Review Mode Set 2 – AZ-204 Developing Solutions for Microsoft Azure

You are tasked to design a healthcare application to store patient records using CosmosDB for data storage. The application needs to handle batches of relational data such as patient information, medical history, and appointment schedules. The system must support complex queries for retrieving patient data based on multiple attributes and scale dynamically to accommodate growing data.

Which API should you choose to meet these requirements?

You are tasked with implementing a real-time event processing solution for an application that tracks sensor data from devices across multiple locations. The data is ingested through a standard Azure Event Hub with 32 partitions. The application has multiple event processor clients that are responsible for processing the incoming events and aggregating the data for further analysis.

To store the aggregated data for long-term retention, the solution needs to upload the processed data to an Azure Blob storage account. The application must ensure that if any event processor client fails, the failed client’s position in the event sequence is marked so that another client can take over and resume processing from the exact point where the failure occurred. Additionally, the solution must provide dynamic load balancing to ensure that when one event processor fails, another takes over and begins processing from the last known position within the partitioned event sequence.

You decide to implement the solution using the Azure Event Hubs SDK and also make use of Azure Monitor for monitoring and diagnostics.

Which SDK features should be used to meet the given requirements? Select the correct answer from the drop-down list of options. Each correct selection is worth one point.

You oversee a SaaS application’s API platform that serves multiple customers. The platform is hosted using Azure API Management (APIM). In addition to the core APIs, the platform also includes an Azure Key Vault for securely storing and managing secrets such as API keys and credentials.

The following requirements need to be implemented for the APIs:

– Only registered users should be allowed to consume the APIs, and an API key must be used for authentication.

– Users must explicitly accept the terms of use before gaining access to any API.

– Each subscription request must be manually approved by an administrator, ensuring full oversight.

– Each user should be allowed one active subscription per API at any given time to prevent abuse.

– You must manage these settings centrally for all APIs and provide the ability to easily configure subscription policies.

– Secure API keys must be stored and managed using a centralized solution.

Which solution will meet these requirements?

Your development team is building an external developer portal powered by Azure API Management (APIM) to expose internal microservices as managed APIs.

To ensure compliance and security, the following policies must be enforced:

– External developers must include a valid subscription key to access any APIs.

– Developers must accept custom terms of use before activating their access.

– The administrator must review all subscription attempts before activation.

– A single developer must not be allowed to maintain multiple simultaneous subscriptions to the same API.

You must implement a solution that satisfies all these requirements with minimal custom code.

Which solution should you implement?

Your company is redesigning a retail commerce platform with a microservice architecture to improve scalability and maintainability.

The architecture will comprise individual services that handle inventory, order management, payment processing, and shipment coordination. The solution must use a communication backplane that delivers transactional messages between microservices in a first-in-first-out (FIFO) order to ensure events like order placement, payment capture, and inventory deduction are processed in sequence.

Additionally, each message must trigger business logic executed by serverless Azure Functions, which process the message and forward it to the next service in the workflow. The communication system must also support dead-lettering, message deduplication, and transactional integrity.

Which solution should you implement to meet these requirements?

You use Azure Service Bus queues to collect messages from multiple order processing systems.

You set up an Azure Event Grid subscription to detect when new messages arrive in the Azure Service Bus namespace.

You configure Azure Functions to process the messages and trigger a Logic App for downstream fulfillment workflows.

The system must emit events through Azure Event Grid only when messages are present and there are no active receivers.

To comply with organizational policies, the solution must minimize cost and enforce the principle of least privilege in access control.

Which of the following options will meet the given requirements?

Select the correct answer from the drop-down list of options. Each correct selection is worth one point.

You are developing a logistics tracking application that stores shipment data and images in Azure Blob Storage.

You must update the metadata of existing blobs to include delivery status and custom tracking attributes.

The application should also publish events when blob metadata is updated so other systems can process real-time changes using Azure Event Grid.

Which three methods should be used to implement this solution?

Instructions: To answer, drag the appropriate item from the column on the left to its description on the right. Each correct match is worth one point.

You’re building a messaging solution using Azure Service Bus to support your logistics platform. Messages related to shipment events, such as “package scanned”, “delivered”, or “delayed”, are published to a topic named ShipmentEventsTopic.

You must create a subscription named ShipmentStatusSub that filters messages based on system properties like Label or MessageId to monitor critical shipment issues. Specifically, you’re interested in filtering for events that indicate a delivery delay or failure.

Once the filtering is applied, you should configure an action on the subscription to annotate each filtered message, which will assist downstream systems. The original message body must remain unchanged. These annotated messages will be consumed by Azure Event Grid to trigger alerting workflows and integrations.

Which of the following options will meet the given requirements?

Select the correct answer from the drop-down list of options. Each correct selection is worth one point.

You are working on a project that involves hosting a static website using Azure Blob Storage. A storage account is created, and static website hosting is enabled.

The website needs to meet the following criteria:

– It should be accessible via a custom domain name.

– It should include custom header values in all HTTP responses.

– It should support HTTPS with a custom SSL certificate.

What should you configure to fulfill these requirements?

Select the correct answer from the drop-down list of options. Each correct selection is worth one point.

You are working with a logistics company that stores tracking and location data for its delivery vehicles in Azure Blob storage. The data is frequently updated, and the company needs to track every change made for auditing and error recovery. Modifications or deletions sometimes happen by mistake, causing data inconsistencies. The company wants to ensure the integrity and recoverability of this data.

You are tasked with implementing a solution to track all changes to the blobs and ensure data integrity and recoverability.

Which three Azure Blob features should you enable to resolve the issue? (Select THREE.)

You are tasked with setting up an Azure-based monitoring solution for an e-commerce web application running on Azure App Service.

To effectively monitor the app, you must use Azure Monitor with Application Insights to collect and analyze logs across your environment.

What configuration should be applied in Application Insights to satisfy the requirements?

Select the correct answer from the drop-down list of options. Each correct selection is worth one point.

You are tasked with deploying an Azure Function based on a schedule. The function will use a timer trigger to execute, and you will configure the function to execute at specific intervals using a TimeSpan value.

You also plan to use Azure Application Insights to monitor the function’s performance. However, the goal is to select the correct hosting plan and the method to define the schedule expression configuration.

Which configuration values are most suitable for setting up the Azure Function to satisfy the requirements?

Select the correct answer from the drop-down list of options. Each correct selection is worth one point.

You are managing an application hosted on Azure App Service, and you’ve decided to use Azure Cache for Redis to improve the application’s performance by caching frequently accessed data.

The application has a predictable usage pattern where specific data is accessed frequently for a set period and expires after a specific time.

You must evict some of the cached data when the cache reaches its memory limit.

You want to ensure that only the least useful data is evicted, with a priority on evicting expired data first. You need an eviction policy that fits this usage pattern, ensuring expired keys are evicted before others and that the least recently used data is removed when necessary.

Which eviction policy will best suit your needs for this predictable usage pattern? (Select TWO.)

You are tasked with launching a company website secured with SSL encryption, optimized to minimize hosting and storage costs, and ensures fast global access for users. Automated CI/CD pipelines are configured using GitHub to streamline deployments.

You need to implement monitoring through Azure Application Insights to track availability, validate SSL certificates, and check for specific custom header values. It should also be ensured that the site maintains at least 99.95% uptime and can quickly address any potential issues.

What configuration would you use to implement this setup effectively?

Select the correct answer from the drop-down list of options. Each correct selection is worth one point.

You are building a mobile application to gather telemetry data for a fleet of service technicians. The application must store technician details, service requests, item IDs, task completion status, and timestamps in Azure Cosmos DB. The application uses Azure Blob Storage to store images of the technicians’ work.

You must ensure the data can be queried efficiently based on service request status.

What values should you use to configure Azure Cosmos DB to query this data?

Select the correct answer from the drop-down list of options. Each correct selection is worth one point.

Note: This item is part of a series of questions with the same scenario but a different proposed answer. Each in the series has a unique solution that may or may not comply with the requirements specified in the scenario.

You are tasked with building an Azure solution for a retail company that collects point-of-sale (POS) device data from multiple regional stores. The data includes sales transactions, payment information, and inventory updates. Each POS device generates around 1 MB of data every hour, with around 50 devices per store. You must store the data in Azure Blob storage for long-term retention, ensuring easy access and analysis. The solution must also handle the growing number of stores, which may add 100 more locations next year.

You want to implement a solution that efficiently receives and processes the data, ensuring each store’s device data is stored separately. The data must be correlated using the device ID to ensure each transaction is linked to the correct device. Additionally, you need to enable messaging between devices for occasional updates without overloading the storage system.

Solution: You decide to use Azure Service Bus with topics for receiving messages and correlation filters based on the device ID, sending the data to Azure Blob storage for storage.

Does this solution satisfy the specified requirements?

You are part of a team working on an inventory service that will help manage product availability across various warehouse locations. The location data is stored in an Azure Storage Blob container within a development environment.

You need to grant secure, temporary access to the location data for the development effort, ensuring that access can be restricted to specific permissions and expire after a set period.

Which Azure feature is the best fit for this scenario?

Note: This item is part of a series of questions with the same scenario but a different proposed answer. Each in the series has a unique solution that may or may not comply with the requirements specified in the scenario.

You are tasked with building an Azure solution for a retail company that collects point-of-sale (POS) device data from multiple regional stores. The data includes sales transactions, payment information, and inventory updates. Each POS device generates around 1 MB of data every hour, with around 50 devices per store. You must store the data in Azure Blob storage for long-term retention, ensuring easy access and analysis. The solution must also handle the growing number of stores, which may add 100 more locations next year.

You want to implement a solution that efficiently receives and processes the data, ensuring each store’s device data is stored separately. The data must be correlated using the device ID to ensure each transaction is linked to the correct device. Additionally, you need to enable messaging between devices for occasional updates without overloading the storage system.

Solution: You use Azure Event Grid to stream events directly to Azure Blob storage, with event filtering based on the device ID to ensure that each store’s device data is stored separately.

Does this solution satisfy the specified requirements?

You are responsible for deploying and operating a set of microservices using Azure Container Apps in a production environment.

You must implement runtime monitoring and debugging features that can help detect anomalies early and investigate container issues interactively when needed.

Which features should be used to fulfill each of these operational tasks?

Select the correct answer from the drop-down list of options. Each correct selection is worth one point.

You are tasked to manage an Azure subscription with multiple Azure App Service applications deployed across several regions. Each App Service application has its own Application Insights instance for tracking performance, availability, and error rates.

You need to remove all Classic availability tests configured on these Application Insights instances as part of the migration to more modern monitoring solutions. These availability tests are used to monitor the health of the services by pinging a specified URL to check if the service is available.

You are given the following PowerShell command:
Get-AzApplicationInsightsWebTest | Where-Object { $condition }

You need to set the $condition variable to identify the Classic availability tests so that they can be removed.

Which value should you use for the $condition variable?

You are managing a standard tier instance of Azure Cache for Redis named prodRedisCache, which is configured with the default settings. Your application uses Redis to store session data, and as the number of users increases, Redis runs out of memory. This is causing slower response times for session retrieval.

You want to adjust the memory settings to improve performance and ensure that session data is efficiently cached. Specifically, you need to configure the Maxmemory policy to optimize memory usage without causing performance degradation, but without hitting the memory limit too quickly.

What should you do to configure the Maxmemory policy for your Redis instance?

You are managing the Azure environment for an organization, and during a scheduled maintenance window, an upgrade to the Azure Virtual Machines (VMs) is planned.

You are aware that backup operations will likely fail during this period.

You must ensure that Azure Monitor alerts related to these backup failures do not trigger notifications during this maintenance window. However, you still want the alerts to be logged for later review.

Which solution will meet this requirement?

You are tasked with optimizing the performance of your Azure App Service web app that handles product recommendations for an e-commerce platform.

The web app needs to quickly retrieve and cache frequently accessed product details to improve response times and reduce the load on your Azure SQL database.

To implement this, you decide to use Azure Redis Cache as a distributed caching layer. The web app will retrieve product data from the cache if it is available, and if not, it will query the database and store the result in the cache for future requests.

Which Azure Redis Cache properties do you need to connect your web app to the Redis Cache securely?
(Select THREE.)

You are managing an Azure-based web application that allows users to book weekend getaway packages.

The application utilizes Azure Application Insights to monitor key metrics like response times, error rates, transaction completions, and usage analysis to track user behavior and traffic patterns

On weekends, the application experiences fluctuating traffic volumes, sometimes leading to performance issues, including increased response times and transaction failures.

You want to ensure the application can automatically detect these anomalies and alert your team when performance degrades, particularly when traffic spikes or other technical issues arise during peak usage.

Which solution will meet the given requirement?

You are tasked with building a cloud-based application using Azure CosmosDB for data storage.

The application must handle relational data that follows a structured model, supporting complex queries and transactions.

You’ll need to select the best API to interact with CosmosDB, ensuring it can handle relational data efficiently.

Which of the following should you use?

You are responsible for managing a production web application hosted on Azure App Service. To support safe deployment practices, the application uses a staging slot to validate changes before promoting them to production.

The application is scaled out across multiple instances and deployed across multiple regions to serve a global user base. Azure Front Door is configured in front of the App Service to enhance performance and global routing to provide HTTP/HTTPS global load balancing and web application acceleration.

Recently, instances have been observed returning frequent HTTP error responses (e.g., 500 status codes), leading to degraded user experiences until those instances were manually restarted.

To improve operational efficiency and observability, the solution must:

– Automatically detect and isolate unhealthy instances that return error responses and initiate recovery actions if these instances remain faulty.

– Forward all logs, including application logs, console output, and error messages, to an Azure Storage blob account for compliance, diagnostics, and future analysis.

Which configuration values should be applied to meet these requirements?
Instructions: To answer, drag the appropriate item from the column on the left to its description on the right. Each correct match is worth one point.

You are managing an application deployed on Azure App Service, which is part of an Azure subscription named Sub1.

To monitor the health of the application, Application Insights has been configured, and a Standard availability test has been created to continuously check the application’s public endpoint for availability.

Although the availability test is running as expected, the operations team notices that no email notifications are being sent when the test fails. As part of the monitoring policy, such failure events must immediately notify the owner of the subscription to ensure prompt incident response.

You have been tasked with configuring the necessary Azure component to ensure that email notifications are sent to the subscription owner whenever the availability test fails.

Which solution will meet this requirement?

Note: This item is part of a series of questions with the same scenario but a different proposed answer. Each in the series has a unique solution that may or may not comply with the requirements specified in the scenario.

You are building a secure web-based inventory system that will be deployed as an Azure Web App. Your organization’s users will sign in using their Microsoft Entra ID credentials.

To enforce fine-grained access control, you have defined three user roles: admin, normal, and reader. These roles are assigned through Microsoft Entra group membership, which is maintained by your identity governance team.

Solution: To enable the application to determine a user’s access level, you modify the Microsoft Entra application’s manifest and set the groupMembershipClaims property to “All.” When users sign in, the application reads the group’s claim from the JWT to identify the user’s group IDs and map them to the appropriate permission level.

Does this method effectively meet the requirement?

Note: This item is part of a series of questions with the same scenario but a different proposed answer. Each in the series has a unique solution that may or may not comply with the requirements specified in the scenario.

You are building a secure web-based inventory system that will be deployed as an Azure Web App. Your organization’s users will sign in using their Microsoft Entra ID credentials.

To enforce fine-grained access control, you have defined three user roles: admin, normal, and reader. These roles are assigned through Microsoft Entra group membership, which is maintained by your identity governance team.

Solution: You configure the app to rely solely on Microsoft Entra ID log on for user authentication. The application uses the default authenticated requests token to authorize access. No changes are made to the application manifest or token configuration.

Does this method effectively meet the requirement?