AZ-204 Test 1 — Questions and Answers
Question 1: You develop a serverless application using several Azure Functions. These routines are used to link to data that is stored within the code. For an Azure Function App project, you wish to set up tracing. In the hostjson file, you must make changes to the configuration parameters. <br> What tool should you employ?
- Azure Functions Core Tools (Azure CLI)
- Azure portal (Correct answer)
- Visual Studio
- Azure PowerShell
Correct answer: Azure portal
To configure tracing settings in the host.json file for an Azure Function App, the Azure portal provides a direct and user-friendly interface. You can navigate to the Function App, access its configuration settings, and modify the host.json file directly within the portal's editor, making it the most straightforward tool for this task.
Question 2: Your firm is working on an Azure API. <br> You must implement authentication for the Azure API, and you must meet the following criteria: <br> All API requests must be secure, according to the AZ-204 dumps. <br> Callers to the API must not transmit credentials to the API, according to AZ-204. <br> Which type of authentication should you use?
- Managed identity (Correct answer)
- Basic
- Client certificate
- Anonymous
Correct answer: Managed identity
Managed identities provide an identity for Azure services in Azure Active Directory, eliminating the need for developers to manage credentials. By using a managed identity, the Azure API can securely authenticate to other Azure services without requiring callers to transmit any credentials, thereby meeting both specified criteria for secure and credential-free authentication.
Question 3: You're working on an app that uses Azure Blob storage. For auditing purposes, the application must read the transaction logs of all changes to the blobs and blob metadata in the storage account. Only create, update, delete, and copy operations are allowed, and the changes must be kept in the order in which they occurred for compliance reasons. <br> The transaction logs must be processed asynchronously. <br> What are your options?
- On the storage account, enable the change feed and process all changes for available events. (Correct answer)
- Process all Azure Blob storage events by using Azure Event Grid with a subscriber Azure Function app.
- Scanning the request body for successful blob events with the Azure Monitor HTTP Data Collector API.
- Examine all Azure Storage Analytics logs for blob events that were successful.
Correct answer: On the storage account, enable the change feed and process all changes for available events.
The Azure Blob storage change feed provides a persistent, ordered, read-only log of all changes to blobs and blob metadata in a storage account. Enabling the change feed directly addresses the requirements for auditing, tracking specific operations (create, update, delete, copy), maintaining the order of changes, and allowing asynchronous processing of these transaction logs for compliance and analysis.
Question 4: User agreements must be kept on file. <br> After the agreement is completed, where should you store it?
- Azure Event Grid topic
- Azure Storage queue
- Azure Event Hub (Correct answer)
- Azure Service Bus topic
Correct answer: Azure Event Hub
Explanation: <br> Telemetry and distributed data streaming are handled by Azure Event Hub. <br> This service provides a single solution that allows for both real-time data retrieval and recurrent replay of stored raw data. It can save streaming data to a file for analysis and processing. <br> The following are its characteristics: <br> <br> low latency <br> capable of receiving and processing millions of events per second <br> at least once delivery
Question 5: You create an application that lets users upload photographs and movies to Azure storage. The media is uploaded to a blob storage account named Account1 via a storage REST API call. Container1 and Container2 are two blob storage containers that you have. <br> Video uploading is done on a sporadic basis. <br> When a new movie is uploaded, you must copy specified blobs from Container1 to Container2. <br> What are your options?
- Use the Start-AzureStorageBlobCopy cmdlet to create an Event Grid topic. (Correct answer)
- Using the Blob Service REST API's Put Blob operation, copy blobs to Container2.
- The blob should be downloaded to a virtual computer and then uploaded to Container2.
- To copy blobs to Container2, use AzCopy with the Snapshot switch.
Correct answer: Use the Start-AzureStorageBlobCopy cmdlet to create an Event Grid topic.
Explanation: <br> The Start-AzureStorageBlobCopy cmdlet starts to copy a blob. Example 1: Copy a named blob C:PS>Start-AzureStorageBlobCopy -SrcBlob "ContosoPlanning2015" -DestContainer "ContosoArchives" -SrcContainer "ContosoUploads" This command starts the copy operation of the blob named ContosoPlanning2015 from the container named ContosoUploads to the container named ContosoArchives
Question 6: You create and launch a web app using Azure App Service. Azure Traffic Manager is used to deploy the app across various regions. The app has Application Insights turned on. <br> <br> You must examine the app's uptime for each month. <br> <br> Which of the two solutions will be the most successful in achieving the goal? Each accurate response provides a comprehensive solution.
- Azure Monitor logs
- Application Insights alerts (Correct answer)
- Azure Monitor metrics (Correct answer)
- Application Insights web tests
Correct answer: Application Insights alerts
The correct answer: <br> Azure Monitor metrics <br> and <br> Application Insights alerts
Question 7: You create a web app for Azure App Service. In Azure Active Directory (Azure AD) and Twitter, you create an app registration for the app. Users must be authenticated, and all conversations must be encrypted with SSL. As the identity provider, the app must use Twitter. The Azure AD request must be validated in the app code. <br> What should you confirm?
- ID token header (Correct answer)
- Tenant ID
- HTTP response code
- ID token signature
Correct answer: ID token header
The correct answer: <br> ID token header
Question 8: You're building an app that will store data in CosmosDB. Batches of relational data will be processed by the app. <br> <br> For the app, you must choose an API. <br> <br> What API should you employ?
- Table API
- SQL API (Correct answer)
- Cassandra API
- MongoDBAPI
Correct answer: SQL API
The correct answer: <br> SQL API
Question 9: You're in charge of a data processing program that gets requests from an Azure Storage queue. <br> <br> You must control who has access to the queue. You must meet the following criteria: <br> <br> Allow access to the Azure queue for other applications. <br> <br> Make sure you can disable queue access without having to re-generate the storage account keys. <br> <br> Access should be specified at the queue level rather than at the storage account level. <br> <br> Should you use a shared access signature (SAS) of a certain type?
- Service SAS with ad hoc SAS
- Service SAS with a stored access policy (Correct answer)
- Account SAS
- User Delegation SAS
Correct answer: Service SAS with a stored access policy
Explanation: <br> The storage account key protects SAS. SAS grants access to a resource in only one of the Azure Storage services: Blob storage, Queue storage, Table storage, or Azure Files. <br> <br> You can revoke rights for a service SAS using stored access policies rather than having to regenerate the storage account keys.
AZ-204 Test 1
You develop a serverless application using several Azure Functions.
These routines are used to link to data that is stored within the code.
For an Azure Function App project, you wish to set up tracing.
In the hostjson file, you must make changes to the configuration parameters.
What tool should you employ?