Q11. You manage an Azure SQL database that allows for Azure AD authentication. You need to make sure that database developers can connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum. Which of the following should you implement?

C. Active Directory integrated authentication.

B. Azure Multi-Factor authentication.

Q12. You are developing an application to transfer data between on-premises file servers and Azure Blob storage. The application stores keys, secrets, and certificates in Azure Key Vault and makes use of the Azure Key Vault APIs. You want to configure the application to allow recovery of an accidental deletion of the key vault or key vault objects for 90 days after deletion. What should you do?

B. Run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI.

A. Run the Add-AzKeyVaultKey cmdlet.

C. Implement virtual network service endpoints for Azure Key Vault.

D. Run the az keyvault update --enable-soft-delete false CLI.

Q16. You develop a Web App on a tier D1 app service plan. You notice that page load times increase during periods of peak traffic. You want to implement automatic scaling when CPU load is above 80 percent. Your solution must minimize costs. What should you do first?

C. Switch to the Standard App Service tier plan.

A. Enable autoscaling on the Web App.

B. Switch to the Premium App Service tier plan.

D. Switch to the Azure App Services consumption plan.

Q17. Your company's Azure subscription includes an Azure Log Analytics workspace. Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server 2016, and is linked to the Azure Log Analytics workspace. The Azure Log Analytics workspace is set up to gather performance counters associated with security from these linked servers. You must configure alerts based on the information gathered by the Azure Log Analytics workspace. You have to make sure that alert rules allow for dimensions, and that alert creation time should be kept to a minimum. Furthermore, a single alert notification must be created when the alert is created and when the alert is resolved. You need to make use of the necessary signal type when creating the alert rules. Which of the following is the option you should use?

A. The Activity log signal type.

B. The Application Log signal type.

Q18. You are developing a .NET Core MVC application that allows customers to research independent holiday accommodation providers. You want to implement Azure Search to allow the application to search the index by using various criteria to locate documents related to accommodation. You want the application to allow customers to search the index by using regular expressions. What should you do?

B. Configure the QueryType property of the SearchParameters class.

A. Configure the SearchMode property of the SearchParameters class.

C. Configure the Facets property of the SearchParameters class.

D. Configure the Filter property of the SearchParameters class.

Q19. You are a developer at your company. You need to update the definitions for an existing Logic App. What should you use?

A. the Enterprise Integration Pack (EIP)

Q24. You are developing a .NET Core MVC application that allows customers to research independent holiday accommodation providers. You want to implement Azure Search to allow the application to search the index by using various criteria to locate documents related to accommodation venues. You want the application to list holiday accommodation venues that fall within a specific price range and are within a specified distance to an airport. What should you do?

D. Configure the Filter property of the SearchParameters class

A. Configure the SearchMode property of the SearchParameters class.

B. Configure the QueryType property of the SearchParameters class.

C. Configure the Facets property of the SearchParameters class.

Q25. You are a developer at your company. You need to edit the workflows for an existing Logic App. What should you use?

A. the Enterprise Integration Pack (EIP)

Q26. You are developing an application that applies a set of governance policies for internal and external services, as well as for applications. You develop a stateful ASP.NET Core 2.1 web application named PolicyApp and deploy it to an Azure App Service Web App. The PolicyApp reacts to events from Azure Event Grid and performs policy actions based on those events. You have the following requirements: ✑ Authentication events must be used to monitor users when they sign in and sign out. ✑ All authentication events must be processed by PolicyApp. ✑ Sign outs must be processed as fast as possible. What should you do?

D. Add a subject prefix to sign-out events. Create an Azure Event Grid subscription. Configure the subscription to use the subjectBeginsWith filter.

A. Create a new Azure Event Grid subscription for all authentication events. Use the subscription to process sign-out events.

B. Create a separate Azure Event Grid handler for sign-in and sign-out events.

C. Create separate Azure Event Grid topics and subscriptions for sign-in and sign-out events.

Q32. You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic volumes after it is published. You must ensure that the website remains available and responsive while minimizing cost. You need to deploy the website. What should you do?

D. Deploy the website to an App Service that uses the Standard service tier. Configure the App Service plan to automatically scale when the CPU load is high.

A. Deploy the website to a virtual machine. Configure the virtual machine to automatically scale when the CPU load is high.

B. Deploy the website to an App Service that uses the Shared service tier. Configure the App Service plan to automatically scale when the CPU load is high.

C. Deploy the website to a virtual machine. Configure a Scale Set to increase the virtual machine instance count when the CPU load is high.

Q37. You are developing an application that uses Azure Blob storage. The application must read the transaction logs of all the changes that occur to the blobs and the blob metadata in the storage account for auditing purposes. The changes must be in the order in which they occurred, include only create, update, delete, and copy operations and be retained for compliance reasons. You need to process the transaction logs asynchronously. What should you do?

B. Enable the change feed on the storage account and process all changes for available events.

A. Process all Azure Blob storage events by using Azure Event Grid with a subscriber Azure Function app.

C. Process all Azure Storage Analytics logs for successful blob events.

D. Use the Azure Monitor HTTP Data Collector API and scan the request body for successful blob events.

Q38. You are developing an Azure Function App that processes images that are uploaded to an Azure Blob container. Images must be processed as quickly as possible after they are uploaded, and the solution must minimize latency. You create code to process images when the Function App is triggered. You need to configure the Function App. What should you do?

D. Use an App Service plan. Configure the Function App to use an Azure Blob Storage trigger.

A. Use an App Service plan. Configure the Function App to use an Azure Blob Storage input trigger.

B. Use a Consumption plan. Configure the Function App to use an Azure Blob Storage trigger.

C. Use a Consumption plan. Configure the Function App to use a Timer trigger.

E. Use a Consumption plan. Configure the Function App to use an Azure Blob Storage input trigger.

Q39. You are preparing to deploy a website to an Azure Web App from a GitHub repository. The website includes static content generated by a script. You plan to use the Azure Web App continuous deployment feature. You need to run the static generation script before the website starts serving traffic. What are two possible ways to achieve this goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

B. Add a PreBuild target in the websites csproj project file that runs the static content generation script.

D. Create a file named .deployment in the root of the repository that calls a script which generates the static content and deploys the website.

A. Add the path to the static content generation tool to WEBSITE_RUN_FROM_PACKAGE setting in the host.json file.

C. Create a file named run.cmd in the folder /run that calls a script which generates the static content and deploys the website.

Q42. You are developing a web app that is protected by Azure Web Application Firewall (WAF). All traffic to the web app is routed through an Azure Application Gateway instance that is used by multiple web apps. The web app address is contoso.azurewebsites.net . All traffic must be secured with SSL. The Azure Application Gateway instance is used by multiple web apps. You need to configure the Azure Application Gateway for the web app. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. In the Azure Application Gateway's HTTP setting, enable the Use for App service setting.

D. In the Azure Application Gateway's HTTP setting, set the value of the Override backend path option to contoso22.azurewebsites.net

B. Convert the web app to run in an Azure App service environment (ASE).

C. Add an authentication certificate for contoso.azurewebsites.net to the Azure Application Gateway.

Q44. You are developing a web application that runs as an Azure Web App. The web application stores data in Azure SQL Database and stores files in an Azure Storage account. The web application makes HTTP requests to external services as part of normal operations. The web application is instrumented with Application Insights. The external services are OpenTelemetry compliant. You need to ensure that the customer ID of the signed in user is associated with all operations throughout the overall system. What should you do?

A. Add the customer ID for the signed in user to the CorrelationContext in the web application

B. On the current SpanContext, set the TraceId to the customer ID for the signed in user

C. Set the header Ocp-Apim-Trace to the customer ID for the signed in user

D. Create a new SpanContext with the TraceFlags value set to the customer ID for the signed in user

Q49. You are developing several microservices to run on Azure Container Apps. External HTTP ingress traffic has been enabled for the microservices. The microservices must be deployed to the same virtual network and write logs to the same Log Analytics workspace. You need to deploy the microservices. What should you do?

D. Use a single environment for all containers.

A. Enable single revision mode.

B. Use a separate environment for each container.

C. Use a private container registry image and single image for all containers.

E. Enable multiple revision mode.

Q2.57-new You are developing an ASP.NET Core app hosted in Azure App Service. The app requires custom claims to be returned from Microsoft Entra ID for user authorization. The claims must be removed when the app registration is removed. You need to include the custom claims in the user access token. What should you do?

E. Add the roles to the appRoles attribute in the app manifest.

A. Require the https://graph.microsoft.com/.default scope during authentication.

B. Configure the app to use the OAuth 2.0 authorization code flow.

C. Implement custom middleware to retrieve role information from Azure AD.

D. Add the groups to the groupMembershipClaims attribute in the app manifest.

Q2.58-new You are developing a microservice to run on Azure Container Apps for a company. External HTTP ingress traffic has been enabled. The company requires that updates to the microservice must not cause downtime. You need to deploy an update to the microservices. What should you do?

A. Enable single revision mode.

B. Use multiple environments for each container.

C. Use a private container registry and single image for all containers.

D. Use a single environment for all containers.

E. Enable multiple revision mode.

Az204 Quiz

1.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Q1. You have two Hyper-V hosts named Host1 and Host2. Host1 has an Azure virtual machine named VM1 that was deployed by using a custom Azure Resource Manager template. You need to move VM1 to Host2. What should you do?

A. From the Update management blade, click Enable.

B. From the Overview blade, move VM1 to a different subscription.

C. From the Redeploy blade, click Redeploy.

D. From the Profile blade, modify the usage location.

Answer explanation

Correct Answer: C When you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and associated resources. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node

2.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Q2. Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-joined device. The cluster is located in a resource group. Developers have created an application named MyApp. MyApp was packaged into a container image. You need to deploy the YAML manifest file for the application. Solution: You install the Azure CLI on the device and run the kubectl apply `"f myapp.yaml command. Does this meet the goal?

Yes

No

Answer explanation

Correct Answer: A kubectl apply -f myapp.yaml applies a configuration change to a resource from a file or stdin. Reference: https://kubernetes.io/docs/reference/kubectl/overview/ https://docs.microsoft.com/en-us/cli/azure/aks

3.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Q3. Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-joined device. The cluster is located in a resource group. Developers have created an application named MyApp. MyApp was packaged into a container image. You need to deploy the YAML manifest file for the application. Solution: You install the docker client on the device and run the docker run -it microsoft/azure-cli:0.10.17 command. Does this meet the goal?

Yes

No

4.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Q4. Your company has a web app named WebApp1. You use the WebJobs SDK to design a triggered App Service background task that automatically invokes a function in the code every time new data is received in a queue. You are preparing to configure the service processes a queue data item. Which of the following is the service you should use?

A. Logic Apps

B. WebJobs

C. Flow

D. Functions

Answer explanation

Correct Answer: B Reference: https://docs.microsoft.com/en-us/azure/azure-functions/functions-compare-logic-apps-ms-flow-webjobs

5.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Q5. Your company has an Azure subscription. You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set. You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance. Which of the following is the value that you should configure for the platformFaultDomainCount property?

A. 10

B. 30

C. Min Value

D. Max Value

Answer explanation

platformFaultDomainCount = 3 = Max
platformUpdateDomainCount = 20
The number of fault domains for managed availability sets varies by region - either two or three per region. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

6.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Q6. Your company has an Azure subscription. You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set. You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance. Which of the following is the value that you should configure for the platformUpdateDomainCount property?

10

20

30

40

7.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Q7. This question requires that you evaluate the underlined text to determine if it is correct. You company has an on-premises deployment of MongoDB, and an Azure Cosmos DB account that makes use of the MongoDB API. You need to devise a strategy to migrate MongoDB to the Azure Cosmos DB account. You include the Data Management Gateway tool in your migration strategy. Instructions: Review the underlined text. If it makes the statement correct, select `No change required.` If the statement is incorrect, select the answer choice that makes the statement correct.

A. No change required

B. mongorestore

C. Azure Storage Explorer

D. AzCopy

8.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Q8. You are developing an e-Commerce Web App. You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure Active Directory (AAD). What should you do on the e-Commerce Web App?

A. Run the az keyvault secret command.

B. Enable Azure AD Connect.

C. Enable Managed Service Identity (MSI).

D. Create an Azure AD service principal.

9.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Q9. This question requires that you evaluate the underlined text to determine if it is correct. Your Azure Active Directory Azure (Azure AD) tenant has an Azure subscription linked to it. Your developer has created a mobile application that obtains Azure AD access tokens using the OAuth 2 implicit grant type. The mobile application must be registered in Azure AD. You require a redirect URI from the developer for registration purposes. Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed.` If the statement is incorrect, select the answer choice that makes the statement correct.

A. No change required.

B. a secret

C. a login hint

D. a client ID

Answer explanation

Correct Answer: A For Native Applications you need to provide a Redirect URI, which Azure AD will use to return token responses. Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-protocols-oauth-code

10.

MULTIPLE SELECT QUESTION

45 sec • 1 pt

Q10. You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days. Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

A. EnabledForDeployment

B. EnablePurgeProtection

C. EnabledForTemplateDeployment

D. EnableSoftDelete

Az204

168 questions

Q1. You have two Hyper-V hosts named Host1 and Host2. Host1 has an Azure virtual machine named VM1 that was deployed by using a custom Azure Resource Manager template. You need to move VM1 to Host2. What should you do?

Correct Answer: C When you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and associated resources. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node

Correct Answer: A kubectl apply -f myapp.yaml applies a configuration change to a resource from a file or stdin. Reference: https://kubernetes.io/docs/reference/kubectl/overview/ https://docs.microsoft.com/en-us/cli/azure/aks

Correct Answer: B Reference: https://docs.microsoft.com/en-us/azure/azure-functions/functions-compare-logic-apps-ms-flow-webjobs

platformFaultDomainCount = 3 = Max
platformUpdateDomainCount = 20
The number of fault domains for managed availability sets varies by region - either two or three per region. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

Q8. You are developing an e-Commerce Web App. You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure Active Directory (AAD). What should you do on the e-Commerce Web App?

Correct Answer: A For Native Applications you need to provide a Redirect URI, which Azure AD will use to return token responses. Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-protocols-oauth-code

Q10. You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days. Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

Create a free account and access millions of resources

Popular Resources on Wayground

Discover more resources for Architecture

Az204

168 questions

Q1. You have two Hyper-V hosts named Host1 and Host2. Host1 has an Azure virtual machine named VM1 that was deployed by using a custom Azure Resource Manager template. You need to move VM1 to Host2. What should you do?

Correct Answer: C When you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and associated resources. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node

Correct Answer: A kubectl apply -f myapp.yaml applies a configuration change to a resource from a file or stdin. Reference: https://kubernetes.io/docs/reference/kubectl/overview/ https://docs.microsoft.com/en-us/cli/azure/aks

Correct Answer: B Reference: https://docs.microsoft.com/en-us/azure/azure-functions/functions-compare-logic-apps-ms-flow-webjobs

platformFaultDomainCount = 3 = MaxplatformUpdateDomainCount = 20The number of fault domains for managed availability sets varies by region - either two or three per region. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

Q8. You are developing an e-Commerce Web App. You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure Active Directory (AAD). What should you do on the e-Commerce Web App?

Correct Answer: A For Native Applications you need to provide a Redirect URI, which Azure AD will use to return token responses. Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-protocols-oauth-code

Q10. You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days. Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

Create a free account and access millions of resources

Popular Resources on Wayground

Discover more resources for Architecture

platformFaultDomainCount = 3 = Max
platformUpdateDomainCount = 20
The number of fault domains for managed availability sets varies by region - either two or three per region. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability