AZ-204 practice questions 1–10

1. Question 1 · 462 in bank

   You have two Hyper-V hosts named Host1 and Host2. Host1 has an Azure virtual machine named VM1 that was deployed by using a custom Azure Resource Manager template. You need to move VM1 to Host2. What should you do?

   • AFrom the Update management blade, click Enable.
   • BFrom the Overview blade, move VM1 to a different subscription.
   • CFrom the Redeploy blade, click Redeploy.
   • DFrom the Profile blade, modify the usage location.

   Show answer

   Answer: C

   Explanation

   Answer C: (Closest) But here is my understanding. None of the provided options seems to align directly with the physical migration of a VM from one Hyper-V host (Host1) to another (Host2). Azure's native management options are tailored to managing VMs within Azure's infrastructure rather than facilitating migration to on-premises Hyper-V hosts. Thus, the given answers might be testing our ability to discern which action is most contextually appropriate within Azure's environment, even if none directly achieves moving the VM to Host2. Among these, option C ("Redeploy") seems closest, as it involves "moving" the VM within Azure, but it does not resolve the cross-environment migration requirement. Is my understanding correct? https://docs.google.com/document/d/1oNH9i2ssNi9gISG3JGuxUoUhmAA4xCaGahEKv2dRN6Y/edit?usp=sharing

   Source: Adapted from community discussion — Nityaanantha_Raman

   References

   • Microsoft Learn

   Next question

2. Question 2 · 462 in bank

   You are developing an e-Commerce Web App. You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure Active Directory (AAD). What should you do on the e-Commerce Web App?

   • ARun the az keyvault secret command.
   • BEnable Azure AD Connect.
   • CEnable Managed Service Identity (MSI).
   • DCreate an Azure AD service principal.

   Show answer

   Answer: C

   Explanation

   Managed Service Identity (MSI) is a feature in Azure that allows you to securely authenticate an Azure service to other Azure services without having to manage credentials. By enabling MSI on the Azure App Service hosting the e-Commerce Web App, you can create a trust relationship between the App Service and Azure Key Vault. This allows the e-Commerce Web App to authenticate with Azure Active Directory (AAD) and securely retrieve secrets from the Key Vault.

   Source: Adapted from community discussion — forgetfulalligator

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 3 · 462 in bank

   This question requires that you evaluate the underlined text to determine if it is correct. Your Azure Active Directory Azure (Azure AD) tenant has an Azure subscription linked to it. Your developer has created a mobile application that obtains Azure AD access tokens using the OAuth 2 implicit grant type. The mobile application must be registered in Azure AD. You require a redirect URI from the developer for registration purposes. Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed.` If the statement is incorrect, select the answer choice that makes the statement correct.

   • ANo change required.
   • Ba secret
   • Ca login hint
   • Da client ID

   Show answer

   Answer: A

   Explanation

   You don't need client id to register an application in Azure AD. You just need redirect URI. Upon registration, the portal will give client id and tenant id. Both of them must be included in the app configuration json file, so given answer is correct as far as app registration is concerned. https://docs.microsoft.com/en-us/learn/modules/secure-app-with-oidc-and-azure-ad/4-exercise-create-aad-register-app

   Source: Adapted from community discussion — jvyas

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 4 · 462 in bank

   Select 2

   You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days. Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

   • AEnabledForDeployment
   • BEnablePurgeProtection
   • CEnabledForTemplateDeployment
   • DEnableSoftDelete

   Show answer

   Answer: BD

   Explanation

   The EnablePurgeProtection parameter prevents the deletion of key vault objects by enabling purge protection. This parameter ensures that objects deleted from the key vault cannot be permanently deleted until the purge protection period has expired. The EnableSoftDelete parameter allows the key vault to retain deleted objects for a specified duration. This parameter enables soft delete, which allows the key vault to retain deleted objects for a specified period of time (90 days in this case) before they are permanently deleted.

   Source: Adapted from community discussion — forgetfulalligator

   Next question

5. Question 5 · 462 in bank

   HOTSPOT - You have an Azure Active Directory (Azure AD) tenant. You want to implement multi-factor authentication by making use of a conditional access policy. The conditional access policy must be applied to all users when they access the Azure portal. Which three settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: The conditional access policy must be applied or assigned to Users and Groups. Box 2: The conditional access policy must be applied when users access the Azure portal, which is a cloud app. That is: Microsoft Azure Management Box 3: Access control must require multi-factor authentication when granting access. Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-based-mfa

   Source: Adapted from community discussion — forgetfulalligator

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 6 · 462 in bank

   You manage an Azure SQL database that allows for Azure AD authentication. You need to make sure that database developers can connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum. Which of the following should you implement?

   • AAzure AD token.
   • BAzure Multi-Factor authentication.
   • CActive Directory integrated authentication.
   • DOATH software tokens.

   Show answer

   Answer: C

   Explanation

   Active Directory integrated authentication is the correct option as it allows users to connect to the database using their Windows credentials, which are authenticated through their on-premises Active Directory. This option avoids the need for users to enter their credentials each time they connect to the database, reducing authentication prompts to a minimum.

   Source: Adapted from community discussion — forgetfulalligator

   References

   • Microsoft Learn

   Next question

7. Question 7 · 462 in bank

   You are developing an application to transfer data between on-premises file servers and Azure Blob storage. The application stores keys, secrets, and certificates in Azure Key Vault and makes use of the Azure Key Vault APIs. You want to configure the application to allow recovery of an accidental deletion of the key vault or key vault objects for 90 days after deletion. What should you do?

   • ARun the Add-AzKeyVaultKey cmdlet.
   • BRun the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI.
   • CImplement virtual network service endpoints for Azure Key Vault.
   • DRun the az keyvault update --enable-soft-delete false CLI.

   Show answer

   Answer: B

   Explanation

   The --enable-soft-delete flag enables soft-delete on the key vault, which means that when objects are deleted, they are retained in a recoverable state for a specified period (90 days, in this case), rather than being immediately deleted. The --enable-purge-protection flag turns on purge protection, which prevents the permanent deletion of objects until the soft-delete retention period has expired. This ensures that deleted objects can be recovered within the retention period.

   Source: Adapted from community discussion — forgetfulalligator

   References

   • Microsoft Learn

   Next question

8. Question 8 · 462 in bank

   HOTSPOT - You have developed a Web App for your company. The Web App provides services and must run in multiple regions. You want to be notified whenever the Web App uses more than 85 percent of the available CPU cores over a 5 minute period. Your solution must minimize costs. Which command should you use? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/sv-se/cli/azure/monitor/metrics/alert

   Source: Adapted from community discussion — 2bruhornot2bruh

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 9 · 462 in bank

   Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment. You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user. Solution: You include the use of Azure Redis Cache in your design. Does the solution meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   Further supporting the use of a CDN (Content Distributed Network), per Microsoft docs URL https://docs.microsoft.com/en-us/azure/architecture/best-practices/cdn#how-and-why-a-cdn-is-used "Streaming video files to the client on demand. Video benefits from the low latency and reliable connectivity available from the globally located datacenters that offer CDN connections. Microsoft Azure Media Services (AMS) integrates with Azure CDN to deliver content directly to the CDN for further distribution."

   Source: Adapted from community discussion — ucsdmiami2020

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 10 · 462 in bank

    Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment. You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user. Solution: You include the use of an Azure Content Delivery Network (CDN) in your design. Does the solution meet the goal?

    • AYes
    • BNo

    Show answer

    Answer: A

    Explanation

    For a web app that delivers streaming video to users, you would need to use a combination of technologies that provide high availability, constant streaming experience and store data in a geographic location that is nearest to the user. Azure Content Delivery Network (CDN) can be used to deliver streaming video content to users with low latency by caching the video at edge locations that are nearest to the user. Azure Media Services can be used to encode, package, and stream video content. Azure Media Services also provides built-in redundancy and failover options to ensure high availability. Another option is to store the video files in Azure Blob storage, which provides a high-availability and low-latency storage solution that can be replicated to multiple regions.

    Source: Adapted from community discussion — alexein74

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-204 practice, question 1. 462 questions available.