Az-204 2

Certshared now are offering 100% pass ensure AZ-204 dumps!
https://www.certshared.com/exam/AZ-204/ (365 Q&As)
Microsoft
Exam Questions AZ-204
Developing Solutions for Microsoft Azure
Guaranteed success with Our exam guides visit - https://www.certshared.com

NEW QUESTION 1
- (Topic 8)
You are developing several Azure API Management (APIM) hosted APIs. The APIs have the following requirements:
Require a subscription key to access all APIs.
• Include terms of use that subscribers must accept to use the APIs.
• Administrators must review and accept or reject subscription attempts.
• Limit the count of multiple simultaneous subscriptions. You need to implement the APIs.
What should you do? OB.
A. Create and publish a product.

B. Configure and apply query string-based versioning.
C. Configure and apply header-based versioning.
D. Add a new revision to all API
E. Make the revisions current and add a change log entr
Answer: B
NEW QUESTION 2
- (Topic 8)
You develop and deploy a web application to Azure App Service. The application accesses data stored in an Azure Storage account. The account contains several
containers with several blobs with large amounts of data. You deploy all Azure resources to a single region.
You need to move the Azure Storage account to the new region. You must copy all data to the new region.
What should you do first?
A. Export the Azure Storage account Azure Resource Manager template

B. Initiate a storage account failover
C. Configure object replication for all blobs
D. Use the AzCopy command line tool
E. Create a new Azure Storage account in the current region
F. Create a new subscription in the current region
Answer: A
Explanation:
To move a storage account, create a copy of your storage account in another region. Then, move your data to that account by using AzCopy, or another tool of
your choice and finally, delete the resources in the source region.
To get started, export, and then modify a Resource Manager template.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account- move?tabs=azure-portal
NEW QUESTION 3
- (Topic 8)
You are developing an Azure Durable Function to manage an online ordering process. The process must call an external API to gather product discount
information.
You need to implement Azure Durable Function.
Which Azure Durable Function types should you use? Each correct answer presents part of the solution
NOTE: Each correct selection is worth ore point
A. Orchestrator
B. Entity
C. Activity
D. Client
Answer: AB
Explanation:
https://learn.microsoft.com/en-us/azure/azure-functions/durable/durable-functions-types- features-overview
NEW QUESTION 4
- (Topic 8)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the
stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop an HTTP triggered Azure Function app to process Azure Storage blob data. The app is triggered using an output binding on the blob.
The app continues to time out after four minutes. The app must process the blob data. You need to ensure the app does not time out and processes the blob data.
Solution: Update the functionTimeout property of the host.json project file to 10 minutes. Does the solution meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Instead pass the HTTP trigger payload into an Azure Service Bus queue to be processed by a queue trigger function and return an immediate HTTP success
response.
Note: Large, long-running functions can cause unexpected timeout issues. General best practices include:
Whenever possible, refactor large functions into smaller function sets that work together and return responses fast. For example, a webhook or HTTP trigger
function might require an acknowledgment response within a certain time limit; it's common for webhooks to require an immediate response. You can pass the

HTTP trigger payload into a queue to be

processed by a queue trigger function. This approach lets you defer the actual work and return an immediate response.
Reference:
https://docs.microsoft.com/en-us/azure/azure-functions/functions-best-practices
NEW QUESTION 5
- (Topic 8)
You develop and add several functions to an Azure Function app that uses the latest runtime host. The functions contain several REST API endpoints secured by
using SSL. The Azure Function app runs in a Consumption plan.
You must send an alert when any of the function endpoints are unavailable or responding too slowly.
You need to monitor the availability and responsiveness of the functions. What should you do?
A. Create a URL ping test.

B. Create a timer triggered function that calls TrackAvailability() and send the results to ApplicationInsights.
C. Create a timer triggered function that calls GetMetric("Request Size") and send the results toApplication Insights.
D. Add a new diagnostic setting to the Azure Function ap
E. Enable the FunctionAppLogs and Send to Log Analytics options.
Answer: B
Explanation:
You can create an Azure Function with TrackAvailability() that will run periodically
according to the configuration given in TimerTrigger function with your own business logic. The results of this test will be sent to your Application Insights resource,
where you will be able to query for and alert on the availability results data. This allows you to create customized tests similar to what you can do via Availability
Monitoring in the portal. Customized tests will allow you to write more complex availability tests than is possible using the portal UI, monitor an app inside of your
Azure VNET, change the endpoint address, or create an availability test even if this feature is not available in your region.
D18912E1457D5D1DDCBD40AB3BF70D5D
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/app/availability-azure-functions
NEW QUESTION 6
HOTSPOT - (Topic 8)
You provisioned an Azure Cosmos DB for NoSQL account named account1 with the default consistency level.
You plan to configure the consistency level on a per request basis The level needs to be set for consistent prefix for read and write operations to account1.
You need to identify the resulting consistency level for read and write operations. Which levels should you configure? To answer, select the appropriate options in
the
answer area.
NOTE: Each correct selection is worth one point.
A. Mastered
B. Not Mastered
Answer: A
Explanation:

NEW QUESTION 7
- (Topic 8)
You are developing an ASP.NET Core website that uses Azure FrontDoor. The website is used to build custom weather data sets for researchers. Data sets are
downloaded by users as Comma Separated Value (CSV) files. The data is refreshed every 10 hours.
Specific files must be purged from the FrontDoor cache based upon Response Header values.
You need to purge individual assets from the Front Door cache. Which type of cache purge should you use?
A. single path
B. wildcard
C. root domain
Answer: A
Explanation:
These formats are supported in the lists of paths to purge:
? Single path purge: Purge individual assets by specifying the full path of the asset (without the protocol and domain), with the file extension, for example,
/pictures/strasbourg.png;
? Wildcard purge: Asterisk (*) may be used as a wildcard. Purge all folders, subfolders, and files under an endpoint with /* in the path or purge all subfolders and
files under a specific folder by specifying the folder followed by /*, for example,
/pictures/*.
? Root domain purge: Purge the root of the endpoint with "/" in the path.
Reference:
https://docs.microsoft.com/en-us/azure/frontdoor/front-door-caching
NEW QUESTION 8
DRAG DROP - (Topic 8)
You are developing Azure WebJobs.
You need to recommend a WebJob type for each scenario.
Which WebJob type should you recommend? To answer, drag the appropriate WebJob types to the correct scenarios. Each WebJob type may be used once,
more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE:Each correct selection is worth one point.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: Continuous
Continuous runs on all instances that the web app runs on. You can optionally restrict the WebJob to a single instance.
Box 2: Triggered
Triggered runs on a single instance that Azure selects for load balancing.
Box 3: Continuous
Continuous supports remote debugging.
Note:
The following table describes the differences between continuous and triggered WebJobs.

References:
https://docs.microsoft.com/en-us/azure/app-service/web-sites-create-web-jobs
NEW QUESTION 9
HOTSPOT - (Topic 8)
You develop and deploy the following staticwebapp.config.json file to the app_location value specified in the workflow file of an Azure Static Web app.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
NEW QUESTION 10
You are developing an ASP.NET Core website that can be used to manage photographs which are stored in Azure Blob Storage containers.
Users of the website authenticate by using their Azure Active Directory (Azure AD) credentials.
You implement role-based access control (RBAC) role permissions on the containers that store photographs. You assign users to RBAC roles.
You need to configure the website’s Azure AD Application so that user’s permissions can be used with the Azure Blob containers.
How should you configure the application? To answer, drag the appropriate setting to the correct location. Each setting can be used once, more than once, or not
at all. You may need to drag the split bar between panes or scroll to view content.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: user_impersonation
Box 2: delegated Example:
* 1. Select the API permissions section
* 2. Click the Add a permission button and then: Ensure that the My APIs tab is selected
* 3. In the list of APIs, select the API TodoListService-aspnetcore.
* 4. In the Delegated permissions section, ensure that the right permissions are checked: user_impersonation.
* 5. Select the Add permissions button.
Box 3: delegated Example
* 2. Click the Add a permission button and then, Ensure that the Microsoft APIs tab is selected
* 3. In the Commonly used Microsoft APIs section, click on Microsoft Graph
* 4. In the Delegated permissions section, ensure that the right permissions are checked: User.Read. Use the search box if necessary.
* 5. Select the Add permissions button
NEW QUESTION 10
You develop and deploy an Azure Logic App that calls an Azure Function app. The Azure Function App includes an OpenAPI (Swagger) definition and uses an
Azure Blob storage account. All resources are secured by using Azure Active Directory (Azure AD).
The Logic App must use Azure Monitor logs to record and store information about runtime data and events. The logs must be stored in the Azure Blob storage
account.
You need to set up Azure Monitor logs and collect diagnostics data for the Azure Logic App.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the
correct order.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Step 1: Create a Log Analytics workspace
Before you start, you need a Log Analytics workspace.
Step 2: Install the Logic Apps Management solution
To set up logging for your logic app, you can enable Log Analytics when you create your logic app, or you can install the Logic Apps Management solution in your
Log Analytics workspace for existing logic apps.
Step 3: Add a diagnostic setting to the Azure Logic App Set up Azure Monitor logs
? In the Azure portal, find and select your logic app.
? On your logic app menu, under Monitoring, select Diagnostic settings > Add diagnostic setting.
NEW QUESTION 15
- (Topic 8)
Your company is designing an application named App1 that will use data from Azure SQL Database. App1 will be accessed over the internet by many users.
You need to recommend a solution for improving the performance ofApp1. What should you include in the recommendation?
A. Azure HPC cache

B. ExpressRoute
C. a CON profile
D. Azure Cache for Redis

Answer: D
NEW QUESTION 16
HOTSPOT - (Topic 8)
You are developing a web application that makes calls to the Microsoft Graph API. You register the application in the Azure portal and upload a valid X509
certificate.
You create an appsettings.json file containing the certificate name, client identifier for the application, and the tenant identifier of the Azure active Directory (Azure
AD). You create a method named ReadCertificate to return the X509 certificate by name.
You need to implement code that acquires a token by using the certificate.
How should you complete the code segment? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/develop/scenario-daemon-app-configuration?tabs=dotnet#instantiate-the-confidential-client-application-with-
a-client- certificate
https://docs.microsoft.com/en-us/azure/active-directory/develop/scenario-daemon-acquire-token?tabs=dotnet#acquiretokenforclient-api
NEW QUESTION 17
- (Topic 8)
You develop Azure Durable Functions to manage vehicle loans.
The loan process includes multiple actions that must be run in a specified order. One of the actions includes a customer credit check process, which may require
multiple days to process.
You need to implement Azure Durable Functions for the loan process. Which Azure Durable Functions type should you use?
A. orchestrator
B. client
C. activity
D. entity
Answer: A
NEW QUESTION 20
- (Topic 8)
You are developing an application that uses Azure Blob storage.
The application must read the transaction logs of all the changes that occur to the blobs and the blob metadata in the storage account for auditing purposes. The
changes must be in the order in which they occurred, include only create, update, delete, and copy operations and be retained for compliance reasons.
You need to process the transaction logs asynchronously. What should you do?
A. Process all Azure Blob storage events by using Azure Event Grid with a subscriber Azure Function app.
B. Enable the change feed on the storage account and process all changes for available events.
C. Process all Azure Storage Analytics logs for successful blob events.
D. Use the Azure Monitor HTTP Data Collector API and scan the request body for successful blob events.
Answer: B
Explanation:
Change feed support in Azure Blob Storage
The purpose of the change feed is to provide transaction logs of all the changes that occur to the blobs and the blob metadata in your storage account. The
change feed provides ordered, guaranteed, durable, immutable, read-only log of these changes. Client applications can read these logs at any time, either in
streaming or in batch mode. The change feed enables you to build efficient and scalable solutions that process change events that occur in your Blob Storage
account at a low cost.
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-change-feed
NEW QUESTION 24
- (Topic 8)
You are developing a solution that will use a multi-partitioned Azure Cosmos DB database. You plan to use the latest Azure Cosmos DB SDK for development.
The solution must meet the following requirements:
? Send insert and update operations to an Azure Blob storage account.

? Process changes to all partitions immediately.

? Allow parallelization of change processing.
You need to process the Azure Cosmos DB operations.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
A. Create an Azure App Service API and implement the change feed estimator of the SD
B. Scale the API by using multiple Azure App Service instances.
C. Create a background job in an Azure Kubernetes Service and implement the change feed feature of the SDK.
D. Create an Azure Function to use a trigger for Azure Cosmos D
E. Configure the trigger toconnect to the container.
F. Create an Azure Function that uses a Feedlterator object that processes the change feed by using the pull model on the containe
G. Use a FeedRange objext to parallelize the processing of the change feed across multiple functions.
Answer: CD
Explanation:
Azure Functions is the simplest option if you are just getting started using the change feed. Due to its simplicity, it is also the recommended option for most change
feed use cases. When you create an Azure Functions trigger for Azure Cosmos DB, you select the container to connect, and the Azure Function gets triggered
whenever there is a change in the container. Because Azure Functions uses the change feed processor behind the scenes, it automatically parallelizes change
processing across your container's partitions.
Note: You can work with change feed using the following options:
? Using change feed with Azure Functions
? Using change feed with change feed processor
Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/read-change-feed
https://docs.microsoft.com/en-us/azure/cosmos-db/change-feed-pull-model https://docs.microsoft.com/en-us/azure/cosmos-db/read-change-feed#azure-functions
https://docs.microsoft.com/en-us/azure/cosmos-db/change-feed-pull-model#using-feedrange-for-parallelization
NEW QUESTION 26
- (Topic 8)
Your company purchases an Azure subscription and plans to migrate several on-premises virtual machines to Azure. You need to design the infrastructure
required (or the Azure virtual machines solution. What should you include in the design?
A. the number of Azure Storage accounts

B. the settings of the Azure virtual networks
C. the size of the virtual machines
D. the number of Azure regions
Answer: C
NEW QUESTION 28
HOTSPOT - (Topic 8)
You are developing a service where customers can report news events from a browser using Azure Web PubSub. The service is implemented as an Azure App
that the JSON WebSocket suprotocol to receive news events.
You need to implement the bindings for the Azure Function App.
How should you configure the binding? To answer, select the appropriate options in the answer area.
Note: Each Correct Selection in worth one point.
A. Mastered
B. Not Mastered

Answer: A
Explanation:
NEW QUESTION 29
- (Topic 8)
After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.
You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user’s Azure AD group membership must be used to
determine the permission level. You need to configure authorization.
Solution:
•Create a new Azure AD application’s manifest, set value of the groupMembershipClaims option to All.
•In the website, use the value of the groups claim from the JWI for the user to determine permissions.
Does the solution meet the goal?
A. Yes
B. No
Answer: A
Explanation:
To configure Manifest to include Group Claims in Auth Token
* 1. Go to Azure Active Directory to configure the Manifest. Click on Azure Active Directory, and go to App registrations to find your application:
* 2. Click on your application (or search for it if you have a lot of apps) and edit the Manifest by clicking on it.
* 3. Locate the “groupMembershipClaims” setting. Set its value to either “SecurityGroup” or “All”. To help you decide which:
“SecurityGroup” - groups claim will contain the identifiers of all security groups of which the user is a member.
“All” - groups claim will contain the identifiers of all security groups and all distribution lists of which the user is a member
Now your application will include group claims in your manifest and you can use this fact in your code.
References:
https://blogs.msdn.microsoft.com/waws/2017/03/13/azure-app-service-authentication-aad- groups/
NEW QUESTION 32
- (Topic 8)
You are developing a mobile instant messaging app for a company. The mobile app must meet the following requirements:
• Support offline data sync.
• Update the latest messages during normal sync cycles. You need to implement Offline Data Sync.
Which two actions should you perform? Each conn I answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Retrieve records from Offline Data Sync on every call to the PullAsync method.
B. Retrieve records from Offline Data Sync using an Incremental Sync.
C. Push records to Offline Data Sync using an Incremental Sync.
D. Return the updatedAt column from the Mobile Service Backend and implement sorting by using the column.
E. Return the updatedAt column from the Mobile Service Backend and implement sorting by the message id.
Answer: BE
Explanation:
B: Incremental Sync: the first parameter to the pull operation is a query name that is used only on the client. If you use a non-null query name, the Azure Mobile
SDK performs an incremental sync. Each time a pull operation returns a set of results, the latest updatedAt timestamp from that result set is stored in the SDK
local system tables. Subsequent pull operations retrieve only records after that timestamp.

E (not D): To use incremental sync, your server must return meaningful updatedAt values and must also support sorting by this field. However, sincethe SDK adds
its own sort on the updatedAt field, you cannot use a pull query that has its own orderBy clause.
References:
https://docs.microsoft.com/en-us/azure/app-service-mobile/app-service-mobile-offline-data- sync
NEW QUESTION 34
You are preparing to deploy an Azure virtual machine (VM) based application. The VMs that run the application have the following requirements:
• When a VM is provisioned the firewall must be automatically configured before it can access Azure resources.
• Supporting services must be installed by using an Azure PowerShell script that is stored in Azure Storage
You need to ensure that the requirements are met.
Which features should you use? To answer, drag the appropriate features to the correct requirements.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
NEW QUESTION 35
HOTSPOT - (Topic 8)
You are developing an application that runs in several customer Azure Kubernetes Service clusters, within each cluster, a pod runs that collects performance data
to be analyzed later, a large amount of data is collected so saving latency must be minimized
The performance data must be stored so that pod restarts do not impact the stored data. Write latency should be minimized.
You need to configure blob storage.
How should you complete the YAML configuration? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:

NEW QUESTION 37
HOTSPOT - (Topic 8)
You are creating a CLI script that creates an Azure web app related services in Azure App Service. The web app uses the following variables:
You need to automatically deploy code from GitHub to the newly created web app.
How should you complete the script? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: az appservice plan create
The azure group creates command successfully returns JSON result. Now we can use resource group to create a azure app service plan
Box 2: az webapp create Create a new web app..
Box 3: --plan $webappname
with the serviceplan we created in step 1.
Box 4: az webapp deployment
Continuous Delivery with GitHub. Example:

az webapp deployment source config --name firstsamplewebsite1 --resource-group websites--repo-url $gitrepo --branch master --git-token $token
Box 5: --repo-url $gitrepo --branch master --manual-integration
NEW QUESTION 42
- (Topic 8)
You are a developing a SaaS application that stores data as key value pairs.
You must make multiple editions of the application available. In the lowest cost edition, the performance must be best-effort, and there is no regional failover.
In higher cos! editions customers must be able to select guaranteed performance and support for multiple regions. Azure costs must be minimized.
Which Azure Cosmos OB API should you use for the application?
A. Core
B. MongoDB
C. Cassandra
D. Table API
Answer: D
NEW QUESTION 47
- (Topic 8)
You ate developing an application that allows users to find musicians that ate looking for work. The application must store information about musicians, the
instruments that they play, and other related data.
The application must also allow users to determine which musicians have played together, including groups of three or more musicians that have performed
together at a specific location.
Which Azure Cosmos D6 API should you use for the application?
A. Core
B. MongoDB
C. Cassandra
D. Gremlin
Answer: B
NEW QUESTION 49
- (Topic 8)
You use Azure Table storage to store customer information for an application. The data contains customer details and is partitioned by last name. You need to
create a query that returns all customers with the last name Smith. Which code segment should you use?
A. TableQuery.GenerateFilterCondition("PartitionKey", Equals, "Smith")

B. TableQuery.GenerateFilterCondition("LastName", Equals, "Smith")
C. TableQuery.GenerateFilterCondition("PartitionKey", QueryComparisons.Equal, "Smith")
D. TableQuery.GenerateFilterCondition("LastName", QueryComparisons.Equal, "Smith")
Answer: C
Explanation:
Retrieve all entities in a partition. The following code example specifies a filter for entities where 'Smith' is the partition key. This example prints the fields of each
entity in the query results to the console.
Construct the query operation for all customer entities where PartitionKey="Smith".
TableQuery<CustomerEntity> query = new TableQuery<CustomerEntity>().Where(TableQuery.GenerateFilterCondition("PartitionKey", QueryComparisons.Equal,
"Smith"));
References:
https://docs.microsoft.com/en-us/azure/cosmos-db/table-storage-how-to-use-dotnet
NEW QUESTION 53
HOTSPOT - (Topic 8)
You are developing an application that uses Azure Storage Queues. You have the following code:
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: No
The QueueDescription.LockDuration property gets or sets the duration of a peek lock; that is, the amount of time that the message is locked for other receivers.
The maximum value for LockDuration is 5 minutes; the default value is 1 minute.
Box 2: Yes
You can peek at the message in the front of a queue without removing it from the queue by calling the PeekMessage method.
Box 3: Yes
NEW QUESTION 57
You develop software solutions for a mobile delivery service. You are developing a mobile app that users can use to order from a restaurant in their area. The app
uses the following workflow:
* 1. A driver selects the restaurants for which they will deliver orders.
* 2. Orders are sent to all available drivers in an area.
* 3. Only orders for the selected restaurants will appear for the driver.
* 4. The first driver to accept an order removes it from the list of available orders.
You need to implement an Azure Service Bus solution.
correct order.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: Create a single Service Bus Namespace
To begin using Service Bus messaging entities in Azure, you must first create a namespace with a name that is unique across Azure. A namespace provides a
scoping container for addressing Service Bus resources within your application.
Box 2: Create a Service Bus Topic for each restaurant for which a driver can receive messages.
Create topics.
Box 3: Create a Service Bus subscription for each restaurant for which a driver can receive orders.
NEW QUESTION 62
You are a developer for a Software as a Service (SaaS) company. You develop solutions that provide the ability to send notifications by using Azure Notification
Hubs.
You need to create sample code that customers can use as a reference for how to send raw notifications to Windows Push Notification Services (WNS) devices.
The sample code must not use external packages.
How should you complete the code segment? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once,
more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: windows Example code:
var request = new HttpRequestMessage(method, $"{resourceUri}?api-version=2017-04"); request.Headers.Add("Authorization", createToken(resourceUri,
KEY_NAME, KEY_VALUE));
request.Headers.Add("X-WNS-Type", "wns/raw"); request.Headers.Add("ServiceBusNotification-Format", "windows"); return request;
Box 2: application/octet-stream
Example code capable of sending a raw notification: string resourceUri =
$"https://{NH_NAMESPACE}.servicebus.windows.net/{HUB_NAME}/messages/"; using (var request = CreateHttpRequest(HttpMethod.Post, resourceUri))
{
request.Content = new StringContent(content, Encoding.UTF8,"application/octet-stream"); request.Content.Headers.ContentType.CharSet = string.Empty;
var httpClient = new HttpClient();
var response = await httpClient.SendAsync(request); Console.WriteLine(response.StatusCode);
}
NEW QUESTION 66
- (Topic 8)
You develop an ASP.NET Core app that uses Azure App Configuration. You also create an App Configuration containing 100 settings. The app must meet the
following requirements:
• Ensure the consistency of all configuration data when changes to individual settings occur.
• Handle configuration data changes dynamically without causing the application to restart.
• Reduce the overall number of requests made to App Configuration APIs.
You must implement dynamic configuration updates in the app.
What are two ways to achieve this goal? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Increase the App Configuration cache expiration from the default value.
B. Create and implement environment variables for each App Configuration store setting.
C. Decrease the App Configuration cache expiration from the default value.
D. Register all keys in the App Configuration stor
E. Set the refreshAII parameter of the Register method to false.
F. Create and register a sentinel key in the App Configuration stor
G. Set the refreshAII parameter of the Register method to true.
H. Create and configure Azure Key Vaul
I. Implement the Azure Key Vault configuration provider.
Answer: AE
NEW QUESTION 67
- (Topic 8)
You are designing a multi-tiered application that will be hosted on Azure virtual machines. The virtual machines will run Windows Server. Front-end servers will be
accessible from the Internet over port 443. The other servers will NOT be directly accessible over the internet
You need to recommend a solution to manage the virtual machines that meets the following requirement
• Allows the virtual machine to be administered by using Remote Desktop.
• Minimizes the exposure of the virtual machines on the Internet Which Azure service should you recommend?
A. Azure Bastion
B. Service Endpoint
C. Azure Private Link
D. Azure Front Door
Answer: C
NEW QUESTION 71
You have a web app named MainApp. You are developing a triggered App Service background task by using the WebJobs SDK. This task automatically invokes a
function code whenever any new data is received in a queue.
You need to configure the services.
Which service should you use for each scenario? To answer, drag the appropriate services to the correct scenarios. Each service may be used once, more than
once, or not at all. You may need to drag the split bar between panes or scroll to view content.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: WebJobs
A WebJob is a simple way to set up a background job, which can process continuously or on a schedule. WebJobs differ from a cloud service as it gives you get
less fine-grained control over your processing environment, making it a more true PaaS service.
Box 2: Flow
NEW QUESTION 74
- (Topic 8)
You deploy an API to API Management
You must secure all operations on the API by using a client certificate.
You need to secure access to the backend service of the API by using client certificates. Which two security features can you use?
A. Azure AD token
B. Self-signed certificate
C. Certificate Authority (CA) certificate
D. Triple DES (3DES) cipher
E. Subscription key
Answer: BC
NEW QUESTION 77
HOTSPOT - (Topic 8)
You develop several Azure Grid to include hundreds of event types, such as billing, inventory, and shipping updates.
Events must be sent to a single endpoint for the Azure Functions app to process. The events must be filtered by event type before processing. You must have
authorization and authentication control to partition your tenants to receive the event data.
You need to configure Azure Event Grid.
Which configuration should you use? To answer, select the appropriate values in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:

NEW QUESTION 81
HOTSPOT - (Topic 8)
All functions in the app meet the following requirements:
• Run until either a successful run or until 10 run attempts occur.
• Ensure that there are at least 20 seconds between attempts for up to 15 minutes. You need to configure the hostjson file.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
NEW QUESTION 86
HOTSPOT - (Topic 8)
You are developing an application that uses a premium block blob storage account. You are optimizing costs by automating Azure Blob Storage access tiers.
You apply the following policy rules to the storage account. You must determine the implications of applying the rules to the data. (Line numbers are included for
reference only.)

A. Mastered
B. Not Mastered
Answer: A
Explanation:
* 1. Yes
* 2. Yes
* 3. Yes
* 4. No
https://docs.microsoft.com/en-us/azure/storage/blobs/lifecycle-management-overview?tabs=azure-portal#move-aging-data-to-a-cooler-tier
NEW QUESTION 87
You are developing a .NET Core model-view controller (MVC) application hosted on Azure for a health care system that allows providers access to their
information.
You develop the following code:
You define a role named SysAdmin.

You need to ensure that the application meets the following authorization requirements:
? Allow the ProviderAdmin and SysAdmin roles access to the Partner controller regardless of whether the user holds an editor claim of partner.
? Limit access to the Manage action of the controller to users with an editor claim of
partner who are also members of the SysAdmin role.
How should you complete the code? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than
once, or not at all. You may need to drag the split bar between panes or scroll to view content.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1:
Allow the ProviderAdmin and SysAdmin roles access to the Partner controller regardless of whether the user holds an editor claim of partner.
Box 2:
Limit access to the Manage action of the controller to users with an editor claim of partner who are also members of the SysAdmin role.
NEW QUESTION 88
- (Topic 8)
You are developing a web application that uses the Microsoft identity platform to authenticate users and resources, The web application calls several REST APIs.
The APIs require an access token from the Microsoft identity platform. You need to request a token.
Which three properties should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Application name
B. Application secret
C. Application ID
D. Supported account type
E. Redirect URI/URL

Answer: ABC
NEW QUESTION 91
- (Topic 8)
You are developing a software solution for an autonomous transportation system. The solution uses large data sets and Azure Batch processing to simulate
navigation sets for entire fleets of vehicles.
You need to create compute nodes for the solution on Azure Batch. What should you do?
A. In Python, implement the class: TaskAddParameter

B. In Python, implement the class: JobAddParameter
C. In the Azure portal, create a Batch account
D. In a .NET method, call the method: BatchClient.PoolOperations.CreateJob
Answer: D
Explanation:
A Batch job is a logical grouping of one or more tasks. A job includes settings common to the tasks, such as priority and the pool to run tasks on. The app uses the
BatchClient.JobOperations.CreateJob method to create a job on your pool.
Note:
Step 1: Create a pool of compute nodes. When you create a pool, you specify the number of compute nodes for the pool, their size, and the operating system.
When each task in your job runs, it's assigned to execute on one of the nodes in your pool.
Step 2 : Create a job. A job manages a collection of tasks. You associate each job to a specific pool where that job's tasks will run.
Step 3: Add tasks to the job. Each task runs the application or script that you uploaded to process the data files it downloads from your Storage account. As each
task completes, it can upload its output to Azure Storage.
NEW QUESTION 95
HOTSPOT - (Topic 8)
You are developing a data storage solution for a social networking app.
The solution requires a mobile app that stores user information using Azure Table Storage. You need to develop code that can insert multiple sets of user
information.
How should you complete the code? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1, Box 2: TableBatchOperation Create the batch operation.
TableBatchOperation op = new TableBatchOperation();
Box 3: ExecuteBatch
/ Execute the batch operation. table.ExecuteBatch(op);
Note: You can insert a batch of entities into a table in one write operation. Some other notes on batch operations:
You can perform updates, deletes, and inserts in the same single batch operation. A single batch operation can include up to 100 entities.
All entities in a single batch operation must have the same partition key.
While it is possible to perform a query as a batch operation, it must be the only operation in the batch.
References:
https://docs.microsoft.com/en-us/azure/cosmos-db/table-storage-how-to-use-dotnet
NEW QUESTION 98
FILL IN THE BLANK - (Topic 8)
You are developing a web application by using the Azure SDK. The web application accesses data m a zone-redundant BlockBlobStorage storage account
The application must determine whether the data has changed since the application last reao the data. Update operations must use the latest data changes when
writing data to the storages..................
You need to implement the update operations.
Which values should you use? To answer, select the appropriate option m the answer area.
NOTE Each correct selection is worth one point.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
NEW QUESTION 100

You develop a web application.
You need to register the application with an active Azure Active Directory (Azure AD) tenant.
Which three actions should you perform in sequence? To answer, move all actions from the list of actions to the answer area and arrange them in the correct
order.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Register a new application using the Azure portal
? Sign in to the Azure portal using either a work or school account or a personal Microsoft account.
? If your account gives you access to more than one tenant, select your account in the upper right corner. Set your portal session to the Azure AD tenant that you
want.
? Search for and select Azure Active Directory. Under Manage, select App registrations.
? Select New registration. (Step 1)
? In Register an application, enter a meaningful application name to display to users.
? Specify who can use the application. Select the Azure AD instance. (Step 2)
? Under Redirect URI (optional), select the type of app you're building: Web or Public client (mobile & desktop). Then enter the redirect URI, or reply URL, for your
application. (Step 3)
? When finished, select Register.
NEW QUESTION 101

- (Topic 8)
You are developing an Azure Function App that runs in an App Service Plan. The Azure Function is triggered by a Timer object. You observe that the Azure
Function does not reliably trigger when scheduled. Which two actions should you perform?
A. Verify that Always On is enabled.

B. Modify the trigger to use a SignaIR trigger.
C. Ensure that the function has a retry configured.
D. Modify the trigger to use Consumption mode instead of the App Service plan.
Answer: AC
NEW QUESTION 106

- (Topic 8)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the
solution meets the stated goals.
You are developing and deploying several ASP.Net web applications to Azure App Service. You plan to save session state information and HTML output. You
must use a storage mechanism with the following requirements:
•Share session state across all ASP.NET web applications
•Support controlled, concurrent access to the same session state data for multiple readers and a single writer
•Save full HTTP responses for concurrent requests You need to store the information.
Proposed Solution: Deploy and configure an Azure Database for PostgreSQL. Update the web applications.
A. Yes
B. No
Answer: B
Explanation:
Instead deploy and configure Azure Cache for Redis. Update the web applications. Reference:
https://docs.microsoft.com/en-us/azure/architecture/best-practices/caching#managing-concurrency-in-a-cache
NEW QUESTION 111

- (Topic 8)
You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage
Blob storage. The storage account type is General-purpose V2.
When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version
of the image must start in less than one minute.
You need to design the process that starts the photo processing.
Solution: Use the Azure Blob Storage change feed to trigger photo processing. Does the solution meet the goal?
A. Yes
B. No
Answer: B
Explanation:
The change feed is a log of changes that are organized into hourly segments but appended to and updated every few minutes. These segments are created only
when there are blob change events that occur in that hour.
Instead catch the triggered event, so move the photo processing to an Azure Function triggered from the blob upload.
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-change-feed https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-event-overview
NEW QUESTION 113

- (Topic 8)
Solution: Pass the HTTP trigger payload into an Azure Service Bus queue to be processed by a queue trigger function and return an immediate HTTP success
response.
A. Yes
B. No
Answer: A
Explanation:
Large, long-running functions can cause unexpected timeout issues. General best practices include:
HTTP trigger payload into a queue to be processedby a queue trigger function. This approach lets you defer the actual work and return an immediate response.
Reference:
NEW QUESTION 115

You are developing an application. You have an Azure user account that has access to two subscriptions.
You need to retrieve a storage account key secret from Azure Key Vault.
In which order should you arrange the PowerShell commands to develop the solution? To answer, move all commands from the list of commands to the answer
area and arrange them in the correct order.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
Step 1: Get-AzSubscription
If you have multiple subscriptions, you might have to specify the one that was used to create your key vault. Enter the following to see the subscriptions for your
account: Get-AzSubscription
Step 2: Set-AzContext -SubscriptionId
To specify the subscription that's associated with the key vault you'll be logging, enter: Set-AzContext -SubscriptionId <subscriptionID>
Step 3: Get-AzStorageAccountKey You must get that storage account key.
Step 4: $secretvalue = ConvertTo-SecureString <storageAccountKey> -AsPlainText -Force
Set-AzKeyVaultSecret -VaultName <vaultName> -Name <secretName> -SecretValue
$secretvalue
After retrieving your secret (in this case, your storage account key), you must convert that key to a secure string, and then create a secret with that value in your
key vault.
Step 5: Get-AzKeyVaultSecret
Next, get the URI for the secret you created. You'll need this URI in a later step to call the key vault and retrieve your secret. Run the following PowerShell
command and make note of the ID value, which is the secret's URI:
Get-AzKeyVaultSecret –VaultName <vaultName>
NEW QUESTION 120

- (Topic 8)
You are building a B2B web application that uses Azure B2B collaboration for authentication Paying customers authenticate to Azure B2B using federation
The application allows users to sign up for trial accounts using any email address
When a user converts to a paying customer, the data associated with the teal should be kept, but the user must authenticate using federation
You need to update the user in Azure Active Directory (Azure AD) when they convert to a paying customer
Which Graph API parameter is used to change authentication from one-time passé odes to federation?
A. uscrFlowType
B. Status
C. invittdUstr
D. resetRedemption
Answer: B
NEW QUESTION 125

You are developing a Docker/Go using Azure App Service Web App for Containers. You plan to run the container in an App Service on Linux. You identify a
Docker container image to use.
None of your current resource groups reside in a location that supports Linux. You must minimize the number of resource groups required.
You need to create the application and perform an initial deployment.
Which three Azure CLI commands should you use to develop the solution? To answer, move the appropriate commands from the list of commands to the answer
area and arrange them in the correct order.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
You can host native Linux applications in the cloud by using Azure Web Apps. To create a Web App for Containers, you must run Azure CLI commands that create
a group, then a service plan, and finally the web app itself.
Step 1: az group create
In the Cloud Shell, create a resource group with the az group create command.
Step 2: az appservice plan create
In the Cloud Shell, create an App Service plan in the resource group with the az appservice plan create command.
Step 3: az webapp create
In the Cloud Shell, create a web app in the myAppServicePlan App Service plan with the az webapp create command. Don't forget to replace with a unique app
name, and <docker- ID> with your Docker ID.
References:
https://docs.microsoft.com/mt-mt/azure/app-service/containers/quickstart-docker-go?view=sql-server-ver15
NEW QUESTION 129

- (Topic 8)
stated goals. Some question sets might have more than one correct solution, while others
might not have a correct solution.
You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user’s Azure AD group membership must be used to
determine the permission level.
You need to configure authorization. Solution:
? Create a new Azure AD application. In the application’s manifest, define application roles that match the required permission levels for the application.
? Assign the appropriate Azure AD group to each role. In the website, use the value
of the roles claim from the JWT for the user to determine permissions. Does the solution meet the goal?
A. Yes
B. No
Answer: B
Explanation:
To configure Manifest to include Group Claims in Auth Token
? Go to Azure Active Directory to configure the Manifest. Click on Azure Active Directory, and go to App registrations to find your application:
? Click on your application (or search for it if you have a lot of apps) and edit the Manifest by clicking on it.
? Locate the “groupMembershipClaims” setting. Set its value to either “SecurityGroup” or “All”. To help you decide which:
? “SecurityGroup” - groups claim will contain the identifiers of all security groups of which the user is a member.
? “All” - groups claim will contain the identifiers of all security groups and all distribution lists of which the user is a member
Now your application will include group claims in your manifest and you can use this fact in your code.
Reference:
NEW QUESTION 130

HOTSPOT - (Topic 8)
You are developing an Azure Function App by using Visual Studio. The app will process orders input by an Azure Web App. The web app places the order
information into Azure Queue Storage.
You need to review the Azure Function App code shown below.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: No
ExpirationTime - The time that the message expires.
InsertionTime - The time that the message was added to the queue.
Box 2: Yes
maxDequeueCount - The number of times to try processing a message before moving it to the poison queue. Default value is 5.
Box 3: Yes
When there are multiple queue messages waiting, the queue trigger retrieves a batch of messages and invokes function instances concurrently to process them.
By default, the batch size is 16. When the number being processed gets down to 8, the runtime gets another batch and starts processing those messages. So the
maximum number of concurrent messages being processed per function on one virtual machine (VM) is 24.
Box 4: Yes References:
https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-queue
NEW QUESTION 132

A company has multiple warehouse. Each warehouse contains IoT temperature devices which deliver temperature data to an Azure Service Bus queue.
You need to send email alerts to facility supervisors immediately if the temperature at a warehouse goes above or below specified threshold temperatures.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the
correct order.
A. Mastered
B. Not Mastered

Answer: A
Explanation:
Step 1: Create a blank Logic app. Create and configure a Logic App.
Step 2: Add a logical app trigger that fires when one or more messages arrive in the queue. Configure the logic app trigger.
Under Triggers, select When one or more messages arrive in a queue (auto-complete). Step 3: Add an action that reads IoT temperature data from the Service
Bus queue
Step 4: Add a condition that compares the temperature against the upper and lower thresholds.
Step 5: Add an action that sends an email to specified personnel if the temperature is outside of those thresholds
NEW QUESTION 135

You develop an application. You plan to host the application on a set of virtual machines (VMs) in Azure.
You need to configure Azure Monitor to collect logs from the application.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the
correct order.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Step 1: Create a Log Analytics workspace. First create the workspace.
Step 2: Add a VMInsights solution.

Before a Log Analytics workspace can be used with VM insights, it must have the VMInsights solution installed.
Step 3: Install agents on the VM and VM scale set to be monitored.
Prior to onboarding agents, you must create and configure a workspace. Install or update the Application Insights Agent as an extension for Azure virtual machines
and VM scalet sets.
Step 4: Create an Application Insights resource
Sign in to the Azure portal, and create an Application Insights resource.
Once a workspace-based Application Insights resource has been created, configuring monitoring is relatively straightforward.

NEW QUESTION 138

- (Topic 8)
You are building a web application that performs image analysis on user photos and returns metadata containing objects identified. The image analysis is very
costly in terms of time and compute resources. You are planning to use Azure Redo Cache so Cache uploads do not need to be reprocessed.
In case of an Azure data center outage metadata loss must be kept to a minimum. You need to configure the Azure Redis cache instance.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection in worth one point.
A. Configure Azure Redis with persistence

B. Configure second storage account for persistence
C. Set backup frequency to the minimum value
D. Configure Azure Redis with RDS persistence
Answer: AC
NEW QUESTION 139

HOTSPOT - (Topic 8)
You have an App Service plan named aspl based on the Free pricing tier.
You plan to use aspl to implement an Azure Function app with a queue trigger. Your solution must minimize cost.
You need to identify the configuration options that will meet the requirements.
Which value should you configure? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
NEW QUESTION 141

- (Topic 8)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the
solution meets the stated goals.
You are developing and deploying several ASP.NET web applications to Azure App Service. You plan to save session state information and HTML output.
You must use a storage mechanism with the following requirements:
? Share session state across all ASP.NET web applications.
? Support controlled, concurrent access to the same session state data for multiple readers and a single writer.
? Save full HTTP responses for concurrent requests.
You need to store the information.
Solution: Enable Application Request Routing (ARR). Does the solution meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Instead deploy and configure Azure Cache for Redis. Update the web applications. Reference:
https://docs.microsoft.com/en-us/azure/architecture/best-practices/caching#managing-concurrency-in-a-cache
NEW QUESTION 142

- (Topic 8)
You develop and deploy an Azure App Service API app to a Windows-hosted deployment slot named Development. You create additional deployment slots
namedTestingand Production. You enable auto swap on the Production deployment slot.
You need to ensure that scripts run and resources are available before a swap operation occurs.
Solution: Enable auto swap for the Testing slot. Deploy the app to the Testing slot. Does the solution meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Instead update the web.config file to include the applicationInitialization configuration element. Specify custom initialization actions to run the scripts.
Note: Some apps might require custom warm-up actions before the swap. The applicationInitialization configuration element in web.config lets you specify custom
initialization actions. The swap operation waits for this custom warm-up to finish before swapping with the target slot. Here's a sample web.config fragment.
<system.webServer>
<applicationInitialization>
<add initializationPage="/" hostName="[app hostname]" />
<add initializationPage="/Home/About" hostName="[app hostname]" />
</applicationInitialization>
</system.webServer>
Reference:
https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots#troubleshoot- swaps
NEW QUESTION 146

You plan to create a Docker image that runs as ASP.NET Core application named ContosoApp. You have a setup script named setupScript.ps1 and a series of
application files including ContosoApp.dll.
You need to create a Dockerfile document that meets the following requirements:
•Call setupScript.ps1 when the container is built.
•Run ContosoApp.dll when the container starts.
The Docker document must be created in the same folder where ContosoApp.dll and setupScript.ps1 are stored.
Which four commands should you use to develop the solution? To answer, move the appropriate commands from the list of commands to the answer area and
arrange them in the correct order.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Step 1: WORKDIR /apps/ContosoApp
Step 2: COPY ./-
The Docker document must be created in the same folder where ContosoApp.dll and setupScript.ps1 are stored.
Step 3: EXPOSE ./ContosApp/ /app/ContosoApp Step 4: CMD powershell ./setupScript.ps1
ENTRYPOINT ["dotnet", "ContosoApp.dll"]
You need to create a Dockerfile document that meets the following requirements:
? Call setupScript.ps1 when the container is built.
? Run ContosoApp.dll when the container starts.
References:
https://docs.microsoft.com/en-us/azure/app-service/containers/tutorial-custom-docker- image
NEW QUESTION 148

HOTSPOT - (Topic 8)
You are building a website that is used to review restaurants. The website will use an Azure CDN to improve performance and add functionality to requests.
You build and deploy a mobile app for Apple iPhones. Whenever a user accesses the website from an iPhone, the user must be redirected to the app store.
You need to implement an Azure CDN rule that ensures that iPhone users are redirected to the app store.
How should you complete the Azure Resource Manager template? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: iOS
Azure AD Conditional Access supports the following device platforms:
? Android
? iOS
? Windows Phone
? Windows
? macOS
Box 2: DeliveryRuleIsDeviceConditionParameters
The DeliveryRuleIsDeviceCondition defines the IsDevice condition for the delivery rule. parameters defines the parameters for the condition.
Box 3: HTTP_USER_AGENT
Box 4: DeliveryRuleRequestHeaderConditionParameters DeliveryRuleRequestHeaderCondition defines the RequestHeader condition for the delivery rule.
parameters defines the parameters for the condition.
Box 5: iOS
The Require approved client app requirement only supports the iOS and Android for device platform condition.
NEW QUESTION 149

You are maintaining an existing application that uses an Azure Blob GPv1 Premium storage account. Data older than three months is rarely used.
Data newer than three months must be available immediately. Data older than a year must be saved but does not need to be available immediately.
You need to configure the account to support a lifecycle management rule that moves blob data to archive storage for data not modified in the last year.
correct order.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
Step 1: Upgrade the storage account to GPv2
Object storage data tiering between hot, cool, and archive is supported in Blob Storage and General Purpose v2 (GPv2) accounts. General Purpose v1 (GPv1)
accounts don't support tiering.
You can easily convert your existing GPv1 or Blob Storage accounts to GPv2 accounts through the Azure portal.
Step 2: Copy the data to be archived to a Standard GPv2 storage account and then delete the data from the original storage account
Step 3: Change the storage account access tier from hot to cool Note: Hot - Optimized for storing data that is accessed frequently.
Cool - Optimized for storing data that is infrequently accessed and stored for at least 30
days.
Archive - Optimized for storing data that is rarely accessed and stored for at least 180 days with flexible latency requirements, on the order of hours.
Only the hot and cool access tiers can be set at the account level. The archive access tier can only be set at the blob level.
NEW QUESTION 154

- (Topic 8)
You are developing an application to store business-critical data in Azure Blob storage. The application must meet the following requirements:
• Data must not be modified or deleted for a user-specified interval.
• Data must be protected from overwntes and deletes.
• Data must be written once and allowed to be read many times. You need to protect the data fen the Azure Blob storage account.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Enable version-level immutability support for the storage account.

B. Create an account shared-access signature (SAS).
C. Enable point-in-time restore for containers in the storage account.
D. Create a service shared-access signature (SAS).
E. Enable the blob change feed for the storage account.
F. Configure a time-based retention policy for the storage account.
Answer: DF
NEW QUESTION 159

- (Topic 8)
You ate developing a web application that uses the Microsoft identity platform to authenticate users and resources. The web application calls several REST APIs.
The APIs require an access token from the Microsoft identity platform. You need to request a token.
Which three properties should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Application secret
B. Redirect URI/URL
C. Application name
D. Supported account type
E. Application ID
Answer: ABE
NEW QUESTION 164

- (Topic 8)
A development team is creating a new REST API. The API will store data in Azure Blob storage. You plan to deploy the API to Azure App Service.
Developers must access the Azure Blob storage account to develop the API for the next two months. The Azure Blob storage account must not be accessible by
the developers after the two-month time period.
You need to grant developers access to the Azure Blob storage account. What should you do?
A. Generate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers.
B. Create and apply a new lifecycle management policy to include a last accessed date valu
C. Apply the policy to the Azure Blob storage account.
D. Provide all developers with the access key for the Azure Blob storage accoun

E. Update the API to include the Coordinated Universal Time (UTC) timestamp for the request header.
F. Grant all developers access to the Azure Blob storage account by assigning role-based access control (RBAC) roles.
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview
NEW QUESTION 168

You develop a gateway solution for a public facing news API.
The news API back end is implemented as a RESTful sen/ice and hosted in an Azure App Service instance.
You need to configure back-end authentication for the API Management service instance. Which target and gateway credential type should you use? To answer,
drag the appropriate
values to the correct parameters. Each value may be used once, more than once, or not at
all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: Azure Resource Box 2: Client cert
API Management allows to secure access to the back-end service of an API using client certificates.
References:
https://docs.microsoft.com/en-us/rest/api/apimanagement/apimanagementrest/azure-api-management-rest-api-backend-entity
NEW QUESTION 171

HOTSPOT - (Topic 8)
You are developing an application that uses Azure Storage to store customer data. The data must only be decrypted by the customer and the customer must be
provided a script to rotate keys.
You need to provide a script to rotate keys to the customer.
How should you complete the command? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:

NEW QUESTION 176

- (Topic 8)
You are developing an Azure Function App that processes images that are uploaded to an Azure Blob container.
Images must be processed as quickly as possible after they are uploaded, and the solution must minimize latency. You create code to process images when the
Function App is triggered.
You need to configure the Function App. What should you do?
A. Use an App Service pla

B. Configure the Function App to use an Azure Blob Storage input trigger.
C. Use a Consumption pla
D. Configure the Function App to use an Azure Blob Storage trigger.
E. Use a Consumption pla
F. Configure the Function App to use a Timer trigger.
G. Use an App Service pla
H. Configure the Function App to use an Azure Blob Storage trigger.
I. Use a Consumption pla
J. Configure the Function App to use an Azure Blob Storage input trigger.
Answer: B
Explanation:
The Blob storage trigger starts a function when a new or updated blob is detected. The blob contents are provided as input to the function.
The Consumption plan limits a function app on one virtual machine (VM) to 1.5 GB of memory.
Reference:
https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-blob- trigger
NEW QUESTION 177

You are developing an application to securely transfer data between on-premises file systems and Azure Blob storage. The application stores keys, secrets, and
certificates in Azure Key Vault. The application uses the Azure Key Vault APIs.
The application must allow recovery of an accidental deletion of the key vault or key vault objects. Key vault objects must be retained for 90 days after deletion.
You need to protect the key vault and key vault objects.
Which Azure Key Vault feature should you use? To answer, drag the appropriate features to the correct actions. Each feature may be used once, more than once,
or not at all. You
may need to drag the split bar between panes or scroll to view content.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: Soft delete
When soft-delete is enabled, resources marked as deleted resources are retained for a specified period (90 days by default). The service further provides a
mechanism for recovering the deleted object, essentially undoing the deletion.
Box 2: Purge protection
Purge protection is an optional Key Vault behavior and is not enabled by default. Purge protection can only be enabled once soft-delete is enabled.
When purge protection is on, a vault or an object in the deleted state cannot be purged until the retention period has passed. Soft-deleted vaults and objects can
still be recovered, ensuring that the retention policy will be followed.

NEW QUESTION 180

HOTSPOT - (Topic 8)
Your company is migrating applications to Azure. The IT department must allow internal developers to communicate with Microsoft support.
The service agents of the IT department must only have view resources and create support ticket permissions to all subscriptions. A new custom role must be
created by reusing a default role definition and changing the permissions.
You need to create the custom role.
To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: Set-AzureRmRoleDefinition Input-File C:\SupportRole.json
The Set-AzureRmRoleDefinition cmdlet updates an existing custom role in Azure Role- Based Access Control. Provide the updated role definition as an input to
the command as a JSON file or a PSRoleDefinition object.
The role definition for the updated custom role MUST contain the Id and all other required properties of the role even if they are not updated: DisplayName,
Description, Actions, AssignableScope
Box 2: "*/read*."* Microsoft.Support/*" Microsoft.Support/* Create and manage support tickets
"Microsoft.Support" role definition azure
NEW QUESTION 183

- (Topic 8)
After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to assign users one of the following permission levels for the website: admin,
normal, and reader. A user’s Azure AD group membership must be used to determine the permission level. You need to configure authorization.
Solution: Configure the Azure Web App for the website to allow only authenticated requests and require Azure AD log on.
A. Yes
B. No
Answer: B
Explanation:
Instead in the Azure AD application’s manifest, set value of the groupMembershipClaims option to All.
References:
NEW QUESTION 188

HOTSPOT - (Topic 8)
You create the following PowerShell script:
For each of the following statements, select Yes if the statement is true. Otherwise, select No,

A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: No
The AzScheduledQueryRuleSource is Heartbeat, not CPU.
Box 2: Yes
The AzScheduledQueryRuleSource is Heartbeat!
Note: New-AzScheduledQueryRuleTriggerCondition creates an object of type Trigger Condition. This object is to be passed to the command that creates Alerting
Action object.
Box 3: No
The schedule is 60 minutes, not two hours.
-FrequencyInMinutes: The alert frequency.
-TimeWindowInMinutes: The alert time window
The New-AzAscheduledQueryRuleSchedule command creates an object of type Schedule. This object is to be passed to the command that creates Log Alert
Rule.
NEW QUESTION 191

- (Topic 8)
You are developing an application to manage shipping information for cargo ships. The application will use Azure Cosmos D8 for storage.
The application must run offline when ships are at sea The application must be connected to Azure when ships are in port.
Which Azure Cosmos D8 API should you use for the application?
A. Core
B. MongoDe
C. Cassandra
D. Gremlin
Answer: C
NEW QUESTION 194

- (Topic 8)
A company is developing a solution that allows smart refrigerators to send temperature information to a central location. You have an existing Service Bus.
The solution must receive and store message until they can be processed. You create an Azure Service Bus Instance by providing a name, pricing tier,
subscription, resource group, and location.
You need to complete the configuration.
Which Azure CLI or PowerShell command should you run?
A. Option A
B. Option B
C. Option C

D. Option D
Answer: A
Explanation:
A service bus instance has already been created (Step 2 below). Next is step 3, Create a Service Bus queue.
Note: Steps:
Step 1: # Create a resource group resourceGroupName="myResourceGroup"
az group create --name $resourceGroupName --location eastus
Step 2: # Create a Service Bus messaging namespace with a unique name namespaceName=myNameSpace$RANDOM
az servicebus namespace create --resource-group $resourceGroupName --name
$namespaceName --location eastus
Step 3: # Create a Service Bus queue
az servicebus queue create --resource-group $resourceGroupName --namespace-name
$namespaceName --name BasicQueue
Step 4: # Get the connection string for the namespace
connectionString=$(az servicebus namespace authorization-rule keys list --resource-group
$resourceGroupName --namespace-name $namespaceName --name RootManageSharedAccessKey --query primaryConnectionString --output tsv)
Reference:
https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli
NEW QUESTION 198

- (Topic 8)
You develop Azure solutions.
You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.
You need to obtain an Azure Resource Manager access token.
Solution: Use an X.509 certificate to authenticate the VM with Azure Resource Manager. Does the solution meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Instead run the Invoke-RestMethod cmdlet to make a request to the local managed identity
for Azure resources endpoint.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm
NEW QUESTION 200

You are Implementing an Azure solution that uses Azure Cosmos DB and the latest Azure Cosmos DB SDK. You add a change feed processor to a new container
instance.
You attempt to lead a batch of 100 documents. The process falls when reading one of the documents. The solution must monitor the progress of the change feed
processor instance on the new container as the change feed is read. You must prevent the change feed processor from retrying the entire batch when one
document cannot be read.
You need to implement the change feed processor to read the documents.
Which features should you use? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, More than once, or not at
all. You may need to drag The split bat between panes or scroll to view content
Each correct selection is worth one point
A. Mastered
B. Not Mastered
Answer: A
Explanation:
NEW QUESTION 205

HOTSPOT - (Topic 8)
You are developing an application that use an Azure blob named data to store application data. The application creates blob snapshots to allow application state to
be reverted to an earlier state. The Azure storage account has soft deleted enabled.
The system performs the following operations in order:
•The blob is updated
•Snapshot 1 is created.
•Snapshot 2 is created.
•Snapshot 1 is deleted.
A system error then deletes the data blob and all snapshots.
You need to determine which application states can be restored.
What is the restorability of the application data? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: Can be restored
When enabled, soft delete enables you to save and recover your data when blobs or blob snapshots are deleted. This protection extends to blob data that is
erased as the result of an overwrite.
Box 2: Cannot be restored It has been deleted.
Box 3: Can be restored It has not been deleted.
References:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-soft-delete
NEW QUESTION 207

HOTSPOT - (Topic 8)
You are building an application that stores sensitive customer data in Azure Blob storage.
The data must be encrypted with a key that is unique for each customer.
If the encryption key has been corrupted it must not be used for encryption. You need to ensure that the blob is encrypted.
A. Mastered
B. Not Mastered
Answer: A

Explanation:
NEW QUESTION 211

- (Topic 8)
Solution: Use the Durable Function async pattern to process the blob data. Does the solution meet the goal?
A. Yes
B. No
Answer: B
Explanation:
response.
HTTP trigger payload into a queue to be processed by a queue trigger function. This approach lets you defer the actual work and return an immediate response.
Reference:
NEW QUESTION 216

HOTSPOT - (Topic 8)
You have a web service that is used to pay for food deliveries. The web service uses Azure Cosmos DB as the data store.
You plan to add a new feature that allows users to set a tip amount. The new feature requires that a property named tip on the document in Cosmos DB must be
present and contain a numeric value.
There are many existing websites and mobile apps that use the web service that will not be updated to set the tip property for some time.
How should you complete the trigger?

A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: getContext().getRequest();
Box 2: if(isNaN(i)["tip"] ..
In JavaScript, there are two ways to check if a variable is a number :
isNaN() – Stands for “is Not a Number”, if variable is not a number, it return true, else return false.
typeof – If variable is a number, it will returns a string named “number”.
Box 3:r.setBody(i);
// update the item that will be created
References:
https://docs.microsoft.com/bs-latn-ba/azure/cosmos-db/how-to-write-stored-procedures- triggers-udfs
https://mkyong.com/javascript/check-if-variable-is-a-number-in-javascript/
NEW QUESTION 220

- (Topic 8)
You have an existing Azure storage account that stores large volumes of data across multiple containers.
You need to copy all data from the existing storage account to a new storage account. The copy process must meet the following requirements:
? Automate data movement.
? Minimize user input required to perform the operation.
? Ensure that the data movement process is recoverable.
What should you use?
A. AzCopy
B. Azure Storage Explorer
C. Azure portal
D. .NET Storage Client Library
Answer: A
Explanation:
You can copy blobs, directories, and containers between storage accounts by using the AzCopy v10 command-line utility.
The copy operation is synchronous so when the command returns, that indicates that all files have been copied.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-blobs-copy
NEW QUESTION 224

- (Topic 8)
You develop and deploy an ASP.NET Core application that connects o an Azure Database for MySQL instance.
Connections to the database appear to drop intermittently and the application code does not handle the connection failure.
You need to handle the transient connection errors in code by implementing retries. What are three possible ways to achieve this goal? Each correct answer
presents part of

the solution.
A. Increase connection repeat attempts exponentially up to 120 seconds.

B. Close the database connection and immediately report an error.
C. Wait five seconds before repeating the connection attempt to the database.
D. Disable connection pooling and configure a second Azure Database for MySQL instance.
E. Set a maximum number of connection attempts to 10 and report an error on subsequent connections.
Answer: BCE
NEW QUESTION 226

HOTSPOT - (Topic 8)
A company is developing a Node.js web app. The web app code is hosted in a GitHub repository located at https://github.com/TailSpinToys/weapp.
The web app must be reviewed before it is moved to production. You must deploy the initial
code release to a deployment slot named review. You need to create the web app and deploy the code.
How should you complete the commands? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
The New-AzResourceGroup cmdlet creates an Azure resource group.
The New-AzAppServicePlan cmdlet creates an Azure App Service plan in a given location The New-AzWebApp cmdlet creates an Azure Web App in a given a
resource group
The New-AzWebAppSlot cmdlet creates an Azure Web App slot.
References:
https://docs.microsoft.com/en-us/powershell/module/az.resources/new- azresourcegroup?view=azps-2.3.2
https://docs.microsoft.com/en-us/powershell/module/az.websites/new- azappserviceplan?view=azps-2.3.2
https://docs.microsoft.com/en-us/powershell/module/az.websites/new- azwebapp?view=azps-2.3.2
https://docs.microsoft.com/en-us/powershell/module/az.websites/new- azwebappslot?view=azps-2.3.2
NEW QUESTION 227

- (Topic 8)
You develop an app that allows users to upload photos and videos to Azure storage. The app uses a storage REST API call to upload the media to a blob storage
account named Account1. You have blob storage containers named Container1 and Container2. Uploading of videos occurs on an irregular basis.
You need to copy specific blobs from Container1 to Container2 in real time when specific requirements are
met, excluding backup blob copies. What should you do?
A. Download the blob to a virtual machine and then upload the blob to Container2.
B. Run the Azure PowerShell command Start-AzureStorageBlobCopy.
C. Copy blobs to Container2 by using the Put Blob operation of the Blob Service REST API.
D. Use AzCopy with the Snapshot switch blobs to Container2.
Answer: B
Explanation:
The Start-AzureStorageBlobCopy cmdlet starts to copy a blob. Example 1: Copy a named blob
C:\PS>Start-AzureStorageBlobCopy -SrcBlob "ContosoPlanning2015" -DestContainer "ContosoArchives" -SrcContainer "ContosoUploads"
This command starts the copy operation of the blob named ContosoPlanning2015 from the container named ContosoUploads to the container named
ContosoArchives.
References:
https://docs.microsoft.com/en-us/powershell/module/azure.storage/start-azurestorageblobcopy?view=azurermps-6.13.0
NEW QUESTION 229

- (Topic 8)

Margie's Travel is an international travel and bookings management service. The company
is expanding into restaurant bookings. You are tasked with implementing Azure Search tor the restaurants listed in their solution.
You create the index in Azure Search.
You need to import the restaurant data into the Azure Search service by using the Azure Search NET SDK.
Solution:
* 1. Create a SearchServiceClient object to connect to the search index.
* 2. Create a DataContainer that contains the documents which must be added.
* 3. Create a DataSource instance and set its Container property to the DataContainer.
* 4. Set the DataSource property of the SearchServiceCIient
A. Yes
B. No
Answer: B
Explanation:
Use the following method:
* 1.Create a SearchIndexClient object to connect to the search index
* 2.Create an IndexBatch that contains the documents which must be added.
* 3.Call the Documents.Index method of the SearchIndexClient and pass the IndexBatch.
References:
https://docs.microsoft.com/en-us/azure/search/search-howto-dotnet-sdk
NEW QUESTION 230

- (Topic 8)
Solution: Configure the app to use an App Service hosting plan and enable the Always On setting.
A. Yes
B. No
Answer: B
Explanation:
response.
HTTP trigger payload into a queue to be processed by a queue trigger function. This approach lets you defer the actual work and return an immediate response.
Reference:
NEW QUESTION 234

HOTSPOT - (Topic 8)
You are developing a solution that uses several Azure Service Bus queues. You create an Azure Event Grid subscription for the Azure Service Bus namespace.
You use Azure Functions as subscribers to process the messages.
You need to emit events to Azure Event Grid from the queues. You must use principal of least privilege and minimize costs.
Which Azure Service Bus values should you use? TO answer, select the appropriate options in the answer area
Each correct selection is worth ore point
A. Mastered
B. Not Mastered

Answer: A
Explanation:
NEW QUESTION 239

HOTSPOT - (Topic 8)
You develop a web app that interacts with Azure Active Directory (Azure AD) groups by using Microsoft Graph.
You build a web page that shows all Azure AD groups that are not of the type 'Unified'. You need to build the Microsoft Graph query for the page.
How should you complete the query? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
NEW QUESTION 240

- (Topic 8)
You are developing applications for a company. You plan to host the applications on Azure App Services.
The company has the following requirements:
? Every five minutes verify that the websites are responsive.
? Verify that the websites respond within a specified time threshold. Dependent requests such as images and JavaScript files must load properly.
? Generate alerts if a website is experiencing issues.
? If a website fails to load, the system must attempt to reload the site three more times.
You need to implement this process with the least amount of effort. What should you do?
D18912E1457D5D1DDCBD40AB3BF70D5D
A. Create a Selenium web test and configure it to run from your workstation as a scheduled task.
B. Set up a URL ping test to query the home page.
C. Create an Azure function to query the home page.
D. Create a multi-step web test to query the home page.
E. Create a Custom Track Availability Test to query the home page.
Answer: D

Explanation:
You can monitor a recorded sequence of URLs and interactions with a website via multistep web tests.
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/app/availability-multistep
NEW QUESTION 242

You are developing an application to use Azure Blob storage. You have configured Azure Blob storage to include change feeds.
A copy of your storage account must be created in another region. Data must be copied from the current storage account to the new storage account directly
between the storage servers.
You need to create a copy of the storage account in another region and copy the data.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-move?tabs=azure-portal#modify-the-template
NEW QUESTION 245

- (Topic 8)
You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days.
Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)
A. EnabledForDeployment
B. EnablePurgeProtection
C. EnabledForTemplateDeployment
D. EnableSoftDelete
Answer: BD
NEW QUESTION 246

- (Topic 8)
You develop Azure solutions. A .NET application needs to receive a message each time an Azure virtual machine finishes processing data. The messages must
NOT persist after being processed by the receiving application.
You need to implement the .NET object that will receive the messages. Which object should you use?
A. QueueClient
B. SubscriptionClient
C. TopicClient
D. CloudQueueClient
Answer: A
Explanation:
A queue allows processing of a message by a single consumer. Need a CloudQueueClient to access the Azure VM.
Reference:
https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-queues-topics- subscriptions
NEW QUESTION 247

HOTSPOT - (Topic 8)
You plan to deploy a web app to App Service on Linux. You create an App Service plan. You create and push a custom Docker image that image that contains the
web app to Azure Container Registry.
You need to access the console logs generated from inside the container in real-time. How should you complete the Azure CLI command? To answer, select the
appropriate options in the answer area.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: config
To Configure logging for a web app use the command: az webapp log config
Box 2: --docker-container-logging Syntax include:
az webapp log config [--docker-container-logging {filesystem, off}]
Box 3: webapp
To download a web app's log history as a zip file use the command: az webapp log download
Box 4: download References:
https://docs.microsoft.com/en-us/cli/azure/webapp/log
NEW QUESTION 250

HOTSPOT - (Topic 8)
You develop a news and blog content delivery app for Windows devices.
A notification must arrive on a user's device when there is a new article available for them to view.
You need to implement push notifications.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: NotificationHubClient
Box 2: NotificationHubClient
Box 3: CreateClientFromConnectionString
// Initialize the Notification Hub NotificationHubClient hub =
NotificationHubClient.CreateClientFromConnectionString(listenConnString, hubName);
Box 4: SendWindowsNativeNotificationAsync Send the push notification.
var result = await hub.SendWindowsNativeNotificationAsync(windowsToastPayload);
References:
https://docs.microsoft.com/en-us/azure/notification-hubs/notification-hubs-push-notification- registration-management
https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/app-service-mobile/app-service-mobile-windows-store-dotnet-get-started-push.md
NEW QUESTION 255

- (Topic 8)
You are developing a mobile app that uses an API which stores geospabal data in Azure Cosmos D& The app will be used to find restaurants in a particular area
and related information including food types, menu information and the optimal route to a selected restaurant from the user's current location.
Which Azure Cosmos DB API should you use for the API?
A. MongoDB
B. Gremlin
C. Cassandra
D. Core
Answer: A
NEW QUESTION 256

You are creating a script that will run a large workload on an Azure Batch pool. Resources will be reused and do not need to be cleaned up after use.
You have the following parameters:

You need to write an Azure CLI script that will create the jobs, tasks, and the pool.
In which order should you arrange the commands to develop the solution? To answer, move the appropriate commands from the list of command segments to the
answer area and arrange them in the correct order.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Step 1: az batch pool create
# Create a new Linux pool with a virtual machine configuration. az batch pool create \
--id mypool \
--vm-size Standard_A1 \
--target-dedicated 2 \
--image canonical:ubuntuserver:16.04-LTS \
--node-agent-sku-id "batch.node.ubuntu 16.04"
Step 2: az batch job create
# Create a new job to encapsulate the tasks that are added. az batch job create \
--id myjob \
--pool-id mypool
Step 3: az batch task create
# Add tasks to the job. Here the task is a basic shell command. az batch task create \
--job-id myjob \
--task-id task1 \
--command-line "/bin/bash -c 'printenv AZ_BATCH_TASK_WORKING_DIR'" Step 4: for i in {1..$numberOfJobs} do
References:
https://docs.microsoft.com/bs-latn-ba/azure/batch/scripts/batch-cli-sample-run-job
NEW QUESTION 261

You are developing several microservices named serviceA. serviceB, and serviceC. You deploy the microservices to a new Azure Container Apps environment.
You have the following requirements.
• The microservices must persist data to storage.
• serviceA must persist data only visible to the current container and the storage must be restricted to the amount of disk space available in the container
• servtceB must persist data for the lifetime of the replica and allow multiple containers in the replica to mount the same storage location.
• serviceC must persist data beyond the lifetime of the replica while allowing multiple containers to access the storage and enable per object permissions.
You need to configure storage for each microservice.

A. Mastered
B. Not Mastered
Answer: A
Explanation:
NEW QUESTION 265

- (Topic 8)
You develop a solution that uses an Azure SQL Database to store user information for a mobile app.
The app stores sensitive information about users.
You need to hide sensitive information from developers that query the data for the mobile app.
Which three items must you identify when configuring dynamic data masking? Each correct answer presents a
part of the solution.
A. Column
B. Table
C. Trigger
D. Index
E. Schema
Answer: ABE
Explanation:
In the Dynamic Data Masking configuration page, you may see some database columns that the recommendations engine has flagged for masking. In order to
accept the recommendations, just click Add Mask for one or more columns and a mask is created based on the default type for this column. You can change the
masking function by clicking on the masking rule and editing the masking field format to a different format of your choice.

References:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-dynamic-data-masking-get-started-portal
NEW QUESTION 268

You are developing an ASP.NET Core website that can be used to manage photographs which are stored in Azure Blob Storage containers.
Users of the website authenticate by using their Azure Active Directory (Azure AD) credentials.
You implement role-based access control (RBAC) role permission on the containers that store photographs. You assign users to RBAC role.
You need to configure the website’s Azure AD Application so that user’s permissions can be used with the Azure Blob containers.
How should you configure the application? To answer, drag the appropriate setting to the correct location. Each setting may be used once, more than once, or not
at all. You may need to drag the split bar between panes or scroll to view content.
A. Mastered
B. Not Mastered

Answer: A
Explanation:
Box 1: user_impersonation
Box 2: delegated Example:
* 2. Click the Add a permission button and then: Ensure that the My APIs tab is selected
* 3. In the list of APIs, select the API TodoListService-aspnetcore.
* 4. In the Delegated permissions section, ensure that the right permissions are checked: user_impersonation.
* 5. Select the Add permissions button.
Box 3: delegated Example
* 2. Click the Add a permission button and then, Ensure that the Microsoft APIs tab is selected
* 3. In the Commonly used Microsoft APIs section, click on Microsoft Graph
* 4. In the Delegated permissions section, ensure that the right permissions are checked: User.Read. Use the search box if necessary.
* 5. Select the Add permissions button
References:
https://docs.microsoft.com/en-us/samples/azure-samples/active-directory-dotnet-webapp- webapi-openidconnect-aspnetcore/calling-a-web-api-in-an-aspnet-core-
web-application- using-azure-ad/
NEW QUESTION 270

HOTSPOT - (Topic 8)
You develop an image upload service that is exposed using Azure API Management. Images are analyzed after upload for automatic tagging.
Images over 500 KB arc processed by a different backend that offers a lower tier of service that costs less money. The lower tier of serviceisdenoted by a header
named x-lsrSe- requ«st. Images over 500 KB must never be processed by backends for smaller images and must always be charged the lower price.
You need to implement API Management policies to ensure that images are processed correctly.
How should you complete the API Management inbound policy? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
NEW QUESTION 273

- (Topic 8)
You are developing an Azure App Service web app.
The web app must securely store session information in Azure Redis Cache. You need to connect the web app to Azure Redis Cache.
Which three Azure Redis Cache properties should you use? Each correct answer presents part of the solution.
Each correct selection is worth one point.
A. SSL port
B. Subscription name
C. Location
D. Host name
E. Access key
F. Subscription id
Answer: ACD
Explanation:
https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-web-app-howto

NEW QUESTION 278

You are preparing to deploy an application to an Azure Kubernetes Service (AKS) cluster. The application must only be available from within the VNet that includes
the cluster.
You need to deploy the application.
How should you complete the deployment YAML? To answer, drag the appropriate YAML segments to the correct locations. Each YAML segment may be used
once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
To create an internal load balancer, create a service manifest named internal-lb.yaml with the service type LoadBalancer and the azure-load-balancer-internal
annotation as shown in the following example:
YAML:
apiVersion: v1 kind: Service metadata:
name: internal-app annotations:
service.beta.kubernetes.io/azure-load-balancer-internal: "true" spec:
type: LoadBalancer ports:
- port: 80 selector:
app: internal-app
References:
https://docs.microsoft.com/en-us/azure/aks/internal-lb
NEW QUESTION 282

- (Topic 8)
You develop and deploy an Azure App Service API app to a Windows-hosted deployment slot named Development. You create additional deployment slots
namedTestingand Production. You enable auto swap on the Production deployment slot.
You need to ensure that scripts run and resources are available before a swap operation occurs.
Solution: Update the web.config file to include the applicationInitialization configuration element. Specify custom initialization actions to run the scripts.
A. Yes
B. No
Answer: A
Explanation:
Specify custom warm-up.
Some apps might require custom warm-up actions before the swap. The applicationInitialization configuration element in web.config lets you specify custom
initialization actions. The swap operation waits for this custom warm-up to finish before swapping with the target slot. Here's a sample web.config fragment.
<system.webServer>
<applicationInitialization>
<add initializationPage="/" hostName="[app hostname]" />
<add initializationPage="/Home/About" hostName="[app hostname]" />
</applicationInitialization>
</system.webServer>
Reference:
https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots#troubleshoot- swaps
NEW QUESTION 284

- (Topic 8)
You are developing an Azure function that connects to an Azure SQL Database instance. The function is triggered by an Azure Storage queue.
You receive reports of numerous System.InvalidOperationExceptions with the following message: “Timeout expired. The timeout period elapsed prior to obtaining
a connection from the pool. This may have occurred because all pooled connections were in use and max pool size was reached.”
You need to prevent the exception. What should you do?

A. In the host.json file, decrease the value of thebatchSizeoption

B. Convert the trigger to Azure Event Hub
C. Convert the Azure Function to the Premium plan
D. In the function.json file, change the value of thetypeoption toqueueScaling
Answer: A
Explanation:
With the Premium plan the max outbound connections per instance is unbounded compared to the 600 active (1200 total) in a Consumption plan.
Note: The number of available connections is limited partly because a function app runs in
a sandbox environment. One of the restrictions that the sandbox imposes on your code is a limit on the number of outbound connections, which is currently 600
active (1,200 total) connections per instance. When you reach this limit, the functions runtime writes the following message to the logs: Host thresholds exceeded:
Connections.
Reference:
https://docs.microsoft.com/en-us/azure/azure-functions/manage-connections https://docs.microsoft.com/en-us/azure/azure-functions/functions-scale#service-limits
NEW QUESTION 289

HOTSPOT - (Topic 8)
You are developing a back-end Azure App Service that scales based on the number of
messages contained in a Service Bus queue.
A rule already exists to scale up the App Service when the average queue length of unprocessed and valid queue messages is greater than 1000.
You need to add a new rule that will continuously scale down the App Service as long as the scale up condition is not met.
How should you configure the Scale rule? To answer, select the appropriate options in the answer area.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: Service bus queue
You are developing a back-end Azure App Service that scales based on the number of messages contained in a Service Bus queue.
Box 2: ActiveMessage Count
ActiveMessageCount: Messages in the queue or subscription that are in the active state and ready for delivery.
Box 3: Count
Box 4: Less than or equal to
You need to add a new rule that will continuously scale down the App Service as long as the scale up condition is not met.
Box 5: Decrease count by
NEW QUESTION 292

- (Topic 8)
You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage
Blob storage. The storage account type is General-purpose V2.

When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version
of the image must start in less than one minute.
You need to design the process that starts the photo processing.
Solution: Create an Azure Function app that uses the Consumption hosting model and that is triggered from the blob upload.
A. Yes
B. No
Answer: A
Explanation:
In the Consumption hosting plan, resources are added dynamically as required by your functions.
Reference:
https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-storage-blob- triggered-function
NEW QUESTION 293

HOTSPOT - (Topic 8)
You are developing an Azure-hosted e-commerce web application. The application will use Azure Cosmos DB to store sales orders. You are using the latest SDK
to manage the sales orders in the database.
You create a new Azure Cosmos DB instance. You include a valid endpoint and valid authorization key to an appSettings.json file in the code project.
You are evaluating the following application code: (Line number are included for reference only.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: Yes
The createDatabaseIfNotExistsAsync method checks if a database exists, and if it doesn't, create it.
The Database.CreateContainerAsync method creates a container as an asynchronous operation in the Azure Cosmos service.
Box 2: Yes
The CosmosContainer.CreateItemAsync method creates an item as an asynchronous operation in the Azure Cosmos service.
Box 3: Yes
NEW QUESTION 294

......

Thank You for Trying Our Product
We offer two products:
1st - We have Practice Tests Software with Actual Exam Questions
2nd - Questons and Answers in PDF Format
AZ-204 Practice Exam Features:
* AZ-204 Questions and Answers Updated Frequently
* AZ-204 Practice Questions Verified by Expert Senior Certified Staff
* AZ-204 Most Realistic Questions that Guarantee you a Pass on Your FirstTry
* AZ-204 Practice Test Questions in Multiple Choice Formats and Updatesfor 1 Year
100% Actual & Verified — Instant Download, Please Click

Order The AZ-204 Practice Test Here

Powered by TCPDF (www.tcpdf.org)

Az-204 2

Uploaded by

Copyright:

Available Formats

Az-204 2

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Az-204 2

Uploaded by

Copyright:

Available Formats

Certshared now are offering 100% pass ensure AZ-204 dumps!

https://www.certshared.com/exam/AZ-204/ (365 Q&As)

Guaranteed success with Our exam guides visit - https://www.certshared.com

A. Create and publish a product.

A. Export the Azure Storage account Azure Resource Manager template

Guaranteed success with Our exam guides visit - https://www.certshared.com

HTTP trigger payload into a queue to be

A. Create a URL ping test.

Guaranteed success with Our exam guides visit - https://www.certshared.com

Guaranteed success with Our exam guides visit - https://www.certshared.com

Guaranteed success with Our exam guides visit - https://www.certshared.com

A. Azure HPC cache

Guaranteed success with Our exam guides visit - https://www.certshared.com

Guaranteed success with Our exam guides visit - https://www.certshared.com

? Process changes to all partitions immediately.

A. the number of Azure Storage accounts

Guaranteed success with Our exam guides visit - https://www.certshared.com

Guaranteed success with Our exam guides visit - https://www.certshared.com

Guaranteed success with Our exam guides visit - https://www.certshared.com

Guaranteed success with Our exam guides visit - https://www.certshared.com

A. TableQuery.GenerateFilterCondition("PartitionKey", Equals, "Smith")

Guaranteed success with Our exam guides visit - https://www.certshared.com

Guaranteed success with Our exam guides visit - https://www.certshared.com

Guaranteed success with Our exam guides visit - https://www.certshared.com

Guaranteed success with Our exam guides visit - https://www.certshared.com

Guaranteed success with Our exam guides visit - https://www.certshared.com

You define a role named SysAdmin.

Guaranteed success with Our exam guides visit - https://www.certshared.com

A. In Python, implement the class: TaskAddParameter

Guaranteed success with Our exam guides visit - https://www.certshared.com

NEW QUESTION 100

NEW QUESTION 101

A. Verify that Always On is enabled.

NEW QUESTION 106

Guaranteed success with Our exam guides visit - https://www.certshared.com

NEW QUESTION 111

NEW QUESTION 113

NEW QUESTION 115

Guaranteed success with Our exam guides visit - https://www.certshared.com

NEW QUESTION 120

NEW QUESTION 125

Guaranteed success with Our exam guides visit - https://www.certshared.com

NEW QUESTION 129

NEW QUESTION 130

Guaranteed success with Our exam guides visit - https://www.certshared.com

NOTE:Each correct selection is worth one point.

NEW QUESTION 132

Guaranteed success with Our exam guides visit - https://www.certshared.com

NEW QUESTION 135

Step 2: Add a VMInsights solution.

Guaranteed success with Our exam guides visit - https://www.certshared.com

NEW QUESTION 138

A. Configure Azure Redis with persistence

NEW QUESTION 139

NEW QUESTION 141

NEW QUESTION 142

Guaranteed success with Our exam guides visit - https://www.certshared.com

NEW QUESTION 146

NEW QUESTION 148