AZ-204 Practice Test 33 — 15 Questions

Question 1

You are building a solution that needs to send millions of events per second to Azure for processing. Which Azure service should you use to ingest the events?

Accepted Answer

Azure Event Hubs. Azure Event Hubs is the correct choice because it is a big data streaming platform and event ingestion service designed to handle millions of events per second with low latency. It supports high-throughput data ingestion from sources like telemetry, logs, and clickstreams, making it ideal for this scenario.

Answer

Azure Service Bus

Answer

Azure IoT Hub

Answer

Azure Notification Hubs

Question 2

Refer to the exhibit. You deploy an Azure Storage account using the ARM template snippet. A developer reports that they cannot connect to the storage account from their machine with IP 10.0.0.5, even though they have the proper RBAC role. What is the most likely reason?

Accepted Answer

The storage account firewall is configured to deny all traffic except from the 192.168.1.0/24 IP range.. The ARM template snippet configures a network rule that only allows traffic from the 192.168.1.0/24 IP range. Since the developer's machine has IP 10.0.0.5, it falls outside this allowed range, causing the connection to be blocked by the storage account firewall, regardless of RBAC permissions. RBAC controls authorization (who can access), but network rules control access (who can reach the endpoint), and the firewall denies all traffic not explicitly permitted.

Answer

The storage account is configured to bypass Azure Services, which blocks non-Azure clients.

Answer

The developer does not have the Storage Blob Data Contributor role.

Answer

The minimum TLS version is set to TLS 1.2, but the developer's client uses TLS 1.0.

Question 3

Your application running on Azure App Service is experiencing intermittent high latency. You have enabled Application Insights and noticed that the 'Server response time' metric spikes during peak hours. What is the most likely cause of this issue?

Accepted Answer

The App Service plan is under-provisioned and hitting CPU limits.. Intermittent high latency during peak hours, reflected in the 'Server response time' metric, typically indicates that the App Service plan is under-provisioned. When CPU usage hits the plan's limits, requests queue up and response times increase. Auto-scaling would mitigate this, but if the plan is under-provisioned (e.g., a B1 plan with limited cores), scaling out may not occur quickly enough or may be disabled, causing CPU saturation and latency spikes.

Answer

Auto-scaling is configured too aggressively.

Answer

The application is using regional failover, causing delays.

Answer

The application is using too much memory.

Question 4

Application Insights ingestion cost is rising because a high-traffic app emits large telemetry volume. The team needs statistically useful telemetry while reducing ingestion. What should be configured? The design must avoid adding custom operational scripts.

Accepted Answer

Adaptive sampling. Adaptive sampling is the correct solution because it automatically adjusts the volume of telemetry data collected from your application, ensuring that only a representative fraction of events is sent to Application Insights while preserving statistical accuracy for analysis. This reduces ingestion costs without requiring custom scripts or manual intervention, as it is a built-in feature of the Application Insights SDK that dynamically adapts based on traffic patterns.

Answer

Move the app to a larger App Service plan

Answer

Disable all exception telemetry

Answer

Increase log verbosity to debug

Question 5

You need to consume an Azure Cognitive Services Text Analytics API from a Python application. The API requires a subscription key. Where should you store the key to ensure security?

Accepted Answer

Store the key in an environment variable on the hosting machine.. Storing the subscription key in an environment variable on the hosting machine keeps it out of source code and configuration files, reducing the risk of accidental exposure. Environment variables are a standard security best practice for secrets in cloud applications, and Azure Cognitive Services APIs require key-based authentication unless Azure AD is explicitly configured.

Answer

Store the key in a text file in the application directory.

Answer

Use Azure AD authentication instead of a key.

Answer

Hardcode the key in the Python source code.

Question 6

You are deploying an Azure Functions app that processes messages from an Azure Storage queue. The function must ensure that each message is processed at least once, and if processing fails, the message should be retried up to 5 times before being moved to a poison queue. Which configuration should you set?

Accepted Answer

Set the maxDequeueCount property in the host.json for the queue trigger to 5.. The Azure Storage queue trigger's `maxDequeueCount` property in `host.json` controls the maximum number of times a message is dequeued for processing before it is moved to the poison queue. Setting it to 5 ensures that after 5 failed processing attempts, the message is automatically moved to the poison queue, satisfying the at-least-once processing and retry requirements without custom code.

Answer

Manually implement a retry loop in the function code.

Answer

Set the visibility timeout to 5 minutes in the queue.

Answer

Set the message time-to-live to 5 in the queue.

Question 7

Refer to the exhibit. A developer deploys this ARM template to create a blob container. Later, they attempt to upload a file to the container using a SAS token. What is the result?

Accepted Answer

The upload succeeds if the SAS token has write permission.. The ARM template creates a blob container with `publicAccess` set to `None`, meaning no anonymous public access. However, a SAS token with write permission grants delegated access to the container, bypassing the public access setting. Therefore, the upload succeeds because the SAS token provides the necessary authorization, regardless of the container's public access level.

Answer

The upload succeeds only if the SAS token includes read permission.

Answer

The container is not created because publicAccess is set to None.

Answer

The upload fails because the container is private.

Question 8

Refer to the exhibit. You are creating an Azure Service Bus queue using an ARM template. The requirement is that messages should be automatically dead-lettered after 3 failed delivery attempts. Does this configuration meet the requirement?

Accepted Answer

No, because maxDeliveryCount should be 3. The `maxDeliveryCount` property in Azure Service Bus determines the number of attempts to deliver a message before it is automatically moved to the dead-letter queue. The requirement specifies 3 failed delivery attempts, so `maxDeliveryCount` must be set to 3. The exhibit shows `maxDeliveryCount` set to 10, which does not meet the requirement.

Answer

No, because lockDuration should be shorter

Answer

Yes, because defaultMessageTimeToLive ensures messages expire

Answer

Yes, because maxDeliveryCount is set

Question 9

You are building a solution that processes orders from multiple regions. Orders must be processed in the order they are received, but processing can take up to 5 minutes. You need to ensure exactly-once processing and minimize latency. Which Azure service and configuration should you use?

Accepted Answer

Azure Service Bus Queue with sessions enabled. Azure Service Bus Queue with sessions enabled ensures FIFO (first-in-first-out) ordering and exactly-once processing by grouping related messages into sessions. Sessions guarantee that messages within a session are processed in order, and the lock mechanism prevents duplicate processing even if processing takes up to 5 minutes. This minimizes latency by avoiding the overhead of duplicate detection or consumer group coordination.

Answer

Azure Event Hubs with consumer groups

Answer

Azure Service Bus Queue with duplicate detection enabled

Answer

Azure Queue Storage with poison messages

Question 10

You have an Azure Function that processes messages from an Event Hubs event stream. The function is failing with 'Message lock lost' errors. The processing time per event is about 10 minutes. What should you do to resolve the errors?

Accepted Answer

Configure the EventProcessorOptions with a longer lease duration. The 'Message lock lost' error occurs because the default Event Hubs lease duration (30 seconds) is too short for processing that takes 10 minutes per event. By configuring the EventProcessorOptions with a longer lease duration, you ensure the partition lease is not expired while the function is still processing the event, preventing the lease from being stolen by another instance.

Answer

Increase the function's timeout duration

Answer

Increase the number of partitions in the Event Hub

Answer

Decrease the batch size to process events faster

Question 11

You have an Azure Function app that uses a Service Bus queue trigger. The function processes messages, but sometimes it takes longer than 5 minutes to process a single message. You notice that the message is processed multiple times. What is the most likely cause?

Accepted Answer

The lock duration on the queue is shorter than the processing time. The most likely cause is that the lock duration on the Service Bus queue is shorter than the time required to process the message. When the lock expires, the message becomes visible to other consumers (or the same consumer on retry), causing it to be processed multiple times. The default lock duration for a Service Bus queue is 30 seconds, and if processing exceeds that, the message will be re-delivered.

Answer

The function's timeout is set to 5 minutes

Answer

The maxDeliveryCount is set too high

Answer

The queue has sessions enabled

Question 12

Refer to the exhibit. The APIM policy is applied to an API. What is the effect of this policy?

Accepted Answer

Each subscription can make up to 10 calls per minute.. The policy snippet uses the `rate-limit` policy, which enforces a per-subscription key rate limit. The `calls` attribute is set to 10 and the `renewal-period` is 60 seconds, meaning each subscription key is allowed up to 10 API calls within any 60-second sliding window. This matches option A exactly.

Answer

Each subscription can make up to 10 calls total.

Answer

Each IP address can make up to 10 calls per minute.

Answer

All calls from a single IP are blocked after 10 requests.

Question 13

You are building a solution that processes real-time telemetry from IoT devices. The telemetry data must be ingested, processed with minimal latency, and stored in Azure Blob Storage for long-term analytics. You need to choose the serverless compute service that is best suited for this scenario. What should you use?

Accepted Answer

Azure Functions with Event Hubs trigger. Azure Functions with an Event Hubs trigger is the best choice because it provides a serverless, event-driven compute model that can process high-throughput telemetry data with minimal latency. The Event Hubs trigger scales automatically based on the number of partitions and events, ensuring real-time processing, and the output can directly write to Azure Blob Storage for long-term analytics.

Answer

Azure Batch with Event Hubs input

Answer

Azure Logic Apps with Event Hubs connector

Answer

Azure WebJobs with Event Hubs SDK

Question 14

Your company, Contoso Ltd., operates a global e-commerce platform. The platform stores product images in Azure Blob Storage. Currently, the images are stored in a single storage account in the West US region. The application uses HTTP to download images. Users in Europe report slow load times. You need to reduce latency for European users. The solution must minimize costs and administrative overhead. You also need to ensure that images are served over HTTPS. You have the following requirements: 1) Users in Europe must have low-latency access. 2) The solution must be cost-effective. 3) The solution must not require changes to the application code. 4) Images must be served over HTTPS. Which course of action should you recommend?

Accepted Answer

Create an Azure CDN profile and add a CDN endpoint that points to the storage account. Enable HTTPS on the CDN endpoint.. Azure CDN provides a global, distributed network of edge servers that cache content closer to users, reducing latency for European users without requiring application code changes. Enabling HTTPS on the CDN endpoint ensures images are served securely over HTTPS, meeting the requirement. This solution is cost-effective as it uses a pay-as-you-go model and minimizes administrative overhead by leveraging a managed service.

Answer

Use Azure Front Door with the storage account as a backend.

Answer

Create a secondary storage account in Europe and use asynchronous replication. Update the application to use the secondary endpoint for European users.

Answer

Enable geo-redundant storage (GRS) on the storage account.

Question 15

Your company is building a real-time dashboard that displays sales data from multiple stores. The data is generated as events from point-of-sale systems and must be ingested with low latency. The dashboard needs to display aggregated data (e.g., total sales per store per minute) with a maximum delay of 5 seconds from event generation. You have decided to use Azure Event Hubs for ingestion and Azure Stream Analytics for real-time processing. The processed data will be stored in Azure Cosmos DB for the dashboard to query. However, the dashboard requires that the data in Cosmos DB be updated as soon as new aggregations are available. You need to design the output from Azure Stream Analytics to Cosmos DB. Which output configuration should you use?

Accepted Answer

Configure the output to use Cosmos DB SQL API with the document ID set to a concatenation of store ID and minute timestamp, and enable upsert.. It uses the Cosmos DB SQL API with a document ID that uniquely identifies each aggregation (store ID + minute timestamp), and enables upsert. This ensures that when Stream Analytics emits a new aggregation for the same store and minute, it overwrites the existing document, providing low-latency updates to the dashboard. The SQL API supports native upsert semantics, which is the most direct and efficient way to achieve real-time updates without additional services or complex logic.

Answer

Configure the output to use Cosmos DB MongoDB API and use a unique index on store ID and timestamp.

Answer

Output to Azure Cosmos DB Table API with a partition key of store ID.

Answer

Write the output to Azure Blob Storage and use an Azure Function triggered by blob creation to update Cosmos DB.