You are developing an application to transfer data between on-premises file servers and Azure Blob storage. The application stores keys, secrets, and certificates in Azure Key Vault and makes use of the Azure Key Vault APIs.You want to configure the application to allow recovery of an accidental deletion of the key vault or key vault objects for 90 days after deletion.What should you do?

Run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI

Run the Add-AzKeyVaultKey cmdlet.

Implement virtual network service endpoints for Azure Key Vault.

Run the az keyvault update --enable-soft-delete false CLI

You develop a Web App on a tier D1 app service plan.You notice that page load times increase during periods of peak traffic.You want to implement automatic scaling when CPU load is above 80 percent. Your solution must minimize costs.What should you do first?

Switch to the Standard App Service tier plan.

Enable autoscaling on the Web App.

Switch to the Premium App Service tier plan

Switch to the Azure App Services consumption plan. Reveal Solution Discussion 23 Previous QuestionsNext Questions

Your company's Azure subscription includes an Azure Log Analytics workspace.Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server 2016, and is linked to the Azure Log Analytics workspace. The Azure Log Analytics workspace is set up to gather performance counters associated with security from these linked servers.You must configure alerts based on the information gathered by the Azure Log Analytics workspace.You have to make sure that alert rules allow for dimensions, and that alert creation time should be kept to a minimum. Furthermore, a single alert notification must be created when the alert is created and when the alert is resolved.You need to make use of the necessary signal type when creating the alert rules.Which of the following is the option you should use?

The Application Log signal type

You are developing a .NET Core MVC application that allows customers to research independent holiday accommodation providers.You want to implement Azure Search to allow the application to search the index by using various criteria to locate documents related to accommodation.You want the application to allow customers to search the index by using regular expressions.What should you do?

Configure the QueryType property of the SearchParameters class

Configure the SearchMode property of the SearchParameters class.

Configure the Facets property of the SearchParameters class.

Configure the Filter property of the SearchParameters class

You are a developer at your company.You need to update the definitions for an existing Logic App.What should you use?

the Enterprise Integration Pack (EIP)

You are developing a .NET Core MVC application that allows customers to research independent holiday accommodation providers.You want to implement Azure Search to allow the application to search the index by using various criteria to locate documents related to accommodation venues.You want the application to list holiday accommodation venues that fall within a specific price range and are within a specified distance to an airport.What should you do?

Configure the Filter property of the SearchParameters class

Configure the SearchMode property of the SearchParameters class

Configure the QueryType property of the SearchParameters class

Configure the Facets property of the SearchParameters class

You are a developer at your company.You need to edit the workflows for an existing Logic App.What should you use?

the Enterprise Integration Pack (EIP)

You are developing an application that applies a set of governance policies for internal and external services, as well as for applications.You develop a stateful ASP.NET Core 2.1 web application named PolicyApp and deploy it to an Azure App Service Web App. The PolicyApp reacts to events fromAzure Event Grid and performs policy actions based on those events.You have the following requirements:✑ Authentication events must be used to monitor users when they sign in and sign out.✑ All authentication events must be processed by PolicyApp.✑ Sign outs must be processed as fast as possible.What should you do?

Add a subject prefix to sign-out events. Create an Azure Event Grid subscription. Configure the subscription to use the subjectBeginsWith filter.

Create a new Azure Event Grid subscription for all authentication events. Use the subscription to process sign-out events.

Create a separate Azure Event Grid handler for sign-in and sign-out events

Create separate Azure Event Grid topics and subscriptions for sign-in and sign-out events

You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic volumes after it is published.You must ensure that the website remains available and responsive while minimizing cost.You need to deploy the website.What should you do?

Deploy the website to an App Service that uses the Standard service tier. Configure the App Service plan to automatically scale when the CPU load is high. Reveal Solution Discussion 42 Previous QuestionsNext Questions

Deploy the website to a virtual machine. Configure the virtual machine to automatically scale when the CPU load is high.

Deploy the website to an App Service that uses the Shared service tier. Configure the App Service plan to automatically scale when the CPU load is high

Deploy the website to a virtual machine. Configure a Scale Set to increase the virtual machine instance count when the CPU load is high

You are developing an application that uses Azure Blob storage.The application must read the transaction logs of all the changes that occur to the blobs and the blob metadata in the storage account for auditing purposes. The changes must be in the order in which they occurred, include only create, update, delete, and copy operations and be retained for compliance reasons.You need to process the transaction logs asynchronously.What should you do?

Enable the change feed on the storage account and process all changes for available events

Process all Azure Blob storage events by using Azure Event Grid with a subscriber Azure Function app.

Process all Azure Storage Analytics logs for successful blob events

Use the Azure Monitor HTTP Data Collector API and scan the request body for successful blob events. Reveal Solution Discussion 24

You are developing an Azure Function App that processes images that are uploaded to an Azure Blob container.Images must be processed as quickly as possible after they are uploaded, and the solution must minimize latency. You create code to process images when theFunction App is triggered.You need to configure the Function App.What should you do?

Use a Consumption plan. Configure the Function App to use an Azure Blob Storage trigger.

Use an App Service plan. Configure the Function App to use an Azure Blob Storage input trigger

Use a Consumption plan. Configure the Function App to use a Timer trigger

Use an App Service plan. Configure the Function App to use an Azure Blob Storage trigger.

You are preparing to deploy a website to an Azure Web App from a GitHub repository. The website includes static content generated by a script.You plan to use the Azure Web App continuous deployment feature.You need to run the static generation script before the website starts serving traffic.What are two possible ways to achieve this goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

Add the path to the static content generation tool to WEBSITE_RUN_FROM_PACKAGE setting in the host.json file.

Create a file named .deployment in the root of the repository that calls a script which generates the static content and deploys the website. Most Voted Hide Solution Discussion 72

Add a PreBuild target in the websites csproj project file that runs the static content generation script.

Create a file named run.cmd in the folder /run that calls a script which generates the static content and deploys the website.

You are developing a web app that is protected by Azure Web Application Firewall (WAF). All traffic to the web app is routed through an Azure ApplicationGateway instance that is used by multiple web apps. The web app address is contoso.azurewebsites.net .All traffic must be secured with SSL. The Azure Application Gateway instance is used by multiple web apps.You need to configure the Azure Application Gateway for the web app.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

In the Azure Application Gateway's HTTP setting, enable the Use for App service setting

In the Azure Application Gateway's HTTP setting, set the value of the Override backend path option to contoso22.azurewebsites.net

Convert the web app to run in an Azure App service environment (ASE).

Add an authentication certificate for contoso.azurewebsites.net to the Azure Application Gateway.

You are developing a web application that runs as an Azure Web App. The web application stores data in Azure SQL Database and stores files in an AzureStorage account. The web application makes HTTP requests to external services as part of normal operations.The web application is instrumented with Application Insights. The external services are OpenTelemetry compliant.You need to ensure that the customer ID of the signed in user is associated with all operations throughout the overall system.What should you do

Add the customer ID for the signed in user to the CorrelationContext in the web application

On the current SpanContext, set the TraceId to the customer ID for the signed in user

Set the header Ocp-Apim-Trace to the customer ID for the signed in user

Create a new SpanContext with the TraceFlags value set to the customer ID for the signed in user Hide Solution Discussion 12

You develop Azure solutions.You must connect to a No-SQL globally-distributed database by using the .NET API.You need to create an object to configure and execute requests in the database.Which code segment should you use?

new CosmosClient(EndpointUri, PrimaryKey)

new Container(EndpointUri, PrimaryKey)

new Database(EndpointUri, PrimaryKey);

You have an existing Azure storage account that stores large volumes of data across multiple containers.You need to copy all data from the existing storage account to a new storage account. The copy process must meet the following requirements:✑ Automate data movement.✑ Minimize user input required to perform the operation.✑ Ensure that the data movement process is recoverable.What should you use?

NET Storage Client Library Hide Solution

You are developing an Azure Cosmos DB solution by using the Azure Cosmos DB SQL API. The data includes millions of documents. Each document may contain hundreds of properties.The properties of the documents do not contain distinct values for partitioning. Azure Cosmos DB must scale individual containers in the database to meet the performance needs of the application by spreading the workload evenly across all partitions over time.You need to select a partition key.Which two partition keys can you use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

a concatenation of multiple property values with a random suffix appended

a hash suffix appended to a property value

a value containing the collection name

a single property value that appears frequently in the documents

You develop and deploy a web application to Azure App Service. The application accesses data stored in an Azure Storage account. The account contains several containers with several blobs with large amounts of data. You deploy all Azure resources to a single region.You need to move the Azure Storage account to the new region. You must copy all data to the new region.What should you do first?

Export the Azure Storage account Azure Resource Manager template

Initiate a storage account failover

Configure object replication for all blobs

Use the AzCopy command line tool

You are developing an application to store business-critical data in Azure Blob storage.The application must meet the following requirements:• Data must not be modified or deleted for a user-specified interval.• Data must be protected from overwrites and deletes.• Data must be written once and allowed to be read many times.You need to protect the data in the Azure Blob storage account.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Configure a time-based retention policy for the storage account

Create a service shared-access signature (SAS)

Create an account shared-access signature (SAS)

Enable the blob change feed for the storage account.

Enable point-in-time restore for containers in the storage account.

You are updating an application that stores data on Azure and uses Azure Cosmos DB for storage. The application stores data in multiple documents associated with a single username.The application requires the ability to update multiple documents for a username in a single ACID operation.You need to configure Azure Cosmos DB.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Create an unsharded collection to store documents

Configure Azure Cosmos DB to use the MongoDB API

Create a collection sharded on username to store documents.

Configure Azure Cosmos DB to use the Gremlin API

You develop Azure solutions.You must connect to a No-SQL globally-distributed database by using the .NET API.You need to create an object to configure and execute requests in the database.Which code segment should you use?

C. container_name = 'MyContainer' container = database.create_container_if_not_exists( id=container_name, partition_key=PartitionKey(path="/lastName"), offer_throughput=400 )

A. database_name = 'MyDatabase' database = client.create_database_if_not_exists(id=database_name)

B. client = CosmosClient(endpoint, key)

You provide an Azure API Management managed web service to clients. The back-end web service implements HTTP Strict Transport Security (HSTS).Every request to the backend service must include a valid HTTP authorization header.You need to configure the Azure API Management instance with an authentication policy.Which two policies can you use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

D. OAuth Client Credential Grant

You are preparing to deploy an ASP.NET Core website to an Azure Web App from a GitHub repository. The website includes static content generated by a script.You plan to use the Azure Web App continuous deployment feature.You need to run the static generation script before the website starts serving traffic.What are two possible ways to achieve this goal? json file.

Create a file named .deployment in the root of the repository that calls a script which generates the static content and deploys the website

Create a file named run.cmd in the folder /run that calls a script which generates the static content and deploys

Add the path to the static content generation tool to WEBSITE_RUN_FROM_PACKAGE setting in the host.json file

Add a PreBuild target in the websites csproj project file that runs the static content generation script

You have an Azure web app named WebApp1.You uploaded a certificate to WebApp1.You need to make the certificate accessible to the app code of WebApp1.What should you do?

Add an app setting to the WebApp1 configuration

Add a user-assigned managed identity to WebApp1.

Enable system-assigned managed identity for the WebApp1.

Configure the TLS/SSL binding for WebApp1

AZ 204 Quiz

1.

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

You have an Azure Key vault in place. You have a secret defined in the Azure Key vault. You have several versions available of the secret. You have to issue a REST API call to get a specific revision of the secret from the key vault. Which of the following would you issue in the REST API call to get the specific secret version?

A session Variable

Post Parameter

A query string parameter

Enviroment variable

Answer explanation

item: 2 explanation: When you want to get a specific revision number of the secret, you have to use query string parameters. This is also given in the Microsoft documentation Since this is clearly given in the Microsoft documentation, all other options are incorrect For more information on getting secret versions, please refer to the following URL https://docs.microsoft.com/en-us/rest/api/keyvault/getsecretversions/getsecretversions

2.

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

You have two Hyper-V hosts named Host1 and Host2. Host1 has an Azure virtual machine named VM1 that was deployed by using a custom Azure ResourceManager template.You need to move VM1 to Host2.What should you do?

A. From the Update management blade, click Enable.

B. From the Overview blade, move VM1 to a different subscription.

C. From the Redeploy blade, click Redeploy.

D. From the Profile blade, modify the usage location

Answer explanation

When you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and associated resources.

3.

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

Your company has a web app named WebApp1.You use the WebJobs SDK to design a triggered App Service background task that automatically invokes a function in the code every time new data is received in a queue.You are preparing to configure the service processes a queue data item.Which of the following is the service you should use?

A. Logic Apps

B. WebJobs

C. Flow

D. Functions

4.

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

Your company has an Azure subscription.You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.Which of the following is the value that you should configure for the platformFaultDomainCount property?

10

30

Min Value

Max Value

Answer explanation

The number of fault domains for managed availability sets varies by region - either two or three per region

5.

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

Your company has an Azure subscription.You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.Which of the following is the value that you should configure for the platformUpdateDomainCount property?

10

20

30

40

Answer explanation

Each virtual machine in your availability set is assigned an update domain and a fault domain by the underlying Azure platform. For a given availability set, five non-user-configurable update domains are assigned by default (Resource Manager deployments can then be increased to provide up to 20 update domains) to indicate groups of virtual machines and underlying physical hardware that can be rebooted at the same time.

6.

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

This question requires that you evaluate the underlined text to determine if it is correct.You company has an on-premises deployment of MongoDB, and an Azure Cosmos DB account that makes use of the MongoDB API.You need to devise a strategy to migrate MongoDB to the Azure Cosmos DB account.You include the Data Management Gateway tool in your migration strategy.Instructions: Review the underlined text. If it makes the statement correct, select `No change required.` If the statement is incorrect, select the answer choice that makes the statement correct.

No change required

mongorestore

Azure Storage Explorer

AzCopy

7.

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

You are developing an e-Commerce Web App.You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure ActiveDirectory (AAD).What should you do on the e-Commerce Web App?

Run the az keyvault secret command

Enable Azure AD Connect.

Enable Managed Service Identity (MSI)

Create an Azure AD service principa

Answer explanation

A managed identity from Azure Active Directory allows your app to easily access other AAD-protected resources such as Azure Key Vault

8.

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

This question requires that you evaluate the underlined text to determine if it is correct.Your Azure Active Directory Azure (Azure AD) tenant has an Azure subscription linked to it.Your developer has created a mobile application that obtains Azure AD access tokens using the OAuth 2 implicit grant type.The mobile application must be registered in Azure AD.You require a redirect URI from the developer for registration purposes.Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed.` If the statement is incorrect, select the answer choice that makes the statement correct.

No change required

a secret

a login hint

a client ID

Answer explanation

For Native Applications you need to provide a Redirect URI, which Azure AD will use to return token responses

9.

MULTIPLE SELECT QUESTION

3 mins • 1 pt

You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days.Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

EnabledForDeployment

EnablePurgeProtection

EnabledForTemplateDeployment

EnableSoftDelete

10.

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

You manage an Azure SQL database that allows for Azure AD authentication.You need to make sure that database developers can connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum.Which of the following should you implement?

Azure AD token

Azure Multi-Factor authentication

Active Directory integrated authentication

OATH software tokens

Answer explanation

Azure AD can be the initial Azure AD managed domain. Azure AD can also be an on-premises Active Directory Domain Services that is federated with the AzureAD.Using an Azure AD identity to connect using SSMS or SSDTThe following procedures show you how to connect to a SQL database with an Azure AD identity using SQL Server Management Studio or SQL Server DatabaseTools.Active Directory integrated authenticationUse this method if you are logged in to Windows using your Azure Active Directory credentials from a federated domain.1. Start Management Studio or Data Tools and in the Connect to Server (or Connect to Database Engine) dialog box, in the Authentication box, select ActiveDirectory - Integrated. No password is needed or can be entered because your existing credentials will be presented for the connection.

AZ 204

85 questions

You have two Hyper-V hosts named Host1 and Host2. Host1 has an Azure virtual machine named VM1 that was deployed by using a custom Azure ResourceManager template.You need to move VM1 to Host2.What should you do?

When you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and associated resources.

The number of fault domains for managed availability sets varies by region - either two or three per region

You are developing an e-Commerce Web App.You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure ActiveDirectory (AAD).What should you do on the e-Commerce Web App?

A managed identity from Azure Active Directory allows your app to easily access other AAD-protected resources such as Azure Key Vault

For Native Applications you need to provide a Redirect URI, which Azure AD will use to return token responses

You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days.Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

Create a free account and access millions of resources

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Other