The DevOps admin team is reporting issues with bugs and general performance in the automation processes set up for deploying resources to Azure. Your manager has asked you to to start by auditing and validating the ARM templates used in the last 30 days. What is the best way to do this?

Use the ARM template test toolkit to test for errors and best practices.

Run each ARM template in Azure on a separate subscription, designated for testing.

Use one of many JSON validation tools available to ensure the ARM templates will run smoothly.

Upload the ARM templates to Azure Resource Manager Studio for testing.

You have a web application that uses Azure Blob storage. Currently, Azure lifecycle management is set to move all blobs to the archive tier after 90 days without being accessed or modified. You need to report to your leadership how long it would take to collect the archived data in the event it needs to be retrieved. How long should you tell them it will take to reasonably get data requested from the archive tier?

Only a few minutes, but it will be very expensive

Which Azure CLI command would you use to create an Event Hubs namespace called az204hubns?

az eventhubs namespace create --name az204hubns --resource-group acg204RG -l 'East US'

az eventhubs namespace update --name az204hubns --resource-group acg204RG --sku Basic

az eventhubs eventhub new --name az204hub --resource-group acg204RG --namespace-name az204hubns

az eventhubs eventhub create --name az204hub --resource-group acg204RG --namespace-name az204hubns

You have a Cosmos DB account that manages data for a suite of applications. For one of these applications, you need to keep track of changes to individual items in a specific container. When a change is made, you want to capture the change, filter the data for relevance, and pass it along to an Azure Storage queue. What is the most efficient way to implement and automate this?

Create an Azure Function with a Cosmos DB trigger, which will trigger off of the Cosmos DB change feed for the selected container.

Feed the Cosmos DB logs into Azure Log Analytics, and extract the changes.

In a notebook, write a time-series query against the container items and write the results to the storage queue.

Create an Cosmos DB account input on an Azure Stream Analytics job to track changes.

The ordering system for your company is getting an upgrade, which will update data in a separate customer-facing application whenever an order is accepted and a delivery date is calculated. The order system processes, at most, 1,000 orders per day, and the order application is built using Azure Functions. What is the simplest, most efficient, and economical way for the ordering system to notify the customer-facing application when an order is complete?

Use an HTTP-triggered Azure function, which can update the customer-facing application when the order is accepted and a delivery date is calculated.

Use an Azure Event Hub to collect and manage the order completion events. Then, build a pipeline to send the data to the customer-facing application.

Use Cosmos DB for the data order and use a Cosmos DB trigger to fire an Azure function, which can update the customer-facing application when the order is accepted and a delivery date is calculated.

Poll the order database from the customer-facing application at set intervals to check for accepted orders.

Which is the correct Azure CLI command to provision a virtual machine (VM) named 204ftw, which runs Ubuntu Linux, is in the test204 resource group, and has a system-generated SSH key?

'az vm create --resource-group test204 --name 204ftw --image UbuntuLTS \ --admin-username azureuser --generate-ssh-keys'

'az vm update --resource-group test204 -n 204ftw --image UbuntuLTS \ --admin-username azureuser --generate-ssh-keys'

'az vm create --resource-group 204ftw --name test204 --image UbuntuLTS \ --admin-username azureuser --generate-ssh-keys'

'az vm create -g test204 -n 204ftw --image UbuntuLTS --admin-username \ azureuser --ssh-key-value system'

What are some hallmarks of, or advantages to, using Azure Queue Storage queues?

Access the storage queue through HTTP/HTTPS from anywhere in the world

Messages processed in real time are free

Process large messages up to 2 GB in size

You have an application with frontend services, and a few backend services, hosted on Azure App Service. A handful of serverless Azure Functions also participate in the full application workflow. Application secrets are stored in Azure Key Vault, and all components need the same read-related permissions for the secrets. The secrets must not be stored or transmitted, in any form, in the application or any application runtime environment. Any changes made in Azure Active Directory that are required to complete the solution should be minor. You are responsible for designing the approach to loading the application secrets. Which set of general steps describes the optimal approach for security, efficiency, and maintenance?

1. In the key vault, create an access policy with role-based access control within the key vault. 2) Create a single, user-assigned managed identity and add a role assignment to your key vault with the appropriate role and scope. 3) Configure application components to use the managed identity when accessing the key vault.

1. Create an Azure Active Directory service principal for each of the Azure App Service and the Azure Function Apps services. 2) Create hashed key vault credentials in the Azure App Configuration service. 3) Use the service principal and the credentials to access the key vault.

1. Create a system-assigned managed identity for each app. 2) In the key vault, create an access policy with specific permissions for each service principal associated with the managed identities. 3) Configure application components to use the managed identity when accessing the key vault.

1. Build a function, whose sole purpose is to retrieve secrets from the key vault, and pass them back to application components over an encrypted connection. 2) Create a system-assigned managed identity for the function. 3) In the key vault, create an access policy with appropriate permissions, and assign it to the security principal for the managed identity.

The infrastructure you are designing for your new recipe sharing application is using Azure Functions as part of the architecture. The functions will work in conjunction with the application hosted on an App Service plan that currently runs close to computing capacity. The functions are expected to have minimum use, as they perform a critical but infrequent maintenance task. What is the most cost-effective service to host these functions?

Use a consumption (serverless) plan.

Use the existing App Service plan hosting the main application.

Scale up the existing App Service Plan and use that.

Create a new App Service plan only for the Functions.

Which of the following options are valid levels for generating and using shared access signatures (SAS) in Azure Blob Storage?

Object level (individual blobs)

An existing API is going to be migrated to Azure for hosting. The API follows the OpenAPI version 3.1.0 definition. What is the most efficient way to move it to Azure?

Use API Management to import the JSON definition of the API.

The OpenAPI definition of the existing API is in JSON, so simply copy-paste it into the resources section of an ARM template and deploy the template.

Import the API into a serverless Azure Function App, then publish the function in Azure API Management.

Add the API Management third-party plugin for Swagger, which allows importing of OpenAPI definitions.

Azure Cache for Redis would be the most effective tool for which of the following use cases?

An application backend database that stores customer and application data

A document store database that houses patient data

A regional cache to store commonly requested objects, such as videos or images

Recently, your company implemented new compliance standards that require new access controls to be set on your company files at rest in your Azure Storage containers. These standards require access to be controlled and managed based on factors such as IP address (for firewall configuration) and Azure Active Directory rights, as opposed to configurations for individual users, applications, and security principals. In order to be in compliance with this new standard, which feature should you implement to manage file access?

Role-based access control (RBAC)

Primary and secondary connection strings

Shared access signature (SAS) token

System-assigned managed identities

After deploying a web app or website, you can set up recurring tests in Application Insights to monitor availability and responsiveness. Which of these best describes the Custom TrackAvailability test?

The Custom TrackAvailability test is the long-term supported solution for multi-request or authentication test scenarios.

A single request test that includes SSL certificate validity, proactive lifetime check, HTTP request verb, custom headers, and custom data associated with the HTTP request.

A well-known and quick way to test endpoint availability.

A performance troubleshooting feature.

There have been some concerns in your company about the security of the Azure Web Apps you are running. Your development manager has asked you to ensure data traffic flowing to and from the Web Apps is secure. What is the best way to do this?

Install an SSL certificate on the App Service itself to encrypt all the web traffic.

Use a system-assigned managed identity to remove the need for credentials passing through the network.

Use Azure Key Vault to protect the database connection and encrypt web app access credentials.

Use an App Service deployment slot to redirect traffic through a secure zone.

You're developing an application with a plan to use Azure Cosmos DB as your data storage solution. Security requirements dictate specific rules around administrators who need to modify or program the database, while having no access to the data inside. Examples of operations that administrators should be allowed to do include deploying accounts, databases, and containers. You've created an Azure Active Directory group named CosmosDB Ops, and the identities of administrators who fit this access profile have been added to the group. What built-in RBAC role can you apply to this group to allow the access specified?

You will need to create a custom role.

You need to develop a solution that leverages Azure Active Directory. Using Azure CLI, you need to create a role and then assign users to that role. In Azure CLI, which pair of commands, in the order given, can you use to create a role and then assign a user to that role?

First use az role definition create, then az role assignment create.

First use az role definition create, then az role assignment list.

First use az role definition list, then az role assignment create.

First use az role assignment create, then az role definition create.

Among several options for logging and diagnostics in the Azure Apps Service, you can enable Application for Windows under one of two options: filesystem or blob. Which of these is the most appropriate scenario for the filesystem option?

When only needing application logging for temporary debugging purposes

When you need long-term application logging and storage

When you need to log as many details as possible for the logs

When you need to regenerate the access keys for the storage account that stores the logs

You have an application that leverages an Azure Content Delivery Network (CDN). You need to ensure that new requests will cache data retrieved from the source and continue to return data from the cache for subsequent requests for the same object. The service should only refresh the cache by retrieving a new base object from the source when the cached object reaches its set expiration date — also referred to as the Time To Live (TTL) setting. Which Query String behavior setting should you use to accomplish this?

Bypass Caching for Query Strings

Which PowerShell cmdlet is used to create a new Azure Container Registry?

New-AzContainerRegistryReplication

Import-AzContainerRegistryImage

Get-AzContainerRegistryRepository

You have a virtual machine scale set named ElasticMagic. You've recently been asked to create a managed identity to allow communication from this scale set to other resources in Azure; however, the identity needs to be managed as part of the scale set rather than as an individual Azure Active Directory object. Which Azure CLI snippet could be used to create a managed identity and ensure it is built as part of the scale set?

az vmss identity assign --resource-group cookingWithGas --name ElasticMagic

az vm identity assign --resource-group cookingWithGas --name ElasticMagic

az vm identity create --resource-group cookingWithGas --name ElasticMagic

az vmss identity create --resource-group cookingWithGas --name ElasticMagic

Which of these are key features or purposes of the service that differentiates Event Grid from somewhat similar services that deal with events and messages in Azure?

Designed for event-driven programming patterns

IoT device telemetry and distributed data streaming

Real-time event streaming of big data in a series

Storage of large volumes of messages

You are in charge of a critical Azure App Service application that serves a large portion of your company's customers. The traffic spikes to the service are unpredictable, and there have been issues in the past with outages due to high load. Which scaling approach would you take to fix this most economically and with the least maintenance?

Set up a custom autoscale rule that scales the number of instances based on CPU load.

Move the App Service to run on a VM, in order to use VM Scale Sets.

Manually scale the instance count to one more instance than the current deployment.

Scale up to an instance with more memory and high total ACU.

You are tasked with deploying an App Service to a new App Service plan. The app requires a lot of memory to run, as well as secure network access within Azure. Which is the best App Service plan to choose?

All App Service plans can provide more memory and are secure.

Which properties and features can you leverage when using a Windows Azure Container Instance (ACI) for your application?

Integration with Docker Hub and Azure Container Registry (ACR)

Fully qualified domain name (FQDN)

Access to the virtual machine running the container

Virtual Network (VNet) deployments

What does it mean to employ "peeking" in Azure Queue Storage queues?

Retrieving a queue message without removing it from the queue

Moving a message from one queue to another queue

Retrieving the queue placement of a specific message on the queue

Creating a "ghost" message for testing the queue

You have an API hosted with Azure API Management that needs to allow cross-domain calls from browser-based clients. What is the best way to do this?

Implement a cross-origin resource sharing (CORS) policy.

Create a clone of the API and host it in a sandbox environment to protect the other APIs.

Authenticate the API client with a client certificate for the domain.

Do nothing. Cross-domain calls are allowed by default in Azure API Management.

You are developing an application hosted in the Azure App Service. You have a system-assigned managed identity set up for the application, and you need to use C# code and the Microsoft.Azure.Services .AppAuthentication NuGet package to retrieve an access token for the managed identity. Which class and method in the Azure App Service SDK is the right approach to gain access?

Use AzureServiceTokenProvider.GetAccessTokenAsync.

Write a custom TokenProvider for your application.

Use AzureTokenProvider.GetAccessToken.

Use AzureServiceTokenProvider.GetAccessToken.

You have an application that uses Azure Blob storage. Recently, you were informed that you will need to create another storage account in a new region and ensure the data is copied over to the new account. Data needs to be transferred directly to the new storage server, and the storage account needs to be configured the same as the source account. What is the first thing you should do?

Create a new template deployment and export an ARM template describing the source storage account.

Use AzCopy with the --new parameter to copy the data and replicate the storage account.

Utilize AzCopy to copy data to the new storage account.

Create a storage account in the new region.

AZ-204 Practice Exam 2

Authored by Jose Diaz

Computers

1st Grade

Used 5+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

50 questions

Show all answers

MULTIPLE CHOICE QUESTION

15 mins • 1 pt

Your company has started developing a web application that will allow management of inventory operations and allow backend administrative activities for changing inventory status. The website needs to interact with an API to perform operations on behalf of the user signed in. You've recently registered your application with Azure Active Directory, but you need to add Azure Active Directory API permissions in order to call an API. Which type of permission does your application require?

Both application and delegated permissions

Delegated permission

User.Read permission

Application permission

MULTIPLE CHOICE QUESTION

15 mins • 1 pt

Your company has recently begun operating in additional countries, requiring changes to multiple operations throughout your enterprise to allow for international availability. As a web developer, it's fallen on you to ensure your company's website provides a smooth experience to potential customers in your company's new regions and ensure things like video content can be viewed efficiently. Which option should you choose for your website to deliver this experience?

Increase your web app's service tier to account for the additional load the new regions will create.

Use ARM templates and deployment slots to deploy a duplicate web app in each region where your company has expanded its footprint.

Deploy a Content Delivery Network (CDN) and place nodes as close as possible to each region where your company has expanded its footprint.

Utilize Azure Media Services to ensure your video content is available to multiple regions.

MULTIPLE CHOICE QUESTION

15 mins • 1 pt

You've been given an initiative to ensure that files in your company's blob containers are shifted between blob performance tiers based on a variety of factors, such as overall age of the file, the last time certain files were modified, and the last time files were accessed. You need to ensure that files exist in the most cost-efficient tier based on these factors. What feature in Azure can you use to accomplish this in an automated fashion?

Use a blob trigger to initiate a tier swap

Use Azure Automation

Create an Azure function to transition the blobs

Use lifecycle management

MULTIPLE CHOICE QUESTION

15 mins • 1 pt

Which of these components provides a single endpoint for SDKs to connect and use Microsoft Graph data?

GraphQL

Microsoft Graph connectors

Microsoft Graph API

Microsoft Graph Data Connect

MULTIPLE CHOICE QUESTION

15 mins • 1 pt

You have an existing Azure Management API and now need to change the backend service URL. What is the best PowerShell cmdlet to use for this task?

Set-AzApiManagementPolicy

Set-AzApiManagementGroup

Set-AzApiManagementApi

Set-AzApiManagementNamedPolicy

MULTIPLE CHOICE QUESTION

15 mins • 1 pt

Event Hubs is a big data streaming platform, which can integrate with Azure services for both batch and real-time data processing solutions. Ultimately, the processed data will likely be stored in a database or Azure storage solution. However, you can also intercept and store the incoming data in near real time using an Event Hubs feature. What is the name of that feature?

Event Hubs Avro

Event Hubs Intercept

Event Hub Consumer Groups

Event Hubs Capture

MULTIPLE SELECT QUESTION

15 mins • 1 pt

What Docker commands could you use to create a container using a directory called acg in the branch az204?

$ docker image build https://github.com/MyCompany-Resources/az204/computekit.git#az204:acg

$ docker build https://github.com/MyCompany-Resources/az204/computekit.git#az204:acg

$ docker build https://github.com/MyCompany-Resources/az204/computekit.git#acg:az204

'$ docker commit 197387f1b436 az204/computekit:acg'

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

51 questions

IC3 GS5 CF GMETRIX 3

Quiz

•

1st Grade

45 questions

GCSE Python Legends

Quiz

•

1st - 12th Grade

50 questions

UAS Administrasi Sistem Jaringan XII

Quiz

•

1st - 3rd Grade

50 questions

UTK - drukarki , skanery , plotery

Quiz

•

1st Grade - Professio...

50 questions

VOIP XII

Quiz

•

1st Grade - University

48 questions

Minecraft Quiz

Quiz

•

1st - 5th Grade

55 questions

on tap lop 10

Quiz

•

1st Grade

50 questions

Quiz Latihan Soal-Soal UTS Keamanan Jaringan

Quiz

•

KG - University

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

10 questions

Probability Practice

Quiz

•

4th Grade

15 questions

Probability on Number LIne

Quiz

•

4th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

6 questions

Appropriate Chromebook Usage

Lesson

•

7th Grade

10 questions

Greek Bases tele and phon

Quiz

•

6th - 8th Grade

Discover more resources for Computers

12 questions

Presidents' Day

Quiz

•

KG - 5th Grade

20 questions

Telling Time to the Hour and Half hour

Quiz

•

1st Grade

10 questions

Exploring Rosa Parks and Black History Month

Interactive video

•

1st - 5th Grade

16 questions

Morning Math Review

Lesson

•

1st - 5th Grade

17 questions

Reading Comprehension

Quiz

•

1st - 4th Grade

16 questions

3D shapes (1st grade)

Quiz

•

1st Grade

20 questions

Place Value

Quiz

•

KG - 3rd Grade

6 questions

President's Day

Lesson

•

1st Grade