AZ-204 practice questions 31–40

1. Question 31 · 462 in bank

   HOTSPOT - You have a Dockerfile that builds a container image named image1. The container image and its base image are stored in separate repositories of an Azure Container registry named registry1. The codebase of image1 is stored in a GitHub repo named app1 of an account named account1. You plan to implement automatic updates to image1 whenever its base image is updated or an update to the main branch of the GitHub repo occurs. You need to complete the Azure CLI command that will apply the planned implementation. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

2. Question 32 · 462 in bank

   Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-joined device. The cluster is located in a resource group. Developers have created an application named MyApp. MyApp was packaged into a container image. You need to deploy the YAML manifest file for the application. Solution: You install the docker client on the device and run the docker run -it microsoft/azure-cli:0.10.17 command. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   Installing the Docker client and running the docker run -it microsoft/azure-cli:0.10.17 command will start an interactive Azure CLI session within a Docker container, but it does not directly deploy the YAML manifest file to the AKS cluster. To deploy the YAML manifest file, you need to use the kubectl apply -f myapp.yaml command, which is specifically designed for interacting with Kubernetes clusters

   Source: Adapted from community discussion — Nhantran20000502

   Next question

3. Question 33 · 462 in bank

   Your company has a web app named WebApp1. You use the WebJobs SDK to design a triggered App Service background task that automatically invokes a function in the code every time new data is received in a queue. You are preparing to configure the service processes a queue data item. Which of the following is the service you should use?

   • ALogic Apps
   • BWebJobs
   • CFlow
   • DFunctions

   Show answer

   Answer: B

   Explanation

   "You use the WebJobs SDK to design a triggered App Service background task" B - WebJob Usually you'll host the WebJobs SDK in Azure WebJobs, but you can also run your jobs in a Worker Role. The Azure WebJobs feature of Azure Web Apps provides an easy way for you to run programs such as services or background tasks in a Web App... https://github.com/Azure/azure-webjobs-sdk

   Source: Adapted from community discussion — DefaultName2

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 34 · 462 in bank

   Your company has an Azure subscription. You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set. You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance. Which of the following is the value that you should configure for the platformFaultDomainCount property?

   • A10
   • B30
   • CMin Value
   • DMax Value

   Show answer

   Answer: D

   Explanation

   As described here: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-manage-fault-domains You can set the parameter --platform-fault-domain-count to 1, 2, or 3 (default of 3 if not specified). And as described here: https://docs.microsoft.com/en-us/azure/virtual-machines/availability-set-overview Each virtual machine in your availability set is assigned an update domain and a fault domain by the underlying Azure platform. Each availability set can be configured with up to three fault domains and twenty update domains. So answer is D Max Value

   Source: Adapted from community discussion — Bere

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 35 · 462 in bank

   Your company has an Azure subscription. You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set. You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance. Which of the following is the value that you should configure for the platformUpdateDomainCount property?

   • A10
   • B20
   • C30
   • D40

   Show answer

   Answer: B

   Explanation

   Answer is B 20 Each availability set can be configured with up to three fault domains and twenty update domains. https://docs.microsoft.com/en-us/azure/virtual-machines/availability-set-overview

   Source: Adapted from community discussion — jay158

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 36 · 462 in bank

   DRAG DROP - You are creating an Azure Cosmos DB account that makes use of the SQL API. Data will be added to the account every day by a web application. You need to ensure that an email notification is sent when information is received from IoT devices, and that compute cost is reduced. You decide to deploy a function app. Which of the following should you configure the function app to use? Answer by dragging the correct options from the list to the answer area. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer is correct: Consumption plan will reduce the cost and SendGrid is used to send emails from azure functions. https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-sendgrid?tabs=in-process%2Cfunctionsv2&pivots=programming-language-csharp

   Source: Adapted from community discussion — [Removed]

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 37 · 462 in bank

   This question requires that you evaluate the underlined text to determine if it is correct. You company has an on-premises deployment of MongoDB, and an Azure Cosmos DB account that makes use of the MongoDB API. You need to devise a strategy to migrate MongoDB to the Azure Cosmos DB account. You include the Data Management Gateway tool in your migration strategy. Instructions: Review the underlined text. If it makes the statement correct, select `No change required.` If the statement is incorrect, select the answer choice that makes the statement correct.

   • ANo change required
   • Bmongorestore
   • CAzure Storage Explorer
   • DAzCopy

   Show answer

   Answer: B

   Explanation

   https://docs.microsoft.com/en-us/azure/cosmos-db/mongodb-migrate https://docs.mongodb.com/manual/reference/program/mongorestore/ The underlined text states that the Data Management Gateway tool is included in the migration strategy for migrating MongoDB to the Azure Cosmos DB account that uses the MongoDB API. This statement is incorrect. The Data Management Gateway tool is used to connect on-premises data sources to Azure services, including Power BI, PowerApps, and Microsoft Flow. It provides a secure and reliable connection between on-premises data sources and cloud-based services. However, in the context of migrating MongoDB to Azure Cosmos DB, the Data Management Gateway tool is not relevant. Instead, you should use one of the available migration tools such as the Azure Database Migration Service or the mongoimport/mongodump utilities to migrate your data. Therefore, the correct answer is B. mongorestore.

   Source: Adapted from community discussion — harbox

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 38 · 462 in bank

   HOTSPOT - You need to implement the Azure Function for delivery driver profile information. Which configurations should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Store delivery driver profile information in Azure Active Directory (Azure AD), I would use: Code Library: MSAL API: Microsoft Graph https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-overview

   Source: Adapted from community discussion — willchenxa

   References

   • Microsoft Learn

   

   Next question

9. Question 39 · 462 in bank

   You need to grant access to the retail store location data for the inventory service development effort. What should you use?

   • AAzure AD access token
   • BAzure RBAC role
   • CShared access signature (SAS) token
   • DAzure AD ID token
   • EAzure AD refresh token

   Show answer

   Answer: C

   Next question

10. Question 40 · 462 in bank

    HOTSPOT - You need to reliably identify the delivery driver profile information. How should you configure the system? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Box 1: ID - Scenario: Store delivery driver profile information in Azure Active Directory (Azure AD) by using an Azure Function called from the corporate website. ID token - A JWT that contains claims that you can use to identify users in your application. This token is securely sent in HTTP requests for communication between two components of the same application or service. You can use the claims in an ID token as you see fit. They're commonly used to display account information or to make access control decisions in an application. ID tokens are signed, but the're not encrypted. When your application or API receives an ID token, it must validate the signature to prove that the token is authentic. Your application or API must also validate a few claims in the token to prove that it's valid. Depending on the scenario requirements, the claims validated by an application can vary, but your application must perform some common claim validations in every scenario. Box 2: Oid - Oid - The immutable identifier for the "principal" of the request - the user or service principal whose identity has been verified. In ID tokens and app+user tokens, this is the object ID of the user. In app-only tokens, this is the object ID of the calling service principal. It can also be used to perform authorization checks safely and as a key in database tables. This ID uniquely identifies the principal across applications - two different applications signing in the same user will receive the same value in the oid claim. Incorrect: Aud - Identifies the intended recipient of the token. For Azure AD B2C, the audience is the application ID. Your application should validate this value and reject the token if it doesn't match. Audience is synonymous with resource. Idp - Records the identity provider that authenticated the subject of the token. This value is identical to the value of the Issuer claim unless the user account not in the same tenant as the issuer - guests, for instance. If the claim isn't present, it means that the value of iss can be used instead. For personal accounts being used in an organizational context (for instance, a personal account invited to an Azure AD tenant), the idp claim may be 'live.com' or an STS URI containing the Microsoft account tenant. Reference: https://docs.microsoft.com/en-us/azure/active-directory-b2c/tokens-overview https://docs.microsoft.com/en-us/azure/active-directory/develop/access-tokens

    References

    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-204 practice, question 31. 462 questions available.