Microsoft AZ-204 Exam Dumps

You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms. If the stored intake forms are downloaded from storage by a third party, the content of the forms must not be compromised. You need to store the intake forms according to the requirements. Solution: Create an Azure Cosmos DB database with Storage Service Encryption enabled. Store the intake forms in the Azure Cosmos DB database. Does the solution meet the goal?

A. Yes 
B. No 

Answer: B

You manage an Azure App Service Web App named Appl and an associated Azure Application Insights resource named ApplnsightsV You require alerts about any unusual rate increase of failed HTTP requests targeting App1. You need to implement push notifications. What should you do? 

A. From the Azure portal, modify diagnostic settings of Applnsightsl. 
B. Deploy an Azure Resource Manager template that configures Applnsightsl. 
C. Deploy an Azure Resource Manager template that configures the analyticsltems child resource of Applnsightsl. 
D. Deploy an Azure Resource Manager template that modifies an action group. 

Answer: C

You are developing an app to store globally distributed data in several Azure Blob Storage containers. Each container hosts multiple blobs where each instance of the app will store the data. You enable versioning and soft delete for the blobs. App testing and incorrect code have frequently corrupted data. Development of the app must allow data to be restored to a previous day for testing. You need to configure the storage account to support point-in-time restore. What should you do?

A. Enable the change feed on the storage account to begin capturing and recording changes. 
B. Configure an immutability policy that is scoped to a blob version. 
C. Configure object replication and specify replication rules. 
D. Create a snapshot of the blob in the hot tier. 

Answer: A

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen. You are developing an application that needs to react to events from multiple Azure services, such as Azure Blob Storage and Azure Resource Manager, in near-real time. The application must meet the following requirements: • Handle a high volume of events without manual intervention. • Receive only specific events relevant to your application, based on event types or resource patterns. • Ensure that no events are missed, even if the processing application is temporarily unavailable. • Use Azure Functions for processing events without managing any infrastructure. • Minimize the amount of custom code required for event routing and handling. You need to develop the solution. Solution: Deploy an Azure Service Bus namespace. Configure the Azure services to send events to the Service Bus. Implement Azure Functions with Service Bus triggers to process the events. Use Service Bus sessions and message deferral to manage event ordering and reliability. Does the solution meet the goal?

A. Yes 
B. No

Answer: B

You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms. If the stored intake forms are downloaded from storage by a third party, the content of the forms must not be compromised. You need to store Perform transformation logic in the client applicati according to the requirements. Solution: Create a Azure Key Vault key named skey. Encrypt the intake forms using the public key portion of skey. Store the encrypted data in Azure Blob storage Does the solution meet the goal?

A. Yes 
B. No 

Answer: A

You have an Azure Service Bus namespace with a partitioned queue named queue1. You plan to send a large number of messages through queue1 over the next few weeks. The order of messages will be random. You must minimize the possibility of message transmission interruption by transient failures of individual partitions. You need to use the optimal configuration of the partition key in the messages. Which configuration should you use?

A. Set the partition key of messages to the message ID value. 
B. Enable sessions. Set the partition key of messages to the session ID value. 
C. Enable sessions. Ensure that the partition key is different from the session ID value. 
D. Leave the partition key value as null. 

Answer: B

You create and publish a new Azure App Service web app. User authentication and authorization must use Microsoft Entra ID. You need to configure authentication and authorization. What should you do first? 

A. Add a private certificate. 
B. Create and configure a new app setting. 
C. Map an existing custom DNS name.
 D. Add an identity provider. 
E. Create and configure a managed identity. 

Answer: D

You are developing a set of RESTful APIs that will be consumed by external partners. You must expose the APIs securely through Azure API Management You have the following requirements: • Only authenticated and authorized clients must be able to access the APIs. • Control over the number of API calls to prevent abuse and ensure fair usage must be implemented. • Data transformation and validation on incoming requests and outgoing responses must be performed without modifying the back-end services. • Insights into API usage patterns, performance metrics, and anomaly detection must be gathered. You need to implement the APIs What should you do?

A. Use OAuth 2.0 for authentication and authorization. Apply rate limit policies. 
B. Use inbound and outbound policies for transformation. Enable Azure Monitor for detailed analytics. 
C. Use subscription keys for authentication. Implement caching policies Modify API code for transformation. Use Application Insights for monitoring. 
D. Require clients to present client certificates. Use response caching policies. Implement request and response transformation in back-end services. Use basic authentication over HTTPS. Apply IP filtering policies. Perform transformation logic in the client application. Enable Azure diagnostics logs. 

Answer: A

You develop a web application that sells access to last-minute openings for child camps that run on the weekends. The application uses Azure Application Insights for all alerting and monitoring. The application must alert operators when a technical issue is preventing sales to camps. You need to build an alert to detect technical issues. Which alert type should you use?

A. Metric alert using multiple time series 
B. Log alert using multiple time series 
C. Metric alert using dynamic thresholds 
D. Log alert using dynamic thresholds 

Answer: C

You have an Azure subscription named Sub1 that contains a resource group named RG1 and a Service Bus queue named SB1. You plan to implement an Azure Event Grid push event subscription that will deliver an event to SB1 whenever a resource is created, modified, or deleted in RG1. You must minimize the development and configuration efforts. You need to create an Event Grid topic for your planned implementation. Which type of event topic should you create?

A. event domain 
B. custom 
C. system 
D. namespace 

Answer: C

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You develop Azure solutions. You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager. You need to obtain an Azure Resource Manager access token. Solution: Run the Invoke-RestMethod cmdlet to make a request to the local managed identity for Azure resources endpoint. Does the solution meet the goal?

A. Yes
 B. No

Answer: A

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear on the review screen. You are developing an application that needs to react to events from multiple Azure services, such as Azure Blob Storage and Azure Resource Manager, in near-real time. The application must meet the following requirements: • Handle a high volume of events without manual intervention. • Receive only specific events relevant to your application, based on event types or resource patterns. • Ensure that no events are missed, even if the processing application is temporarily unavailable. • Use Azure Functions for processing events without managing any infrastructure. • Minimize the amount of custom code required for event routing and handling. You need to develop the solution. Solution: Use Azure Logic Apps to poll the Azure services for changes at regular intervals. Apply conditional logic within the Logic Apps to filter relevant events. Trigger Azure Functions from the Logic Apps to process the filtered events. Does the solution meet the goal?

A. Yes 
B. No 

Answer: B

You are developing an application that needs to react to events from multiple Azure services, such as Azure Blob Storage and Azure Resource Manager, in near-real time. The application must meet the following requirements: • Handle a high volume of events without manual intervention. • Receive only specific events relevant to your application, based on event types or resource patterns. • Ensure that no events are missed, even if the processing application is temporarily unavailable. • Use Azure Functions for processing events without managing any infrastructure. • Minimize the amount of custom code required for event routing and handling. You need to develop the solution. Solution: Configure Azure Event Grid system topics for each Azure service. Create event subscriptions with Advanced Filters to receive only the relevant events. Use Azure Functions with Event Grid triggers to process the events. failures and ensure reliable delivery. Does the solution meet the goal?

A. Yes
 B. No 

Answer: B

You have a Linux container-based console application that uploads image files from customer sites all over the world. A back-end system that runs on Azure virtual machines processes the images by using the Azure Blobs API. You are not permitted to make changes to the application. Some customer sites only have phone-based internet connections. You need to configure the console application to access the images. What should you use?

A. Azure Disks 
B. Azure Storage Network File System (NFS) 3.0 support 
C. Azure BlobFuse 
D. Azure Files 

Answer: C

You need to support local development testing for developers. Which tool should you use? 

A. Azurite  
B. Azure Storage Emulator  
C. SQL Server Management Studio (SSMS)  
D. Azure Storage Explorer  

Answer: D

You need to implement the processing of enqueuer inventory items.Which message value should you use?

A. Session identifier  
B. Sequence number  
C. Partition key  
D. Time stamp  

Answer: B

You need to mitigate the Azure Cache for Redis issue.What are two possible ways to achieve this goal? Each correct answer presents part of thesolution.NOTE: Each correct selection is worth one point.

A. Increase the maxmemory-reserved and maxfragmenTationmemory-reserved values  
B. Modify the maxmemory policy to evict the least frequently used keys out of all keys.  
C. Configure client connections to retry commands with exponential backoff.  
D. Test application code by purging the cache in the test environment.  
E. Test application code by rebooting all nodes in the test environment.  

Answer: A,C

You need to securely access inventory items when developing the Inventory Items API.What are three possible ways to achieve this goal? Each correct answer presents acomplete solution.NOTE: Each correct selection is worth one point.

A. Create a custom Microsoft Entra roleAssign the custom role to the Azure Cosmos DB account Update the function app to usecertificate-based authentication. 
B. Create a SQL role definition under the Azure Cosmos DB account.Create a user-assigned managed identity and assign the identity to the function app.Assign the user-assigned managed identity the SQL role definition.Update the function app code to implement the DefaultAzurecredential class and referencethe user-assigned managed identity. 
C. Create a system-assigned managed identity for the function app with read access tosecrets in Azure Key Vault. Store the Azure Cosmos DB primary key and URI in Azure KeyVault as secrets.Use function app settings to reference the secret values.
D. Create a custom Microsoft Entra role. Assign the custom role to Azure Key Vault. Assignthe custom role to the function app.Reference the custom role in the function app code when accessing Azure Key Vaultvalues.
E. Create a SQL role definition under the Azure Cosmos DB account. Assign the role to thefunction app's system-assigned managed identity. Programmatically access the AzureCosmos OB keys from the function app. 

Answer: B,C,E

You need to serve static content from the corporate website.What are two possible ways to achieve this goal? Each correct answer presents acomplete solution.NOTE: Each correct selection is worth one point.

A. Store all static content in Azure Blob Storage. Enable Azure Content Delivery Networkfor the storage account. 
B. Configure App Service networking to create a Content Delivery Network profile andendpoint. 
C. Configure the Azure App Service Local Cache feature and set the app settingWEBSITE_LOCAL_CACHE_SIZEINMB value. 
D. Update the Azure Traffic Manager routing method to priority.  
E. Create a nested Azure Traffic Manager profile. Configure the parent profile to theperformance traffic routing method and the chtld profile to the priority traffic routing method. 

Answer: A,B

You need to configure all site configuration settings for the corporate website.Which three actions should you perform? Each correct answer presents part of thesolution.NOTE: Each correct selection is worth one point.

A. Create a managed identity.  
B. Update the role assignments for the Azure App Configuration store  
C. Create an Azure Key Vault.  
D. Create an Azure App Configuration store.  
E. Update the role assignments for the Azure Key Vault.  

Answer: A,C,E

You need to implement farmer authentication.Which three actions should you perform? Each correct answer presents part of thesolution.NOTE: Each correct selection is worth one point.

A. Add the shared access signature (SAS) token to the app  
B. Create a shared access signature (SAS) token.  
C. Register the app in Microsoft Entra ID.  
D. Create a user flow.  
E. Add the app to the user flow.  

Answer: C,D,E

You need to implement an aggregate of telemetry values for distributor API calls.Which Application Insights API method should you use?

A. TrackTrace  
B. Track Exception  
C. TrackEvent  
D. TrackDependency  
E. TrackMetric  

Answer: E

You need to secure the corporate website to meet the security requirements.What should you do?

A. Create an App Service instance with a standard plan. Configure the custom domain witha TLS/SSL certificate. 
B. Create an Azure Application Gateway with a Web Application Firewall (WAF). Configureend-to-end TLS encryption and the WAF. 
C. Create an Azure Cache for Radis instance. Update the code to support the cache.  
D. Create an Azure Content Delivery Network profile and endpoint. Configure the endpoint.  

Answer: A

You need to test the availability of the corporate website. Which two test types can you use? 

A. Custom testing using the TrackAvailability API method  
B. Standard  
C. URL Ping  
D. Multi-step  

Answer: A,B

You need to secure the Azure Functions to meet the security requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Store the RSA-HSM key in Azure Cosmos DB. Apery the built-in policies for customer-managed keys and allowed locations.
B. Create a free tier Azure App Configuration instance with a new Azure AD service principal.
C. Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled.
D. Store the RSA-HSM key in Azure Blob storage with an Immutability policy applied to the container. 
E. Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

Answer: C,E

You need to grant access to the retail store location data for the inventory service development effort. What should you use? 

A. Azure AD access token  
B. Azure RBAC role  
C. Azure AD ID token  
D. Shared access signature (SAS) token  
E. Azure AD refresh token  

Answer: C

you need to reduce read latency for the retail store solution.What are two possible ways to achieve the goal? Each correct answer presents a completesolution.NOTE: Each correct selection is worth one point.

A. Create a new composite index for the store location data queries in Azure Cosmos DB.Modify the queries to support parameterized SQL and update the Azure function app to callthe new Queries.
B. Configure Azure Cosmos DB consistency to strong consistency Increase the RUs for thecontainer supporting store location data. 
C. Provision an Azure Cosmos OB dedicated gateway, update blob storage to use the newdedicated gateway endpoint. 
D. Configure Azure Cosmos DB consistency to session consistency. Cache session tokensin a new Azure Redis cache instance after every write. Update reads to use the sessiontoken stored in Azure Redis. 
E. Provision an Azure Cosmos DB dedicated gateway Update the Azure Function appconnection string to use the new dedicated gateway endpoint.

Answer: C,D

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this section, you will NOT be able to return to it. As a result,these questions will not appear on the review screen.You are implementing an application by using Azure Event Grid to push near-real-timeinformation to customers.You have the following requirements:• You must send events to thousands of customers that include hundreds of various eventtypes.• The events must be filtered by event type before processing.• Authentication and authorization must be handled by using Microsoft Entra ID.• The events must be published to a single endpoint.You need to implement Azure Event Gnd.Solution: Publish events to a custom topic. Create an event subscription for each customer.Does the solution meet the goal?

A. Yes  
B. No  

Answer: B

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this section, you will NOT be able to return to it. As a result,these questions will not appear on the review screen.You are implementing an application by using Azure Event Grid to push near-real-timeinformation to customers.You have the following requirements:• You must send events to thousands of customers that include hundreds of various eventtypes.• The events must be filtered by event type before processing.• Authentication and authorization must be handled by using Microsoft Entra ID.• The events must be published to a single endpoint.You need to implement Azure Event Grid.Solution: Publish events to a partner topic. Create an event subscription for each customer.Does the solution meet the goal?

A. Yes 
B. No 

Answer: B

You are a developing a SaaS application that stores data as key value pairs.You must make multiple editions of the application available. In the lowest cost edition, theperformance must be best-effort, and there is no regional failover.In higher cos! editions customers must be able to select guaranteed performance andsupport for multiple regions. Azure costs must be minimized.Which Azure Cosmos OB API should you use for the application?

A. Core 
B. MongoDB 
C. Cassandra 
D. Table API 

Answer: D

An organization hosts web apps in Azure. The organization uses Azure Monitor Youdiscover that configuration changes were made to some of the web apps. You need toidentify the configuration changes. Which Azure Monitor log should you review?

A. AppServiceEnvironmentPlatformLogs  
B. AppServiceApplogs  
C. AppServiceAuditLogs  
D. AppServiceConsoteLogs  

Answer: C

You develop and add several functions to an Azure Function app that uses the latestruntime host. The functions contain several REST API endpoints secured by using SSL.The Azure Function app runs in a Consumption plan.You must send an alert when any of the function endpoints are unavailable or respondingtoo slowly.You need to monitor the availability and responsiveness of the functions.What should you do?

A. Create a URL ping test.  
B. Create a timer triggered function that calls TrackAvailability() and send the results to Application Insights. 
C. Create a timer triggered function that calls GetMetric("Request Size") and send the results to Application Insights.
D. Add a new diagnostic setting to the Azure Function app. Enable the FunctionAppLogs and Send to Log Analytics options. 

Answer: B

You are implementing an Azure API app that uses built-in authentication and authorizationfunctionality.All app actions must be associated with information about the current user.You need to retrieve the information about the current user.What are two possible ways to achieve the goal? Each correct answer presents a completesolution.NOTE: Each correct selection is worth one point.

A. HTTP headers  
B. environment variables  
C. /.auth/me HTTP endpoint  
D. /.auth/login endpoint  

Answer: A,C

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this question, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.Margie’s Travel is an international travel and bookings management service. The companyis expanding into restaurant bookings. You are tasked with implementing Azure Search forthe restaurants listed in their solution.You create the index in Azure Search.You need to import the restaurant data into the Azure Search service by using the AzureSearch .NET SDK.Solution:1. Create a SearchServiceClient object to connect to the search index.2. Create a DataContainer that contains the documents which must be added.3. Create a DataSource instance and set its Container property to the DataContainer.4. Set the DataSources property of the SearchServiceClient.Does the solution meet the goal?

A. Yes  
B. No  

Answer: B