AZ-204 Practice Test 44 — 15 Questions

Question 1

A background worker retrieves a message from Azure Queue Storage and begins processing. The processing logic takes longer than the configured visibility timeout. Before the worker finishes, the timeout expires. What happens to the message?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The message becomes visible again in the queue and another worker can dequeue it. When the visibility timeout expires, the message becomes visible again in the queue because Azure Queue Storage uses a lease-based mechanism. The worker that dequeued the message loses its exclusive visibility lease, allowing another worker to dequeue and process the same message. This ensures at-least-once delivery semantics, preventing message loss if a worker fails or takes too long.

Answer

The message is permanently deleted because the worker already dequeued it

Answer

The message moves to a dead-letter queue after the visibility timeout expires

Answer

Processing continues uninterrupted; the visibility timeout applies only to the initial retrieval window

Question 2

You are monitoring an Azure Web App using Application Insights. You need to track the duration and status code of an external API call made by the app. Which Application Insights feature should you use?

Accepted Answer

Dependency tracking feature. Dependency tracking in Application Insights is specifically designed to monitor calls made by your application to external services, such as APIs, databases, or HTTP endpoints. It automatically captures the duration, success/failure status, and response code of outbound HTTP requests, making it the correct choice for tracking an external API call's duration and status code.

Answer

Built-in request telemetry (server-side requests)

Answer

Custom events (TrackEvent)

Answer

Page view tracking

Question 3

You are monitoring an Azure App Service using Application Insights. You notice that the server response time is high for certain requests. You need to drill down to see which external dependencies (like databases or APIs) are causing the delay. Which Application Insights feature should you use?

Accepted Answer

Profiler. Profiler (C) is correct because it provides a detailed, code-level view of request processing, including the time spent on each external dependency call (e.g., SQL queries, HTTP calls to APIs). It captures execution traces that break down the total server response time into individual dependency durations, allowing you to pinpoint which external service is causing the delay.

Answer

Live Metrics

Answer

Application Map

Answer

Snapshot Debugger

Question 4

Refer to the exhibit. You run these Azure CLI commands for an Azure Function app. When the app is accessed from https://app.contoso.com, what is the expected behavior?

Accepted Answer

Requests from the allowed origin are accepted. The Azure CLI commands shown configure CORS (Cross-Origin Resource Sharing) for the Function App. The `az functionapp cors add` command adds `https://app.contoso.com` as an allowed origin, and `az functionapp cors show` confirms that this origin is in the allowed list. When a browser-based client at `https://app.contoso.com` makes a request to the Function App, the browser checks the `Access-Control-Allow-Origin` response header. Since the origin matches, the browser permits the request to proceed, and the Function App processes it normally. Therefore, requests from the allowed origin are accepted.

Answer

Only GET requests are allowed

Answer

Requests are blocked because FTPS is required

Answer

All requests are blocked because no origins are allowed

Question 5

You need to store small binary blobs (average 50 KB) that are accessed very frequently for a short period, then never accessed again. The total volume is high. Which storage tier is most cost-effective for the initial upload?

Accepted Answer

Hot. The Hot tier is the most cost-effective for the initial upload because it is optimized for frequent access and low latency, and for small blobs (average 50 KB) that are accessed very frequently for a short period, the per-GB storage cost is higher than Cool or Cold, but the access cost (per-operation charges) is significantly lower. Since the blobs are never accessed again after the short period, the high access frequency during that period makes Hot the cheapest option when considering total cost (storage + access operations), as Cool/Cold tiers would incur much higher per-read operation costs that outweigh their lower storage costs.

Answer

Cool

Answer

Cold

Answer

Archive

Question 6

You are implementing an order processing system using Azure Durable Functions. The function must send notifications to multiple channels (email, SMS, push) in parallel and wait for all to complete before sending a confirmation. Which Durable Functions feature should you utilize?

Accepted Answer

Orchestration trigger with fan-out/fan-in pattern. The fan-out/fan-in pattern in Durable Functions allows you to invoke multiple activity functions in parallel (fan-out) and then wait for all of them to complete (fan-in) using `Task.WhenAll`. This is exactly what is needed to send notifications to email, SMS, and push simultaneously and then proceed only after all have finished, making option A correct.

Answer

Entity trigger

Answer

Activity trigger with retry policy

Answer

Timer trigger

Question 7

Your company has an Azure App Service web app that runs on a Standard App Service plan. You need to scale out the app to handle increased traffic during business hours and scale in during off-hours. What should you configure?

Accepted Answer

Configure autoscale rules on the App Service plan to scale out and in based on CPU usage.. Azure App Service autoscale rules allow you to automatically scale out (increase instance count) and scale in (decrease instance count) based on metrics like CPU usage. This meets the requirement to handle increased traffic during business hours and reduce costs during off-hours without manual intervention. Autoscale is configured at the App Service plan level, not the web app itself, and works with the Standard tier and above.

Answer

Manually increase the instance count during business hours.

Answer

Scale up the App Service plan to a Premium plan.

Answer

Use Azure Traffic Manager to distribute load.

Question 8

You need to store large amounts of unstructured data (images and videos) that are accessed rarely (a few times per year) but must be available within minutes when requested. The data must be geo-redundant for disaster recovery. You want to minimize storage costs. Which storage tier and redundancy option should you choose?

Accepted Answer

Cool storage tier with geo-redundant storage (GRS). The Cool storage tier is designed for data that is infrequently accessed (a few times per year) and stored for at least 30 days, offering lower storage costs than Hot tier while still providing low-latency retrieval within minutes. Geo-redundant storage (GRS) replicates data to a paired secondary region, ensuring disaster recovery with geo-redundancy. This combination meets the requirements of rare access, minutes-availability, geo-redundancy, and minimal cost.

Answer

Hot storage tier with geo-redundant storage (GRS)

Answer

Archive storage tier with read-access geo-redundant storage (RA-GRS)

Answer

Premium storage tier with local redundant storage (LRS)

Question 9

Your application uses Azure App Service and needs to authenticate users via Microsoft Entra ID. You want to minimize code changes. Which feature should you use?

Accepted Answer

App Service Authentication (Easy Auth). App Service Authentication (also known as Easy Auth) is the correct choice because it enables authentication with Microsoft Entra ID (formerly Azure AD) at the platform level, requiring no code changes in your application. It automatically handles token validation, session management, and redirects by intercepting HTTP requests before they reach your app code, which directly satisfies the requirement to minimize code changes.

Answer

Azure AD B2C

Answer

Microsoft.Identity.Web library

Answer

MSAL.js

Question 10

An Azure Functions document rendering job processes Service Bus messages. The function sometimes fails after partially completing work. Which two practices improve correctness?

Accepted Answer

Use dead-letter handling for repeatedly failing messages. Azure Functions can use dead-letter queues (DLQ) to isolate messages that repeatedly fail processing, preventing them from blocking the queue and allowing investigation without data loss. Option B is correct because making the handler idempotent ensures that if a message is retried after a partial failure (e.g., the function crashes mid-execution), reprocessing the same message does not cause duplicate or inconsistent state, which is critical for correctness in a Service Bus triggered function.

Answer

Disable retries for all messages

Answer

Store connection strings in source code

Question 11

Which TWO of the following are valid authentication options for accessing Azure Storage from an application? (Choose TWO.)

Accepted Answer

Storage account key (Shared Key).. The storage account key (Shared Key) provides full administrative access to the storage account, allowing the application to authenticate requests via the Authorization header using HMAC-SHA256. Option B is correct because Microsoft Entra ID (formerly Azure AD) supports role-based access control (RBAC) for Azure Storage, enabling applications to authenticate using OAuth 2.0 tokens for fine-grained access without exposing account keys.

Answer

Certificate-based authentication.

Answer

Managed Service Identity (MSI).

Answer

Shared access signature (SAS) token.

Question 12

You deploy a containerized web application to Azure Container Instances (ACI). The application writes session data to a local directory. You need the data to persist across container restarts (e.g., after a crash or redeployment). Which storage configuration should you use?

Accepted Answer

Mount an Azure Files share as a volume in the container group.. Azure Files provides a fully managed SMB file share in the cloud that can be mounted as a volume in an Azure Container Instance. This allows session data written to the local directory to persist across container restarts, crashes, or redeployments, as the data lives on the share rather than in the ephemeral container filesystem.

Answer

Use an emptyDir volume within the container group.

Answer

Use the container's own filesystem and copy data to a blob storage on shutdown.

Answer

Enable Azure Disk Encryption on the container group.

Question 13

You are reviewing the ARM template for an App Service. What is the effect of the 'alwaysOn' property set to true?

Accepted Answer

The app will stay loaded in memory to avoid cold starts.. Setting 'alwaysOn' to true in an Azure App Service ARM template ensures that the app is kept loaded in memory even when there is no incoming traffic. This prevents the app from being unloaded after a period of inactivity, which eliminates cold starts on subsequent requests. Cold starts occur when the app process is recycled or unloaded, causing a delay as the runtime and application code are reloaded.

Answer

The app will enable health checks at /health.

Answer

The app will scale out to multiple instances automatically.

Answer

The app will be redeployed whenever the code changes.

Question 14

You deploy a web app to Azure App Service. Users report intermittent 500 errors. How should you enable detailed error logging?

Accepted Answer

Enable Application Insights for the web app. Application Insights provides built-in server-side telemetry for Azure App Service, including detailed error tracking, stack traces, and request logs. Enabling it captures the full exception details for intermittent 500 errors, which are typically unhandled exceptions or crashes in the application code. This is the most direct and integrated way to get detailed error logs without additional infrastructure.

Answer

Configure Azure Storage account diagnostics

Answer

Set up Azure DNS logging

Answer

Enable Azure Front Door logging

Question 15

Which THREE Azure services can be used to trigger an Azure Function when a new blob is uploaded to a storage account?

Accepted Answer

Azure Blob Storage trigger (Event Grid based). The Azure Blob Storage trigger (Event Grid based) is the native and recommended way to execute an Azure Function in response to a new blob being uploaded. It leverages Azure Event Grid to reliably deliver blob created events, enabling near-real-time, serverless processing without polling or custom code.

Answer

Azure Service Bus queue

Answer

Azure Logic Apps