AZ-204 practice questions 331–340

1. Question 331 · 462 in bank

   You develop applications that integrate with a Microsoft Entra tenant. You plan to implement a permission classification in the tenant. You need to select permissions to include in your classification. Which permissions should you select?

   • Aapp-only access permissions that require admin consent
   • Bdelegated permissions that require only user consent
   • Capp-only access permissions that require only user consent
   • Ddelegated permissions that require admin consent

   Show answer

   Answer: B

   Explanation

   To implement a permission classification in a Microsoft Entra tenant, you should select delegated permissions that require only user consent. This is because permission classifications in Microsoft Entra ID currently support classifying delegated permissions that do not require admin consent https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-permission-classifications?pivots=portal

   Source: Adapted from community discussion — BrownieP

   References

   • Microsoft Learn

   Next question

2. Question 332 · 462 in bank

   DRAG DROP - You have an Azure Virtual Machine (VM) named VM1 running Windows Server 2022 and an Azure Key Vault instance named kv1. You are developing a .NET application named App1 that you plan to deploy to VM1. You have the following requirements: • App1 will require access to kv1. • The identity used by App1 to access kv1 must be automatically deprovisioned when VM1 is deleted. You need to identify the procedure that will meet the requirements. Which three actions should you include in the procedure? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I think the anwser is: Create a system-assigned managed identity for the VM. Modify the access policy on kv1. Retrieve an access token from the Azure Instance Metadata Service (IMDS) endpoint.

   Source: Adapted from community discussion — dac15e0

   

   Next question

3. Question 333 · 462 in bank

   You have an application that includes an Azure Web app and several Azure Function apps. Application secrets including connection strings and certificates are stored in Azure Key Vault. Secrets must not be stored in the application or application runtime environment. Changes to Azure Active Directory (Azure AD) must be minimized. You need to design the approach to loading application secrets. What should you do?

   • ACreate a single user-assigned Managed Identity with permission to access Key Vault and configure each App Service to use that Managed Identity.
   • BCreate a single Azure AD Service Principal with permission to access Key Vault and use a client secret from within the App Services to access Key Vault.
   • CCreate a system assigned Managed Identity in each App Service with permission to access Key Vault.
   • DCreate an Azure AD Service Principal with Permissions to access Key Vault for each App Service and use a certificate from within the App Services to access Key Vault.

   Show answer

   Answer: A

   Explanation

   I think the answer is A. Create a single user-assigned Managed Identity with permission to access Key Vault and configure each App Service to use that Managed Identity. Because we have more than one App (Web App and other Function Apps) , So we agree it is going to be a managed identity but should I create one for each app or one for all apps? If I create system MI then there should be one for each App. If I create user MI then I can re-use it for any App I want with minimum change to AD

   Source: Adapted from community discussion — YellowSky002

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 334 · 462 in bank

   DRAG DROP - You develop a web app that uses the tier D1 app service plan by using the Web Apps feature of Microsoft Azure App Service. Spikes in traffic have caused increases in page load times. You need to ensure that the web app automatically scales when CPU load is about 85 percent and minimize costs. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Step 1: Configure the web app to the Standard App Service Tier The Standard tier supports auto-scaling, and we should minimize the cost. Step 2: Enable autoscaling on the web app First enable autoscale - Step 3: Add a scale rule - Step 4: Add a Scale condition - Reference: https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-autoscale-get-started

   Source: Adapted from community discussion — dhishkiyaau

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn

   

   Next question

5. Question 335 · 462 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. You are developing and deploying several ASP.NET web applications to Azure App Service. You plan to save session state information and HTML output. You must use a storage mechanism with the following requirements: ✑ Share session state across all ASP.NET web applications. ✑ Support controlled, concurrent access to the same session state data for multiple readers and a single writer. ✑ Save full HTTP responses for concurrent requests. You need to store the information. Proposed Solution: Deploy and configure Azure Cache for Redis. Update the web applications. Does the solution meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   Explanation

   This question is part of a series of questions that present the same scenario. Each question in the series contains "" a unique solution""". Determine whether the solution meets the stated goals. This is the unique solution A: Yes.

   Source: Adapted from community discussion — THAMORAY

   Next question

6. Question 336 · 462 in bank

   HOTSPOT - You are debugging an application that is running on Azure Kubernetes cluster named cluster1. The cluster uses Azure Monitor for containers to monitor the cluster. The application has sticky sessions enabled on the ingress controller. Some customers report a large number of errors in the application over the last 24 hours. You need to determine on which virtual machines (VMs) the errors are occurring. How should you complete the Azure Monitor query? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: ago(1d) Box 2: distinct containerID - Box 3: where ContainerID in (ContainerIDs) Box 4: summarize Count by Computer Summarize: aggregate groups of rows Use summarize to identify groups of records, according to one or more columns, and apply aggregations to them. The most common use of summarize is count, which returns the number of results in each group. Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/query-optimization

   Source: Adapted from community discussion — stylebc

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 337 · 462 in bank

   HOTSPOT - You plan to deploy a web app to App Service on Linux. You create an App Service plan. You create and push a custom Docker image that contains the web app to Azure Container Registry. You need to access the console logs generated from inside the container in real-time. How should you complete the Azure CLI command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   TAIL is applicable at 2 places. Can someone summarize the answer please? I think it should be:- 1)config 2)--docker-container-logging 3)webapp 4)tail

   Source: Adapted from community discussion — bhushan_786

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 338 · 462 in bank

   Select 2

   You develop and deploy an ASP.NET web app to Azure App Service. You use Application Insights telemetry to monitor the app. You must test the app to ensure that the app is available and responsive from various points around the world and at regular intervals. If the app is not responding, you must send an alert to support staff. You need to configure a test for the web app. Which two test types can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • Aintegration
   • Bmulti-step web
   • CURL ping
   • Dunit
   • Eload

   Show answer

   Answer: BC

   Explanation

   Correct, however Multi-step web test is deprecated. Source: Multi-step web tests have been deprecated. We recommend using TrackAvailability() to submit custom availability tests instead of multi-step web tests. With TrackAvailability() and custom availability tests, you can run tests on any compute you want and use C# to easily author new tests. https://docs.microsoft.com/en-us/azure/azure-monitor/app/availability-multistep

   Source: Adapted from community discussion — Henksc

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 339 · 462 in bank

   DRAG DROP - A web service provides customer summary information for e-commerce partners. The web service is implemented as an Azure Function app with an HTTP trigger. Access to the API is provided by an Azure API Management instance. The API Management instance is configured in consumption plan mode. All API calls are authenticated by using OAuth. API calls must be cached. Customers must not be able to view cached data for other customers. You need to configure API Management policies for caching. How should you complete the policy statement? Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Consumption Pricing Tier of API Management does not support Built-in Cache. Therefore caching-type should be set to "external". Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-features

   Source: Adapted from community discussion — Ananth2020

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 340 · 462 in bank

    You are developing applications for a company. You plan to host the applications on Azure App Services. The company has the following requirements: ✑ Every five minutes verify that the websites are responsive. ✑ Verify that the websites respond within a specified time threshold. Dependent requests such as images and JavaScript files must load properly. ✑ Generate alerts if a website is experiencing issues. ✑ If a website fails to load, the system must attempt to reload the site three more times. You need to implement this process with the least amount of effort. What should you do?

    • ACreate a Selenium web test and configure it to run from your workstation as a scheduled task.
    • BSet up a URL ping test to query the home page.
    • CCreate an Azure function to query the home page.
    • DCreate a multi-step web test to query the home page.
    • ECreate a Custom Track Availability Test to query the home page.

    Show answer

    Answer: B

    Explanation

    The Given Answer D is correct. Ping URL, does not satisfies : Verify that the websites respond within a specified time threshold. Dependent requests such as images and JavaScript files must load properly

    Source: Adapted from community discussion — jay158

    References

    • Microsoft Learn
    • azure.microsoft.com documentation
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-204 practice, question 331. 462 questions available.