AZ-204 Practice Exam 1

Which industry-standard authentication model should you use to secure APIs in Azure API Management?

• OAuth 2.0 (OAuth2)

• 802.1X

• OAuth 1.0

• JSON Web Token (JWT)

What is the Azure CLI command to create a new API Management API named llamadrama with the endpoint llama?

• az apim api operation create --service-name llamadrama -g az204RG --api-id LlamaDrama --url-template "/llama/{param1}/{param2}" --method "GET" --display-name 'Llama Drama'

• az apim api release create --service-name llamadrama -g az204RG --api-id LlamaDrama --api-revision '/llama' --api-revision 1

• az apim api create --service-name llamadrama -g az204RG --api-id LlamaDrama --path '/llama' --display-name 'Llama Drama'

• az apim api revision create --service-name llamadrama -g az204RG --api-id LlamaDrama --api-revision '/llama' --api-revision 1

Which option best describes a subscription in Azure Event Grid?

• A subscription is the origin of an event.

• A subscription defines the access policies for the Event Grid.

• A subscription defines an endpoint for event sourcing.

• A subscription defines which events on a topic you're interested in receiving.

You are developing a website that leverages a CDN with caching rules. Datasets from the website are downloaded by users as comma-separated value (CSV) files. Some data is intended to be refreshed every 10 hours, while other sets are cached for 30 days. Some of the 10-day sets are stored in the same location with the 30-day sets for simplifying delivery back to the client. Which type of cache purge should you use?

• Wildcard

• Endpoint

• Bypass cache

• Single path

Your company has a custom application built on Windows that they want to move from your on-premises servers to Azure in the hope of making the solution more cloud optimized over time. The application is a standard ASP.NET web app leveraging IIS and is load balanced between three servers that sit in your company's DMZ network. These servers talk to a database backend and retrieve assets from a local file share. There is little interest in refactoring code to fit new cloud services, so initially, the company wants to develop a path to "lift and shift" the application. You need to make sure that your server builds are identical to one another to ensure compliance, and leadership within the company would like to take advantage of the ability to elastically scale systems and services based on load. Of course, the least costly approach is preferred. With these constraints and requirements in mind, which approach could be best to create an application operating environment for your servers?

• Create a single virtual machine and create automatic resource scaling based on performance.

• 
  

  Offload the application to an Azure App Services instance and set up node scaling for performance.

• Build a virtual machine scale set and create scale rules based on performance and availability.

• Create three individual virtual machines and place them behind an Azure Load Balancer.

Your organization wants a new storage solution that leverages Azure Blob storage. The primary use of this account will be to store data that needs to be kept around and accessed for legal and compliance purposes and not much else. The compliance department performs audits every two months. The company is, of course, cost-conscious, but the data needs to be available within two hours of requesting it. Which data tier should be configured to meet these needs?

• Hot

• Archive

• Secure

• Cool

You have a billing document management cloud application that needs to ensure scanned forms containing customer data are processed and stored securely. You have a requirement to keep the original scanned form images for at least one year. You need to ensure that if the forms are moved out of your secure storage, they still cannot be read by a third party. With this in mind, what can you do to store the forms and ensure security?

• Use OCR to scrape the data from the forms and store it as a JSON document in a Cosmos DB container.

• 
  Store all forms in an Azure Storage blob and restrict access to only those using a Shared Access Signature.

• Place all forms in an Azure Key Vault, which will automatically encrypt the forms.

• Encrypt all incoming forms using an Azure Key Vault key and store them in an Azure Blob storage container.

When building an alert in Azure Monitor or Application Insights, you need to ensure that not only your Azure administration team is notified when there's a performance anomaly on a virtual machine, but also the appropriate development team gets notified as well. Which answer would satisfy this requirement and anticipate future reuse of notification configurations?

• 
  Build an action group for each team that needs to be notified when an alert is fired and assign them to each alert rule, as appropriate.

• When you assign the action group to the alert rule, create or select an existing one that includes all users who need to be notified when there is an issue.

• Create an alert target for each of the RBAC roles you want to target for alerts, and then make sure the appropriate users are assigned to those roles.

• 
  Create an alert target for each of the users you want to receive notifications when the condition of the alert is met.

Which of the following options are two valid built-in diagnostics logging types for apps hosted in Azure App Service?

• Application Insights and Azure audit logs

• Application logging and Azure Monitor

• Application logging and web server logging

• Application Insights and web server diagnostics

You need to deploy a static text file asynchronously to a web app called test204 in resource group mytestrg. Fill in the two missing values in this Azure CLI command:

```
az webapp <missing_value1> --resource-group mytestsrg --name test204 \
--src-path [aSourcePath] --type static --async <missing_value2>
```

• 1. 1.deploy, 2) true

• 1.deployment, 2) IsAsync

• 1.deploy, 2) IsAsync

• 1.
deployment, 2) true