AZ-204 Connect to and consume Azure services and third-party services Practice Test 13 — 15 Questions

Question 1

An application uses Azure Functions with a Durable Functions extension to orchestrate a workflow. The workflow calls multiple external APIs. The developer needs to handle transient failures when calling these APIs. Which pattern should the developer implement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Implement retry logic with exponential backoff. Durable Functions provides built-in support for automatic retry with exponential backoff via the `CallActivityWithRetryAsync` method or by configuring retry policies in orchestrator functions. This pattern is specifically designed to handle transient failures when calling external APIs, as it automatically retries failed operations with increasing delays, reducing load on the downstream service and improving resilience.

Answer

Use a saga pattern

Answer

Use a request-reply pattern

Answer

Use a circuit breaker pattern

Question 2

A company uses Azure Event Hubs to ingest telemetry data from IoT devices. The data is processed by a stream analytics job that outputs to Azure Data Lake Storage Gen2. The developer needs to ensure that the stream analytics job can authenticate to Event Hubs without storing connection strings in code. Which authentication method should the developer use?

Accepted Answer

Use Managed Identity. Managed Identity allows the Azure Stream Analytics job to authenticate to Event Hubs without storing any credentials in code or configuration. By enabling a system-assigned or user-assigned managed identity on the Stream Analytics job, it can securely obtain an Azure AD token to access the Event Hubs namespace. This eliminates the need for connection strings or SAS tokens, aligning with the requirement to avoid storing secrets.

Answer

Use a connection string with the Event Hubs namespace

Answer

Use a client certificate

Answer

Use a Shared Access Signature (SAS) token

Question 3

Which TWO Azure services can be used to store and manage secrets, such as API keys and connection strings? (Choose 2)

Accepted Answer

Azure Key Vault. Azure Key Vault is the dedicated service for securely storing and managing secrets, keys, and certificates. Managed Identity, on the other hand, is an authentication mechanism that provides an identity for Azure resources to access secrets stored elsewhere, such as Key Vault. It does not store secrets itself. Therefore, only Azure Key Vault qualifies as a service for storing and managing secrets among the given options.

Answer

Azure App Configuration

Answer

Azure Storage

Answer

Azure SQL Database

Answer

Azure Managed Identity

Question 4

Refer to the exhibit. A developer is creating an Azure Data Factory pipeline to copy data from Azure Blob Storage to Azure SQL Database. The pipeline fails with a timeout error when copying large files. Which action should the developer take to resolve the issue?

Accepted Answer

Increase the timeout value in the copy activity settings. The copy activity in Azure Data Factory has a default timeout of 7 days, but when copying large files, the activity may fail due to the default timeout for the underlying HTTP request to Blob Storage (which is 7 minutes for a single block). Increasing the timeout value in the copy activity settings allows more time for the entire file transfer to complete, especially for large files that require multiple retries or slower network conditions.

Answer

Change the source type to DelimitedTextSource

Answer

Enable Data Integration Units (DIU) to increase throughput

Answer

Use a staging copy with Azure Data Lake Storage Gen2

Question 5

Refer to the exhibit. A developer deploys this ARM template to create a web app with a connection string to Azure Cosmos DB. The deployment succeeds but the web app cannot connect to Cosmos DB. What is the most likely cause?

Accepted Answer

The connection string should use a secret reference to Azure Key Vault. The ARM template exposes the Cosmos DB connection string with the master key in plaintext, which is insecure. The connection string should be stored as a secret in Azure Key Vault and referenced using a secret reference in the ARM template. Option B is incorrect because the listKeys function is used correctly to retrieve the keys. Option C is incorrect because the web app name parameter is present and used. Option D is incorrect because the API version is appropriate for the deployment.

Answer

The listKeys function is used incorrectly

Answer

The web app name parameter is missing

Answer

The listKeys function requires a different API version

Question 6

Refer to the exhibit. An Azure Function is configured with an Event Hub trigger to process telemetry data. The function uses the EventProcessorHost to read events. The developer notices that the function is not processing all events; some events are skipped. What is the most likely cause?

Accepted Answer

The cardinality is set to 'many' causing batch processing issues. Setting the cardinality to 'many' in an Event Hub-triggered Azure Function causes the function to process events in batches. If the batch size is not properly configured or if the function fails to checkpoint after processing a batch, some events may be skipped when the host rebalances or restarts. The EventProcessorHost relies on checkpointing to track progress, and batch processing without proper checkpoint handling can lead to event loss.

Answer

The event hub name is misspelled

Answer

The consumer group is set to $Default

Answer

The connection string is stored as a securestring parameter

Question 7

A company uses Azure Functions to process orders. The function needs to read messages from an Azure Service Bus queue. Which binding should the developer configure in the function.json?

Accepted Answer

serviceBusTrigger. The correct binding for reading messages from an Azure Service Bus queue in an Azure Functions app is `serviceBusTrigger`. This trigger binding listens to a Service Bus queue or topic subscription and invokes the function when a message arrives. Option D is correct because it specifically names the Service Bus trigger, which is designed for this purpose.

Answer

serviceBus

Answer

eventHubTrigger

Answer

queueTrigger

Question 8

A web app uses Azure Key Vault to store secrets. The app runs in a production environment and needs to authenticate to Key Vault without storing connection strings in configuration files. Which authentication method should be used?

Accepted Answer

Managed identity. Managed identity (Option B) is correct because it allows the web app to authenticate to Azure Key Vault without storing any credentials in code or configuration files. Azure automatically manages the identity for the app, and the app uses the Azure Identity SDK to obtain tokens via the Azure Instance Metadata Service (IMDS) endpoint, which eliminates the need for connection strings or secrets.

Answer

Client secret stored in app settings

Answer

Storage account access keys

Answer

Certificate stored in Key Vault

Question 9

A microservices application deployed on Azure Kubernetes Service (AKS) needs to securely store and retrieve configuration settings. The configuration should be updated without redeploying containers. Which Azure service should be used?

Accepted Answer

Azure App Configuration. Azure App Configuration is purpose-built for managing configuration settings for microservices applications. It provides a centralized store for key-value pairs and feature flags, supports dynamic configuration updates without requiring container restarts or redeployments, and integrates natively with AKS via the App Configuration Kubernetes Provider or the Azure SDK. This enables live configuration changes that are automatically picked up by running containers.

Answer

Azure Cosmos DB

Answer

Azure Key Vault

Answer

Azure Blob Storage

Question 10

A company uses Azure Logic Apps to integrate with a third-party SaaS application. The Logic App must send an HTTP request to the SaaS API and handle pagination. Which connector should be used?

Accepted Answer

HTTP. The HTTP connector is the correct choice because it allows the Logic App to send a raw HTTP request to any REST API and handle pagination manually by inspecting response headers (e.g., 'nextLink') or body properties. Unlike other connectors, it provides full control over request/response cycles, enabling custom pagination logic without relying on a predefined API schema.

Answer

API Connection

Answer

HTTP + Swagger

Answer

HTTP Webhook

Question 11

A developer is building an app that uses Azure Cognitive Services Text Analytics. The app needs to detect the language of text input. Which Azure SDK method should be called?

Accepted Answer

DetectLanguage. The correct method is `DetectLanguage` because the Azure Cognitive Services Text Analytics API provides a dedicated operation for identifying the language of input text. This method returns the detected language along with a confidence score, making it the appropriate choice for the requirement of detecting language from text input.

Answer

ExtractKeyPhrases

Answer

AnalyzeSentiment

Answer

RecognizeEntities

Question 12

A company uses Azure API Management (APIM) to expose APIs to external partners. They need to enforce rate limiting per subscription key. Which APIM policy should be configured?

Accepted Answer

rate-limit. The rate-limit policy in Azure API Management is specifically designed to enforce rate limiting per subscription key, preventing individual API consumers from exceeding a defined number of calls within a specified time window (e.g., per second or per minute). This policy operates on a sliding window counter, ensuring fair usage across partners without affecting other subscribers. It is the correct choice because it directly targets subscription-based throttling at the API gateway level.

Answer

quota

Answer

ip-filter

Answer

throttling

Question 13

An app uses Azure Event Grid to publish events. The events must be delivered to an Azure Function that processes them. Which Event Grid event delivery model should be used?

Accepted Answer

Push delivery. Azure Event Grid uses a push delivery model to send events to subscribers like Azure Functions. When an event occurs, Event Grid automatically forwards (pushes) the event to the configured endpoint via HTTP POST requests. This ensures near-real-time processing without the subscriber needing to poll for new events.

Answer

Pull delivery

Answer

Batch delivery

Answer

Poll delivery

Question 14

A company has an Azure App Service web app that reads from Azure Blob Storage. The app uses a connection string stored in app settings. Recently, the storage account key was rotated, and the app started throwing authentication errors. What should the developer do to resolve this issue without redeploying the app?

Accepted Answer

Update the connection string in the app settings to use the new key. Updating the connection string in the App Service app settings (e.g., via Azure portal or Azure CLI) automatically restarts the app, applying the new key without requiring a redeployment. Option A (managed identity) would require code changes and is not necessary if connection strings are acceptable. Option B (rotating the key again) does not fix the mismatch if the app retains the old key. Option D (restarting the app) alone does not update the stored connection string.

Answer

Change the app to use managed identity

Answer

Rotate the storage account key again

Answer

Restart the app service

Question 15

A developer needs to store a large number of binary files (images) that are accessed frequently from a web app. Which Azure storage solution is most cost-effective?

Accepted Answer

Azure Blob Storage. Azure Blob Storage is the most cost-effective solution for storing large numbers of binary files like images because it is optimized for massive scale, high-throughput, and low-cost object storage. It supports hot, cool, and archive access tiers to balance cost and access frequency, and it integrates directly with web apps via HTTP/HTTPS REST APIs or SDKs, making it ideal for frequently accessed static content.

Answer

Azure Queue Storage

Answer

Azure Files

Answer

Azure Cosmos DB