(AZ-204 topic) Uncategorized Flashcards

Question 1

Q

What is a distributed denial of service attack?

Answer

A

An attack where lots of computers targeting a single server or website with the aim of making it stop.

Question 2

Q

What is the purpose of having defense in depth?

Answer

A

To provide several layers of defense for your resources, data and assets. The defense in depth concept stipulates that you need more than just one security measure for your data and resources, such as firewalls, network gateways, and physical measures.

Question 3

Q

What does Microsoft Defender for Identity (formerly Azure Advanced Threat Protection) do?

Answer

A

Helps you monitor user behavior in your on-premises and cloud environments. Microsoft Defender for Identity (formerly Azure Advanced Threat Protection) helps you detect and investigate security incidents across your Azure accounts both on-premises and in the cloud. It monitors users, devices and resources in terms of their behavior. If any behavior is out of the ordinary an alarm can be raised.

Question 4

Q

There is a potential threat to your Azure infrastructure from an outside attacker. Which service is best for detecting the threat and taking action?

Answer

A

Azure Sentinel. Azure Sentinel SIEM will collate, aggregate, and analyze data from multiple Azure services to detect any unusual behavior or patterns. You can then take action on the information.

Question 5

Q

What are features of role based access control?

Answer

A

Define which actions users can take on a resource. Define which users have access to specific Azure resources. Role-based access control (RBAC) helps you manage who has access to Azure resources, what they can do with those resources, and what areas they have access to. You have very detailed control of resource actions and you assign roles to users to let them take those actions. You can define as many roles as you wish in RBAC.

Question 6

Q

What are the Microsoft services that can tell you more about trust in the Azure platform?

Answer

A

Service Trust Portal and Trust Center. You can use the Trust Center to find documentation of all the various compliance standards Azure is adhering to. You can use the Service Trust Portal to read the audit reports for any part of Microsoft's products, including Azure.

Question 7

Q

What is the service for managing privacy on Azure called?

Answer

A

There isn't a single service, as privacy is part of every service on Azure. Privacy is a core component of each and every Azure service, so there isn't a single service. All products are built with privacy as a first class citizen.

Question 8

Q

What are types of locks in Azure?

Answer

A

Delete. Read-only. Locks can be put on resources to make sure there aren't any accidental or nefarious actions taken on them. The two types of locks are delete, which means you can't delete the resource, and "read only", which means you can't make any changes to the resources.

Question 9

Q

Which companies must comply with General Data Protection Regulation (GDPR) requirements?

Answer

A

Companies of any country must adhere to General Data Protection Regulation (GDPR) if their users and customers are located in the European Union. Any company that wishes to interact with users located in the European Union must adhere to the many GDPR rules around privacy. The Microsoft Trust Center has more information on how to do this within Azure.

Question 10

Q

What is a security policy in Security Center?

Answer

A

A security policy is a set of rules that Azure can use to evaluate if your configuration of a service is valid. A security policy defines the desired configuration of your workloads and helps ensure you're complying with the security requirements of your company or regulators.

Question 11

Q

What is special about the China region in Azure?

Answer

A

All customer data is guaranteed to be geographically within China. All Azure services are physically located inside China. You are guaranteed to be compliant with all Chinese data and IT regulations. Services in the China region are hosted on a physically isolated instance of Azure. It is operated by 21Vianet, a company based in China. All of your customer data is kept within China, and is bound by Chinese regulations.

Question 12

Q

What are valid use cases to use Azure Service Health in your architecture?

Answer

A

To track incidents with your services in real time and get a report afterwards. To setup custom alerts to notify you of any outages, planned or otherwise. Azure Service Health notifies you about Azure service incidents and planned maintenance. You can use this information to take appropriate actions to limit any downtime. Azure Service Health can't receive data from any of your applications or third party services. It is only for Azure.

Question 13

Q

Which Azure calculator would you use to figure out monthly costs for Azure services?

Answer

A

Azure Pricing Calculator. The Pricing Calculator for Azure is a comprehensive tool that you can use to estimate any combination of services on Azure. The Total Cost of Ownership Calculator can indicate the savings achieved by moving your on-premises services to Azure. The Azure Portal can only estimate costs of existing services that you have in your account.

Question 14

Q

To limit spending on Azure, what is a recommended best practice?

Answer

A

Use Azure spending limits on resources and services. Azure spending limits are the recommended way to manage the total spend on your Azure subscription. When your usage results in charges that exhaust your spending limit, the services that you deployed are disabled for the rest of that billing period.

Question 15

Q

How are Azure subscriptions related to pricing?

Answer

A

The billing of Azure resources in your account is generated at the subscription scope. A subscription represents a grouping of Azure resources. An invoice is generated at the subscription scope.

Question 16

Q

Which factors have an influence on the cost of using products and services on Azure?

Answer

A

The location of the service or resource. Resource size. How much bandwidth you will use. The factors that influence price of a service on Azure are resource size, resource location and the amount of bandwidth being used. How much you use a resource or the age of it do not influence the price.

Question 17

Q

What features are in Azure Cost Management?

Answer

A

Visualize future costs for your Azure account. Visualize current costs for your Azure account. Azure Cost Management is a part of the Azure Portal that can visualize your current and future costs. It also includes tools for financial governance to make sure you don't get unexpected costs from incorrect use of Azure resources. There are no discounts, gamification, or automatic shutdown services.

Question 18

Q

What is the response time for Severity B on the Professional Direct Support Plan?

Answer

A

2 hours. You may think this question is needlessly specific, but Microsoft love to test students on the support matrix and you will likely get a question like this on the exam. Memorize the entire support matrix. No arguing. Do it now.

Question 19

Q

How do you submit a support ticket?

Answer

A

Through the Azure Portal. A support ticket is submitted through the Support section of the Azure Portal. Depending on your Support Level, you will have various options to submit billing, technical and other kinds of support tickets.

Question 20

Q

What kind of questions and answers can you find in the Azure Knowledge Center?

Answer

A

Common questions asked when first starting to use Azure. The Knowledge Center provides answers to a range of the most common questions asked. The focus is in particular on foundational answers, or answers to popular questions that are seen again and again. Users can't submit questions nor answers, and there are few to no expert level articles.

Question 21

Q

What are valid support channels for Azure?

Answer

A

Technical forums. Social Media. Azure documentation. The Azure documentation, technical forums and official Azure social media accounts are all good ways to interact with experts and Azure professionals. There is no regional standard phone support. Pressing all the buttons may be fun, but you might also pay for that new NS48 v3 virtual machine at $6.8 per hour.

Question 22

Q

How do you sign up for a service level agreement with Azure?

Answer

A

Service level agreements are included with every Azure paid service automatically. Service Level Agreements are implicit for all Azure paid services. You get an SLA included with every subscription level and support level. In general, there are no SLAs associated with free products on Azure.

Question 23

Q

What is the response time for Severity C on the Professional Direct Support Plan?

Answer

A

4 hours. You may think this question is needlessly specific, but Microsoft love to test students on the support matrix and you will likely get a question like this on the exam. Memorize the entire support matrix. No arguing. Do it now.

Question 24

Q

What is the response time for Severity A on the Professional Direct Support Plan?

Answer

A

1 hours. You may think this question is needlessly specific, but Microsoft love to test students on the support matrix and you will likely get a question like this on the exam. Memorize the entire support matrix. No arguing. Do it now.

Question 25

Q

What is the response time for Severity A on the Developer Support Plan?

Answer

A

There is no response for Severity A on the Developer Support Plan.

Question 26

Q

What is the response time for Severity B on the Developer Support Plan?

Answer

A

There is no response for Severity B on the Developer Support Plan.

Question 27

Q

What is the response time for Severity C on the Developer Support Plan?

Answer

A

8 hours. You may think this question is needlessly specific, but Microsoft love to test students on the support matrix and you will likely get a question like this on the exam. Memorize the entire support matrix. No arguing. Do it now.

Question 28

Q

What is the response time for Severity A on the Standard Support Plan?

Answer

A

1 hours. You may think this question is needlessly specific, but Microsoft love to test students on the support matrix and you will likely get a question like this on the exam. Memorize the entire support matrix. No arguing. Do it now.

Question 29

Q

What is the response time for Severity B on the Standard Support Plan?

Answer

A

4 hours. You may think this question is needlessly specific, but Microsoft love to test students on the support matrix and you will likely get a question like this on the exam. Memorize the entire support matrix. No arguing. Do it now.

Question 30

Q

What is the response time for Severity C on the Standard Support Plan?

Answer

A

8 hours. You may think this question is needlessly specific, but Microsoft love to test students on the support matrix and you will likely get a question like this on the exam. Memorize the entire support matrix. No arguing. Do it now.

Question 31

Q

What is the response time for Severity A on the Premier Support Plan?

Answer

A

1 hours. You may think this question is needlessly specific, but Microsoft love to test students on the support matrix and you will likely get a question like this on the exam. Memorize the entire support matrix. No arguing. Do it now.

Question 32

Q

What is the response time for Severity B on the Premier Support Plan?

Answer

A

2 hours. You may think this question is needlessly specific, but Microsoft love to test students on the support matrix and you will likely get a question like this on the exam. Memorize the entire support matrix. No arguing. Do it now.

Question 33

Q

What is the response time for Severity C on the Premier Support Plan?

Answer

A

4 hours. You may think this question is needlessly specific, but Microsoft love to test students on the support matrix and you will likely get a question like this on the exam. Memorize the entire support matrix. No arguing. Do it now.

Question 34

Q

You are in charge of an Azure database that has valuable and sensitive data stored in it. You need a third party client to access this data. How would you provide access in the most secure way?

Answer

A

Use Azure Key Vault to protect and share the password without revealing it. Azure Key Vault is used to protect secrets and passwords. You can share these secrets and passwords with third parties without revealing them. This allows access to your resources securely to third parties.

Question 35

Q

Regarding this diagram(https://raw.githubusercontent.com/ACloudGuru-Resources/az900_prac_images/main/az900_security_key_vault_small.jpg), which service might you place at 1 to protect the connection credentials from the web service to the SQL database, but also allow access to third party applications? -Azure Sentinel -Azure Information Protection -A Network Security Group -Azure Key Vault

Answer

A

-Azure Key Vault Azure Key Vault will store your connection credentials securely, and allow third-party applications to use it through a token. The token access can be revoked without changing the credentials.

Question 36

Q

What is the valid naming convention for creating a storage account?

Answer

A

combination of numbers and lower-case letters

Question 37

Q

What is an Azure Resource Manager template?

Answer

A

A JavaScript Object Notation (JSON) file that defines the infrastructure and configuration for your deployment.

Question 38

Q

Which one of these is not an element of an Azure Resource Manager template? -idempotent -schema -parameters

Answer

A

-idempotent

Question 39

Q

Azure Resource Manager templates are idempotent. This means that if you run a template with no changes a second time: \_\_\_\_\_\_\_\_\_\_\_\_\_\_

Answer

A

Azure Resource Manager won't make any changes to the deployed resources.

Question 40

Q

If you want to track costs, which of the following should you add to a resource? -The API version -Tags -A variable

Answer

A

Tags. A resource tag's value will be displayed in the overview page for that Azure resource and in cost reports.

Question 41

Q

An ARM template expression always starts and ends with which characters?

Answer

A

[] A template expression always starts and ends with brackets: [].

Question 42

Q

Template expressions can be used in which section or sections of a template? -The variables:{} section -The parameters:{} section -The resources:{} section -The outputs:{} section -All of the above

Answer

A

-All of the above Template expressions can be used in any section of an ARM template.

Question 43

Q

Azure Resource Manager performs what kind of operations?

Answer

A

Resource management and data operations. Azure Resource Manager performs mostly resource management operations (e.g. Create, Read, Update, Delete, settings configuration and access control of resources), but also exposes some data operations for some resources.

Question 44

Q

You have a Web App container that is running in the S1 App Service tier. Your team has added some additional functionality and performance enhancements to the site, but your QA team needs to validate everything is functional prior to releasing the updates. What can you do to ensure they can validate your code without impacting your live site while keeping your costs down? -Build a new Web App instance in the Free/Dev tier and push your code to that instance. -Deploy the Web App to a Virtual Machine in Azure for QA validation and remove it once they've validated the changes. -Deploy the Web App to an Azure Container Instance for QA validation and remove it once they've validated the changes. -Create a new Deployment Slot in your Web App, deploy your new code to that slot, and switch to your new slot once QA has validated the changes.

Answer

A

-Create a new Deployment Slot in your Web App, deploy your new code to that slot, and switch to your new slot once QA has validated the changes. This is the most efficient and cost-effective way to validate the code without impacting the live site.

Question 45

Q

Where do Virtual Machines fall on the Azure Shared Responsibility Model?

Answer

A

Infrastructure-as-a-Service (IaaS)

Question 46

Q

Where in Azure Container Instances are Service dependencies for containers stored? -Under Container Dependencies in the Azure Console -In the Container -In Azure Container Registry -In the Azure Container Group

Answer

A

-In the Container Most dependencies for containers are stored INSIDE the container to ensure complete encapsulation of the service for rapid scale and development.

Question 47

Q

Which of the following is not part of the function.json file? -Input Binding -Output Binding -Trigger -Action

Answer

A

-Action Actions for your functions are configured in the Input and Output Bindings

Question 48

Q

What command can you use to deploy a new virtual machine? -az VirtualMachine new --resource-group myRG --name myVM --image ubuntu18.04LTS -az vm new --resource-group myRG --name myVM --image ubuntu18.04LTS -az VirtualMachine create --resource-group myRG --name myVM --image ubuntu18.04LTS -az vm create --resource-group myRG --name myVM --image ubuntu18.04LTS

Answer

A

-az vm create --resource-group myRG --name myVM --image ubuntu18.04LTS

Question 49

Q

To add a container image from your local Docker instance to your Azure Container Registry, what command would you need to use? -docker push -azcr import -azcr container new -docker export

Answer

A

-docker push When using Docker, you'll utilize the "docker push " command to add a new container image to your registry.

Question 50

Q

Your company has tasked you with creating a Disaster Recovery plan for your Virtual Machines that would allow you to fail over to another machine in a different region in the event of a regional failure. What option could best satisfy this requirement? -Create a VM Scale Set and configure additional nodes in another region. -Utilize Azure Site Recovery Manager to build a fault-tolerant copy of your Virtual Machine in another region. -Create a Replica VM in another region to fail over to in the event of an emergency -Use Azure Backup to maintain a backup of your Virtual Machine and restore to a new region in the event of an outage.

Answer

A

-Utilize Azure Site Recovery Manager to build a fault-tolerant copy of your Virtual Machine in another region. Azure Site Recovery Manager is designed to function as disaster recovery as a service to keep applications running during outages or regional failures.

Question 51

Q

In Azure App Service, what is the minimum App Service Plan you can use to gain access to SSL certificate management and Production Azure SLAs? -S1 -D1 -F1 -P1v3

Answer

A

-S1 S1 is the lowest service tier that you can use to gain access to SSL certificate management and Azure SLAs.

Question 52

Q

Which of these can be utilized to automate deploying environments and services to your Azure tenancy? -Azure Migration Manager -Azure Automation -Azure Resource Manager -Azure Cloud Adoption Framework

Answer

A

-Azure Resource Manager By using ARM Templates, you can automate and standardize deployments to your Azure ecosystem.

Question 53

Q

Which of the following ISN'T required when creating a new Azure Container Registry instance? -Size -Name -SKU -Resource Group

Answer

A

-Size The size of your Registry is determined when selecting your SKU, so this is not a parameter when deploying a Registry.

Question 54

Q

In what language are ARM Templates built? -JSON -YAML -XML -HTML

Answer

A

-JSON

Question 55

Q

When using a custom handler, the first step is to create a function in Azure for it to call. True or False

Answer

A

False When using a custom handler, you do not need to create a corresponding function identity in Azure.

Question 56

Q

Azure Container Instances supports both Linux and Windows containers. True or False

Answer

A

True ACI can support both Windows or Linux containers. Well done!

Question 57

Q

Which of the following languages is NOT supported by Durable Functions? -Java -JavaScript -F# -PowerShell

Answer

A

-Java Currently, Durable Functions only supports C#, JavaScript, Python, F#, and PowerShell. More languages will be supported over time, but it currently does not support Java.

Question 58

Q

In which of the following situations would deploying an Azure Virtual Machine be the most appropriate solution? -To more efficiently work with your cloud environment from a cloud local system -When you need to shift your web application to the cloud -When you need to lift and shift from an on-premise environment to the cloud -When you need a system to process workflows and process data

Answer

A

-When you need to lift and shift from an on-premise environment to the cloud Azure Virtual Machines can accept machine files from either Hyper-V or VMware, making it so that transferring your systems to Azure can be done safely and conveniently.

Question 59

Q

On Azure CosmosDB, what is "strong" consistency?

Answer

A

This consistency model provides the strongest consistency. Writes are made to all regions in real time. Reads are always guaranteed to return the most up to date committed data. Partial writes and uncommitted data will not pass. This can have higher performance cost and latency. All data will be transitionally consistent.

Question 60

Q

On Azure CosmosDB, what is "boundless staleness" consistency?

Answer

A

Writes are made to all regions with guaranteed consistency. However, there is a tolerated delay to additional regions beyond the source region. This means commits made to a container in West US 2 will be immediately available in West US 2. However, in East US, there may be a delay of a few operations or seconds. All data will be transitionally consistent.

Question 61

Q

On Azure CosmosDB, what is "session" consistency?

Answer

A

Creates consistency for the user session. However, it doesn't wait for global commits and may be inconsistent for other sessions. (Most commonly used consistency).

Question 62

Q

On Azure CosmosDB, what is "Consistent Prefix" consistency?

Answer

A

Data is updated in the correct order. However, the updates get there when they get there. This consistency provides lower latency for the user session because it does not wait for updates in the data.

Question 63

Q

On Azure CosmosDB, what is "eventual" consistency?

Answer

A

Updates happen out of order. Data may be inconsistent but will eventually be consistent with the source container. This consistency offers the lowest latency for user sessions because it does not wait for updates in the data.

Question 64

Q

You are developing an application that applies a set of governance policies for internal and external services, as well as for applications. You develop a stateful ASP.NET Core 2.1 web application named PolicyApp and deploy it to an Azure App Service Web App. The PolicyApp reacts to events from Azure Event Grid and performs policy actions based on those events. You have the following requirements: Authentication events must be used to monitor users when they sign in and sign out. All authentication events must be processed by PolicyApp. Sign outs must be processed as fast as possible. What should you do? A. Create a new Azure Event Grid subscription for all authentication events. Use the subscription to process sign-out events. B. Create a separate Azure Event Grid handler for sign-in and sign-out events. C. Create separate Azure Event Grid topics and subscriptions for sign-in and sign-out events. D. Add a subject prefix to sign-out events. Create an Azure Event Grid subscription. Configure the subscription to use the subjectBeginsWith filter.

Answer

A

D. Add a subject prefix to sign-out events. Create an Azure Event Grid subscription. Configure the subscription to use the subjectBeginsWith filter.

Answer 65

A

D. Configure the Filter property of the SearchParameters class.

Answer 66

A

A. Yes

Answer 67

A

B. No

Answer 68

A

B. No

Answer 69

A

B. No

Answer 70

A

B. Configure the QueryType property of the SearchParameters class.

Answer 71

A

C. The Metric signal type.

Answer 72

A

C. Switch to the Standard App Service tier plan.

Answer 73

A

B. No

Answer 74

A

A. Yes

Answer 75

A

B. No

Answer 76

A

B. Run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI.

Answer 77

A

C. Active Directory integrated authentication.

Answer 78

A

B. No

Answer 79

A

A. Yes

Answer 80

A

B. No

Answer 81

A

B. EnablePurgeProtection D. EnableSoftDelete

Answer 82

A

A. No change required.

Answer 83

A

C. In Azure AD, create a conditional access policy.

Answer 84

A

C. Enable Managed Service Identity (MSI).

Answer 85

A

A. Yes

Answer 86

A

B. No

Answer 87

A

A. Yes

Answer 88

A

B. No

Answer 89

A

A. Yes

Answer 90

A

B. mongorestore

Answer 91

A

A. Yes

Answer 92

A

B. No

Answer 93

A

D. 40

Answer 94

A

D. Max Value

Answer 95

A

B. WebJobs

Answer 96

A

B. No

Answer 97

A

B. No

Answer 98

A

A. Yes

Answer 99

A

B. No

Answer 100

A

A. Yes

Answer 101

A

C. From the Redeploy blade, click Redeploy.

Answer 102

A

A. Yes

Answer 103

A

B. No

Answer 104

A

B. No

Answer 105

A

A. Yes

Answer 106

A

var endpoint = "..." var payload = "..." var request = new HttpRequestMessage(HttpMethod.Post, endpoint); request.Headers.Add("X-WNS-Type", "wns/raw"); request.Headers.Add("ServiceBusNotification-Format", "windows"); request.Content = new StringContent(payload, Encoding.UTF8, "application/octet-stream"); var client = new HttpClient(); await client.SendAsync(request);

Answer 107

A

B: No

Answer 108

A

B: No

Answer 109

A

D. subscriptionClient.RegisterMessageHandler(ProcessMessagesAsync, messageHandlerOptions);

Answer 110

A

A. Service Bus C. Event Grid

Answer 111

A

The XML segment belongs in the section of the policy. Yes.

If the body size is >256k, an error will occur. No.

If the request is http://contoso.com/api/9.2/, the policy will retain the higher version. No.

Answer 112

A

WebHook event delivery SAS tokens

Topic publishing ValidationCode handshake

Answer 113

A

Target Azure Resource

Gateway credentials Client cert

Answer 114

A

A. Azure Service Bus Topic B. Azure Service Bus Queue

Answer 115

A

B. No

Answer 116

A

C.New-AzureRmServiceBusQueue -ResourceGroupName fridge-rg -NamespaceName fridge-ns -NAme fridge-q -EnablePartitioning $False

-----------------------------------------------------------------------

A keyword in the question is "central location", this means you want partitioning disabled in your command. -CK

Answer 117

A

The code configures the lock duration for the queue. No.

The last message read remains in the queue after the code runs. Yes.

The storage queue remains in the storage account after the code runs. Yes.

Answer 118

A

A.az servicebus queue create --resource-group fridge-rg --namespace-name fridge-ns --name fridge-q

Answer 119

A

B. No

Answer 120

A

A. Yes

Answer 121

A

B. No

Answer 122

A

A. Yes

Answer 123

A

A. Azure Storage Queue

Answer 124

A

Rewrite the request URL to match to the format expected by the web service. *Inbound*

Remove formatting text from responses. *Outbound*

Forward the user ID that is associated with the subscription key for the original request to the back-end service. *Inbound*

Answer 125

A

<ol> <li>Create a Log Analytics workspace</li> <li>Add a VMInsights solution</li> <li>Install agents on the VM and VM scale set to be monitored.</li> <li>Create an Application Insights resource.</li></ol>

Send console logs is not used.

Answer 126

A

<ol> <li>Register the application with the Microsoft identity platform.</li> <li>Build a client by using the client app ID.</li> <li>Create an authentication provider.</li> <li>Create a new instance of the GraphServiceClient.</li> <li>Invoke the request to the Microsoft Graph API.</li></ol>

Answer 127

A

see image

Answer 128

A

see image

Answer 129

A

D. New-AzureRmApiManagementBackendProxy -Url $ApiUrl

Answer 130

A

A. Assign the value of the hazard message SessionID property to the ReplyToSessionId property.

D. Assign the value of the hazard message MessageId property to the CorrelationId property.

Answer 131

A

A. In the host.json file, decrease the value of the batchSize option

Answer 132

A

A. Yes

Answer 133

A

B. multi-step web C. URL ping

Answer 134

A

D. Create a multi-step web test to query the home page.

Answer 135

A

B. Create a timer triggered function that calls TrackAvailability() and send the results to Application Insights.

Answer 136

A

B: No

Answer 137

A

B. No

Answer 138

A

The file MIME type is supported by the service. No.

Edge nodes must be purged of all cache assets. Yes.

The compression type is supported. Yes.

Answer 139

A

B. Telemetry.Id D. Telemetry.Context.Operation.Id

Answer 140

A

The minimum throughput for the containers is 400R/Us. No.

The first query statement is an in-partition query. No.

The second query statement is a cross-platform query. Yes.

Answer 141

A

C. Create an Azure Function to use a trigger for Azure Cosmos DB. Configure the trigger to connect to the container.

D. Create an Azure Function that uses a FeedIterator object that processes the change feed by using the pull model on the container. Use a FeedRange objext to parallelize the processing of the change feed across multiple functions.

Answer 142

A

Block blobs prefixed with container1/salesorders or container2/inventory which have not been modified in over 60 days are moved to cool storage. blobs that have not been modified in 120 days are moved to the archive tier. Yes.

Blobs are moved to cool storage if they have not been accessed for 30 days. Yes.

Blobs will automatically be tiered from cool back to hot if accessed again after being tierred to cool. Yes.

All block blobs older than 730 days will be deleted. Yes.

Answer 143

A

A. Revoke the delegation key.

D. Remove the role assignment for the security principle.

---------------------------------------------------------------------------------

B. Delete the stored access policy.(i believe is incorrect)

Answer 144

A

A. Microsoft Graph API

C. Azure API Management

Answer 145

A

D. validate-jwt

Answer 146

A

C. Managed identity

Answer 147

A

A. single path

Answer 148

A

B. Create an Event Grid topic that uses the Start-AzureStorageBlobCopy cmdlet

Answer 149

A

A. Yes

Answer 150

A

B: No

Answer 151

A

B. No

Answer 152

A

B. No

Answer 153

A

C. Managed identity

Answer 154

A

B. No

Answer 155

A

B. no

Answer 156

A

A. Yes

Answer 157

A

C. Create a system assigned Managed Identity in each App Service with permission to access Key Vault.

Answer 158

A

C. Certificate Authentication D. OAuth Client Credential Grant

Answer 159

A

B. No

Answer 160

A

A. Yes

Answer 161

A

B. No

Answer 162

A

C. Cosmos DB Operator

Answer 163

A

B. In Azure AD, create a new conditional access policy. C. Upgrade to Azure AD Premium.

Answer 164

A

A database named SalesOrders is created. The database will include two containers. Yes.

Container1 will contain two items. Yes.

Container2 will contain one items. Yes.

Answer 165

A

D. a concatenation of multiple property values with a random suffix appended E. a hash suffix appended to a property value

Answer 166

A

A. AzCopy

Answer 167

A

C. new CosmosClient(EndpointUri, PrimaryKey);

Answer 168

A

D. CloudQueueClient

Answer 169

A

A. Yes

Answer 170

A

B. between one and 15 hours

Answer 171

A

The code creates an infinite lease. Yes.

The code at line 06 always creates a new blob. No.

The finally block releases the lease. Yes.

Answer 172

A

SaveScore will work with CosmosDB. Yes.

SaveScore will update and replace a record if one already exists with the same playerId and gameId. No.

Leader board data for the game will be automatically partitioned using gamerId. No.

SaveScore will store the values for the gameId and playerId parameters in the database. Yes.

Answer 173

A

B. No

Answer 174

A

A. In the Azure Application Gateway's HTTP setting, enable the Use for App service setting.

D. In the Azure Application Gateway's HTTP setting, set the value of the Override backend path option to contoso22.azurewebsites.net.

Answer 175

A

A log alert is created that sends an email when the CPU percentage is above 60 percent for five minutes. No.

A log alert is created that sends an email when the number of virtual machines heartbeats in the past hour is less than five. Yes.

The log alert is scheduled to run every two hours. No.

Answer 176

A

A. No

Answer 177

A

A. No

The consumption hosting model has up to 10 minute delay. From the Microsoft docs (<a>https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-storage-blob-triggered-function</a>):

When your function app runs in the default Consumption plan, there may be a delay of up to several minutes between the blob being added or updated and the function being triggered. If you need low latency in your blob triggered functions, consider running your function app in an App Service plan.

Answer 178

A

A. Add the path to the static content generation tool to WEBSITE_RUN_FROM_PACKAGE setting in the host.json file.

D. Create a file named .deployment in the root of the repository that calls a script which generates the static content and deploys the website.

Answer 179

A

The code will log the time that the order was processed from the queue. No.

When the ProcessOrders function fails, the function will retry up to five times for a given order, including the first try. Yes.

When there are multiple orders in the queue, a batch of orders will be retrieved from the queue and the ProcessOrders function will run multiple instances concurrently to process the orders. Yes.

The ProcessOrders function will output the order to an Order table in Azure Table Storage. Yes.

Answer 180

A

D. Use an App Service plan. Configure the Function App to use an Azure Blob Storage trigger.

Answer 181

A

- FROM - WORKDIR - COPY - RUN - CMD

Presley says the correct order is different than what is shown in the image

Answer 182

A

B. Enable the change feed on the storage account and process all changes for available events.

Answer 183

A

A. Yes

Answer 184

A

B. No

Answer 185

A

A: Yes

Answer 186

A

B. No

Answer 187

A

D. Deploy the website to an App Service that uses the Standard service tier. Configure the App Service plan to automatically scale when the CPU load is high.

Answer 188

A

Answer:

Box 1: Create the Azure Functions app with a Premium plan type

Box 2: Create a system-assigned managed identity for the application

Box 3: Create an access policy in Azure Key Vault for the application identity

<a>https://www.examtopics.com/discussions/microsoft/view/35739-exam-az-204-topic-1-question-12-discussion/</a>

Answer 189

A

B. No

Answer 190

A

B. Yes

Answer 191

A

A. No

Answer 192

A

B. Yes

Answer 193

A

B. No

Brainscape's Knowledge GenomeTM

(AZ-204 topic) Uncategorized Flashcards

Brainscape's Knowledge Genome^TM