Microsoft Developing Solutions for Microsoft Azure - AZ-204 FREE EXAM DUMPS QUESTIONS & ANSWERS
A company is migrating an existing on-premises third-party website to Azure. The website is stateless.
The company does not have access to the source code for the website. They do have the original installer.
The number of visitors at the website varies throughout the year. The on-premises infrastructure was resized to accommodate peaks but the extra capacity was not used.
You need to implement a virtual machine scale set instance.
What should you do?
The company does not have access to the source code for the website. They do have the original installer.
The number of visitors at the website varies throughout the year. The on-premises infrastructure was resized to accommodate peaks but the extra capacity was not used.
You need to implement a virtual machine scale set instance.
What should you do?
Correct Answer: C
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Hotspot Question
You are developing a solution to store documents in Azure Blob storage. Customers upload documents to multiple containers. Documents consist of PDF, CSV, Microsoft Office format and plain text files.
The solution must process millions of documents across hundreds of containers. The solution must meet the following requirements:
- Documents must be categorized by a customer identifier as they are uploaded to the storage account.
- Allow filtering by the customer identifier.
- Allow searching of information contained within a document
- Minimize costs.
You create and configure a standard general-purpose v2 storage account to support the solution.
You need to implement the solution.
What should you implement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You are developing a solution to store documents in Azure Blob storage. Customers upload documents to multiple containers. Documents consist of PDF, CSV, Microsoft Office format and plain text files.
The solution must process millions of documents across hundreds of containers. The solution must meet the following requirements:
- Documents must be categorized by a customer identifier as they are uploaded to the storage account.
- Allow filtering by the customer identifier.
- Allow searching of information contained within a document
- Minimize costs.
You create and configure a standard general-purpose v2 storage account to support the solution.
You need to implement the solution.
What should you implement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
Box 1: Azure Blob index tags
As datasets get larger, finding a specific object in a sea of data can be difficult. Blob index tags provide data management and discovery capabilities by using key- value index tag attributes. You can categorize and find objects within a single container or across all containers in your storage account. As data requirements change, objects can be dynamically categorized by updating their index tags. Objects can remain in-place with their current container organization.
Box 2: Azure Cognitive Search
Only index tags are automatically indexed and made searchable by the native Blob Storage service. Metadata can't be natively indexed or searched. You must use a separate service such as Azure Search.
Azure Cognitive Search is the only cloud search service with built-in AI capabilities that enrich all types of information to help you identify and explore relevant content at scale. Use cognitive skills for vision, language, and speech, or use custom machine learning models to uncover insights from all types of content.
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-manage-find-blobs
https://azure.microsoft.com/en-us/services/search/
Drag and Drop Question
You are a developer for a software as a service (SaaS) company that uses an Azure Function to process orders. The Azure Function currently runs on an Azure Function app that is triggered by an Azure Storage queue.
You are preparing to migrate the Azure Function to Kubernetes using Kubernetes-based Event Driven Autoscaling (KEDA).
You need to configure Kubernetes Custom Resource Definitions (CRD) for the Azure Function.
Which CRDs should you configure? To answer, drag the appropriate CRD types to the correct locations. Each CRD type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
You are a developer for a software as a service (SaaS) company that uses an Azure Function to process orders. The Azure Function currently runs on an Azure Function app that is triggered by an Azure Storage queue.
You are preparing to migrate the Azure Function to Kubernetes using Kubernetes-based Event Driven Autoscaling (KEDA).
You need to configure Kubernetes Custom Resource Definitions (CRD) for the Azure Function.
Which CRDs should you configure? To answer, drag the appropriate CRD types to the correct locations. Each CRD type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
Box 1: Deployment
To deploy Azure Functions to Kubernetes use the func kubernetes deploy command has several attributes that directly control how our app scales, once it is deployed to Kubernetes.
Box 2: ScaledObject
With --polling-interval, we can control the interval used by KEDA to check Azure Service Bus Queue for messages.
Example of ScaledObject with polling interval
apiVersion: keda.k8s.io/v1alpha1
kind: ScaledObject
metadata:
name: transformer-fn
namespace: tt
labels:
deploymentName: transformer-fn
spec:
scaleTargetRef:
deploymentName: transformer-fn
pollingInterval: 5
minReplicaCount: 0
maxReplicaCount: 100
Box 3: Secret
Store connection strings in Kubernetes Secrets.
Example: to create the Secret in our demo Namespace:
# create the k8s demo namespace
kubectl create namespace tt
# grab connection string from Azure Service Bus
KEDA_SCALER_CONNECTION_STRING=$(az servicebus queue authorization-rule keys list \ -g
$RG_NAME \
--namespace-name $SBN_NAME \
--queue-name inbound \
-n keda-scaler \
--query "primaryConnectionString" \
-o tsv)
# create the kubernetes secret
kubectl create secret generic tt-keda-auth \
--from-literal KedaScaler=$KEDA_SCALER_CONNECTION_STRING \
--namespace tt
Reference:
https://www.thinktecture.com/en/kubernetes/serverless-workloads-with-keda/
Hotspot Question
You are developing an Azure Function App named App1. You also plan to use cross-origin requests (CORS).
You have the following requirements:
- App1 functions must securely access an Azure Blob Storage account.
- Access to the Azure Blob Storage account must not require the
provisioning or rotation of secrets.
- JavaScript code running in a browser on an external host must not be
allowed to interact with the function.
You need to implement App1.
Which configuration should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You are developing an Azure Function App named App1. You also plan to use cross-origin requests (CORS).
You have the following requirements:
- App1 functions must securely access an Azure Blob Storage account.
- Access to the Azure Blob Storage account must not require the
provisioning or rotation of secrets.
- JavaScript code running in a browser on an external host must not be
allowed to interact with the function.
You need to implement App1.
Which configuration should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
System Managed Identity: System managed identities are tied to your Azure service and are automatically cleaned up when the resource is deleted. They are easier to use if your application only needs to authenticate to services that support Azure AD authentication.
Configure CORS allowed origins to none: To disallow JavaScript code running in a browser on an external host from interacting with the function, you should not include that host in your CORS policy. Configuring CORS allowed origins to none will prevent any domain from accessing your function app.
You develop an ASP. Net Core application by integrating the Application Insights SDK into your solution.
The application sends a very high rate of telemetry in a short time interval. You observe a reduced number of events, traces, and metrics being recorded and increased error rates for telemetry ingestion.
You need to reduce telemetry traffic, data costs, and storage costs while preserving a statistically correct analysis of application telemetry data. Your solution must ensure that you will be able to correlate HTTP request and response data.
What should you do?
The application sends a very high rate of telemetry in a short time interval. You observe a reduced number of events, traces, and metrics being recorded and increased error rates for telemetry ingestion.
You need to reduce telemetry traffic, data costs, and storage costs while preserving a statistically correct analysis of application telemetry data. Your solution must ensure that you will be able to correlate HTTP request and response data.
What should you do?
Correct Answer: B
Vote an answer
You develop and deploy an Azure App Service web app named App1. You create a new Azure Key Vault named Vault1. You import several API keys, passwords, certificates, and cryptographic keys into Vault1.
You need to grant App1 access to Vault1 and automatically rotate credentials. Credentials must not be stored in code.
What should you do?
You need to grant App1 access to Vault1 and automatically rotate credentials. Credentials must not be stored in code.
What should you do?
Correct Answer: A
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
A development team is developing an application that works with Azure Table storage.
Below are some of the rows in the table
You have the following code statement from a C# program
Would this return all the entities where the RowKey is [email protected]?
Below are some of the rows in the table
You have the following code statement from a C# program
Would this return all the entities where the RowKey is [email protected]?
Correct Answer: A
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
A company maintains multiple web and mobile applications. Each application uses custom in- house identity providers as well as social identity providers.
You need to implement single sign-on (SSO) for all the applications.
What should you do?
You need to implement single sign-on (SSO) for all the applications.
What should you do?
Correct Answer: A
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data.
You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future.
You need to implement a solution to receive the device data.
Solution: Provision an Azure Event Grid. Configure the machine identifier as the partition key and enable capture.
Does the solution meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data.
You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future.
You need to implement a solution to receive the device data.
Solution: Provision an Azure Event Grid. Configure the machine identifier as the partition key and enable capture.
Does the solution meet the goal?
Correct Answer: A
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Case Study 9 - Munson's Pickles and Preserves Farm
Background
Munson's Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.
Current Environment
The company is migrating all applications from an on-premises datacenter to Microsoft Azure.
Applications support distributors, farmers, and internal company staff.
Corporate website
The company hosts a public website located at
http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms
The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors
Distributors integrate their applications with data that is accessible by using APIs hosted at
http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.
Requirements
The application components must meet the following requirements:
Corporate website
- The site must be migrated to Azure App Service.
- Costs must be minimized when hosting in Azure.
- Applications must automatically scale independent of the compute resources.
- All code changes must be validated by internal staff before release to production.
- File transfer speeds must improve, and webpage-load performance must increase.
- All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
- A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms
- Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors
- The company must track a custom telemetry value with each API call and monitor performance of all APIs.
- API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff
- App and API updates must be validated before release to production.
- Staff must be able to select a link to direct them back to the production app when validating an app or API update.
- Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security
- All web communications must be secured by using TLS/HTTPS.
- Web content must be restricted by country/region to support corporate compliance standards.
- The principle of least privilege must be applied when providing any user rights or process access rights.
- Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Issues
Corporate website
- Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
- Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
- Internal staff report webpage load sizes are large and take a long time to load.
- Developers receive authentication errors to Service Bus when they debug locally.
Distributors
- Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
Drag and Drop Question
You need to correct the internal staff issue with webpages.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Background
Munson's Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.
Current Environment
The company is migrating all applications from an on-premises datacenter to Microsoft Azure.
Applications support distributors, farmers, and internal company staff.
Corporate website
The company hosts a public website located at
http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms
The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors
Distributors integrate their applications with data that is accessible by using APIs hosted at
http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.
Requirements
The application components must meet the following requirements:
Corporate website
- The site must be migrated to Azure App Service.
- Costs must be minimized when hosting in Azure.
- Applications must automatically scale independent of the compute resources.
- All code changes must be validated by internal staff before release to production.
- File transfer speeds must improve, and webpage-load performance must increase.
- All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
- A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms
- Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors
- The company must track a custom telemetry value with each API call and monitor performance of all APIs.
- API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff
- App and API updates must be validated before release to production.
- Staff must be able to select a link to direct them back to the production app when validating an app or API update.
- Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security
- All web communications must be secured by using TLS/HTTPS.
- Web content must be restricted by country/region to support corporate compliance standards.
- The principle of least privilege must be applied when providing any user rights or process access rights.
- Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Issues
Corporate website
- Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
- Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
- Internal staff report webpage load sizes are large and take a long time to load.
- Developers receive authentication errors to Service Bus when they debug locally.
Distributors
- Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
Drag and Drop Question
You need to correct the internal staff issue with webpages.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:
Explanation:
https://learn.microsoft.com/en-us/azure/cdn/cdn-improve-performance
Case Study 9 - Munson's Pickles and Preserves Farm
Background
Munson's Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.
Current Environment
The company is migrating all applications from an on-premises datacenter to Microsoft Azure.
Applications support distributors, farmers, and internal company staff.
Corporate website
The company hosts a public website located at
http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms
The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors
Distributors integrate their applications with data that is accessible by using APIs hosted at
http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.
Requirements
The application components must meet the following requirements:
Corporate website
- The site must be migrated to Azure App Service.
- Costs must be minimized when hosting in Azure.
- Applications must automatically scale independent of the compute resources.
- All code changes must be validated by internal staff before release to production.
- File transfer speeds must improve, and webpage-load performance must increase.
- All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
- A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms
- Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors
- The company must track a custom telemetry value with each API call and monitor performance of all APIs.
- API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff
- App and API updates must be validated before release to production.
- Staff must be able to select a link to direct them back to the production app when validating an app or API update.
- Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security
- All web communications must be secured by using TLS/HTTPS.
- Web content must be restricted by country/region to support corporate compliance standards.
- The principle of least privilege must be applied when providing any user rights or process access rights.
- Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Issues
Corporate website
- Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
- Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
- Internal staff report webpage load sizes are large and take a long time to load.
- Developers receive authentication errors to Service Bus when they debug locally.
Distributors
- Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
You need to implement an aggregate of telemetry values for distributor API calls.
Which Application Insights API method should you use?
Background
Munson's Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.
Current Environment
The company is migrating all applications from an on-premises datacenter to Microsoft Azure.
Applications support distributors, farmers, and internal company staff.
Corporate website
The company hosts a public website located at
http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms
The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors
Distributors integrate their applications with data that is accessible by using APIs hosted at
http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.
Requirements
The application components must meet the following requirements:
Corporate website
- The site must be migrated to Azure App Service.
- Costs must be minimized when hosting in Azure.
- Applications must automatically scale independent of the compute resources.
- All code changes must be validated by internal staff before release to production.
- File transfer speeds must improve, and webpage-load performance must increase.
- All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
- A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms
- Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors
- The company must track a custom telemetry value with each API call and monitor performance of all APIs.
- API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff
- App and API updates must be validated before release to production.
- Staff must be able to select a link to direct them back to the production app when validating an app or API update.
- Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security
- All web communications must be secured by using TLS/HTTPS.
- Web content must be restricted by country/region to support corporate compliance standards.
- The principle of least privilege must be applied when providing any user rights or process access rights.
- Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Issues
Corporate website
- Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
- Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
- Internal staff report webpage load sizes are large and take a long time to load.
- Developers receive authentication errors to Service Bus when they debug locally.
Distributors
- Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
You need to implement an aggregate of telemetry values for distributor API calls.
Which Application Insights API method should you use?
Correct Answer: A
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
You ate developing a web application that uses the Microsoft identity platform to authenticate users and resources. The web application calls several REST APIs. The APIs require an access token from the Microsoft identity platform.
You need to request a token.
Which three properties should you use? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
You need to request a token.
Which three properties should you use? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Correct Answer: A,B,D
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).