AZ 204

You have an Azure Key vault in place. You have a secret defined in the Azure Key vault. You have several versions available of the secret. You have to issue a REST API call to get a specific revision of the secret from the key vault. Which of the following would you issue in the REST API call to get the specific secret version?

• A session Variable

• Post Parameter

• A query string parameter

• Enviroment variable

Answer explanation

item: 2 explanation: When you want to get a specific revision number of the secret, you have to use query string parameters. This is also given in the Microsoft documentation Since this is clearly given in the Microsoft documentation, all other options are incorrect For more information on getting secret versions, please refer to the following URL https://docs.microsoft.com/en-us/rest/api/keyvault/getsecretversions/getsecretversions

You have two Hyper-V hosts named Host1 and Host2. Host1 has an Azure virtual machine named VM1 that was deployed by using a custom Azure ResourceManager template.You need to move VM1 to Host2.What should you do?

• A. From the Update management blade, click Enable.

• B. From the Overview blade, move VM1 to a different subscription.

• C. From the Redeploy blade, click Redeploy.

• D. From the Profile blade, modify the usage location

Answer explanation

When you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and associated resources.

Your company has a web app named WebApp1.You use the WebJobs SDK to design a triggered App Service background task that automatically invokes a function in the code every time new data is received in a queue.You are preparing to configure the service processes a queue data item.Which of the following is the service you should use?

• A. Logic Apps

• B. WebJobs

• C. Flow

• D. Functions

Your company has an Azure subscription.You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.Which of the following is the value that you should configure for the platformFaultDomainCount property?

• 10

• 30

• Min Value

• Max Value

Answer explanation

The number of fault domains for managed availability sets varies by region - either two or three per region

Your company has an Azure subscription.You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.Which of the following is the value that you should configure for the platformUpdateDomainCount property?

• 10

• 20

• 30

• 40

Answer explanation

Each virtual machine in your availability set is assigned an update domain and a fault domain by the underlying Azure platform. For a given availability set, five non-user-configurable update domains are assigned by default (Resource Manager deployments can then be increased to provide up to 20 update domains) to indicate groups of virtual machines and underlying physical hardware that can be rebooted at the same time.

This question requires that you evaluate the underlined text to determine if it is correct.You company has an on-premises deployment of MongoDB, and an Azure Cosmos DB account that makes use of the MongoDB API.You need to devise a strategy to migrate MongoDB to the Azure Cosmos DB account.You include the Data Management Gateway tool in your migration strategy.Instructions: Review the underlined text. If it makes the statement correct, select `No change required.` If the statement is incorrect, select the answer choice that makes the statement correct.

• No change required

• mongorestore

• Azure Storage Explorer

• AzCopy

You are developing an e-Commerce Web App.You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure ActiveDirectory (AAD).What should you do on the e-Commerce Web App?

• Run the az keyvault secret command

• Enable Azure AD Connect.

• Enable Managed Service Identity (MSI)

• Create an Azure AD service principa

Answer explanation

A managed identity from Azure Active Directory allows your app to easily access other AAD-protected resources such as Azure Key Vault

This question requires that you evaluate the underlined text to determine if it is correct.Your Azure Active Directory Azure (Azure AD) tenant has an Azure subscription linked to it.Your developer has created a mobile application that obtains Azure AD access tokens using the OAuth 2 implicit grant type.The mobile application must be registered in Azure AD.You require a redirect URI from the developer for registration purposes.Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed.` If the statement is incorrect, select the answer choice that makes the statement correct.

• No change required

• a secret

• a login hint

• a client ID

Answer explanation

For Native Applications you need to provide a Redirect URI, which Azure AD will use to return token responses

You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days.Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

• EnabledForDeployment

• EnablePurgeProtection

• EnabledForTemplateDeployment

• EnableSoftDelete

You manage an Azure SQL database that allows for Azure AD authentication.You need to make sure that database developers can connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum.Which of the following should you implement?

• Azure AD token

• Azure Multi-Factor authentication

• Active Directory integrated authentication

• OATH software tokens

Answer explanation

Azure AD can be the initial Azure AD managed domain. Azure AD can also be an on-premises Active Directory Domain Services that is federated with the AzureAD.Using an Azure AD identity to connect using SSMS or SSDTThe following procedures show you how to connect to a SQL database with an Azure AD identity using SQL Server Management Studio or SQL Server DatabaseTools.Active Directory integrated authenticationUse this method if you are logged in to Windows using your Azure Active Directory credentials from a federated domain.1. Start Management Studio or Data Tools and in the Connect to Server (or Connect to Database Engine) dialog box, in the Authentication box, select ActiveDirectory - Integrated. No password is needed or can be entered because your existing credentials will be presented for the connection.