AZ-204 Develop Azure compute solutions Practice Test 11 — 15 Questions

Question 1

You are designing a solution that uses Azure Functions to process messages from an Azure Service Bus queue. Which TWO configurations can improve the throughput of the function?

Accepted Answer

Set maxMessagesPerBatch to a higher value. Increasing maxMessagesPerBatch allows the Azure Functions Service Bus trigger to retrieve more messages in a single batch from the queue, reducing the number of round trips to the Service Bus namespace. This directly improves throughput by enabling the function to process multiple messages concurrently within the same function invocation, assuming the function code can handle parallel processing efficiently.

Answer

Set maxDeliveryCount to a higher value

Answer

Set newBatchThreshold to a lower value

Answer

Set maxMessagesPerBatch to a lower value

Answer

Set maxEventBatchSize to a higher value

Question 2

You are developing a serverless application using Azure Functions. The function needs to scale to zero when idle and handle high traffic spikes. Which THREE features should you implement?

Accepted Answer

Use a Consumption hosting plan. A Consumption hosting plan is correct because it provides automatic scaling and can scale down to zero instances when the function is idle, meaning you only pay for execution time. This is essential for a serverless application that needs to handle high traffic spikes while minimizing costs during idle periods.

Answer

Enable the 'Always On' setting

Answer

Use a Premium hosting plan

Question 3

You are deploying a containerized application to Azure Container Instances (ACI). Which TWO actions should you take to ensure the container can securely access an Azure Key Vault?

Accepted Answer

Enable a managed identity for the container group. Option B is correct because enabling a managed identity for the container group allows the container to authenticate to Azure Key Vault without storing any credentials in the container image or code. The managed identity is automatically integrated with Azure AD, and the container can request an access token from the Azure Instance Metadata Service (IMDS) endpoint at 169.254.169.254. This token is then used to authorize requests to Key Vault, ensuring secrets are never exposed in environment variables or configuration files.

Answer

Pass secrets as environment variables

Answer

Register the container with an Azure AD application

Answer

Configure a custom DNS server

Question 4

Refer to the exhibit. You are deploying this ARM template to create a deployment slot for an Azure App Service. The template deploys successfully. However, the slot-specific app setting 'DEPLOYMENT_SLOT' is not visible in the Azure portal under the slot's Configuration > Application settings. What is the most likely cause?

Accepted Answer

The template does not set 'slotSticky' to true for the app setting. Option B is correct because in ARM templates, app settings are made slot-specific (sticky) by setting the 'slotSticky' property to true. Without this property, the setting is treated as a regular, non-sticky app setting that is not pinned to the deployment slot, so it will not appear under the slot's Configuration > Application settings in the Azure portal.

Answer

Slot settings are not supported in ARM templates

Answer

Deployment slots have been deprecated for App Service

Answer

The app setting name must be prefixed with 'APPSETTING_'

Question 5

Refer to the exhibit. You run this Azure CLI command to configure an Azure Web App for Containers. The web app fails to start, and the logs show 'unauthorized: authentication required'. What is the most likely cause?

Accepted Answer

The command did not include admin credentials or managed identity configuration. Option A is correct because the Azure CLI command `az webapp config container set` without specifying `--docker-registry-server-user` and `--docker-registry-server-password` (or a managed identity configuration) means the web app cannot authenticate with a private container registry. The 'unauthorized: authentication required' error indicates the registry requires credentials, and the web app has none configured, so it fails to pull the image.

Answer

The image tag 'latest' does not exist

Answer

The web app is configured to use a deployment slot, but the slot is not specified

Answer

The --docker-registry-server-url is incorrect

Question 6

Refer to the exhibit. You have an HTTP-triggered Azure Function that writes the request body to a blob in the 'samples-workitems' container. The function runs successfully but does not create a blob. What is the most likely cause?

Accepted Answer

The storage account connection string is not set in the function app settings. The most likely cause is that the storage account connection string is not set in the function app settings. Azure Functions require the connection string for the storage account to be configured via the `AzureWebJobsStorage` app setting (or a custom connection setting referenced in the binding). Without it, the runtime cannot authenticate or communicate with Blob Storage, so the output binding silently fails to write the blob, even though the function executes successfully.

Answer

The container name 'samples-workitems' is invalid

Answer

The blob name pattern {rand-guid} is not supported

Answer

The blob output binding syntax is incorrect

Question 7

You are developing a background job that runs every hour on Azure App Service. The job must be resilient to restarts and should not affect the web app's performance. Which technology should you use?

Accepted Answer

WebJobs (triggered). WebJobs (triggered) are designed specifically for running background tasks on Azure App Service. They run as separate processes from the web app, ensuring they do not affect the web app's performance, and they are resilient to restarts because the Azure WebJobs SDK automatically handles restart and retry logic. This makes them the ideal choice for a scheduled hourly job that must survive App Service restarts.

Answer

A background thread in the web application

Answer

Azure Logic Apps

Answer

Azure Functions (Consumption plan)

Question 8

You have an Azure Function app that uses a Service Bus queue trigger. The function processes messages, but sometimes it takes longer than 5 minutes to process a single message. You notice that the message is processed multiple times. What is the most likely cause?

Accepted Answer

The lock duration on the queue is shorter than the processing time. Option D is correct because the default lock duration for Service Bus queues is 60 seconds, and if processing takes longer, the lock is lost and the message becomes visible again, leading to duplicate processing. Option A is wrong because maxDeliveryCount is for poison messages. Option B is wrong because sessions are not related. Option C is wrong because the function's timeout does not affect the lock.

Answer

The function's timeout is set to 5 minutes

Answer

The maxDeliveryCount is set too high

Answer

The queue has sessions enabled

Question 9

You are deploying a microservice to Azure Container Apps. The service requires a custom domain and SSL/TLS certificate. Which resource should you configure to meet these requirements?

Accepted Answer

Azure Container Apps environment with a custom domain and certificate attached. Option A is correct because Container Apps supports custom domains and certificates via the environment. Option B is wrong because API Management is a separate service. Option C is wrong because Front Door is for global load balancing. Option D is wrong because App Gateway is for traditional web apps.

Answer

Azure Front Door with a custom domain

Answer

Azure API Management in front of the Container App

Answer

Azure Application Gateway with SSL termination

Question 10

You are developing a web application that runs on Azure App Service. The application needs to store session state. Which Azure service provides the best performance and reliability for session state storage?

Accepted Answer

Azure Cache for Redis. Azure Cache for Redis provides the best performance and reliability for session state storage because it is an in-memory data store with sub-millisecond latency, designed for high-throughput, low-latency scenarios like session caching. It supports session state providers natively in ASP.NET and ASP.NET Core, ensuring fast reads and writes for each user request without the overhead of disk I/O or network latency associated with other storage options.

Answer

Azure Table Storage

Answer

Azure Blob Storage

Answer

Azure SQL Database

Question 11

You have an Azure Function app that uses an Event Hubs trigger. The function processes events in batches. You notice that some events are being processed more than once. Which setting should you adjust to minimize duplicate processing?

Accepted Answer

Enable checkpointing in the function code. Option B is correct because checkpointing in Azure Event Hubs stores the offset of the last successfully processed event in a durable store (e.g., Azure Blob Storage). When the function restarts or scales, it resumes from that checkpoint, preventing reprocessing of already-handled events. Without checkpointing, the default behavior may start from the earliest offset or use the `latest` position, leading to duplicate processing.

Answer

Increase the maxRetries per event

Answer

Increase the event batch size

Answer

Decrease the prefetch count

Question 12

You are designing a solution that uses Azure Container Instances (ACI) to run a batch job. The job must run only once a day and should not incur costs when idle. Which configuration should you use?

Accepted Answer

Use a scheduled job that creates a container group with restart policy Never and delete after completion. Option C is correct because Azure Container Instances (ACI) supports a restart policy of 'Never' for one-off batch jobs, and you can orchestrate the creation and deletion of the container group using a scheduled job (e.g., Azure Logic Apps, Azure Functions, or a cron-based trigger). This ensures the container runs exactly once per day and incurs no cost when idle, as the container group is deleted after completion.

Answer

Use Azure Kubernetes Service with a node pool that scales to zero

Answer

Deploy a container group with a restart policy of Always

Answer

Use Azure Container Apps with scale-to-zero minimum replicas

Question 13

Your company develops a microservices application deployed to Azure Kubernetes Service (AKS). You need to enable secure communication between services using managed identities. Which Azure service should you use to manage the identities and access control for the pods?

Accepted Answer

Microsoft Entra Workload ID. Microsoft Entra Workload ID (formerly Azure AD Workload Identity) is the correct choice because it integrates with Kubernetes to automatically project an Azure AD-managed identity into each pod. This allows pods to authenticate to Azure resources (e.g., Key Vault, Storage) without managing secrets, using federated identity credentials that map a Kubernetes service account to an Azure AD application or user-assigned managed identity.

Answer

Azure Service Bus

Answer

Azure Key Vault

Answer

Azure Policy

Question 14

You are designing a serverless application using Azure Functions. The function must process messages from an Azure Service Bus queue. The processing time for each message can vary from a few seconds to several minutes. You need to minimize costs while ensuring that messages are processed in a timely manner. Which hosting plan should you recommend?

Accepted Answer

Premium plan. The Premium plan is correct because it supports long execution times (up to 60 minutes by default, configurable to unlimited), always-warm instances to avoid cold starts, and virtual network integration—all while providing predictable pricing and scaling. This meets the requirement of processing messages that can take several minutes without incurring the cold-start penalties or execution-time limits of the Consumption plan.

Answer

Container Instances plan

Answer

App Service plan

Answer

Consumption plan

Question 15

You need to deploy a web application to Azure App Service. The application requires a custom domain name and SSL/TLS certificate. You want to automate the deployment using Azure CLI. Which command should you use to upload the SSL certificate to the App Service?

Accepted Answer

az webapp config ssl upload. Option A is correct because az webapp config ssl upload is the correct Azure CLI command to upload a certificate to an App Service. Option B is wrong because az appservice web config ssl upload does not exist. Option C is wrong because az webapp certificate upload is incorrect syntax. Option D is wrong because az appservice certificate import imports a certificate from Key Vault, not a direct upload.

Answer

az appservice web config ssl upload

Answer

az appservice certificate import

Answer

az webapp certificate upload