AZ-204 Timed Practice Test 5 — 10 Questions

Question 1

Arrange the steps to create a CI/CD pipeline using Azure DevOps for an Azure App Service in the correct order.

Question 2

Arrange the steps to secure an Azure API Management API using OAuth 2.0 with Azure AD in the correct order.

Question 3

Arrange the steps to implement Azure Key Vault for storing and retrieving secrets in an application in the correct order.

Question 4

Arrange the steps to configure auto-scaling for an Azure App Service in the correct order.

Question 5

Arrange the steps to implement Azure Functions with a Cosmos DB trigger in the correct order.

Question 6

Arrange the steps to implement Azure Blob Storage lifecycle management to archive blobs after 30 days in the correct order.

Question 7

A production API needs proactive alerting for failed dependency calls. Which two elements are required for a useful Azure Monitor alert?

Accepted Answer

A signal or metric/log query that detects the condition. Option B is correct because Azure Monitor alerts require a signal—either a metric, log query, or activity log event—to define the condition that triggers the alert. For failed dependency calls, you would use a log query (e.g., from Application Insights) or a custom metric to detect when the dependency failure rate exceeds a threshold. Without a signal, the alert has no basis to evaluate or fire.

Answer

A manually exported CSV report

Answer

A public IP address on the app

Question 8

A production API needs proactive alerting for high telemetry cost. Which two elements are required for a useful Azure Monitor alert?

Accepted Answer

A signal or metric/log query that detects the condition. Option A is correct because an Azure Monitor alert requires a signal—either a metric (e.g., number of API calls) or a log query (e.g., Application Insights traces)—that defines the condition to detect high telemetry cost. Without this signal, the alert has no data source to evaluate against a threshold or pattern, making proactive detection impossible.

Answer

A public IP address on the app

Answer

A manually exported CSV report

Question 9

A document rendering job in Azure App Service must safely access Key Vault secrets without connection strings in configuration. Which two steps are required?

Accepted Answer

Enable a managed identity for the web app. A managed identity provides an automatically managed Azure AD identity for the web app, eliminating the need to store credentials in code or configuration. By enabling a system-assigned or user-assigned managed identity, the App Service can authenticate to Azure Key Vault without any connection strings or secrets in app settings. This is the foundational step for secure, identity-based access to Key Vault.

Answer

Enable anonymous access on the vault

Answer

Store the Key Vault access key in app settings

Question 10

A table stores session records in Azure Table Storage. Queries frequently retrieve all records for one customer in a time range. What key design is best?

Accepted Answer

PartitionKey as customer ID and RowKey based on sortable timestamp. Option C is correct because Azure Table Storage queries are most efficient when they target a single partition key. Using the customer ID as the PartitionKey ensures all records for a customer are in the same partition, and using a sortable timestamp (e.g., inverted ticks) as the RowKey allows efficient range queries within that partition, leveraging the table's natural index order.

Answer

RowKey as a constant value

Answer

PartitionKey as a random GUID for every record

Answer

PartitionKey as the full JSON payload