AZ-204 Develop Azure compute solutions Practice Test 16 — 15 Questions

Question 1

You host a web application on Azure App Service using multiple deployment slots (production and staging). After swapping staging into production, users report errors. You need to ensure that the staging slot is warmed up before swapping and that any errors during swap cause an automatic rollback. What should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable auto swap and configure a custom warm-up path.. Enabling auto swap with a custom warm-up path ensures the staging slot is fully warmed up before the swap occurs, and if the warm-up fails or the application returns errors during the swap, Azure App Service automatically rolls back to the previous slot. This directly addresses the requirement for both pre-swap warm-up and automatic rollback on errors.

Answer

Configure deployment slot settings to be sticky.

Answer

Use swap with preview and complete the swap after verification.

Answer

Configure manual swap and run a warm-up script before swapping.

Question 2

You are building a solution that processes real-time telemetry from IoT devices. The telemetry data must be ingested, processed with minimal latency, and stored in Azure Blob Storage for long-term analytics. You need to choose the serverless compute service that is best suited for this scenario. What should you use?

Accepted Answer

Azure Functions with Event Hubs trigger. Azure Functions with an Event Hubs trigger is the best choice because it provides a serverless, event-driven compute model that can process high-throughput telemetry data with minimal latency. The Event Hubs trigger scales automatically based on the number of partitions and events, ensuring real-time processing, and the output can directly write to Azure Blob Storage for long-term analytics.

Answer

Azure Batch with Event Hubs input

Answer

Azure Logic Apps with Event Hubs connector

Answer

Azure WebJobs with Event Hubs SDK

Question 3

You deploy an Azure Function app that runs on the Consumption plan. The function writes logs to Application Insights. You notice that some log entries are missing during periods of high load. You need to ensure that all logs are captured without significantly increasing cost. What should you do?

Accepted Answer

Adjust the sampling rate in the Application Insights configuration to 100%.. Under high load, Application Insights uses adaptive sampling by default to reduce data volume, which can cause log entries to be dropped. Adjusting the sampling rate to 100% in the Application Insights configuration ensures all telemetry data is captured, while still running on the Consumption plan, which does not significantly increase cost because the function app itself scales and you only pay for execution time and resources used.

Answer

Change the function app to the Premium plan to get more CPU and memory.

Answer

Create a separate Application Insights resource for the function app.

Answer

Disable sampling in the function's host.json.

Question 4

You are designing a microservices solution using Azure Container Apps. One service must be exposed externally via HTTPS, while others should only be accessible within the environment. You need to configure networking for this scenario. What should you do?

Accepted Answer

Configure each container app's ingress: set the external service to 'External' and the internal services to 'Internal'.. Azure Container Apps allows you to control ingress at the individual container app level. Setting the external service's ingress to 'External' makes it reachable from the internet via HTTPS, while setting internal services to 'Internal' restricts access to only within the Container Apps environment, using the internal FQDN. This provides the required isolation without needing separate environments or complex network policies.

Answer

Enable external ingress at the environment level and use network policies to restrict access.

Answer

Deploy the external service in a different environment and use an internal load balancer.

Answer

Use a Dapr sidecar to route requests between services.

Question 5

You are deploying a critical application on Azure App Service. The application must be highly available across two Azure regions. You need to implement a disaster recovery strategy that meets the following requirements: automatic failover with minimal data loss, and the ability to test failover without affecting production. Which THREE actions should you perform?

Accepted Answer

Use deployment slots to test failover before making it active.. Deployment slots in Azure App Service allow you to create separate environments (e.g., staging) that can be swapped to production. This enables testing failover scenarios (like pointing Traffic Manager to the staging slot) without affecting the live production traffic, meeting the requirement for non-disruptive failover testing.

Answer

Configure the app to use active-passive database replication.

Answer

Deploy both instances in the same App Service Plan.

Question 6

You are building a serverless API using Azure Functions. The API must be secured with OAuth 2.0 and must support both user authentication and application permissions. You need to configure the function app appropriately. Which TWO steps should you take?

Accepted Answer

Expose scopes and app roles in the Microsoft Entra ID app registration.. Option D is correct because the function app must first be registered in Microsoft Entra ID (Azure AD) to obtain an application identity, which is required for OAuth 2.0 tokens to be issued and validated for the API. Option A is correct because exposing scopes (delegated permissions for user authentication) and app roles (application permissions for client credentials/daemon scenarios) in that app registration is exactly how you declare the permissions the API supports for both user and application access. Option B is incorrect because Microsoft Entra ID v1.0 endpoints lack support for some modern OAuth 2.0 features and dynamic consent needed here; v2.0 endpoints are recommended. Option C is incorrect because the portal Authentication blade configures platform-level auth settings, not the OAuth 2.0 scope/role definitions required for both user and application permissions. Option E is incorrect because EasyAuth handles authentication at the App Service layer but does not by itself define the scopes and app roles needed to support both user authentication and application permissions.

Answer

Use Azure AD v1.0 endpoints.

Answer

Configure authentication via the 'Authentication' blade in the portal.

Answer

Enable Azure App Service built-in authentication (EasyAuth).

Question 7

Your team develops a containerized web app using Azure Kubernetes Service (AKS). You need to ensure that the application can automatically scale based on HTTP request load. Which Kubernetes resource should you configure?

Accepted Answer

HorizontalPodAutoscaler. The HorizontalPodAutoscaler (HPA) is the correct Kubernetes resource for automatically scaling the number of pod replicas based on observed CPU, memory, or custom metrics like HTTP request rate. In an AKS cluster, HPA adjusts the replica count of a Deployment or ReplicaSet to match the target metric, enabling the application to handle varying HTTP load without manual intervention.

Answer

VerticalPodAutoscaler

Answer

PodDisruptionBudget

Answer

NetworkPolicy

Question 8

You are designing a serverless application using Azure Functions. The solution must process messages from an Azure Service Bus queue and update a Cosmos DB database. Which binding configuration should you use on the function?

Accepted Answer

Service Bus trigger with Cosmos DB output binding. The requirement specifies processing messages from an Azure Service Bus queue and updating a Cosmos DB database. A Service Bus trigger binds the function to the queue, and a Cosmos DB output binding writes the processed data directly to Cosmos DB, enabling a seamless serverless workflow without additional code for database operations.

Answer

Service Bus trigger with Table storage output binding

Answer

Blob trigger with Cosmos DB output binding

Answer

HTTP trigger with Cosmos DB input binding

Question 9

Your Azure App Service web app experiences slow response times during peak hours. You suspect the App Service plan is under-provisioned. You need to scale out the app automatically based on CPU usage. What should you configure?

Accepted Answer

Configure autoscale rules in the App Service plan. Autoscale rules in the App Service plan allow you to automatically scale out (increase instance count) based on metrics like CPU usage. This is the correct solution because it dynamically adjusts capacity in response to demand during peak hours without manual intervention.

Answer

Configure scheduled scaling in the app

Answer

Manually increase instance count

Answer

Configure scale up in the App Service plan

Question 10

You are developing a solution that processes large files uploaded to Azure Blob Storage. Each file must be processed by a long-running operation that may take up to 30 minutes. You need to use Azure Functions with a consumption plan. How should you handle the processing?

Accepted Answer

Use Durable Functions with a blob-triggered client function. D is correct because Azure Functions on a Consumption Plan have a default timeout of 5 minutes and a maximum of 10 minutes. A blob-triggered client function can start a Durable Functions orchestration, which can run for up to 30 minutes (or longer) by using the orchestration's timeout and retry capabilities, avoiding the Consumption Plan's timeout limit.

Answer

Use a Blob trigger function with a retry policy

Answer

Increase the function timeout to 30 minutes

Answer

Use an Event Grid trigger function to process the blob

Question 11

You need to deploy a containerized application to Azure Container Instances (ACI) with a public IP address and a DNS name label. Which YAML property should you configure for the DNS name?

Accepted Answer

dnsNameLabel. The `dnsNameLabel` property in the Azure Container Instances YAML definition is used to assign a custom DNS prefix to the container group's public IP address. When combined with the Azure region's default domain suffix (e.g., `eastus.azurecontainer.io`), this creates a fully qualified domain name (FQDN) like `<dnsNameLabel>.eastus.azurecontainer.io`, allowing clients to resolve the container group via DNS without needing the raw IP address.

Answer

containerGroupName

Answer

ipAddress

Answer

ports

Question 12

Your Azure Function app uses an Event Hub trigger. Under high load, some events are processed multiple times. You need to ensure exactly-once processing without losing events. What should you implement?

Accepted Answer

Make the function idempotent. Making the function idempotent ensures that even if the Event Hub trigger delivers the same event multiple times (which can happen under high load due to at-least-once delivery semantics), the function's side effects are safe to repeat. Idempotency is the only reliable way to achieve exactly-once processing in a distributed system where the trigger itself does not guarantee deduplication.

Answer

Use Azure Queue Storage instead

Answer

Enable checkpointing

Answer

Increase the batch size

Question 13

You are deploying a Java application to Azure App Service on Linux. The application requires a specific JDK version not available in the built-in stack. You need to provide the JDK without creating a custom container. What should you do?

Accepted Answer

Use a startup script to download and set JAVA_HOME. Azure App Service on Linux allows you to use a startup script to download a custom JDK and set the JAVA_HOME environment variable before the application starts. This approach avoids the need for a custom container while providing the specific JDK version required by the application.

Answer

Mount an Azure Files share containing the JDK

Answer

Use the Azure App Service Windows stack with a custom JDK

Answer

Create a custom Docker container and deploy to App Service

Question 14

Your AKS cluster runs a microservices application. You need to expose an internal service only within the cluster virtual network. Which Service type should you use?

Accepted Answer

Internal LoadBalancer (with annotation). An Internal LoadBalancer with the `service.beta.kubernetes.io/azure-load-balancer-internal: "true"` annotation creates a load balancer with a private IP address from the cluster's virtual network, making the service accessible only within that VNet. This is the correct choice for exposing an internal service exclusively within the AKS cluster virtual network.

Answer

NodePort

Answer

LoadBalancer

Answer

ClusterIP

Question 15

You have an Azure Function app that uses .NET 8 isolated process. The function must connect to an Azure SQL database using a managed identity. The function app has a system-assigned managed identity enabled. Which code snippet correctly retrieves the access token?

Accepted Answer

var credential = new DefaultAzureCredential(); var token = await credential.GetTokenAsync(new TokenRequestContext(new[] {"https://database.windows.net/.default"}));. It uses `DefaultAzureCredential` to obtain an access token for Azure SQL Database by specifying the resource URI `https://database.windows.net/.default` in a `TokenRequestContext`. In a .NET 8 isolated process function app with a system-assigned managed identity, `DefaultAzureCredential` automatically attempts managed identity authentication as one of its credential sources, making it the recommended approach. The `GetTokenAsync` method requires a `TokenRequestContext` object, not a plain string, to correctly request the token for the Azure SQL resource.

Answer

new SqlConnection(connectionString) using Integrated Security=true;

Answer

var token = await new Azure.Identity.DefaultAzureCredential().GetTokenAsync("https://database.windows.net");

Answer

var credential = new ManagedIdentityCredential(); var token = await credential.GetTokenAsync("https://database.windows.net");