Microsoft Microsoft Certifications AZ-204 Questions & Answers

• Question 421:

  You develop Azure solutions.

  You must connect to a No-SQL globally-distributed database by using the .NET API.

  You need to create an object to configure and execute requests in the database.

  Which code segment should you use?

  A. new Container(EndpointUri, PrimaryKey);

  B. new Database(Endpoint, PrimaryKey);

  C. new CosmosClient(EndpointUri, PrimaryKey);

  Correct Answer: C

  Example:

  // Create a new instance of the Cosmos Client

  this.cosmosClient = new CosmosClient(EndpointUri, PrimaryKey)

  //ADD THIS PART TO YOUR CODE await this.CreateDatabaseAsync();

  Reference: https://docs.microsoft.com/en-us/azure/cosmos-db/sql-api-get-started

• Question 422:

  Your company is developing an Azure API.

  You need to implement authentication for the Azure API. You have the following requirements:

  1.

  All API calls must be secure.

  2.

  Callers to the API must not send credentials to the API. Which authentication mechanism should you use?

  A. Basic

  B. Anonymous

  C. Managed identity

  D. Client certificate

  Correct Answer: C

  Use the authentication-managed-identity policy to authenticate with a backend service using the managed identity of the API Management service. This policy essentially uses the managed identity to obtain an access token from Azure Active Directory for accessing the specified resource. After successfully obtaining the token, the policy will set the value of the token in the Authorization header using the Bearer scheme.

  Reference: https://docs.microsoft.com/bs-cyrl-ba/azure/api-management/api-management-authentication-policies

• Question 423:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.

  When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.

  You need to design the process that starts the photo processing.

  Solution: Trigger the photo processing from Blob storage events.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to catch the triggered event, so move the photo processing to an Azure Function triggered from the blob upload

  Note: Azure Storage events allow applications to react to events. Common Blob storage event scenarios include image or video processing, search indexing, or any file-oriented workflow.

  Events are pushed using Azure Event Grid to subscribers such as Azure Functions, Azure Logic Apps, or even to your own http listener.

  Note: Only storage accounts of kind StorageV2 (general purpose v2) and BlobStorage support event integration. Storage (general purpose v1) does not support integration with Event Grid.

  Reference:

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-event-overview

• Question 424:

  You are developing a web app that is protected by Azure Web Application Firewall (WAF). All traffic to the web app is routed through an Azure Application Gateway instance that is used by multiple web apps. The web app address is contoso.azurewebsites.net.

  All traffic must be secured with SSL. The Azure Application Gateway instance is used by multiple web apps.

  You need to configure the Azure Application Gateway for the app.

  Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. In the Azure Application Gateway's HTTP setting, enable the Use for App service setting.

  B. Convert the web app to run in an Azure App service environment (ASE).

  C. Add an authentication certificate for contoso.azurewebsites.net to the Azure Application gateway.

  D. In the Azure Application Gateway's HTTP setting, set the value of the Override backend path option to contoso22.azurewebsites.net.

  Correct Answer: AD

  D: The ability to specify a host override is defined in the HTTP settings and can be applied to any back-end pool during rule creation. The ability to derive the host name from the IP or FQDN of the back-end pool members. HTTP settings also

  provide an option to dynamically pick the host name from a back-end pool member's FQDN if configured with the option to derive host name from an individual back-end pool member.

  A (not C): SSL termination and end to end SSL with multi-tenant services.

  In case of end to end SSL, trusted Azure services such as Azure App service web apps do not require whitelisting the backends in the application gateway. Therefore, there is no need to add any authentication certificates.

  

  Reference: https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-web-app-overview

• Question 425:

  You are developing an application that uses Azure Blob storage.

  The application must read the transaction logs of all the changes that occur to the blobs and the blob metadata in the storage account for auditing purposes. The changes must be in the order in which they occurred, include only create,

  update, delete, and copy operations and be retained for compliance reasons.

  You need to process the transaction logs asynchronously.

  What should you do?

  A. Process all Azure Blob storage events by using Azure Event Grid with a subscriber Azure Function app.

  B. Enable the change feed on the storage account and process all changes for available events.

  C. Process all Azure Storage Analytics logs for successful blob events.

  D. Use the Azure Monitor HTTP Data Collector API and scan the request body for successful blob events.

  Correct Answer: B

  Change feed support in Azure Blob Storage The purpose of the change feed is to provide transaction logs of all the changes that occur to the blobs and the blob metadata in your storage account. The change feed provides ordered, guaranteed, durable, immutable, read-only log of these changes. Client applications can read these logs at any time, either in streaming or in batch mode. The change feed enables you to build efficient and scalable solutions that process change events that occur in your Blob Storage account at a low cost.

  Reference: https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-change-feed

• Question 426:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.

  When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.

  You need to design the process that starts the photo processing.

  Solution: Move photo processing to an Azure Function triggered from the blob upload.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Azure Storage events allow applications to react to events. Common Blob storage event scenarios include image or video processing, search indexing, or any file-oriented workflow.

  Events are pushed using Azure Event Grid to subscribers such as Azure Functions, Azure Logic Apps, or even to your own http listener.

  Note: Only storage accounts of kind StorageV2 (general purpose v2) and BlobStorage support event integration. Storage (general purpose v1) does not support integration with Event Grid.

  Reference:

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-event-overview

• Question 427:

  After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five

  devices that send data.

  You must store the device in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future.

  You need to implement a solution to receive the device data.

  Solution: Provision an Azure Service Bus. Configure a topic to receive the device data by using a correlation filter.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  A message is raw data produced by a service to be consumed or stored elsewhere. The Service Bus is for high-value enterprise messaging, and is used for order processing and financial transactions.

  References: https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-programming-guide

• Question 428:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.

  When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.

  You need to design the process that starts the photo processing.

  Solution: Convert the Azure Storage account to a BlockBlobStorage storage account.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Not necessary to convert the account, instead move photo processing to an Azure Function triggered from the blob upload..

  Azure Storage events allow applications to react to events. Common Blob storage event scenarios include image or video processing, search indexing, or any file-oriented workflow.

  Note: Only storage accounts of kind StorageV2 (general purpose v2) and BlobStorage support event integration. Storage (general purpose v1) does not support integration with Event Grid.

  Reference:

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-event-overview

• Question 429:

  You are preparing to deploy an ASP.NET Core website to an Azure Web App from a GitHub repository. The website includes static content generated by a script.

  You plan to use the Azure Web App continuous deployment feature.

  You need to run the static generation script before the website starts serving traffic.

  What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Create a file named .deployment in the root of the repository that calls a script which generates the static content and deploys the website.

  B. Add a PreBuild target in the websites csproj project file that runs the static content generation script.

  C. Create a file named run.cmd in the folder /run that calls a script which generates the static content and deploys the website.

  D. Add the path to the static content generation tool to WEBSITE_RUN_FROM_PACKAGE setting in the host.json file.

  Correct Answer: AD

  A: To customize your deployment, include a .deployment file in the repository root.

  You just need to add a file to the root of your repository with the name .deployment and the content:

  [config]

  command = YOUR COMMAND TO RUN FOR DEPLOYMENT

  this command can be just running a script (batch file) that has all that is required for your deployment, like copying files from the repository to the web root directory for example.

  D: In Azure, you can run your functions directly from a deployment package file in your function app. The other option is to deploy your files in the d:\home\site\wwwroot directory of your function app (see A above).

  To enable your function app to run from a package, you just add a WEBSITE_RUN_FROM_PACKAGE setting to your function app settings.

  Note: The host.json metadata file contains global configuration options that affect all functions for a function app.

  References:

  https://github.com/projectkudu/kudu/wiki/Custom-Deployment-Script

  https://docs.microsoft.com/bs-latn-ba/azure/azure-functions/run-functions-from-deployment-package

• Question 430:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.

  You are developing and deploying several ASP.Net web applications to Azure App Service. You plan to save session state information and HTML output. You must use a storage mechanism with the following requirements:

  1.

  Share session state across all ASP.NET web applications

  2.

  Support controlled, concurrent access to the same session state data for multiple readers and a single writer

  3.

  Save full HTTP responses for concurrent requests

  You need to store the information.

  Proposed Solution: Enable Application Request Routing (ARR)

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead deploy and configure Azure Cache for Redis. Update the web applications.

  Reference: https://docs.microsoft.com/en-us/azure/architecture/best-practices/caching#managing-concurrency-in-a-cache