Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 301:

  You are developing a complex workflow by using Azure Durable Functions.

  During testing you observe that the results of the workflow differ based on how many instances of the Azure Function are running.

  You need to resolve the issue.

  What should you do?

  A. Ensure that all Orchestrator code is deterministic.

  B. Read all state data from the durable function context

  C. Configure the Azure Our able f unction to run on an App Service Plan with one instance.

  D. Implement the monitor pattern within the workflow.

  Correct Answer: A

• Question 302:

  You have an Azure Cosmos 06 instance that uses the Strong consistency level and 10,000 Request Units (RUs) per container. Geo-replication is enabled.

  The instance stores restaurant information including location, menu items, and start. You currently store information for 1,000 restaurant locations, 500 menu items, and 10,000 staff members. You select the location id as the partition key.

  How many logical partitions will be created for the container?

  A. 500

  B. 1,100

  C. 10.000

  D. 10,000,000

  Correct Answer: C

• Question 303:

  You are developing an Azure Function App that generates end of day reports (or retail stores. All stores dose at 11 PM each day. Reports must be run one hour after dosing. You configure the function to use a Timer trigger that runs at midnight Customers in the Western United States Pacific Time zone (UTC - 8) report that the Azure Function runs before the stores dose. You need to ensure that the Azure Function runs at midnight in the Pacific Time zone.

  What should you do?

  A. Configure the Azure Function to run in the West US region.

  B. Add an app setting named WEBSITE_TIME_ZONE that uses the value Pacific Standard Time

  C. Change the Timer trigger to run at 7 AM

  D. Update the Azure Function to a Premium plan.

  Correct Answer: A

• Question 304:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Margie's Travel is an international travel and bookings management service. The company is expanding into restaurant bookings. You are tasked with implementing Azure Search tor the restaurants listed in their solution.

  You create the index in Azure Search.

  You need to import the restaurant data into the Azure Search service by using the Azure Search NET SDK.

  Solution:

  1.

  Create a SearchServiceClient object to connect to the search index.

  2.

  Create a DataContainer that contains the documents which must be added.

  3.

  Create a DataSource instance and set its Container property to the DataContainer.

  4.

  Set the DataSource property of the SearchServiceCIient Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Use the following method:

  1.Create a SearchIndexClient object to connect to the search index

  2.Create an IndexBatch that contains the documents which must be added.

  3.Call the Documents.Index method of the SearchIndexClient and pass the IndexBatch.

  References:

  https://docs.microsoft.com/en-us/azure/search/search-howto-dotnet-sdk

• Question 305:

  An organization hosts web apps in Azure. The organization uses Azure Monitor

  You discover that configuration changes were made to some of the web apps.

  You need to identify the configuration changes.

  Which Azure Monitor log should you review?

  A. AppServiceEnvironmentPlatformLogs

  B. AppServiceApplogs

  C. AppServiceAuditLogs

  D. AppServiceConsoteLogs

  Correct Answer: A

  The log type AppServiceEnvironmentPlatformLogs handles the App Service Environment: scaling, configuration changes, and status logs.

  Incorrect:

  AppServiceAppLogs contains logs generated through your application.

  AppServiceAuditLogs logs generated when publishing users successfully log on via one of the App Service publishing protocols.

  Reference:

  https://docs.microsoft.com/en-us/azure/app-service/troubleshoot-diagnostic-logs

• Question 306:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.

  You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level.

  You need to configure authorization.

  Solution: Configure and use Integrated Windows Authentication in the website. In the website, query Microsoft Graph API to load the group to which the user is a member.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Microsoft Graph is a RESTful web API that enables you to access Microsoft Cloud service resources.

  Instead in the Azure AD application's manifest, set value of the groupMembershipClaims option to All. In the website, use the value of the groups claim from the JWT for the user to determine permissions.

  Reference:

  https://blogs.msdn.microsoft.com/waws/2017/03/13/azure-app-service-authentication-aad-groups/

• Question 307:

  You develop a solution that uses Azure Virtual Machines (VMs).

  The VMs contain code that must access resources in an Azure resource group. You grant the VM access to the resource group in Resource Manager.

  You need to obtain an access token that uses the VMs system-assigned managed identity.

  Which two actions should you perform? Each correct answer presents part of the solution.

  A. Use PowerShell on a remote machine to make a request to the local managed identity for Azure resources endpoint.

  B. Use PowerShell on the VM to make a request to the local managed identity for Azure resources endpoint.

  C. From the code on the VM. call Azure Resource Manager using an access token.

  D. From the code on the VM. call Azure Resource Manager using a SAS token.

  E. From the code on the VM. generate a user delegation SAS token.

  Correct Answer: BC

• Question 308:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some Microsoft AZ-204 question sets might have more than one

  correct solution, while others might not have a correct solution.

  After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing a solution that will be deployed to an Azure Kubernetes Service (AKS) cluster. The solution will include a custom VNet, Azure Container Registry images, and an Azure Storage account.

  The solution must allow dynamic creation and management of all Azure resources within the AKS cluster.

  You need to configure an AKS cluster for use with the Azure APIs.

  Solution: Create an AKS cluster that supports network policy. Create and apply a network to allow traffic only from within a defined namespace.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  When you run modern, microservices-based applications in Kubernetes, you often want to control which components can communicate with each other. The principle of least privilege should be applied to how traffic can flow between pods in an Azure Kubernetes Service (AKS) cluster. Let's say you likely want to block traffic directly to back-end applications. The Network Policy feature in Kubernetes lets you define rules for ingress and egress traffic between pods in a cluster.

  References: https://docs.microsoft.com/en-us/azure/aks/use-network-policies

• Question 309:

  You develop and deploy a web app to Azure App Service. The Azure App Service uses a Basic plan in a single region.

  You need to capture the telemetry.

  Which three actions should you perform? Each correct answer presents part of the solution

  NOTE; Each correct selection is worth one pewit

  A. Upgrade the Azure App Service plan to Premium.

  B. Enable remote debugging.

  C. Enable Profiler

  D. Restart an apps in the App Service plan

  E. Enable Snapshot debugger

  F. Enable Application Insights site extensions.

  G. Enable the Always On setting for the app service.

  Correct Answer: CDF

• Question 310:

  You ate developing a web application that uses the Microsoft identity platform to authenticate users and resources. The web application calls several REST APIs.

  The APIs require an access token from the Microsoft identity platform.

  You need to request a token.

  Which three properties should you use? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Application secret

  B. Redirect URI/URL

  C. Application name

  D. Supported account type

  E. Application ID

  Correct Answer: ABE