AZ-204 practice questions 51–60

1. Question 51 · 462 in bank

   HOTSPOT - You need to configure API Management for authentication. Which policy values should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The second box should be Inbound instead of Outbound. https://docs.microsoft.com/en-us/azure/api-management/api-management-access-restriction-policies Quoting: This policy can be used in the following policy sections and scopes. Policy sections: inbound Policy scopes: all scopes

   Source: Adapted from community discussion — ZiadAZ

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 52 · 462 in bank

   Select 2

   You need to authenticate the user to the corporate website as indicated by the architectural diagram. Which two values should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AID token signature
   • BID token claims
   • CHTTP response code
   • DAzure AD endpoint URI
   • EAzure AD tenant ID

   Show answer

   Answer: AD

   Explanation

   You need ID Token Claims for authorisation. You need to validate ID Token signature as a part of authentication. So the correct answer is A. Having both D & E does not make sense, URI has tenant ID in it, so answer D.

   Source: Adapted from community discussion — trance13

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 53 · 462 in bank

   HOTSPOT - You need to correct the Azure Logic app error message. Which configuration values should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Logic app: You test the Logic app in a development environment. The following error message displays: '400 Bad Request'. Troubleshooting of the error shows an HttpTrigger action to call the RequestUserApproval function. Box 1: anonymous To use your logic app's managed identity in your function, you must set your function's authentication level to anonymous. Otherwise, your logic app throws a "BadRequest" error. Box 2: system-assigned Your logic app or individual connections can use either the system-assigned identity or a single user-assigned identity, which you can share across a group of logic apps, but not both. On your logic app menu, under Settings, select Identity > System assigned

   Source: Adapted from community discussion — mlantonis

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 54 · 462 in bank

   HOTSPOT - You need to configure Azure Service Bus to Event Grid integration. Which Azure Service Bus settings should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Premium - Service Bus can now emit events to Event Grid when there are messages in a queue or a subscription when no receivers are present. You can create Event Grid subscriptions to your Service Bus namespaces, listen to these events, and then react to the events by starting a receiver. With this feature, you can use Service Bus in reactive programming models. To enable the feature, you need the following items: A Service Bus Premium namespace with at least one Service Bus queue or a Service Bus topic with at least one subscription. Contributor access to the Service Bus namespace. Box 2: Contributor - Reference: https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-to-event-grid-integration-concept

   Source: Adapted from community discussion — mlantonis

   References

   • Microsoft Learn
   • Microsoft Learn
   • azure.microsoft.com documentation

   

   Next question

5. Question 55 · 462 in bank

   HOTSPOT - You need to add code at line PC26 of Processing.cs to ensure that security policies are met. How should you complete the code that you will add at line PC26? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: var key = await Resolver.ResolveKeyAsyn(keyBundle,KeyIdentifier.CancellationToken.None); Box 2: var x = new BlobEncryptionPolicy(key,resolver); Example: // We begin with cloudKey1, and a resolver capable of resolving and caching Key Vault secrets. BlobEncryptionPolicy encryptionPolicy = new BlobEncryptionPolicy(cloudKey1, cachingResolver); client.DefaultRequestOptions.EncryptionPolicy = encryptionPolicy; Box 3: cloudblobClient. DefaultRequestOptions.EncryptionPolicy = x; Reference: https://github.com/Azure/azure-storage-net/blob/master/Samples/GettingStarted/EncryptionSamples/KeyRotation/Program.cs

   Source: Adapted from community discussion — SnakePlissken

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 56 · 462 in bank

   You need to ensure the security policies are met. What code do you add at line CS07 of ConfigureSSE.ps1?

   • Aג€"PermissionsToKeys create, encrypt, decrypt
   • Bג€"PermissionsToCertificates create, encrypt, decrypt
   • Cג€"PermissionsToCertificates wrapkey, unwrapkey, get
   • Dג€"PermissionsToKeys wrapkey, unwrapkey, get

   Show answer

   Answer: D

   Explanation

   My opinion is that the answer is D. The policy should belong to a key. In the case study the code retrieve the key so the GET access policy is mandatory. The wrap/unwrap is used for symmetric encryption and in this case study the task is to encrypt the blobs.

   Source: Adapted from community discussion — Zsolt72

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 57 · 462 in bank

   Select 2

   You need to reduce read latency for the retail store solution. What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • ACreate a new composite index for the store location data queries in Azure Cosmos DB. Modify the queries to support parameterized SQL and update the Azure Function app to call the new queries.
   • BProvision an Azure Cosmos DB dedicated gateway. Update the Azure Function app connection string to use the new dedicated gateway endpoint.
   • CConfigure Azure Cosmos DB consistency to session consistency. Cache session tokens in a new Azure Redis cache instance after every write. Update reads to use the session token stored in Azure Redis.
   • DProvision an Azure Cosmos DB dedicated gateway. Update blob storage to use the new dedicated gateway endpoint.
   • EConfigure Azure Cosmos DB consistency to strong consistency. Increase the RUs for the container supporting store location data.

   Show answer

   Answer: AB

   Explanation

   https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/query/getting-started In Azure Cosmos DB for NoSQL accounts, there are two ways to read data：Point reads& SQL queries https://learn.microsoft.com/en-us/azure/cosmos-db/dedicated-gateway#dedicated-gateway-in-multi-region-accounts Dedicated gateways are only supported on API for NoSQL accounts So dedicated gateway is support NoSQL account.How do you found that Azure Cosmos DB dedicated gateway not supporting SQL queries?

   Source: Adapted from community discussion — NK203

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 58 · 462 in bank

   Select 2

   You need to audit the retail store sales transactions. What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • AUpdate the retail store location data upload process to include blob index tags. Create an Azure Function to process the blob index tags and filter by store location.
   • BProcess the change feed logs of the Azure Blob storage account by using an Azure Function. Specify a time range for the change feed data.
   • CEnable blob versioning for the storage account. Use an Azure Function to process a list of the blob versions per day.
   • DProcess an Azure Storage blob inventory report by using an Azure Function. Create rule filters on the blob inventory report.
   • ESubscribe to blob storage events by using an Azure Function and Azure Event Grid. Filter the events by store location.

   Show answer

   Answer: BE

   Explanation

   B. Process the change feed logs of the Azure Blob storage account by using an Azure Function. Specify a time range for the change feed data. The change feed provides a way to log changes to blobs in a storage account. By using an Azure Function to process the change feed logs, it is possible to track and audit sales transaction information. The time range for the change feed data can be specified to capture the transactions within a specific time period. E. Subscribe to blob storage events by using an Azure Function and Azure Event Grid. Filter the events by store location. Azure Event Grid allows subscribing to events raised by Azure services or third-party services. By using an Azure Function and Event Grid, it is possible to filter the events for a specific store location and track sales transactions. This approach can help to monitor sales transactions in real-time and provide an audit trail for reconciliation.

   Source: Adapted from community discussion — motekim

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 59 · 462 in bank

   You need to monitor ContentUploadService according to the requirements. Which command should you use?

   • Aaz monitor metrics alert create ג€"n alert ג€"g ג€¦ - -scopes ג€¦ - -condition "avg Percentage CPU > 8"
   • Baz monitor metrics alert create ג€"n alert ג€"g ג€¦ - -scopes ג€¦ - -condition "avg Percentage CPU > 800"
   • Caz monitor metrics alert create ג€"n alert ג€"g ג€¦ - -scopes ג€¦ - -condition "CPU Usage > 800"
   • Daz monitor metrics alert create ג€"n alert ג€"g ג€¦ - -scopes ג€¦ - -condition "CPU Usage > 8"

   Show answer

   Answer: C

   Explanation

   C is the correct answer. We are dealing with containers here not VM so "CPU usage" is a valid condition. Had it been VM then it should have been "Percentage CPU usage". 800 is also correct since for containers its measured in millicores. Ref : https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-supported#microsoftcontainerinstancecontainergroups

   Source: Adapted from community discussion — anirbanzeus

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 60 · 462 in bank

    You need to investigate the http server log output to resolve the issue with the ContentUploadService. Which command should you use first?

    • Aaz webapp log
    • Baz ams live-output
    • Caz monitor activity-log
    • Daz container attach

    Show answer

    Answer: D

    Explanation

    My choice is --> [A] az webapp log : can be further use to show and download logs https://docs.microsoft.com/en-us/cli/azure/webapp/log?view=azure-cli-latest [B] az ams live-output : manage live outputs for Az Media Service https://docs.microsoft.com/en-us/cli/azure/monitor/activity-log?view=azure-cli-latest [C] az monitor activity-log : manage activity log https://docs.microsoft.com/en-us/cli/azure/monitor/activity-log?view=azure-cli-latest What is activity log? If you familiar with Events on Windows, than activity is something like that. https://docs.microsoft.com/en-us/azure/azure-monitor/essentials/activity-log [D] az container attach : Attach local standard output and error streams to a container in a container group. https://docs.microsoft.com/en-us/cli/azure/container?view=azure-cli-latest#az_container_attach We're looking at logs at application level, which the application writes, we want to know what's behind the 502 error.

    Source: Adapted from community discussion — ferut

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-204 practice, question 51. 462 questions available.