AZ-204 Develop Azure compute solutions Practice Test 15 — 15 Questions

Question 1

You are developing a background job that runs every hour to process data from an Azure SQL database and send notifications via SendGrid. The job must be serverless and cost-effective, and must automatically retry on failure. Which TWO options meet the requirements?

Accepted Answer

Azure Functions with Timer trigger. Azure Functions with a Timer trigger is correct because it provides a serverless, cost-effective compute model that runs on a schedule (e.g., every hour) without managing infrastructure. It integrates with Azure SQL via built-in bindings and supports automatic retry on failure through the host's retry policy or by implementing custom retry logic in code, meeting the requirements for a background job.

Answer

Azure Scheduler

Answer

Azure Batch with a schedule

Answer

Azure WebJobs with TimerTrigger

Question 2

You are deploying a critical application on Azure App Service. The application must be highly available across two Azure regions. You need to implement a disaster recovery strategy that meets the following requirements: automatic failover with minimal data loss, and the ability to test failover without affecting production. Which THREE actions should you perform?

Accepted Answer

Use deployment slots to test failover before making it active.. Option A is correct because deployment slots in Azure App Service allow you to create separate environments (e.g., staging) that can be swapped to production. This enables testing failover scenarios (like pointing Traffic Manager to the staging slot) without affecting the live production traffic, meeting the requirement for non-disruptive failover testing.

Answer

Configure the app to use active-passive database replication.

Answer

Deploy both instances in the same App Service Plan.

Question 3

You are building a serverless API using Azure Functions. The API must be secured with OAuth 2.0 and must support both user authentication and application permissions. You need to configure the function app appropriately. Which TWO steps should you take?

Accepted Answer

Expose scopes and app roles in the Microsoft Entra ID app registration.. Option A is correct because exposing scopes and app roles in the Microsoft Entra ID app registration is required to support both user authentication (via delegated permissions/scopes) and application permissions (via app roles). This allows the Azure Function to validate tokens for both user and application contexts using OAuth 2.0.

Answer

Use Azure AD v1.0 endpoints.

Answer

Configure authentication via the 'Authentication' blade in the portal.

Answer

Enable Azure App Service built-in authentication (EasyAuth).

Question 4

Your company has an Azure Kubernetes Service (AKS) cluster that hosts multiple microservices. You are tasked with deploying a new microservice that processes incoming HTTP requests and publishes messages to an Azure Service Bus topic. The microservice must scale based on the number of messages in the topic, and it must support graceful shutdown to complete in-flight requests. You need to choose the appropriate compute platform. The microservice is stateless and can be containerized. You want to minimize operational overhead and cost. The solution must automatically scale to zero when there are no messages. Which option should you choose?

Option A: Deploy the microservice as an Azure Function with a Service Bus trigger on the Consumption plan.
Option B: Deploy the microservice as a container in AKS with a Horizontal Pod Autoscaler based on Service Bus queue length.
Option C: Deploy the microservice as an Azure Container App with a Service Bus scale rule.
Option D: Deploy the microservice as an Azure App Service WebJob with continuous mode.

Accepted Answer

Azure Container App with Service Bus scale rule. Azure Container Apps (ACA) with a Service Bus scale rule is the correct choice because it provides event-driven scaling based on the number of messages in a Service Bus topic, can scale to zero when there are no messages, supports graceful shutdown via terminationGracePeriodSeconds, and minimizes operational overhead compared to AKS. ACA is a serverless container platform that abstracts Kubernetes complexity while still allowing containerized workloads, making it ideal for stateless microservices that need to scale on demand.

Answer

AKS with HPA based on Service Bus queue length

Answer

Azure Function with Service Bus trigger on Consumption plan

Answer

Azure App Service WebJob with continuous mode

Question 5

You are developing a web application that allows users to upload images. The application is deployed on Azure App Service. After upload, the images must be processed to generate thumbnails and to extract metadata. The processing should happen asynchronously and must be resilient to failures. You need to design the solution using serverless components. The solution must minimize latency for the user during upload, and the processing must be retried automatically if it fails. You also need to ensure that the processing is idempotent, so that duplicate messages do not cause duplicate thumbnails. Which approach should you use?

Option A: Use Azure Functions with a Blob Storage trigger to process each image as it is uploaded. The function generates thumbnails and stores metadata in Cosmos DB. Use the `leaseBlob` property to prevent duplicate processing.
Option B: Use Azure Functions with an Event Grid trigger to process images. The function generates thumbnails and stores metadata in Cosmos DB. Use Event Grid's built-in retry policy and idempotent logic in the function.
Option C: Use Azure Logic Apps with a Blob Storage connector to process images. The logic app generates thumbnails and stores metadata in Cosmos DB. Configure retry policy on the connector.
Option D: Use Azure Functions with a Service Bus queue trigger. The web app sends a message to the queue after upload. The function processes the message, generates thumbnails, and stores metadata. Use message deduplication to ensure idempotency.

Accepted Answer

Azure Functions with Service Bus queue trigger and duplicate detection. Option D is correct because it uses a Service Bus queue with duplicate detection, which ensures idempotent processing by automatically discarding duplicate messages within a defined time window. The web app uploads the image and immediately sends a message to the queue, minimizing user latency. The Azure Function triggered by the queue processes the image asynchronously, and Service Bus's built-in retry policy (via dead-lettering and max delivery count) provides resilience against failures.

Answer

Azure Functions with Blob Storage trigger, using leaseBlob

Answer

Azure Logic Apps with Blob Storage connector

Answer

Azure Functions with Event Grid trigger

Question 6

Your team develops a containerized web app using Azure Kubernetes Service (AKS). You need to ensure that the application can automatically scale based on HTTP request load. Which Kubernetes resource should you configure?

Accepted Answer

HorizontalPodAutoscaler. The HorizontalPodAutoscaler (HPA) is the correct Kubernetes resource for automatically scaling the number of pod replicas based on observed CPU, memory, or custom metrics like HTTP request rate. In an AKS cluster, HPA adjusts the replica count of a Deployment or ReplicaSet to match the target metric, enabling the application to handle varying HTTP load without manual intervention.

Answer

VerticalPodAutoscaler

Answer

PodDisruptionBudget

Answer

NetworkPolicy

Question 7

You are designing a serverless application using Azure Functions. The solution must process messages from an Azure Service Bus queue and update a Cosmos DB database. Which binding configuration should you use on the function?

Accepted Answer

Service Bus trigger with Cosmos DB output binding. Option D is correct because the requirement specifies processing messages from an Azure Service Bus queue and updating a Cosmos DB database. A Service Bus trigger binds the function to the queue, and a Cosmos DB output binding writes the processed data directly to Cosmos DB, enabling a seamless serverless workflow without additional code for database operations.

Answer

Service Bus trigger with Table storage output binding

Answer

Blob trigger with Cosmos DB output binding

Answer

HTTP trigger with Cosmos DB input binding

Question 8

Your Azure App Service web app experiences slow response times during peak hours. You suspect the App Service plan is under-provisioned. You need to scale out the app automatically based on CPU usage. What should you configure?

Accepted Answer

Configure autoscale rules in the App Service plan. Autoscale rules in the App Service plan allow you to automatically scale out (increase instance count) based on metrics like CPU usage. This is the correct solution because it dynamically adjusts capacity in response to demand during peak hours without manual intervention.

Answer

Configure scheduled scaling in the app

Answer

Manually increase instance count

Answer

Configure scale up in the App Service plan

Question 9

You are developing a solution that processes large files uploaded to Azure Blob Storage. Each file must be processed by a long-running operation that may take up to 30 minutes. You need to use Azure Functions with a consumption plan. How should you handle the processing?

Accepted Answer

Use Durable Functions with a blob-triggered client function. D is correct because Azure Functions on a Consumption Plan have a default timeout of 5 minutes and a maximum of 10 minutes. A blob-triggered client function can start a Durable Functions orchestration, which can run for up to 30 minutes (or longer) by using the orchestration's timeout and retry capabilities, avoiding the Consumption Plan's timeout limit.

Answer

Use a Blob trigger function with a retry policy

Answer

Increase the function timeout to 30 minutes

Answer

Use an Event Grid trigger function to process the blob

Question 10

You need to deploy a containerized application to Azure Container Instances (ACI) with a public IP address and a DNS name label. Which YAML property should you configure for the DNS name?

Accepted Answer

dnsNameLabel. The `dnsNameLabel` property in the Azure Container Instances YAML definition is used to assign a custom DNS prefix to the container group's public IP address. When combined with the Azure region's default domain suffix (e.g., `eastus.azurecontainer.io`), this creates a fully qualified domain name (FQDN) like `<dnsNameLabel>.eastus.azurecontainer.io`, allowing clients to resolve the container group via DNS without needing the raw IP address.

Answer

containerGroupName

Answer

ipAddress

Answer

ports

Question 11

Your Azure Function app uses an Event Hub trigger. Under high load, some events are processed multiple times. You need to ensure exactly-once processing without losing events. What should you implement?

Accepted Answer

Make the function idempotent. Option A is correct because making the function idempotent ensures that even if the Event Hub trigger delivers the same event multiple times (which can happen under high load due to at-least-once delivery semantics), the function's side effects are safe to repeat. Idempotency is the only reliable way to achieve exactly-once processing in a distributed system where the trigger itself does not guarantee deduplication.

Answer

Use Azure Queue Storage instead

Answer

Enable checkpointing

Answer

Increase the batch size

Question 12

You are deploying a Java application to Azure App Service on Linux. The application requires a specific JDK version not available in the built-in stack. You need to provide the JDK without creating a custom container. What should you do?

Accepted Answer

Use a startup script to download and set JAVA_HOME. Option C is correct because Azure App Service on Linux allows you to use a startup script to download a custom JDK and set the JAVA_HOME environment variable before the application starts. This approach avoids the need for a custom container while providing the specific JDK version required by the application.

Answer

Mount an Azure Files share containing the JDK

Answer

Use the Azure App Service Windows stack with a custom JDK

Answer

Create a custom Docker container and deploy to App Service

Question 13

Your AKS cluster runs a microservices application. You need to expose an internal service only within the cluster virtual network. Which Service type should you use?

Accepted Answer

Internal LoadBalancer (with annotation). ClusterIP is default and only accessible within the cluster, not from the VNet. LoadBalancer creates external IP, NodePort exposes on node IP, ExternalName maps to external DNS.

Answer

NodePort

Answer

LoadBalancer

Answer

ClusterIP

Question 14

You have an Azure Function app that uses .NET 8 isolated process. The function must connect to an Azure SQL database using a managed identity. The function app has a system-assigned managed identity enabled. Which code snippet correctly retrieves the access token?

Accepted Answer

var credential = new DefaultAzureCredential(); var token = await credential.GetTokenAsync(new TokenRequestContext(new[] {"https://database.windows.net/.default"}));. Option C is correct because it uses `DefaultAzureCredential` to obtain an access token for Azure SQL Database by specifying the resource URI `https://database.windows.net/.default` in a `TokenRequestContext`. In a .NET 8 isolated process function app with a system-assigned managed identity, `DefaultAzureCredential` automatically attempts managed identity authentication as one of its credential sources, making it the recommended approach. The `GetTokenAsync` method requires a `TokenRequestContext` object, not a plain string, to correctly request the token for the Azure SQL resource.

Answer

new SqlConnection(connectionString) using Integrated Security=true;

Answer

var token = await new Azure.Identity.DefaultAzureCredential().GetTokenAsync("https://database.windows.net");

Answer

var credential = new ManagedIdentityCredential(); var token = await credential.GetTokenAsync("https://database.windows.net");

Question 15

Which TWO actions can you perform using Azure Container Registry (ACR) tasks?

Accepted Answer

Schedule a task to patch base images. ACR Tasks supports automated patching of base images through the 'base image update' trigger. When a base image in a public or private registry is updated, ACR Tasks can automatically rebuild any container images that depend on it, ensuring security patches are applied without manual intervention. This is configured via the `--base-image-trigger-enabled` flag in the `az acr task create` command.

Answer

Import images from another registry

Answer

Deploy images to AKS

Answer

Automatically scan images for vulnerabilities