AZ-204 Connect to and consume Azure services and third-party services Practice Test 5 — 15 Questions

Question 1

Three analytics pipelines each need to read every event from the same Azure Event Hub: one pipeline archives events to cold storage, one computes real-time aggregations, and one feeds a machine learning model. How should the developer configure Event Hubs to allow all three to consume independently without interfering with each other?

Accepted Answer

Create a separate consumer group for each pipeline; each group tracks its own offset independently. A is correct because each consumer group in Event Hubs maintains its own independent offset and checkpoint, allowing multiple consumers to read the same event stream without interfering. By creating a separate consumer group for each pipeline (archival, real-time aggregation, ML), each pipeline can process events at its own pace and from its own position in the stream, ensuring no consumer's progress affects another.

Answer

Create three separate Event Hubs in the same namespace and replicate events between them with Event Hubs Capture

Answer

Use a single consumer group and route events to different pipelines by partition key prefix

Answer

Enable Event Hubs Capture for all three pipelines so they read from the captured Avro files in storage instead of the Event Hub directly

Question 2

Messages failing to process are redelivered by Azure Service Bus. After a message has been delivered and abandoned the maximum number of times (MaxDeliveryCount), where does Service Bus move the message?

Accepted Answer

The message is moved to the dead-letter sub-queue of the original queue. When a message in Azure Service Bus is delivered and abandoned the maximum number of times (as defined by the MaxDeliveryCount property, default 10), the message is automatically moved to the dead-letter sub-queue of the original queue. This dead-letter sub-queue stores messages that cannot be processed successfully, allowing you to inspect and handle them separately without losing the message entirely.

Answer

The message is permanently deleted from the queue

Answer

The message is returned to the front of the queue with its DeliveryCount reset to zero

Answer

The message expires and is discarded according to the Time-to-Live setting

Question 3

Backend APIs exposed through Azure API Management are consumed by multiple subscribers. The product owner wants to prevent any single subscriber from sending more than 100 requests per minute, while allowing subscribers with heavier plans to have higher limits configured separately. Which APIM policy implements per-subscriber rate limiting?

Accepted Answer

Apply the rate-limit-by-key policy using the subscription key as the counter key, with calls set to 100 and renewal-period to 60. Option A is correct because the `rate-limit-by-key` policy in Azure API Management enforces a per-key rate limit, and using the subscription key as the counter key ensures each subscriber is limited individually. The `calls` parameter set to 100 and `renewal-period` to 60 seconds matches the requirement of 100 requests per minute per subscriber, while allowing different limits for different plans by applying separate policies with different call counts.

Answer

Apply the quota policy to the product with a total of 100 calls per minute shared across all subscribers

Answer

Apply an ip-filter policy that blocks IP addresses making more than 100 requests per minute

Answer

Configure a backend circuit breaker policy to return cached responses after 100 calls

Question 4

The mobile app team needs to send push notifications to 10 million devices running both iOS and Android. On iOS, notifications go through Apple Push Notification service (APNs); on Android, through Firebase Cloud Messaging (FCM). The team wants a single Azure service that abstracts platform differences and scales without managing separate APNs and FCM integrations per platform. Which service should they use?

Accepted Answer

Azure Notification Hubs with APNs and FCM credentials configured in the hub namespace. Azure Notification Hubs is the correct choice because it is a fully managed push notification service designed to abstract platform-specific notification systems like APNs (iOS) and FCM (Android). By configuring the APNs and FCM credentials in the hub namespace, the team can send a single notification that is automatically routed to the correct platform service, scaling to millions of devices without managing separate integrations.

Answer

Azure Service Bus with topics — one subscription per platform, each subscription delivering to APNs or FCM

Answer

Azure Event Grid with a custom endpoint handler per platform that calls APNs or FCM directly

Answer

Azure Communication Services email with HTML-formatted alerts sent to device email addresses

Question 5

A business process requires sending an approval email, waiting up to 48 hours for a manager's response, and then updating a SharePoint list based on the decision. The process owner has no programming experience and wants to build this without writing code. Which Azure service is the most appropriate?

Accepted Answer

Azure Logic Apps with the Office 365 Outlook approval action and the SharePoint connector. Azure Logic Apps is the correct choice because it provides a no-code/low-code designer that allows the process owner to visually build the approval workflow using the Office 365 Outlook 'Send approval email' action and the SharePoint connector to update the list. This fully meets the requirement of no programming experience while handling the 48-hour wait and conditional update.

Answer

Azure Durable Functions with the Human Interaction pattern using a timer and event listener

Answer

Azure Data Factory with a Copy Activity pipeline triggered by an Azure Function

Answer

Azure Event Grid with a custom webhook handler that calls the SharePoint REST API

Question 6

Arrange the steps to deploy a containerized application to Azure Container Instances (ACI) from Azure Container Registry (ACR) in the correct order.

Question 7

Arrange the steps to implement Azure Blob Storage lifecycle management to archive blobs after 30 days in the correct order.

Question 8

Match each Azure caching service to its description.

Question 9

Match each Azure DevOps component to its function.

Question 10

A company uses Azure Functions with an HTTP trigger and Azure Cosmos DB. They need to securely store connection strings for Cosmos DB and rotate them automatically every 90 days. Which service should they use?

Accepted Answer

Azure Key Vault. Azure Key Vault is the correct choice for storing secrets like connection strings and supports automatic rotation. Option A is wrong because App Configuration is for feature flags and configuration settings, not secret rotation. Option B is wrong because Managed Identity provides identity but not secret rotation. Option D is wrong because Azure AD is for authentication and authorization, not secret management.

Answer

Managed Identity

Answer

Azure App Configuration

Answer

Microsoft Entra ID

Question 11

A developer is building a solution that sends emails via SendGrid from Azure. Which Azure service should they use to integrate with SendGrid?

Accepted Answer

Azure Logic Apps. Azure Logic Apps provides connectors for SendGrid, making it easy to send emails. Option B is wrong because API Management is for managing APIs, not direct integration. Option C is wrong because Event Grid is for event routing. Option D is wrong because Functions can be used but require custom code; Logic Apps are simpler for this scenario.

Answer

Azure API Management

Answer

Azure Functions

Answer

Azure Event Grid

Question 12

An application uses Azure Event Hubs to ingest telemetry data. The team wants to process the data in near real-time and store aggregated results in Azure SQL Database. Which Azure service should they use?

Accepted Answer

Azure Stream Analytics. Azure Stream Analytics is designed for real-time processing on streaming data from Event Hubs and can output to SQL Database. Option A is wrong because Data Lake Storage is for storage, not processing. Option B is wrong because HDInsight is for batch processing. Option D is wrong because Functions can process events but lack the built-in streaming SQL capabilities of Stream Analytics.

Answer

Azure HDInsight

Answer

Azure Functions

Answer

Azure Data Lake Storage Gen2

Question 13

A company uses Azure DevOps to deploy microservices to Azure Kubernetes Service (AKS). They need to securely pull container images from Azure Container Registry (ACR) during deployment without storing credentials. Which authentication method should they use?

Accepted Answer

Managed Identity. AKS can be assigned a Managed Identity with AcrPull role to pull images from ACR without storing credentials. Option A is wrong because service principal requires credential management. Option C is wrong because admin keys are insecure. Option D is wrong because ACR tasks build images, not pull them.

Answer

ACR Tasks

Answer

ACR admin keys

Answer

Service principal with password

Question 14

A developer needs to call a third-party REST API from an Azure Function app. The API requires OAuth2 client credentials flow. Which approach should they use to securely store and retrieve the client secret?

Accepted Answer

Store in Azure Key Vault. Azure Key Vault is the secure store for secrets like client secrets. Option A is wrong because App Configuration is for configuration. Option B is wrong because environment variables are not secure. Option D is wrong because Managed Identity does not store secrets; it provides identity.

Answer

Store in application settings as environment variable

Answer

Store in Azure App Configuration

Answer

Use Managed Identity

Question 15

A company uses Azure Service Bus for messaging between microservices. They need to ensure that messages are processed in order within a partition. Which feature should they enable?

Accepted Answer

Sessions. Sessions in Service Bus enable ordered processing of messages within a session. Option B is wrong because partitioning distributes messages across partitions, not order. Option C is wrong because duplicate detection prevents duplicates but does not guarantee order. Option D is wrong because dead-lettering is for undelivered messages.

Answer

Duplicate detection

Answer

Partitioning

Answer

Dead-letter queue