Microsoft AZ-204 Exam Dumps

Developing Solutions for Microsoft Azure

Prep4Certs: Your Ultimate Destination for Exam Preparation

Are you ready to take your career to the next level with Developing Solutions for Microsoft Azure? At Prep4Certs, we're dedicated to helping you achieve your goals by providing high-quality AZ-204 Dumps and resources for a wide range of certification exams.

How Can We Help You Prepare for the Microsoft AZ-204 Exam?

At Prep4Certs, we're committed to your success in the Microsoft AZ-204 exam. Our comprehensive study materials and resources are designed to equip you with the knowledge and skills needed to ace the exam with confidence:

• In-depth Study Guides: Access detailed study guides covering each exam domain, complete with key concepts, best practices, and real-world scenarios.
• Practice Exams and Quizzes: Test your knowledge with our collection of practice exams and quizzes, designed to simulate the exam environment and help you gauge your readiness.
• Interactive Labs and Hands-On Exercises: Reinforce your learning with hands-on labs and interactive exercises that allow you to apply theoretical concepts in practical scenarios.
• Expert Support and Guidance: Our team of experienced AWS professionals is here to support you every step of the way. Whether you have questions about exam topics or need guidance on exam preparation strategies, we're here to help.

Why Choose Prep4Certs for Your Exam Preparation?

• Expertly Curated Content: Our study materials are meticulously curated by industry experts and certified professionals to ensure accuracy, relevance, and alignment with exam objectives.
• User-Friendly Platform: Navigating our platform is easy and intuitive, allowing you to access study materials anytime, anywhere, and from any device. Our user-friendly interface makes it simple to track your progress and focus on areas that require further review.
• Flexible Learning Options: Whether you prefer self-paced study or structured learning programs, we offer flexible learning options to suit your individual preferences and schedule.
• Dedicated Support: Have questions or need assistance? Our dedicated support team is here to help. From technical support to exam preparation advice, we're committed to providing you with the assistance you need to succeed.

Start Your Certification Journey Today

Whether you're looking to advance your career, expand your skill set, or pursue new opportunities, Prep4Certs is here to support you on your certification journey. Explore our comprehensive study materials, take your exam preparation to the next level, and unlock new possibilities for professional growth and success.

Ready to achieve your certification goals? Begin your journey with Prep4Certs today!

Microsoft AZ-204 Sample Questions

You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers. The Azure AD group must not be able to access the keys that are required to access the data. You need to restrict access to the Azure AD group. Which role-based access control should you use?

A. DocumentDB Accounts Contributor
B. Cosmos Backup Operator 
C. Cosmos DB Operator
D. Cosmos DB Account Reader 

STION NO: 184 DRAG-DROPYou are developing an ASP.NET Core website that can be used to manage photographswhich are stored in Azure Blob Storage containers.Users of the website authenticate by using their Azure Active Directory (Azure AD)credentials.You implement role-based access control (RBAC) role permissions on the containers thatstore photographs. You assign users to RBAC roles.You need to configure the website’s Azure AD Application so that user permissions canbe used with the Azure Blob containers.How should you configure the application? To answer, drag the appropriate setting to thecorrect location. Each setting can be used once, more than once, or not at all. You mayneed to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.

Box 2: delegated

Example:

1. Select the API permissions section

2. Click the Add a permission button and then:

Ensure that the My APIs tab is selected

3. In the list of APIs, select the API TodoListService-aspnetcore.

4. In the Delegated permissions section, ensure that the right permissions are checked:

user_impersonation.

5. Select the Add permissions button.

Box 3: delegated

Example

1. Select the API permissions section

2. Click the Add a permission button and then,

Ensure that the Microsoft APIs tab is selected

3. In the Commonly used Microsoft APIs section, click on Microsoft Graph

4. In the Delegated permissions section, ensure that the right permissions are checked:

User. Read. Use the search box if necessary.

5. Select the Add permissions button 

You are developing a web service that will run on Azure virtual machines that use AzureStorage. You configure all virtual machines to use managed identities.You have the following requirements:Secret-based authentication mechanisms are not permitted for accessing an AzureStorage account.Must use only Azure Instance Metadata Service endpoints.You need to write code to retrieve an access token to access Azure Storage. To answer,drag the appropriate code segments to the correct locations. Each code segment may beused once or not at all. You may need to drag the split bar between panes or scroll to viewcontent.NOTE: Each correct selection is worth one point.

Explanation: 

Azure Instance Metadata Service endpoints "/oauth2/token"

Box 1: http://169.254.169.254/metadata/identity/oauth2/token

Sample request using the Azure Instance Metadata Service (IMDS) endpoint

(recommended):

GET 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https://manage...' HTTP/1.1 Metadata: true

Box 2: JsonConvert.DeserializeObject<Dictionary<string,string>>(payload);

Deserialized token response; returning access code. 

You are building a website that is used to review restaurants. The website will use an Azure CDN to improve performance and add functionality to requests. You build and deploy a mobile app for Apple iPhones. Whenever a user accesses the website from an iPhone, the user must be redirected to the app store. You need to implement an Azure CDN rule that ensures that iPhone users are redirected to the app store. How should you complete the Azure Resource Manager template? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Explanation: 

Box 1: iOS

Azure AD Conditional Access supports the following device platforms: 

Android

iOS

Windows Phone

Windows

macOS

Box 2: DeliveryRuleIsDeviceConditionParameters

The DeliveryRuleIsDeviceCondition defines the IsDevice condition for the delivery rule.

parameters defines the parameters for the condition.

Box 3: HTTP_USER_AGENT

Box 4: DeliveryRuleRequestHeaderConditionParameters

DeliveryRuleRequestHeaderCondition defines the RequestHeader condition for the

delivery rule. parameters defines the parameters for the condition.

Box 5: iOS

The Require approved client app requirement only supports the iOS and Android for device

platform condition. 

You develop a solution that uses Azure Virtual Machines (VMs). The VMs contain code that must access resources in an Azure resource group. You grant the VM access to the resource group in Resource Manager. You need to obtain an access token that uses the VMs system-assigned managed identity. Which two actions should you perform? Each correct answer presents part of the solution. 

A. Use PowerShell on a remote machine to make a request to the local managed identity for Azure resources endpoint. 
B. Use PowerShell on the VM to make a request to the local managed identity for Azureresources endpoint. 
C. From the code on the VM. call Azure Resource Manager using an access token. 
D. From the code on the VM. call Azure Resource Manager using a SAS token. 
E. From the code on the VM. generate a user delegation SAS token.

You develop and add several functions to an Azure Function app that uses the latestruntime host. The functions contain several REST API endpoints secured by using SSL.The Azure Function app runs in a Consumption plan.You must send an alert when any of the function endpoints are unavailable or respondingtoo slowly.You need to monitor the availability and responsiveness of the functions.What should you do?

A. Create a URL ping test. 
B. Create a timer triggered function that calls TrackAvailability() and send the results to Application Insights.
C. Create a timer triggered function that calls GetMetric("Request Size") and send the results to
C. Create a timer triggered function that calls GetMetric("Request Size") and send the results to Application Insights. 
D. Add a new diagnostic setting to the Azure Function app. Enable the FunctionAppLogs and Send to Log Analytics options. 

You are developing a web application by using the Azure SDK. The web applicationaccesses data m a zone-redundant BlockBlobStorage storage accountThe application must determine whether the data has changed since the application lastreao the data. Update operations must use the latest data changes when writing data to thestorages..................You need to implement the update operations.Which values should you use? To answer, select the appropriate option m the answerarea.NOTE Each correct selection is worth one point.

Answer: See the Explanation below:

Explanation: See the answer in below image. 

You are maintaining an existing application that uses an Azure Blob GPv1 Premiumstorage account. Data older than three months is rarely used.Data newer than three months must be available immediately. Data older than a year mustbe saved but does not need to be available immediately.You need to configure the account to support a lifecycle management rule that moves the blobdata to archive storage for data not modified in the last year.Which three actions should you perform in sequence? To answer, move the appropriateactions from the list of actions to the answer area and arrange them in the correct order.

Explanation: 

Step 1: Upgrade the storage account to GPv2

Object storage data tiering between hot, cool, and archive is supported in Blob Storage and

General Purpose v2 (GPv2) accounts. General Purpose v1 (GPv1) accounts don't support

tiering.

You can easily convert your existing GPv1 or Blob Storage accounts to GPv2 accounts

through the Azure portal.

Step 2: Copy the data to be archived to a Standard GPv2 storage account and then delete

the data from the original storage account

Step 3: Change the storage account access tier from hot to cool

Note Hot - Optimized for storing data that is accessed frequently.

Cool - Optimized for storing data that is infrequently accessed and stored for at least 30

days.

Archive - Optimized for storing data that is rarely accessed and stored for at least 180 days

with flexible latency requirements, on the order of hours.

Only the hot and cool access tiers can be set at the account level. The Archive access tier

can only be set at the blob level. 

You develop and deploy an Azure Logic App that calls an Azure Function app. The Azure Function App includes an OpenAPI (Swagger) definition and uses an Azure Blob storage account. All resources are secured by using Azure Active Directory (Azure AD). The Logic App must use Azure Monitor logs to record and store information about runtime data and events. The logs must be stored in the Azure Blob storage account. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. 

Answer:

You develop and deploy an Azure App Service web app named App1. You create a new Azure Key Vault named Vault 1. You import several API keys, passwords, certificates, and cryptographic keys into Vault1.You need to grant App1 access to Vault1 and automatically rotate credentials Credentials must not be stored in code. What should you do?  

A. Enable App Service authentication for Appt. Assign a custom RBAC role to Vault1. 
B. Add a TLS/SSL binding to App1. 
C. Assign a managed identity to App1. 
D. Upload a self-signed client certificate to Vault1. Update App1 to use the client certificate.