AZ-204 Practice Test 37 — 15 Questions

Question 1

You are building a solution that processes images uploaded to Azure Blob Storage. Each image must be analyzed by Azure AI Vision (Computer Vision). You need to trigger the analysis automatically when a new blob is created. Which Azure service should you use?

Accepted Answer

Azure Functions. Option D is correct because Azure Functions can be triggered by Blob Storage events to run custom code. Option A is wrong because Azure Logic Apps can also be used but Functions is more appropriate for code-based processing. Option B is wrong because Event Grid itself is the event broker, not the compute. Option C is wrong because WebJobs are outdated and less flexible.

Answer

Azure Event Grid

Answer

Azure Logic Apps

Answer

Azure WebJobs

Question 2

You develop an app that uses Azure Cosmos DB for NoSQL. The app requires reading a specific item by ID with low latency. You need to ensure the query is as fast as possible. What should you use?

Accepted Answer

Use a point read with the item's ID and partition key.. Option A is correct because a point read by ID and partition key is the fastest operation in Cosmos DB, directly accessing the item without query engine overhead. Option B is wrong because cross-partition queries add latency. Option C is wrong because even with indexing, point reads are faster. Option D is wrong because stored procedures run on the server but still involve query processing.

Answer

Use a stored procedure that reads the item.

Answer

Use a SQL query filtering by ID without partition key.

Answer

Use a SQL query with a composite index on ID.

Question 3

You are developing a solution that uploads large files to Azure Blob Storage. Users report that uploads fail after 4 minutes. You need to ensure uploads can complete successfully. What should you do?

Accepted Answer

Increase the client-side timeout value in the upload request.. The default client-side timeout for Azure Blob Storage uploads is 4 minutes. When uploading large files, the operation may exceed this timeout, causing the upload to fail. Increasing the client-side timeout value in the upload request extends the allowed duration, ensuring the upload completes successfully.

Answer

Enable soft delete and versioning on the blob container.

Answer

Use premium block blob storage accounts.

Answer

Increase the storage account scale limit.

Question 4

You are using Azure Monitor to collect logs from multiple Azure resources. You need to query logs to find all error events from the last 24 hours. Which query language should you use?

Accepted Answer

Kusto Query Language (KQL). Option A is correct because Kusto Query Language (KQL) is the query language for Azure Monitor Logs. Option B (SQL) is for relational databases. Option C (PowerShell) is for scripting. Option D (PromQL) is for Prometheus.

Answer

Transact-SQL (T-SQL)

Answer

PromQL

Answer

PowerShell

Question 5

You deploy a microservices architecture on Azure Kubernetes Service (AKS). Some pods report OOMKilled errors. Which diagnostic step should you take first?

Accepted Answer

Review container resource requests and limits in the pod YAML. Option D is correct because reviewing container resource limits in the pod spec directly addresses memory constraints. Option A is wrong because nodes may have enough memory. Option B is wrong because cluster autoscaler adds nodes, not memory to existing pods. Option C is wrong because HPA scales replicas, not memory limits.

Answer

Enable cluster autoscaler to add more nodes

Answer

Check node memory utilization with kubectl top nodes

Answer

Configure horizontal pod autoscaler based on memory

Question 6

Which TWO Azure Monitor features can help troubleshoot a web app that returns slow response times intermittently?

Accepted Answer

Live Metrics. Options A and D are correct. Live Metrics shows real-time performance; Application Map visualizes dependencies and latency. Option B is wrong because it's for cost. Option C is wrong because it's for security. Option E is wrong because it's for policy compliance.

Answer

Sentinel incidents

Answer

Advisor recommendations

Answer

Policy compliance

Question 7

You have an Azure Policy as shown in the exhibit. The roleDefinitionId corresponds to the 'Contributor' role. What does this policy do?

Accepted Answer

Denies Contributors from creating or modifying virtual machines. Option B is correct because the policy denies actions from Contributors on VMs. Option A (allows) is wrong because effect is deny. Option C (audits) is wrong because effect is deny. Option D (deploys) is wrong because effect is deny.

Answer

Allows Contributors to create virtual machines

Answer

Audits when Contributors create virtual machines

Answer

Deploys a virtual machine when a Contributor action occurs

Question 8

You have an Azure CDN profile that caches content from a storage account. Users in Europe report that images load slowly. You need to improve performance for European users. What should you do?

Accepted Answer

Add an additional CDN endpoint with a European origin. Option C is correct because adding a CDN endpoint with a European origin or closest POP reduces latency. Option A (prefetching) is not a CDN feature. Option B (compression) may help but not primarily for geographic latency. Option D (caching rules) may improve hit ratio but not geographical distance.

Answer

Enable compression on the CDN

Answer

Enable prefetching on the CDN

Answer

Configure caching rules to cache longer

Question 9

You are monitoring an Azure App Service using Application Insights. You want to alert when the average server response time exceeds 2 seconds over a 5-minute window. What should you create?

Accepted Answer

A metric alert with 'Server response time' as the signal. Option A is correct because a metric alert on the 'Server response time' metric can trigger when the threshold is exceeded. Option B (log alert) requires log queries. Option C (activity log alert) is for resource events. Option D (availability alert) is for endpoint availability.

Answer

An availability alert

Answer

A log alert with a custom KQL query

Answer

An activity log alert

Question 10

You need to diagnose why an Azure App Service web app returns HTTP 503 errors during peak traffic. Which Application Insights feature should you use?

Accepted Answer

Live Metrics. Option B is correct because Live Metrics shows real-time performance and can pinpoint issues. Option A is wrong because it's for code-level exceptions. Option C is wrong because it's for deployment-related issues. Option D is wrong because it's for log search, not real-time monitoring.

Answer

Availability tests

Answer

Log Analytics query for failed requests

Answer

Application Map

Question 11

You are optimizing an Azure SQL Database that runs a heavy reporting workload. Queries are slow due to high logical reads. Which index strategy should you recommend?

Accepted Answer

Create nonclustered indexes with included columns. Option D is correct because covering indexes include all columns needed by queries, reducing reads. Option A is wrong because it's for key lookups, not covering. Option B is wrong because clustered index doesn't cover all columns. Option C is wrong because columnstore indexes are for large scans, not OLTP.

Answer

Use columnstore indexes on fact tables

Answer

Disable auto-update statistics

Answer

Rebuild clustered indexes with higher fill factor

Question 12

Your Azure Kubernetes Service (AKS) cluster experiences node failures. Which Azure service provides automated node repair?

Accepted Answer

AKS node auto-repair. Option B is correct because AKS node auto-repair is a built-in feature. Option A is wrong because Azure Monitor only provides observability. Option C is wrong because it's a security solution. Option D is wrong because it's a SIEM/SOAR solution.

Answer

Azure Sentinel

Answer

Microsoft Defender for Cloud

Answer

Azure Monitor

Question 13

Refer to the exhibit. You deployed an Azure Storage account with this ARM template. Users outside the allowed IP range receive '403 Forbidden' errors. What is the MOST likely cause?

Accepted Answer

The network ACL default action is Deny. Option B is correct because the defaultAction is Deny, so only traffic from the specified IP range is allowed. Option A is wrong because TLS version is correct. Option C is wrong because Cool access tier doesn't affect access. Option D is wrong because the IP rule allows the range.

Answer

The access tier is Cool

Answer

The minimum TLS version is set to TLS1_2

Answer

The IP rule allows only 203.0.113.0/24

Question 14

You have an Azure Front Door Premium instance with a Web Application Firewall (WAF) policy. The exhibit shows a custom rule. What is the effect of this rule?

Accepted Answer

Blocks traffic that does NOT originate from 192.168.1.0/24 or 10.0.0.0/8. Option C is correct because the rule blocks requests that do NOT originate from the specified IP ranges (negateCondition: true). Option A is wrong because it allows those IPs. Option B is wrong because it blocks only those IPs. Option D is wrong because it allows all traffic, which is opposite.

Answer

Allows all traffic

Answer

Blocks traffic from 192.168.1.0/24 and 10.0.0.0/8

Answer

Allows traffic from 192.168.1.0/24 and 10.0.0.0/8

Question 15

You have an Azure Logic App that processes orders. Occasionally, the Logic App fails due to a transient error from a downstream API. You want to automatically retry the failed action after 10 seconds, up to 3 times, with exponential backoff. Which configuration should you set on the action?

Accepted Answer

Set retry policy to default with interval of 10 seconds and count of 3. Option B is correct because the default retry policy uses exponential backoff with settings for interval and count. Option A (fixed interval) is not exponential. Option C (none) disables retries. Option D (custom) requires explicit backoff calculation.

Answer

Set retry policy to fixed interval with 10-second delay and 3 retries

Answer

Set retry policy to none and implement custom retry logic

Answer

Set retry policy to custom with exponential interval and 3 retries