Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 331:

  You are developing a .NET Core MVC application that allows customers to research independent holiday accommodation providers.

  You want to implement Azure Search to allow the application to search the index by using various criteria to locate documents related to accommodation.

  You want the application to allow customers to search the index by using regular expressions.

  What should you do?

  A. Configure the SearchMode property of the SearchParameters class.

  B. Configure the QueryType property of the SearchParameters class.

  C. Configure the Facets property of the SearchParameters class.

  D. Configure the Filter property of the SearchParameters class.

  Correct Answer: B

  The SearchParameters.QueryType Property gets or sets a value that specifies the syntax of the search query. The default is 'simple'. Use 'full' if your query uses the Lucene query syntax.

  You can write queries against Azure Search based on the rich Lucene Query Parser syntax for specialized query forms: wildcard, fuzzy search, proximity search, regular expressions are a few examples.

  Reference:

  https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.search.models.searchparameters

  https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.search.models.searchparameters.querytype

• Question 332:

  You are a developer at your company.

  You need to update the definitions for an existing Logic App.

  What should you use?

  A. the Enterprise Integration Pack (EIP)

  B. the Logic App Code View

  C. the API Connections

  D. the Logic Apps Designer

  Correct Answer: B

  Edit JSON - Azure portal

  Sign in to the Azure portal.

  From the left menu, choose All services. In the search box, find "logic apps", and then from the results, select your logic app.

  On your logic app's menu, under Development Tools, select Logic App Code View. The Code View editor opens and shows your logic app definition in JSON format.

  Reference:

  https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-enterprise-integration-overview

  https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-author-definitions

• Question 333:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You are developing a solution for a public facing API.

  The API back end is hosted in an Azure App Service instance. You have implemented a RESTful service for the API back end.

  You must configure back-end authentication for the API Management service instance.

  Solution: You configure Basic gateway credentials for the Azure resource.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  API Management allows to secure access to the back-end service of an API using client certificates.

  Reference:

  https://docs.microsoft.com/en-us/rest/api/apimanagement/apimanagementrest/azure-api-management- rest-api-backend-entity

• Question 334:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.

  You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.

  Solution: You include the use of Azure Redis Cache in your design.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 335:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.

  You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.

  Solution: You include the use of an Azure Content Delivery Network (CDN) in your design.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-in/azure/cdn/

• Question 336:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.

  You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.

  Solution: You include the use of a Storage Area Network (SAN) in your design.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 337:

  You develop a Web App on a tier D1 app service plan.

  You notice that page load times increase during periods of peak traffic.

  You want to implement automatic scaling when CPU load is above 80 percent. Your solution must minimize costs.

  What should you do first?

  A. Enable autoscaling on the Web App.

  B. Switch to the Premium App Service tier plan.

  C. Switch to the Standard App Service tier plan.

  D. Switch to the Azure App Services consumption plan.

  Correct Answer: C

  Configure the web app to the Standard App Service Tier. The Standard tier supports auto-scaling, and we should minimize the cost. We can then enable autoscaling on the web app, add a scale rule and add a Scale condition.

  Reference: https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-autoscale-get-started https://azure.microsoft.com/en-us/pricing/details/app-service/plans/

• Question 338:

  Your company's Azure subscription includes an Azure Log Analytics workspace.

  Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server 2016, and is linked to the Azure Log Analytics workspace. The Azure Log Analytics workspace is set up to gather performance

  counters associated with security from these linked servers.

  You must configure alerts based on the information gathered by the Azure Log Analytics workspace.

  You have to make sure that alert rules allow for dimensions, and that alert creation time should be kept to a minimum. Furthermore, a single alert notification must be created when the alert is created and when the alert is resolved.

  You need to make use of the necessary signal type when creating the alert rules.

  Which of the following is the option you should use?

  A. The Activity log signal type.

  B. The Application Log signal type.

  C. The Metric signal type.

  D. The Audit Log signal type.

  Correct Answer: C

  Metric alerts in Azure Monitor provide a way to get notified when one of your metrics cross a threshold. Metric alerts work on a range of multi-dimensional platform metrics, custom metrics, Application Insights standard and custom metrics.

  Note: Signals are emitted by the target resource and can be of several types. Metric, Activity log, Application Insights, and Log.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric

• Question 339:

  You are developing an application to transfer data between on-premises file servers and Azure Blob storage. The application stores keys, secrets, and certificates in Azure Key Vault and makes use of the Azure Key Vault APIs.

  You want to configure the application to allow recovery of an accidental deletion of the key vault or key vault objects for 90 days after deletion.

  What should you do?

  A. Run the Add-AzKeyVaultKey cmdlet.

  B. Run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI.

  C. Implement virtual network service endpoints for Azure Key Vault.

  D. Run the az keyvault update --enable-soft-delete false CLI.

  Correct Answer: B

  When soft-delete is enabled, resources marked as deleted resources are retained for a specified period (90 days by default). The service further provides a mechanism for recovering the deleted object, essentially undoing the deletion.

  Purge protection is an optional Key Vault behavior and is not enabled by default. Purge protection can only be enabled once soft-delete is enabled.

  When purge protection is on, a vault or an object in the deleted state cannot be purged until the retention period has passed. Soft-deleted vaults and objects can still be recovered, ensuring that the retention policy will be followed.

  The default retention period is 90 days, but it is possible to set the retention policy interval to a value from 7 to 90 days through the Azure portal. Once the retention policy interval is set and saved it cannot be changed for that vault.

  Reference:

  https://docs.microsoft.com/en-us/azure/key-vault/general/overview-soft-delete

• Question 340:

  You manage an Azure SQL database that allows for Azure AD authentication.

  You need to make sure that database developers can connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for

  authentication. Your strategy should allow for authentication prompts to be kept to a minimum.

  Which of the following should you implement?

  A. Azure AD token.

  B. Azure Multi-Factor authentication.

  C. Active Directory integrated authentication.

  D. OATH software tokens.

  Correct Answer: C

  Azure AD can be the initial Azure AD managed domain. Azure AD can also be an on-premises Active Directory Domain Services that is federated with the Azure AD.

  Using an Azure AD identity to connect using SSMS or SSDT

  The following procedures show you how to connect to a SQL database with an Azure AD identity using SQL Server Management Studio or SQL Server Database Tools.

  Active Directory integrated authentication

  Use this method if you are logged in to Windows using your Azure Active Directory credentials from a federated domain.

  1.

  Start Management Studio or Data Tools and in the Connect to Server (or Connect to Database Engine) dialog box, in the Authentication box, select Active Directory - Integrated. No password is needed or can be entered because your existing credentials will be presented for the connection.

  2.

  Select the Options button, and on the Connection Properties page, in the Connect to database box, type the name of the user database you want to connect to. (The AD domain name or tenant ID" option is only supported for Universal with

  MFA connection options, otherwise it is greyed out.)

  

  Reference:

  https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/sql-database/sql-database-aad- authentication-configure.md