AZ-204 Develop Azure compute solutions Practice Test 8 — 15 Questions

Question 1

You are deploying a containerized application to Azure Container Instances. The application requires writing temporary files to a local filesystem. You need to ensure that the files persist if the container restarts. What should you do?

Accepted Answer

Mount an Azure Files share as a volume in the container group.. Azure Container Instances (ACI) supports mounting Azure Files shares as volumes. When a container restarts, its writable layer is ephemeral and lost, but an Azure Files share persists independently. By mounting the share, temporary files written to the mount point survive container restarts, meeting the persistence requirement.

Answer

Use the container's writable layer to store files.

Answer

Use Azure Blob Storage and mount it as a volume.

Answer

Configure a Docker volume in the container image.

Question 2

Your Azure Functions app uses a consumption plan and processes messages from an Azure Service Bus queue. You notice that message processing takes up to 10 minutes, and some messages are being processed multiple times. What is the most likely cause?

Accepted Answer

The lock duration on the Service Bus queue is shorter than the processing time.. Option C is correct because the default lock duration for a Service Bus queue is 30 seconds, which is far shorter than the 10-minute processing time. When the lock expires, the message becomes visible to other consumers, causing duplicate processing. The function host does not extend the lock automatically unless the client explicitly renews it, leading to multiple deliveries.

Answer

The max delivery count for the queue is set too low.

Answer

The function host is configured with a low maximum instance count.

Answer

The function does not handle poison messages correctly.

Question 3

Which TWO actions should you take to enable a user-assigned managed identity for an Azure App Service web app?

Accepted Answer

Create the managed identity resource in Microsoft Entra ID.. Option A is correct because a user-assigned managed identity is a standalone Azure resource created in Microsoft Entra ID (formerly Azure AD). It must exist as an identity resource before it can be assigned to any Azure service, including an App Service web app. This identity is then tied to a specific tenant and can be used by multiple Azure resources.

Answer

Configure the identity in each deployment slot separately.

Answer

Store the identity's client ID in an app setting.

Answer

Create the managed identity in the same resource group as the web app.

Question 4

Which THREE features are supported by Azure Container Apps? (Select three.)

Accepted Answer

Event-driven scaling using KEDA.. Azure Container Apps uses KEDA (Kubernetes Event-Driven Autoscaling) to scale containers based on event-driven metrics such as queue depth, HTTP request count, or custom Prometheus metrics. This allows containers to scale to zero when idle and scale out rapidly based on real-time demand, making it ideal for event-driven workloads.

Answer

Virtual network (VNet) injection.

Answer

Mounting Azure NetApp Files volumes.

Question 5

You are developing an Azure Function that runs on a Consumption plan. The function needs to process a large file uploaded to Azure Blob Storage. The processing is CPU-intensive and may take up to 30 minutes. What should you use to implement the function?

Accepted Answer

Configure the function app to use a Premium plan to allow longer execution times.. Azure Functions on a Consumption plan have a maximum execution timeout of 10 minutes (or 5 minutes by default). For CPU-intensive processing that may take up to 30 minutes, you must use a Premium plan, which supports unlimited execution duration (subject to the functionTimeout setting, which can be set up to 60 minutes by default and up to unlimited if configured). The Premium plan also provides dedicated instances and pre-warmed workers, which are suitable for long-running, resource-intensive workloads.

Answer

Use a blob trigger and set the batchSize to 1 to avoid timeouts.

Answer

Set the functionTimeout in host.json to 30 minutes on the Consumption plan.

Answer

Create an orchestrator function using Durable Functions to manage the processing.

Question 6

You deploy the above ARM template. Later, you update the web app's code by deploying a new ZIP package to Azure Blob Storage and updating the WEBSITE_RUN_FROM_PACKAGE setting with the new package URL. However, the web app continues to run the old code. What is the most likely cause?

Accepted Answer

The value '1' indicates the package is from local storage, not an external URL.. Option D is correct because when the WEBSITE_RUN_FROM_PACKAGE app setting is set to '1', it tells Azure App Service to use a local package stored in the site's wwwroot folder. To use an external package from Azure Blob Storage, the setting must be set to the full URL of the blob (with a SAS token if private). Keeping the value as '1' means the service ignores the new blob URL and continues to run the old local package.

Answer

The app setting name is misspelled. It should be 'WEBSITE_RUN_FROM_ZIP'.

Answer

The setting requires a value of '0' to enable external packages.

Answer

The ARM template uses an incorrect apiVersion.

Question 7

Your Azure Function app uses an event-driven architecture with Azure Event Hubs. You need to ensure that if the function fails to process an event, the event is retried up to three times and then sent to a dead-letter queue. What should you configure?

Accepted Answer

Configure the retry policy in the function's host.json file.. Option C is correct because Azure Functions for Event Hubs supports a built-in retry policy configured in the host.json file. This policy allows you to specify the maximum number of retries (e.g., 3) and, after exhausting those retries, the event is automatically sent to a dead-letter queue (DLQ) configured on the Event Hub. This approach is declarative and requires no custom code for retry or dead-lettering logic.

Answer

Use Durable Functions to orchestrate retries and dead-lettering.

Answer

Implement a try-catch block in the function code and manually re-queue the event.

Answer

Set the 'enableRetry' property on the Event Hub namespace.

Question 8

You deploy the above ARM template resource. After deployment, the web app cannot connect to Application Insights. The Application Insights resource exists in the same region. What is the most likely cause?

Accepted Answer

The app setting 'APPINSIGHTS_INSTRUMENTATIONKEY' is deprecated; you should use 'APPLICATIONINSIGHTS_CONNECTION_STRING' instead.. Option B is correct because the ARM template likely sets the 'APPINSIGHTS_INSTRUMENTATIONKEY' app setting, which is deprecated. Application Insights now requires the 'APPLICATIONINSIGHTS_CONNECTION_STRING' app setting for authentication and telemetry ingestion, as the instrumentation key alone is no longer sufficient for newer SDK versions and regional endpoints.

Answer

The dependsOn is incorrect; it should reference the Application Insights resource ID.

Answer

The web app needs a user-assigned managed identity to access Application Insights.

Answer

The instrumentation key must be set under a different name, like 'APPINSIGHTS_KEY'.

Question 9

Which TWO conditions are required to use the 'Run from Package' feature in Azure App Service?

Accepted Answer

The package must be accessible via a URL if not deployed locally.. Option A is correct because the 'Run from Package' feature in Azure App Service requires the deployment package to be accessible via a URL if it is not deployed locally (e.g., uploaded directly via the Azure portal or CLI). When using a remote URL, the package must be publicly accessible or secured with a SAS token, as App Service downloads it to the /home/data/SitePackages directory during startup. This ensures the app runs directly from the package without extracting it to the wwwroot folder.

Answer

The package must be stored in Azure Blob Storage.

Answer

The package size cannot exceed 500 MB.

Answer

The App Service must have a managed identity to access the package.

Question 10

You are designing a solution that uses Azure Container Instances (ACI) to run a batch processing job. The job is expected to run for up to 2 hours. You need to minimize costs. Which ACI configuration should you use?

Accepted Answer

Use a container group with a restart policy of 'OnFailure' or 'Never'.. Option A is correct because setting the restart policy to 'OnFailure' or 'Never' ensures that the container does not restart after the batch job completes, avoiding unnecessary compute charges. ACI bills per second of container runtime, so any idle or restarted container time directly increases cost. For a finite batch job, a restart policy that prevents automatic restarts is the most cost-effective choice.

Answer

Use GPU-enabled containers for faster processing.

Answer

Deploy the container group in a virtual network.

Answer

Use a container group with a restart policy of 'Always'.

Question 11

You run the above command. The web app is connected to a GitHub repository via Continuous Deployment. You push a new commit to the 'main' branch, but the web app does not update. What is the most likely cause?

Accepted Answer

The GitHub webhook is not configured to trigger on push events.. The web app is configured for Continuous Deployment via GitHub, which relies on a webhook to notify Azure App Service of new commits. When a push event occurs on the 'main' branch, the webhook must be configured to trigger the deployment. If the webhook is not set to fire on push events, Azure will never receive the notification, and the app will not update despite the new commit.

Answer

The repository is Mercurial, not Git.

Answer

The deployment rollback is enabled and blocking new deployments.

Answer

The 'branch' property is set to 'main', but the actual branch is 'master'.

Question 12

Which THREE considerations are important when designing an Azure Function that uses Durable Functions for fan-out/fan-in pattern?

Accepted Answer

The orchestrator function must be deterministic.. The orchestrator function in Durable Functions must be deterministic because it replays execution history multiple times to recover state after a process restart or to handle async operations. Non-deterministic code (e.g., random numbers, current time) would produce different results on replay, breaking the reliable execution model that Durable Functions relies on for fan-out/fan-in patterns.

Answer

Orchestration history is stored in memory to reduce latency.

Answer

The orchestrator function should be triggered by an HTTP trigger directly.

Question 13

Your company has an Azure App Service web app that runs on a Standard App Service plan. You need to scale out the app to handle increased traffic during business hours and scale in during off-hours. What should you configure?

Accepted Answer

Configure autoscale rules on the App Service plan to scale out and in based on CPU usage.. Option A is correct because Azure App Service autoscale rules allow you to automatically scale out (increase instance count) and scale in (decrease instance count) based on metrics like CPU usage. This meets the requirement to handle increased traffic during business hours and reduce costs during off-hours without manual intervention. Autoscale is configured at the App Service plan level, not the web app itself, and works with the Standard tier and above.

Answer

Manually increase the instance count during business hours.

Answer

Scale up the App Service plan to a Premium plan.

Answer

Use Azure Traffic Manager to distribute load.

Question 14

You deploy the above ARM template resource for a web app. The web app reads the connection string from the 'DefaultConnection' name. However, the web app fails to connect to the database with an error 'Login failed for user 'myuser'. What is the most likely cause?

Accepted Answer

The SQL server is configured to use Microsoft Entra authentication only, not SQL authentication.. Option D is correct. The connection string includes a password in plain text. The recommended approach is to use managed identity and not include a password. The login failure could be due to the password being incorrect or the SQL server not allowing SQL authentication. However, the most likely cause based on best practices is that the SQL server is configured to use Microsoft Entra authentication only, and the connection string uses SQL authentication. Option A is wrong because the type is correct for SQL Azure. Option B is wrong because the connection string syntax is correct. Option C is wrong because the user ID should match the database user.

Answer

The user ID does not have access to the database.

Answer

The connection string type should be 'SQLServer' instead of 'SQLAzure'.

Answer

The connection string is missing 'Trusted_Connection=True;'.

Question 15

You are developing a solution that uses Azure Container Apps. Your application is a microservice that needs to expose a gRPC endpoint. The service must scale to zero when idle. What should you do?

Accepted Answer

Deploy the microservice to Azure Container Apps and configure a scale rule with minReplicas set to 0.. Azure Container Apps natively supports gRPC endpoints and can scale to zero by setting `minReplicas` to 0 in a scale rule. This configuration allows the microservice to run only when there are active requests, reducing costs during idle periods. The combination of gRPC support and dynamic scaling makes Container Apps the correct choice for this scenario.

Answer

Use Azure Functions with a gRPC trigger.

Answer

Deploy the microservice to Azure Kubernetes Service with a virtual node.

Answer

Deploy the microservice to Azure Container Instances with a scale rule.