Review Mode Diagnostic Test – AZ-204 Developing Solutions for Microsoft Azure

You manage an Azure App Service that serves users across multiple regions. The application uses Azure Traffic Manager to route traffic intelligently and has Application Insights enabled for monitoring. Additionally, Azure Front Door is configured to enhance global load balancing and content delivery.

Your team must generate monthly reports on uptime trends and analyze historical performance data to ensure high availability.

Which solutions will achieve this goal? (Select TWO.)

Note: Each correct selection is worth one point.

You are developing an Azure Web App that processes customer orders. The application requires an App Service background task to handle asynchronous operations, such as sending order confirmation emails and updating inventory in response to new customer orders.

You need a solution that can run continuously or on a schedule within the Azure App Service environment.

You plan to use the WebJobs SDK to integrate with an Azure Storage queue to process incoming order requests efficiently.

Which of the following options will meet this requirement?

You manage multiple Azure API Management (APIM)-hosted APIs for your organization.

A minor and non-breaking changes are required for one of the APIs. These updates must adhere to the following conditions:

– Existing consumers must not experience disruptions.

– A rollback mechanism should be available in case issues arise.

– The modifications must be documented to inform developers about the updates.

– The changes should be thoroughly tested before being made public.

Additionally, your organization is evaluating the use of the Azure API Center to catalog and manage APIs across teams.

Which of the following is the most effective approach to updating the API while ensuring compliance with these conditions?

You are designing an Azure API that needs to securely call another internal API hosted in Azure API Management. The following security requirements must be met:

– The API must authenticate itself when making calls to the internal API.

– No client credentials, API keys, or tokens should be sent manually.

– Authentication should integrate with Microsoft Entra ID for seamless security.

Which authentication mechanism should be implemented?

You are maintaining a mission-critical Azure App Service web application for thousands of users and have enabled Application Insights for monitoring. Your team has observed multiple exceptions in the production environment, causing intermittent failures.

To identify the root cause, you need to examine source code execution and variable values when exceptions occur without impacting live performance.

Additionally, your team uses Azure Monitor Alerts to be notified when the exception rate exceeds a threshold.

Which Application Insights feature is best suited for this scenario?

You are developing a real-time logistics tracking system for delivery trucks that sends location and status data to the backend via Azure Web PubSub. An Azure Functions app processes this data for real-time analytics, estimating delivery times and flagging delays. A content delivery network (CDN) optimizes data transmission to customer dashboards. To enhance API security, Azure API Management (APIM) is introduced to secure endpoints and enforce authentication. Proper HTTP header configuration is required to ensure secure communication between the CDN and the Azure Functions app.

Which HTTP header must be added to the allowed list?

You are part of a development team for a technology firm that delivers multiple cloud-based web services.

All web services must observe the following security and access regulations.

– API requests must be managed through Azure API Management.

– Authentication must be handled using OpenID Connect.

– Anonymous requests should be strictly blocked.

– The API Gateway must log access attempts for auditing purposes.

A recent security assessment discovered that some API endpoints are accessible without authentication, which could lead to unauthorized data access.

Which Azure API Management policy should you configure to enforce authentication?

You are developing a web app on Azure App Service that needs secure access to Azure Key Vault secrets.

You must authenticate without storing credentials in code while using Microsoft Entra ID and Azure App Service authentication.

You need a secure, least-privilege way to authenticate and access Key Vault.

Which solution will meet this requirement?