AZ-204 Practice Test Questions Answers

Question # 1

You are developing an application to securely transfer data between on-premises file systems and Azure Blob storage. The application stores keys, secrets, and certificates in Azure Key Vault. The application uses the Azure Key Vault APIs.The application must allow recovery of an accidental deletion of the key vault or key vault objects. Key vault objects must be retained for 90 days after deletion.You need to protect the key vault and key vault objects. Which Azure Key Vault feature should you use? To answer, drag the appropriate features to the correct actions. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. 

Show Answer

Question # 2

A development team is creating a new REST API. The API will store data in Azure Blobstorage. You plan to deploy the API to Azure App Service.Developers must access the Azure Blob storage account to develop the API for the nexttwo months. The Azure Blob storage account must not be accessible by the developersafter the two-month time period.You need to grant developers access to the Azure Blob storage account.What should you do?

A. Generate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers. 
B. Create and apply a new lifecycle management policy to include a last accessed date value. Apply the policy to the Azure Blob storage account.
C. Provide all developers with the access key for the Azure Blob storage account. Update the API to include the Coordinated Universal Time (UTC) timestamp for the request header. 
D. Grant all developers access to the Azure Blob storage account by assigning role-based access control (RBAC) roles. 

Show Answer

Question # 3

You are developing a REST web service. Customers will access the service by using anAzure API Management instance.The web service does not correctly handle conflicts. Instead of returning an HTTP statuscode of 409, the service returns a status code of 500. The body of the status messagecontains only the word conflict.You need to ensure that conflicts produce the correct response.How should you complete the policy? To answer, drag the appropriate code segments tothe correct locations. Each code segment may be used once, more than once, or not at all.You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.

Show Answer

Question # 4

You are developing an Azure App Service REST API.The API must be called by an Azure App Service web app. The API must retrieve andupdate user profile information stored in Azure Active Directory (Azure AD).You need to configure the API to make the updates.Which two tools should you use? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Microsoft Graph API 
B. Microsoft Authentication Library (MSAL) 
C. Azure API Management 
D. Microsoft Azure Security Center 
E. Microsoft Azure Key Vault SDK 

Show Answer

Question # 5

You are implementing software as a service (SaaS) ASP.NET Core web service that willrun as an Azure Web App. The web service will use an on-premises SQL Server databasefor storage. The web service also includes a WebJob that processes data updates. Yourcustomers will use the web service.•Each instance of the WebJob processes data for a single customer and must run as asingleton instance.•Each deployment must be tested by using deployment slots prior to serving productiondata.•Azure costs must be minimized.•Azure resources must be located in an isolated network.You need to configure the App Service plan for the Web App.How should you configure the App Service plan? To answer, select the appropriate settingsin the answer area.NOTE: Each correct selection is worth one point.

Show Answer

Question # 6

You are developing an application that uses a premium block blob storage account. You are optimizing costs by automating Azure Blob Storage access tiers.You apply the following policy rules to the storage account. You must determine the implications of applying the rules to the data. (Line numbers are included for reference only.) 

Show Answer

Question # 7

You are developing an Azure-hosted e-commerce web application. The application will use Azure Cosmos DB to store sales orders. You are using the latest SDK to manage the sales orders in the database.You create a new Azure Cosmos DB instance. You include a valid endpoint and valid authorization key to an appSettings.json file in the code project.You are evaluating the following application code: (Line number are included for reference only.)   For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point. 

Show Answer

Question # 8

You are developing an Azure Function App. You develop code by using a language that isnot supported by the Azure Function App host. The code language supports HTTPprimitives.You must deploy the code to a production Azure Function App environment.You need to configure the app for deployment.Which configuration values should you use? To answer, select the appropriate options inthe answer area.NOTE: Each correct selection is worth one point.

Show Answer

Question # 9

You develop and deploy an Azure App Service ---- app. The web app accesses data in anAzure SQL databaseYou must update the web app to store frequently used data m a new Azure Cache forRedis Premium instance.You need to implement the Azure Cache for Redis features.Which feature should you implement? To answer, drag the appropriate feature to thecorrect requirements Each feature may be used once, more than once, or not at all Youmay need to ------------ between panes or scroll to view content.NOTE Each correct selection is worth one point

Show Answer

Question # 10

You are developing an Azure function that connects to an Azure SQL Database instance. The function is triggered by an Azure Storage queue.You receive reports of numerous System.InvalidOperationExceptions with the following message: “Timeout expired. The timeout period elapsed prior to obtaining a connection from the pool. This may have occurred because all pooled connections were in use and max pool size was reached.” You need to prevent the exception. What should you do?  

A. In the host.json file, decrease the value of the batchSize option 
B. Convert the trigger to Azure Event Hub 
C. Convert the Azure Function to the Premium plan 
D. In the function.json file, change the value of the type option to queueScaling 

Show Answer