AZ 204 REVISION

You have to develop a web application that will use Azure Cache for Redis. You have to ensure that stale keys are removed from the cache using the right techniques.Which of the following can be used for this purpose?

• Choose an eviction policy

• Set the right partition key

• Set a key expiration value

• Choose the right pricing tier

Answer explanation

explanation: For ensuring stale data is removed from the cache, you can either use an eviction policy or set a key expiration value. The Microsoft documentation mentions the following Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect For more information on Azure Cache for Redis best practices, please refer to the below link https://docs.microsoft.com/en-us/azure/azure-cache-for-redis/cache-best-practices

A company is planning on developing a web app and deploying it to Azure. It will be based on .Net Core. They are also planning on using Application Insights on gaining a deeper understanding on the usage of the Web application by users when it goes to production. They have the following requirements- They need to know if most customers are progressing through the entire process in the application, or if they are ending the process at some point.- Is page load time impacting how many people convert on my page- Analyze how many users return to your app, and how often they perform particular tasks or achieve goals.- Show how users navigate between the pages and features of your siteWhich of the following Application Insight feature would they use for the requirement“Show how users navigate between the pages and features of your site”

• funnel

• impact

• retention

• User Flows

Answer explanation

explanation: This is clearly mentioned in the documentation Since this is clearly mentioned in the documentation, all other options are incorrect For more information on Application Insights –Usage Flows feature, one can go to the below link https://docs.microsoft.com/en-us/azure/azure-monitor/app/usage-flows

You have developed and deployed a REST API based application to the Azure App Service. When you navigate to the URL, you are getting the errorFailed to load http://myapps.azurewebsites.net:6000/#/api/Products: No ‘Access-Control-Allow-Origin’ header is present on the request resource.Which of the following needs to be implemented to resolve this issue?

• Use an SSL certificate

• Enable Azure AD Authentication

• Enable CORS

• Use a custom domain

Answer explanation

explanation: For this we need to enable CORS This is also given as an example in the Microsoft documentation Since this is clearly given in the documentation, all other options are incorrect For more information on enabling CORS for an Azure web app, please visit the following URL https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-rest-api

A company is developing an API system that will be hosted behind an Azure API Management service. You have to implement response caching. Here the user ID of the client must be detected and then the response must be cached for the given user ID.You need to add the following policies to the policies file:- A set-variable policy to store the detected user identity- A cache-lookup-value policy- A cache-store-value policy- A find-and-replace policy to update the response body with the user profile informationTo which policy section would you implement the policy for“A cache-store-value policy”

• Inbound

• Outbound

• Error

• Parameters

Answer explanation

explanation: An example of this is given in the Microsoft documentation as shown below Since this is clearly mentioned, all other options are incorrect For more information on how to work with the cache in API management, one can go to the below link https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-cache

A company is developing an API system that will be hosted behind an Azure API Management service. You have to implement response caching. Here the user ID of the client must be detected and then the response must be cached for the given user ID.You need to add the following policies to the policies file:- A set-variable policy to store the detected user identity- A cache-lookup-value policy- A cache-store-value policy- A find-and-replace policy to update the response body with the user profile informationTo which policy section would you implement the policy for“A find-and-replace policy to update the response body with the user profile information”

• Inbound

• Outbound

• Error

• Parameters

Answer explanation

explanation: Since this is clearly mentioned, all other options are incorrect https://docs.microsoft.com/en-us/azure/api-management/api-management-sample-cache-by-key

A company is developing an API system that will be hosted behind an Azure API Management service. You have to implement response caching. Here the user ID of the client must be detected and then the response must be cached for the given user ID.You need to add the following policies to the policies file:- A set-variable policy to store the detected user identity- A cache-lookup-value policy- A cache-store-value policy- A find-and-replace policy to update the response body with the user profile informationTo which policy section would you implement the policy for“A set-variable policy to store the detected user identity”

• Inbound

• Outbound

• Error

• Parameters

Answer explanation

explanation: Here since you need to detect the User ID from the request, you need to set the variable in the Input section. An example of this is given in the Microsoft documentation Since this is clearly mentioned, all other options are incorrect For more information on an example of managing requests with API management, one can go to the below link https://docs.microsoft.com/en-us/azure/api-management/api-management-sample-send-request

You have an Azure App Services Web App, Azure SQL Database instance, Azure Storage Account, and an Azure Redis Cache instance in a resource group.A developer must be able to publish code to the web app. You must grant the developer the Contribute role to the web app.You need to grant the role.Which two commands can you use? Each correct answer presents a complete solution.

• az role assignment create

• az role definition create

• New-AzureRmRoleAssignment

• New-AzureRmRoleDefinition

Answer explanation

explanation: az role assignment create - Create a new role assignment for a user, group, or service principal. https://docs.microsoft.com/en-us/cli/azure/role/assignment?view=azure-cli-latest#az-role-assignment-create New-AzureRmRoleAssignment - Assigns the specified RBAC role to the specified principal, at the specified scope. https://docs.microsoft.com/en-us/powershell/module/azurerm.resources/new-azurermroleassignment?view=azurermps-6.13.0

You have to develop a solution that will make use of the Azure Service Bus service. The solution would make use of queues in an Azure Service Bus instance. The number of senders is large, and the number of receivers is less. Which of the following are best practices when it comes to maximizing the throughput for the queue? Choose 2 answers from the options given below

• Is the sender resides in a different process, use multiple factories per process

• Is the sender resides in a different process, use a single factory per process

• Leave batched store access enabled

• Leave batched store access disabled

Answer explanation

explanation: There are different scenarios available in the Microsoft documentation when it comes to maximizing throughput for queues and topics. Since this is clearly given in the Microsoft documentation, all other options are incorrect For more information on best practices for Azure Service Bus, please refer to the following URL https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-performance-improvements

explanation: There are different scenarios available in the Microsoft documentation when it comes to maximizing throughput for queues and topics. Since this is clearly given in the Microsoft documentation, all other options are incorrect For more information on best practices for Azure Service Bus, please refer to the following URL https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-performance-improvements

• Correct

• Incorrect

Answer explanation

explanation: Instead use Always Encrypted feature to protect sensitive data. https://docs.microsoft.com/en-us/azure/azure-sql/database/security-overview

You have an Azure SQL Database instance. Database management is performed by an external party. All cryptographic keys are stored in an Azure Key Vault. You must ensure that the external party cannot access the data in the SSN column of the Person Table.Will the below protection method meet the requirement?Enable always encrypted feature

• Correct

• Incorrect

Answer explanation

explanation: Always Encrypted is a feature designed to protect sensitive data stored in specific database columns from access (for example, credit card numbers, national identification numbers, or data on a need to know basis). This includes database administrators or other privileged users who are authorized to access the database to perform management tasks, but have no business need to access the particular data in the encrypted columns https://docs.microsoft.com/en-us/azure/azure-sql/database/security-overview