expiration from the default value.

  D. Register all keys in the App Configuration store. Set the refreshAII parameter of the Register method to false.

  E. Create and register a sentinel key in the App Configuration store. Set the refreshAII parameter of the Register method to true.

  F. Create and configure Azure Key Vault. Implement the Azure Key Vault configuration provider.

  Correct Answer: AE

  Quotes from the reference below:

  "A sentinel key is a key that you update after you complete the change of all other keys. Your app monitors the sentinel key. When a change is detected, your app refreshes all configuration values. This approach helps to ensure the

  consistency of configuration in your app and reduces the overall number of requests made to your App Configuration store, compared to monitoring all keys for changes."

  "You can add a call to the refreshOptions.SetCacheExpiration method to specify the minimum time between configuration refreshes. In this example, you use the default value of 30 seconds. Adjust to a higher value if you need to reduce the

  number of requests made to your App Configuration store."

  Reference: https://learn.microsoft.com/en-us/azure/azure-app-configuration/enable-dynamic-configuration-aspnet-core?tabs=core6x