Online Access Free AZ-204 Exam Questions

A development team is developing an application. The application will be storing its data in Azure Table storage. Below are the fields that are going to be stored in the table
- Region
- Email address
- Phone number
The following snippet of code needs to be completed that would be used to insert a batch of records.

Which of the following will go into Slot1?

• A.TableBatchOperation
• B.TableOperation
• C.TableQuery
• D.TableEntity

Case Study 10 - Fourth Coffee
Background
Fourth Coffee is a global coffeehouse chain and coffee company recognized as one of the world's most influential coffee brands. The company is renowned for its specialty coffee beverages, including a wide range of espresso-based drinks, teas, and other beverages. Fourth Coffee operates thousands of stores worldwide.
Current environment
The company is developing cloud-native applications hosted in Azure.
Corporate website
The company hosts a public website located at http://www.fourthcoffee.com/. The website is used to place orders as well as view and update inventory items.
Inventory items
In addition to its core coffee offerings, Fourth Coffee recently expanded its menu to include inventory items such as lunch items, snacks, and merchandise. Corporate team members constantly update inventory. Users can customize items. Corporate team members configure inventory items and associated images on the website.
Orders
Associates in the store serve customized beverages and items to customers. Orders are placed on the website for pickup.
The application components process data as follows:
1. Azure Traffic Manager routes a user order request to the corporate website hosted in Azure App Service.
2. Azure Content Delivery Network serves static images and content to the user.
3. The user signs in to the application through a Microsoft Entra ID for customers tenant.
4. Users search for items and place an order on the website as item images are pulled from Azure Blob Storage.
5. Item customizations are placed in an Azure Service Bus queue message.
6. Azure Functions processes item customizations and saves the customized items to Azure Cosmos DB.
7. The website saves order details to Azure SQL Database.
8. SQL Database query results are cached in Azure Cache for Redis to improve performance.
The application consists of the following Azure services:

Requirements
The application components must meet the following requirements:
- Azure Cosmos DB development must use a native API that receives the latest updates and stores data in a document format.
- Costs must be minimized for all Azure services.
- Developers must test Azure Blob Storage integrations locally before deployment to Azure.
Testing must support the latest versions of the Azure Storage APIs.
Corporate website
- User authentication and authorization must allow one-time passcode sign-in methods and social identity providers (Google or Facebook).
- Static web content must be stored closest to end users to reduce network latency.
Inventory items
- Customized items read from Azure Cosmos DB must maximize throughput while ensuring data is accurate for the current user on the website.
- Processing of inventory item updates must automatically scale and enable updates across an entire Azure Cosmos DB container.
- Inventory items must be processed in the order they were placed in the queue.
- Inventory item images must be stored as JPEG files in their native format to include exchangeable image file format (data) stored with the blob data upon upload of the image file.
- The Inventory Items API must securely access the Azure Cosmos DB data.
Orders
- Orders must receive inventory item changes automatically after inventory items are updated or saved.
Issues
- Developers are storing the Azure Cosmos DB credentials in an insecure clear text manner within the Inventory Items API code.
- Production Azure Cache for Redis maintenance has negatively affected application performance.
You need to securely access inventory items when developing the Inventory Items API.
What are three possible ways to achieve this goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

• A.Create a SQL role definition under the Azure Cosmas DB account.
  Assign the role to the function apps system-assigned managed identity.
  Programmatically access the Azure Cosmos DB keys from the function app.
• B.Create a system-assigned managed ident for the function app with read access to secrets in Azure Key Vault.
  Store the Azure Cosmos DB primary key and UR in Azure Key Vaults secrets.
  Use function app settings to reference the secret values.
• C.Create a custom Microsoft Entra role.
  Assign the custom role to Azure Key Vault.
  Assign the custom role to the function app.
  Reference the custom role in the function app code when accessing Azure Key Vault values.
• D.Create a custom Microsoft Entra role.
  Assign the custom roe to the Azure Cosmos DB account
  Update the function app to use certificate-based authentication.
• E.Create a SQL role definition under the Azure Cosmos DB account.
  Create a user-assigned managed identity and assign the identity to the function app.
  Assign the user assigned managed identity the SQL role definition.
  Update the function app code to implement the DefaultAzureCredential class and reference the user-assigned managed identity.

Drag and Drop Question
You are developing an application to use Azure Blob storage. You have configured Azure Blob storage to include change feeds.
A copy of your storage account must be created in another region. Data must be copied from the current storage account to the new storage account directly between the storage servers.
You need to create a copy of the storage account in another region and copy the data.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation:
To move a storage account, create a copy of your storage account in another region. Then, move your data to that account by using AzCopy, or another tool of your choice.
The steps are:
* Export a template.
* Modify the template by adding the target region and storage account name.
* Deploy the template to create the new storage account.
* Configure the new storage account.
* Move data to the new storage account.
* Delete the resources in the source region.
Note: You must enable the change feed on your storage account to begin capturing and recording changes. You can enable and disable changes by using Azure Resource Manager templates on Portal or Powershell.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-move
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-change-feed
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/quickstart-create-templates-use-the-portal

Case Study 2 - Coho Winery
LabelMaker app
Coho Winery produces bottles, and distributes a variety of wines globally. You are developer implementing highly scalable and resilient applications to support online order processing by using Azure solutions.
Coho Winery has a LabelMaker application that prints labels for wine bottles. The application sends data to several printers. The application consists of five modules that run independently on virtual machines (VMs). Coho Winery plans to move the application to Azure and continue to support label creation.
External partners send data to the LabelMaker application to include artwork and text for custom label designs.
Data
You identify the following requirements for data management and manipulation:
* Order data is stored as nonrelational JSON and must be queried using Structured Query
Language (SQL).
* Changes to the Order data must reflect immediately across all partitions. All reads to the Order
data must fetch the most recent writes.
You have the following security requirements:
* Users of Coho Winery applications must be able to provide access to documents, resources,
and applications to external partners.
* External partners must use their own credentials and authenticate with their organization's
identity management solution.
* External partner logins must be audited monthly for application use by a user account
administrator to maintain company compliance.
* Storage of e-commerce application settings must be maintained in Azure Key Vault.
* E-commerce application sign-ins must be secured by using Azure App Service authentication
and Azure Active Directory (AAD).
* Conditional access policies must be applied at the application level to protect company content
* The LabelMaker applications must be secured by using an AAD account that has full access to
all namespaces of the Azure Kubernetes Service (AKS) cluster.
LabelMaker app
Azure Monitor Container Health must be used to monitor the performance of workloads that are deployed to Kubernetes environments and hosted on Azure Kubernetes Service (AKS).
You must use Azure Container Registry to publish images that support the AKS deployment.

Calls to the Printer API App fail periodically due to printer communication timeouts.
Printer communications timeouts occur after 10 seconds. The label printer must only receive up to 5 attempts within one minute.
The order workflow fails to run upon initial deployment to Azure.
Order .json

Hotspot Question
You need to meet the security requirements for external partners.
Which Azure Active Directory features should you use?
To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: B2B
Scenario: External partners must use their own credentials and authenticate with their organization's identity management solution.
Azure Active Directory (Azure AD) business-to-business (B2B) collaboration lets you securely share your company's applications and services with guest users from any other organization, while maintaining control over your own corporate data. Work safely and securely with external partners, large or small, even if they don't have Azure AD or an IT department. A simple invitation and redemption process lets partners use their own credentials to access your company's resources. Developers can use Azure AD business-to-business APIs to customize the invitation process or write applications like self-service sign-up portals.
Box 2: Access Review
Scenario: External partner logins must be audited monthly for application use by a user account administrator to maintain company compliance.
Azure Active Directory (Azure AD) Access Reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. Administrators can use Azure Active Directory (Azure AD) to create an access review for group members or users assigned to an application. Azure AD automatically sends reviewers an email that prompts them to review access.
References:
https://docs.microsoft.com/en-us/azure/active-directory/b2b/what-is-b2b

Your company has an Azure subscription.
You need to deploy a number of Azure virtual machines to the subscription by using Azure Resource Manager (ARM) templates. The virtual machines will be included in a single availability set.
You need to ensure that the ARM template allows for as many virtual machines as possible to remain accessible in the event of fabric failure or maintenance.
Which of the following is the value that you should configure for the platformFaultDomainCount property?

• A.Max Value
• B.Min Value
• C.30
• D.10