AZ-204 Develop Azure compute solutions Practice Test 13 — 15 Questions

Question 1

Refer to the exhibit. You have an Azure App Service that uses the authentication settings shown. Users report that they are repeatedly prompted to sign in even after authenticating. What is the most likely cause?

Accepted Answer

No 'tokenRefreshEndpoint' is configured for session management.. Option D is correct because the absence of a 'tokenRefreshEndpoint' in the authentication configuration prevents the App Service from automatically refreshing the user's session token. Without this endpoint, the token expires after its lifetime (typically 1 hour for Azure AD access tokens), causing the user to be repeatedly prompted to sign in again. Configuring a token refresh endpoint enables the use of refresh tokens to silently obtain new access tokens, maintaining the session without user interaction.

Answer

The 'allowedAudiences' is missing the App Service URL.

Answer

The 'loginParameters' does not include 'offline_access'.

Answer

The 'issuer' URL is incorrect; it should be a tenant-specific endpoint.

Question 2

Refer to the exhibit. You run the Azure CLI command shown for an Azure Function app. What is the effect of this setting?

Accepted Answer

The function app runs from a deployment package in Azure Storage.. The `--run-from-package` flag in the Azure CLI command `az functionapp config appsettings set` sets the `WEBSITE_RUN_FROM_PACKAGE` app setting to `1`. This configures the function app to run from a deployment package (a .zip file) stored in Azure Blob Storage, which improves cold-start performance and ensures all files are consistent across instances. Option D correctly identifies this behavior.

Answer

The function app uses the latest runtime version.

Answer

Remote debugging is enabled for the function app.

Answer

The function app scales out to multiple instances.

Question 3

Refer to the exhibit. You deploy this ARM template to a resource group. The template fails with a 'ResourceNotFound' error. What is the most likely cause?

Accepted Answer

The App Service plan 'myplan' does not exist in the resource group.. The ARM template references an App Service plan named 'myplan' in the 'serverFarmId' property of the Microsoft.Web/sites resource. If 'myplan' does not exist in the same resource group, the deployment fails with a 'ResourceNotFound' error because Azure Resource Manager cannot resolve the dependency on a non-existent resource. The template does not include a definition for the App Service plan, so it must already exist in the resource group.

Answer

The 'apiVersion' is incorrect.

Answer

The template is missing the 'dependsOn' property.

Answer

The 'type' property is incorrect for a web app.

Question 4

Refer to the exhibit. You run this KQL query in Azure Resource Graph Explorer. The query returns no results. What is the most likely reason?

Accepted Answer

The resource type is incorrect; it should be 'microsoft.insights/components' in lowercase.. The KQL query uses the resource type 'Microsoft.Insights/Components' with mixed case, but Azure Resource Graph Explorer requires resource types to be specified in all lowercase. The correct type is 'microsoft.insights/components'. When the case does not match, the query returns no results because Azure Resource Graph performs a case-sensitive match on the 'type' property.

Answer

The 'contains' operator is case-sensitive.

Answer

The query must specify a subscription filter.

Answer

The 'where' clause must use '== ' instead of '=='.

Question 5

Which TWO features of Azure App Service can help you reduce application downtime during deployments?

Accepted Answer

Deployment slots.. Deployment slots (C) are a feature of Azure App Service that allow you to deploy a new version of your application to a staging slot, perform validation, and then swap it into production with zero downtime. Slot swap with auto-swap (E) automates this process, ensuring that the production slot is updated only after the staging slot is fully warmed up and ready, eliminating downtime during the transition.

Answer

Continuous deployment from GitHub.

Answer

Traffic Manager.

Answer

Auto-heal.

Question 6

Which THREE considerations are important when designing a solution using Azure Functions with a Consumption plan for a latency-sensitive application?

Accepted Answer

Cold start latency may impact initial requests.. A is correct because Azure Functions on the Consumption plan can experience cold starts when a function app is idle or after scaling down to zero instances. During a cold start, the runtime must load the function host, load dependencies, and execute the function code, which adds latency that can be unacceptable for latency-sensitive applications. This delay occurs because the Consumption plan does not keep instances warm when there is no traffic.

Answer

Always-on feature must be enabled to avoid cold starts.

Answer

Pre-warmed instances can be configured to reduce latency.

Question 7

You are developing a solution that uses Azure Container Registry (ACR) to store Docker images. You need to ensure that only authorized users can deploy images from ACR to an AKS cluster. What should you do?

Accepted Answer

Use the AKS cluster's managed identity with AcrPull role assignment.. Option D is correct because using a managed identity for AKS and assigning AcrPull role on ACR provides secure, password-less authentication. Option A is wrong because admin account is not recommended. Option B is wrong because AKS cannot use username/password directly. Option C is wrong because namespace roles do not control ACR access.

Answer

Configure AKS RBAC to limit image pull permissions.

Answer

Use Kubernetes secrets to store ACR credentials.

Answer

Enable the admin account on ACR and use the credentials in AKS.

Question 8

You need to run a batch job every night that processes data from Azure Blob Storage and writes results to Azure SQL Database. The job may run for up to 2 hours. Which Azure service should you use?

Accepted Answer

Azure Container Instances.. Azure Container Instances (ACI) is the correct choice because it allows you to run a containerized batch job on-demand without managing underlying infrastructure. The job's duration of up to 2 hours fits well within ACI's default timeout of 60 minutes (configurable up to 24 hours), and you can trigger it nightly via a scheduler like Azure Logic Apps or a timer-triggered Azure Function. ACI provides fast startup, per-second billing, and direct access to Azure Blob Storage and SQL Database via connection strings or managed identities.

Answer

Azure Logic Apps.

Answer

Azure Batch.

Answer

Azure Functions (Consumption plan).

Question 9

You are designing a solution that uses Azure Functions to process events from Azure Event Hubs. The function must process events in order and exactly once per partition. What should you do?

Accepted Answer

Use the Event Hubs trigger for Azure Functions with default configuration.. The Event Hubs trigger for Azure Functions, by default, processes events in order and exactly once per partition. It uses checkpointing to track the offset of the last successfully processed event, ensuring that each event is processed only once and in sequence within a partition. This default behavior aligns with the requirement without needing additional configuration.

Answer

Enable session state in the function app.

Answer

Use a Service Bus queue trigger with a singleton lock.

Answer

Disable checkpointing to ensure no duplicates.

Question 10

You are developing a serverless application using Azure Functions. The function must process messages from an Azure Storage Queue and write results to Azure Cosmos DB. Which binding should you use for the output?

Accepted Answer

Azure Cosmos DB output binding. Option D is correct because the Azure Cosmos DB output binding allows you to write the results of queue-triggered function execution directly to a Cosmos DB container. The function processes messages from an Azure Storage Queue (input binding) and uses the output binding to insert or upsert documents into Cosmos DB without writing any SDK code.

Answer

Azure Blob Storage output binding

Answer

Azure Cosmos DB input binding

Answer

Azure Storage Queue output binding

Question 11

You have an Azure App Service web app that experiences high CPU usage during peak hours. You need to scale out automatically based on CPU load. Which scaling solution should you use?

Accepted Answer

Autoscale with a CPU percentage rule. Autoscale with a CPU percentage rule is the correct solution because Azure App Service supports built-in autoscaling that can automatically increase or decrease the number of instances based on a metric like CPU percentage. This allows the web app to handle peak-hour traffic by scaling out when CPU usage exceeds a defined threshold, ensuring performance without manual intervention.

Answer

Manual scaling

Answer

Traffic Manager

Answer

Scale sets autoscale

Question 12

You are running a containerized application on Azure Container Instances. The application requires a custom DNS server. How should you configure this?

Accepted Answer

Use the 'dnsConfig' property in the container group configuration. Azure Container Instances (ACI) supports custom DNS server configuration at the container group level via the 'dnsConfig' property in the deployment JSON or ARM template. This property allows you to specify an array of DNS server IP addresses and optional search domains, which are applied to all containers within the group. Environment variables cannot override DNS resolution, and the Dockerfile's DNS settings are ignored by ACI because the container group's network stack is managed by the Azure platform.

Answer

Set the DNS server in the container's environment variables

Answer

Set the restart policy to 'Always'

Answer

Configure the DNS server in the Dockerfile

Question 13

You need to deploy an Azure Functions app that runs on a dedicated App Service plan. The function must be triggered by an HTTP request and call a downstream API that requires OAuth 2.0 authentication. Which approach should you use to store the API credentials securely?

Accepted Answer

Use Key Vault references in the function app settings. Option C is correct because Azure Key Vault references in function app settings allow you to securely store and retrieve sensitive information like OAuth 2.0 credentials (client ID, client secret) without exposing them in code or configuration files. The function app resolves these references at runtime using a managed identity, ensuring credentials are never stored in plaintext or accessible via source control.

Answer

Use Azure App Configuration with plain text

Answer

Store credentials in a configuration file in the deployment package

Answer

Store credentials in the function code as constants

Question 14

You are developing a background job that runs every hour to process data. You choose Azure Functions with a timer trigger. What is the correct format for the cron expression to run at the start of every hour?

Accepted Answer

0 0 * * * *. In Azure Functions timer triggers, the cron expression uses six fields: {second} {minute} {hour} {day} {month} {day-of-week}. To run at the start of every hour (i.e., at minute 0 and second 0 of every hour), the expression must be '0 0 * * * *'. Option C correctly sets second to 0, minute to 0, and hour to '*' (every hour), with the remaining fields as '*' (every day, every month, every day-of-week).

Answer

0 * * * * *

Answer

* 0 * * * *

Answer

0 0 0 * * *

Question 15

You are designing a solution that uses Azure Batch for parallel processing of large datasets. Each task requires significant CPU and memory. You need to minimize compute costs while ensuring tasks complete within a deadline. Which pool configuration should you use?

Accepted Answer

Low-priority VMs with a task retry policy. Low-priority VMs (now called Spot VMs) offer significant cost savings but can be preempted. Using them with a task retry policy ensures completion. Dedicated VMs are more expensive.

Answer

A mix of dedicated and low-priority VMs without retry

Answer

Use Azure Container Instances instead of Batch

Answer

Dedicated VMs only

AZ-204 Develop Azure compute solutions Practice Test 13 — 15 Questions

Exhibit

AZ-204 Develop Azure compute solutions Practice Test 13 — 15 Questions

Exhibit