Free AZ-204 MCQ Questions and Answers — Questions and Answers
Question 1: You are designing an application to transport data between on-premises file servers and Azure Blob storage. The program makes use of the Azure Key Vault APIs and saves keys, secrets, and certificates there. You want to configure the program to allow recovery of an inadvertent deletion of the key vault or key vault objects for 90 days following deletion. What ought you to do?
- Run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI. (Correct answer)
- Implement virtual network service endpoints for Azure Key Vault.
- Run the az keyvault update --enable-soft-delete false CLI.
- Run the Add-AzKeyVaultKey cmdlet.
Correct answer: Run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI.
To ensure recovery of inadvertently deleted key vaults or their objects for 90 days, two features must be enabled: soft-delete and purge protection. Soft-delete moves deleted items to a recoverable state for a retention period, while purge protection prevents their permanent deletion during this period. The `az keyvault update --enable-soft-delete true --enable-purge-protection true` CLI command correctly enables both these essential security features.
Question 2: On a tier D1 app service subscription, you create a web application. You observe that during instances of high traffic, page load times rise. When CPU load is greater than 80%, automatic scaling should be used. Your recommendation must reduce expenses. What ought to you start with?
- Switch to the Premium App Service tier plan.
- Switch to the Standard App Service tier plan. (Correct answer)
- Switch to the Azure App Services consumption plan.
- Enable autoscaling on the Web App.
Correct answer: Switch to the Standard App Service tier plan.
The D1 (Shared) App Service tier is a basic plan that does not support autoscaling, which is a key requirement for handling high traffic. To enable autoscaling based on CPU load and improve performance, the application needs to be moved to a higher tier that offers this functionality. The Standard App Service tier is the lowest-cost option that provides autoscaling capabilities, making it the most economical initial step to meet the specified requirements.
Question 3: A workspace for Azure Log Analytics is part of your company's Azure subscription. One hundred on-premises servers belonging to your business are connected to the Azure Log Analytics workspace and are running Windows Server 2012 R2 or Windows Server 2016. The Azure Log Analytics workspace is configured to collect security-related performance statistics from these linked machines. Based on the data collected by the Azure Log Analytics workspace, you must configure alerts. You must ensure that alert rules take dimensions into account and that the generation time of alerts is kept to a minimum. Additionally, each time an alert is generated and when it is addressed, a single alert notice must be created. When constructing the alert rules, you must utilize the required signal type. Which choice from the list below should you pick?
- The Audit Log signal type.
- The Activity log signal type.
- The Application Log signal type.
- The Metric signal type. (Correct answer)
Correct answer: The Metric signal type.
The requirement specifies collecting 'security-related performance statistics' and configuring alerts based on this data, with a focus on dimensions, minimal generation time, and single notifications. Performance statistics are inherently metric data, and Azure Monitor Metric alerts are specifically designed for numerical time-series data. Metric alerts offer low latency, support dimensions for granular filtering, and can be configured for stateful alerting, which aligns perfectly with all the stated criteria for efficient and accurate alerting.
Question 4: You are creating a.NET Core MVC application that will let users look up independent vacation rental providers. To enable the application to search the index using different criteria to find documents connected to accommodations, you wish to deploy Azure Search. You want customers to be able to use regular expressions to search the index using the application. What ought you to do?
- Configure the Filter property of the SearchParameters class.
- Configure the SearchMode property of the SearchParameters class.
- Configure the QueryType property of the SearchParameters class. (Correct answer)
- Configure the Facets property of the SearchParameters class.
Correct answer: Configure the QueryType property of the SearchParameters class.
To enable advanced query capabilities like regular expressions in Azure Search, you need to specify the appropriate query syntax. The `QueryType` property of the `SearchParameters` class allows you to set the query parser to `QueryType.Full`. This `full` Lucene query syntax supports powerful features, including regular expressions, enabling users to perform complex searches on the index.
Question 5: You work for your company as a developer. For an existing Logic App, the definitions need to be updated. Which should you employ?
- the Logic App Code View (Correct answer)
- the API Connections
- the Logic Apps Designer
- the Enterprise Integration Pack (EIP)
Correct answer: the Logic App Code View
While the Logic Apps Designer provides a visual interface for building and modifying workflows, the Logic App Code View offers direct access to the underlying JSON definition of the Logic App. This view is essential for making precise, bulk, or advanced updates to the workflow's structure, actions, and triggers that might be difficult or impossible through the graphical designer alone. It provides granular control over the Logic App's definition.
Question 6: You are creating a solution for an API with a public interface. An Azure App Service instance serves as the home for the API back end. For the API's back end, you have created a RESTful service. For the API Management service instance, back-end authentication needs to be configured. Solution: For the Azure resource, you configure Basic gateway credentials. Is the aim being met by the solution?
- No (Correct answer)
- Yes
Correct answer: No
Configuring 'Basic gateway credentials' for API Management backend authentication typically refers to using username and password. While this provides a form of authentication, it is generally not considered a robust or secure solution for production-grade public APIs, especially when the backend is an Azure App Service. Modern best practices for Azure API Management backend authentication often involve more secure methods like Managed Identities, client certificates, or OAuth/JWT, which offer better security, manageability, and integration with Azure's identity ecosystem.
Question 7: You work for your company as a developer. The workflows for an existing Logic App need to be changed. Which should you employ?
- the Logic Apps Designer
- the Enterprise Integration Pack (EIP) (Correct answer)
- the Logic App Code View
- the API Connections
Correct answer: the Enterprise Integration Pack (EIP)
The Enterprise Integration Pack (EIP) in Azure Logic Apps provides a suite of connectors and capabilities specifically designed for complex B2B and enterprise integration scenarios. If the changes to an existing Logic App workflow involve integrating with enterprise systems, handling EDI, AS2, X12, or XML messages, or performing advanced data transformations, then the components and features provided by the EIP would be employed to implement these specific workflow modifications.
Free AZ-204 MCQ Questions and Answers
You are designing an application to transport data between on-premises file servers and Azure Blob storage.
The program makes use of the Azure Key Vault APIs and saves keys, secrets, and certificates there.
You want to configure the program to allow recovery of an inadvertent deletion of the key vault or key vault objects for 90 days following deletion.
What ought you to do?