Simulado AZ-204

Question 1

This question requires that you evaluate the underlined text to determine if it is correct.
You company has an on-premises deployment of MongoDB, and an Azure Cosmos DB account that makes use of the MongoDB API.
You need to devise a strategy to migrate MongoDB to the Azure Cosmos DB account.
You include the Data Management Gateway tool in your migration strategy.
Instructions: Review the underlined text. If it makes the statement correct, select `No change required.` If the statement is incorrect, select the answer choice that makes the statement correct.

Accepted Answer

mongorestore

Answer

No change required

Answer

Azure Storage Explorer

Answer

AzCopy

Question 2

This question requires that you evaluate the underlined text to determine if it is correct.
Your Azure Active Directory Azure (Azure AD) tenant has an Azure subscription linked to it.
Your developer has created a mobile application that obtains Azure AD access tokens using the OAuth 2 implicit grant type.
The mobile application must be registered in Azure AD.
You require a redirect URI from the developer for registration purposes.
Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed.` If the statement is incorrect, select the answer choice that makes the statement correct.

Accepted Answer

No change required.

Answer

a secret

Answer

a login hint

Answer

a client ID

Question 3

You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days.
Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

Accepted Answer

EnablePurgeProtection

Accepted Answer

EnableSoftDelete

Answer

EnabledForDeployment

Answer

EnabledForTemplateDeployment

Question 4

You manage an Azure SQL database that allows for Azure AD authentication.
You need to make sure that database developers can connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum.
Which of the following should you implement?

Accepted Answer

Active Directory integrated authentication.

Answer

Azure AD token.

Answer

Azure Multi-Factor authentication.

Answer

OATH software tokens.

Question 5

You are developing an application to transfer data between on-premises file servers and Azure Blob storage. The application stores keys, secrets, and certificates in Azure Key Vault and makes use of the Azure Key Vault APIs.
You want to configure the application to allow recovery of an accidental deletion of the key vault or key vault objects for 90 days after deletion.
What should you do?

Accepted Answer

Run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI.

Answer

Run the Add-AzKeyVaultKey cmdlet.

Answer

Implement virtual network service endpoints for Azure Key Vault.

Answer

Run the az keyvault update --enable-soft-delete false CLI.

Question 6

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.
You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.
Solution: You include the use of Azure Redis Cache in your design.
Does the solution meet the goal?

Answer

true

Question 7

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.
You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.
Solution: You include the use of an Azure Content Delivery Network (CDN) in your design.
Does the solution meet the goal?

Answer

true

Question 8

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.
You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.
Solution: You include the use of a Storage Area Network (SAN) in your design.
Does the solution meet the goal?

Answer

true

Question 9

You develop a Web App on a tier D1 app service plan.
You notice that page load times increase during periods of peak traffic.
You want to implement automatic scaling when CPU load is above 80 percent. Your solution must minimize costs.
What should you do first?

Accepted Answer

Switch to the Standard App Service tier plan.

Answer

Enable autoscaling on the Web App.

Answer

Switch to the Premium App Service tier plan.

Answer

Switch to the Azure App Services consumption plan.

Question 10

Your company's Azure subscription includes an Azure Log Analytics workspace.
Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server 2016, and is linked to the Azure Log Analytics workspace. The Azure Log Analytics workspace is set up to gather performance counters associated with security from these linked servers.
You must configure alerts based on the information gathered by the Azure Log Analytics workspace.
You have to make sure that alert rules allow for dimensions, and that alert creation time should be kept to a minimum. Furthermore, a single alert notification must be created when the alert is created and when the alert is resolved.
You need to make use of the necessary signal type when creating the alert rules.
Which of the following is the option you should use?

Accepted Answer

The Metric signal type.

Answer

The Activity log signal type.

Answer

The Application Log signal type.

Answer

The Audit Log signal type.

Question 11

You are developing a .NET Core MVC application that allows customers to research independent holiday accommodation providers.
You want to implement Azure Search to allow the application to search the index by using various criteria to locate documents related to accommodation.
You want the application to allow customers to search the index by using regular expressions.
What should you do?

Accepted Answer

Configure the QueryType property of the SearchParameters class.

Answer

Configure the SearchMode property of the SearchParameters class.

Answer

Configure the Facets property of the SearchParameters class.

Answer

Configure the Filter property of the SearchParameters class.

Question 12

You are developing an application that applies a set of governance policies for internal and external services, as well as for applications.
You develop a stateful ASP.NET Core 2.1 web application named PolicyApp and deploy it to an Azure App Service Web App. The PolicyApp reacts to events from
Azure Event Grid and performs policy actions based on those events.
You have the following requirements:
✑ Authentication events must be used to monitor users when they sign in and sign out.
✑ All authentication events must be processed by PolicyApp.
✑ Sign outs must be processed as fast as possible.
What should you do?

Accepted Answer

Add a subject prefix to sign-out events. Create an Azure Event Grid subscription. Configure the subscription to use the subjectBeginsWith filter.

Answer

Create a new Azure Event Grid subscription for all authentication events. Use the subscription to process sign-out events.

Answer

Create a separate Azure Event Grid handler for sign-in and sign-out events.

Answer

Create separate Azure Event Grid topics and subscriptions for sign-in and sign-out events.

Question 13

You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic volumes after it is published.
You must ensure that the website remains available and responsive while minimizing cost.
You need to deploy the website.
What should you do?

Accepted Answer

Deploy the website to an App Service that uses the Standard service tier. Configure the App Service plan to automatically scale when the CPU load is high.

Answer

Deploy the website to a virtual machine. Configure the virtual machine to automatically scale when the CPU load is high.

Answer

Deploy the website to an App Service that uses the Shared service tier. Configure the App Service plan to automatically scale when the CPU load is high.

Answer

Deploy the website to a virtual machine. Configure a Scale Set to increase the virtual machine instance count when the CPU load is high

Question 14

You are developing an application that uses Azure Blob storage.
The application must read the transaction logs of all the changes that occur to the blobs and the blob metadata in the storage account for auditing purposes. The changes must be in the order in which they occurred, include only create, update, delete, and copy operations and be retained for compliance reasons.
You need to process the transaction logs asynchronously.
What should you do?

Accepted Answer

Enable the change feed on the storage account and process all changes for available events.

Answer

Process all Azure Blob storage events by using Azure Event Grid with a subscriber Azure Function app.

Answer

Process all Azure Storage Analytics logs for successful blob events.

Answer

Use the Azure Monitor HTTP Data Collector API and scan the request body for successful blob events.

Question 15

You are developing a web app that is protected by Azure Web Application Firewall (WAF). All traffic to the web app is routed through an Azure Application
Gateway instance that is used by multiple web apps. The web app address is contoso.azurewebsites.net.
All traffic must be secured with SSL. The Azure Application Gateway instance is used by multiple web apps.
You need to configure the Azure Application Gateway for the web app.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

In the Azure Application Gateway's HTTP setting, enable the Use for App service setting.

Accepted Answer

In the Azure Application Gateway's HTTP setting, set the value of the Override backend path option to contoso22.azurewebsites.net

Answer

Convert the web app to run in an Azure App service environment (ASE).

Answer

Add an authentication certificate for contoso.azurewebsites.net to the Azure Application Gateway.

Question 16

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure
Storage Blob storage. The storage account type is General-purpose V2.
When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.
You need to design the process that starts the photo processing.
Solution: Use the Azure Blob Storage change feed to trigger photo processing.
Does the solution meet the goal?

Answer

true

Question 17

You are developing a web application that runs as an Azure Web App. The web application stores data in Azure SQL Database and stores files in an Azure
Storage account. The web application makes HTTP requests to external services as part of normal operations.
The web application is instrumented with Application Insights. The external services are OpenTelemetry compliant.
You need to ensure that the customer ID of the signed in user is associated with all operations throughout the overall system.
What should you do?

Accepted Answer

Add the customer ID for the signed in user to the CorrelationContext in the web application

Answer

On the current SpanContext, set the TraceId to the customer ID for the signed in user

Answer

Set the header Ocp-Apim-Trace to the customer ID for the signed in user

Answer

Create a new SpanContext with the TraceFlags value set to the customer ID for the signed in user

Question 18

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop an HTTP triggered Azure Function app to process Azure Storage blob data. The app is triggered using an output binding on the blob.
The app continues to time out after four minutes. The app must process the blob data.
You need to ensure the app does not time out and processes the blob data.
Solution: Update the functionTimeout property of the host.json project file to 10 minutes.
Does the solution meet the goal?

Answer

true

Question 19

You are building a website that uses Azure Blob storage for data storage. You configure Azure Blob storage lifecycle to move all blobs to the archive tier after 30 days.
Customers have requested a service-level agreement (SLA) for viewing data older than 30 days.
You need to document the minimum SLA for data recovery.
Which SLA should you use?

Accepted Answer

between one and 15 hours

Answer

at least two days

Answer

at least one day

Answer

between zero and 60 minutes

Question 20

You develop Azure solutions.
You must connect to a No-SQL globally-distributed database by using the .NET API.
You need to create an object to configure and execute requests in the database.
Which code segment should you use?

Accepted Answer

new CosmosClient(EndpointUri, PrimaryKey);

Answer

new Container(EndpointUri, PrimaryKey);

Answer

new Database(EndpointUri, PrimaryKey);

Question 21

You have an existing Azure storage account that stores large volumes of data across multiple containers.
You need to copy all data from the existing storage account to a new storage account. The copy process must meet the following requirements:
✑ Automate data movement.
✑ Minimize user input required to perform the operation.
✑ Ensure that the data movement process is recoverable.
What should you use?

Accepted Answer

AzCopy

Answer

Azure Storage Explorer

Answer

Azure portal

Answer

NET Storage Client Library

Question 22

You are developing an Azure Cosmos DB solution by using the Azure Cosmos DB SQL API. The data includes millions of documents. Each document may contain hundreds of properties.
The properties of the documents do not contain distinct values for partitioning. Azure Cosmos DB must scale individual containers in the database to meet the performance needs of the application by spreading the workload evenly across all partitions over time.
You need to select a partition key.
Which two partition keys can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point

Accepted Answer

a concatenation of multiple property values with a random suffix appended

Accepted Answer

a hash suffix appended to a property value

Answer

a single property value that does not appear frequently in the documents

Answer

a value containing the collection name

Answer

a single property value that appears frequently in the documents

Question 23

You develop and deploy a web application to Azure App Service. The application accesses data stored in an Azure Storage account. The account contains several containers with several blobs with large amounts of data. You deploy all Azure resources to a single region.
You need to move the Azure Storage account to the new region. You must copy all data to the new region.
What should you do first?

Accepted Answer

Export the Azure Storage account Azure Resource Manager template

Answer

Initiate a storage account failover

Answer

Configure object replication for all blobs

Answer

Use the AzCopy command line tool

Answer

Create a new Azure Storage account in the current region

Answer

Create a new subscription in the current region

Question 24

An organization deploys Azure Cosmos DB.
You need to ensure that the index is updated as items are created, updated, or deleted.
What should you do?

Accepted Answer

Set the indexing mode to Consistent.

Answer

Set the indexing mode to Lazy.

Answer

Set the value of the automatic property of the indexing policy to False.

Answer

Set the value of the EnableScanInQuery option to True.

Question 25

You are developing a .Net web application that stores data in Azure Cosmos DB. The application must use the Core API and allow millions of reads and writes.
The Azure Cosmos DB account has been created with multiple write regions enabled. The application has been deployed to the East US2 and Central US regions.
You need to update the application to support multi-region writes.
What are two possible ways to achieve this goal? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

Update the ConnectionPolicy class for the Cosmos client and set the UseMultipleWriteLocations property to true.

Accepted Answer

Create and deploy a custom conflict resolution policy.

Answer

Update the ConnectionPolicy class for the Cosmos client and populate the PreferredLocations property based on the geo-proximity of the application.

Answer

Update Azure Cosmos DB to use the Strong consistency level. Add indexed properties to the container to indicate region.

Answer

Update Azure Cosmos DB to use the Session consistency level. Send the SessionToken property value from the FeedResponse object of the write action to the end-user by using a cookie.

Question 26

You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra
API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers.
The Azure AD group must not be able to access the keys that are required to access the data.
You need to restrict access to the Azure AD group.
Which role-based access control should you use?

Accepted Answer

Cosmos DB Operator

Answer

DocumentDB Accounts Contributor

Answer

Cosmos Backup Operator

Answer

Cosmos DB Account Reader

Question 27

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.
You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level.
You need to configure authorization.
Solution: Configure the Azure Web App for the website to allow only authenticated requests and require Azure AD log on.
Does the solution meet the goal?

Answer

true

Question 28

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.
You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level.
You need to configure authorization.
Solution:
✑ Create a new Azure AD application. In the application's manifest, set value of the groupMembershipClaims option to All.
✑ In the website, use the value of the groups claim from the JWT for the user to determine permissions.
Does the solution meet the goal?

Answer

true

Question 29

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution:
1. Create an Azure Key Vault key named skey.
2. Encrypt the intake forms using the public key portion of skey.
3. Store the encrypted data in Azure Blob storage.
Does the solution meet the goal?

Answer

true

Question 30

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution:
1. Create an Azure Cosmos DB database with Storage Service Encryption enabled.
2. Store the intake forms in the Azure Cosmos DB database.
Does the solution meet the goal?

Answer

true

Question 31

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms.
If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised.
You need to store the intake forms according to the requirements.
Solution: Store the intake forms as Azure Key Vault secrets.
Does the solution meet the goal?

Answer

true

Question 32

Your company is developing an Azure API hosted in Azure.
You need to implement authentication for the Azure API to access other Azure resources. You have the following requirements:
✑ All API calls must be authenticated.
✑ Callers to the API must not send credentials to the API.
Which authentication mechanism should you use?

Accepted Answer

Managed identity

Answer

Basic

Answer

Anonymous

Answer

Client certificate

Question 33

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop Azure solutions.
You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.
You need to obtain an Azure Resource Manager access token.
Solution: Use an X.509 certificate to authenticate the VM with Azure Resource Manager.
Does the solution meet the goal?

Answer

true

Question 34

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop Azure solutions.
You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.
You need to obtain an Azure Resource Manager access token.
Solution: Use the Reader role-based access control (RBAC) role to authenticate the VM with Azure Resource Manager.
Does the solution meet the goal?

Answer

true

Question 35

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop Azure solutions.
You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.
You need to obtain an Azure Resource Manager access token.
Solution: Run the Invoke-RestMethod cmdlet to make a request to the local managed identity for Azure resources endpoint.
Does the solution meet the goal?

Answer

true

Question 36

You develop an app that allows users to upload photos and videos to Azure storage. The app uses a storage REST API call to upload the media to a blob storage account named Account1. You have blob storage containers named Container1 and Container2.
Uploading of videos occurs on an irregular basis.
You need to copy specific blobs from Container1 to Container2 when a new video is uploaded.
What should you do?

Accepted Answer

Create an Event Grid topic that uses the Start-AzureStorageBlobCopy cmdlet

Answer

Copy blobs to Container2 by using the Put Blob operation of the Blob Service REST API

Answer

Use AzCopy with the Snapshot switch to copy blobs to Container2

Answer

Download the blob to a virtual machine and then upload the blob to Container2

Question 37

You are developing an ASP.NET Core website that uses Azure FrontDoor. The website is used to build custom weather data sets for researchers. Data sets are downloaded by users as Comma Separated Value (CSV) files. The data is refreshed every 10 hours.
Specific files must be purged from the FrontDoor cache based upon Response Header values.
You need to purge individual assets from the Front Door cache.
Which type of cache purge should you use?

Accepted Answer

single path

Answer

wildcard

Answer

root domain

Question 38

You are a developer for a SaaS company that offers many web services.
All web services for the company must meet the following requirements:
✑ Use API Management to access the services
✑ Use OpenID Connect for authentication
✑ Prevent anonymous usage
A recent security audit found that several web services can be called without any authentication.
Which API Management policy should you implement?

Accepted Answer

validate-jwt

Answer

jsonp

Answer

authentication-certificate

Answer

check-header

Question 39

You develop and deploy an Azure Logic app that calls an Azure Function app. The Azure Function app includes an OpenAPI (Swagger) definition and uses an
Azure Blob storage account. All resources are secured by using Azure Active Directory (Azure AD).
The Azure Logic app must securely access the Azure Blob storage account. Azure AD resources must remain if the Azure Logic app is deleted.
You need to secure the Azure Logic app.
What should you do?

Accepted Answer

Create a user-assigned managed identity and assign role-based access controls.

Answer

Create an Azure AD custom role and assign the role to the Azure Blob storage account.

Answer

Create an Azure Key Vault and issue a client certificate.

Answer

Create a system-assigned managed identity and issue a client certificate.

Answer

Create an Azure AD custom role and assign role-based access controls.

Question 40

You Manage an Azure Storage Account General Purpose v1 (GPv1) with a blob container named customerReceipts.
The customerReceipts container is used by a web application to upload customers order receipts. The application processes these receipts for personal finance management during the first 90 days. After this period, the application does not need to access these raw receipts, but you need to achieve them for auditing purposes.
You need to configure a data archiving strategy for customerReceipts, ensuring the lowest storage cost. 
Which two actions should you perform? Each correct answer presents part of the solutions

Accepted Answer

Upgrade the Azure Storage Account to General Purpose v2 (GPv2)

Accepted Answer

Move receipts older than 90 days to the archieve tier using the storage lifecycle

Answer

Create a new Azure Storage Account with account level cool tiering

Answer

Move the receipts older than 90 days to the new storage account using AzCopy

Answer

Move receipts older than 90 days to the cool tier using the storage lifecycle

Question 41

You are developing an app that is designed to upload data to an Azure storage account. Data is uploaded as a blob to a container named mycontainer in a storage account named CompanyAct
You need to move the blob to a different storage account. The copy should run asynchronously. If the copy fails, it should be possible to restart the copy at or near the point of failure.
What should you use to copy the blob?

Accepted Answer

The AzCopy command

Answer

The Start-AzureStorageBlobIncrementalCopy Powershell cmdlet

Answer

The az storage blob Azure CLI command

Answer

The Start-AzureStorageBlobCopy PowerShell cmdlet

Question 42

You create a blob storage account in Azure.
You need to add metadata to a container in the account.
Which HTTP method should you use?

Accepted Answer

PUT

Answer

POST

Answer

GET

Answer

HEAD

Question 43

A company is building a traffic monitoring system. The system would be monitoring the traffic along 4 highways. The system would be responsible for producing a time series-based analysis report for each highway.

The traffic sensors on each highway have been configured to send its data to Azure Event Hubs. The data from Event Hubs is then consumed by three departments. Each department makes use of an Azure Web App to display the data.

You have to implement the Azure Event Hub instance. You need to implement a solution which ensures data throughput is maximized and latency is minimized.

Which of the following would you use as the partition key?

Accepted Answer

Highway

Answer

Department

Answer

Timestamp

Answer

Datestamp

Question 44

You are going to deploy a web application onto Azure. You would make use of the App Service on Linux. You go ahead and create an App Service Plan. You then go ahead and publish a custom docker image onto the Azure Web App. You need to access the console logs generated from the container in real time.

You need to complete the following Azure CLI script for this (SEE THE IMAGE).

Which of the following would go into Slot 1?

You need to complete the following Azure CLI script for this (SEE THE IMAGE).

Which of the following would go into Slot 1?

Accepted Answer

config

Answer

download

Answer

show

Answer

tail

Question 45

You are going to deploy a web application onto Azure. You would make use of the App Service on Linux. You go ahead and create an App Service Plan. You then go ahead and publish a custom docker image onto the Azure Web App. You need to access the console logs generated from the container in real time.

You need to complete the following Azure CLI script for this (SEE THE IMAGE).

Which of the following would go into Slot 1?

You need to complete the following Azure CLI script for this (SEE THE IMAGE).

Which of the following would go into Slot 2?

Accepted Answer

--web-server-logging

Answer

--slot

Answer

--detailed-error-messages

Answer

--level

Question 46

You have to develop an ASP.Net Core application. The application is used to work with blobs in an Azure storage account. The application authenticates via Azure AD credentials.

Role based access has been implemented on the containers that contain the blobs. These roles have been assigned to the users.

You have to configure the application so that the user's permissions can be used with the Azure Blob containers.

Which of the following would you use as the permission for the Microsoft Graph API?

Accepted Answer

User.Read

Answer

User.Write

Answer

client_id

Answer

user_impersonation

Question 47

You are developing an e-Commerce Web App.
You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure Active
Directory (AAD).
What should you do on the e-Commerce Web App?

Accepted Answer

Enable Managed Service Identity (MSI)

Answer

Run the az keyvault secret command

Answer

Enable Azure AD Connect

Answer

Create an Azure AD service principal

Question 48

You have developed a Web App for your company. The Web App provides services and must run in multiple regions.
You want to be notified whenever the Web App uses more than 85 percent of the available CPU cores over a 5 minute period. Your solution must minimize costs.
Which command should you use in SLOT 1?

Accepted Answer

avg Percentage CPU

Answer

CPU Usage

Answer

Percentage CPU

Question 49

You have developed a Web App for your company. The Web App provides services and must run in multiple regions.
You want to be notified whenever the Web App uses more than 85 percent of the available CPU cores over a 5 minute period. Your solution must minimize costs.
Which command should you use in SLOT 2?

Accepted Answer

--windows size

Answer

--evaluation-frequency

Answer

--auto-migrate

Question 50

You are a developer at your company.
You need to update the definitions for an existing Logic App.
What should you use?

Accepted Answer

the Logic App Code View

Answer

the Enterprise Integration Pack (EIP)

Answer

the API Connections

Answer

the Logic Apps Designer

Question 51

You are developing a C++ application that compiles to a native application named process.exe. The application accepts images as input and returns images in one of the following image formats: GIF, PNG, or JPEG.
You must deploy the application as an Azure Function.
You need to configure the function and host json files.
How should you complete the json files in SLOT 1?

Accepted Answer

"type": "http"

Answer

"plataform": "gcm"

Answer

"database": "stream"

Answer

"path": "process.exe"

Question 52

You are developing a C++ application that compiles to a native application named process.exe. The application accepts images as input and returns images in one of the following image formats: GIF, PNG, or JPEG.
You must deploy the application as an Azure Function.
You need to configure the function and host json files.
How should you complete the json files in SLOT 2?

Accepted Answer

"customHandler": {"description":{

Answer

"languageWorker":{"path":{

Answer

"extensions":{"worker":{

Answer

"extensionBundle":{

Question 53

You are developing a C++ application that compiles to a native application named process.exe. The application accepts images as input and returns images in one of the following image formats: GIF, PNG, or JPEG.
You must deploy the application as an Azure Function.
You need to configure the function and host json files.
How should you complete the json files in SLOT 3?

Accepted Answer

"enableForwardingHttpRequest":false

Answer

"enableForwardingHttpRequest":true

Question 54

You are implementing a software as a service (SaaS) ASP.NET Core web service that will run as an Azure Web App. The web service will use an on-premises
SQL Server database for storage. The web service also includes a WebJob that processes data updates. Four customers will use the web service.
✑ Each instance of the WebJob processes data for a single customer and must run as a singleton instance.
✑ Each deployment must be tested by using deployment slots prior to serving production data.
✑ Azure costs must be minimized.
✑ Azure resources must be located in an isolated network.
You need to configure the App Service plan for the Web App.
How should you configure the App Service plan in BOX 1?

Accepted Answer

4

Answer

2

Answer

8

Answer

16

Question 55

You are implementing a software as a service (SaaS) ASP.NET Core web service that will run as an Azure Web App. The web service will use an on-premises
SQL Server database for storage. The web service also includes a WebJob that processes data updates. Four customers will use the web service.
✑ Each instance of the WebJob processes data for a single customer and must run as a singleton instance.
✑ Each deployment must be tested by using deployment slots prior to serving production data.
✑ Azure costs must be minimized.
✑ Azure resources must be located in an isolated network.
You need to configure the App Service plan for the Web App.
How should you configure the App Service plan in BOX 2?

Accepted Answer

Isolated

Answer

Standard

Answer

Premium

Answer

Comsumption

Question 56

You are developing an Azure Web App. You configure TLS mutual authentication for the web app.
You need to validate the client certificate in the web app. To answer, select the appropriate option in the answer area in BOX 1.

Accepted Answer

HTTP request header

Answer

Client cookie

Answer

HTTP message body

Answer

URL query string

Question 57

You are developing an Azure Web App. You configure TLS mutual authentication for the web app.
You need to validate the client certificate in the web app. To answer, select the appropriate option in the answer area in BOX 2.

Accepted Answer

Base64

Answer

HTML

Answer

URL

Answer

Unicode

Question 58

You are developing an application that is going to making use of the Azure Service Bus. You have to create filters based on the different types of subscribers that would subscribe to the topic. The broad classification of these subscribers are:

- Subscribers should be able to receive all messages being sent to the topic;
- Subscribers should NOT be able to receive all messages being sent to the topic;
- Subscribers should be able to receive messages based on a SQL-like conditional expression.

Which of the following would you use as the filter condition for the requirement?

"Subscribers should be able to receive all messages being sent to the topic"

Accepted Answer

Boolean filters

Answer

Primary filters

Answer

SQL filters

Answer

Correlation filters

Question 59

You are developing an application that is going to making use of the Azure Service Bus. You have to create filters based on the different types of subscribers that would subscribe to the topic. The broad classification of these subscribers are:

- Subscribers should be able to receive all messages being sent to the topic;
- Subscribers should NOT be able to receive all messages being sent to the topic;
- Subscribers should be able to receive messages based on a SQL-like conditional expression.

Which of the following would you use as the filter condition for the requirement?

"Subscribers should be able to receive messages based on a SQL-like conditional expression"

Accepted Answer

SQL Filters

Answer

Boolean filters

Answer

Primary filters

Answer

Correlation filters

Question 60

You have to load data into a cache in order to improve the performance and maintain data consistency between data store and data in cache. Which of the following are suitable scenarios to use CACHE-ASIDE pattern? Choose 2 answers from the options given below:

Accepted Answer

Native read-through and write-through cache operations are not provided

Accepted Answer

Unpredictable resource demand

Answer

Static cached data which can be fit on startup

Answer

Caching session state information hosted in a web farm

Question 61

You are developing an Azure Function App that processes images that are uploaded to an Azure Blob container.
Images must be processed as quickly as possible after they are uploaded, and the solution must minimize latency. You create code to process images when the
Function App is triggered.
You need to configure the Function App.
What should you do?

Accepted Answer

Use an App Service plan. Configure the Function App to use an Azure Blob Storage trigger.

Answer

Use an App Service plan. Configure the Function App to use an Azure Blob Storage input trigger.

Answer

Use a Consumption plan. Configure the Function App to use an Azure Blob Storage trigger.

Answer

Use a Consumption plan. Configure the Function App to use a Timer trigger.

Answer

Use a Consumption plan. Configure the Function App to use an Azure Blob Storage input trigger.

Question 62

You are configuring a development environment for your team. You deploy the latest Visual Studio image from the Azure Marketplace to your Azure subscription.
The development environment requires several software development kits (SDKs) and third-party components to support application development across the organization. You install and customize the deployed virtual machine (VM) for your development team. The customized VM must be saved to allow provisioning of a new team member development environment.
You need to save the customized VM for future provisioning.
Which tool or service should you use in BOX 1?

Accepted Answer

Azure PowerShell

Answer

Visual Studio command prompt

Answer

Azure Migrate

Answer

Azure Backup

Question 63

You are configuring a development environment for your team. You deploy the latest Visual Studio image from the Azure Marketplace to your Azure subscription.
The development environment requires several software development kits (SDKs) and third-party components to support application development across the organization. You install and customize the deployed virtual machine (VM) for your development team. The customized VM must be saved to allow provisioning of a new team member development environment.
You need to save the customized VM for future provisioning.
Which tool or service should you use in BOX 2?

Accepted Answer

Azure Blob Storage

Answer

Azure Data Lake Storage

Answer

Azure File Storage

Answer

Azure Table Storage

Question 64

You are developing an Azure Function app.
The app must meet the following requirements:
✑ Enable developers to write the functions by using the Rust language.
✑ Declaratively connect to an Azure Blob Storage account.
You need to implement the app.
Which Azure Function app feature should you use in FEATURE 1? To answer, select the appropriate feature to the correct requirement. Each feature may be used once, more than once, or not at all.