AZ-204 Practice Test 32 — 15 Questions

Question 1

Refer to the exhibit. The APIM policy is applied to an API. What is the effect of this policy?

Accepted Answer

Each subscription can make up to 10 calls per minute.. The policy snippet uses the `rate-limit` policy, which enforces a per-subscription key rate limit. The `calls` attribute is set to 10 and the `renewal-period` is 60 seconds, meaning each subscription key is allowed up to 10 API calls within any 60-second sliding window. This matches option A exactly.

Answer

Each subscription can make up to 10 calls total.

Answer

Each IP address can make up to 10 calls per minute.

Answer

All calls from a single IP are blocked after 10 requests.

Question 2

You are building a solution that processes real-time telemetry from IoT devices. The telemetry data must be ingested, processed with minimal latency, and stored in Azure Blob Storage for long-term analytics. You need to choose the serverless compute service that is best suited for this scenario. What should you use?

Accepted Answer

Azure Functions with Event Hubs trigger. Azure Functions with an Event Hubs trigger is the best choice because it provides a serverless, event-driven compute model that can process high-throughput telemetry data with minimal latency. The Event Hubs trigger scales automatically based on the number of partitions and events, ensuring real-time processing, and the output can directly write to Azure Blob Storage for long-term analytics.

Answer

Azure Batch with Event Hubs input

Answer

Azure Logic Apps with Event Hubs connector

Answer

Azure WebJobs with Event Hubs SDK

Question 3

Your company, Contoso Ltd., operates a global e-commerce platform. The platform stores product images in Azure Blob Storage. Currently, the images are stored in a single storage account in the West US region. The application uses HTTP to download images. Users in Europe report slow load times. You need to reduce latency for European users. The solution must minimize costs and administrative overhead. You also need to ensure that images are served over HTTPS. You have the following requirements: 1) Users in Europe must have low-latency access. 2) The solution must be cost-effective. 3) The solution must not require changes to the application code. 4) Images must be served over HTTPS. Which course of action should you recommend?

Accepted Answer

Create an Azure CDN profile and add a CDN endpoint that points to the storage account. Enable HTTPS on the CDN endpoint.. Azure CDN provides a global, distributed network of edge servers that cache content closer to users, reducing latency for European users without requiring application code changes. Enabling HTTPS on the CDN endpoint ensures images are served securely over HTTPS, meeting the requirement. This solution is cost-effective as it uses a pay-as-you-go model and minimizes administrative overhead by leveraging a managed service.

Answer

Use Azure Front Door with the storage account as a backend.

Answer

Create a secondary storage account in Europe and use asynchronous replication. Update the application to use the secondary endpoint for European users.

Answer

Enable geo-redundant storage (GRS) on the storage account.

Question 4

Your company is building a real-time dashboard that displays sales data from multiple stores. The data is generated as events from point-of-sale systems and must be ingested with low latency. The dashboard needs to display aggregated data (e.g., total sales per store per minute) with a maximum delay of 5 seconds from event generation. You have decided to use Azure Event Hubs for ingestion and Azure Stream Analytics for real-time processing. The processed data will be stored in Azure Cosmos DB for the dashboard to query. However, the dashboard requires that the data in Cosmos DB be updated as soon as new aggregations are available. You need to design the output from Azure Stream Analytics to Cosmos DB. Which output configuration should you use?

Accepted Answer

Configure the output to use Cosmos DB SQL API with the document ID set to a concatenation of store ID and minute timestamp, and enable upsert.. It uses the Cosmos DB SQL API with a document ID that uniquely identifies each aggregation (store ID + minute timestamp), and enables upsert. This ensures that when Stream Analytics emits a new aggregation for the same store and minute, it overwrites the existing document, providing low-latency updates to the dashboard. The SQL API supports native upsert semantics, which is the most direct and efficient way to achieve real-time updates without additional services or complex logic.

Answer

Configure the output to use Cosmos DB MongoDB API and use a unique index on store ID and timestamp.

Answer

Output to Azure Cosmos DB Table API with a partition key of store ID.

Answer

Write the output to Azure Blob Storage and use an Azure Function triggered by blob creation to update Cosmos DB.

Question 5

A long-running claims processing function must process thousands of independent files. The developer wants status tracking, checkpoints, and replay-safe orchestration. Which Azure Functions capability should be used?

Accepted Answer

Durable Functions orchestrator. Durable Functions orchestrator is correct because it provides built-in support for status tracking, checkpoints (via event sourcing), and replay-safe orchestration, which are essential for a long-running claims processing function that must handle thousands of independent files reliably. The orchestrator function manages state and execution flow, automatically saving progress and allowing replay from checkpoints in case of failures, ensuring exactly-once processing semantics.

Answer

Timer trigger only

Answer

Azure Policy remediation

Answer

Blob lifecycle management

Question 6

A company has an Azure Function app that processes messages from an Azure Storage queue. The function fails intermittently with timeout exceptions when the queue has many messages. What is the best approach to handle this?

Accepted Answer

Increase the batch size in the function's host.json. Increasing the batch size in host.json allows the function to retrieve more messages per invocation, reducing the number of polling cycles and improving throughput. This directly addresses timeout exceptions under high queue load by processing messages more efficiently within the function's execution time limit.

Answer

Upgrade to a Premium plan

Answer

Decrease the batch size to reduce processing time per batch

Answer

Scale out the function app to multiple instances

Question 7

You need to ensure that data stored in Azure Blob Storage is encrypted at rest using a customer-managed key stored in Azure Key Vault. Which feature should you configure?

Accepted Answer

Azure Storage encryption with customer-managed keys in Azure Key Vault. Azure Storage encryption with customer-managed keys in Azure Key Vault allows you to use your own encryption keys to protect data at rest in Blob Storage. This feature leverages Azure Storage Service Encryption (SSE) but wraps the data encryption key with a customer-managed key stored in Azure Key Vault, providing full control over key rotation and access policies.

Answer

Azure Disk Encryption (ADE) for the storage account

Answer

Azure Information Protection (AIP) for the blob container

Answer

Azure Storage Service Encryption (SSE) with Microsoft-managed keys

Question 8

Which TWO actions should you take to securely store and access secrets for a legacy application that cannot be modified? The application runs on an Azure Virtual Machine and needs to read a database connection string. The solution must use Azure Key Vault and adhere to the principle of least privilege.

Accepted Answer

Configure the application to read the connection string from a local file that is updated by the Key Vault extension.. The legacy application cannot be modified, so it cannot directly call the Key Vault REST API or SDK. The Azure Key Vault VM extension (also known as the Key Vault Sync extension) runs as a daemon on the VM, retrieves secrets from Key Vault using a managed identity, and writes them to a local file. The application reads the connection string from that local file, achieving secure secret access without code changes.

Answer

Create a new VM and install the Key Vault extension during provisioning.

Answer

Assign a managed identity to the legacy application.

Answer

Use a user-assigned managed identity and assign it to the VM.

Question 9

An Azure App Service application has availability failures. The developer needs distributed tracing across requests and dependencies. What should be enabled?

Accepted Answer

Application Insights with dependency tracking. Application Insights with dependency tracking is the correct choice because it provides distributed tracing across requests and dependencies in an Azure App Service application. It automatically collects telemetry data, including end-to-end transaction details, and maps dependencies like SQL databases, HTTP calls, and Azure services, enabling developers to diagnose availability failures by correlating traces across components.

Answer

Storage account static website logs

Answer

Azure Policy compliance scan

Answer

Cost Management budgets only

Question 10

Refer to the exhibit. You run the Azure CLI command to store a secret in Key Vault. Later, you run 'az keyvault secret show --vault-name myvault --name MySecret'. What will be displayed?

Accepted Answer

The secret's metadata and the value 'P@ssw0rd123'.. The `az keyvault secret show` command retrieves the secret's metadata along with its value in plaintext. When you store a secret using `az keyvault secret set`, the value is stored securely, and the `show` command returns the full secret object, including the `value` field, as demonstrated in the exhibit where the stored value is 'P@ssw0rd123'.

Answer

The secret's metadata only, without the value.

Answer

The secret's metadata with the value masked as '*****'.

Answer

An error because you cannot retrieve a secret after it is set.

Question 11

You need to diagnose why an Azure App Service web app returns HTTP 503 errors during peak traffic. Which Application Insights feature should you use?

Accepted Answer

Live Metrics. Live Metrics (D) is the correct choice because it provides real-time monitoring of server-side performance metrics, including HTTP 503 errors, as they occur during peak traffic. This allows you to immediately correlate the errors with spikes in CPU, memory, or request rates, enabling rapid diagnosis of resource exhaustion or throttling issues in the App Service plan.

Answer

Availability tests

Answer

Log Analytics query for failed requests

Answer

Application Map

Question 12

You deploy the above ARM template. Later, you update the web app's code by deploying a new ZIP package to Azure Blob Storage and updating the WEBSITE_RUN_FROM_PACKAGE setting with the new package URL. However, the web app continues to run the old code. What is the most likely cause?

Accepted Answer

The value '1' indicates the package is from local storage, not an external URL.. When the WEBSITE_RUN_FROM_PACKAGE app setting is set to '1', it tells Azure App Service to use a local package stored in the site's wwwroot folder. To use an external package from Azure Blob Storage, the setting must be set to the full URL of the blob (with a SAS token if private). Keeping the value as '1' means the service ignores the new blob URL and continues to run the old local package.

Answer

The app setting name is misspelled. It should be 'WEBSITE_RUN_FROM_ZIP'.

Answer

The setting requires a value of '0' to enable external packages.

Answer

The ARM template uses an incorrect apiVersion.

Question 13

You need to upload a large file (500 MB) to Azure Blob Storage from a .NET application with high throughput and resilience to network interruptions. Which approach should you use?

Accepted Answer

Use the Azure Storage SDK for .NET with the UploadAsync method that automatically splits the file into blocks. The Azure Storage SDK's UploadAsync method automatically uses block blob staging, splitting the 500 MB file into multiple blocks that are uploaded in parallel. This provides high throughput and resilience: if a network interruption occurs, only the failed blocks need to be retried, not the entire file. The SDK handles block management and final commit, making it ideal for large file uploads.

Answer

Use HTTP PUT with the entire file in a single request

Answer

Use the Azure Portal to upload the file

Answer

Use AzCopy with a single command

Question 14

You are optimizing an Azure SQL Database that runs a heavy reporting workload. Queries are slow due to high logical reads. Which index strategy should you recommend?

Accepted Answer

Use columnstore indexes on fact tables. High logical reads in a heavy reporting workload are often best addressed by columnstore indexes. Columnstore indexes provide significant data compression, reducing the number of pages that need to be read from disk. They also enable batch mode processing and segment elimination, which dramatically improve performance for analytical queries involving large scans and aggregations, thereby directly reducing logical reads across the workload.

Answer

Create nonclustered indexes with included columns

Answer

Disable auto-update statistics

Answer

Rebuild clustered indexes with higher fill factor

Question 15

You are developing a solution that uses Azure Container Apps. Your application is a microservice that needs to expose a gRPC endpoint. The service must scale to zero when idle. What should you do?

Accepted Answer

Deploy the microservice to Azure Container Apps and configure a scale rule with minReplicas set to 0.. Azure Container Apps natively supports gRPC endpoints and can scale to zero by setting `minReplicas` to 0 in a scale rule. This configuration allows the microservice to run only when there are active requests, reducing costs during idle periods. The combination of gRPC support and dynamic scaling makes Container Apps the correct choice for this scenario.

Answer

Use Azure Functions with a gRPC trigger.

Answer

Deploy the microservice to Azure Kubernetes Service with a virtual node.

Answer

Deploy the microservice to Azure Container Instances with a scale rule.