AZ-204 Develop Azure compute solutions Practice Test 11 — 15 Questions

Question 1

A company is designing a serverless application using Azure Functions. They need to orchestrate multiple functions in a workflow, handle errors, and manage state. Which TWO features should they use?

Accepted Answer

Fan-out/Fan-in pattern. The Fan-out/Fan-in pattern is a core feature of Durable Functions that allows you to execute multiple functions in parallel (fan-out) and then aggregate their results (fan-in). This pattern is essential for orchestrating workflows, handling errors via retry policies, and managing state across function executions. Durable Functions provide built-in state management and checkpointing, making them ideal for serverless orchestration scenarios.

Answer

Azure Event Grid

Answer

Azure Logic Apps

Answer

Azure Data Factory

Question 2

You are developing an Azure App Service web app that must authenticate users via Microsoft Entra ID. Which TWO components are required to set up authentication?

Accepted Answer

Client ID and Client Secret. To authenticate users via Microsoft Entra ID in an Azure App Service web app, you must register the app in Entra ID (Option C) to establish an identity and configure authentication. The Client ID and Client Secret (Option B) are then used as credentials in the OAuth 2.0 authorization code flow to verify the app's identity and obtain tokens. These two components are mandatory for the standard OpenID Connect authentication flow.

Answer

A managed identity

Answer

An Azure AD B2C tenant

Answer

Azure Front Door

Question 3

You are developing an Azure Functions app that processes orders. The function must scale out automatically during peak hours but should not incur costs when idle. Which hosting plan should you use?

Accepted Answer

Consumption plan. The Consumption plan is correct because it automatically scales your function app based on demand, including scaling out to handle peak loads, and you only pay for execution time and resources consumed when your functions are running. When idle, there are no costs because the plan does not reserve any instances; it relies on a dynamic, event-driven scale model that can scale down to zero.

Answer

Premium plan

Answer

Container Instances

Answer

App Service plan

Question 4

You have an Azure App Service web app that uses a custom domain with TLS/SSL binding. You need to migrate the app to a new App Service plan in a different region. What is the correct order of steps?

Accepted Answer

Export the current plan, create the new plan, deploy the app, bind the domain and certificate. The proper sequence for migrating an Azure App Service web app with a custom domain and TLS/SSL binding to a new plan in a different region is: first, capture the existing web app's configuration (e.g., by exporting its ARM template, which includes custom domain and certificate binding details), then create the new App Service plan in the target region, deploy the app (which involves creating the new web app resource and deploying its code, potentially using the captured configuration), and finally bind the custom domain and certificate to the new web app. This ensures the custom domain and TLS/SSL binding are correctly associated with the new web app after it's deployed, avoiding downtime or misconfiguration.

Answer

Create the new plan, deploy the app, export the current plan, bind the domain

Answer

Export the current plan, create the new plan, bind the domain, deploy the app

Answer

Bind the domain to the new plan, export the current plan, create the new plan, deploy the app

Question 5

You are designing a solution that runs background jobs to process images. The jobs can run up to 10 minutes each. You need to ensure the jobs are resilient to failures and can be retried automatically. Which Azure service should you use?

Accepted Answer

Azure Queue Storage with an Azure Function trigger. Azure Queue Storage with an Azure Function trigger is the correct choice because it provides a reliable, message-based architecture for background job processing. Queue messages persist until processed, and the Azure Function trigger automatically retries on failure (up to 5 times by default, with configurable policies). This handles the 10-minute job duration via the queue's visibility timeout, which can be set to match the job's maximum runtime, ensuring messages are not prematurely reprocessed.

Answer

Azure Logic Apps with a recurrence trigger

Answer

Azure Service Bus with a WebJob

Answer

Azure Event Grid with a Logic App

Question 6

You have an Azure Container Apps environment running multiple microservices. One microservice is experiencing high CPU usage and slow response times. You need to configure autoscaling rules to scale based on HTTP requests. Which scaling rule should you add?

Accepted Answer

HTTP scaling rule (KEDA). KEDA's HTTP scaling rule is specifically designed to scale Azure Container Apps based on the number of concurrent HTTP requests, which directly addresses high CPU usage and slow response times caused by request load. Unlike CPU or memory metrics, HTTP scaling reacts to incoming request volume proactively, allowing the microservice to handle spikes before resource saturation occurs.

Answer

CPU percentage scaling rule

Answer

Memory percentage scaling rule

Answer

Custom scaling rule using Azure Monitor metrics

Question 7

You are deploying a web app to Azure App Service. The app uses environment-specific configuration (e.g., connection strings). You need to manage these settings without redeploying the app. Which feature should you use?

Accepted Answer

App Service application settings. App Service application settings (option B) are the correct feature because they allow you to store environment-specific configuration (e.g., connection strings, app settings) as key-value pairs that are injected into the app at runtime. These settings can be changed in the Azure portal, CLI, or PowerShell without redeploying the application code, making them ideal for managing configuration across different environments (development, staging, production). The settings are automatically encrypted at rest and overridden for the specific App Service slot when using deployment slots.

Answer

Azure App Configuration service

Answer

ARM template parameters

Answer

Azure Key Vault references in App Service

Question 8

You develop an Azure Function that writes to Azure Blob Storage. During testing, you notice that the function fails intermittently with a 503 (Service Unavailable) error. What is the most likely cause?

Accepted Answer

The storage account is throttling requests due to high volume. A 503 (Service Unavailable) error from Azure Blob Storage indicates that the storage service is temporarily unable to handle the request, typically due to server-side load. The most common cause is throttling when the storage account exceeds its scalability targets (e.g., 20,000 requests per second per account for blob storage). This aligns with intermittent failures under high request volume, not with configuration or existence issues.

Answer

The storage account firewall is blocking the function

Answer

The function does not have proper authentication

Answer

The blob container does not exist

Question 9

Your company has an Azure Kubernetes Service (AKS) cluster. You need to deploy a containerized application that requires persistent storage across pod restarts. The storage must be backed by Azure Disk and support ReadWriteOnce access mode. Which volume type should you use?

Accepted Answer

Azure Disk. Azure Disk is the correct volume type because it provides a durable block storage device that can be attached to a pod in an AKS cluster. It supports the ReadWriteOnce (RWO) access mode, meaning the disk can be mounted as read-write by a single node, which aligns with the requirement for persistent storage that survives pod restarts. Azure Disk is ideal for stateful applications that need high-performance, low-latency storage and do not require concurrent access from multiple pods.

Answer

Azure Blob Storage

Answer

EmptyDir

Answer

Azure Files

Question 10

You are developing a solution that uses Azure Container Instances to run a batch job. The job requires 8 GB of memory and 4 vCPUs. You need to minimize costs. Which container group configuration should you choose?

Accepted Answer

Linux container with 8 GB and 4 vCPUs in a single container group. Azure Container Instances bills per container group, not per container within the group. A single Linux container with 8 GB and 4 vCPUs in one container group meets the job's requirements with the lowest cost, as it avoids the overhead of multiple containers or groups. Splitting resources across containers or using separate groups would increase costs without benefit.

Answer

Linux containers split into two containers (4 GB each) in the same group

Answer

Windows container with 8 GB memory and 4 vCPUs

Answer

Linux container with 8 GB and 4 vCPUs, but using two separate container groups

Question 11

You need to monitor the performance of an Azure App Service web app. You want to track the number of HTTP 500 errors over the last hour. Which Azure Monitor metric should you use?

Accepted Answer

Http5xx. The Http5xx metric in Azure Monitor tracks the count of HTTP 500-level server error responses returned by your App Service. Since the question specifically asks for the number of HTTP 500 errors over the last hour, this metric directly provides that count without any aggregation or filtering needed.

Answer

Data In

Answer

Average Response Time

Answer

Requests

Question 12

Your Azure Container Apps solution uses Dapr for microservices communication. Which THREE Dapr building blocks are essential for service-to-service invocation and state management?

Accepted Answer

Service Invocation. Service Invocation (A) is correct because Dapr's service invocation building block enables direct, secure service-to-service communication using gRPC or HTTP, with built-in mTLS, retries, and observability. State Management (E) is correct because it provides a key-value store abstraction for managing state across microservices, supporting pluggable state stores like Redis, Cosmos DB, or SQL Server. Pub/Sub (C) is correct because it enables asynchronous event-driven communication between services, decoupling producers and consumers via message brokers like Kafka, RabbitMQ, or Azure Service Bus.

Answer

Bindings

Answer

Actors

Question 13

You are deploying an Azure App Service using an ARM template. After deployment, you find that the application settings are not applied. What is the most likely issue?

Accepted Answer

The resource is missing a dependsOn property for the parent site. When deploying application settings via an ARM template, the 'Microsoft.Web/sites/config' resource (which contains the appsettings) must have a 'dependsOn' property referencing the parent 'Microsoft.Web/sites' resource. Without this dependency, Azure Resource Manager may attempt to apply the settings before the site exists, causing the settings to be silently ignored or not applied. This is a common deployment ordering issue.

Answer

The resource type should be 'Microsoft.Web/sites/appsettings'

Answer

The apiVersion is outdated, use '2021-02-01'

Answer

The property 'MyApp:Setting1' uses a colon, which is not allowed

Question 14

You run the command above to create an Azure Container Instance. The container exits with a non-zero exit code. You need to check the logs to debug the issue. Which command should you use next?

Accepted Answer

az container logs --resource-group myRG --name mycontainer. The correct command is `az container logs` because it retrieves the stdout and stderr logs from a container that has exited, which is essential for debugging exit code failures. Since the container has already exited with a non-zero exit code, you need to inspect its logged output to understand the cause of the failure, and this command directly fetches those logs without requiring an active container.

Answer

az container attach --resource-group myRG --name mycontainer

Answer

az container exec --resource-group myRG --name mycontainer --exec-command /bin/sh

Answer

az container show --resource-group myRG --name mycontainer --query containers[0].instanceView.currentState.exitCode

Question 15

You receive an error when deploying this ARM template: 'The serverFarmId property is required.' What is missing from the template?

Accepted Answer

The server farm resource (Microsoft.Web/serverfarms) is not defined in the template. The error 'The serverFarmId property is required' indicates that the ARM template is missing a reference to an App Service Plan (Microsoft.Web/serverfarms) resource. In Azure, a web app or function app must be associated with an App Service Plan, which defines the compute resources and pricing tier. The template must define the server farm resource and link it via the 'serverFarmId' property on the site resource.

Answer

The 'location' property is missing from the site resource

Answer

The apiVersion should be '2018-02-01'

Answer

The 'kind' property should be 'functionapp'