AZ-204 practice questions 421–430

1. Question 421 · 462 in bank

   You are building a loyalty program for a major snack producer. When customers buy a snack at any of 100 participating retailers the event is recorded in Azure Event Hub. Each retailer is given a unique identifier that is used as the primary identifier for the loyalty program. Retailers must be able to be added or removed at any time. Retailers must only be able to record sales for themselves. You need to ensure that retailers can record sales. What should you do?

   • AUse publisher policies for retailers.
   • BCreate a partition for each retailer.
   • CDefine a namespace for each retailer.

   Show answer

   Answer: A

   Explanation

   In Azure Event Hubs, a publisher is essentially an identity or role that can send events to an event hub. Publisher policies allow you to define rules or policies that control how and what data can be published to an event hub. Using publisher policies, you can assign a unique identifier to each retailer (publisher) when they send data to the event hub. This approach enables fine-grained control over event data ingress, ensuring that retailers can only submit data for themselves.

   Source: Adapted from community discussion — FeriAZ

   References

   • Microsoft Learn

   Next question

2. Question 422 · 462 in bank

   DRAG DROP - You develop and deploy a web app to Azure App Service in a production environment. You scale out the web app to four instances and configure a staging slot to support changes. You must monitor the web app in the environment to include the following requirements: ✑ Increase web app availability by re-routing requests away from instances with error status codes and automatically replace instances if they remain in an error state after one hour. ✑ Send web server logs, application logs, standard output, and standard error messaging to an Azure Storage blob account. You need to configure Azure App Service. Which values should you use? To answer, drag the appropriate configuration value to the correct requirements. Each configuration value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Health check - Health check increases your application's availability by re-routing requests away from unhealthy instances, and replacing instances if they remain unhealthy. Your App Service plan should be scaled to two or more instances to fully utilize Health check. Box 2: Diagnostic setting - Azure provides built-in diagnostics to assist with debugging an App Service app. With the new Azure Monitor integration, you can create Diagnostic Settings to send logs to Storage Accounts, Event Hubs and Log Analytics. Reference: https://docs.microsoft.com/en-us/azure/app-service/monitor-instances-health-check https://docs.microsoft.com/en-us/azure/app-service/troubleshoot-diagnostic-logs

   Source: Adapted from community discussion — CarlosTheBoldest

   References

   • Microsoft Learn

   

   Next question

3. Question 423 · 462 in bank

   Select 2

   You develop a solution that uses Azure Virtual Machines (VMs). The VMs contain code that must access resources in an Azure resource group. You grant the VM access to the resource group in Resource Manager. You need to obtain an access token that uses the VM's system-assigned managed identity. Which two actions should you perform? Each correct answer presents part of the solution.

   • AFrom the code on the VM, call Azure Resource Manager using an access token.
   • BUse PowerShell on a remote machine to make a request to the local managed identity for Azure resources endpoint.
   • CUse PowerShell on the VM to make a request to the local managed identity for Azure resources endpoint.
   • DFrom the code on the VM, call Azure Resource Manager using a SAS token.
   • EFrom the code on the VM, generate a user delegation SAS token.

   Show answer

   Answer: AC

   Explanation

   From le129 link 1. Call local managed identity: C $response = Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https://management.azure.com/' -Method GET -Headers @{Metadata="true"} 2. Extract token and call Azure Resource Manager using the access token: A (Invoke-WebRequest -Uri https://management.azure.com/subscriptions/ /resourceGroups/ ?api-version=2016-06-01 -Method GET -ContentType "application/json" -Headers @{ Authorization ="Bearer $ArmToken"}).content

   Source: Adapted from community discussion — lombster

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 424 · 462 in bank

   You are developing a road tollway tracking application that sends tracking events by using Azure Event Hubs using premium tier. Each road must have a throttling policy uniquely assigned. You need to configure the event hub to allow for per-road throttling. What should you do?

   • AUse a unique consumer group for each road.
   • BEnsure each road stores events in a different partition.
   • CEnsure each road has a unique connection string.
   • DUse a unique application group for each road.

   Show answer

   Answer: D

   Explanation

   https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-features. Application groups An application group is a collection of client applications that connect to an Event Hubs namespace sharing a unique identifying condition such as the security context - shared access policy or Azure Active Directory (Azure AD) application ID. Azure Event Hubs enables you to define resource access policies such as throttling policies for a given application group and controls event streaming (publishing or consuming) between client applications and Event Hubs. For more information, see Resource governance for client applications with application groups.

   Source: Adapted from community discussion — le129

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 425 · 462 in bank

   Select 3

   You develop and deploy an ASP.NET Core application that connects to an Azure Database for MySQL instance. Connections to the database appear to drop intermittently and the application code does not handle the connection failure. You need to handle the transient connection errors in code by implementing retries. What are three possible ways to achieve this goal? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AClose the database connection and immediately report an error.
   • BDisable connection pooling and configure a second Azure Database for MySQL instance.
   • CWait five seconds before repeating the connection attempt to the database.
   • DSet a maximum number of connection attempts to 10 and report an error on subsequent connections.
   • EIncrease connection repeat attempts exponentially up to 120 seconds.

   Show answer

   Answer: CDE

   Explanation

   C,D,E The first and second case are fairly straight forward to handle. Try to open the connection again. When you succeed, the transient error has been mitigated by the system. You can use your Azure Database for MySQL again. We recommend having waits before retrying the connection. Back off if the initial retries fail. This way the system can use all resources available to overcome the error situation. A good pattern to follow is: Wait for 5 seconds before your first retry. For each following retry, the increase the wait exponentially, up to 60 seconds. Set a max number of retries at which point your application considers the operation failed. https://docs.microsoft.com/en-us/azure/mysql/single-server/concepts-connectivity

   Source: Adapted from community discussion — Amy_ant

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 426 · 462 in bank

   You are building a B2B web application that uses Azure B2B collaboration for authentication. Paying customers authenticate to Azure B2B using federation. The application allows users to sign up for trial accounts using any email address. When a user converts to a paying customer, the data associated with the trial should be kept, but the user must authenticate using federation. You need to update the user in Azure Active Directory (Azure AD) when they convert to a paying customer. Which Graph API parameter is used to change authentication from one-time passcodes to federation?

   • AresetRedemption
   • BStatus
   • CuserFlowType
   • DinvitedUser

   Show answer

   Answer: A

   Explanation

   "When a user redeems a one-time passcode and later obtains an MSA, Azure AD account, or other federated account, they'll continue to be authenticated using a one-time passcode. If you want to update the user's authentication method, you can reset their redemption status." https://docs.microsoft.com/en-us/azure/active-directory/external-identities/one-time-passcode#user-experience-for-one-time-passcode-guest-users

   Source: Adapted from community discussion — finnishr

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 427 · 462 in bank

   HOTSPOT - You develop an image upload service that is exposed using Azure API Management. Images are analyzed after upload for automatic tagging. Images over 500 KB are processed by a different backend that offers a lower tier of service that costs less money. The lower tier of service is denoted by a header named x-large-request. Images over 500 KB must never be processed by backends for smaller images and must always be charged the lower price. You need to implement API Management policies to ensure that images are processed correctly. How should you complete the API Management inbound policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I got this question on 6th August 2023. chose given answers. passed with 904. I got Case study: city and Lights. All questions are from ExamTopics.

   Source: Adapted from community discussion — kvtborad

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 428 · 462 in bank

   HOTSPOT - You develop several Azure Functions app functions to process JSON documents from a third-party system. The third-party system publishes events to Azure Event Grid to include hundreds of event types, such as billing, inventory, and shipping updates. Events must be sent to a single endpoint for the Azure Functions app to process. The events must be filtered by event type before processing. You must have authorization and authentication control to partition your tenants to receive the event data. You need to configure Azure Event Grid. Which configuration should you use? To answer, select the appropriate values in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Check this from official trainig material: https://learn.microsoft.com/en-us/training/modules/azure-event-grid/2-event-grid-overview 1. custom topic Because according to link: "Topics. The event grid topic provides an endpoint where the source sends events(...)Custom topics are application and third-party topics" 2. event subscription Because according to link: "Event subscriptions. A subscription tells Event Grid which events on a topic you're interested in receiving. When creating the subscription, you provide an endpoint for handling the event"

   Source: Adapted from community discussion — MatejB

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 429 · 462 in bank

   HOTSPOT - You have an Azure Service Bus namespace that contains a topic named Topic1. You plan to create a subscription named Sub1 to Topic1. In Sub1, you plan to filter messages from Topic1 based on their system properties and apply an action that will annotate each filtered message. You need to configure the filtering. How should you configure the filtering? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

10. Question 430 · 462 in bank

    A company is developing a solution that allows smart refrigerators to send temperature information to a central location. The solution must receive and store messages until they can be processed. You create an Azure Service Bus instance by providing a name, pricing tier, subscription, resource group, and location. You need to complete the configuration. Which Azure CLI or PowerShell command should you run? A.

    

    B.

    

    C.

    

    D.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer:

    Explanation

    A service bus instance has already been created (Step 2 below). Next is step 3, Create a Service Bus queue. Note: Steps: Step 1: # Create a resource group resourceGroupName="myResourceGroup" az group create --name $resourceGroupName --location eastus Step 2: # Create a Service Bus messaging namespace with a unique name namespaceName=myNameSpace$RANDOM az servicebus namespace create --resource-group $resourceGroupName --name $namespaceName --location eastus Step 3: # Create a Service Bus queue az servicebus queue create --resource-group $resourceGroupName --namespace-name $namespaceName --name BasicQueue Step 4: # Get the connection string for the namespace connectionString=$(az servicebus namespace authorization-rule keys list --resource-group $resourceGroupName --namespace-name $namespaceName --name RootManageSharedAccessKey --query primaryConnectionString --output tsv) Reference: https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli

    Source: Adapted from community discussion — SnakePlissken

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-204 practice, question 421. 462 questions available.