AZ-204 Practice Test 12 — 15 Questions

Question 1

You need to deploy an Azure App Service web app that uses a custom domain (www.contoso.com) and SSL/TLS certificate. The certificate is stored in Azure Key Vault. What should you use to bind the certificate to the App Service?

Accepted Answer

Import the certificate from Key Vault into App Service using the 'Key Vault Certificate' option.. Option C is correct because Azure App Service supports direct integration with Azure Key Vault to import a certificate using the 'Key Vault Certificate' option. This allows you to bind an SSL/TLS certificate stored in Key Vault to your custom domain without manually exporting or managing the PFX file, ensuring secure and seamless certificate lifecycle management.

Answer

Configure Azure Front Door to terminate SSL and forward traffic to App Service.

Answer

Use an App Service Managed Certificate for the custom domain.

Answer

Export the certificate from Key Vault as a PFX file and upload it to App Service.

Question 2

Which THREE features does Azure Container Instances (ACI) provide?

Accepted Answer

Assign a public IP address and DNS name label.. Option B is correct because Azure Container Instances allows you to assign a public IP address and a DNS name label to a container group, enabling direct internet access to the container. This is configured at the container group level, and the DNS name label must be unique within the Azure region.

Answer

Integrate with Azure Virtual Network by default.

Answer

Run containers as nested containers (Docker-in-Docker).

Question 3

You deploy the above ARM template. Later, you update the web app's code by deploying a new ZIP package to Azure Blob Storage and updating the WEBSITE_RUN_FROM_PACKAGE setting with the new package URL. However, the web app continues to run the old code. What is the most likely cause?

Accepted Answer

The value '1' indicates the package is from local storage, not an external URL.. Option D is correct because when the WEBSITE_RUN_FROM_PACKAGE app setting is set to '1', it tells Azure App Service to use a local package stored in the site's wwwroot folder. To use an external package from Azure Blob Storage, the setting must be set to the full URL of the blob (with a SAS token if private). Keeping the value as '1' means the service ignores the new blob URL and continues to run the old local package.

Answer

The app setting name is misspelled. It should be 'WEBSITE_RUN_FROM_ZIP'.

Answer

The setting requires a value of '0' to enable external packages.

Answer

The ARM template uses an incorrect apiVersion.

Question 4

A company deploys a microservices application on Azure Kubernetes Service (AKS). They need to automatically scale individual microservices based on custom metrics (e.g., queue depth). Which feature should they use?

Accepted Answer

Horizontal Pod Autoscaler. The Horizontal Pod Autoscaler (HPA) is the correct choice because it automatically scales the number of pod replicas in a deployment or replica set based on observed metrics, including custom metrics like queue depth. HPA queries the Kubernetes Metrics API, which can be extended with custom metrics adapters (e.g., Prometheus Adapter) to support application-specific metrics, enabling fine-grained scaling for each microservice.

Answer

Virtual Node

Answer

Vertical Pod Autoscaler

Answer

Cluster Autoscaler

Question 5

Your Azure Function app uses an event-driven architecture with Azure Event Hubs. You need to ensure that if the function fails to process an event, the event is retried up to three times and then sent to a dead-letter queue. What should you configure?

Accepted Answer

Configure the retry policy in the function's host.json file.. Option C is correct because Azure Functions for Event Hubs supports a built-in retry policy configured in the host.json file. This policy allows you to specify the maximum number of retries (e.g., 3) and, after exhausting those retries, the event is automatically sent to a dead-letter queue (DLQ) configured on the Event Hub. This approach is declarative and requires no custom code for retry or dead-lettering logic.

Answer

Use Durable Functions to orchestrate retries and dead-lettering.

Answer

Implement a try-catch block in the function code and manually re-queue the event.

Answer

Set the 'enableRetry' property on the Event Hub namespace.

Question 6

A team develops an Azure Functions app that processes IoT telemetry. They notice cold start latency is impacting performance. The function uses the Consumption plan. Which action reduces cold starts most effectively?

Accepted Answer

Change to Premium plan with pre-warmed instances. Premium plan keeps instances warm, reducing cold starts. Option A is wrong because using durable functions adds orchestration overhead. Option B is wrong because increasing timeout doesn't affect cold start. Option D is wrong because App Service plan also reduces cold starts but Premium plan is more cost-effective for variable load.

Answer

Use Durable Functions for long-running workflows

Answer

Increase the function timeout to maximum

Answer

Use a dedicated App Service plan

Question 7

You need to monitor the performance of an Azure App Service web app. You want to track the number of HTTP 500 errors over the last hour. Which Azure Monitor metric should you use?

Accepted Answer

Http5xx. The Http5xx metric in Azure Monitor tracks the count of HTTP 500-level server error responses returned by your App Service. Since the question specifically asks for the number of HTTP 500 errors over the last hour, this metric directly provides that count without any aggregation or filtering needed.

Answer

Data In

Answer

Average Response Time

Answer

Requests

Question 8

You are deploying an application to Azure App Service that requires a custom startup script to initialize the environment. Where should you place the startup script in the application code?

Accepted Answer

As a startup command in the App Service configuration. Option D is correct because Azure App Service allows you to specify a custom startup command or script in the App Service configuration (under 'General settings' or via the Azure CLI with `--startup-file`). This startup command runs before the application starts, enabling you to initialize the environment, run pre-deployment tasks, or set up dependencies. Placing the startup script in the configuration ensures it is executed by the App Service platform, which handles the runtime environment (Windows or Linux) and integrates with the application lifecycle.

Answer

In the 'web.config' file

Answer

In a 'docker-compose.yml' file

Answer

In the root of the application code as 'startup.sh'

Question 9

You find the above ARM template for an App Service. What is a security concern with this configuration?

Accepted Answer

The password is passed as a parameter and may be exposed in deployment logs.. Option A is correct because the connection string includes the password as a parameter, which may be stored in plain text in the ARM template parameters file or deployment history. Option B is wrong because the connection string uses SQLAzure type, which is correct. Option C is wrong because the connection string is encrypted at rest in App Service, but the issue is at deployment time. Option D is wrong because the connection string is stored in App Service configuration, not in source code, but the ARM template exposes the password.

Answer

The connection string is stored in the source code.

Answer

The connection string type should be 'Custom' instead of 'SQLAzure'.

Answer

The connection string is not encrypted at rest.

Question 10

You are designing a solution to process thousands of images uploaded to Azure Blob Storage. Each image must be resized and metadata extracted. The processing must be serverless and cost-effective. Which Azure service should you use?

Accepted Answer

Azure Functions with Blob Storage trigger. Azure Functions with a Blob Storage trigger is the correct choice because it provides a serverless, event-driven compute model that automatically scales to process thousands of images as they are uploaded to Blob Storage. The trigger binds directly to a blob container, invoking a function for each new blob, which allows you to resize images and extract metadata without managing infrastructure, making it both cost-effective and efficient for high-throughput workloads.

Answer

Azure Container Instances with Blob Storage SDK

Answer

Azure Logic Apps with Blob Storage connector

Answer

Azure Event Grid with Webhook to a custom service

Question 11

You have an Azure App Service web app that uses a custom domain with TLS/SSL binding. You need to migrate the app to a new App Service plan in a different region. What is the correct order of steps?

Accepted Answer

Export the current plan, create the new plan, deploy the app, bind the domain and certificate. First export the current App Service plan (or scale up), then create the new plan, deploy the app, and finally bind the custom domain and TLS certificate. Option D is the correct sequence. Option A misses the certificate binding. Option B is out of order. Option C exports after creating the new plan.

Answer

Create the new plan, deploy the app, export the current plan, bind the domain

Answer

Export the current plan, create the new plan, bind the domain, deploy the app

Answer

Bind the domain to the new plan, export the current plan, create the new plan, deploy the app

Question 12

Refer to the exhibit. You are deploying this ARM template to create a deployment slot for an Azure App Service. The template deploys successfully. However, the slot-specific app setting 'DEPLOYMENT_SLOT' is not visible in the Azure portal under the slot's Configuration > Application settings. What is the most likely cause?

Accepted Answer

The template does not set 'slotSticky' to true for the app setting. Option B is correct because in ARM templates, app settings are made slot-specific (sticky) by setting the 'slotSticky' property to true. Without this property, the setting is treated as a regular, non-sticky app setting that is not pinned to the deployment slot, so it will not appear under the slot's Configuration > Application settings in the Azure portal.

Answer

Slot settings are not supported in ARM templates

Answer

Deployment slots have been deprecated for App Service

Answer

The app setting name must be prefixed with 'APPSETTING_'

Question 13

You are designing a solution that uses Azure Functions to process events from Azure Event Hubs. The function must process events in order and exactly once per partition. What should you do?

Accepted Answer

Use the Event Hubs trigger for Azure Functions with default configuration.. The Event Hubs trigger for Azure Functions, by default, processes events in order and exactly once per partition. It uses checkpointing to track the offset of the last successfully processed event, ensuring that each event is processed only once and in sequence within a partition. This default behavior aligns with the requirement without needing additional configuration.

Answer

Enable session state in the function app.

Answer

Use a Service Bus queue trigger with a singleton lock.

Answer

Disable checkpointing to ensure no duplicates.

Question 14

You are deploying a containerized application to Azure Container Instances. The application requires writing temporary files to a local filesystem. You need to ensure that the files persist if the container restarts. What should you do?

Accepted Answer

Mount an Azure Files share as a volume in the container group.. Azure Container Instances (ACI) supports mounting Azure Files shares as volumes. When a container restarts, its writable layer is ephemeral and lost, but an Azure Files share persists independently. By mounting the share, temporary files written to the mount point survive container restarts, meeting the persistence requirement.

Answer

Use the container's writable layer to store files.

Answer

Use Azure Blob Storage and mount it as a volume.

Answer

Configure a Docker volume in the container image.

Question 15

Your company has an Azure App Service web app that runs on a Standard App Service plan. You need to scale out the app to handle increased traffic during business hours and scale in during off-hours. What should you configure?

Accepted Answer

Configure autoscale rules on the App Service plan to scale out and in based on CPU usage.. Option A is correct because Azure App Service autoscale rules allow you to automatically scale out (increase instance count) and scale in (decrease instance count) based on metrics like CPU usage. This meets the requirement to handle increased traffic during business hours and reduce costs during off-hours without manual intervention. Autoscale is configured at the App Service plan level, not the web app itself, and works with the Standard tier and above.

Answer

Manually increase the instance count during business hours.

Answer

Scale up the App Service plan to a Premium plan.

Answer

Use Azure Traffic Manager to distribute load.