AZ204-Quiz8

Category: None

AZ204-Q271

You have two Hyper-V hosts named Host1 and Host2. Host1 has an Azure virtual machine named

VM1 that was deployed by using a custom Azure Resource

Manager template.

You need to move VM1 to Host2.

What should you do?

From the Update management blade, click Enable.

From the Overview blade, move VM1 to a different subscription.

From the Redeploy blade, click Redeploy.

From the Profile blade, modify the usage location.

Category: None

AZ204-Q272

Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-joined

device. The cluster is located in a resource group.

Developers have created an application named MyApp. MyApp was packaged into a container image.

You need to deploy the YAML manifest file for the application.

Solution: You install the Azure CLI on the device and run the kubectl apply “”f myapp.yaml command.

Does this meet the goal?

Yes

No

Category: None

AZ204-Q273

Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-

joined device. The cluster is located in a resource group.

Developers have created an application named MyApp. MyApp was packaged into a container image.

You need to deploy the YAML manifest file for the application.

Solution: You install the docker client on the device and run the docker run -it microsoft/azure-

cli:0.10.17 command.

Does this meet the goal?

Yes

No

Category: None

AZ204-Q274

Your company has a web app named WebApp1.

You use the WebJobs SDK to design a triggered App Service background task that

automatically invokes a function in the code every time new data is received in a queue.

You are preparing to configure the service processes a queue data item.

Which of the following is the service you should use?

Logic Apps

WebJobs

Flow

Functions

Category: None

AZ204-Q275

Your company has an Azure subscription.

You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager

(ARM) templates. The virtual machines will be included in a single availability set.

You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible

in the event of fabric failure or maintenance.

Which of the following is the value that you should configure for the platformFaultDomainCount property?

10

30

Min Value

Max Value

Category: None

AZ204-Q276

Your company has an Azure subscription.

You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager

(ARM) templates. The virtual machines will be included in a single availability set.

You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible

in the event of fabric failure or maintenance.

Which of the following is the value that you should configure for the platformUpdateDomainCount property?

10

20

30

40

Category: None

AZ204-Q277

This question requires that you evaluate the underlined text to determine if it is correct.

You company has an on-premises deployment of MongoDB, and an Azure Cosmos DB account that makes use of the

MongoDB API.

You need to devise a strategy to migrate MongoDB to the Azure Cosmos DB account.

You include the Data Management Gateway tool in your migration strategy.

Instructions: Review the underlined text. If it makes the statement correct, select ‘No change required.” If the

statement is incorrect, select the answer choice that makes the statement correct.

No change required

mongorestore

Azure Storage Explorer

AzCopy

Category: None

AZ204-Q278

You are developing an e-Commerce Web App.

You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by

using Azure App Service authentication and Azure Active

Directory (AAD).

What should you do on the e-Commerce Web App?

Run the az keyvault secret command.

Enable Azure AD Connect.

Enable Managed Service Identity (MSI).

Create an Azure AD service principal.

Category: None

AZ204-Q279

You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a

set period of 90 days.

Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

EnabledForDeployment

EnablePurgeProtection

EnabledForTemplateDeployment

EnableSoftDelete

Category: None

AZ204-Q280

You manage an Azure SQL database that allows for Azure AD authentication.

You need to make sure that database developers can connect to the SQL database via Microsoft SQL Server

Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory

account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum.

Which of the following should you implement?

Azure AD token.

Azure Multi-Factor authentication.

Active Directory integrated authentication.

OATH software tokens.

Category: None

AZ204-Q281

You are developing an application to transfer data between on-premises file servers and Azure Blob storage. The

application stores keys, secrets, and certificates in Azure Key Vault and makes use of the Azure Key Vault APIs.

You want to configure the application to allow recovery of an accidental deletion of the key vault or key vault objects

for 90 days after deletion.

What should you do?

Run the Add-AzKeyVaultKey cmdlet.

Run the az keyvault update –enable-soft-delete true –enable-purge- protection true CLI.

Implement virtual network service endpoints for Azure Key Vault.

Run the az keyvault update –enable-soft-delete false CLI.

Category: None

AZ204-Q282

. You are configuring a web app that delivers streaming video to users. The application makes use of

16. You are configuring a web app that delivers streaming video to users. The application makes use of

continuous integration and deployment.

You need to ensure that the application is highly available and that the users’ streaming experience is

constant. You also want to configure the application to store data in a geographic location that is nearest to

the user.

Solution: You include the use of Azure Redis Cache in your design.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q283

You are configuring a web app that delivers streaming video to users. The application makes use of

continuous integration and deployment.

You need to ensure that the application is highly available and that the users’ streaming experience is

constant. You also want to configure the application to store data in a geographic location that is nearest to

the user.

Solution: You include the use of an Azure Content Delivery Network (CDN) in your design.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q284

You are configuring a web app that delivers streaming video to users. The application makes use of

continuous integration and deployment.

You need to ensure that the application is highly available and that the users’ streaming experience is constant.

You also want to configure the application to store data in a geographic location that is nearest to the user.

Solution: You include the use of a Storage Area Network (SAN) in your design.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q285

You develop a Web App on a tier D1 app service plan.

You notice that page load times increase during periods of peak traffic.

You want to implement automatic scaling when CPU load is above 80 percent. Your solution

must minimize costs.

What should you do first?

Enable autoscaling on the Web App.

Switch to the Premium App Service tier plan.

Switch to the Standard App Service tier plan.

Switch to the Azure App Services consumption plan.

Category: None

AZ204-Q286

Your company’s Azure subscription includes an Azure Log Analytics workspace.

Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server 2016, and is

linked to the Azure Log Analytics workspace. The Azure Log Analytics workspace is set up to gather performance counters

associated with security from these linked servers.

You must configure alerts based on the information gathered by the Azure Log Analytics workspace.

You have to make sure that alert rules allow for dimensions, and that alert creation time should be kept to a minimum.

Furthermore, a single alert notification must be created when the alert is created and when the alert is resolved.

You need to make use of the necessary signal type when creating the alert rules.

Which of the following is the option you should use?

The Activity log signal type.

The Application Log signal type.

The Metric signal type.

The Audit Log signal type.

Category: None

AZ204-Q287

You are developing a .NET Core MVC application that allows customers to research independent holiday

accommodation providers.

You want to implement Azure Search to allow the application to search the index by using various criteria to

locate documents related to accommodation.

You want the application to allow customers to search the index by using regular expressions.

What should you do?

Configure the SearchMode property of the SearchParameters class.

Configure the QueryType property of the SearchParameters class.

Configure the Facets property of the SearchParameters class.

Configure the Filter property of the SearchParameters class.

Category: None

AZ204-Q288

You are a developer at your company.

You need to update the definitions for an existing Logic App.

What should you use?

the Enterprise Integration Pack (EIP)

the Logic App Code View

the API Connections

the Logic Apps Designer

Category: None

AZ204-Q289

You are developing a solution for a public facing API.

The API back end is hosted in an Azure App Service instance. You have implemented a RESTful service for the

API back end.

You must configure back-end authentication for the API Management service instance.

Solution: You configure Basic gateway credentials for the Azure resource.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q290

You are developing a .NET Core MVC application that allows customers to research independent holiday

accommodation providers.

You want to implement Azure Search to allow the application to search the index by using various criteria to locate

documents related to accommodation venues.

You want the application to list holiday accommodation venues that fall within a specific price range and are within

a specified distance to an airport.

What should you do?

Configure the SearchMode property of the SearchParameters class.

Configure the QueryType property of the SearchParameters class.

Configure the Facets property of the SearchParameters class.

Configure the Filter property of the SearchParameters class.

Category: None

AZ204-Q291

You are developing an application that applies a set of governance policies for internal and external services, as well as

for applications.

You develop a stateful ASP.NET Core 2.1 web application named PolicyApp and deploy it to an Azure App Service Web App.

The PolicyApp reacts to events from

Azure Event Grid and performs policy actions based on those events.

You have the following requirements:

c® Authentication events must be used to monitor users when they sign in and sign out.

c® All authentication events must be processed by PolicyApp.

c® Sign outs must be processed as fast as possible.

What should you do?

Create a new Azure Event Grid subscription for all authentication events. Use the subscription to process sign-out events.

Create a separate Azure Event Grid handler for sign-in and sign-out events.

Create separate Azure Event Grid topics and subscriptions for sign-in and sign-out events.

Add a subject prefix to sign-out events. Create an Azure Event Grid subscription. Configure the subscription to use the subjectBeginsWith filter.

Category: None

AZ204-Q292

You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a

web service which then stores the photos in Azure

Storage Blob storage. The storage account type is General-purpose V2.

When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the

image. The process to produce a mobile-friendly version of the image must start in less than one minute.

You need to design the process that starts the photo processing.

Solution: Convert the Azure Storage account to a BlockBlobStorage storage account.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q293

You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic

volumes after it is published.

You must ensure that the website remains available and responsive while minimizing cost.

You need to deploy the website.

What should you do?

Deploy the website to a virtual machine. Configure the virtual machine to automatically scale when the CPU load is high.

Deploy the website to an App Service that uses the Shared service tier. Configure the App Service plan to automatically scale when the CPU load is high.

Deploy the website to a virtual machine. Configure a Scale Set to increase the virtual machine instance count when the CPU load is high.

Deploy the website to an App Service that uses the Standard service tier. Configure the App Service plan to automatically scale when the CPU load is high.

Category: None

AZ204-Q294

You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a

web service which then stores the photos in Azure

Storage Blob storage. The storage account type is General-purpose V2.

When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the

image. The process to produce a mobile-friendly version of the image must start in less than one minute.

You need to design the process that starts the photo processing.

Solution: Move photo processing to an Azure Function triggered from the blob upload.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q295

You are developing an application that uses Azure Blob storage.

The application must read the transaction logs of all the changes that occur to the blobs and the blob metadata

in the storage account for auditing purposes. The changes must be in the order in which they occurred, include

only create, update, delete, and copy operations and be retained for compliance reasons.

You need to process the transaction logs asynchronously.

What should you do?

Process all Azure Blob storage events by using Azure Event Grid with a subscriber Azure Function app.

Enable the change feed on the storage account and process all changes for available events.

Process all Azure Storage Analytics logs for successful blob events.

Use the Azure Monitor HTTP Data Collector API and scan the request body for successful blob events.

Category: None

AZ204-Q296

You are developing a web app that is protected by Azure Web Application Firewall (WAF). All traffic to the web app

is routed through an Azure Application

Gateway instance that is used by multiple web apps. The web app address is contoso.azurewebsites.net.

All traffic must be secured with SSL. The Azure Application Gateway instance is used by multiple web apps.

You need to configure the Azure Application Gateway for the web app.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

In the Azure Application Gateway’s HTTP setting, enable the Use for App service setting.

Convert the web app to run in an Azure App service environment (ASE).

Add an authentication certificate for contoso.azurewebsites.net to the Azure Application Gateway.

In the Azure Application Gateway’s HTTP setting, set the value of the Override backend path option to contoso22.azurewebsites.net.

Category: None

AZ204-Q297

You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service

which then stores the photos in Azure

Storage Blob storage. The storage account type is General-purpose V2.

When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The

process to produce a mobile-friendly version of the image must start in less than one minute.

You need to design the process that starts the photo processing.

Solution: Use the Azure Blob Storage change feed to trigger photo processing.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q298

You are developing a web application that runs as an Azure Web App. The web application stores data in Azure SQL

Database and stores files in an Azure

Storage account. The web application makes HTTP requests to external services as part of normal operations.

The web application is instrumented with Application Insights. The external services are OpenTelemetry compliant.

You need to ensure that the customer ID of the signed in user is associated with all operations throughout the overall system.

What should you do?

Add the customer ID for the signed in user to the CorrelationContext in the web application

On the current SpanContext, set the Traceld to the customer ID for the signed in user

Set the header Ocp-Apim-Trace to the customer ID for the signed in user

Create a new SpanContext with the TraceFlags value set to the customer ID for the signed in user

Category: None

AZ204-Q299

You develop an HTTP triggered Azure Function app to process Azure Storage blob data. The app is

triggered using an output binding on the blob.

The app continues to time out after four minutes. The app must process the blob data.

You need to ensure the app does not time out and processes the blob data.

Solution: Update the functionTimeout property of the host.json project file to 10 minutes.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q300

You are building a website that uses Azure Blob storage for data storage. You configure Azure Blob

storage lifecycle to move all blobs to the archive tier after 30 days.

Customers have requested a service-level agreement (SLA) for viewing data older than 30 days.

You need to document the minimum SLA for data recovery.

Which SLA should you use?

at least two days

between one and 15 hours

at least one day

between zero and 60 minutes

Category: None

AZ204-Q301

You develop Azure solutions.

You must connect to a No-SQL globally-distributed database by using the .NET API.

You need to create an object to configure and execute requests in the database.

Which code segment should you use?

new Container(EndpointUri, PrimaryKey);

new Database(EndpointUri, PrimaryKey);

new CosmosClient(EndpointUri, PrimaryKey);

Category: None

AZ204-Q302

You have an existing Azure storage account that stores large volumes of data across multiple containers.

You need to copy all data from the existing storage account to a new storage account. The copy process must

meet the following requirements:

c® Automate data movement.

c® Minimize user input required to perform the operation.

c® Ensure that the data movement process is recoverable.

What should you use?

AzCopy

Azure Storage Explorer

Azure portal

.NET Storage Client Library

Category: None

AZ204-Q303

You are developing an Azure Cosmos DB solution by using the Azure Cosmos DB SQL API. The data includes millions

of documents. Each document may contain hundreds of properties.

The properties of the documents do not contain distinct values for partitioning. Azure Cosmos DB must scale individual

containers in the database to meet the performance needs of the application by spreading the workload evenly across all

partitions over time.

You need to select a partition key.

Which two partition keys can you use? Each correct answer presents a complete solution.

a single property value that does not appear frequently in the documents

a value containing the collection name

a single property value that appears frequently in the documents

a concatenation of multiple property values with a random suffix appended

a hash suffix appended to a property value

Category: None

AZ204-Q304

You develop and deploy a web application to Azure App Service. The application accesses data stored in an Azure

Storage account. The account contains several containers with several blobs with large amounts of data. You deploy

all Azure resources to a single region.

You need to move the Azure Storage account to the new region. You must copy all data to the new region.

What should you do first?

Export the Azure Storage account Azure Resource Manager template

Initiate a storage account failover

Configure object replication for all blobs

Use the AzCopy command line tool

Create a new Azure Storage account in the current region

Create a new subscription in the current region

Category: None

AZ204-Q305

An organization deploys Azure Cosmos DB.

You need to ensure that the index is updated as items are created, updated, or deleted.

What should you do?

Set the indexing mode to Lazy.

Set the value of the automatic property of the indexing policy to False.

Set the value of the EnableScanInQuery option to True.

Set the indexing mode to Consistent.

Category: None

AZ204-Q306

You are developing a .Net web application that stores data in Azure Cosmos DB. The application must use the Core API and allow millions of reads and writes.
The Azure Cosmos DB account has been created with multiple write regions enabled. The application has been deployed to the East US2 and Central US regions.
You need to update the application to support multi-region writes.
What are two possible ways to achieve this goal? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Update the ConnectionPolicy class for the Cosmos client and populate the PreferredLocations property based on the geo-proximity of the application.

Update Azure Cosmos DB to use the Strong consistency level. Add indexed properties to the container to indicate region.

Update the ConnectionPolicy class for the Cosmos client and set the UseMultipleWriteLocations property to true.

Create and deploy a custom conflict resolution policy.

Update Azure Cosmos DB to use the Session consistency level. Send the SessionToken property value from the FeedResponse object of the write action to the end-user by using a cookie.

Category: None

AZ204-Q307

You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new

Azure Cosmos DB resource and the Cassandra

API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable

provisioning of Azure Cosmos accounts, databases, and containers.

The Azure AD group must not be able to access the keys that are required to access the data.

You need to restrict access to the Azure AD group.

Which role-based access control should you use?

DocumentDB Accounts Contributor

Cosmos Backup Operator

Cosmos DB Operator

Cosmos DB Account Reader

Category: None

AZ204-Q308

You are developing a website that will run as an Azure Web App. Users will authenticate by using their

Azure Active Directory (Azure AD) credentials.

You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A

user’s Azure AD group membership must be used to determine the permission level.

You need to configure authorization.

Solution: Configure the Azure Web App for the website to allow only authenticated requests and require Azure

AD log on.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q309

You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active

Directory (Azure AD) credentials.

You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user’s Azure

AD group membership must be used to determine the permission level.

You need to configure authorization.

Solution:

c® Create a new Azure AD application. In the application’s manifest, set value of the groupMembershipClaims option to All.

c® In the website, use the value of the groups claim from the JWT for the user to determine permissions.

Does the solution meet the goal?

Yes

No

Category: None

AZ204-Q310

You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.

If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.

You need to store the intake forms according to the requirements.

Solution:

1. Create an Azure Key Vault key named skey.
2. Encrypt the intake forms using the public key portion of skey.
3. Store the encrypted data in Azure Blob storage.
Does the solution meet the goal?

Yes

No

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question

31. Question

32. Question

33. Question

34. Question

35. Question

36. Question

37. Question

38. Question

39. Question

40. Question