az-204 B

You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic volumes after it is published. You must ensure that the website remains available and responsive while minimizing cost. You need to deploy the website. What should you do?

• Deploy the website to a virtual machine. Configure the virtual machine to automatically scale when the CPU load is high.

• Deploy the website to an App Service that uses the Shared service tier. Configure the App Service plan to automatically scale when the CPU load is high.

• Deploy the website to a virtual machine. Configure a Scale Set to increase the virtual machine instance count when the CPU load is high.

• Deploy the website to an App Service that uses the Standard service tier. Configure the App Service plan to automatically scale when the CPU load is high.

You are developing an application that uses Azure Blob storage. The application must read the transaction logs of all the changes that occur to the blobs and the blob metadata in the storage account for auditing purposes. The changes must be in the order in which they occurred, include only create, update, delete, and copy operations, and be retained for compliance reasons. You need to process the transaction logs asynchronously. What should you do?

• Process all Azure Blob storage events by using Azure Event Grid with a subscriber Azure Function app.

• Enable the change feed on the storage account and process all changes for available events.

• Process all Azure Storage Analytics logs for successful blob events.

• Use the Azure Monitor HTTP Data Collector API and scan the request body for successful blob events.

  Reveal Solution   Discussion

You are building a website that uses Azure Blob storage for data storage. You configure the Azure Blob storage lifecycle to move all blobs to the archive tier after 30 days. Customers have requested a service-level agreement (SLA) for viewing data older than 30 days. You need to document the minimum SLA for data recovery. Which SLA should you use?

• at least two days

• between one and 15 hours

• at least one day

• between zero and 60 minutes

You develop Azure solutions. A .NET application needs to receive a message each time an Azure virtual machine finishes processing data. The messages must NOT persist after being processed by the receiving application. You need to implement the .NET object that will receive the messages. Which object should you use?

• QueueClient

• SubscriptionClient

• TopicClient

• CloudQueueClient

You develop Azure solutions . You must connect to a No-SQL globally-distributed database by using the .NET API. You need to create an object to configure and execute requests in the database. Which code segment should you use?

• new Container(EndpointUri, PrimaryKey);

• new Database(EndpointUri, PrimaryKey);

• new CosmosClient(EndpointUri, PrimaryKey);

You have an existing Azure storage account that stores large volumes of data across multiple containers. You need to copy all data from the existing storage account to a new storage account. The copy process must meet the following requirements:

✑ Automate data movement.

✑ Minimize user input required to perform the operation.

✑ Ensure that the data movement process is recoverable.

What should you use?

• AzCopy

• Azure Storage Explorer

• Azure portal

• .NET Storage Client Library

You have a new Azure subscription. You are developing an internal website for employees to view sensitive data. The website uses Azure Active Directory (AzureAD) for authentication. You need to implement multifactor authentication for the website. Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

• Configure the website to use Azure AD B2C.

• In Azure AD, create a new conditional access policy.

• upgrade to Azure AD Premium.

• In Azure AD, enable application proxy.

• In Azure AD conditional access, enable the baseline policy.

You provide an Azure API Management managed web service to clients. The back-end web service implements HTTP Strict Transport Security (HSTS). Every request to the backend service must include a valid HTTP authorization header. You need to configure the Azure API Management instance with an authentication policy. Which two policies can you use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

• Basic Authentication

• Digest Authentication

• Certificate Authentication

• OAuth Client Credential Grant

You have an application that includes an Azure Web app and several Azure Function apps. Application secrets including connection strings and certificates are stored in Azure Key Vault. Secrets must not be stored in the application or application runtime environment. Changes to Azure Active Directory (Azure AD) must be minimized. You need to design the approach to loading application secrets. What should you do?

• Create a single user-assigned Managed Identity with permission to access Key Vault and configure each App Service to use that Managed Identity.

• Create a single Azure AD Service Principal with permission to access Key Vault and use a client secret from within the App Services to access Key Vault.

• Create a system assigned Managed Identity in each App Service with permission to access Key Vault.

• Create an Azure AD Service Principal with Permissions to access Key Vault for each App Service and use a certificate from within the App Services to access Key Vault.

Your company is developing an Azure API hosted in Azure. You need to implement authentication for the Azure API to access other Azure resources. You have the following requirements:

✑ All API calls must be authenticated.

✑ Callers to the API must not send credentials to the API.

Which authentication mechanism should you use?

• Basic

• Anonymous

• Managed identity

• Client certificate