Microsoft AZ-204 Exam Dumps

Developing Solutions for Microsoft Azure

Microsoft AZ-204 Sample Questions

Question # 1

You need to support local development testing for developers. Which tool should you use? 

A. Azurite  
B. Azure Storage Emulator  
C. SQL Server Management Studio (SSMS)  
D. Azure Storage Explorer  

Show Answer

Question # 2

You need to implement the processing of enqueuer inventory items.Which message value should you use?

A. Session identifier  
B. Sequence number  
C. Partition key  
D. Time stamp  

Show Answer

Question # 3

You need to mitigate the Azure Cache for Redis issue.What are two possible ways to achieve this goal? Each correct answer presents part of thesolution.NOTE: Each correct selection is worth one point.

A. Increase the maxmemory-reserved and maxfragmenTationmemory-reserved values  
B. Modify the maxmemory policy to evict the least frequently used keys out of all keys.  
C. Configure client connections to retry commands with exponential backoff.  
D. Test application code by purging the cache in the test environment.  
E. Test application code by rebooting all nodes in the test environment.  

Show Answer

Question # 4

You need to securely access inventory items when developing the Inventory Items API.What are three possible ways to achieve this goal? Each correct answer presents acomplete solution.NOTE: Each correct selection is worth one point.

A. Create a custom Microsoft Entra roleAssign the custom role to the Azure Cosmos DB account Update the function app to usecertificate-based authentication. 
B. Create a SQL role definition under the Azure Cosmos DB account.Create a user-assigned managed identity and assign the identity to the function app.Assign the user-assigned managed identity the SQL role definition.Update the function app code to implement the DefaultAzurecredential class and referencethe user-assigned managed identity. 
C. Create a system-assigned managed identity for the function app with read access tosecrets in Azure Key Vault. Store the Azure Cosmos DB primary key and URI in Azure KeyVault as secrets.Use function app settings to reference the secret values.
D. Create a custom Microsoft Entra role. Assign the custom role to Azure Key Vault. Assignthe custom role to the function app.Reference the custom role in the function app code when accessing Azure Key Vaultvalues.
E. Create a SQL role definition under the Azure Cosmos DB account. Assign the role to thefunction app's system-assigned managed identity. Programmatically access the AzureCosmos OB keys from the function app. 

Show Answer

Question # 5

You need to serve static content from the corporate website.What are two possible ways to achieve this goal? Each correct answer presents acomplete solution.NOTE: Each correct selection is worth one point.

A. Store all static content in Azure Blob Storage. Enable Azure Content Delivery Networkfor the storage account. 
B. Configure App Service networking to create a Content Delivery Network profile andendpoint. 
C. Configure the Azure App Service Local Cache feature and set the app settingWEBSITE_LOCAL_CACHE_SIZEINMB value. 
D. Update the Azure Traffic Manager routing method to priority.  
E. Create a nested Azure Traffic Manager profile. Configure the parent profile to theperformance traffic routing method and the chtld profile to the priority traffic routing method. 

Show Answer

Question # 6

You need to configure all site configuration settings for the corporate website.Which three actions should you perform? Each correct answer presents part of thesolution.NOTE: Each correct selection is worth one point.

A. Create a managed identity.  
B. Update the role assignments for the Azure App Configuration store  
C. Create an Azure Key Vault.  
D. Create an Azure App Configuration store.  
E. Update the role assignments for the Azure Key Vault.  

Show Answer

Question # 7

You need to implement farmer authentication.Which three actions should you perform? Each correct answer presents part of thesolution.NOTE: Each correct selection is worth one point.

A. Add the shared access signature (SAS) token to the app  
B. Create a shared access signature (SAS) token.  
C. Register the app in Microsoft Entra ID.  
D. Create a user flow.  
E. Add the app to the user flow.  

Show Answer

Question # 8

You need to implement an aggregate of telemetry values for distributor API calls.Which Application Insights API method should you use?

A. TrackTrace  
B. Track Exception  
C. TrackEvent  
D. TrackDependency  
E. TrackMetric  

Show Answer

Question # 9

You need to secure the corporate website to meet the security requirements.What should you do?

A. Create an App Service instance with a standard plan. Configure the custom domain witha TLS/SSL certificate. 
B. Create an Azure Application Gateway with a Web Application Firewall (WAF). Configureend-to-end TLS encryption and the WAF. 
C. Create an Azure Cache for Radis instance. Update the code to support the cache.  
D. Create an Azure Content Delivery Network profile and endpoint. Configure the endpoint.  

Show Answer

Question # 10

You need to test the availability of the corporate website. Which two test types can you use? 

A. Custom testing using the TrackAvailability API method  
B. Standard  
C. URL Ping  
D. Multi-step  

Show Answer

Question # 11

You need to secure the Azure Functions to meet the security requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Store the RSA-HSM key in Azure Cosmos DB. Apery the built-in policies for customer-managed keys and allowed locations.
B. Create a free tier Azure App Configuration instance with a new Azure AD service principal.
C. Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled.
D. Store the RSA-HSM key in Azure Blob storage with an Immutability policy applied to the container. 
E. Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

Show Answer

Question # 12

You need to grant access to the retail store location data for the inventory service development effort. What should you use? 

A. Azure AD access token  
B. Azure RBAC role  
C. Azure AD ID token  
D. Shared access signature (SAS) token  
E. Azure AD refresh token  

Show Answer

Question # 13

you need to reduce read latency for the retail store solution.What are two possible ways to achieve the goal? Each correct answer presents a completesolution.NOTE: Each correct selection is worth one point.

A. Create a new composite index for the store location data queries in Azure Cosmos DB.Modify the queries to support parameterized SQL and update the Azure function app to callthe new Queries.
B. Configure Azure Cosmos DB consistency to strong consistency Increase the RUs for thecontainer supporting store location data. 
C. Provision an Azure Cosmos OB dedicated gateway, update blob storage to use the newdedicated gateway endpoint. 
D. Configure Azure Cosmos DB consistency to session consistency. Cache session tokensin a new Azure Redis cache instance after every write. Update reads to use the sessiontoken stored in Azure Redis. 
E. Provision an Azure Cosmos DB dedicated gateway Update the Azure Function appconnection string to use the new dedicated gateway endpoint.

Show Answer

Question # 14

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this section, you will NOT be able to return to it. As a result,these questions will not appear on the review screen.You are implementing an application by using Azure Event Grid to push near-real-timeinformation to customers.You have the following requirements:• You must send events to thousands of customers that include hundreds of various eventtypes.• The events must be filtered by event type before processing.• Authentication and authorization must be handled by using Microsoft Entra ID.• The events must be published to a single endpoint.You need to implement Azure Event Gnd.Solution: Publish events to a custom topic. Create an event subscription for each customer.Does the solution meet the goal?

A. Yes  
B. No  

Show Answer

Question # 15

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this section, you will NOT be able to return to it. As a result,these questions will not appear on the review screen.You are implementing an application by using Azure Event Grid to push near-real-timeinformation to customers.You have the following requirements:• You must send events to thousands of customers that include hundreds of various eventtypes.• The events must be filtered by event type before processing.• Authentication and authorization must be handled by using Microsoft Entra ID.• The events must be published to a single endpoint.You need to implement Azure Event Grid.Solution: Publish events to a partner topic. Create an event subscription for each customer.Does the solution meet the goal?

A. Yes 
B. No 

Show Answer

Question # 16

You are a developing a SaaS application that stores data as key value pairs.You must make multiple editions of the application available. In the lowest cost edition, theperformance must be best-effort, and there is no regional failover.In higher cos! editions customers must be able to select guaranteed performance andsupport for multiple regions. Azure costs must be minimized.Which Azure Cosmos OB API should you use for the application?

A. Core 
B. MongoDB 
C. Cassandra 
D. Table API 

Show Answer

Question # 17

An organization hosts web apps in Azure. The organization uses Azure Monitor Youdiscover that configuration changes were made to some of the web apps. You need toidentify the configuration changes. Which Azure Monitor log should you review?

A. AppServiceEnvironmentPlatformLogs  
B. AppServiceApplogs  
C. AppServiceAuditLogs  
D. AppServiceConsoteLogs  

Show Answer

Question # 18

You develop and add several functions to an Azure Function app that uses the latestruntime host. The functions contain several REST API endpoints secured by using SSL.The Azure Function app runs in a Consumption plan.You must send an alert when any of the function endpoints are unavailable or respondingtoo slowly.You need to monitor the availability and responsiveness of the functions.What should you do?

A. Create a URL ping test.  
B. Create a timer triggered function that calls TrackAvailability() and send the results to Application Insights. 
C. Create a timer triggered function that calls GetMetric("Request Size") and send the results to Application Insights.
D. Add a new diagnostic setting to the Azure Function app. Enable the FunctionAppLogs and Send to Log Analytics options. 

Show Answer

Question # 19

You are implementing an Azure API app that uses built-in authentication and authorizationfunctionality.All app actions must be associated with information about the current user.You need to retrieve the information about the current user.What are two possible ways to achieve the goal? Each correct answer presents a completesolution.NOTE: Each correct selection is worth one point.

A. HTTP headers  
B. environment variables  
C. /.auth/me HTTP endpoint  
D. /.auth/login endpoint  

Show Answer

Question # 20

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this question, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.Margie’s Travel is an international travel and bookings management service. The companyis expanding into restaurant bookings. You are tasked with implementing Azure Search forthe restaurants listed in their solution.You create the index in Azure Search.You need to import the restaurant data into the Azure Search service by using the AzureSearch .NET SDK.Solution:1. Create a SearchServiceClient object to connect to the search index.2. Create a DataContainer that contains the documents which must be added.3. Create a DataSource instance and set its Container property to the DataContainer.4. Set the DataSources property of the SearchServiceClient.Does the solution meet the goal?

A. Yes  
B. No  

Show Answer

Question # 21

You are developing an ASP.NET Core website that uses Azure FrontDoor. The website isused to build custom weather data sets for researchers. Data sets are downloaded byusers as Comma Separated Value (CSV) files. The data is refreshed every 10 hours.Specific files must be purged from the FrontDoor cache based upon Response Headervalues.You need to purge individual assets from the Front Door cache.Which type of cache purge should you use?

A. single path 
B. wildcard 
C. root domain

Show Answer

Question # 22

You are developing an application to manage shipping information for cargo ships. Theapplication will use Azure Cosmos D8 for storage.The application must run offline when ships are at sea The application must be connectedto Azure when ships are in port.Which Azure Cosmos D8 API should you use for the application?

A. Core  
B. MongoDe  
C. Cassandra  
D. Gremlin  

Show Answer

Question # 23

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.You develop Azure solutions.You must grant a virtual machine (VM) access to specific resource groups in AzureResource ManagerYou need to obtain an Azure Resource Manager access token.Solution: Run the Invoke-RestMethod cmdlet to make a request to the local managedidentity for Azure resources endpoint.Does the solution meet the goal?

A. Yes  
B. No  

Show Answer

Question # 24

Vou have an on-premises, public-facing website named www.contoso.com.You plan to test availability of www.contoso.com by using Application Insights availabilitytests.You need to configure a test that will generate HTTP POST requests that include customheaders. Your solution must minimize development effort.Which type of test should you configure?

A. Multi-step web test  
B. Standard test  
C. URL ping test  
D. Custom TrackAvailability test  

Show Answer

Question # 25

You manage an Azure Key Vault named kv1 of Standard SKU.You plan to programmatically store in kv1 an asymmetric key pair and use the key pair forencryption and decryption.You must develop an application named app1 that will access the key pair in kv1.You need to configure an object to retrieve a key pair from kv1.Which object should you use? 

A. SecretClient  
B. KeyVaultSettingsClient  
C. CertificateClient  
D. KeyClient  

Show Answer

Question # 26

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this section, you will NOT be able to return to it As a result,these questions will not appear in the review screen.You deploy an Azure Container Apps app and disable ingress on the container app.Users report that they are unable to access the container app. You investigate and observethat the app has scaled to 0 instances.You need to resolve the issue with the container app.Solution: Enable ingress and configure the minimum replicas to 1 for the container app.Does the solution meet the goal?

A. Yes  
B. No  

Show Answer

Question # 27

You are building a web application that performs image analysis on user photos andreturns metadata containing objects identified. The image analysis is very costly in terms oftime and compute resources. You are planning to use Azure Redo Cache so Cacheuploads do not need to be reprocessed.In case of an Azure data center outage metadata loss must be kept to a minimum.You need to configure the Azure Redis cache instance.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection in worth one point.

A. Configure Azure Redis with persistence  
B. Configure second storage account for persistence  
C. Set backup frequency to the minimum value  
D. Configure Azure Redis with RDS persistence  

Show Answer

Question # 28

You have a Standard tier instance of Azure Cache for Radis named redis1 configured withthe default settings.You need to configure a Maxmemory policy to increase the amount of cache available forread operations.How should you configure the Maxmemory policy?

A. Decrease the value of maxmemory-reserved.  
B. Increase the value of maxmemory-reserved.  
C. Set the Maxmemory policy to noeviction.  
D. Set the Maxmemory policy to volatile-lru.  

Show Answer

Question # 29

You are developing an Azure-based web application. The application goes offline periodically to perform offline data processing. While the application is offline, numerousAzure Monitor alerts fire which result in the on-call developer being paged.The application must always log when the application is offline for any reason.You need to ensure that the on-call developer is not paged during offline processing.What should you do?

A. Add Azure Monitor alert processing rules to suppress notifications.  
B. Create an Azure Monitor Metric Alert.  
C. Build an Azure Monitor action group that suppresses the alerts.  
D. Disable Azure Monitor Service Health Alerts during offline processing.  

Show Answer

Question # 30

You are developing an Azure App Service REST API.The API must be called by an Azure App Service web app. The API must retrieve andupdate user profile information stored in Azure Active Directory (Azure AD).You need to configure the API to make the updates.Which two tools should you use? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point. 

A. Microsoft Graph API  
B. Microsoft Authentication Library (MSAL)  
C. Azure API Management  
D. Microsoft Azure Security Center  
E. Microsoft Azure Key Vault SDK  

Show Answer

Question # 31

You are developing an e-commerce solution that uses a microservice architecture.You need to design a communication backplane for communicating transactionalmessages between various parts of the solution. Messages must be communicated in firstin-first-out (FIFO) order.What should you use?

A. Azure Storage Queue  
B. Azure Event Hub  
C. Azure Service Bus  
D. Azure Event Grid  

Show Answer

Question # 32

You have a workspace-based Azure Application Insights resource named Insightsl and anAzure App Service Web App named Appl. Insights! collects telemetry generated by Appl.You plan to test the availability of Appl by using Insightsl. The test must include thefollowing tasks:• Parse dependent requests.• Validate TLS certificates.• Configure custom request headers.You must minimize development and implementation efforts.You need to implement the Application Insights availability test that will deliver the requiredfunctionality. Which availability test should you implement?

A. Custom TrackAvailability test  
B. Standard test  
C. URL ping test  
D. Multi-step web test  

Show Answer

Question # 33

You develop applications that integrate with a Microsoft Entra tenant. You plan toimplement a permission classification in the tenant. You need to select permissions toinclude in your classification. Which permissions should you select? 

A. delegated permissions that require only user consent  
B. delegated permissions that require admin consent  
C. app-only access permissions that require only user consent  
D. app-only access permissions that require admin consent  

Show Answer

Question # 34

You are developing a web application that uses Azure Cache for Redis. You anticipate thatthe cache will frequently fill and that you will need to evict keys.You must configure Azure Cache for Redis based on the following predicted usage pattern:A small subset of elements will be accessed much more often than the rest.You need to configure the Azure Cache for Redis to optimize performance for the predictedusage pattern.Which two eviction policies will achieve the goal?NOTE: Each correct selection is worth one point.

A. noeviction  
B. allkeys-lru  
C. volatile-lru  
D. allkeys-random  
E. volatile-ttl  
F. volatile-random  

Show Answer