AZ204-Quiz10

Category: None

AZ204-Q351

You deploy an Azure App Service web app. You create an app registration for the app in Azure Active Directory (Azure AD)

and Twitter.

The app must authenticate users and must use SSL for all communications. The app must use Twitter as the identity provider.

You need to validate the Azure AD request in the app code.

What should you validate?

ID token header

ID token signature

HTTP response code

Tenant ID

Category: None

AZ204-Q352

A development team is creating a new REST API. The API will store data in Azure Blob storage. You plan to deploy the API to

Azure App Service.

Developers must access the Azure Blob storage account to develop the API for the next two months. The Azure Blob storage

account must not be accessible by the developers after the two-month time period.

You need to grant developers access to the Azure Blob storage account.

What should you do?

Generate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers.

Create and apply a new lifecycle management policy to include a last accessed date value. Apply the policy to the Azure Blob storage account.

Provide all developers with the access key for the Azure Blob storage account. Update the API to include the Coordinated Universal Time (UTC) timestamp for the request header.

Grant all developers access to the Azure Blob storage account by assigning role-based access control (RBAC) roles.

Category: None

AZ204-Q353

You manage a data processing application that receives requests from an Azure Storage queue.

You need to manage access to the queue. You have the following requirements:

-Provide other applications access to the Azure queue.

-Ensure that you can revoke access to the queue without having to regenerate the storage account keys.

-Specify access at the queue level and not at the storage account level.

Which type of shared access signature (SAS) should you use?

Service SAS with a stored access policy

Account SAS

User Delegation SAS

Service SAS with ad hoc SAS

Category: None

AZ204-Q354

You are building a web application that uses the Microsoft identity platform for user authentication.

You are implementing user identification for the web application.

You need to retrieve a claim to uniquely identify a user.

Which claim type should you use?

aud

nonce

oid

idp

Category: None

AZ204-Q355

You are developing an Azure Function that calls external APIs by providing an access token for the API. The access

token is stored in a secret named token in an Azure Key Vault named mykeyvault.

You need to ensure the Azure Function can access to the token. Which value should you store in the Azure Function App

configuration?

KeyVault:mykeyvault;Secret:token

App:Settings:Secret:mykeyvault:token

AZUREKVCONNSTR_ https://mykeyveult.vault.ezure.net/secrets/token/

@Microsoft.KeyVault(SecretUri=https://mykeyvault.vault.azure.net /secrets/token/)

Category: None

AZ204-Q356

A company maintains multiple web and mobile applications. Each application uses custom in-house identity providers

as well as social identity providers.

You need to implement single sign-on (SSO) for all the applications.

What should you do?

Use Azure Active Directory B2C (Azure AD B2C) with custom policies.

Use Azure Active Directory B2B (Azure AD B2B) and enable external collaboration.

Use Azure Active Directory B2C (Azure AD B2C) with user flows.

Use Azure Active Directory B2B (Azure AD B2B).

Category: None

AZ204-Q357

You are developing a web application that uses the Microsoft identity platform for user and resource authentication. The

web application calls several REST APIs.

A REST API call must read the user’s calendar. The web application requires permission to send an email as the user.

You need to authorize the web application and the API.

Which parameter should you use?

tenant

code_challenge

state

client_id

scope

Category: None

AZ204-Q358

You develop and deploy an Azure App Service web app named App1. You create a new Azure Key Vault named Vault1. You

import several API keys, passwords, certificates, and cryptographic keys into Vault1.

You need to grant App1 access to Vault1 and automatically rotate credentials. Credentials must not be stored in code.

What should you do?

Enable App Service authentication for Appl. Assign a custom RBAC role to Vault1.

Add a TLS/SSL binding to App1.

Upload a self-signed client certificate to Vault1. Update App1 to use the client certificate.

Assign a managed identity to App1.

Category: None

AZ204-Q359

You need to ensure the security policies are met.

What code do you add at line CS07 of ConfigureSSE.ps1? (Case Study)

-PermissionsToKeys create, encrypt, decrypt

-PermissionsToCertificates create, encrypt, decrypt

-PermissionsToCertificates wrapkey, unwrapkey, get

-PermissionsToKeys wrapkey, unwrapkey, get

Category: None

AZ204-Q360

You need to secure the Shipping Logic App. What should you use? (Case Study)

Azure App Service Environment (ASE)

Integration Service Environment (ISE)

VNet service endpoint

Azure AD B2B integration

Category: None

AZ204-Q361

You need to grant access to the retail store location data for the inventory service development effort.

What should you use?

Azure AD access token

Azure RBAC role

Shared access signature (SAS) token

Azure AD ID token

Azure AD refresh token

Category: None

AZ204-Q362

You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the

world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that

send data.

You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier. Additional

stores are expected to open in the future.

You need to implement a solution to receive the device data.

Solution: Provision an Azure Event Grid. Configure the machine identifier as the partition key and enable capture.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q363

You develop Azure solutions. A .NET application needs to receive a message each time an Azure virtual machine

finishes processing data. The messages must NOT persist after being processed by the receiving application.

You need to implement the .NET object that will receive the messages.

Which object should you use?

QueueClient

SubscriptionClient

TopicClient

CloudQueueClient

Category: None

AZ204-Q364

You are developing an application to store information about the organizational structure for a company. Users

must be able to determine which people report to a particular manager, the office where employees work, and the

projects that are assigned to an employee.

Which Azure Cosmos DB API should you use for the application?

Core

Cassandra

Table API

Gremlin

MongoDB

Category: None

AZ204-Q365

Your company is designing an application named App1 that will use data from Azure SQL Database. App1 will be accessed over the internet by many users.

You need to recommend a solution for improving the performance of App1. What should you include in the recommendation?

Azure HPC cache

ExpressRoute

a CDN profile

Azure Cache for Redis

Category: None

AZ204-Q366

You are developing an application to manage shipping information for cargo ships. The application will use Azure

Cosmos D8 for storage.

The application must run offline when ships are at sea The application must be connected to Azure when ships are in

port.

Which Azure Cosmos D8 API should you use for the application?

Core

MongoDe

Cassandra

Gremlin

Category: None

AZ204-Q367

You are developing several microservices to deploy to a Azure Service cluster. The microservices manage data

stored in Azure Cosmos DB and Azure Blob storage. The data is secured by using customer-managed keys stored in

Aue Key Vault.

You must automate key rotation for all Key Vault keys and allow for manual key rotation. Keys must rotate every three

months. Notifications Of expiring keys must be sent before key expiry.

You need to configure key rotation and enable key expiry notifications.

Which two actions should you perform? Each correct answer presents part Of solution. NOTE: Each correct selection is

worth one point.

Create and configure a new Azure Event Grid instance.

Create configure a key rotation policy during key creation

Create and assign an Azure Key Vault access

Configure Azure Key Vault

Category: None

AZ204-Q368

You need to access data from the user claim object in the e-commerce web app. What

should you do first?

Write custom code to make a Microsoft Graph API call from the e-commerce web app.

Assign the Contributor RBAC role to the e-commerce web app by using the Resource Manager create role assignment API.

Update the e-commerce web app to read the HTTP request header values.

Using the Azure CLI, enable Cross-origin resource sharing (CORS) from the e-commerce checkout API to the e-commerce web app.

Category: None

AZ204-Q369

You need to store the user agreements.

Where should you store the agreement after it is completed?

Azure Storage queue

Azure Event Hub

Azure Service Bus topic

Azure Event Grid topic

Category: None

AZ204-Q370

You are developing a web application that uses the Microsoft identity platform to authenticate users and resources,

The web application calls several REST APIs.

The APIs require an access token from the Microsoft identity platform. You need to request a token.

Which three properties should you use? Each correct answer presents part of the solution. NOTE: Each correct selection

is worth one point.

Application name

Application secret

Application ID

Supported account type

Redirect URI/URL

Category: None

AZ204-Q371

You need to implement a solution to resolve the retail store location data issue.

Which three Azure Blob features should you enable? Each correct answer presents part of the solution. NOTE Each

correct selection is worth one point

Soft delete

Change feed

Snapshots

Versioning

Object replication

Immutability

Category: None

AZ204-Q372

You need to correct the RequestUserApproval Function app error. What should you do?

Update line RA13 to use the async keyword and return an HttpRequest object value.

Configure the Function app to use an App Service hosting pla

Enable the Always On setting of the hosting plan.

Update the function to be stateful by using Durable Functions to process the request payload.

Update the functionTimeout property of the host.json project file to 15 minutes.

Category: None

AZ204-Q373

You are writing code to create and run an Azure Batch job. You have created a pool of compute nodes.

You need to choose the right class and its method to submit a batch job to the Batch service. Which method should you

use?

JobOperations.CreateJobO

CloudJob.Enable(IEnumerable)

CloudJob.CommitAsync(|Enumerable, CancellationToken)

JobOperations.EnableJob(String, |Enumerable)

JobOperations.EnableJobAsync(Strin

IEnumerable. CancellationToken)

Category: None

AZ204-Q374

A company is developing a solution that allows smart refrigerators to send temperature information to a central location. You have an existing Service Bus.

The solution must receive and store message until they can be processed. You create an Azure Service Bus Instance by providing a name, pricing tier, subscription, resource group, and location.

You need to complete the configuration.

Which Azure CLI or PowerShell command should you run?

A. az servicebus queue create

–resource-group fridge-rg

–namespace-name fridge-ns

–name fridge-q

B. New-AzureRmResourceGroup

-Name fridge-rg

-Location fridge-loc

C. New-AzureRmServiceBusNamespace

-ResourceGroupName fridge-rg

-NamespaceName fridge-loc

-Location fridge-loc

D. connectionString-$)az serviceBus namespace authorization-rule keys list

–resource-group fridge-rg

–fridge-ns fridge-ns

-~-query primaryConnectionString -output tsv)

Option A

Option B

Option C

Option D

Category: None

AZ204-Q375

Your company purchases an Azure subscription and plans to migrate several on-premises virtual machines to

Azure. You need to design the infrastructure required (or the Azure virtual machines solution. What should you

include in the design?

the number of Azure Storage accounts

the settings of the Azure virtual networks

the size of the virtual machines

the number of Azure regions

Category: None

AZ204-Q376

You need to configure the ContentUploadService deployment.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Add the following markup to line CS23: types: Private

Add the following markup to line CS24: osType: Windows

Add the following markup to line CS24: osType: Linux

Add the following markup to line CS23: types: Public

Category: None

AZ204-Q377

You are developing an Azure Function App that runs in an App Service Plan. The Azure Function is triggered by a

Timer object. You observe that the Azure Function does not reliably trigger when scheduled. Which two actions should

you perform?

Verify that Always On is enabled.

Modify the trigger to use a SignalR trigger.

Ensure that the function has a retry configured.

Modify the trigger to use Consumption mode instead of the App Service plan.

Category: None

AZ204-Q378

You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the

world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that

send data.

You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier. Additional

stores are expected to open in the future.

You need to implement a solution to receive the device data.

Solution: Provision an Azure Notification Hub. Register all devices with the hub. Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q379

You develop and deploy an Azure App Service API app to a Windows-hosted deployment slot named Development.

You create additional deployment slots named Testing and Production. You enable auto swap on the Production

deployment slot.

You need to ensure that scripts run and resources are available before a swap operation occurs.

Solution: Disable auto swap. Update the app with a method named statuscheck to run the scripts. Re-enable auto swap and

deploy the app to the Production slot.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q380

You need to secure the Azure Functions to meet the security requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled.

Store the RSA-HSM key in Azure Blob storage with an immutability policy applied to the container.

Create a free tier Azure App Configuration instance with a new Azure AD service principal.

Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

Store the RSA-HSM key in Azure Cosmos DB. Apply the built-in policies for customer-managed keys and allowed locations.

Category: None

AZ204-Q381

You are developing a software solution for an autonomous transportation system. The solution uses large data

sets and Azure Batch processing to simulate navigation sets for entire fleets of vehicles.

You need to create compute nodes for the solution on Azure Batch. What should you do?

In Python, implement the class: TaskAddParameter

In Python, implement the class: JobAddParameter

In the Azure portal, create a Batch account

In a .NET method, call the method: BatchClient.PoolOperations.CreateJob

Category: None

AZ204-Q382

You must implement Application Insights instrumentation capabilities utilizing the Azure Mobile Apps SDK to

provide meaningful analysis of user interactions with a mobile app.

You need to capture the data required to implement the Usage Analytics feature of Application Insights. Which three data

values should you capture? Each correct answer presents part of the solution

NOTE: Each correct selection is worth one point.

Trace

Session Id

Exception

User Id

Events

Category: None

AZ204-Q383

You are developing an Azure Function App that generates end of day reports (or retail stores. All stores dose at

11 PM each day. Reports must be run one hour after dosing. You configure the function to use a Timer trigger that

runs at midnight Customers in the Western United States Pacific Time zone (UTC – 8) report that the Azure Function

runs before the stores dose. You need to ensure that the Azure Function runs at midnight in the Pacific Time zone.

What should you do?

Configure the Azure Function to run in the West US region.

Add an app setting named WEBSITE_TIME_ZONE that uses the value Pacific Standard Time

Change the Timer trigger to run at 7 AM

Update the Azure Function to a Premium plan.

Category: None

AZ204-Q384

You have an Azure App Service web app named WebApp1 and an Azure Functions app named Function 1. WebApp1 is

associated with an Application Insights instance named appinsights1.

You configure a web test and a corresponding alert for WebApp1 in appinsights1. Each alert triggers a delivery of email to

your mailbox.

You need to ensure that each alert also triggers execution of Function1.

Solution: Configure an Azure Monitor Insights workbook.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q385

You are building a loyalty program for a major snack producer. When customers buy a snack at any of 100 participating

retailers the event is recorded in Azure Event Hub. Each retailer is given a unique identifier that is used as the primary

identifier for the loyalty program.

Retailers must be able to be added or removed at any time. Retailers must only be able to record sales for themselves.

You need to ensure that retailers can record sales.

What should you do?

Use publisher policies for retailers.

Define a namespace for each retailer

Create a partition for each retailer.

Category: None

AZ204-Q386

You need to support local development testing for developers. Which tool should you use?

Azurite

Azure Storage Emulator

SQL Server Management Studio (SSMS)

Azure Storage Explorer

Category: None

AZ204-Q387

You are implementing an application by using Azure Event Grid to push near-real-time information to customers.

You have the following requirements:

* You must send events to thousands of customers that include hundreds of various event types.

* The events must be filtered by event type before processing.

* Authentication and authorization must be handled by using Microsoft Entra ID.

* The events must be published to a single endpoint.

You need to implement Azure Event Grid.

Solution: Publish events to a partner topic. Create an event subscription for each customer.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q388

You manage an Azure subscription that contains 100 Azure App Service web apps. Each web app is associated with art individual Application Insights instance.

You plan to remove Classic availability tests from all Application Insights instances that have this functionality configured.

You have the following PowerShell statement：

Get-AzApplicationlnsifihtsrtebTest | Where-Object （$condition）

You need to set the value of the Scondition variable.

Which value should you use？

$_.Type -eq “standard”

$_.Type -eq “ping”

$_.WebTestKind -eq “ping”

$_.WebTestKind -eq “standard”

Category: None

AZ204-Q389

You are updating an application that stores data on Azure and uses Azure Cosmos DB for storage. The application

stores data in multiple documents associated with a single username.

The application requires the ability to update multiple documents for a username in a single ACID operation.

You need to configure Azure Cosmos DB.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Configure Azure Cosmos DB to use the Azure Cosmos DB for Apache Gremlin API.

Configure Azure Cosmos DB to use the Azure Cosmos DB for MongoDB API.

Create a collection sharded on username to store documents.

Create an unsharded collection to store documents.

Category: None

AZ204-Q390

You are developing a Java application to be deployed in Azure. The application stores sensitive data in

Azure Cosmos DB. You need to configure Always Encrypted to encrypt the sensitive data inside the application.

What should you do first?

Create a customer-managed key (CMK) and store the key in a new Azure Key Vault instance.

Create an Azure AD managed identity and assign the identity to a new Azure Key Vault instance.

Create a data encryption key (DEK) by using the Azure Cosmos DB SDK and store the key in Azure Cosmos DB.

Create a new container to include an encryption policy with the JSON properties to be encrypted.

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question

31. Question

32. Question

33. Question

34. Question

35. Question

36. Question

37. Question

38. Question

39. Question

40. Question