AZ-204 Timed Practice Test 4 — 10 Questions

Question 1

Your Azure web app is running in a production environment. Users report that the app is slow. You need to identify the root cause without impacting production traffic. Which approach should you use?

Accepted Answer

Enable Application Insights Profiler. Application Insights Profiler provides detailed, per-request performance traces that pinpoint which code paths are consuming the most time, enabling root cause analysis of slow responses without altering production traffic. Unlike sampling or logs, Profiler captures execution data on-demand or automatically with minimal overhead, making it ideal for diagnosing latency issues in a live environment.

Answer

Enable Application Insights sampling at 100%

Answer

Run a load test in a staging slot

Answer

Review server logs in the web app

Question 2

Your web app hosted on Azure App Service is experiencing high memory usage. You need to capture a memory dump for analysis without restarting the app. Which diagnostic feature should you use?

Accepted Answer

Azure App Service Diagnostics (Diagnose and solve problems). Azure App Service Diagnostics (Diagnose and solve problems) provides a built-in 'Memory Dump' tool that allows you to capture a full or mini memory dump of your app's process without requiring a restart. This is accessed through the Azure portal under the 'Diagnose and solve problems' blade, specifically via the 'Collect Memory Dump' diagnostic tool, which uses the Windows Debugging Tools to snapshot the w3wp.exe process while the app continues running.

Answer

Application Insights Profiler

Answer

Snapshot Debugger

Answer

Diagnostic settings

Question 3

You are running an Azure App Service web app on the Basic tier. Users report slow initial responses due to cold starts. You need to keep the app warm without upgrading the hosting plan. Which feature should you enable?

Accepted Answer

Enable 'Always On' in the App Service configuration.. The 'Always On' feature prevents the App Service from being unloaded after periods of inactivity, eliminating cold starts by keeping the application loaded in memory. This is available on the Basic tier and above, so it solves the problem without requiring a plan upgrade.

Answer

Upgrade to a Premium plan to get pre-warmed instances.

Answer

Implement an auto-scaling rule to maintain a minimum instance count.

Answer

Reduce the web app's idle timeout via application code.

Question 4

A developer needs to run a Kusto query against application request data to identify 95th percentile latency by operation. Where should the query be run? The architecture review board prefers a managed AWS-native control.

Accepted Answer

Logs in Application Insights or the associated Log Analytics workspace. Application Insights stores telemetry data, including request latency, in a Log Analytics workspace. Kusto queries against this data can compute percentiles (e.g., 95th) using the `percentile()` function. This is the correct location because the architecture review board prefers a managed AWS-native control, and Log Analytics is the native Azure monitoring service for running such queries.

Answer

Microsoft Entra audit logs

Answer

Azure Key Vault diagnostic settings

Answer

Azure Resource Graph only

Question 5

Match each Azure monitoring tool to its purpose.

Question 6

Match each Azure container service to its primary use case.

Question 7

Match each Azure compute service to its execution model.

Question 8

You are building a web application that uses Microsoft Entra ID for authentication. The application needs to call Microsoft Graph API to read user profiles and send emails on behalf of the signed-in user. You want to ensure that the user's consent is obtained only once and that the application can refresh tokens silently. Which OAuth 2.0 flow should you implement?

Accepted Answer

OAuth 2.0 Authorization Code flow with PKCE (Proof Key for Code Exchange).. The Authorization Code flow with PKCE is the recommended OAuth 2.0 flow for public client applications (like single-page apps or mobile apps) that need delegated access to Microsoft Graph. It allows the application to obtain an authorization code, exchange it for an access token and a refresh token, and use the refresh token to silently acquire new tokens without requiring the user to re-consent. This flow ensures that user consent is obtained only once and supports silent token refresh, meeting the requirements.

Answer

OAuth 2.0 Client Credentials flow.

Answer

OAuth 2.0 Implicit Grant flow.

Answer

OAuth 2.0 Resource Owner Password Credentials (ROPC) flow.

Question 9

A single-page app signs in users with Microsoft Entra ID and calls a protected API. The app cannot safely keep a client secret. Which OAuth flow should be used? The design must avoid adding custom operational scripts.

Accepted Answer

Authorization code flow with PKCE. The authorization code flow with PKCE (Proof Key for Code Exchange) is the recommended OAuth 2.0 flow for single-page applications (SPAs) that cannot securely store a client secret. PKCE uses a dynamically generated cryptographic code verifier and challenge, ensuring that even if the authorization code is intercepted, it cannot be exchanged for tokens without the original verifier. This flow is designed for public clients (like SPAs) and avoids the need for custom operational scripts.

Answer

Implicit flow

Answer

Client credentials flow

Answer

Resource owner password credentials flow

Question 10

You are monitoring an Azure web application with Application Insights. You want to create a custom dashboard that shows the number of requests over time and the average server response time. Which Application Insights feature should you use to create this dashboard?

Accepted Answer

Metrics Explorer. Metrics Explorer in Application Insights is designed for visualizing pre-aggregated metrics like request count and server response time over time. It allows you to create custom charts and pin them to an Azure dashboard, making it the correct choice for this monitoring requirement.

Answer

Log Analytics

Answer

Application Map

Answer

Smart Detection