Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 321:

  You are creating an app that will use CosmosDB for data storage. The app will process batches of relational data.

  You need to select an API for the app.

  Which API should you use?

  A. MongoDB API

  B. Table API

  C. SQL API

  D. Cassandra API

  Correct Answer: C

  For relational data you will need the SQL API Incorrect Answer:

  A: The MongoDB API is not used for relational data.

  B: The Table API only supports data in the key/value format

  D: The Cassandra API only supports OLTP (Online Transactional Processing) and not batch processing.

  Reference: https://docs.microsoft.com/en-us/azure/cosmos-db/choose-api

• Question 322:

  You develop and deploy an Azure Logic app that calls an Azure Function app. The Azure Function app includes an OpenAPI (Swagger) definition and uses an Azure Blob storage account. All resources are secured by using Azure Active

  Directory (Azure AD).

  The Azure Logic app must securely access the Azure Blob storage account. Azure AD resources must remain if the Azure Logic app is deleted.

  You need to secure the Azure Logic app.

  What should you do?

  A. Create a user-assigned managed identity and assign role-based access controls.

  B. Create an Azure AD custom role and assign the role to the Azure Blob storage account.

  C. Create an Azure Key Vault and issue a client certificate.

  D. Create a system-assigned managed identity and issue a client certificate.

  E. Create an Azure AD custom role and assign role-based access controls.

  Correct Answer: A

  To give a managed identity access to an Azure resource, you need to add a role to the target resource for that identity.

  Note: To easily authenticate access to other resources that are protected by Azure Active Directory (Azure AD) without having to sign in and provide credentials or secrets, your logic app can use a managed identity (formerly known as Managed Service Identity or MSI). Azure manages this identity for you and helps secure your credentials because you don't have to provide or rotate secrets.

  If you set up your logic app to use the system-assigned identity or a manually created, user-assigned identity, the function in your logic app can also use that same identity for authentication.

  Reference: https://docs.microsoft.com/en-us/azure/logic-apps/create-managed-service-identity https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-mutual-certificates-for-clients

• Question 323:

  You are developing a solution that will use a multi-partitioned Azure Cosmos DB database. You plan to use the latest Azure Cosmos DB SDK for development. The solution must meet the following requirements:

  1.

  Send insert and update operations to an Azure Blob storage account.

  2.

  Process changes to all partitions immediately.

  3.

  Allow parallelization of change processing.

  You need to process the Azure Cosmos DB operations.

  What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Create an Azure App Service API and implement the change feed estimator of the SDK. Scale the API by using multiple Azure App Service instances.

  B. Create a background job in an Azure Kubernetes Service and implement the change feed feature of the SDK.

  C. Create an Azure Function to use a trigger for Azure Cosmos DB. Configure the trigger to connect to the container.

  D. Create an Azure Function that uses a FeedIterator object that processes the change feed by using the pull model on the container. Use a FeedRange objext to parallelize the processing of the change feed across multiple functions.

  Correct Answer: CD

  Azure Functions is the simplest option if you are just getting started using the change feed. Due to its simplicity, it is also the recommended option for most change feed use cases. When you create an Azure Functions trigger for Azure Cosmos DB, you select the container to connect, and the Azure Function gets triggered whenever there is a change in the container. Because Azure Functions uses the change feed processor behind the scenes, it automatically parallelizes change processing across your container's partitions.

  Note: You can work with change feed using the following options:

  1.

  Using change feed with Azure Functions

  2.

  Using change feed with change feed processor

  Reference: https://docs.microsoft.com/en-us/azure/cosmos-db/read-change-feed https://docs.microsoft.com/en-us/azure/cosmos-db/change-feed-pull-model https://docs.microsoft.com/en-us/azure/cosmos-db/read-change-feed#azure-functions https://docs.microsoft.com/en-us/azure/cosmos-db/change-feed-pull-model#using-feedrange-for-parallelization

• Question 324:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.

  When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.

  You need to design the process that starts the photo processing.

  Solution: Use the Azure Blob Storage change feed to trigger photo processing.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  The change feed is a log of changes that are organized into hourly segments but appended to and updated every few minutes. These segments are created only when there are blob change events that occur in that hour.

  Instead catch the triggered event, so move the photo processing to an Azure Function triggered from the blob upload.

  Reference: https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-change-feed https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-event-overview

• Question 325:

  You are developing a .NET Core MVC application that allows customers to research independent holiday accommodation providers.

  You want to implement Azure Search to allow the application to search the index by using various criteria to locate documents related to accommodation venues.

  You want the application to list holiday accommodation venues that fall within a specific price range and are within a specified distance to an airport.

  What should you do?

  A. Configure the SearchMode property of the SearchParameters class.

  B. Configure the QueryType property of the SearchParameters class.

  C. Configure the Facets property of the SearchParameters class.

  D. Configure the Filter property of the SearchParameters class.

  Correct Answer: D

  The Filter property gets or sets the OData $filter expression to apply to the search query.

  Reference: https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.search.models.searchparameters https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.search.models.searchparameters.querytype

• Question 326:

  You are a developer at your company.

  You need to edit the workflows for an existing Logic App.

  What should you use?

  A. the Enterprise Integration Pack (EIP)

  B. the Logic App Code View

  C. the API Connections

  D. the Logic Apps Designer

  Correct Answer: A

  For business-to-business (B2B) solutions and seamless communication between organizations, you can build automated scalable enterprise integration workflows by using the Enterprise Integration Pack (EIP) with Azure Logic Apps.

  Reference: https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-enterprise-integration-overview https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-author-definitions

• Question 327:

  You are developing an application that applies a set of governance policies for internal and external services, as well as for applications.

  You develop a stateful ASP.NET Core 2.1 web application named PolicyApp and deploy it to an Azure App Service Web App. The PolicyApp reacts to events from Azure Event Grid and performs policy actions based on those events.

  You have the following requirements:

  Authentication events must be used to monitor users when they sign in and sign out. All authentication events must be processed by PolicyApp.

  Sign outs must be processed as fast as possible.

  What should you do?

  A. Create a new Azure Event Grid subscription for all authentication events. Use the subscription to process sign-out events.

  B. Create a separate Azure Event Grid handler for sign-in and sign-out events.

  C. Create separate Azure Event Grid topics and subscriptions for sign-in and sign-out events.

  D. Add a subject prefix to sign-out events. Create an Azure Event Grid subscription. Configure the subscription to use the subjectBeginsWith filter.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/azure/event-grid/subscription-creation-schema

• Question 328:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You are developing a solution for a public facing API.

  The API back end is hosted in an Azure App Service instance. You have implemented a RESTful service for the API back end.

  You must configure back-end authentication for the API Management service instance.

  Solution: You configure Client cert gateway credentials for the HTTP(s) endpoint. Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  The API back end is hosted in an Azure App Service instance. It is an Azure resource and not an HTTP(s) endpoint.

  Reference:

  https://docs.microsoft.com/en-us/rest/api/apimanagement/apimanagementrest/azure-api-management- rest-api-backend-entity

• Question 329:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You are developing a solution for a public facing API.

  The API back end is hosted in an Azure App Service instance. You have implemented a RESTful service for the API back end.

  You must configure back-end authentication for the API Management service instance.

  Solution: You configure Basic gateway credentials for the HTTP(s) endpoint.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  API Management allows to secure access to the back-end service of an API using client certificates. Furthermore, the API back end is hosted in an Azure App Service instance. It is an Azure resource and not an HTTP(s) endpoint.

  Reference:

  https://docs.microsoft.com/en-us/rest/api/apimanagement/apimanagementrest/azure-api-management- rest-api-backend-entity

• Question 330:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You are developing a solution for a public facing API.

  The API back end is hosted in an Azure App Service instance. You have implemented a RESTful service for the API back end.

  You must configure back-end authentication for the API Management service instance.

  Solution: You configure Client cert gateway credentials for the Azure resource.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  API Management allows to secure access to the back-end service of an API using client certificates.

  Reference:

  https://docs.microsoft.com/en-us/rest/api/apimanagement/apimanagementrest/azure-api-management- rest-api-backend-entity