AZ-204 Practice Test 10 — 10 Questions

Question 1

You host a web application on Azure App Service using multiple deployment slots (production and staging). After swapping staging into production, users report errors. You need to ensure that the staging slot is warmed up before swapping and that any errors during swap cause an automatic rollback. What should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable auto swap and configure a custom warm-up path.. Enabling auto swap with a custom warm-up path ensures the staging slot is fully warmed up before the swap occurs, and if the warm-up fails or the application returns errors during the swap, Azure App Service automatically rolls back to the previous slot. This directly addresses the requirement for both pre-swap warm-up and automatic rollback on errors.

Answer

Configure deployment slot settings to be sticky.

Answer

Use swap with preview and complete the swap after verification.

Answer

Configure manual swap and run a warm-up script before swapping.

Question 2

Refer to the exhibit. A developer is creating an Azure Data Factory pipeline to copy data from Azure Blob Storage to Azure SQL Database. The pipeline fails with a timeout error when copying large files. Which action should the developer take to resolve the issue?

Accepted Answer

Increase the timeout value in the copy activity settings. The copy activity in Azure Data Factory has a default timeout of 7 days, but when copying large files, the activity may fail due to the default timeout for the underlying HTTP request to Blob Storage (which is 7 minutes for a single block). Increasing the timeout value in the copy activity settings allows more time for the entire file transfer to complete, especially for large files that require multiple retries or slower network conditions.

Answer

Change the source type to DelimitedTextSource

Answer

Enable Data Integration Units (DIU) to increase throughput

Answer

Use a staging copy with Azure Data Lake Storage Gen2

Question 3

Your application stores user-generated content in Azure Blob Storage. You need to implement a shared access signature (SAS) that allows users to upload files to a specific container but not read or delete. The SAS must be valid for one hour. Which type of SAS should you use?

Accepted Answer

Service SAS. A Service SAS is the correct choice because it allows you to delegate access to a specific Azure Blob Storage resource (in this case, a container) with granular permissions. You can generate a Service SAS scoped to the container with only the 'Create' and 'Write' permissions (no 'Read' or 'Delete'), and set its expiry to one hour. This meets the requirement of allowing uploads while preventing reads or deletes.

Answer

Account SAS

Answer

Stored access policy

Answer

User delegation SAS

Question 4

Which THREE components are required to implement Azure AD B2C custom policies for sign-up and sign-in? (Choose three.)

Accepted Answer

A user journey definition. A user journey definition is a core component of an Azure AD B2C custom policy. It orchestrates the sequence of technical profiles and orchestration steps that define the sign-up and sign-in experience, including self-asserted pages, multifactor authentication, and validation. Without a user journey, the policy cannot specify the flow of claims exchanges and user interactions.

Answer

An Azure AD (Microsoft Entra ID) tenant for employee identities

Answer

An Azure subscription

Question 5

A developer is building a microservices application on Azure Kubernetes Service (AKS). One service needs to consume messages from an Azure Service Bus queue. The solution must minimize cost and automatically scale based on the number of messages. Which approach should the developer choose?

Accepted Answer

Use KEDA to scale the pods based on the Service Bus queue length. KEDA (Kubernetes Event-Driven Autoscaling) is the correct choice because it natively integrates with Azure Service Bus to monitor queue length and automatically scale the number of pods in AKS based on that metric. This minimizes cost by scaling to zero when there are no messages and scaling up only as needed, without requiring manual intervention or additional infrastructure.

Answer

Use Azure Event Grid to route messages to the microservice

Answer

Use Azure Functions with a Service Bus trigger on a dedicated App Service plan

Answer

Use the Azure Service Bus SDK in the pod code and manually scale pods

Question 6

Your application uses Azure Cosmos DB for NoSQL. You need to implement server-side computed properties that depend on multiple document fields. The computation must be performed atomically. Which approach should you use?

Accepted Answer

Use a stored procedure to compute and update the property in a single transaction. Stored procedures in Azure Cosmos DB for NoSQL execute within a transactional scope, allowing you to atomically compute a property based on multiple document fields and update the document in a single operation. This ensures that the computation and update are performed as an all-or-nothing unit, which is required for atomicity. Pre-triggers, change feeds, and UDFs do not provide atomic read-modify-write semantics across multiple fields.

Answer

Use a pre-trigger to compute the property on write

Answer

Use the change feed to compute the property asynchronously

Answer

Use a user-defined function (UDF) in queries

Question 7

The team needs to receive an email when an App Service's HTTP 5xx error rate exceeds 5 percent for more than five consecutive minutes. No custom code should be written. What combination of Azure Monitor features implements this requirement?

Accepted Answer

Create a log alert that queries the App Service diagnostic log table every 5 minutes and emails the team if the 5xx count exceeds a threshold. The explanation incorrectly states that a 5% threshold on the 'Http5xxErrors' metric can directly represent a 5% error rate. This metric is a count, and standard metric alerts do not provide a built-in mechanism to calculate its percentage relative to total requests. To achieve the required 'rate' calculation, a log alert with a Kusto Query Language (KQL) query is necessary to compute the ratio of 5xx errors to total requests over the specified time window. KQL queries within log alerts are considered configuration, not custom code, thus meeting all requirements.

Answer

Create a metric alert on the Http5xxErrors metric with a 5-percent threshold, a 5-minute evaluation window, and an action group that sends email

Answer

Enable Application Insights availability tests and configure an alert on test failure rate

Answer

Configure a diagnostic setting to stream logs to Azure Storage, then write a Function that reads the storage file and sends email when errors are found

Question 8

Match each Azure security feature to its function.

Accepted Answer

Azure Security Center: Unified security management and threat protection across hybrid cloud workloads. Azure Security Center provides unified security management and threat protection; Azure Sentinel is a cloud-native SIEM/SOAR; Azure Key Vault safeguards keys and secrets; Azure Active Directory manages identity and access. Common confusions include mixing Security Center with Sentinel or Sentinel with Azure AD.

Answer

Azure Security Center: Cloud-native SIEM and SOAR solution

Answer

Azure Sentinel: Identity and access management service

Question 9

Match each Azure service to its primary purpose.

Accepted Answer

Azure Functions: Run event-driven code without managing servers. The correct matches are: Azure Functions for serverless event-driven code, Azure App Service for hosting web apps/APIs, Azure Logic Apps for workflow automation, and Azure Cosmos DB for globally distributed NoSQL database. Common confusions involve swapping the purposes of Azure Functions and Azure App Service.

Answer

Azure Functions: Host web applications, REST APIs, and mobile backends

Answer

Azure App Service: Run event-driven code without managing servers

Question 10

You are developing an Azure Functions app that processes events from an Event Hubs instance. The function must scale out automatically based on the number of partitions in the Event Hub. You need to ensure that each function instance processes events from at least one partition. Which TWO configurations should you use?

Accepted Answer

Set the function app to use the 'Event Scale' mode with a target of one instance per partition.. The 'Event Scale' mode with a target of one instance per partition ensures that the function app scales out to match the number of Event Hub partitions, with each instance processing events from at least one partition. Option C is correct because an event processor host with blob storage for checkpointing enables load balancing across multiple instances, ensuring each instance handles one or more partitions. Option E is incorrect because 'PartitionKey' is used when sending events to Event Hubs to assign a partition, not in the trigger binding; the trigger automatically distributes partitions across instances.

Answer

Set the 'MaxBatchSize' property to 1 to ensure even distribution.

Answer

Select the Premium App Service plan for the function app.

Answer

Use the EventHubs trigger with the 'PartitionKey' parameter set to the partition ID.