Microsoft AZ-204 Exam Dumps

Microsoft AZ-204 Sample Question Answers

Microsoft AZ-204 Sample Questions

Question # 1

You need to audit the retail store sales transactions.What are two possible ways to achieve the goal? Each correct answer presents a completesolution.NOTE: Each correct selection is worth one point.

A. Update the retail store location data upload process to include blob index tags. Createan Azure Function to process the blob index tags and filter by store location
B. Enable blob versioning for the storage account. Use an Azure Function to process a listof the blob versions per day.
C. Process an Azure Storage blob inventory report by using an Azure Function. Create rulefilters on the blob inventory report,
D. Subscribe to blob storage events by using an Azure Function and Azure Event Grid.Filter the events by store location.
E. Process the change feed logs of the Azure Blob storage account by using an AzureFunction. Specify a time range for the change feed data.

Answer: D,E

Show Answer

Question # 2

You need to implement a solution to resolve the retail store location data issue.Which three Azure Blob features should you enable? Each correct answer presents pan olthe solution.NOTE Each correct selection is worth one point

A. Immutability
B. Snapshots
C. Versioning
D. Soft delete
E. Object replication
F. Change feed

Answer: C,D,F

Show Answer

Question # 3

You need to secure the Azure Functions to meet the security requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Store the RSA-HSM key in Azure Cosmos DB. Apery the built-in policies for customermanaged keys and allowed locations.
B. Create a free tier Azure App Configuration instance with a new Azure AD serviceprincipal.
C. Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protectionfeatures enabled.
D. Store the RSA-HSM key in Azure Blob storage with an Immutability policy applied to thecontainer.
E. Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

Answer: C,E

Show Answer

Question # 4

You need to access data from the user claim object in the e-commerce web app.What should you do first?

A. Write custom code to make a Microsoft Graph API call from the e-commerce web app.
B. Assign the Contributor RBAC role to the e-commerce web app by using the ResourceManager create role assignment API.
C. Update the e-commerce web app to read the HTTP request header values.
D. Using the Azure CLI, enable Cross-origin resource sharing (CORS) from the ecommerce checkout API to the e-commerce web app.

Answer: C

Show Answer

Question # 5

You need to ensure the security policies are met.What code do you add at line CS07 of ConfigureSSE.ps1?

A. –PermissionsToKeys create, encrypt, decrypt
B. –PermissionsToCertificates create, encrypt, decrypt
C. –PermissionsToCertificates wrapkey, unwrapkey, get
D. –PermissionsToKeys wrapkey, unwrapkey, get

Answer: B

Show Answer

Question # 6

You need to resolve the log capacity issue. What should you do?

A. Create an Application Insights Telemetry Filter
B. Change the minimum log level in the host.json file for the function
C. Implement Application Insights Sampling
D. Set a LogCategoryFilter during startup

Answer: C

Show Answer

Question # 7

You need to ensure receipt processing occurs correctly.What should you do?

A. Use blob properties to prevent concurrency problems
B. Use blob SnapshotTime to prevent concurrency problems
C. Use blob metadata to prevent concurrency problems
D. Use blob leases to prevent concurrency problems

Answer: D

Show Answer

Question # 8

You need to resolve a notification latency issue. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. Set Always On to true.
B. Ensure that the Azure Function is using an App Service plan.
C. Set Always On to false.
D. Ensure that the Azure Function is set to use a consumption plan.

Answer: A,B

Show Answer

Question # 9

You need to ensure that the solution can meet the scaling requirements for Policy Service. Which Azure Application Insights data model should you use?

A. an Application Insights dependency
B. an Application Insights event
C. an Application Insights trace
D. an Application Insights metric

Answer: D

Show Answer

Question # 10

You need to ensure that all messages from Azure Event Grid are processed. What should you use?

A. Azure Event Grid topic
B. Azure Service Bus topic
C. Azure Service Bus queue
D. Azure Storage queue
E. Azure Logic App custom connector

Answer: C

Show Answer

Question # 11

You need to authenticate the user to the corporate website as indicated by the architectural diagram.Which two values should you use? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point. 

A. ID token signature
B. ID token claims 
C. HTTP response code
D. Azure AD endpoint URI 
E. Azure AD tenant ID

Answer: A,D

Show Answer

Question # 12

You need to investigate the Azure Function app error message in the development environment.What should you do?

A. Connect Live Metrics Stream from Application Insights to the Azure Function app and filter the metrics. 
B. Create a new Azure Log Analytics workspace and instrument the Azure Function app with Application Insights
C. Update the Azure Function app with extension methods from Microsoft.Extensions.Logging to log events by using the log instance. 
D. Add a new diagnostic setting to the Azure Function app to send logs to Log Analytics. 

Answer: A

Show Answer

Question # 13

You need to correct the RequestUserApproval Function app error.What should you do?

A. Update line RA13 to use the async keyword and return an HttpRequest object value. 
B. Configure the Function app to use an App Service hosting plan. Enable the Always On setting of the hosting plan. 
C. Update the function to be stateful by using Durable Functions to process the request payload.
D. Update the functionTimeout property of the host.json project file to 15 minutes. 

Answer: C

Show Answer

Question # 14

You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers. The Azure AD group must not be able to access the keys that are required to access the data. You need to restrict access to the Azure AD group. Which role-based access control should you use?

A. DocumentDB Accounts Contributor
B. Cosmos Backup Operator 
C. Cosmos DB Operator
D. Cosmos DB Account Reader 

Answer: C

Show Answer

Question # 15

You develop a solution that uses Azure Virtual Machines (VMs). The VMs contain code that must access resources in an Azure resource group. You grant the VM access to the resource group in Resource Manager. You need to obtain an access token that uses the VMs system-assigned managed identity. Which two actions should you perform? Each correct answer presents part of the solution. 

A. Use PowerShell on a remote machine to make a request to the local managed identity for Azure resources endpoint. 
B. Use PowerShell on the VM to make a request to the local managed identity for Azureresources endpoint. 
C. From the code on the VM. call Azure Resource Manager using an access token. 
D. From the code on the VM. call Azure Resource Manager using a SAS token. 
E. From the code on the VM. generate a user delegation SAS token.

Answer: B,C

Show Answer