AZ-204 Sample Questions & Answers

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing an application that processes Azure Blob storage events.

Your application has the following requirements:

Process transaction logs asynchronously for changes that occur to the blobs and the blob metadata. .
Process changes in the order in which they occurred. .
Retain changes for compliance reasons.

Solution: You use Azure Event Grid with a subscriber Azure Function app.

Does the solution meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it.
As a result, these questions will not appear in the review screen.

You are developing a web app named mywebappl. Mywebappl uses the address myapp1.azurewebsites.net. You protect mywebappl by implementing an Azure Web Application Firewall (WAF). The traffic to mywebappl is routed through an Azure Application Gateway instance that is also used by other web apps.

You want to secure all traffic to mywebappl by using SSL.

Solution: You open the Azure Application Gateway’s HTTP setting and set the Override backend path option to mywebapp1.azurewebsites.net. You then add an authentication certificate for mywebappl .azurewebsites.net.

Does this meet the goal?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

You are developing a solution for a public facing API.

The API back end is hosted in an Azure App Service instance.

You have implemented a RESTful service for the API back end.

You must configure back-end authentication for the API Management service instance.

Solution: You configure Client cert gateway credentials for the HTTP(s) endpoint.

Does the solution meet the goal?

You are developing a web app that uses Azure Active Directory (Azure AD) for authentication.

You want to configure the web app to use multifactor authentication.

What should you do?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

You are configuring a web app that delivers streaming video to users.

The application makes use of continuous integration and deployment.

You need to ensure that the application is highly available and that the users’ streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.

Solution: You include the use of Azure Redis Cache in your design.

Does the solution meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing a mobile app that uses an Azure SQL Database named Weyland.

The database contains a table names Customers that has a field named email_address.

You want to implement dynamic data masking to hide the data in the email_address field.

Solution: You run the Set-AzSqlDatabaseDataMaskingRule
-DatabaseName "Weyland" -SchemaName "dbo"
-TableName "Customers" -ColumnName "email_address"
-MaskingFunction "email" Powershell cmdlet

Does the solution meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet.

You need to ensure that users who connect to Azure AD via the internet using an unidentified IP address, are automatically instructed to change their passwords.

Solution: You configure the use of Azure AD Identity Protection.

Does the solution meet the goal?

You manage an Azure SQL database that allows for Azure AD authentication.

You need to make sure that database developers can connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum.

Which of the following should you implement?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has an azure subscription that includes a storage account, a resource group, a blob container and a file share.

A fellow administrator named Jon Ross used an Azure Resource Manager template to deploy a virtual machine and an Azure Storage account.

You need to identify the Azure Resource Manager template the Jon Ross used.

Solution: You access the Resource Group blade.

Does the solution meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing a web app named mywebappl. Mywebappl uses the address myapp1.azurewebsites.net. You protect mywebappl by implementing an Azure Web Application Firewall (WAF). The traffic to mywebappl is routed through an Azure Application Gateway instance that is also used by other web apps.

You want to secure all traffic to mywebappl by using SSL.

Solution: You open the Azure Application Gateway’s HTTP setting and set the Override backend path option to mywebapp1.azurewebsites.net. You then enable the Use for App service option.

Does this meet the goal?