Microsoft AZ-204 Exam Dumps

Developing Solutions for Microsoft Azure

Microsoft AZ-204 Sample Questions

Question # 1

You need to support local development testing for developers. Which tool should you use? 

A. Azurite  
B. Azure Storage Emulator  
C. SQL Server Management Studio (SSMS)  
D. Azure Storage Explorer  

Answer: D

Show Answer

Question # 2

You need to implement the processing of enqueuer inventory items.Which message value should you use?

A. Session identifier  
B. Sequence number  
C. Partition key  
D. Time stamp  

Answer: B

Show Answer

Question # 3

You need to mitigate the Azure Cache for Redis issue.What are two possible ways to achieve this goal? Each correct answer presents part of thesolution.NOTE: Each correct selection is worth one point.

A. Increase the maxmemory-reserved and maxfragmenTationmemory-reserved values  
B. Modify the maxmemory policy to evict the least frequently used keys out of all keys.  
C. Configure client connections to retry commands with exponential backoff.  
D. Test application code by purging the cache in the test environment.  
E. Test application code by rebooting all nodes in the test environment.  

Answer: A,C

Show Answer

Question # 4

You need to securely access inventory items when developing the Inventory Items API.What are three possible ways to achieve this goal? Each correct answer presents acomplete solution.NOTE: Each correct selection is worth one point.

A. Create a custom Microsoft Entra roleAssign the custom role to the Azure Cosmos DB account Update the function app to usecertificate-based authentication. 
B. Create a SQL role definition under the Azure Cosmos DB account.Create a user-assigned managed identity and assign the identity to the function app.Assign the user-assigned managed identity the SQL role definition.Update the function app code to implement the DefaultAzurecredential class and referencethe user-assigned managed identity. 
C. Create a system-assigned managed identity for the function app with read access tosecrets in Azure Key Vault. Store the Azure Cosmos DB primary key and URI in Azure KeyVault as secrets.Use function app settings to reference the secret values.
D. Create a custom Microsoft Entra role. Assign the custom role to Azure Key Vault. Assignthe custom role to the function app.Reference the custom role in the function app code when accessing Azure Key Vaultvalues.
E. Create a SQL role definition under the Azure Cosmos DB account. Assign the role to thefunction app's system-assigned managed identity. Programmatically access the AzureCosmos OB keys from the function app. 

Answer: B,C,E

Show Answer

Question # 5

You need to serve static content from the corporate website.What are two possible ways to achieve this goal? Each correct answer presents acomplete solution.NOTE: Each correct selection is worth one point.

A. Store all static content in Azure Blob Storage. Enable Azure Content Delivery Networkfor the storage account. 
B. Configure App Service networking to create a Content Delivery Network profile andendpoint. 
C. Configure the Azure App Service Local Cache feature and set the app settingWEBSITE_LOCAL_CACHE_SIZEINMB value. 
D. Update the Azure Traffic Manager routing method to priority.  
E. Create a nested Azure Traffic Manager profile. Configure the parent profile to theperformance traffic routing method and the chtld profile to the priority traffic routing method. 

Answer: A,B

Show Answer

Question # 6

You need to configure all site configuration settings for the corporate website.Which three actions should you perform? Each correct answer presents part of thesolution.NOTE: Each correct selection is worth one point.

A. Create a managed identity.  
B. Update the role assignments for the Azure App Configuration store  
C. Create an Azure Key Vault.  
D. Create an Azure App Configuration store.  
E. Update the role assignments for the Azure Key Vault.  

Answer: A,C,E

Show Answer

Question # 7

You need to implement farmer authentication.Which three actions should you perform? Each correct answer presents part of thesolution.NOTE: Each correct selection is worth one point.

A. Add the shared access signature (SAS) token to the app  
B. Create a shared access signature (SAS) token.  
C. Register the app in Microsoft Entra ID.  
D. Create a user flow.  
E. Add the app to the user flow.  

Answer: C,D,E

Show Answer

Question # 8

You need to implement an aggregate of telemetry values for distributor API calls.Which Application Insights API method should you use?

A. TrackTrace  
B. Track Exception  
C. TrackEvent  
D. TrackDependency  
E. TrackMetric  

Answer: E

Show Answer

Question # 9

You need to secure the corporate website to meet the security requirements.What should you do?

A. Create an App Service instance with a standard plan. Configure the custom domain witha TLS/SSL certificate. 
B. Create an Azure Application Gateway with a Web Application Firewall (WAF). Configureend-to-end TLS encryption and the WAF. 
C. Create an Azure Cache for Radis instance. Update the code to support the cache.  
D. Create an Azure Content Delivery Network profile and endpoint. Configure the endpoint.  

Answer: A

Show Answer

Question # 10

You need to test the availability of the corporate website. Which two test types can you use? 

A. Custom testing using the TrackAvailability API method  
B. Standard  
C. URL Ping  
D. Multi-step  

Answer: A,B

Show Answer

Question # 11

You need to secure the Azure Functions to meet the security requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Store the RSA-HSM key in Azure Cosmos DB. Apery the built-in policies for customer-managed keys and allowed locations.
B. Create a free tier Azure App Configuration instance with a new Azure AD service principal.
C. Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled.
D. Store the RSA-HSM key in Azure Blob storage with an Immutability policy applied to the container. 
E. Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

Answer: C,E

Show Answer

Question # 12

You need to grant access to the retail store location data for the inventory service development effort. What should you use? 

A. Azure AD access token  
B. Azure RBAC role  
C. Azure AD ID token  
D. Shared access signature (SAS) token  
E. Azure AD refresh token  

Answer: C

Show Answer

Question # 13

you need to reduce read latency for the retail store solution.What are two possible ways to achieve the goal? Each correct answer presents a completesolution.NOTE: Each correct selection is worth one point.

A. Create a new composite index for the store location data queries in Azure Cosmos DB.Modify the queries to support parameterized SQL and update the Azure function app to callthe new Queries.
B. Configure Azure Cosmos DB consistency to strong consistency Increase the RUs for thecontainer supporting store location data. 
C. Provision an Azure Cosmos OB dedicated gateway, update blob storage to use the newdedicated gateway endpoint. 
D. Configure Azure Cosmos DB consistency to session consistency. Cache session tokensin a new Azure Redis cache instance after every write. Update reads to use the sessiontoken stored in Azure Redis. 
E. Provision an Azure Cosmos DB dedicated gateway Update the Azure Function appconnection string to use the new dedicated gateway endpoint.

Answer: C,D

Show Answer

Question # 14

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this section, you will NOT be able to return to it. As a result,these questions will not appear on the review screen.You are implementing an application by using Azure Event Grid to push near-real-timeinformation to customers.You have the following requirements:• You must send events to thousands of customers that include hundreds of various eventtypes.• The events must be filtered by event type before processing.• Authentication and authorization must be handled by using Microsoft Entra ID.• The events must be published to a single endpoint.You need to implement Azure Event Gnd.Solution: Publish events to a custom topic. Create an event subscription for each customer.Does the solution meet the goal?

A. Yes  
B. No  

Answer: B

Show Answer

Question # 15

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this section, you will NOT be able to return to it. As a result,these questions will not appear on the review screen.You are implementing an application by using Azure Event Grid to push near-real-timeinformation to customers.You have the following requirements:• You must send events to thousands of customers that include hundreds of various eventtypes.• The events must be filtered by event type before processing.• Authentication and authorization must be handled by using Microsoft Entra ID.• The events must be published to a single endpoint.You need to implement Azure Event Grid.Solution: Publish events to a partner topic. Create an event subscription for each customer.Does the solution meet the goal?

A. Yes 
B. No 

Answer: B

Show Answer

Question # 16

You are a developing a SaaS application that stores data as key value pairs.You must make multiple editions of the application available. In the lowest cost edition, theperformance must be best-effort, and there is no regional failover.In higher cos! editions customers must be able to select guaranteed performance andsupport for multiple regions. Azure costs must be minimized.Which Azure Cosmos OB API should you use for the application?

A. Core 
B. MongoDB 
C. Cassandra 
D. Table API 

Answer: D

Show Answer

Question # 17

An organization hosts web apps in Azure. The organization uses Azure Monitor Youdiscover that configuration changes were made to some of the web apps. You need toidentify the configuration changes. Which Azure Monitor log should you review?

A. AppServiceEnvironmentPlatformLogs  
B. AppServiceApplogs  
C. AppServiceAuditLogs  
D. AppServiceConsoteLogs  

Answer: C

Show Answer

Question # 18

You develop and add several functions to an Azure Function app that uses the latestruntime host. The functions contain several REST API endpoints secured by using SSL.The Azure Function app runs in a Consumption plan.You must send an alert when any of the function endpoints are unavailable or respondingtoo slowly.You need to monitor the availability and responsiveness of the functions.What should you do?

A. Create a URL ping test.  
B. Create a timer triggered function that calls TrackAvailability() and send the results to Application Insights. 
C. Create a timer triggered function that calls GetMetric("Request Size") and send the results to Application Insights.
D. Add a new diagnostic setting to the Azure Function app. Enable the FunctionAppLogs and Send to Log Analytics options. 

Answer: B

Show Answer

Question # 19

You are implementing an Azure API app that uses built-in authentication and authorizationfunctionality.All app actions must be associated with information about the current user.You need to retrieve the information about the current user.What are two possible ways to achieve the goal? Each correct answer presents a completesolution.NOTE: Each correct selection is worth one point.

A. HTTP headers  
B. environment variables  
C. /.auth/me HTTP endpoint  
D. /.auth/login endpoint  

Answer: A,C

Show Answer

Question # 20

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this question, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.Margie’s Travel is an international travel and bookings management service. The companyis expanding into restaurant bookings. You are tasked with implementing Azure Search forthe restaurants listed in their solution.You create the index in Azure Search.You need to import the restaurant data into the Azure Search service by using the AzureSearch .NET SDK.Solution:1. Create a SearchServiceClient object to connect to the search index.2. Create a DataContainer that contains the documents which must be added.3. Create a DataSource instance and set its Container property to the DataContainer.4. Set the DataSources property of the SearchServiceClient.Does the solution meet the goal?

A. Yes  
B. No  

Answer: B

Show Answer

Question # 21

You are developing an ASP.NET Core website that uses Azure FrontDoor. The website isused to build custom weather data sets for researchers. Data sets are downloaded byusers as Comma Separated Value (CSV) files. The data is refreshed every 10 hours.Specific files must be purged from the FrontDoor cache based upon Response Headervalues.You need to purge individual assets from the Front Door cache.Which type of cache purge should you use?

A. single path 
B. wildcard 
C. root domain

Answer: A

Show Answer

Question # 22

You are developing an application to manage shipping information for cargo ships. Theapplication will use Azure Cosmos D8 for storage.The application must run offline when ships are at sea The application must be connectedto Azure when ships are in port.Which Azure Cosmos D8 API should you use for the application?

A. Core  
B. MongoDe  
C. Cassandra  
D. Gremlin  

Answer: C

Show Answer

Question # 23

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.You develop Azure solutions.You must grant a virtual machine (VM) access to specific resource groups in AzureResource ManagerYou need to obtain an Azure Resource Manager access token.Solution: Run the Invoke-RestMethod cmdlet to make a request to the local managedidentity for Azure resources endpoint.Does the solution meet the goal?

A. Yes  
B. No  

Answer: A

Show Answer

Question # 24

Vou have an on-premises, public-facing website named www.contoso.com.You plan to test availability of www.contoso.com by using Application Insights availabilitytests.You need to configure a test that will generate HTTP POST requests that include customheaders. Your solution must minimize development effort.Which type of test should you configure?

A. Multi-step web test  
B. Standard test  
C. URL ping test  
D. Custom TrackAvailability test  

Answer: A

Show Answer

Question # 25

You manage an Azure Key Vault named kv1 of Standard SKU.You plan to programmatically store in kv1 an asymmetric key pair and use the key pair forencryption and decryption.You must develop an application named app1 that will access the key pair in kv1.You need to configure an object to retrieve a key pair from kv1.Which object should you use? 

A. SecretClient  
B. KeyVaultSettingsClient  
C. CertificateClient  
D. KeyClient  

Answer: D

Show Answer