Questão 1
Questão
This question requires that you evaluate the underlined text to determine if it is correct.
You company has an on-premises deployment of MongoDB, and an Azure Cosmos DB account that makes use of the MongoDB API.
You need to devise a strategy to migrate MongoDB to the Azure Cosmos DB account.
You include the Data Management Gateway tool in your migration strategy.
Instructions: Review the underlined text. If it makes the statement correct, select `No change required.` If the statement is incorrect, select the answer choice that makes the statement correct.
Responda
-
No change required
-
mongorestore
-
Azure Storage Explorer
-
AzCopy
Questão 2
Questão
This question requires that you evaluate the underlined text to determine if it is correct.
Your Azure Active Directory Azure (Azure AD) tenant has an Azure subscription linked to it.
Your developer has created a mobile application that obtains Azure AD access tokens using the OAuth 2 implicit grant type.
The mobile application must be registered in Azure AD.
You require a redirect URI from the developer for registration purposes.
Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed.` If the statement is incorrect, select the answer choice that makes the statement correct.
Responda
-
No change required.
-
a secret
-
a login hint
-
a client ID
Questão 3
Questão
You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days.
Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)
Questão 4
Questão
You manage an Azure SQL database that allows for Azure AD authentication.
You need to make sure that database developers can connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum.
Which of the following should you implement?
Questão 5
Questão
You are developing an application to transfer data between on-premises file servers and Azure Blob storage. The application stores keys, secrets, and certificates in Azure Key Vault and makes use of the Azure Key Vault APIs.
You want to configure the application to allow recovery of an accidental deletion of the key vault or key vault objects for 90 days after deletion.
What should you do?
Responda
-
Run the Add-AzKeyVaultKey cmdlet.
-
Run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI.
-
Implement virtual network service endpoints for Azure Key Vault.
-
Run the az keyvault update --enable-soft-delete false CLI.
Questão 6
Questão
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.
You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.
Solution: You include the use of Azure Redis Cache in your design.
Does the solution meet the goal?
Questão 7
Questão
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.
You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.
Solution: You include the use of an Azure Content Delivery Network (CDN) in your design.
Does the solution meet the goal?
Questão 8
Questão
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.
You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.
Solution: You include the use of a Storage Area Network (SAN) in your design.
Does the solution meet the goal?
Questão 9
Questão
You develop a Web App on a tier D1 app service plan.
You notice that page load times increase during periods of peak traffic.
You want to implement automatic scaling when CPU load is above 80 percent. Your solution must minimize costs.
What should you do first?
Responda
-
Enable autoscaling on the Web App.
-
Switch to the Premium App Service tier plan.
-
Switch to the Standard App Service tier plan.
-
Switch to the Azure App Services consumption plan.
Questão 10
Questão
Your company's Azure subscription includes an Azure Log Analytics workspace.
Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server 2016, and is linked to the Azure Log Analytics workspace. The Azure Log Analytics workspace is set up to gather performance counters associated with security from these linked servers.
You must configure alerts based on the information gathered by the Azure Log Analytics workspace.
You have to make sure that alert rules allow for dimensions, and that alert creation time should be kept to a minimum. Furthermore, a single alert notification must be created when the alert is created and when the alert is resolved.
You need to make use of the necessary signal type when creating the alert rules.
Which of the following is the option you should use?
Responda
-
The Activity log signal type.
-
The Application Log signal type.
-
The Audit Log signal type.
-
The Metric signal type.
Questão 11
Questão
You are developing a .NET Core MVC application that allows customers to research independent holiday accommodation providers.
You want to implement Azure Search to allow the application to search the index by using various criteria to locate documents related to accommodation.
You want the application to allow customers to search the index by using regular expressions.
What should you do?
Responda
-
Configure the SearchMode property of the SearchParameters class.
-
Configure the QueryType property of the SearchParameters class.
-
Configure the Facets property of the SearchParameters class.
-
Configure the Filter property of the SearchParameters class.
Questão 12
Questão
You are developing an application that applies a set of governance policies for internal and external services, as well as for applications.
You develop a stateful ASP.NET Core 2.1 web application named PolicyApp and deploy it to an Azure App Service Web App. The PolicyApp reacts to events from
Azure Event Grid and performs policy actions based on those events.
You have the following requirements:
✑ Authentication events must be used to monitor users when they sign in and sign out.
✑ All authentication events must be processed by PolicyApp.
✑ Sign outs must be processed as fast as possible.
What should you do?
Responda
-
Create a new Azure Event Grid subscription for all authentication events. Use the subscription to process sign-out events.
-
Create a separate Azure Event Grid handler for sign-in and sign-out events.
-
Create separate Azure Event Grid topics and subscriptions for sign-in and sign-out events.
-
Add a subject prefix to sign-out events. Create an Azure Event Grid subscription. Configure the subscription to use the subjectBeginsWith filter.
Questão 13
Questão
You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic volumes after it is published.
You must ensure that the website remains available and responsive while minimizing cost.
You need to deploy the website.
What should you do?
Responda
-
Deploy the website to a virtual machine. Configure the virtual machine to automatically scale when the CPU load is high.
-
Deploy the website to an App Service that uses the Shared service tier. Configure the App Service plan to automatically scale when the CPU load is high.
-
Deploy the website to a virtual machine. Configure a Scale Set to increase the virtual machine instance count when the CPU load is high
-
Deploy the website to an App Service that uses the Standard service tier. Configure the App Service plan to automatically scale when the CPU load is high.
Questão 14
Questão
You are developing an application that uses Azure Blob storage.
The application must read the transaction logs of all the changes that occur to the blobs and the blob metadata in the storage account for auditing purposes. The changes must be in the order in which they occurred, include only create, update, delete, and copy operations and be retained for compliance reasons.
You need to process the transaction logs asynchronously.
What should you do?
Responda
-
Process all Azure Blob storage events by using Azure Event Grid with a subscriber Azure Function app.
-
Enable the change feed on the storage account and process all changes for available events.
-
Process all Azure Storage Analytics logs for successful blob events.
-
Use the Azure Monitor HTTP Data Collector API and scan the request body for successful blob events.
Questão 15
Questão
You are developing a web app that is protected by Azure Web Application Firewall (WAF). All traffic to the web app is routed through an Azure Application
Gateway instance that is used by multiple web apps. The web app address is contoso.azurewebsites.net.
All traffic must be secured with SSL. The Azure Application Gateway instance is used by multiple web apps.
You need to configure the Azure Application Gateway for the web app.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Responda
-
In the Azure Application Gateway's HTTP setting, enable the Use for App service setting.
-
Convert the web app to run in an Azure App service environment (ASE).
-
Add an authentication certificate for contoso.azurewebsites.net to the Azure Application Gateway.
-
In the Azure Application Gateway's HTTP setting, set the value of the Override backend path option to contoso22.azurewebsites.net
Questão 16
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure
Storage Blob storage. The storage account type is General-purpose V2.
When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.
You need to design the process that starts the photo processing.
Solution: Use the Azure Blob Storage change feed to trigger photo processing.
Does the solution meet the goal?
Questão 17
Questão
You are developing a web application that runs as an Azure Web App. The web application stores data in Azure SQL Database and stores files in an Azure
Storage account. The web application makes HTTP requests to external services as part of normal operations.
The web application is instrumented with Application Insights. The external services are OpenTelemetry compliant.
You need to ensure that the customer ID of the signed in user is associated with all operations throughout the overall system.
What should you do?
Responda
-
Add the customer ID for the signed in user to the CorrelationContext in the web application
-
On the current SpanContext, set the TraceId to the customer ID for the signed in user
-
Set the header Ocp-Apim-Trace to the customer ID for the signed in user
-
Create a new SpanContext with the TraceFlags value set to the customer ID for the signed in user
Questão 18
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop an HTTP triggered Azure Function app to process Azure Storage blob data. The app is triggered using an output binding on the blob.
The app continues to time out after four minutes. The app must process the blob data.
You need to ensure the app does not time out and processes the blob data.
Solution: Update the functionTimeout property of the host.json project file to 10 minutes.
Does the solution meet the goal?
Questão 19
Questão
You are building a website that uses Azure Blob storage for data storage. You configure Azure Blob storage lifecycle to move all blobs to the archive tier after 30 days.
Customers have requested a service-level agreement (SLA) for viewing data older than 30 days.
You need to document the minimum SLA for data recovery.
Which SLA should you use?
Questão 20
Questão
You develop Azure solutions.
You must connect to a No-SQL globally-distributed database by using the .NET API.
You need to create an object to configure and execute requests in the database.
Which code segment should you use?
Responda
-
new Container(EndpointUri, PrimaryKey);
-
new Database(EndpointUri, PrimaryKey);
-
new CosmosClient(EndpointUri, PrimaryKey);
Questão 21
Questão
You have an existing Azure storage account that stores large volumes of data across multiple containers.
You need to copy all data from the existing storage account to a new storage account. The copy process must meet the following requirements:
✑ Automate data movement.
✑ Minimize user input required to perform the operation.
✑ Ensure that the data movement process is recoverable.
What should you use?
Questão 22
Questão
You are developing an Azure Cosmos DB solution by using the Azure Cosmos DB SQL API. The data includes millions of documents. Each document may contain hundreds of properties.
The properties of the documents do not contain distinct values for partitioning. Azure Cosmos DB must scale individual containers in the database to meet the performance needs of the application by spreading the workload evenly across all partitions over time.
You need to select a partition key.
Which two partition keys can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point
Responda
-
a single property value that does not appear frequently in the documents
-
a value containing the collection name
-
a single property value that appears frequently in the documents
-
a concatenation of multiple property values with a random suffix appended
-
a hash suffix appended to a property value
Questão 23
Questão
You develop and deploy a web application to Azure App Service. The application accesses data stored in an Azure Storage account. The account contains several containers with several blobs with large amounts of data. You deploy all Azure resources to a single region.
You need to move the Azure Storage account to the new region. You must copy all data to the new region.
What should you do first?
Responda
-
Export the Azure Storage account Azure Resource Manager template
-
Initiate a storage account failover
-
Configure object replication for all blobs
-
Use the AzCopy command line tool
-
Create a new Azure Storage account in the current region
-
Create a new subscription in the current region
Questão 24
Questão
An organization deploys Azure Cosmos DB.
You need to ensure that the index is updated as items are created, updated, or deleted.
What should you do?
Responda
-
Set the indexing mode to Lazy.
-
Set the value of the automatic property of the indexing policy to False.
-
Set the value of the EnableScanInQuery option to True.
-
Set the indexing mode to Consistent.
Questão 25
Questão
You are developing a .Net web application that stores data in Azure Cosmos DB. The application must use the Core API and allow millions of reads and writes.
The Azure Cosmos DB account has been created with multiple write regions enabled. The application has been deployed to the East US2 and Central US regions.
You need to update the application to support multi-region writes.
What are two possible ways to achieve this goal? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Responda
-
Update the ConnectionPolicy class for the Cosmos client and populate the PreferredLocations property based on the geo-proximity of the application.
-
Update Azure Cosmos DB to use the Strong consistency level. Add indexed properties to the container to indicate region.
-
Update the ConnectionPolicy class for the Cosmos client and set the UseMultipleWriteLocations property to true.
-
Create and deploy a custom conflict resolution policy.
-
Update Azure Cosmos DB to use the Session consistency level. Send the SessionToken property value from the FeedResponse object of the write action to the end-user by using a cookie.
Questão 26
Questão
You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra
API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers.
The Azure AD group must not be able to access the keys that are required to access the data.
You need to restrict access to the Azure AD group.
Which role-based access control should you use?
Questão 27
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.
You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level.
You need to configure authorization.
Solution: Configure the Azure Web App for the website to allow only authenticated requests and require Azure AD log on.
Does the solution meet the goal?
Questão 28
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.
You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level.
You need to configure authorization.
Solution:
✑ Create a new Azure AD application. In the application's manifest, set value of the groupMembershipClaims option to All.
✑ In the website, use the value of the groups claim from the JWT for the user to determine permissions.
Does the solution meet the goal?
Questão 29
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution:
1. Create an Azure Key Vault key named skey.
2. Encrypt the intake forms using the public key portion of skey.
3. Store the encrypted data in Azure Blob storage.
Does the solution meet the goal?
Questão 30
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution:
1. Create an Azure Cosmos DB database with Storage Service Encryption enabled.
2. Store the intake forms in the Azure Cosmos DB database.
Does the solution meet the goal?
Questão 31
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution: Store the intake forms as Azure Key Vault secrets.
Does the solution meet the goal?
Questão 32
Questão
Your company is developing an Azure API hosted in Azure.
You need to implement authentication for the Azure API to access other Azure resources. You have the following requirements:
✑ All API calls must be authenticated.
✑ Callers to the API must not send credentials to the API.
Which authentication mechanism should you use?
Responda
-
Basic
-
Anonymous
-
Managed identity
-
Client certificate
Questão 33
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop Azure solutions.
You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.
You need to obtain an Azure Resource Manager access token.
Solution: Use an X.509 certificate to authenticate the VM with Azure Resource Manager.
Does the solution meet the goal?
Questão 34
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop Azure solutions.
You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.
You need to obtain an Azure Resource Manager access token.
Solution: Use the Reader role-based access control (RBAC) role to authenticate the VM with Azure Resource Manager.
Does the solution meet the goal?
Questão 35
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop Azure solutions.
You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.
You need to obtain an Azure Resource Manager access token.
Solution: Run the Invoke-RestMethod cmdlet to make a request to the local managed identity for Azure resources endpoint.
Does the solution meet the goal?
Questão 36
Questão
You develop an app that allows users to upload photos and videos to Azure storage. The app uses a storage REST API call to upload the media to a blob storage account named Account1. You have blob storage containers named Container1 and Container2.
Uploading of videos occurs on an irregular basis.
You need to copy specific blobs from Container1 to Container2 when a new video is uploaded.
What should you do?
Responda
-
Copy blobs to Container2 by using the Put Blob operation of the Blob Service REST API
-
Create an Event Grid topic that uses the Start-AzureStorageBlobCopy cmdlet
-
Use AzCopy with the Snapshot switch to copy blobs to Container2
-
Download the blob to a virtual machine and then upload the blob to Container2
Questão 37
Questão
You are developing an ASP.NET Core website that uses Azure FrontDoor. The website is used to build custom weather data sets for researchers. Data sets are downloaded by users as Comma Separated Value (CSV) files. The data is refreshed every 10 hours.
Specific files must be purged from the FrontDoor cache based upon Response Header values.
You need to purge individual assets from the Front Door cache.
Which type of cache purge should you use?
Responda
-
single path
-
wildcard
-
root domain
Questão 38
Questão
You are a developer for a SaaS company that offers many web services.
All web services for the company must meet the following requirements:
✑ Use API Management to access the services
✑ Use OpenID Connect for authentication
✑ Prevent anonymous usage
A recent security audit found that several web services can be called without any authentication.
Which API Management policy should you implement?
Questão 39
Questão
You develop and deploy an Azure Logic app that calls an Azure Function app. The Azure Function app includes an OpenAPI (Swagger) definition and uses an
Azure Blob storage account. All resources are secured by using Azure Active Directory (Azure AD).
The Azure Logic app must securely access the Azure Blob storage account. Azure AD resources must remain if the Azure Logic app is deleted.
You need to secure the Azure Logic app.
What should you do?
Responda
-
Create a user-assigned managed identity and assign role-based access controls.
-
Create an Azure AD custom role and assign the role to the Azure Blob storage account.
-
Create an Azure Key Vault and issue a client certificate.
-
Create a system-assigned managed identity and issue a client certificate.
-
Create an Azure AD custom role and assign role-based access controls.
Questão 40
Questão
You Manage an Azure Storage Account General Purpose v1 (GPv1) with a blob container named customerReceipts.
The customerReceipts container is used by a web application to upload customers order receipts. The application processes these receipts for personal finance management during the first 90 days. After this period, the application does not need to access these raw receipts, but you need to achieve them for auditing purposes.
You need to configure a data archiving strategy for customerReceipts, ensuring the lowest storage cost.
Which two actions should you perform? Each correct answer presents part of the solutions
Responda
-
Create a new Azure Storage Account with account level cool tiering
-
Upgrade the Azure Storage Account to General Purpose v2 (GPv2)
-
Move the receipts older than 90 days to the new storage account using AzCopy
-
Move receipts older than 90 days to the cool tier using the storage lifecycle
-
Move receipts older than 90 days to the archieve tier using the storage lifecycle
Questão 41
Questão
You are developing an app that is designed to upload data to an Azure storage account. Data is uploaded as a blob to a container named mycontainer in a storage account named CompanyAct
You need to move the blob to a different storage account. The copy should run asynchronously. If the copy fails, it should be possible to restart the copy at or near the point of failure.
What should you use to copy the blob?
Responda
-
The Start-AzureStorageBlobIncrementalCopy Powershell cmdlet
-
The az storage blob Azure CLI command
-
The Start-AzureStorageBlobCopy PowerShell cmdlet
-
The AzCopy command
Questão 42
Questão
You create a blob storage account in Azure.
You need to add metadata to a container in the account.
Which HTTP method should you use?
Questão 43
Questão
A company is building a traffic monitoring system. The system would be monitoring the traffic along 4 highways. The system would be responsible for producing a time series-based analysis report for each highway.
The traffic sensors on each highway have been configured to send its data to Azure Event Hubs. The data from Event Hubs is then consumed by three departments. Each department makes use of an Azure Web App to display the data.
You have to implement the Azure Event Hub instance. You need to implement a solution which ensures data throughput is maximized and latency is minimized.
Which of the following would you use as the partition key?
Responda
-
Highway
-
Department
-
Timestamp
-
Datestamp
Questão 44
Questão
You are going to deploy a web application onto Azure. You would make use of the App Service on Linux. You go ahead and create an App Service Plan. You then go ahead and publish a custom docker image onto the Azure Web App. You need to access the console logs generated from the container in real time.
You need to complete the following Azure CLI script for this (SEE THE IMAGE).
Which of the following would go into Slot 1?
Responda
-
config
-
download
-
show
-
tail
Questão 45
Questão
You are going to deploy a web application onto Azure. You would make use of the App Service on Linux. You go ahead and create an App Service Plan. You then go ahead and publish a custom docker image onto the Azure Web App. You need to access the console logs generated from the container in real time.
You need to complete the following Azure CLI script for this (SEE THE IMAGE).
Which of the following would go into Slot 2?
Questão 46
Questão
You have to develop an ASP.Net Core application. The application is used to work with blobs in an Azure storage account. The application authenticates via Azure AD credentials.
Role based access has been implemented on the containers that contain the blobs. These roles have been assigned to the users.
You have to configure the application so that the user's permissions can be used with the Azure Blob containers.
Which of the following would you use as the permission for the Microsoft Graph API?
Responda
-
User.Read
-
User.Write
-
client_id
-
user_impersonation
Questão 47
Questão
You are developing an e-Commerce Web App.
You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure Active
Directory (AAD).
What should you do on the e-Commerce Web App?
Responda
-
Run the az keyvault secret command
-
Enable Azure AD Connect
-
Enable Managed Service Identity (MSI)
-
Create an Azure AD service principal
Questão 48
Questão
You have developed a Web App for your company. The Web App provides services and must run in multiple regions.
You want to be notified whenever the Web App uses more than 85 percent of the available CPU cores over a 5 minute period. Your solution must minimize costs.
Which command should you use in SLOT 1?
Responda
-
CPU Usage
-
Percentage CPU
-
avg Percentage CPU
Questão 49
Questão
You have developed a Web App for your company. The Web App provides services and must run in multiple regions.
You want to be notified whenever the Web App uses more than 85 percent of the available CPU cores over a 5 minute period. Your solution must minimize costs.
Which command should you use in SLOT 2?
Responda
-
--windows size
-
--evaluation-frequency
-
--auto-migrate
Questão 50
Questão
You are a developer at your company.
You need to update the definitions for an existing Logic App.
What should you use?
Questão 51
Questão
You are developing a C++ application that compiles to a native application named process.exe. The application accepts images as input and returns images in one of the following image formats: GIF, PNG, or JPEG.
You must deploy the application as an Azure Function.
You need to configure the function and host json files.
How should you complete the json files in SLOT 1?
Responda
-
"type": "http"
-
"plataform": "gcm"
-
"database": "stream"
-
"path": "process.exe"
Questão 52
Questão
You are developing a C++ application that compiles to a native application named process.exe. The application accepts images as input and returns images in one of the following image formats: GIF, PNG, or JPEG.
You must deploy the application as an Azure Function.
You need to configure the function and host json files.
How should you complete the json files in SLOT 2?
Questão 53
Questão
You are developing a C++ application that compiles to a native application named process.exe. The application accepts images as input and returns images in one of the following image formats: GIF, PNG, or JPEG.
You must deploy the application as an Azure Function.
You need to configure the function and host json files.
How should you complete the json files in SLOT 3?
Questão 54
Questão
You are implementing a software as a service (SaaS) ASP.NET Core web service that will run as an Azure Web App. The web service will use an on-premises
SQL Server database for storage. The web service also includes a WebJob that processes data updates. Four customers will use the web service.
✑ Each instance of the WebJob processes data for a single customer and must run as a singleton instance.
✑ Each deployment must be tested by using deployment slots prior to serving production data.
✑ Azure costs must be minimized.
✑ Azure resources must be located in an isolated network.
You need to configure the App Service plan for the Web App.
How should you configure the App Service plan in BOX 1?
Questão 55
Questão
You are implementing a software as a service (SaaS) ASP.NET Core web service that will run as an Azure Web App. The web service will use an on-premises
SQL Server database for storage. The web service also includes a WebJob that processes data updates. Four customers will use the web service.
✑ Each instance of the WebJob processes data for a single customer and must run as a singleton instance.
✑ Each deployment must be tested by using deployment slots prior to serving production data.
✑ Azure costs must be minimized.
✑ Azure resources must be located in an isolated network.
You need to configure the App Service plan for the Web App.
How should you configure the App Service plan in BOX 2?
Responda
-
Isolated
-
Standard
-
Premium
-
Comsumption
Questão 56
Questão
You are developing an Azure Web App. You configure TLS mutual authentication for the web app.
You need to validate the client certificate in the web app. To answer, select the appropriate option in the answer area in BOX 1.
Responda
-
HTTP request header
-
Client cookie
-
HTTP message body
-
URL query string
Questão 57
Questão
You are developing an Azure Web App. You configure TLS mutual authentication for the web app.
You need to validate the client certificate in the web app. To answer, select the appropriate option in the answer area in BOX 2.
Questão 58
Questão
You are developing an application that is going to making use of the Azure Service Bus. You have to create filters based on the different types of subscribers that would subscribe to the topic. The broad classification of these subscribers are:
- Subscribers should be able to receive all messages being sent to the topic;
- Subscribers should NOT be able to receive all messages being sent to the topic;
- Subscribers should be able to receive messages based on a SQL-like conditional expression.
Which of the following would you use as the filter condition for the requirement?
"Subscribers should be able to receive all messages being sent to the topic"
Responda
-
Boolean filters
-
Primary filters
-
SQL filters
-
Correlation filters
Questão 59
Questão
You are developing an application that is going to making use of the Azure Service Bus. You have to create filters based on the different types of subscribers that would subscribe to the topic. The broad classification of these subscribers are:
- Subscribers should be able to receive all messages being sent to the topic;
- Subscribers should NOT be able to receive all messages being sent to the topic;
- Subscribers should be able to receive messages based on a SQL-like conditional expression.
Which of the following would you use as the filter condition for the requirement?
"Subscribers should be able to receive messages based on a SQL-like conditional expression"
Responda
-
Boolean filters
-
Primary filters
-
SQL Filters
-
Correlation filters
Questão 60
Questão
You have to load data into a cache in order to improve the performance and maintain data consistency between data store and data in cache. Which of the following are suitable scenarios to use CACHE-ASIDE pattern? Choose 2 answers from the options given below:
Responda
-
Static cached data which can be fit on startup
-
Native read-through and write-through cache operations are not provided
-
Unpredictable resource demand
-
Caching session state information hosted in a web farm
Questão 61
Questão
You are developing an Azure Function App that processes images that are uploaded to an Azure Blob container.
Images must be processed as quickly as possible after they are uploaded, and the solution must minimize latency. You create code to process images when the
Function App is triggered.
You need to configure the Function App.
What should you do?
Responda
-
Use an App Service plan. Configure the Function App to use an Azure Blob Storage input trigger.
-
Use a Consumption plan. Configure the Function App to use an Azure Blob Storage trigger.
-
Use a Consumption plan. Configure the Function App to use a Timer trigger.
-
Use an App Service plan. Configure the Function App to use an Azure Blob Storage trigger.
-
Use a Consumption plan. Configure the Function App to use an Azure Blob Storage input trigger.
Questão 62
Questão
You are configuring a development environment for your team. You deploy the latest Visual Studio image from the Azure Marketplace to your Azure subscription.
The development environment requires several software development kits (SDKs) and third-party components to support application development across the organization. You install and customize the deployed virtual machine (VM) for your development team. The customized VM must be saved to allow provisioning of a new team member development environment.
You need to save the customized VM for future provisioning.
Which tool or service should you use in BOX 1?
Questão 63
Questão
You are configuring a development environment for your team. You deploy the latest Visual Studio image from the Azure Marketplace to your Azure subscription.
The development environment requires several software development kits (SDKs) and third-party components to support application development across the organization. You install and customize the deployed virtual machine (VM) for your development team. The customized VM must be saved to allow provisioning of a new team member development environment.
You need to save the customized VM for future provisioning.
Which tool or service should you use in BOX 2?
Responda
-
Azure Blob Storage
-
Azure Data Lake Storage
-
Azure File Storage
-
Azure Table Storage
Questão 64
Questão
You are developing an Azure Function app.
The app must meet the following requirements:
✑ Enable developers to write the functions by using the Rust language.
✑ Declaratively connect to an Azure Blob Storage account.
You need to implement the app.
Which Azure Function app feature should you use in FEATURE 1? To answer, select the appropriate feature to the correct requirement. Each feature may be used once, more than once, or not at all.
Responda
-
Custom handler
-
Extension bundle
-
Trigger
-
Runtime
-
Policy
-
Hosting plan
Questão 65
Questão
You are developing an Azure Function app.
The app must meet the following requirements:
✑ Enable developers to write the functions by using the Rust language.
✑ Declaratively connect to an Azure Blob Storage account.
You need to implement the app.
Which Azure Function app feature should you use in FEATURE 2? To answer, select the appropriate feature to the correct requirement. Each feature may be used once, more than once, or not at all.
Responda
-
Custom handler
-
Extension bundle
-
Trigger
-
Runtime
-
Policy
-
Hosting plan
Questão 66
Questão
You develop Azure solutions.
A .NET application needs to receive a message each time an Azure virtual machine finishes processing data. The messages must NOT persist after being processed by the receiving application.
You need to implement the .NET object that will receive the messages.
Which object should you use?
Responda
-
QueueClient
-
SubscriptionClient
-
TopicClient
-
CloudQueueClient
Questão 67
Questão
You are developing a web service that will run on Azure virtual machines that use Azure Storage. You configure all virtual machines to use managed identities.
You have the following requirements:
✑ Secret-based authentication mechanisms are not permitted for accessing an Azure Storage account.
✑ Must use only Azure Instance Metadata Service endpoints.
You need to write code to retrieve an access token to access Azure Storage. What's the best option for CODE SEGMENT 1? To answer, select the appropriate code segment to the correct location. Each code segment may be used once or not at all.
Responda
-
http://localhost:50342/oauth/token
-
http://169.254.169.254:50342/oauth2/token
-
http://localhost:50342/metadata/identity/oauth2/token
-
http://169.254.169.254/metadata/identity/oauth2/token
Questão 68
Questão
You are developing a web service that will run on Azure virtual machines that use Azure Storage. You configure all virtual machines to use managed identities.
You have the following requirements:
✑ Secret-based authentication mechanisms are not permitted for accessing an Azure Storage account.
✑ Must use only Azure Instance Metadata Service endpoints.
You need to write code to retrieve an access token to access Azure Storage. What's the best option for CODE SEGMENT 2? To answer, select the appropriate code segment to the correct location. Each code segment may be used once or not at all.
Responda
-
XDocument.Parse(payload);
-
new MultipartContent(payload);
-
new NetworkCredential("Azure",payload);
-
JsonConvert.DeserializedObject<Dictionary<string, string>>(payload);
Questão 69
Questão
You are developing a microservices solution. You plan to deploy the solution to a multinode Azure Kubernetes Service (AKS) cluster.
You need to deploy a solution that includes the following features:
✑ reverse proxy capabilities
✑ configurable traffic routing
✑ TLS termination with a custom certificate
Which component should you use in BOX 1? To answer, select the appropriate component to the correct requirement. Each component may be used once, more than once, or not at all.
Responda
-
Helm
-
Draft
-
Brigade
-
KubeCtl
-
Ingress Controller
-
CoreDNS
-
Virtual Kubelet
Questão 70
Questão
You are developing a microservices solution. You plan to deploy the solution to a multinode Azure Kubernetes Service (AKS) cluster.
You need to deploy a solution that includes the following features:
✑ reverse proxy capabilities
✑ configurable traffic routing
✑ TLS termination with a custom certificate
Which component should you use in BOX 2? To answer, select the appropriate component to the correct requirement. Each component may be used once, more than once, or not at all.
Responda
-
Helm
-
Draft
-
Brigade
-
KubeCtl
-
Ingress Controller
-
CoreDNS
-
Virtual Kubelet
Questão 71
Questão
You are developing a microservices solution. You plan to deploy the solution to a multinode Azure Kubernetes Service (AKS) cluster.
You need to deploy a solution that includes the following features:
✑ reverse proxy capabilities
✑ configurable traffic routing
✑ TLS termination with a custom certificate
Which component should you use in BOX 3? To answer, select the appropriate component to the correct requirement. Each component may be used once, more than once, or not at all.
Responda
-
Helm
-
Draft
-
Brigade
-
KubeCtl
-
Ingress Controller
-
CoreDNS
-
Virtual Kubelet
Questão 72
Questão
You are developing an application to collect the following telemetry data for delivery drivers: first name, last name, package count, item id, and current location coordinates. The app will store the data in Azure Cosmos DB.
You need to configure Azure Cosmos DB to query the data.
Which value should you use in BOX 1?
Responda
-
Gremlin
-
Table API
-
Core (SQL)
Questão 73
Questão
You are developing an application to collect the following telemetry data for delivery drivers: first name, last name, package count, item id, and current location coordinates. The app will store the data in Azure Cosmos DB.
You need to configure Azure Cosmos DB to query the data.
Which value should you use in BOX 2?
Responda
-
first name
-
last name
-
package count
-
item id
Questão 74
Questão
An organization deploys a blob storage account. Users take multiple snapshots of the blob storage account over time.
You need to delete all snapshots of the blob storage account. You must not delete the blob storage account itself.
How should you complete the CODE SEGMENT 1?
Responda
-
delete_container
-
delete_snapshots
-
snapshot_blob
-
snapshots_present
Questão 75
Questão
An organization deploys a blob storage account. Users take multiple snapshots of the blob storage account over time.
You need to delete all snapshots of the blob storage account. You must not delete the blob storage account itself.
How should you complete the CODE SEGMENT 2?
Questão 76
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution:
1. Create an Azure Key Vault key named skey.
2. Encrypt the intake forms using the public key portion of skey.
3. Store the encrypted data in Azure Blob storage.
Does the solution meet the goal?
Questão 77
Questão
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution:
1. Create an Azure Cosmos DB database with Storage Service Encryption enabled.
2. Store the intake forms in the Azure Cosmos DB database.
Does the solution meet the goal?
Questão 78
Questão
Your company has a web app named WebApp1.
You use the WebJobs SDK to design a triggered App Service background task that automatically invokes a function in the code every time new data is received in a queue.
You are preparing to configure the service processes a queue data item.
Which of the following is the service you should use?
Responda
-
Logic Apps
-
WebJobs
-
Flow
-
Functions
Questão 79
Questão
Your company has an Azure subscription.
You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.
You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.
Which of the following is the value that you should configure for the platformFaultDomainCount property?
Responda
-
10
-
30
-
Min Value
-
Max Value
Questão 80
Questão
Your company has an Azure subscription.
You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.
You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.
Which of the following is the value that you should configure for the platformUpdateDomainCount property?