Simulado AZ-204

Please wait - loading…

Question 1 of 80

This question requires that you evaluate the underlined text to determine if it is correct.
You company has an on-premises deployment of MongoDB, and an Azure Cosmos DB account that makes use of the MongoDB API.
You need to devise a strategy to migrate MongoDB to the Azure Cosmos DB account.
You include the Data Management Gateway tool in your migration strategy.
Instructions: Review the underlined text. If it makes the statement correct, select `No change required.` If the statement is incorrect, select the answer choice that makes the statement correct.

Select one of the following:

No change required
mongorestore
Azure Storage Explorer
AzCopy

Explanation

Question 2 of 80

This question requires that you evaluate the underlined text to determine if it is correct.
Your Azure Active Directory Azure (Azure AD) tenant has an Azure subscription linked to it.
Your developer has created a mobile application that obtains Azure AD access tokens using the OAuth 2 implicit grant type.
The mobile application must be registered in Azure AD.
You require a redirect URI from the developer for registration purposes.
Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed.` If the statement is incorrect, select the answer choice that makes the statement correct.

Select one of the following:

No change required.
a secret
a login hint
a client ID

Explanation

Question 3 of 80

You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days.
Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

Select one or more of the following:

EnabledForDeployment
EnablePurgeProtection
EnabledForTemplateDeployment
EnableSoftDelete

Explanation

Question 4 of 80

You manage an Azure SQL database that allows for Azure AD authentication.
You need to make sure that database developers can connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum.
Which of the following should you implement?

Select one of the following:

Active Directory integrated authentication.
Azure AD token.
Azure Multi-Factor authentication.
OATH software tokens.

Explanation

Question 5 of 80

You are developing an application to transfer data between on-premises file servers and Azure Blob storage. The application stores keys, secrets, and certificates in Azure Key Vault and makes use of the Azure Key Vault APIs.
You want to configure the application to allow recovery of an accidental deletion of the key vault or key vault objects for 90 days after deletion.
What should you do?

Select one of the following:

Run the Add-AzKeyVaultKey cmdlet.
Run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI.
Implement virtual network service endpoints for Azure Key Vault.
Run the az keyvault update --enable-soft-delete false CLI.

Explanation

Question 6 of 80

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.
You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.
Solution: You include the use of Azure Redis Cache in your design.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 7 of 80

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.
You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.
Solution: You include the use of an Azure Content Delivery Network (CDN) in your design.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 8 of 80

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.
You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.
Solution: You include the use of a Storage Area Network (SAN) in your design.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 9 of 80

You develop a Web App on a tier D1 app service plan.
You notice that page load times increase during periods of peak traffic.
You want to implement automatic scaling when CPU load is above 80 percent. Your solution must minimize costs.
What should you do first?

Select one of the following:

Enable autoscaling on the Web App.
Switch to the Premium App Service tier plan.
Switch to the Standard App Service tier plan.
Switch to the Azure App Services consumption plan.

Explanation

Question 10 of 80

Your company's Azure subscription includes an Azure Log Analytics workspace.
Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server 2016, and is linked to the Azure Log Analytics workspace. The Azure Log Analytics workspace is set up to gather performance counters associated with security from these linked servers.
You must configure alerts based on the information gathered by the Azure Log Analytics workspace.
You have to make sure that alert rules allow for dimensions, and that alert creation time should be kept to a minimum. Furthermore, a single alert notification must be created when the alert is created and when the alert is resolved.
You need to make use of the necessary signal type when creating the alert rules.
Which of the following is the option you should use?

Select one of the following:

The Activity log signal type.
The Application Log signal type.
The Audit Log signal type.
The Metric signal type.

Explanation

Question 11 of 80

You are developing a .NET Core MVC application that allows customers to research independent holiday accommodation providers.
You want to implement Azure Search to allow the application to search the index by using various criteria to locate documents related to accommodation.
You want the application to allow customers to search the index by using regular expressions.
What should you do?

Select one of the following:

Configure the SearchMode property of the SearchParameters class.
Configure the QueryType property of the SearchParameters class.
Configure the Facets property of the SearchParameters class.
Configure the Filter property of the SearchParameters class.

Explanation

Question 12 of 80

You are developing an application that applies a set of governance policies for internal and external services, as well as for applications.
You develop a stateful ASP.NET Core 2.1 web application named PolicyApp and deploy it to an Azure App Service Web App. The PolicyApp reacts to events from
Azure Event Grid and performs policy actions based on those events.
You have the following requirements:
✑ Authentication events must be used to monitor users when they sign in and sign out.
✑ All authentication events must be processed by PolicyApp.
✑ Sign outs must be processed as fast as possible.
What should you do?

Select one of the following:

Create a new Azure Event Grid subscription for all authentication events. Use the subscription to process sign-out events.
Create a separate Azure Event Grid handler for sign-in and sign-out events.
Create separate Azure Event Grid topics and subscriptions for sign-in and sign-out events.
Add a subject prefix to sign-out events. Create an Azure Event Grid subscription. Configure the subscription to use the subjectBeginsWith filter.

Explanation

Question 13 of 80

You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic volumes after it is published.
You must ensure that the website remains available and responsive while minimizing cost.
You need to deploy the website.
What should you do?

Select one of the following:

Deploy the website to a virtual machine. Configure the virtual machine to automatically scale when the CPU load is high.
Deploy the website to an App Service that uses the Shared service tier. Configure the App Service plan to automatically scale when the CPU load is high.
Deploy the website to a virtual machine. Configure a Scale Set to increase the virtual machine instance count when the CPU load is high
Deploy the website to an App Service that uses the Standard service tier. Configure the App Service plan to automatically scale when the CPU load is high.

Explanation

Question 14 of 80

You are developing an application that uses Azure Blob storage.
The application must read the transaction logs of all the changes that occur to the blobs and the blob metadata in the storage account for auditing purposes. The changes must be in the order in which they occurred, include only create, update, delete, and copy operations and be retained for compliance reasons.
You need to process the transaction logs asynchronously.
What should you do?

Select one of the following:

Process all Azure Blob storage events by using Azure Event Grid with a subscriber Azure Function app.
Enable the change feed on the storage account and process all changes for available events.
Process all Azure Storage Analytics logs for successful blob events.
Use the Azure Monitor HTTP Data Collector API and scan the request body for successful blob events.

Explanation

Question 15 of 80

You are developing a web app that is protected by Azure Web Application Firewall (WAF). All traffic to the web app is routed through an Azure Application
Gateway instance that is used by multiple web apps. The web app address is contoso.azurewebsites.net.
All traffic must be secured with SSL. The Azure Application Gateway instance is used by multiple web apps.
You need to configure the Azure Application Gateway for the web app.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Select one or more of the following:

In the Azure Application Gateway's HTTP setting, enable the Use for App service setting.
Convert the web app to run in an Azure App service environment (ASE).
Add an authentication certificate for contoso.azurewebsites.net to the Azure Application Gateway.
In the Azure Application Gateway's HTTP setting, set the value of the Override backend path option to contoso22.azurewebsites.net

Explanation

Question 16 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure
Storage Blob storage. The storage account type is General-purpose V2.
When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.
You need to design the process that starts the photo processing.
Solution: Use the Azure Blob Storage change feed to trigger photo processing.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 17 of 80

You are developing a web application that runs as an Azure Web App. The web application stores data in Azure SQL Database and stores files in an Azure
Storage account. The web application makes HTTP requests to external services as part of normal operations.
The web application is instrumented with Application Insights. The external services are OpenTelemetry compliant.
You need to ensure that the customer ID of the signed in user is associated with all operations throughout the overall system.
What should you do?

Select one of the following:

Add the customer ID for the signed in user to the CorrelationContext in the web application
On the current SpanContext, set the TraceId to the customer ID for the signed in user
Set the header Ocp-Apim-Trace to the customer ID for the signed in user
Create a new SpanContext with the TraceFlags value set to the customer ID for the signed in user

Explanation

Question 18 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop an HTTP triggered Azure Function app to process Azure Storage blob data. The app is triggered using an output binding on the blob.
The app continues to time out after four minutes. The app must process the blob data.
You need to ensure the app does not time out and processes the blob data.
Solution: Update the functionTimeout property of the host.json project file to 10 minutes.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 19 of 80

You are building a website that uses Azure Blob storage for data storage. You configure Azure Blob storage lifecycle to move all blobs to the archive tier after 30 days.
Customers have requested a service-level agreement (SLA) for viewing data older than 30 days.
You need to document the minimum SLA for data recovery.
Which SLA should you use?

Select one of the following:

at least two days
between one and 15 hours
at least one day
between zero and 60 minutes

Explanation

Question 20 of 80

You develop Azure solutions.
You must connect to a No-SQL globally-distributed database by using the .NET API.
You need to create an object to configure and execute requests in the database.
Which code segment should you use?

Select one of the following:

new Container(EndpointUri, PrimaryKey);
new Database(EndpointUri, PrimaryKey);
new CosmosClient(EndpointUri, PrimaryKey);

Explanation

Question 21 of 80

You have an existing Azure storage account that stores large volumes of data across multiple containers.
You need to copy all data from the existing storage account to a new storage account. The copy process must meet the following requirements:
✑ Automate data movement.
✑ Minimize user input required to perform the operation.
✑ Ensure that the data movement process is recoverable.
What should you use?

Select one of the following:

AzCopy
Azure Storage Explorer
Azure portal
NET Storage Client Library

Explanation

Question 22 of 80

You are developing an Azure Cosmos DB solution by using the Azure Cosmos DB SQL API. The data includes millions of documents. Each document may contain hundreds of properties.
The properties of the documents do not contain distinct values for partitioning. Azure Cosmos DB must scale individual containers in the database to meet the performance needs of the application by spreading the workload evenly across all partitions over time.
You need to select a partition key.
Which two partition keys can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point

Select one or more of the following:

a single property value that does not appear frequently in the documents
a value containing the collection name
a single property value that appears frequently in the documents
a concatenation of multiple property values with a random suffix appended
a hash suffix appended to a property value

Explanation

Question 23 of 80

You develop and deploy a web application to Azure App Service. The application accesses data stored in an Azure Storage account. The account contains several containers with several blobs with large amounts of data. You deploy all Azure resources to a single region.
You need to move the Azure Storage account to the new region. You must copy all data to the new region.
What should you do first?

Select one of the following:

Export the Azure Storage account Azure Resource Manager template
Initiate a storage account failover
Configure object replication for all blobs
Use the AzCopy command line tool
Create a new Azure Storage account in the current region
Create a new subscription in the current region

Explanation

Question 24 of 80

An organization deploys Azure Cosmos DB.
You need to ensure that the index is updated as items are created, updated, or deleted.
What should you do?

Select one of the following:

Set the indexing mode to Lazy.
Set the value of the automatic property of the indexing policy to False.
Set the value of the EnableScanInQuery option to True.
Set the indexing mode to Consistent.

Explanation

Question 25 of 80

You are developing a .Net web application that stores data in Azure Cosmos DB. The application must use the Core API and allow millions of reads and writes.
The Azure Cosmos DB account has been created with multiple write regions enabled. The application has been deployed to the East US2 and Central US regions.
You need to update the application to support multi-region writes.
What are two possible ways to achieve this goal? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Select one or more of the following:

Update the ConnectionPolicy class for the Cosmos client and populate the PreferredLocations property based on the geo-proximity of the application.
Update Azure Cosmos DB to use the Strong consistency level. Add indexed properties to the container to indicate region.
Update the ConnectionPolicy class for the Cosmos client and set the UseMultipleWriteLocations property to true.
Create and deploy a custom conflict resolution policy.
Update Azure Cosmos DB to use the Session consistency level. Send the SessionToken property value from the FeedResponse object of the write action to the end-user by using a cookie.

Explanation

Question 26 of 80

You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra
API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers.
The Azure AD group must not be able to access the keys that are required to access the data.
You need to restrict access to the Azure AD group.
Which role-based access control should you use?

Select one of the following:

DocumentDB Accounts Contributor
Cosmos Backup Operator
Cosmos DB Operator
Cosmos DB Account Reader

Explanation

Question 27 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.
You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level.
You need to configure authorization.
Solution: Configure the Azure Web App for the website to allow only authenticated requests and require Azure AD log on.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 28 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.
You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level.
You need to configure authorization.
Solution:
✑ Create a new Azure AD application. In the application's manifest, set value of the groupMembershipClaims option to All.
✑ In the website, use the value of the groups claim from the JWT for the user to determine permissions.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 29 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution:
1. Create an Azure Key Vault key named skey.
2. Encrypt the intake forms using the public key portion of skey.
3. Store the encrypted data in Azure Blob storage.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 30 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution:
1. Create an Azure Cosmos DB database with Storage Service Encryption enabled.
2. Store the intake forms in the Azure Cosmos DB database.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 31 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution: Store the intake forms as Azure Key Vault secrets.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 32 of 80

Your company is developing an Azure API hosted in Azure.
You need to implement authentication for the Azure API to access other Azure resources. You have the following requirements:
✑ All API calls must be authenticated.
✑ Callers to the API must not send credentials to the API.
Which authentication mechanism should you use?

Select one of the following:

Basic
Anonymous
Managed identity
Client certificate

Explanation

Question 33 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop Azure solutions.
You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.
You need to obtain an Azure Resource Manager access token.
Solution: Use an X.509 certificate to authenticate the VM with Azure Resource Manager.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 34 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop Azure solutions.
You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.
You need to obtain an Azure Resource Manager access token.
Solution: Use the Reader role-based access control (RBAC) role to authenticate the VM with Azure Resource Manager.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 35 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop Azure solutions.
You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.
You need to obtain an Azure Resource Manager access token.
Solution: Run the Invoke-RestMethod cmdlet to make a request to the local managed identity for Azure resources endpoint.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 36 of 80

You develop an app that allows users to upload photos and videos to Azure storage. The app uses a storage REST API call to upload the media to a blob storage account named Account1. You have blob storage containers named Container1 and Container2.
Uploading of videos occurs on an irregular basis.
You need to copy specific blobs from Container1 to Container2 when a new video is uploaded.
What should you do?

Select one of the following:

Copy blobs to Container2 by using the Put Blob operation of the Blob Service REST API
Create an Event Grid topic that uses the Start-AzureStorageBlobCopy cmdlet
Use AzCopy with the Snapshot switch to copy blobs to Container2
Download the blob to a virtual machine and then upload the blob to Container2

Explanation

Question 37 of 80

You are developing an ASP.NET Core website that uses Azure FrontDoor. The website is used to build custom weather data sets for researchers. Data sets are downloaded by users as Comma Separated Value (CSV) files. The data is refreshed every 10 hours.
Specific files must be purged from the FrontDoor cache based upon Response Header values.
You need to purge individual assets from the Front Door cache.
Which type of cache purge should you use?

Select one of the following:

single path
wildcard
root domain

Explanation

Question 38 of 80

You are a developer for a SaaS company that offers many web services.
All web services for the company must meet the following requirements:
✑ Use API Management to access the services
✑ Use OpenID Connect for authentication
✑ Prevent anonymous usage
A recent security audit found that several web services can be called without any authentication.
Which API Management policy should you implement?

Select one of the following:

jsonp
authentication-certificate
check-header
validate-jwt

Explanation

Question 39 of 80

You develop and deploy an Azure Logic app that calls an Azure Function app. The Azure Function app includes an OpenAPI (Swagger) definition and uses an
Azure Blob storage account. All resources are secured by using Azure Active Directory (Azure AD).
The Azure Logic app must securely access the Azure Blob storage account. Azure AD resources must remain if the Azure Logic app is deleted.
You need to secure the Azure Logic app.
What should you do?

Select one of the following:

Create a user-assigned managed identity and assign role-based access controls.
Create an Azure AD custom role and assign the role to the Azure Blob storage account.
Create an Azure Key Vault and issue a client certificate.
Create a system-assigned managed identity and issue a client certificate.
Create an Azure AD custom role and assign role-based access controls.

Explanation

Question 40 of 80

You Manage an Azure Storage Account General Purpose v1 (GPv1) with a blob container named customerReceipts.
The customerReceipts container is used by a web application to upload customers order receipts. The application processes these receipts for personal finance management during the first 90 days. After this period, the application does not need to access these raw receipts, but you need to achieve them for auditing purposes.
You need to configure a data archiving strategy for customerReceipts, ensuring the lowest storage cost.
Which two actions should you perform? Each correct answer presents part of the solutions

Select one or more of the following:

Create a new Azure Storage Account with account level cool tiering
Upgrade the Azure Storage Account to General Purpose v2 (GPv2)
Move the receipts older than 90 days to the new storage account using AzCopy
Move receipts older than 90 days to the cool tier using the storage lifecycle
Move receipts older than 90 days to the archieve tier using the storage lifecycle

Explanation

Question 41 of 80

You are developing an app that is designed to upload data to an Azure storage account. Data is uploaded as a blob to a container named mycontainer in a storage account named CompanyAct
You need to move the blob to a different storage account. The copy should run asynchronously. If the copy fails, it should be possible to restart the copy at or near the point of failure.
What should you use to copy the blob?

Select one of the following:

The Start-AzureStorageBlobIncrementalCopy Powershell cmdlet
The az storage blob Azure CLI command
The Start-AzureStorageBlobCopy PowerShell cmdlet
The AzCopy command

Explanation

Question 42 of 80

You create a blob storage account in Azure.
You need to add metadata to a container in the account.
Which HTTP method should you use?

Select one of the following:

POST
GET
PUT
HEAD

Explanation

Question 43 of 80

A company is building a traffic monitoring system. The system would be monitoring the traffic along 4 highways. The system would be responsible for producing a time series-based analysis report for each highway.

The traffic sensors on each highway have been configured to send its data to Azure Event Hubs. The data from Event Hubs is then consumed by three departments. Each department makes use of an Azure Web App to display the data.

You have to implement the Azure Event Hub instance. You need to implement a solution which ensures data throughput is maximized and latency is minimized.

Which of the following would you use as the partition key?

Select one of the following:

Highway
Department
Timestamp
Datestamp

Explanation

Question 44 of 80

You are going to deploy a web application onto Azure. You would make use of the App Service on Linux. You go ahead and create an App Service Plan. You then go ahead and publish a custom docker image onto the Azure Web App. You need to access the console logs generated from the container in real time.

You need to complete the following Azure CLI script for this (SEE THE IMAGE).

Which of the following would go into Slot 1?

Select one of the following:

config
download
show
tail

Explanation

Question 45 of 80

You are going to deploy a web application onto Azure. You would make use of the App Service on Linux. You go ahead and create an App Service Plan. You then go ahead and publish a custom docker image onto the Azure Web App. You need to access the console logs generated from the container in real time.

You need to complete the following Azure CLI script for this (SEE THE IMAGE).

Which of the following would go into Slot 2?

Select one of the following:

--slot
--web-server-logging
--detailed-error-messages
--level

Explanation

Question 46 of 80

You have to develop an ASP.Net Core application. The application is used to work with blobs in an Azure storage account. The application authenticates via Azure AD credentials.

Role based access has been implemented on the containers that contain the blobs. These roles have been assigned to the users.

You have to configure the application so that the user's permissions can be used with the Azure Blob containers.

Which of the following would you use as the permission for the Microsoft Graph API?

Select one of the following:

User.Read
User.Write
client_id
user_impersonation

Explanation

Question 47 of 80

You are developing an e-Commerce Web App.
You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure Active
Directory (AAD).
What should you do on the e-Commerce Web App?

Select one of the following:

Run the az keyvault secret command
Enable Azure AD Connect
Enable Managed Service Identity (MSI)
Create an Azure AD service principal

Explanation

Question 48 of 80

You have developed a Web App for your company. The Web App provides services and must run in multiple regions.
You want to be notified whenever the Web App uses more than 85 percent of the available CPU cores over a 5 minute period. Your solution must minimize costs.
Which command should you use in SLOT 1?

Select one of the following:

CPU Usage
Percentage CPU
avg Percentage CPU

Explanation

Question 49 of 80

You have developed a Web App for your company. The Web App provides services and must run in multiple regions.
You want to be notified whenever the Web App uses more than 85 percent of the available CPU cores over a 5 minute period. Your solution must minimize costs.
Which command should you use in SLOT 2?

Select one of the following:

--windows size
--evaluation-frequency
--auto-migrate

Explanation

Question 50 of 80

You are a developer at your company.
You need to update the definitions for an existing Logic App.
What should you use?

Select one of the following:

the Enterprise Integration Pack (EIP)
the Logic App Code View
the API Connections
the Logic Apps Designer

Explanation

Question 51 of 80

You are developing a C++ application that compiles to a native application named process.exe. The application accepts images as input and returns images in one of the following image formats: GIF, PNG, or JPEG.
You must deploy the application as an Azure Function.
You need to configure the function and host json files.
How should you complete the json files in SLOT 1?

Select one of the following:

"type": "http"
"plataform": "gcm"
"database": "stream"
"path": "process.exe"

Explanation

Question 52 of 80

You are developing a C++ application that compiles to a native application named process.exe. The application accepts images as input and returns images in one of the following image formats: GIF, PNG, or JPEG.
You must deploy the application as an Azure Function.
You need to configure the function and host json files.
How should you complete the json files in SLOT 2?

Select one of the following:

"customHandler": {"description":{
"languageWorker":{"path":{
"extensions":{"worker":{
"extensionBundle":{

Explanation

Question 53 of 80

You are developing a C++ application that compiles to a native application named process.exe. The application accepts images as input and returns images in one of the following image formats: GIF, PNG, or JPEG.
You must deploy the application as an Azure Function.
You need to configure the function and host json files.
How should you complete the json files in SLOT 3?

Select one of the following:

"enableForwardingHttpRequest":true
"enableForwardingHttpRequest":false

Explanation

Question 54 of 80

You are implementing a software as a service (SaaS) ASP.NET Core web service that will run as an Azure Web App. The web service will use an on-premises
SQL Server database for storage. The web service also includes a WebJob that processes data updates. Four customers will use the web service.
✑ Each instance of the WebJob processes data for a single customer and must run as a singleton instance.
✑ Each deployment must be tested by using deployment slots prior to serving production data.
✑ Azure costs must be minimized.
✑ Azure resources must be located in an isolated network.
You need to configure the App Service plan for the Web App.
How should you configure the App Service plan in BOX 1?

Select one of the following:

Explanation

Question 55 of 80

You are implementing a software as a service (SaaS) ASP.NET Core web service that will run as an Azure Web App. The web service will use an on-premises
SQL Server database for storage. The web service also includes a WebJob that processes data updates. Four customers will use the web service.
✑ Each instance of the WebJob processes data for a single customer and must run as a singleton instance.
✑ Each deployment must be tested by using deployment slots prior to serving production data.
✑ Azure costs must be minimized.
✑ Azure resources must be located in an isolated network.
You need to configure the App Service plan for the Web App.
How should you configure the App Service plan in BOX 2?

Select one of the following:

Isolated
Standard
Premium
Comsumption

Explanation

Question 56 of 80

You are developing an Azure Web App. You configure TLS mutual authentication for the web app.
You need to validate the client certificate in the web app. To answer, select the appropriate option in the answer area in BOX 1.

Select one of the following:

HTTP request header
Client cookie
HTTP message body
URL query string

Explanation

Question 57 of 80

You are developing an Azure Web App. You configure TLS mutual authentication for the web app.
You need to validate the client certificate in the web app. To answer, select the appropriate option in the answer area in BOX 2.

Select one of the following:

HTML
URL
Unicode
Base64

Explanation

Question 58 of 80

You are developing an application that is going to making use of the Azure Service Bus. You have to create filters based on the different types of subscribers that would subscribe to the topic. The broad classification of these subscribers are:

- Subscribers should be able to receive all messages being sent to the topic;
- Subscribers should NOT be able to receive all messages being sent to the topic;
- Subscribers should be able to receive messages based on a SQL-like conditional expression.

Which of the following would you use as the filter condition for the requirement?

"Subscribers should be able to receive all messages being sent to the topic"

Select one of the following:

Boolean filters
Primary filters
SQL filters
Correlation filters

Explanation

Question 59 of 80

You are developing an application that is going to making use of the Azure Service Bus. You have to create filters based on the different types of subscribers that would subscribe to the topic. The broad classification of these subscribers are:

- Subscribers should be able to receive all messages being sent to the topic;
- Subscribers should NOT be able to receive all messages being sent to the topic;
- Subscribers should be able to receive messages based on a SQL-like conditional expression.

Which of the following would you use as the filter condition for the requirement?

"Subscribers should be able to receive messages based on a SQL-like conditional expression"

Select one of the following:

Boolean filters
Primary filters
SQL Filters
Correlation filters

Explanation

Question 60 of 80

You have to load data into a cache in order to improve the performance and maintain data consistency between data store and data in cache. Which of the following are suitable scenarios to use CACHE-ASIDE pattern? Choose 2 answers from the options given below:

Select one or more of the following:

Static cached data which can be fit on startup
Native read-through and write-through cache operations are not provided
Unpredictable resource demand
Caching session state information hosted in a web farm

Explanation

Question 61 of 80

You are developing an Azure Function App that processes images that are uploaded to an Azure Blob container.
Images must be processed as quickly as possible after they are uploaded, and the solution must minimize latency. You create code to process images when the
Function App is triggered.
You need to configure the Function App.
What should you do?

Select one of the following:

Use an App Service plan. Configure the Function App to use an Azure Blob Storage input trigger.
Use a Consumption plan. Configure the Function App to use an Azure Blob Storage trigger.
Use a Consumption plan. Configure the Function App to use a Timer trigger.
Use an App Service plan. Configure the Function App to use an Azure Blob Storage trigger.
Use a Consumption plan. Configure the Function App to use an Azure Blob Storage input trigger.

Explanation

Question 62 of 80

You are configuring a development environment for your team. You deploy the latest Visual Studio image from the Azure Marketplace to your Azure subscription.
The development environment requires several software development kits (SDKs) and third-party components to support application development across the organization. You install and customize the deployed virtual machine (VM) for your development team. The customized VM must be saved to allow provisioning of a new team member development environment.
You need to save the customized VM for future provisioning.
Which tool or service should you use in BOX 1?

Select one of the following:

Azure PowerShell
Visual Studio command prompt
Azure Migrate
Azure Backup

Explanation

Question 63 of 80

You are configuring a development environment for your team. You deploy the latest Visual Studio image from the Azure Marketplace to your Azure subscription.
The development environment requires several software development kits (SDKs) and third-party components to support application development across the organization. You install and customize the deployed virtual machine (VM) for your development team. The customized VM must be saved to allow provisioning of a new team member development environment.
You need to save the customized VM for future provisioning.
Which tool or service should you use in BOX 2?

Select one of the following:

Azure Blob Storage
Azure Data Lake Storage
Azure File Storage
Azure Table Storage

Explanation

Question 64 of 80

You are developing an Azure Function app.
The app must meet the following requirements:
✑ Enable developers to write the functions by using the Rust language.
✑ Declaratively connect to an Azure Blob Storage account.
You need to implement the app.
Which Azure Function app feature should you use in FEATURE 1? To answer, select the appropriate feature to the correct requirement. Each feature may be used once, more than once, or not at all.

Select one of the following:

Custom handler
Extension bundle
Trigger
Runtime
Policy
Hosting plan

Explanation

Question 65 of 80

You are developing an Azure Function app.
The app must meet the following requirements:
✑ Enable developers to write the functions by using the Rust language.
✑ Declaratively connect to an Azure Blob Storage account.
You need to implement the app.
Which Azure Function app feature should you use in FEATURE 2? To answer, select the appropriate feature to the correct requirement. Each feature may be used once, more than once, or not at all.

Select one of the following:

Custom handler
Extension bundle
Trigger
Runtime
Policy
Hosting plan

Explanation

Question 66 of 80

You develop Azure solutions.
A .NET application needs to receive a message each time an Azure virtual machine finishes processing data. The messages must NOT persist after being processed by the receiving application.
You need to implement the .NET object that will receive the messages.
Which object should you use?

Select one of the following:

QueueClient
SubscriptionClient
TopicClient
CloudQueueClient

Explanation

Question 67 of 80

You are developing a web service that will run on Azure virtual machines that use Azure Storage. You configure all virtual machines to use managed identities.
You have the following requirements:
✑ Secret-based authentication mechanisms are not permitted for accessing an Azure Storage account.
✑ Must use only Azure Instance Metadata Service endpoints.
You need to write code to retrieve an access token to access Azure Storage. What's the best option for CODE SEGMENT 1? To answer, select the appropriate code segment to the correct location. Each code segment may be used once or not at all.

Select one of the following:

http://localhost:50342/oauth/token
http://169.254.169.254:50342/oauth2/token
http://localhost:50342/metadata/identity/oauth2/token
http://169.254.169.254/metadata/identity/oauth2/token

Explanation

Question 68 of 80

You are developing a web service that will run on Azure virtual machines that use Azure Storage. You configure all virtual machines to use managed identities.
You have the following requirements:
✑ Secret-based authentication mechanisms are not permitted for accessing an Azure Storage account.
✑ Must use only Azure Instance Metadata Service endpoints.
You need to write code to retrieve an access token to access Azure Storage. What's the best option for CODE SEGMENT 2? To answer, select the appropriate code segment to the correct location. Each code segment may be used once or not at all.

Select one of the following:

XDocument.Parse(payload);
new MultipartContent(payload);
new NetworkCredential("Azure",payload);
JsonConvert.DeserializedObject<Dictionary<string, string>>(payload);

Explanation

Question 69 of 80

You are developing a microservices solution. You plan to deploy the solution to a multinode Azure Kubernetes Service (AKS) cluster.
You need to deploy a solution that includes the following features:
✑ reverse proxy capabilities
✑ configurable traffic routing
✑ TLS termination with a custom certificate
Which component should you use in BOX 1? To answer, select the appropriate component to the correct requirement. Each component may be used once, more than once, or not at all.

Select one of the following:

Helm
Draft
Brigade
KubeCtl
Ingress Controller
CoreDNS
Virtual Kubelet

Explanation

Question 70 of 80

You are developing a microservices solution. You plan to deploy the solution to a multinode Azure Kubernetes Service (AKS) cluster.
You need to deploy a solution that includes the following features:
✑ reverse proxy capabilities
✑ configurable traffic routing
✑ TLS termination with a custom certificate
Which component should you use in BOX 2? To answer, select the appropriate component to the correct requirement. Each component may be used once, more than once, or not at all.

Select one of the following:

Helm
Draft
Brigade
KubeCtl
Ingress Controller
CoreDNS
Virtual Kubelet

Explanation

Question 71 of 80

You are developing a microservices solution. You plan to deploy the solution to a multinode Azure Kubernetes Service (AKS) cluster.
You need to deploy a solution that includes the following features:
✑ reverse proxy capabilities
✑ configurable traffic routing
✑ TLS termination with a custom certificate
Which component should you use in BOX 3? To answer, select the appropriate component to the correct requirement. Each component may be used once, more than once, or not at all.

Select one of the following:

Helm
Draft
Brigade
KubeCtl
Ingress Controller
CoreDNS
Virtual Kubelet

Explanation

Question 72 of 80

You are developing an application to collect the following telemetry data for delivery drivers: first name, last name, package count, item id, and current location coordinates. The app will store the data in Azure Cosmos DB.
You need to configure Azure Cosmos DB to query the data.
Which value should you use in BOX 1?

Select one of the following:

Gremlin
Table API
Core (SQL)

Explanation

Question 73 of 80

You are developing an application to collect the following telemetry data for delivery drivers: first name, last name, package count, item id, and current location coordinates. The app will store the data in Azure Cosmos DB.
You need to configure Azure Cosmos DB to query the data.
Which value should you use in BOX 2?

Select one of the following:

first name
last name
package count
item id

Explanation

Question 74 of 80

An organization deploys a blob storage account. Users take multiple snapshots of the blob storage account over time.
You need to delete all snapshots of the blob storage account. You must not delete the blob storage account itself.
How should you complete the CODE SEGMENT 1?

Select one of the following:

delete_container
delete_snapshots
snapshot_blob
snapshots_present

Explanation

Question 75 of 80

An organization deploys a blob storage account. Users take multiple snapshots of the blob storage account over time.
You need to delete all snapshots of the blob storage account. You must not delete the blob storage account itself.
How should you complete the CODE SEGMENT 2?

Select one of the following:

False
Include
Only

Explanation

Question 76 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution:
1. Create an Azure Key Vault key named skey.
2. Encrypt the intake forms using the public key portion of skey.
3. Store the encrypted data in Azure Blob storage.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 77 of 80

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution:
1. Create an Azure Cosmos DB database with Storage Service Encryption enabled.
2. Store the intake forms in the Azure Cosmos DB database.
Does the solution meet the goal?

Select one of the following:

True
False

Explanation

Question 78 of 80

Your company has a web app named WebApp1.
You use the WebJobs SDK to design a triggered App Service background task that automatically invokes a function in the code every time new data is received in a queue.
You are preparing to configure the service processes a queue data item.
Which of the following is the service you should use?

Select one of the following:

Logic Apps
WebJobs
Flow
Functions

Explanation

Question 79 of 80

Your company has an Azure subscription.
You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.
You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.
Which of the following is the value that you should configure for the platformFaultDomainCount property?

Select one of the following:

10
30
Min Value
Max Value

Explanation

Question 80 of 80

Your company has an Azure subscription.
You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.
You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.
Which of the following is the value that you should configure for the platformUpdateDomainCount property?

Select one of the following:

Explanation

["https://cdn.goconqr.com/uploads/media/image/48525744/desktop_75029432-f568-4a44-be52-651bc1e39a01.PNG","https://cdn.goconqr.com/uploads/media/image/48525744/desktop_75029432-f568-4a44-be52-651bc1e39a01.PNG","https://cdn.goconqr.com/uploads/media/image/48525955/desktop_0cf87076-50a9-4718-a9b8-17a08aabb363.png","https://cdn.goconqr.com/uploads/media/image/48525960/desktop_e0c5f3ae-8db1-4b03-a9c9-58e595265e5d.png","https://cdn.goconqr.com/uploads/media/image/48526020/desktop_0e66924f-e927-4cb0-b289-631722ec8bc7.png","https://cdn.goconqr.com/uploads/media/image/48526020/desktop_0e66924f-e927-4cb0-b289-631722ec8bc7.png","https://cdn.goconqr.com/uploads/media/image/48526020/desktop_0e66924f-e927-4cb0-b289-631722ec8bc7.png","https://cdn.goconqr.com/uploads/media/image/48526055/desktop_31edd0e6-2746-4247-8321-1215f4690bd1.png","https://cdn.goconqr.com/uploads/media/image/48526055/desktop_31edd0e6-2746-4247-8321-1215f4690bd1.png","https://cdn.goconqr.com/uploads/media/image/48526072/desktop_9e193e80-c9e6-41d4-b866-0c3e051bc153.png","https://cdn.goconqr.com/uploads/media/image/48526072/desktop_9e193e80-c9e6-41d4-b866-0c3e051bc153.png","https://cdn.goconqr.com/uploads/media/image/48526211/desktop_4121ccf4-235e-41c7-8134-d7263b48e2fa.png","https://cdn.goconqr.com/uploads/media/image/48526211/desktop_4121ccf4-235e-41c7-8134-d7263b48e2fa.png","https://cdn.goconqr.com/uploads/media/image/48526291/desktop_fe0ee395-b964-4d62-a5ca-c68982baad2b.png","https://cdn.goconqr.com/uploads/media/image/48526291/desktop_fe0ee395-b964-4d62-a5ca-c68982baad2b.png","https://cdn.goconqr.com/uploads/media/image/48526401/desktop_814f44bb-3787-41a1-8669-816f87e3a44a.jpg","https://cdn.goconqr.com/uploads/media/image/48526401/desktop_814f44bb-3787-41a1-8669-816f87e3a44a.jpg","https://cdn.goconqr.com/uploads/media/image/48526559/desktop_11e175ed-593b-4b5b-98ed-e140c9303745.png","https://cdn.goconqr.com/uploads/media/image/48526559/desktop_11e175ed-593b-4b5b-98ed-e140c9303745.png","https://cdn.goconqr.com/uploads/media/image/48526559/desktop_11e175ed-593b-4b5b-98ed-e140c9303745.png","https://cdn.goconqr.com/uploads/media/image/48526717/desktop_1392d86c-853c-4159-bf05-8055520c5a2b.png","https://cdn.goconqr.com/uploads/media/image/48526717/desktop_1392d86c-853c-4159-bf05-8055520c5a2b.png","https://cdn.goconqr.com/uploads/media/image/48526744/desktop_ca8fdbbb-e48b-40de-9190-31df83006d1d.png","https://cdn.goconqr.com/uploads/media/image/48526744/desktop_ca8fdbbb-e48b-40de-9190-31df83006d1d.png"]

	Created by Cloud Engineering about 2 years ago

Certificação Microsoft Simulado AZ-204 - Certificação Quiz on Simulado AZ-204, created by Cloud Engineering on 24/11/2022.

Simulado AZ-204

Question 1 of 80

Select one of the following:

Explanation

Question 2 of 80

Select one of the following:

Explanation

Question 3 of 80

You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days. Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

Select one or more of the following:

Explanation

Question 4 of 80

Select one of the following:

Explanation

Question 5 of 80

Select one of the following:

Explanation

Question 6 of 80

Select one of the following:

Explanation

Question 7 of 80

Select one of the following:

Explanation

Question 8 of 80

Select one of the following:

Explanation

Question 9 of 80

You develop a Web App on a tier D1 app service plan. You notice that page load times increase during periods of peak traffic. You want to implement automatic scaling when CPU load is above 80 percent. Your solution must minimize costs. What should you do first?

Select one of the following:

Explanation

Question 10 of 80

Select one of the following:

Explanation

Question 11 of 80

Select one of the following:

Explanation

Question 12 of 80

Select one of the following:

Explanation

Question 13 of 80

You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic volumes after it is published. You must ensure that the website remains available and responsive while minimizing cost. You need to deploy the website. What should you do?

Select one of the following:

Explanation

Question 14 of 80

Select one of the following:

Explanation

Question 15 of 80

Select one or more of the following:

Explanation

Question 16 of 80

Select one of the following:

Explanation

Question 17 of 80

Select one of the following:

Explanation

Question 18 of 80

Select one of the following:

Explanation

Question 19 of 80

Select one of the following:

Explanation

Question 20 of 80

You develop Azure solutions. You must connect to a No-SQL globally-distributed database by using the .NET API. You need to create an object to configure and execute requests in the database. Which code segment should you use?

Select one of the following:

Explanation

Question 21 of 80

Select one of the following:

Explanation

Question 22 of 80

Select one or more of the following:

Explanation

Question 23 of 80

Select one of the following:

Explanation

Question 24 of 80

An organization deploys Azure Cosmos DB. You need to ensure that the index is updated as items are created, updated, or deleted. What should you do?

Select one of the following:

Explanation

Question 25 of 80

You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days.
Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

You develop a Web App on a tier D1 app service plan.
You notice that page load times increase during periods of peak traffic.
You want to implement automatic scaling when CPU load is above 80 percent. Your solution must minimize costs.
What should you do first?

You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic volumes after it is published.
You must ensure that the website remains available and responsive while minimizing cost.
You need to deploy the website.
What should you do?

You develop Azure solutions.
You must connect to a No-SQL globally-distributed database by using the .NET API.
You need to create an object to configure and execute requests in the database.
Which code segment should you use?

An organization deploys Azure Cosmos DB.
You need to ensure that the index is updated as items are created, updated, or deleted.
What should you do?