(AZ-204) Case Studies Flashcards

Question 1

Q

Case study -

Background -

You are a developer for Litware Inc., a SaaS company that provides a solution for managing employee expenses. The solution consists of an ASP.NET Core Web

API project that is deployed as an Azure Web App.

Overall architecture -

Employees upload receipts for the system to process. When processing is complete, the employee receives a summary report email that details the processing results. Employees then use a web application to manage their receipts and perform any additional tasks needed for reimbursement.

Receipt processing -

Employees may upload receipts in two ways:

Uploading using an Azure Files mounted folder

Uploading using the web application

Data Storage -

Receipt and employee information is stored in an Azure SQL database.

Documentation -

Employees are provided with a getting started document when they first use the solution. The documentation includes details on supported operating systems for

Azure File upload, and instructions on how to configure the mounted folder.

Solution details -

Users table – (SEE IMAGE)

Web Application - You enable MSI for the Web App and configure the Web App to use the security principal name WebAppIdentity.

Processing - Processing is performed by an Azure Function that uses version 2 of the Azure Function runtime. Once processing is completed, results are stored in Azure Blob

Storage and an Azure SQL database. Then, an email summary is sent to the user with a link to the processing report. The link to the report must remain valid if the email is forwarded to another user.

Logging - Azure Application Insights is used for telemetry and logging in both the processor and the web application. The processor also has TraceWriter logging enabled.

Application Insights must always contain all log messages.

Requirements -

Receipt processing - Concurrent processing of a receipt must be prevented.

Disaster recovery - Regional outage must not impact application availability. All DR operations must not be dependent on application running and must ensure that data in the DR region is up to date.

Security - User's SecurityPin must be stored in such a way that access to the database does not allow the viewing of SecurityPins. The web application is the only system that should have access to SecurityPins.

All certificates and secrets used to secure data must be stored in Azure Key Vault.

You must adhere to the principle of least privilege and provide privileges which are essential to perform the intended function.

All access to Azure Storage and Azure SQL database must use the application's Managed Service Identity (MSI).

Receipt data must always be encrypted at rest.

All data must be protected in transit.

User's expense account number must be visible only to logged in users. All other views of the expense account number should include only the last segment, with the remaining parts obscured.

In the case of a security breach, access to all summary reports must be revoked without impacting other parts of the system.

Issues -

Upload format issue - Employees occasionally report an issue with uploading a receipt using the web application. They report that when they upload a receipt using the Azure File

Share, the receipt does not appear in their profile. When this occurs, they delete the file in the file share and use the web application, which returns a 500 Internal

Server error page.

Capacity issue - During busy periods, employees report long delays between the time they upload the receipt and when it appears in the web application.

Log capacity issue - Developers report that the number of log messages in the trace output for the processor is too high, resulting in lost log messages.

Application code -

Processing.cs – (SEE IMAGE)

Database.cs – (SEE IMAGE)

ReceiptUploader.cs – (SEE IMAGE)

ConfigureSSE.ps1 –(SEE IMAGE)

Question You need to ensure the security policies are met.

What code do you add at line CS07 of ConfigureSSE.ps1?

A. PermissionsToKeys create, encrypt, decrypt

B. PermissionsToCertificates create, encrypt, decrypt

C. PermissionsToCertificates wrapkey, unwrapkey, get

D. PermissionsToKeys wrapkey, unwrapkey, get

Answer

A

B. PermissionsToCertificates create, encrypt, decrypt

Question 2

Q

Case study -

Background -

Overview -

You are a developer for Contoso, Ltd. The company has a social networking website that is developed as a Single Page Application (SPA). The main web application for the social networking website loads user uploaded content from blob storage.

You are developing a solution to monitor uploaded data for inappropriate content. The following process occurs when users upload content by using the SPA:

ג€¢ Messages are sent to ContentUploadService.

ג€¢ Content is processed by ContentAnalysisService.

ג€¢ After processing is complete, the content is posted to the social network or a rejection message is posted in its place.

The ContentAnalysisService is deployed with Azure Container Instances from a private Azure Container Registry named contosoimages.

The solution will use eight CPU cores.

Azure Active Directory -

Contoso, Ltd. uses Azure Active Directory (Azure AD) for both internal and guest accounts.

Requirements -

ContentAnalysisService -

The companyג€™s data science group built ContentAnalysisService which accepts user generated content as a string and returns a probable value for inappropriate content. Any values over a specific threshold must be reviewed by an employee of Contoso, Ltd.

You must create an Azure Function named CheckUserContent to perform the content checks.

Costs -

You must minimize costs for all Azure services.

Manual review -

To review content, the user must authenticate to the website portion of the ContentAnalysisService using their Azure AD credentials. The website is built using

React and all pages and API endpoints require authentication. In order to review content a user must be part of a ContentReviewer role. All completed reviews must include the reviewerג€™s email address for auditing purposes.

High availability -

All services must run in multiple regions. The failure of any service in a region must not impact overall application availability.

Monitoring -

An alert must be raised if the ContentUploadService uses more than 80 percent of available CPU cores.

Security -

You have the following security requirements:

Any web service accessible over the Internet must be protected from cross site scripting attacks.

All websites and services must use SSL from a valid root certificate authority.

Azure Storage access keys must only be stored in memory and must be available only to the service.

All Internal services must only be accessible from internal Virtual Networks (VNets).

All parts of the system must support inbound and outbound traffic restrictions.

All service calls must be authenticated by using Azure AD.

User agreements -

When a user submits content, they must agree to a user agreement. The agreement allows employees of Contoso, Ltd. to review content, store cookies on user devices, and track userג€™s IP addresses.

Information regarding agreements is used by multiple divisions within Contoso, Ltd.

User responses must not be lost and must be available to all parties regardless of individual service uptime. The volume of agreements is expected to be in the millions per hour.

Validation testing -

When a new version of the ContentAnalysisService is available the previous seven days of content must be processed with the new version to verify that the new version does not significantly deviate from the old version.

Issues -

Users of the ContentUploadService report that they occasionally see HTTP 502 responses on specific pages.

Code -

ContentUploadService – (SEE IMAGE)

ApplicationManifest – (SEE IMAGE)

Question You need to monitor ContentUploadService according to the requirements.

Which command should you use?

A. az monitor metrics alert create -n alert -g ג€¦ - -scopes ג€¦ - -condition "avg Percentage CPU > 8"

B. az monitor metrics alert create-n alert -g ג€¦ - -scopes ג€¦ - -condition "avg Percentage CPU > 80"

C. az monitor metrics alert create -n alert -g ג€¦ - -scopes ג€¦ - -condition "CPU Usage > 800"

D. az monitor metrics alert create -n alert -g ג€¦ - -scopes ג€¦ - -condition "CPU Usage > 8"

Answer

A

B. az monitor metrics alert create-n alert -g ג€¦ - -scopes ג€¦ - -condition "avg Percentage CPU > 80"

Question 3

Q

Case study -

Background -

Overview -

You are a developer for Contoso, Ltd. The company has a social networking website that is developed as a Single Page Application (SPA). The main web application for the social networking website loads user uploaded content from blob storage.

You are developing a solution to monitor uploaded data for inappropriate content. The following process occurs when users upload content by using the SPA:

ג€¢ Messages are sent to ContentUploadService.

ג€¢ Content is processed by ContentAnalysisService.

ג€¢ After processing is complete, the content is posted to the social network or a rejection message is posted in its place.

The ContentAnalysisService is deployed with Azure Container Instances from a private Azure Container Registry named contosoimages.

The solution will use eight CPU cores.

Azure Active Directory -

Contoso, Ltd. uses Azure Active Directory (Azure AD) for both internal and guest accounts.

Requirements -

ContentAnalysisService -

The companyג€™s data science group built ContentAnalysisService which accepts user generated content as a string and returns a probable value for inappropriate content. Any values over a specific threshold must be reviewed by an employee of Contoso, Ltd.

You must create an Azure Function named CheckUserContent to perform the content checks.

Costs -

You must minimize costs for all Azure services.

Manual review -

To review content, the user must authenticate to the website portion of the ContentAnalysisService using their Azure AD credentials. The website is built using

React and all pages and API endpoints require authentication. In order to review content a user must be part of a ContentReviewer role. All completed reviews must include the reviewerג€™s email address for auditing purposes.

High availability -

All services must run in multiple regions. The failure of any service in a region must not impact overall application availability.

Monitoring -

An alert must be raised if the ContentUploadService uses more than 80 percent of available CPU cores.

Security -

You have the following security requirements:

Any web service accessible over the Internet must be protected from cross site scripting attacks.

All websites and services must use SSL from a valid root certificate authority.

Azure Storage access keys must only be stored in memory and must be available only to the service.

All Internal services must only be accessible from internal Virtual Networks (VNets).

All parts of the system must support inbound and outbound traffic restrictions.

All service calls must be authenticated by using Azure AD.

User agreements -

When a user submits content, they must agree to a user agreement. The agreement allows employees of Contoso, Ltd. to review content, store cookies on user devices, and track userג€™s IP addresses.

Information regarding agreements is used by multiple divisions within Contoso, Ltd.

User responses must not be lost and must be available to all parties regardless of individual service uptime. The volume of agreements is expected to be in the millions per hour.

Validation testing -

When a new version of the ContentAnalysisService is available the previous seven days of content must be processed with the new version to verify that the new version does not significantly deviate from the old version.

Issues -

Users of the ContentUploadService report that they occasionally see HTTP 502 responses on specific pages.

Code -

ContentUploadService – (SEE IMAGE)

ApplicationManifest – (SEE IMAGE)

Question You need to investigate the http server log output to resolve the issue with the ContentUploadService.

Which command should you use first?

A. az webapp log

B. az ams live-output

C. az monitor activity-log

D. az container attach

Answer

A

C. az monitor activity-log

Question 4

Q

Case study -

Background -

You are a developer for Proseware, Inc. You are developing an application that applies a set of governance policies for Prosewareג€™s internal services, external services, and applications. The application will also provide a shared library for common functionality.

Requirements -

Policy service -

You develop and deploy a stateful ASP.NET Core 2.1 web application named Policy service to an Azure App Service Web App. The application reacts to events from Azure Event Grid and performs policy actions based on those events.

The application must include the Event Grid Event ID field in all Application Insights telemetry.

Policy service must use Application Insights to automatically scale with the number of policy actions that it is performing.

Policies -

Log policy -

All Azure App Service Web Apps must write logs to Azure Blob storage. All log files should be saved to a container named logdrop. Logs must remain in the container for 15 days.

Authentication events -

Authentication events are used to monitor users signing in and signing out. All authentication events must be processed by Policy service. Sign outs must be processed as quickly as possible.

PolicyLib -

You have a shared library named PolicyLib that contains functionality common to all ASP.NET Core web services and applications. The PolicyLib library must:

Exclude non-user actions from Application Insights telemetry.

Provide methods that allow a web service to scale itself.

Ensure that scaling actions do not disrupt application usage.

Other -

Anomaly detection service -

You have an anomaly detection service that analyzes log information for anomalies. It is implemented as an Azure Machine Learning model. The model is deployed as a web service. If an anomaly is detected, an Azure Function that emails administrators is called by using an HTTP WebHook.

Health monitoring -

All web applications and services have health monitoring at the /health service endpoint.

Issues -

Policy loss -

When you deploy Policy service, policies may not be applied if they were in the process of being applied during the deployment.

Performance issue -

When under heavy load, the anomaly detection service undergoes slowdowns and rejects connections.

Notification latency -

Users report that anomaly detection emails can sometimes arrive several minutes after an anomaly is detected.

App code -

EventGridController.cs -

Relevant portions of the app files are shown below. Line numbers are included for reference only and include a two-character prefix that denotes the specific file to which they belong. (SEE IMAGE)

LoginEvent.cs -

Relevant portions of the app files are shown below. Line numbers are included for reference only and include a two-character prefix that denotes the specific file to which they belong. (SEE IMAGE)

Question You need to ensure that the solution can meet the scaling requirements for Policy Service.

Which Azure Application Insights data model should you use?

A. an Application Insights dependency

B. an Application Insights event

C. an Application Insights trace

D. an Application Insights metric

Answer

A

D. an Application Insights metric

Question 5

Q

Case study -

Background -

You are a developer for Litware Inc., a SaaS company that provides a solution for managing employee expenses. The solution consists of an ASP.NET Core Web

API project that is deployed as an Azure Web App.

Overall architecture -

Employees upload receipts for the system to process. When processing is complete, the employee receives a summary report email that details the processing results. Employees then use a web application to manage their receipts and perform any additional tasks needed for reimbursement.

Receipt processing -

Employees may upload receipts in two ways:

Uploading using an Azure Files mounted folder

Uploading using the web application

Data Storage -

Receipt and employee information is stored in an Azure SQL database.

Documentation -

Employees are provided with a getting started document when they first use the solution. The documentation includes details on supported operating systems for

Azure File upload, and instructions on how to configure the mounted folder.

Solution details -

Users table – (SEE IMAGE)

Web Application -

You enable MSI for the Web App and configure the Web App to use the security principal name WebAppIdentity.

Processing -

Processing is performed by an Azure Function that uses version 2 of the Azure Function runtime. Once processing is completed, results are stored in Azure Blob

Storage and an Azure SQL database. Then, an email summary is sent to the user with a link to the processing report. The link to the report must remain valid if the email is forwarded to another user.

Logging -

Azure Application Insights is used for telemetry and logging in both the processor and the web application. The processor also has TraceWriter logging enabled.

Application Insights must always contain all log messages.

Requirements -

Receipt processing -

Concurrent processing of a receipt must be prevented.

Disaster recovery -

Regional outage must not impact application availability. All DR operations must not be dependent on application running and must ensure that data in the DR region is up to date.

Security -

Userג€™s SecurityPin must be stored in such a way that access to the database does not allow the viewing of SecurityPins. The web application is the only system that should have access to SecurityPins.

All certificates and secrets used to secure data must be stored in Azure Key Vault.

You must adhere to the principle of least privilege and provide privileges which are essential to perform the intended function.

All access to Azure Storage and Azure SQL database must use the applicationג€™s Managed Service Identity (MSI).

Receipt data must always be encrypted at rest.

All data must be protected in transit.

Userג€™s expense account number must be visible only to logged in users. All other views of the expense account number should include only the last segment, with the remaining parts obscured.

In the case of a security breach, access to all summary reports must be revoked without impacting other parts of the system.

Issues -

Upload format issue -

Employees occasionally report an issue with uploading a receipt using the web application. They report that when they upload a receipt using the Azure File

Share, the receipt does not appear in their profile. When this occurs, they delete the file in the file share and use the web application, which returns a 500 Internal

Server error page.

Capacity issue -

During busy periods, employees report long delays between the time they upload the receipt and when it appears in the web application.

Log capacity issue -

Developers report that the number of log messages in the trace output for the processor is too high, resulting in lost log messages.

Application code -

Processing.cs – (SEE IMAGE) Database.cs – (SEE IMAGE)

ReceiptUploader.cs –(SEE IMAGE)

ConfigureSSE.ps1 –(SEE IMAGE)

Question You need to ensure receipt processing occurs correctly.

What should you do?

A. Use blob properties to prevent concurrency problems

B. Use blob SnapshotTime to prevent concurrency problems

C. Use blob metadata to prevent concurrency problems

D. Use blob leases to prevent concurrency problems

Answer

A

D. Use blob leases to prevent concurrency problems

<a>https://www.examtopics.com/discussions/microsoft/view/47073-exam-az-204-topic-15-question-1-discussion/</a>

Question 6

Q

Case study -

Background -

You are a developer for Litware Inc., a SaaS company that provides a solution for managing employee expenses. The solution consists of an ASP.NET Core Web

API project that is deployed as an Azure Web App.

Overall architecture -

Employees upload receipts for the system to process. When processing is complete, the employee receives a summary report email that details the processing results. Employees then use a web application to manage their receipts and perform any additional tasks needed for reimbursement.

Receipt processing -

Employees may upload receipts in two ways:

Uploading using an Azure Files mounted folder

Uploading using the web application

Data Storage -

Receipt and employee information is stored in an Azure SQL database.

Documentation -

Employees are provided with a getting started document when they first use the solution. The documentation includes details on supported operating systems for

Azure File upload, and instructions on how to configure the mounted folder.

Solution details -

Users table – (SEE IMAGE)

Web Application -

You enable MSI for the Web App and configure the Web App to use the security principal name WebAppIdentity.

Processing -

Processing is performed by an Azure Function that uses version 2 of the Azure Function runtime. Once processing is completed, results are stored in Azure Blob

Storage and an Azure SQL database. Then, an email summary is sent to the user with a link to the processing report. The link to the report must remain valid if the email is forwarded to another user.

Logging -

Azure Application Insights is used for telemetry and logging in both the processor and the web application. The processor also has TraceWriter logging enabled.

Application Insights must always contain all log messages.

Requirements -

Receipt processing -

Concurrent processing of a receipt must be prevented.

Disaster recovery -

Regional outage must not impact application availability. All DR operations must not be dependent on application running and must ensure that data in the DR region is up to date.

Security -

Userג€™s SecurityPin must be stored in such a way that access to the database does not allow the viewing of SecurityPins. The web application is the only system that should have access to SecurityPins.

All certificates and secrets used to secure data must be stored in Azure Key Vault.

You must adhere to the principle of least privilege and provide privileges which are essential to perform the intended function.

All access to Azure Storage and Azure SQL database must use the applicationג€™s Managed Service Identity (MSI).

Receipt data must always be encrypted at rest.

All data must be protected in transit.

Userג€™s expense account number must be visible only to logged in users. All other views of the expense account number should include only the last segment, with the remaining parts obscured.

In the case of a security breach, access to all summary reports must be revoked without impacting other parts of the system.

Issues -

Upload format issue -

Employees occasionally report an issue with uploading a receipt using the web application. They report that when they upload a receipt using the Azure File

Share, the receipt does not appear in their profile. When this occurs, they delete the file in the file share and use the web application, which returns a 500 Internal

Server error page.

Capacity issue -

During busy periods, employees report long delays between the time they upload the receipt and when it appears in the web application.

Log capacity issue -

Developers report that the number of log messages in the trace output for the processor is too high, resulting in lost log messages.

Application code -

Processing.cs – (SEE IMAGE)

Database.cs – (SEE IMAGE)

ReceiptUploader.cs – (SEE IMAGE)

ConfigureSSE.ps1 – (SEE IMAGE)

Question You need to resolve the capacity issue.

What should you do?

A. Convert the trigger on the Azure Function to an Azure Blob storage trigger

B. Ensure that the consumption plan is configured correctly to allow scaling

C. Move the Azure Function to a dedicated App Service Plan

D. Update the loop starting on line PC09 to process items in parallel

Answer

A

D. Update the loop starting on line PC09 to process items in parallel

Question 7

Q

Case study -

Background -

You are a developer for Litware Inc., a SaaS company that provides a solution for managing employee expenses. The solution consists of an ASP.NET Core Web

API project that is deployed as an Azure Web App.

Overall architecture -

Employees upload receipts for the system to process. When processing is complete, the employee receives a summary report email that details the processing results. Employees then use a web application to manage their receipts and perform any additional tasks needed for reimbursement.

Receipt processing -

Employees may upload receipts in two ways:

Uploading using an Azure Files mounted folder

Uploading using the web application

Data Storage -

Receipt and employee information is stored in an Azure SQL database.

Documentation -

Employees are provided with a getting started document when they first use the solution. The documentation includes details on supported operating systems for

Azure File upload, and instructions on how to configure the mounted folder.

Solution details -

Users table – (SEE IMAGE)

Web Application -

You enable MSI for the Web App and configure the Web App to use the security principal name WebAppIdentity.

Processing -

Processing is performed by an Azure Function that uses version 2 of the Azure Function runtime. Once processing is completed, results are stored in Azure Blob

Storage and an Azure SQL database. Then, an email summary is sent to the user with a link to the processing report. The link to the report must remain valid if the email is forwarded to another user.

Logging -

Azure Application Insights is used for telemetry and logging in both the processor and the web application. The processor also has TraceWriter logging enabled.

Application Insights must always contain all log messages.

Requirements -

Receipt processing -

Concurrent processing of a receipt must be prevented.

Disaster recovery -

Regional outage must not impact application availability. All DR operations must not be dependent on application running and must ensure that data in the DR region is up to date.

Security -

Userג€™s SecurityPin must be stored in such a way that access to the database does not allow the viewing of SecurityPins. The web application is the only system that should have access to SecurityPins.

All certificates and secrets used to secure data must be stored in Azure Key Vault.

You must adhere to the principle of least privilege and provide privileges which are essential to perform the intended function.

All access to Azure Storage and Azure SQL database must use the applicationג€™s Managed Service Identity (MSI).

Receipt data must always be encrypted at rest.

All data must be protected in transit.

Userג€™s expense account number must be visible only to logged in users. All other views of the expense account number should include only the last segment, with the remaining parts obscured.

In the case of a security breach, access to all summary reports must be revoked without impacting other parts of the system.

Issues -

Upload format issue -

Employees occasionally report an issue with uploading a receipt using the web application. They report that when they upload a receipt using the Azure File

Share, the receipt does not appear in their profile. When this occurs, they delete the file in the file share and use the web application, which returns a 500 Internal

Server error page.

Capacity issue -

During busy periods, employees report long delays between the time they upload the receipt and when it appears in the web application.

Log capacity issue -

Developers report that the number of log messages in the trace output for the processor is too high, resulting in lost log messages.

Application code -

Processing.cs – (SEE IMAGE)

Database.cs – (SEE IMAGE)

ReceiptUploader.cs –(SEE IMAGE)

ConfigureSSE.ps1 – (SEE IMAGE)

Question You need to resolve the log capacity issue.

What should you do?

A. Create an Application Insights Telemetry Filter

B. Change the minimum log level in the host.json file for the function

C. Implement Application Insights Sampling

D. Set a LogCategoryFilter during startup

Answer

A

C. Implement Application Insights Sampling

Question 8

Q

Case study -

LabelMaker app -

Coho Winery produces, bottles, and distributes a variety of wines globally. You are a developer implementing highly scalable and resilient applications to support online order processing by using Azure solutions.

Coho Winery has a LabelMaker application that prints labels for wine bottles. The application sends data to several printers. The application consists of five modules that run independently on virtual machines (VMs). Coho Winery plans to move the application to Azure and continue to support label creation.

External partners send data to the LabelMaker application to include artwork and text for custom label designs.

Requirements. Data -

You identify the following requirements for data management and manipulation:

Order data is stored as nonrelational JSON and must be queried using SQL.

Changes to the Order data must reflect immediately across all partitions. All reads to the Order data must fetch the most recent writes.

Requirements. Security -

You have the following security requirements:

Users of Coho Winery applications must be able to provide access to documents, resources, and applications to external partners.

External partners must use their own credentials and authenticate with their organizationג€™s identity management solution.

External partner logins must be audited monthly for application use by a user account administrator to maintain company compliance.

Storage of e-commerce application settings must be maintained in Azure Key Vault.

E-commerce application sign-ins must be secured by using Azure App Service authentication and Azure Active Directory (AAD).

Conditional access policies must be applied at the application level to protect company content.

The LabelMaker application must be secured by using an AAD account that has full access to all namespaces of the Azure Kubernetes Service (AKS) cluster.

Requirements. LabelMaker app -

Azure Monitor Container Health must be used to monitor the performance of workloads that are deployed to Kubernetes environments and hosted on Azure

Kubernetes Service (AKS).

You must use Azure Container Registry to publish images that support the AKS deployment.

Architecture – (SEE IMAGE)

Issues -

Calls to the Printer API App fail periodically due to printer communication timeouts.

Printer communication timeouts occur after 10 seconds. The label printer must only receive up to 5 attempts within one minute.

The order workflow fails to run upon initial deployment to Azure.

Order.json -

Relevant portions of the app files are shown below. Line numbers are included for reference only.

This JSON file contains a representation of the data for an order that includes a single item. (SEE IMAGE)

Question You need to troubleshoot the order workflow.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Review the API connections.

B. Review the activity log.

C. Review the run history.

D. Review the trigger history.

Answer

A

C. Review the run history.

D. Review the trigger history.

Question 9

Q

Case study -

Background -

You are a developer for Proseware, Inc. You are developing an application that applies a set of governance policies for Prosewareג€™s internal services, external services, and applications. The application will also provide a shared library for common functionality.

Requirements -

Policy service -

You develop and deploy a stateful ASP.NET Core 2.1 web application named Policy service to an Azure App Service Web App. The application reacts to events from Azure Event Grid and performs policy actions based on those events.

The application must include the Event Grid Event ID field in all Application Insights telemetry.

Policy service must use Application Insights to automatically scale with the number of policy actions that it is performing.

Policies -

Log policy -

All Azure App Service Web Apps must write logs to Azure Blob storage. All log files should be saved to a container named logdrop. Logs must remain in the container for 15 days.

Authentication events -

Authentication events are used to monitor users signing in and signing out. All authentication events must be processed by Policy service. Sign outs must be processed as quickly as possible.

PolicyLib -

You have a shared library named PolicyLib that contains functionality common to all ASP.NET Core web services and applications. The PolicyLib library must:

Exclude non-user actions from Application Insights telemetry.

Provide methods that allow a web service to scale itself.

Ensure that scaling actions do not disrupt application usage.

Other -

Anomaly detection service -

You have an anomaly detection service that analyzes log information for anomalies. It is implemented as an Azure Machine Learning model. The model is deployed as a web service. If an anomaly is detected, an Azure Function that emails administrators is called by using an HTTP WebHook.

Health monitoring -

All web applications and services have health monitoring at the /health service endpoint.

Issues -

Policy loss -

When you deploy Policy service, policies may not be applied if they were in the process of being applied during the deployment.

Performance issue -

When under heavy load, the anomaly detection service undergoes slowdowns and rejects connections.

Notification latency -

Users report that anomaly detection emails can sometimes arrive several minutes after an anomaly is detected.

App code -

EventGridController.cs -

Relevant portions of the app files are shown below. Line numbers are included for reference only and include a two-character prefix that denotes the specific file to which they belong. (SEE IMAGE)

LoginEvent.cs -

Relevant portions of the app files are shown below. Line numbers are included for reference only and include a two-character prefix that denotes the specific file to which they belong. (SEE IMAGE)

Question You need to resolve a notification latency issue.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Set Always On to true.

B. Ensure that the Azure Function is using an App Service plan.

C. Set Always On to false.

D. Ensure that the Azure Function is set to use a consumption plan.

Answer

A

A. Set Always On to true.

B. Ensure that the Azure Function is using an App Service plan.

Question 10

Q

. Case study -

Background -

Overview -

You are a developer for Contoso, Ltd. The company has a social networking website that is developed as a Single Page Application (SPA). The main web application for the social networking website loads user uploaded content from blob storage.

You are developing a solution to monitor uploaded data for inappropriate content. The following process occurs when users upload content by using the SPA:

Messages are sent to ContentUploadService.

Content is processed by ContentAnalysisService.

After processing is complete, the content is posted to the social network or a rejection message is posted in its place.

The ContentAnalysisService is deployed with Azure Container Instances from a private Azure Container Registry named contosoimages.

The solution will use eight CPU cores.

Azure Active Directory -

Contoso, Ltd. uses Azure Active Directory (Azure AD) for both internal and guest accounts.

Requirements -

ContentAnalysisService -

The companyג€™s data science group built ContentAnalysisService which accepts user generated content as a string and returns a probable value for inappropriate content. Any values over a specific threshold must be reviewed by an employee of Contoso, Ltd.

You must create an Azure Function named CheckUserContent to perform the content checks.

Costs -

You must minimize costs for all Azure services.

Manual review -

To review content, the user must authenticate to the website portion of the ContentAnalysisService using their Azure AD credentials. The website is built using

React and all pages and API endpoints require authentication. In order to review content a user must be part of a ContentReviewer role. All completed reviews must include the reviewerג€™s email address for auditing purposes.

High availability -

All services must run in multiple regions. The failure of any service in a region must not impact overall application availability.

Monitoring -

An alert must be raised if the ContentUploadService uses more than 80 percent of available CPU cores.

Security -

You have the following security requirements:

Any web service accessible over the Internet must be protected from cross site scripting attacks.

All websites and services must use SSL from a valid root certificate authority.

Azure Storage access keys must only be stored in memory and must be available only to the service.

All Internal services must only be accessible from internal Virtual Networks (VNets).

All parts of the system must support inbound and outbound traffic restrictions.

All service calls must be authenticated by using Azure AD.

User agreements -

When a user submits content, they must agree to a user agreement. The agreement allows employees of Contoso, Ltd. to review content, store cookies on user devices, and track userג€™s IP addresses.

Information regarding agreements is used by multiple divisions within Contoso, Ltd.

User responses must not be lost and must be available to all parties regardless of individual service uptime. The volume of agreements is expected to be in the millions per hour.

Validation testing -

When a new version of the ContentAnalysisService is available the previous seven days of content must be processed with the new version to verify that the new version does not significantly deviate from the old version.

Issues -

Users of the ContentUploadService report that they occasionally see HTTP 502 responses on specific pages.

Code -

ContentUploadService – (SEE IMAGE)

ApplicationManifest – (SEE IMAGE)

Question You need to deploy the CheckUserContent Azure Function. The solution must meet the security and cost requirements.

Which hosting model should you use?

A. Premium plan

B. App Service plan

C. Consumption plan

Answer

A

B. App Service plan

Question 11

Q

Case study -

LabelMaker app -

Coho Winery produces, bottles, and distributes a variety of wines globally. You are a developer implementing highly scalable and resilient applications to support online order processing by using Azure solutions.

Coho Winery has a LabelMaker application that prints labels for wine bottles. The application sends data to several printers. The application consists of five modules that run independently on virtual machines (VMs). Coho Winery plans to move the application to Azure and continue to support label creation.

External partners send data to the LabelMaker application to include artwork and text for custom label designs.

Requirements. Data -

You identify the following requirements for data management and manipulation:

Order data is stored as nonrelational JSON and must be queried using SQL.

Changes to the Order data must reflect immediately across all partitions. All reads to the Order data must fetch the most recent writes.

Requirements. Security -

You have the following security requirements:

Users of Coho Winery applications must be able to provide access to documents, resources, and applications to external partners.

External partners must use their own credentials and authenticate with their organizationג€™s identity management solution.

External partner logins must be audited monthly for application use by a user account administrator to maintain company compliance.

Storage of e-commerce application settings must be maintained in Azure Key Vault.

E-commerce application sign-ins must be secured by using Azure App Service authentication and Azure Active Directory (AAD).

Conditional access policies must be applied at the application level to protect company content.

The LabelMaker application must be secured by using an AAD account that has full access to all namespaces of the Azure Kubernetes Service (AKS) cluster.

Requirements. LabelMaker app -

Azure Monitor Container Health must be used to monitor the performance of workloads that are deployed to Kubernetes environments and hosted on Azure

Kubernetes Service (AKS).

You must use Azure Container Registry to publish images that support the AKS deployment.

Architecture – (SEE IMAGE)

Issues -

Calls to the Printer API App fail periodically due to printer communication timeouts.

Printer communication timeouts occur after 10 seconds. The label printer must only receive up to 5 attempts within one minute.

The order workflow fails to run upon initial deployment to Azure.

Order.json -

Relevant portions of the app files are shown below. Line numbers are included for reference only.

This JSON file contains a representation of the data for an order that includes a single item.

Order.json – (SEE IMAGE)

Question You need to access data from the user claim object in the e-commerce web app.

What should you do first?

A. Write custom code to make a Microsoft Graph API call from the e-commerce web app.

B. Assign the Contributor RBAC role to the e-commerce web app by using the Resource Manager create role assignment API.

C. Update the e-commerce web app to read the HTTP request header values.

D. Using the Azure CLI, enable Cross-origin resource sharing (CORS) from the e-commerce checkout API to the e-commerce web app.

Answer

A

C. Update the e-commerce web app to read the HTTP request header values.

Question 12

Q

Case study –

Background -

Overview -

You are a developer for Contoso, Ltd. The company has a social networking website that is developed as a Single Page Application (SPA). The main web application for the social networking website loads user uploaded content from blob storage.

You are developing a solution to monitor uploaded data for inappropriate content. The following process occurs when users upload content by using the SPA:

ג€¢ Messages are sent to ContentUploadService.

ג€¢ Content is processed by ContentAnalysisService.

ג€¢ After processing is complete, the content is posted to the social network or a rejection message is posted in its place.

The ContentAnalysisService is deployed with Azure Container Instances from a private Azure Container Registry named contosoimages.

The solution will use eight CPU cores.

Azure Active Directory -

Contoso, Ltd. uses Azure Active Directory (Azure AD) for both internal and guest accounts.

Requirements -

ContentAnalysisService -

The companyג€™s data science group built ContentAnalysisService which accepts user generated content as a string and returns a probable value for inappropriate content. Any values over a specific threshold must be reviewed by an employee of Contoso, Ltd.

You must create an Azure Function named CheckUserContent to perform the content checks.

Costs -

You must minimize costs for all Azure services.

Manual review -

To review content, the user must authenticate to the website portion of the ContentAnalysisService using their Azure AD credentials. The website is built using

React and all pages and API endpoints require authentication. In order to review content a user must be part of a ContentReviewer role. All completed reviews must include the reviewerג€™s email address for auditing purposes.

High availability -

All services must run in multiple regions. The failure of any service in a region must not impact overall application availability.

Monitoring -

An alert must be raised if the ContentUploadService uses more than 80 percent of available CPU cores.

Security -

You have the following security requirements:

Any web service accessible over the Internet must be protected from cross site scripting attacks.

All websites and services must use SSL from a valid root certificate authority.

Azure Storage access keys must only be stored in memory and must be available only to the service.

All Internal services must only be accessible from internal Virtual Networks (VNets).

All parts of the system must support inbound and outbound traffic restrictions.

All service calls must be authenticated by using Azure AD.

User agreements -

When a user submits content, they must agree to a user agreement. The agreement allows employees of Contoso, Ltd. to review content, store cookies on user devices, and track userג€™s IP addresses.

Information regarding agreements is used by multiple divisions within Contoso, Ltd.

User responses must not be lost and must be available to all parties regardless of individual service uptime. The volume of agreements is expected to be in the millions per hour.

Validation testing -

When a new version of the ContentAnalysisService is available the previous seven days of content must be processed with the new version to verify that the new version does not significantly deviate from the old version.

Issues -

Users of the ContentUploadService report that they occasionally see HTTP 502 responses on specific pages.

Code -

ContentUploadService – (SEE IMAGE)

ApplicationManifest – (SEE IMAGE)

Question You need to configure the ContentUploadService deployment.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Add the following markup to line CS23: type: Private

B. Add the following markup to line CS24: osType: Windows

C. Add the following markup to line CS24: osType: Linux

D. Add the following markup to line CS23: type: Public

Answer

A

A. Add the following markup to line CS23: type: Private

C. Add the following markup to line CS24: osType: Linux

<a>https://www.examtopics.com/discussions/microsoft/view/21545-exam-az-204-topic-19-question-1-discussion/</a>

Question 13

Q

Case study -

Background -

Overview -

You are a developer for Contoso, Ltd. The company has a social networking website that is developed as a Single Page Application (SPA). The main web application for the social networking website loads user uploaded content from blob storage.

You are developing a solution to monitor uploaded data for inappropriate content. The following process occurs when users upload content by using the SPA:

ג€¢ Messages are sent to ContentUploadService.

ג€¢ Content is processed by ContentAnalysisService.

ג€¢ After processing is complete, the content is posted to the social network or a rejection message is posted in its place.

The ContentAnalysisService is deployed with Azure Container Instances from a private Azure Container Registry named contosoimages.

The solution will use eight CPU cores.

Azure Active Directory -

Contoso, Ltd. uses Azure Active Directory (Azure AD) for both internal and guest accounts.

Requirements -

ContentAnalysisService -

The companyג€™s data science group built ContentAnalysisService which accepts user generated content as a string and returns a probable value for inappropriate content. Any values over a specific threshold must be reviewed by an employee of Contoso, Ltd.

You must create an Azure Function named CheckUserContent to perform the content checks.

Costs -

You must minimize costs for all Azure services.

Manual review -

To review content, the user must authenticate to the website portion of the ContentAnalysisService using their Azure AD credentials. The website is built using

React and all pages and API endpoints require authentication. In order to review content a user must be part of a ContentReviewer role. All completed reviews must include the reviewerג€™s email address for auditing purposes.

High availability -

All services must run in multiple regions. The failure of any service in a region must not impact overall application availability.

Monitoring -

An alert must be raised if the ContentUploadService uses more than 80 percent of available CPU cores.

Security -

You have the following security requirements:

Any web service accessible over the Internet must be protected from cross site scripting attacks.

All websites and services must use SSL from a valid root certificate authority.

Azure Storage access keys must only be stored in memory and must be available only to the service.

All Internal services must only be accessible from internal Virtual Networks (VNets).

All parts of the system must support inbound and outbound traffic restrictions.

All service calls must be authenticated by using Azure AD.

User agreements -

When a user submits content, they must agree to a user agreement. The agreement allows employees of Contoso, Ltd. to review content, store cookies on user devices, and track userג€™s IP addresses.

Information regarding agreements is used by multiple divisions within Contoso, Ltd.

User responses must not be lost and must be available to all parties regardless of individual service uptime. The volume of agreements is expected to be in the millions per hour.

Validation testing -

When a new version of the ContentAnalysisService is available the previous seven days of content must be processed with the new version to verify that the new version does not significantly deviate from the old version.

Issues -

Users of the ContentUploadService report that they occasionally see HTTP 502 responses on specific pages.

Code -

ContentUploadService – (SEE IMAGE)

ApplicationManifest – (SEE IMAGE)

Question You need to store the user agreements.

Where should you store the agreement after it is completed?

A. Azure Storage queue

B. Azure Event Hub

C. Azure Service Bus topic

D. Azure Event Grid topic

Answer

A

B. Azure Event Hub

Brainscape's Knowledge GenomeTM

(AZ-204) Case Studies Flashcards

Brainscape's Knowledge Genome^TM