Microsoft AZ-204 ACTUAL EXAM QUESTIONS

Question # 1

You need to audit the retail store sales transactions.What are two possible ways to achieve the goal? Each correct answer presents a completesolution.NOTE: Each correct selection is worth one point.

A. Update the retail store location data upload process to include blob index tags. Createan Azure Function to process the blob index tags and filter by store location
B. Enable blob versioning for the storage account. Use an Azure Function to process a listof the blob versions per day.
C. Process an Azure Storage blob inventory report by using an Azure Function. Create rulefilters on the blob inventory report,
D. Subscribe to blob storage events by using an Azure Function and Azure Event Grid.Filter the events by store location.
E. Process the change feed logs of the Azure Blob storage account by using an AzureFunction. Specify a time range for the change feed data.

Show Answer

Question # 2

You need to implement a solution to resolve the retail store location data issue.Which three Azure Blob features should you enable? Each correct answer presents pan olthe solution.NOTE Each correct selection is worth one point

A. Immutability
B. Snapshots
C. Versioning
D. Soft delete
E. Object replication
F. Change feed

Show Answer

Question # 3

You need to secure the Azure Functions to meet the security requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Store the RSA-HSM key in Azure Cosmos DB. Apery the built-in policies for customermanaged keys and allowed locations.
B. Create a free tier Azure App Configuration instance with a new Azure AD serviceprincipal.
C. Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protectionfeatures enabled.
D. Store the RSA-HSM key in Azure Blob storage with an Immutability policy applied to thecontainer.
E. Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

Show Answer

Question # 4

You need to access data from the user claim object in the e-commerce web app.What should you do first?

A. Write custom code to make a Microsoft Graph API call from the e-commerce web app.
B. Assign the Contributor RBAC role to the e-commerce web app by using the ResourceManager create role assignment API.
C. Update the e-commerce web app to read the HTTP request header values.
D. Using the Azure CLI, enable Cross-origin resource sharing (CORS) from the ecommerce checkout API to the e-commerce web app.

Show Answer

Question # 5

You need to ensure the security policies are met.What code do you add at line CS07 of ConfigureSSE.ps1?

A. –PermissionsToKeys create, encrypt, decrypt
B. –PermissionsToCertificates create, encrypt, decrypt
C. –PermissionsToCertificates wrapkey, unwrapkey, get
D. –PermissionsToKeys wrapkey, unwrapkey, get

Show Answer

Question # 6

You need to resolve the log capacity issue. What should you do?

A. Create an Application Insights Telemetry Filter
B. Change the minimum log level in the host.json file for the function
C. Implement Application Insights Sampling
D. Set a LogCategoryFilter during startup

Show Answer

Question # 7

You need to ensure receipt processing occurs correctly.What should you do?

A. Use blob properties to prevent concurrency problems
B. Use blob SnapshotTime to prevent concurrency problems
C. Use blob metadata to prevent concurrency problems
D. Use blob leases to prevent concurrency problems

Show Answer

Question # 8

You need to resolve a notification latency issue. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. Set Always On to true.
B. Ensure that the Azure Function is using an App Service plan.
C. Set Always On to false.
D. Ensure that the Azure Function is set to use a consumption plan.

Show Answer

Question # 9

You need to ensure that the solution can meet the scaling requirements for Policy Service. Which Azure Application Insights data model should you use?

A. an Application Insights dependency
B. an Application Insights event
C. an Application Insights trace
D. an Application Insights metric

Show Answer

Question # 10

You need to ensure that all messages from Azure Event Grid are processed. What should you use?

A. Azure Event Grid topic
B. Azure Service Bus topic
C. Azure Service Bus queue
D. Azure Storage queue
E. Azure Logic App custom connector

Show Answer

Question # 11

You need to authenticate the user to the corporate website as indicated by the architectural diagram.Which two values should you use? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point. 

A. ID token signature
B. ID token claims 
C. HTTP response code
D. Azure AD endpoint URI 
E. Azure AD tenant ID

Show Answer

Question # 12

You need to investigate the Azure Function app error message in the development environment.What should you do?

A. Connect Live Metrics Stream from Application Insights to the Azure Function app and filter the metrics. 
B. Create a new Azure Log Analytics workspace and instrument the Azure Function app with Application Insights
C. Update the Azure Function app with extension methods from Microsoft.Extensions.Logging to log events by using the log instance. 
D. Add a new diagnostic setting to the Azure Function app to send logs to Log Analytics. 

Show Answer

Question # 13

You need to correct the RequestUserApproval Function app error.What should you do?

A. Update line RA13 to use the async keyword and return an HttpRequest object value. 
B. Configure the Function app to use an App Service hosting plan. Enable the Always On setting of the hosting plan. 
C. Update the function to be stateful by using Durable Functions to process the request payload.
D. Update the functionTimeout property of the host.json project file to 15 minutes. 

Show Answer

Question # 14

You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers. The Azure AD group must not be able to access the keys that are required to access the data. You need to restrict access to the Azure AD group. Which role-based access control should you use?

A. DocumentDB Accounts Contributor
B. Cosmos Backup Operator 
C. Cosmos DB Operator
D. Cosmos DB Account Reader 

Show Answer

Question # 15

You develop a solution that uses Azure Virtual Machines (VMs). The VMs contain code that must access resources in an Azure resource group. You grant the VM access to the resource group in Resource Manager. You need to obtain an access token that uses the VMs system-assigned managed identity. Which two actions should you perform? Each correct answer presents part of the solution. 

A. Use PowerShell on a remote machine to make a request to the local managed identity for Azure resources endpoint. 
B. Use PowerShell on the VM to make a request to the local managed identity for Azureresources endpoint. 
C. From the code on the VM. call Azure Resource Manager using an access token. 
D. From the code on the VM. call Azure Resource Manager using a SAS token. 
E. From the code on the VM. generate a user delegation SAS token.

Show Answer

Question # 16

You develop and add several functions to an Azure Function app that uses the latestruntime host. The functions contain several REST API endpoints secured by using SSL.The Azure Function app runs in a Consumption plan.You must send an alert when any of the function endpoints are unavailable or respondingtoo slowly.You need to monitor the availability and responsiveness of the functions.What should you do?

A. Create a URL ping test. 
B. Create a timer triggered function that calls TrackAvailability() and send the results to Application Insights.
C. Create a timer triggered function that calls GetMetric("Request Size") and send the results to
C. Create a timer triggered function that calls GetMetric("Request Size") and send the results to Application Insights. 
D. Add a new diagnostic setting to the Azure Function app. Enable the FunctionAppLogs and Send to Log Analytics options. 

Show Answer

Question # 17

You develop and deploy an Azure App Service web app named App1. You create a new Azure Key Vault named Vault 1. You import several API keys, passwords, certificates, and cryptographic keys into Vault1.You need to grant App1 access to Vault1 and automatically rotate credentials Credentials must not be stored in code. What should you do?  

A. Enable App Service authentication for Appt. Assign a custom RBAC role to Vault1. 
B. Add a TLS/SSL binding to App1. 
C. Assign a managed identity to App1. 
D. Upload a self-signed client certificate to Vault1. Update App1 to use the client certificate. 

Show Answer

Question # 18

You are developing a web application that runs as an Azure Web App. The web application stores data in Azure SQL Database and stores files in an Azure Storage account. The web application makes HTTP requests to external services as part of normal operations. The web application is instrumented with Application Insights. The external services are OpenTelemetry compliant. You need to ensure that the customer ID of the signed in user is associated with all operations throughout the overall system. What should you do?

A. Create a new SpanContext with the TraceRags value set to the customer ID for the signed in user. 
B. On the current SpanContext, set the Traceld to the customer ID for the signed in user. 
C. Add the customer ID for the signed in user to the CorrelationContext in the web application. 
D. Set the header Ocp-Apim-Trace to the customer ID for the signed in user. 

Show Answer

Question # 19

An organization hosts web apps in Azure. The organization uses Azure Monitor You discover that configuration changes were made to some of the web apps. You need to identify the configuration changes. Which Azure Monitor log should you review?

A. AppServiceEnvironmentPlatformLogs
B. AppServiceApplogs 
C. AppServiceAuditLogs 
D. AppServiceConsoteLogs 

Show Answer

Question # 20

You develop Azure solutions.You must connect to a No-SQL globally-distributed database by using the .NET API.You need to create an object to configure and execute requests in the database.Which code segment should you use?

A. new Container(EndpointUri, PrimaryKey);
B. new Database(Endpoint, PrimaryKey); 
C. new CosmosClient(EndpointUri, PrimaryKey); 

Show Answer

Question # 21

You have an existing Azure storage account that stores large volumes of data acrossmultiple containers.You need to copy all data from the existing storage account to a new storage account. Thecopy process must meet the following requirements:Automate data movement.Minimize user input required to perform the operation.Ensure that the data movement process is recoverable.What should you use?

A. AzCopy 
B. Azure Storage Explorer 
C. Azure portal 
D. .NET Storage Client Library

Show Answer

Question # 22

You develop and deploy a web app to Azure App Service. The Azure App Service uses aBasic plan in a single region.You need to capture the telemetry.Which three actions should you perform? Each correct answer presents part of the solutionNOTE; Each correct selection is worth one pewit

A. Upgrade the Azure App Service plan to Premium. 
B. Enable remote debugging. 
C. Enable Profiler 
D. Restart an apps in the App Service plan 
E. Enable Snapshot debugger 
F. Enable Application Insights site extensions. 
G. Enable the Always On setting for the app service. 

Show Answer

Question # 23

A development team is creating a new REST API. The API will store data in Azure Blobstorage. You plan to deploy the API to Azure App Service.Developers must access the Azure Blob storage account to develop the API for the nexttwo months. The Azure Blob storage account must not be accessible by the developersafter the two-month time period.You need to grant developers access to the Azure Blob storage account.What should you do?

A. Generate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers. 
B. Create and apply a new lifecycle management policy to include a last accessed date value. Apply the policy to the Azure Blob storage account.
C. Provide all developers with the access key for the Azure Blob storage account. Update the API to include the Coordinated Universal Time (UTC) timestamp for the request header. 
D. Grant all developers access to the Azure Blob storage account by assigning role-based access control (RBAC) roles. 

Show Answer

Question # 24

You are developing an Azure App Service REST API.The API must be called by an Azure App Service web app. The API must retrieve andupdate user profile information stored in Azure Active Directory (Azure AD).You need to configure the API to make the updates.Which two tools should you use? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Microsoft Graph API 
B. Microsoft Authentication Library (MSAL) 
C. Azure API Management 
D. Microsoft Azure Security Center 
E. Microsoft Azure Key Vault SDK 

Show Answer

Question # 25

You are developing an Azure function that connects to an Azure SQL Database instance. The function is triggered by an Azure Storage queue.You receive reports of numerous System.InvalidOperationExceptions with the following message: “Timeout expired. The timeout period elapsed prior to obtaining a connection from the pool. This may have occurred because all pooled connections were in use and max pool size was reached.” You need to prevent the exception. What should you do?  

A. In the host.json file, decrease the value of the batchSize option 
B. Convert the trigger to Azure Event Hub 
C. Convert the Azure Function to the Premium plan 
D. In the function.json file, change the value of the type option to queueScaling 

Show Answer

Question # 26

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.You need to design the process that starts the photo processing.Does the solution meet the goal? Solution: Use the Azure Blob Storage change feed to trigger photo processing.  

A. Yes
B. No

Show Answer

Question # 27

You develop and deploy an Azure App Service web app. The app is deployed to multipleregions and uses Azure Traffic Manager. Application Insights is enabled for the app.You need to analyze app uptime for each month.Which two solutions win achieve the goal? Each correct answer presents a completesolutionNOTE: Each correct selection is worth one point

A. Application Insights alerts 
B. Application Insights web tests 
C. Azure Monitor logs 
D. Azure Monitor metrics 

Show Answer

Question # 28

You manage a data processing application that receives requests from an Azure Storagequeue.You need to manage access to the queue. You have the following requirements:Provide other applications access to the Azure queue.Ensure that you can revoke access to the queue without having to regenerate thestorage account keys. Specify access at the queue level and not at the storage account level.Which type of shared access signature (SAS) should you use?

A. Service SAS with a stored access policy
B. Account SAS
C. User Delegation SAS
D. Service SAS with ad hoc SAS

Show Answer

Question # 29

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user’s Azure AD group membership must be used to determine the permission level.You need to configure authorization.Solution: Configure and use Integrated Windows Authentication in the website. In the website, query Microsoft Graph API to load the group to which the user is a member.Does the solution meet the goal?  

A. Yes
B. No

Show Answer

Question # 30

You are developing a web application that uses Azure Cache for Redis. You anticipate thatthe cache will frequently fill and you will need to evict keys.You must configure Azure Cache for Redis based on the following predicted usage pattern:A small subset of elements will be accessed much more often than the rest.You need to configure the Azure Cache for Redis to optimize performance for the predictedusage pattern.Which two eviction policies will achieve the goal?NOTE: Each correct selection is worth one point. 

A. noeviction 
B. allkeys-lru 
C. volatile-lru 
D. allkeys-random 
E. volatile-ttl 
F. volatile-random

Show Answer

Question # 31

You are creating an app that will use CosmosDB for data storage. The app will process batches of relational data. You need to select an API for the app. Which API should you use?

A. MongoDBAPI
B. Table API
C. SQL API 
D. Cassandra API 

Show Answer

Question # 32

You are developing a solution that will use a multi-partitioned Azure Cosmos DB database. You plan to use the latest Azure Cosmos DB SDK for development. The solution must meet the following requirements: Send insert and update operations to an Azure Blob storage account. Process changes to all partitions immediately. Allow parallelization of change processing. You need to process the Azure Cosmos DB operations.What are two possible ways to achieve this goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.  

A. Create an Azure App Service API and implement the change feed estimator of the SDK. Scale the API by using multiple Azure App Service instances. 
B. Create a background job in an Azure Kubernetes Service and implement the change feed feature of the SDK.
C. Create an Azure Function to use a trigger for Azure Cosmos DB. Configure the trigger to connect to the container. 
D. Create an Azure Function that uses a Feedlterator object that processes the change feed by using the pull model on the container. Use a FeedRange objext to parallelize the processing of the change feed across multiple functions. 

Show Answer

Question # 33

You develop and deploy a web application to Azure App Service. The application accesses data stored in an Azure Storage account. The account contains several containers with several blobs with large amounts of data. You deploy all Azure resources to a single region. You need to move the Azure Storage account to the new region. You must copy all data to the new region. What should you do first?

A. Export the Azure Storage account Azure Resource Manager template
B. Initiate a storage account failover 
C. Configure object replication for all blobs
D. Use the AzCopy command line tool
E. Create a new Azure Storage account in the current region
F. Create a new subscription in the current region

Show Answer

Question # 34

You deploy an Azure App Service web app. You create an app registration for the app in Azure Active Directory (Azure AD) and Twitter. the app must authenticate users and must use SSL for all communications. The app must use Twitter as the identity provider. You need to validate the Azure AD request in the app code. What should you validate?

A. HTTP response code 
B. ID token header 
C. ID token signature 
D. Tenant ID 

Show Answer

Question # 35

You develop and deploy an Azure Logic app that calls an Azure Function app. The AzureFunction app includes an OpenAPl (Swagger) definition and uses an Azure Blob storageaccount. All resources are secured by using Azure Active Directory (Azure AD).The Azure Logic app must securely access the Azure Blob storage account. Azure ADresources must remain if the Azure Logic app is deleted.You need to secure the Azure Logic app. What should you do?

A. Create an Azure AD custom role and assign role-based access controls. 
B. Create an Azure AD custom role and assign the role to the Azure Blob storage account.
C. Create an Azure Key Vault and issue a client certificate. 
D. Create a user-assigned managed identity and assign role-based access controls. 
E. Create a system-assigned managed identity and issue a client certificate. 

Show Answer

Question # 36

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You develop and deploy an Azure App Service API app to a Windows-hosted deployment slot named Development. You create additional deployment slots named Testing and Production. You enable auto swap on the Production deployment slot. You need to ensure that scripts run and resources are available before a swap operation occurs. Solution: Update the app with a method named status check to run the scripts. Update the app settings for the app. Set the WEBSITE_SWAP_WARMUP_PING_PATH and WEBSITE_SWAP_WARMUP_PING_STATUSES with a path to the new method and appropriate response codes. Does the solution meet the goal?

A. Yes
B. No 

Show Answer

Question # 37

You develop Azure solutions.A .NET application needs to receive a message each time an Azure virtual machine finishes processing data. The messages must NOT persist after being processed by the receiving application.You need to implement the .NET object that will receive the messages.Which object should you use?  

A. QueueClient 
B. SubscriptionClient 
C. TopicClient 
D. CloudQueueClient 

Show Answer

Question # 38

You develop a REST API. You implement a user delegation SAS token to communicatewith Azure Blobstorage.The token is compromised.You need to revoke the token.What are two possible ways to achieve this goal? Each correct answer presents acomplete solution.NOTE: Each correct selection is worth one point.

A. Revoke the delegation keys 
B. Delete the stored access policy. 
C. Regenerate the account key. 
D. Remove the role assignment for the security principle. 

Show Answer

Question # 39

You are developing an Azure messaging solution. You need to ensure that the solution that meets the following requirements:• Provide transactional support • Provide duplicate detection. • Store the messages for an unlimited period of timeWhich two technologies will meet the requirements? Each correct answer presents a complete solution NOTE Each correct selection is worth one point. 

A. Azure Service Bus Queue 
B. Azure Storage Queue 
C. Azure Service Bus Topic 
D Azure Event Hub 

Show Answer

Question # 40

You ate developing a web application that uses the Microsoft identity platform to authenticate users and resources. The web application calls several REST APIs.The APIs require an access token from the Microsoft identity platform. You need to request a token.Which three properties should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.  

A. Application secret 
B. Redirect URI/URL 
C. Application name 
D. Supported account type 
E. Application ID 

Show Answer

Question # 41

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this question, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.You are developing a website that will run as an Azure Web App. Users will authenticate byusing their Azure Active Directory (Azure AD) credentials.You plan to assign users one of the following permission levels for the website: admin,normal, and reader. A user’s Azure AD group membership must be used to determine thepermission level. You need to configure authorization.Solution:•Create a new Azure AD application’s manifest, set value of the groupMembershipClaimsoption to All.•In the website, use the value of the groups claim from the JWI for the user to determinepermissions.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 42

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data. You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future. You need to implement a solution to receive the device data. Solution: Provision an Azure Event Grid. Configure the machine identifier as the partition key and enable capture. Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 43

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You are developing an Azure Service application that processes queue data when it receives a message from amobile application. Messages may not be sent to the service consistently.You have the following requirements:Queue size must not grow larger than 80 gigabytes (GB).Use first-in-first-out (FIFO) ordering of messages.Minimize Azure costs.You need to implement the messaging solution.Solution: Use the .Net API to add a message to an Azure Storage Queue from the mobile application. Createan Azure Function App that uses an Azure Storage Queue trigger.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 44

You have an application that includes an Azure Web app and several Azure Function apps. Application secrets including connection strings and certificates are stored in Azure Key Vault. Secrets must not be stored in the application or application runtime environment. Changes to Azure Active Directory (Azure AD) must be minimized. You need to design the approach to loading application secrets. What should you do?

A. Create a single user-assigned Managed Identity with permission to access Key Vault and configure each App Service to use that Managed Identity.
B. Create a single Azure AD Service Principal with permission to access Key Vault and use a client secret from within the App Services to access Key Vault
C. Create a system assigned Managed Identity in each App Service with permission to access Key Vault.
D. Create an Azure AD Service Principal with Permissions to access Key Vault for each App Service and use a certificate from within the App Services to access Key Vault.

Show Answer

Question # 45

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You are developing a website that will run as an Azure Web App. Users will authenticate by using their AzureActive Directory (Azure AD) credentials.You plan to assign users one of the following permission levels for the website: admin, normal, and reader. Auser’s Azure AD group membership must be used to determine the permission level.You need to configure authorization.Solution:Create a new Azure AD application. In the application’s manifest, define application roles that matchthe required permission levels for the application.Assign the appropriate Azure AD group to each role. In the website, use the value of the roles claimfrom the JWT for the user to determine permissions.Does the solution meet the goal?

A. Yes
B. NO

Show Answer

Question # 46

You are developing an Azure Function App that processes images that are uploaded to an Azure Blob container. Images must be processed as quickly as possible after they are uploaded, and the solution must minimize latency. You create code to process images when the Function App is triggered. You need to configure the Function App. What should you do?

A. Use an App Service plan. Configure the Function App to use an Azure Blob Storage input trigger.
B. Use a Consumption plan. Configure the Function App to use an Azure Blob Storage trigger.
C. Use a Consumption plan. Configure the Function App to use a Timer trigger.
D. Use an App Service plan. Configure the Function App to use an Azure Blob Storage trigger.
E. Use a Consumption plan. Configure the Function App to use an Azure Blob Storage input trigger.

Show Answer

Question # 47

You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms. If the stored intake forms are downloaded from storage by a third party, the content of the forms must not be compromised. You need to store the intake forms according to the requirements.Solution: Create an Azure Cosmos DB database with Storage Service Encryption enabled. Store the intake forms in the Azure Cosmos DB database.Does the solution meet the goal?  

A. Yes
B. No

Show Answer

Question # 48

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You are developing an Azure Service application that processes queue data when it receives a message from amobile application. Messages may not be sent to the service consistently.You have the following requirements:Queue size must not grow larger than 80 gigabytes (GB).Use first-in-first-out (FIFO) ordering of messages.Minimize Azure costs.You need to implement the messaging solution.Solution: Use the .Net API to add a message to an Azure Storage Queue from the mobile application. Createan Azure VM that is triggered from Azure Storage Queue events.Does the solution meet the goal?

A. Yes
B. NO

Show Answer

Question # 49

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop an HTTP triggered Azure Function app to process Azure Storage blob data. The app is triggered using an output binding on the blob. The app continues to time out after four minutes. The app must process the blob data.You need to ensure the app does not time out and processes the blob data. Solution: Use the Durable Function async pattern to process the blob data.Does the solution meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 50

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop and deploy an Azure App Service API app to a Windows-hosted deployment slot named Development. You create additional deployment slots named Testing and Production. You enable auto swap on the Production deployment slot.You need to ensure that scripts run and resources are available before a swap operation occurs.Solution: Disable auto swap. Update the app with a method named statuscheck to run the scripts. Re-enable auto swap and deploy the app to the Production slot.Does the solution meet the goal?

A. Yes 
B. No 

Show Answer

Question # 51

You are developing an e-commerce solution that uses a microservice architecture.You need to design a communication backplane for communicating transactional messages between various parts of the solution. Messages must be communicated in firstin-first-out (FIFO) order. What should you use?

A. Azure Storage Queue 
B. Azure Event Hub
C. Azure Service Bus 
D. Azure Event Grid 

Show Answer

Question # 52

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing an Azure Service application that processes queue data when it receives a message from a mobile application. Messages may not be sent to the service consistently. You have the following requirementsQueue size must not grow larger than 80 gigabytes (GB). Use first-in-first-out (FIFO) ordering of messages. Minimize Azure costs.You need to implement the messaging solution.Solution: Use the .Net API to add a message to an Azure Service Bus Queue from the mobile application. Create an Azure Windows VM that is triggered from Azure Service Bus Queue.Does the solution meet the goal? 

A. Yes 
B. No

Show Answer

Question # 53

You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers.The Azure AD group must not be able to access the keys that are required to access the data.You need to restrict access to the Azure AD groupWhich role-based access control should you use? 

A. DocumentDB Accounts Contributor 
B. Cosmos Backup Operator
C. Cosmos DB Operator 
D. Cosmos DB Account Reader 

Show Answer

Question # 54

You are developing an ASP.NET Core website that uses Azure FrontDoor. The website is used to build custom weather data sets for researchers. Data sets are downloaded by users as Comma Separated Value (CSV) files. The data is refreshed every 10 hours.Specific files must be purged from the FrontDoor cache based upon Response Header values.You need to purge individual assets from the Front Door cache.Which type of cache purge should you use?

A. single path
B. wildcard
C. root domain 

Show Answer

Question # 55

You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms. If the stored intake forms are downloaded from storage by a third party, the content of the forms must not be compromised.You need to store the intake forms according to the requirements.Solution: Store the intake forms as Azure Key Vault secrets. Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 56

You develop an app that allows users to upload photos and videos to Azure storage. The app uses a storage REST API call to upload the media to a blob storage account named Account1. You have blob storage containers named Container1 and Container2.Uploading of videos occurs on an irregular basis.You need to copy specific blobs from Container1 to Container2 when a new video is uploaded.What should you do?

A. Copy blobs to Container2 by using the Put Blob operation of the Blob Service REST API 
B. Create an Event Grid topic that uses the Start-AzureStorageBlobCopy cmdlet 
C. Use AzCopy with the Snapshot switch to copy blobs to Container2
D. Download the blob to a virtual machine and then upload the blob to Container2 

Show Answer

Question # 57

You develop and deploy an ASP.NET web app to Azure App Service. You use Application Insights telemetry to monitor the app.You must test the app to ensure that the app is available and responsive from various points around the world and at regular intervals. If the app is not responding, you must send an alert to support staff.You need to configure a test for the web app.Which two test types can you use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point. 

A. integration
B. multi-step web 
C. URL ping
D. unit 
E. load 

Show Answer

Question # 58

A company is implementing a publish-subscribe (Pub/Sub) messaging component by using Azure Service Bus. You are developing the first subscription application.In the Azure portal you see that messages are being sent to the subscription for each topic. You create and initialize a subscription client object by supplying the correct details, but the subscription application is still not consuming the messages. You need to ensure that the subscription client processes all messages.Which code segment should you use?

A. await subscriptionClient.AddRuleAsync(new RuleDescription (RuleDescription.DefaultRuleName, new TrueFilter())); 
B. subscriptionClient = new SubscriptionClient(ServiceBusConnectionString, TopicName, SubscriptionName); D18912E1457D5D1DDCBD40AB3BF70D5D 
C. await subscriptionClient.CloseAsync();
D. subscriptionClient.RegisterMessageHandler(ProcessMessagesAsync, messageHandlerOptions); 

Show Answer

Question # 59

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop an HTTP triggered Azure Function app to process Azure Storage blob data. The app is triggered using an output binding on the blob. The app continues to time out after four minutes. The app must process the blob data.You need to ensure the app does not time out and processes the blob data.Solution: Pass the HTTP trigger payload into an Azure Service Bus queue to be processed by a queue trigger function and return an immediate HTTP success response. Does the solution meet the goal?

A. Yes
B. No 

Show Answer

Question # 60

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You develop an HTTP triggered Azure Function app to process Azure Storage blob data. The app is triggered using an output binding on the blob.The app continues to time out after four minutes. The app must process the blob data.You need to ensure the app does not time out and processes the blob data.Solution: Configure the app to use an App Service hosting plan and enable the Always On setting. Does the solution meet the goal?

A. Yes 
B. No

Show Answer

Question # 61

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screenYou are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user’s Azure AD group membership must be used to determine the permission level.You need to configure authorization.Solution:Create a new Azure AD application. In the application’s manifest, define application roles that match the required permission levels for the application. Assign the appropriate Azure AD group to each role. In the website, use the value of the roles claim from the JWT for the user to determine permissions.Does the solution meet the goal?

A. Yes
B. No 

Show Answer

Question # 62

D18912E1457D5D1DDCBD40AB3BF70D5DYou are building a website that uses Azure Blob storage for data storage. You configure Azure Blob storage lifecycle to move all blobs to the archive tier after 30 days.Customers have requested a service-level agreement (SLA) for viewing data older than 30 days.You need to document the minimum SLA for data recovery.Which SLA should you use?

A. at least two days
B. between one and 15 hours 
C. at least one day
D. between zero and 60 minutes 

Show Answer

Question # 63

You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms. If the stored intake forms are downloaded from storage by a third party, the content of the forms must not be compromised.You need to store the intake forms according to the requirements.Solution: uk.co.certification.simulator.questionpool.PList@ed015f0Does the solution meet the goal?

A. Yes
B. No 

Show Answer

Question # 64

You are implementing an Azure API app that uses built-in authentication and authorization functionality.All app actions must be associated with information about the current user.You need to retrieve the information about the current user.What are two possible ways to achieve the goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. HTTP headers
B. environment variables
C. /.auth/me HTTP endpoint
D. /.auth/login endpoint

Show Answer

Question # 65

Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questionswill not appear in the review screen.You are developing a solution that will be deployed to an Azure Kubernetes Service (AKS) cluster. Thesolution will include a custom VNet, Azure Container Registry images, and an Azure Storage account.The solution must allow dynamic creation and management of all Azure resources within the AKS cluster.You need to configure an AKS cluster for use with the Azure APIs.Solution: Create an AKS cluster that supports network policy. Create and apply a network to allow traffic onlyfrom within a defined namespace.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 66

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You develop Azure solutions.You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.You need to obtain an Azure Resource Manager access token.Solution: Run the Invoke-RestMethod cmdlet to make a request to the local managed identity for Azureresources endpoint.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 67

You use Azure Table storage to store customer information for an application. The data contains customer details and is partitioned by last name. You need to create a query that returns all customers with the last name Smith. Which code segment should you use? 

A. TableQuery.GenerateFilterCondition("PartitionKey", Equals, "Smith")
B. TableQuery.GenerateFilterCondition("LastName", Equals, "Smith")
C. TableQuery.GenerateFilterCondition("PartitionKey", QueryComparisons.Equal, "Smith")
D. TableQuery.GenerateFilterCondition("LastName", QueryComparisons.Equal, "Smith")

Show Answer

Question # 68

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You develop and deploy an Azure App Service API app to a Windows-hosted deployment slot namedDevelopment. You create additional deployment slots named Testing and Production. You enable auto swapon the Production deployment slot.You need to ensure that scripts run and resources are available before a swap operation occurs.Solution: Update the web.config file to include the applicationInitialization configuration element. Specifycustom initialization actions to run the scripts.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 69

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You develop Azure solutions.You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.You need to obtain an Azure Resource Manager access token.Solution: Use the Reader role-based access control (RBAC) role to authenticate the VM with Azure ResourceManager.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 70

You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic volumes after it is published. You must ensure that the website remains available and responsive while minimizing cost. You need to deploy the website. What should you do? 

A. Deploy the website to an App Service that uses the Shared service tier. Configure the App Service plan to automatically scale when the CPU load is high
B. Deploy the website to a virtual machine. Configure the virtual machine to automatically scale when the CPU load is high.
C. Deploy the website to an App Service that uses the Standard service tier. Configure the App Service plan to automatically scale when the CPU load is high.
D. Deploy the website to a virtual machine. Configure a Scale Set to increase the virtual machine instance count when the CPU load

Show Answer

Question # 71

You develop an Azure web app. You monitor performance of the web app by using Application Insights. You need to ensure the cost for Application Insights does not exceed a preset budget. What should you do?

A. Implement ingestion sampling using the Azure portal.
B. Set a daily cap for the Application Insights instance.
C. Implement adaptive sampling using the Azure portal.
D. Implement adaptive sampling using the Application Insights SDK.
E. Implement ingestion sampling using the Application Insights SDK.

Show Answer

Question # 72

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You develop and deploy an Azure App Service API app to a Windows-hosted deployment slot namedDevelopment. You create additional deployment slots named Testing and Production. You enable auto swapon the Production deployment slot.You need to ensure that scripts run and resources are available before a swap operation occurs.Solution: Enable auto swap for the Testing slot. Deploy the app to the Testing slot.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 73

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.You are developing and deploying several ASP.NET web applications to Azure App Service. You plan to save session state information and HTML output.You must use a storage mechanism with the following requirements:Share session state across all ASP.NET web applications.Support controlled, concurrent access to the same session state data for multiple readers and a single writer.Save full HTTP responses for concurrent requests.You need to store the information.Solution: Enable Application Request Routing (ARR).Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 74

You provide an Azure API Management managed web service lo clients. The back end web service implements HTTP Strict Transport Security (HSTS).Every request to the backend service must include a valid HTTP authorization header.You need to configure the Azure API Management instance with an authentication policy.Which two policies can you uses? Each correct answer presents a complete solutionNOTE: Each correct selection is worth one point.

A. Certificate Authentication
B. Basic Authentication
C. OAuth Client Credential Grant
D. Digest Authentication

Show Answer

Question # 75

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop Azure solutions.You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.You need to obtain an Azure Resource Manager access token.Solution: Use an X.509 certificate to authenticate the VM with Azure Resource Manager.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 76

You are preparing to deploy an ASP.NET Core website to an Azure Web App from a GitHub repository. The website includes static content generated by a script.You plan to use the Azure Web App continuous deployment feature.You need to run the static generation script before the website starts serving traffic.What are two possible ways to achieve this goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. Create a file named .deployment in the root of the repository that calls a script which generates the static content and deploys the website.
B. Add a PreBuild target in the websites csproj project file that runs the static content generation script.
C. Create a file named run.cmd in the folder /run that calls a script which generates the static content and deploys the website.
D. Add the path to the static content generation tool to WEBSITE_RUN_FROM_PACKAGE setting in the host.json file.

Show Answer

Question # 77

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop and deploy an Azure App Service API app to a Windows-hosted deployment slot named Development. You create additional deployment slots named  and . You enable auto swap Testing Production on the Production deployment slot.You need to ensure that scripts run and resources are available before a swap operation occurs.Solution: Disable auto swap. Update the app with a method named statuscheck to run the scripts. Re-enable auto swap and deploy the app to the Production slot.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 78

You are developing a mobile instant messaging app for a company.The mobile app must meet the following requirements:• Support offline data sync.• Update the latest messages during normal sync cycles.You need to implement Offline Data Sync.Which two actions should you perform? Each conn I answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Retrieve records from Offline Data Sync on every call to the PullAsync method.
B. Retrieve records from Offline Data Sync using an Incremental Sync.
C. Push records to Offline Data Sync using an Incremental Sync.
D. Return the updatedAt column from the Mobile Service Backend and implement sorting by using the column.
E. Return the updatedAt column from the Mobile Service Backend and implement sorting by the message id.

Show Answer

Question # 79

You are creating a hazard notification system that has a single signaling server which triggers audio and visual alarms to start and stop.You implement Azure Service Bus to publish alarms. Each alarm controller uses Azure Service Bus to receive alarm signals as part of a transaction. Alarm events must be recorded for audit purposes. Each transaction record must include information about the alarm type that was activated.You need to implement a reply trail auditing solution.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Assign the value of the hazard message SessionID property to the SequenceNumber property.
B. Assign the value of the hazard message SequenceNumber property to the DeliveryCount property. C.
C. Assign the value of the hazard message MessageId property to the DeliveryCount property.
D. Assign the value of the hazard message SessionID property to the ReplyToSessionld property.
E. Assign the value of the hazard message MessageId property to the SequenceNumber property.
F. Assign the value of the hazard message Messageld property to the CorrelationId property.

Show Answer

Question # 80

You are developing a software solution for an autonomous transportation system. The solution uses large data sets and Azure Batch processing to simulate navigation sets for entire fleets of vehicles.You need to create compute nodes for the solution on Azure Batch.What should you do?

A. In the Azure portal, create a Batch account.
B. In a .NET method, call the method: BatchClient.PoolOperations.CreatePool
C. In Python, implement the class: JobAddParameter
D. In Python, implement the class: TaskAddParameter

Show Answer

Question # 81

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.You are developing and deploying several ASP.Net web applications to Azure App Service. You plan to save session state information and HTML output. You must use a storage mechanism with the followingrequirements:•Share session state across all ASP.NET web applications•Support controlled, concurrent access to the same session state data for multiple readers and a single writer•Save full HTTP responses for concurrent requestsYou need to store the information.Proposed Solution: Deploy and configure Azure Cache for Redis. Update the web applications.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 82

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing an Azure Service application that processes queue data when it receives a message from a mobile application. Messages may not be sent to the service consistently.You have the following requirements:Queue size must not grow larger than 80 gigabytes (GB).Use first-in-first-out (FIFO) ordering of messages.Minimize Azure costs.You need to implement the messaging solution.Solution: Use the .Net API to add a message to an Azure Service Bus Queue from the mobile application.Create an Azure Function App that uses an Azure Service Bus Queue trigger.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 83

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.You need to design the process that starts the photo processing.Solution: Convert the Azure Storage account to a BlockBlobStorage storage account.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 84

You are a developer for a SaaS company that offers many web services.All web services for the company must meet the following requirements:Use API Management to access the servicesUse OpenID Connect for authenticationPrevent anonymous usageA recent security audit found that several web services can be called without any authentication.Which API Management policy should you implement?

A. jsonp
B. authentication-certificate
C. check-header
D. validate-jwt

Show Answer

Question # 85

A company is implementing a publish-subscribe (Pub/Sub) messaging component by using Azure Service Bus. You are developing the first subscription application.In the Azure portal you see that messages are being sent to the subscription for each topic. You create and initialize a subscription client object by supplying the correct details, but the subscription application is still not consuming the messages.You need to complete the source code of the subscription clientWhat should you do?

A. await subscriptionClient.CloseAsync();
B. await subscriptionClient.AddRuleAsync(new RuleDescription(RuleDescription.DefaultRuleName, new TrueFilter()));
C. subscriptionClient.RegisterMessageHandler(ProcessMessagesAsync, messageHandlerOptions);
D. subscriptionClient = new SubscriptionClient(ServiceBusConnectionString, TopicName, SubscriptionName);

Show Answer

Question # 86

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data.You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future.You need to implement a solution to receive the device data.Solution: Provision an Azure Event Grid. Configure event filtering to evaluate the device identifier.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 87

You develop a serverless application using several Azure Functions. These functions connect to data from within the code.You want to configure tracing for an Azure Function App project.You need to change configuration settings in the hostjson file.Which tool should you use?

A. Azure portal
B. Azure PowerShell
C. Azure Functions Core Tools (Azure CLI)
D. Visual Studio

Show Answer

Question # 88

You develop an app that allows users to upload photos and videos to Azure storage. The app uses a storage REST API call to upload the media to a blob storage account named Account1. You have blob storage containers named Container1 and Container2. Uploading of videos occurs on an irregular basis.You need to copy specific blobs from Container1 to Container2 in real time when specific requirements are met, excluding backup blob copies.What should you do?

A. Download the blob to a virtual machine and then upload the blob to Container2.
B. Run the Azure PowerShell command Start-AzureStorageBlobCopy.
C. Copy blobs to Container2 by using the Put Blob operation of the Blob Service REST API.
D. Use AzCopy with the Snapshot switch blobs to Container2.

Show Answer

Question # 89

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data.You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future.You need to implement a solution to receive the device data.Solution: Provision an Azure Notification Hub. Register all devices with the hub.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 90

You are developing an internal website for employees to view sensitive data. The website uses Azure Active Directory (AAD) for authentication. You need to implement multifactor authentication for the website.What should you do? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. In Azure AD, create a new conditional access policy.
B. In Azure AD, enable application proxy.
C. Configure the website to use Azure AD B2C.
D. In Azure AD conditional access, enable the baseline policy.
E. Upgrade to Azure AD Premium.

Show Answer

Question # 91

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Margie's Travel is an international travel and bookings management service. The company is expanding into restaurant bookings. You are tasked with implementing Azure Search tor the restaurants listed in their solution.You create the index in Azure Search.You need to import the restaurant data into the Azure Search service by using the Azure Search NET SDK.Solution:1. Create a SearchServiceClient object to connect to the search index.2. Create a DataContainer that contains the documents which must be added.3. Create a DataSource instance and set its Container property to the DataContainer.4. Set the DataSource property of the SearchServiceCIientDoes the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 92

You must implement Application Insights instrumentation capabilities utilizing the Azure Mobile Apps SDK to provide meaningful analysis of user interactions with a mobile app.You need to capture the data required to implement the Usage Analytics feature of Application Insights.Which three data values should you capture? Each correct answer presents part of the solutionNOTE: Each correct selection is worth one point.

A. Trace
B. Session Id
C. Exception
D. User Id
E. Events

Show Answer

Question # 93

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Margie’s Travel is an international travel and bookings management service. The company is expanding into restaurant bookings. You are tasked with implementing Azure Search for the restaurants listed in their solution.You create the index in Azure Search.You need to import the restaurant data into the Azure Search service by using the Azure Search .NET SDK.Solution:1. Create a SearchServiceClient object to connect to the search index.2. Create a DataContainer that contains the documents which must be added.3. Create a DataSource instance and set its Container property to the DataContainer.4. Set the DataSources property of the SearchServiceClientDoes the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 94

You develop a gateway solution for a public facing news API. The news API back end is implemented as a RESTful service and uses an OpenAPI specification.You need to ensure that you can access the news API by using an Azure API Management service instance.Which Azure PowerShell command should you run?

A. Import-AzureRmApiManagementApi –Context $ApiMgmtContext –SpecificationFormat "Swagger" -SpecificationPath $SwaggerPath –Path $Path
B. New-AzureRmApiManagementBackend -Context $ApiMgmtContext -Url $Url -Protocol http
C. New-AzureRmApiManagement –ResourceGroupName $ResourceGroup –Name $Name – Location $Location –Organization $Org –AdminEmail $AdminEmail
D. New-AzureRmApiManagementBackendProxy –Url $ApiUrl

Show Answer

Question # 95

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data.You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future.You need to implement a solution to receive the device data.Solution: Provision an Azure Service Bus. Configure a topic to receive the device data by using a correlation filter.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 96

You are developing a project management service by using ASP.NET. The service hosts conversations, files, to-do lists, and a calendar that users can interact with at any time.The application uses Azure Search for allowing users to search for keywords in the project data.You need to implement code that creates the object which is used to create indexes in the Azure Search service.Which two objects should you use? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. SearchService
B. SearchlndexCIient
C. SearchServiceClient
D. SearchCredentials

Show Answer

Question # 97

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.You plan to assign users one of the following permission levels for the website:admin, normal, and reader. A user’s Azure AD group membership must be used to determine the permission level.You need to configure authorization.Solution:Configure the Azure Web App for the website to allow only authenticated requests and require Azure AD log on.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 98

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing an Azure solution to collect point-of-sale fPOS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data.You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future.You need to implement a solution to receive the device data.Solution: Provision an Azure Event Hub. Configure the machine identifier as the partition key and enable capture.

A. Yes
B. No

Show Answer

Question # 99

You are developing a solution that will use Azure messaging services.You need to ensure that the solution uses a publish-subscribe model and eliminates the need for constant polling.What are two possible ways to achieve the goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. Service Bus
B. Event Hub
C. Event Grid
D. Queue

Show Answer

Question # 100

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Margie’s Travel is an international travel and bookings management service. The company is expanding into restaurant bookings. You are tasked with implementing Azure Search for the restaurants listed in their solution.You create the index in Azure Search.You need to import the restaurant data into the Azure Search service by using the Azure Search NET SDK.Solution:1 Create a SearchlndexClient object to connect to the search index2. Create an IndexBatch that contains the documents which must be added.3. Call the Documents.Index method of the SearchIndexClient and pass the IndexBatch..Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 101

You are developing an application that uses Azure Blob storage.The application must read the transaction logs of all the changes that occur to the blobs and the blob metadata in the storage account for auditing purposes. The changes must be in the order in which they occurred, include only create, update, delete, and copy operations and be retained for compliance reasons.You need to process the transaction logs asynchronously.What should you do?

A. Process all Azure Blob storage events by using Azure Event Grid with a subscriber Azure Function app.
B. Enable the change feed on the storage account and process all changes for available events.
C. Process all Azure Storage Analytics logs for successful blob events.
D. Use the Azure Monitor HTTP Data Collector API and scan the request body for successful blob events.

Show Answer

Question # 102

You have an Azure App Services Web App. Azure SQL Database instance. Azure Storage Account and an Azure Redis Cache instance in a resource group.A developer must be able to publish code to the web app. You must grant the developer the Contribute role to the web app.You need to grant the role.What two commands can you use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. New-AzureRmRoleAssignment
B. az role assignment create
C. az role definition create
D .New-AzureRmRoleDefinition

Show Answer

Question # 103

Your company is developing an Azure API.You need to implement authentication for the Azure API. You have the following requirements:All API calls must be secure.Callers to the API must not send credentials to the API.Which authentication mechanism should you use?

A. Basic
B. Anonymous
C. Managed identity
D. Client certificate

Show Answer

Question # 104

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user’s Azure AD group membership must be used to determine the permission level. You need to configure authorization.Solution:•Create a new Azure AD application’s manifest, set value of the groupMembershipClaims option to All.•In the website, use the value of the groups claim from the JWI for the user to determine permissions.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 105

You develop Azure solutions.You must connect to a No-SQL globally-distributed database by using the .NET API.You need to create an object to configure and execute requests in the database.Which code segment should you use?

A. new Container(EndpointUri, PrimaryKey);
B. new Database(Endpoint, PrimaryKey);
C. new CosmosClient(EndpointUri, PrimaryKey);

Show Answer

Question # 106

Note: This question is part of a series of questions that present the same scenario. Each question in the scries contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.Margie’s Travel is an international travel and bookings management service. The company is expanding into restaurant bookings. You are tasked with implementing Azure Search for the restaurants listed in their solution.You create the index in Azure Search.You need to import the restaurant data into the Azure Search service by using the Azure Search .NET SDK.Solution:1. Create a SearchlndexClient object to connect to the search index.2. Create a DataContainer that contains the documents which must be added.3. Create a DataSource instance and set its Container property to the DataContamer4 Call the Documents.Suggest method of the SearchlndexClient and pass the DataSource.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 107

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.You are developing and deploying several ASP.Net web applications to Azure App Service. You plan to save session state information and HTML output. You must use a storage mechanism with the following requirements:•Share session state across all ASP.NET web applications•Support controlled, concurrent access to the same session state data for multiple readers and a single writer•Save full HTTP responses for concurrent requestsYou need to store the information.Proposed Solution: Add the web applications to Docker containers. Deploy the containers. Deploy the containers to Azure Kubernetes Service (AKS).Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 108

You are writing code to create and run an Azure Batch job.You have created a pool of compute nodes.You need to choose the right class and its method to submit a batch job to the Batch service.Which method should you use?

A. JobOperations.CreateJobO
B. CloudJob.Enable(IEnumerable<BatchClientBehavior>)
C. CloudJob.CommitAsync(IEnumerable<BatchClientBehavior>, CancellationToken)
D. JobOperations.EnableJob(String, IEnumerable<BatchClientBehavior>)
E. JobOperations.EnableJobAsync(String. IEnumerable<BatchClientBehavior>. CancellationToken)

Show Answer

Question # 109

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.You are developing and deploying several ASP.Net web applications to Azure App Service. You plan to save session state information and HTML output. You must use a storage mechanism with the following requirements:•Share session state across all ASP.NET web applications•Support controlled, concurrent access to the same session state data for multiple readers and a single writer•Save full HTTP responses for concurrent requestsYou need to store the information.Proposed Solution: Deploy and configure an Azure Database for PostgreSQL. Update the web applications.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 110

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.You need to design the process that starts the photo processing.Solution: Trigger the photo processing from Blob storage events.Does the solution meet the goal?

A. Yes
B. NO

Show Answer

Question # 111

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Margie’s Travel is an international travel and bookings management service. The company is expanding into restaurant bookings. You are tasked with implementing Azure Search for the restaurants listed in their solution.You create the index in Azure Search.You need to import the restaurant data into the Azure Search service by using the Azure Search .NET SDK.Solution:1. Create a SearchIndexClient object to connect to the search index.2. Create a DataContainer that contains the documents which must be added.3. Create a DataSource instance and set its Container property to the DataContainer.4. Call the Documents.Suggest method of the SearchIndexClient and pass the DataSource.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 112

You are developing a software solution for an autonomous transportation system. The solution uses large data sets and Azure Batch processing to simulate navigation sets for entire fleets of vehicles.You need to create compute nodes for the solution on Azure Batch.What should you do?

A. In Python, implement the class: TaskAddParameter
B. In Python, implement the class: JobAddParameter
C. In the Azure portal, create a Batch account
D. In a .NET method, call the method: BatchClient.PoolOperations.CreateJob

Show Answer

Question # 113

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questionswill not appear in the review screen.You develop a software as a service (SaaS) offering to manage photographs. Users upload photos to a web service which then stores the photos in Azure Storage Blob storage. The storage account type is General-purpose V2.When photos are uploaded, they must be processed to produce and save a mobile-friendly version of the image. The process to produce a mobile-friendly version of the image must start in less than one minute.You need to design the process that starts the photo processing.Solution: Move photo processing to an Azure Function triggered from the blob upload.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 114

You are developing an Azure Cosmos DB solution by using the Azure Cosmos DB SQL API. The data includes millions of documents. Each document may contain hundreds of properties.The properties of the documents do not contain distinct values for partitioning. Azure Cosmos DB must scale individual containers in the database to meet the performance needs of the application by spreading the workload evenly across all partitions over time.You need to select a partition key.Which two partition keys can you use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. a concatenation of multiple property values with a random suffix appended
B. a single property value that does not appear frequently in the documents
C. a hash suffix appended to a property value
D. a value containing the collection name
E. a single property value that appears frequently in the documents

Show Answer

Question # 115

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a solution that will be deployed to an Azure Kubernetes Service (AKS) cluster. The solution will include a custom VNet, Azure Container Registry images, and an Azure Storage account.The solution must allow dynamic creation and management of all Azure resources within the AKS cluster.You need to configure an AKS cluster for use with the Azure APIs.Solution: Enable the Azure Policy Add-on for Kubernetes to connect the Azure Policy service to the GateKeeper admission controller for the AKS cluster. Apply a built-in policy to the cluster.Does the solution meet the goal?

A. Yes
B. No

Show Answer

Question # 116

You are developing an ASP.NET Core Web API web service. The web service uses Azure Application Insights for all telemetry and dependency tracking. The web service reads and writes data to a database other than Microsoft SQL Server.You need to ensure that dependency tracking works for calls to the third-party database.Which two Dependency Telemetry properties should you store in the database? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Telemetry.Context.Operation.Id
B. Tetemetry.Context.Cloud.Rolelnstance
C. Telemetry.Id
D. Telemetry.ContextSession.Id
E. Telemetry.Name

Show Answer

Question # 117

You need to deploy the CheckUserContent Azure function. The solution must meet thesecurity and cost requirements.Which hosting model should you use?

A. Consumption plan
B. Premium plan
C. App Service plan

Show Answer

Question # 118

You need to investigate the http server log output to resolve the issue with the ContentUploadService. Which command should you use first?

A. az webapp log
B. az ams live-output
C. az monitor activity-log
D. az container attach

Show Answer

Question # 119

You need to monitor ContentUploadService accourding to the requirements.Which command should you use?

A. az monitor metrics alert create –n alert –g … - -scopes … - -condition "avg Percentage CPU > 8"
B. az monitor metrics alert create –n alert –g … - -scopes … - -condition "avg Percentage CPU > 800"
C. az monitor metrics alert create –n alert –g … - -scopes … - -condition "CPU Usage > 800"
D. az monitor metrics alert create –n alert –g … - -scopes … - -condition "CPU Usage > 8"

Show Answer

Question # 120

You need to configure the ContentUploadService deployment.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Add the following markup to line CS23: types: Private
B. Add the following markup to line CS24: osType: Windows
C. Add the following markup to line CS24: osType: Linux
D. Add the following markup to line CS23: types: Public

Show Answer