Which of the following is the correct way to securely store and retrieve secrets in an Azure Function app?

You are building a backend service that needs to access Azure Blob Storage. You decide to use a connection string stored in code.

Solution: Store the connection string in the source code and deploy it with the application.

Does the solution meet the goal?

Which Azure service allows you to manage feature flags and app settings centrally?

You are developing an Azure Function that needs to access a secret stored in Azure Key Vault. You configure a system-assigned managed identity for the function and grant it access to the Key Vault.

Solution: Use the Azure SDK to authenticate with the managed identity and retrieve the secret.

Does the solution meet the goal?

What is the purpose of a Shared Access Signature (SAS) in Azure Storage?

You are developing a web app that needs to access Azure Blob Storage. You decide to use a user-assigned managed identity and assign it to the app. However, you forget to grant the identity access to the storage account.

Solution: The app will still be able to access the storage account using the managed identity.

Does the solution meet the goal?

Which Microsoft service allows you to programmatically access user data in Microsoft 365, such as emails and calendars?

You are developing a service that needs to authenticate users using Microsoft Entra ID. You register the app in Entra ID and configure OAuth 2.0 authentication.

Solution: Use the Microsoft Authentication Library (MSAL) to acquire tokens.

Does the solution meet the goal?

Which of the following is NOT a valid use case for Azure Managed Identities?

You are developing a background service that needs to access Microsoft Graph to read user profiles. You configure the app with delegated permissions.

Solution: The service will be able to access user profiles without a signed-in user.

Does the solution meet the goal?

Which of the following is required to use a system-assigned managed identity?

You are developing an app that needs to securely store configuration values. You decide to use Azure App Configuration.

Solution: Store the values in App Configuration and access them using the Azure SDK.

Does the solution meet the goal?

Which of the following is a benefit of using Azure Key Vault?

You are developing a web app that needs to access Azure Storage. You decide to use a Shared Access Signature (SAS) that never expires.

Solution: This approach ensures long-term secure access.

Does the solution meet the goal?

You are developing a microservice that needs to access Azure SQL Database. You enable a system-assigned managed identity on the service and grant it the "SQL DB Contributor" role.

Solution: The microservice will be able to connect to the database using Azure AD authentication.

Does the solution meet the goal?

Which of the following permissions is required for an app to read user profile data using Microsoft Graph with application permissions?

You are developing a web app that needs to access Azure Key Vault. You configure a user-assigned managed identity but forget to assign it to the app.

Solution: The app will still be able to access Key Vault using the default credentials.

Does the solution meet the goal?

You are building a service that needs to access Azure Storage for a limited time. You generate a SAS token with read-only permissions and a 1-hour expiry.

Solution: Use the SAS token in the service to access the storage.

Does the solution meet the goal?

Which of the following is a valid reason to use Azure App Configuration over Azure Key Vault?

You are developing a background job that needs to access Microsoft Graph. You configure delegated permissions in Entra ID.

Solution: The job will be able to access Microsoft Graph without user interaction.

Does the solution meet the goal?

You are developing a web API that needs to authenticate users via Microsoft Entra ID. You configure the app registration and enable OAuth 2.0 authorization code flow.

Solution: Use MSAL to acquire tokens and validate them in the API.

Does the solution meet the goal?

You are developing a service that needs to access Azure Key Vault. You decide to use a connection string stored in a configuration file.

Solution: This is a secure and scalable approach.

Does the solution meet the goal?

You are developing a web app that needs to access Azure Blob Storage. You configure a user-assigned managed identity and assign it the "Storage Blob Data Contributor" role.

Solution: Use the Azure SDK to authenticate using the managed identity.

Does the solution meet the goal?

You are developing a mobile app that needs to authenticate users. You decide to use Azure AD B2C but configure it with Microsoft Entra ID instead.

Solution: This setup will allow external users to sign in with social accounts.

Does the solution meet the goal?

Which of the following is the correct way to grant an Azure Function access to Azure Key Vault using a system-assigned managed identity?

Which Azure service allows you to centrally manage and distribute certificates, secrets, and encryption keys?

Which Azure service allows you to authenticate and authorize users in a multi-tenant application?

What is the primary benefit of using application permissions in Microsoft Graph?

Which of the following is required to access Azure Key Vault from an Azure App Service using a managed identity?

Which Microsoft Identity platform flow is best suited for single-page applications (SPAs)?

What is the purpose of the DefaultAzureCredential class in the Azure SDK?

Which of the following is a valid reason to use a user-assigned managed identity over a system-assigned one?

Which of the following is true about Azure Key Vault access policies and RBAC?

You are developing an Azure-hosted application that needs to access Azure Storage securely without managing credentials. Which approach should you use?

Which of the following is required to enable distributed tracing in Application Insights?

You want to be notified when your application throws more than 10 exceptions in a 5-minute window.

Solution: Create an alert rule in Application Insights based on the exception count metric.

Does the solution meet the goal?

Which of the following can be used to create custom dashboards for telemetry data in Azure?

You want to monitor the number of database timeouts in your application. You decide to use Azure Monitor metrics.

Solution: Use Azure Monitor metrics to track SQL timeouts.

Does the solution meet the goal?

Which of the following is NOT a valid alert signal source in Azure Monitor?

You are developing a multi-tier application. You want to trace a request from the frontend to the backend services.

Solution: Use Application Insights with distributed tracing enabled.

Does the solution meet the goal?

What is the purpose of correlation IDs in Application Insights?

You want to monitor the number of users currently using your application. You decide to use Azure Monitor metrics.

Solution: Use Azure Monitor metrics to track active users.

Does the solution meet the goal?

Which of the following Application Insights features allows you to view telemetry in near real-time?

You are developing a web application that experiences intermittent slow response times. You want to identify the root cause.

Solution: Use Application Insights to analyze request and dependency telemetry.

Does the solution meet the goal?

Which of the following is required to enable Application Insights in an Azure Function app?

You want to monitor the performance of a background job running in Azure App Service.

Solution: Use Application Insights to track custom events and dependencies.

Does the solution meet the goal?

Which of the following can trigger an alert in Application Insights?

You want to monitor your app’s memory usage using Application Insights.

Solution: Use Application Insights metrics to track memory usage.

Does the solution meet the goal?

What is the primary benefit of using distributed tracing in Application Insights?

You want to monitor the live performance of your app, including request rates and failure rates.

Solution: Use the Live Metrics Stream in Application Insights.

Does the solution meet the goal?

Which of the following is NOT a telemetry type collected by default in Application Insights?

You want to monitor the number of failed login attempts in your application.

Solution: Track custom events in Application Insights for each failed login.

Does the solution meet the goal?

Which of the following features in Application Insights helps detect performance anomalies automatically?

You are developing a microservices-based application. You want to trace a request across multiple services. You decide to use Azure Monitor metrics.

Solution: Use Azure Monitor metrics to trace the request.

Does the solution meet the goal?

Which of the following is NOT a benefit of using Application Insights?

You want to be alerted when the average response time of your web app exceeds 2 seconds.

Solution: Create an alert rule in Application Insights based on the server response time metric.

Does the solution meet the goal?

Which tool allows you to write custom queries to analyze telemetry data collected by Application Insights?

You are building a web app and want to monitor failed HTTP requests. You decide to use Azure Monitor metrics only.

Solution: Use Azure Monitor metrics to track failed requests.

Does the solution meet the goal?

Which of the following is NOT a valid way to instrument an app with Application Insights?

You are developing a backend API hosted in Azure App Service. You want to track dependencies such as SQL Database calls.

Solution: Use Application Insights SDK to instrument the application.

Does the solution meet the goal?

You want to monitor the availability of your web app from multiple geographic locations. Which Application Insights feature should you use?

You are troubleshooting a performance issue in your Azure Function app. You decide to enable Application Insights and expect it to automatically start collecting telemetry without any code changes.

Solution: Enable Application Insights from the Azure portal without modifying the function code.

Does the solution meet the goal?

Which of the following telemetry types can Application Insights collect?

You are developing a web application hosted on Azure App Service. It must scale out automatically based on CPU usage.

Solution: Configure autoscale settings in Azure App Service.

Does the solution meet the goal?