HOTSPOT
-
You are developing an Azure Function app.
The Azure Function app must enable a WebHook to read an image from Azure Blob Storage and create a new Azure Cosmos DB document.
You need to implement the Azure Function app.
Which configuration should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: A WebHook requires an HTTP trigger. The function reads the image directly from Azure Blob Storage using an input binding and writes a new document to Azure Cosmos DB using an output binding.
Question 107
HOTSPOT
-
A company uses Azure Container Apps. A container app named App1 resides in a resource group named RG1.
The company requires testing of updates to App1.
You enable multiple revision modes on App1.
You need to ensure traffic is routed to each revision of App1.
How should you complete the code segment?
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: containerapp
ingress
Explanation: To split traffic between multiple revisions in Azure Container Apps, the Azure CLI command used is `az containerapp ingress traffic set`, which configures ingress traffic weights for each revision of the container app.
Question 108
You create an Azure Cosmos DB for NoSQL database.
You plan to use the Azure Cosmos DB .NET SDK v3 API for NoSQL to upload the following files:
You receive the following error message when uploading the files: “413 Entity too large”.
You need to determine which files you can upload to the Azure Cosmos DB for NoSQL database.
Which files can you upload?
A. File1, File2, File3, File4, and File5
B. File1 and File2 only
C. File1, File2, and File3 only
D. File1, File2, File3, and File4 only
E. File1 only
Show Answer
Correct Answer: B
Explanation: For Azure Cosmos DB for NoSQL using the .NET SDK v3, the maximum size of a single item (document) is 2 MB based on the UTF-8 JSON representation. Uploading an item larger than this limit results in a 413 (Entity too large) error. Among the listed files, only File1 and File2 are within the 2 MB per-item limit; the remaining files exceed this limit and cannot be uploaded as individual items.
Question 109
Case study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Background -
Munson’s Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.
Current Environment -
The company is migrating all applications from an on-premises datacenter to Microsoft Azure. Applications support distributors, farmers, and internal company staff.
Corporate website -
• The company hosts a public website located at http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms -
• The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors -
• Distributors integrate their applications with data that is accessible by using APIs hosted at http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.
Requirements -
The application components must meet the following requirements:
Corporate website -
• The site must be migrated to Azure App Service.
• Costs must be minimized when hosting in Azure.
• Applications must automatically scale independent of the compute resources.
• All code changes must be validated by internal staff before release to production.
• File transfer speeds must improve, and webpage-load performance must increase.
• All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
• A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms -
• Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors -
• The company must track a custom telemetry value with each API call and monitor performance of all APIs.
• API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff -
• App and API updates must be validated before release to production.
• Staff must be able to select a link to direct them back to the production app when validating an app or API update.
• Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security -
• All web communications must be secured by using TLS/HTTPS.
• Web content must be restricted by country/region to support corporate compliance standards.
• The principle of least privilege must be applied when providing any user rights or process access rights.
• Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Issues -
Corporate website -
• Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
• Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
• Internal staff report webpage load sizes are large and take a long time to load.
• Developers receive authentication errors to Service Bus when they debug locally.
Distributors -
• Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
You need to implement farmer authentication.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Add the shared access signature (SAS) token to the app.
B. Create a shared access signature (SAS) token.
C. Create a user flow.
D. Add the app to the user flow.
E. Register the app in Microsoft Entra ID.
Show Answer
Correct Answer: C, D, E
Explanation: Farmer authentication uses Microsoft Entra ID (customer tenant/B2C-style). You must register the application in Microsoft Entra ID so it can participate in authentication, create a user flow to define sign-up/sign-in behavior for farmers, and add the app to the user flow so the app uses that authentication configuration. SAS tokens are unrelated to user authentication.
Question 110
HOTSPOT
-
Case study
-
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
-
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Background
-
Munson’s Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.
Current Environment
-
The company is migrating all applications from an on-premises datacenter to Microsoft Azure. Applications support distributors, farmers, and internal company staff.
Corporate website
-
• The company hosts a public website located at http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms
-
• The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors
-
• Distributors integrate their applications with data that is accessible by using APIs hosted at http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.
Requirements
-
The application components must meet the following requirements:
Corporate website
-
• The site must be migrated to Azure App Service.
• Costs must be minimized when hosting in Azure.
• Applications must automatically scale independent of the compute resources.
• All code changes must be validated by internal staff before release to production.
• File transfer speeds must improve, and webpage-load performance must increase.
• All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
• A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms
-
• Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors
-
• The company must track a custom telemetry value with each API call and monitor performance of all APIs.
• API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff
-
• App and API updates must be validated before release to production.
• Staff must be able to select a link to direct them back to the production app when validating an app or API update.
• Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security
-
• All web communications must be secured by using TLS/HTTPS.
• Web content must be restricted by country/region to support corporate compliance standards.
• The principle of least privilege must be applied when providing any user rights or process access rights.
• Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Issues
-
Corporate website
-
• Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
• Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
• Internal staff report webpage load sizes are large and take a long time to load.
• Developers receive authentication errors to Service Bus when they debug locally.
Distributors
-
• Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
You need to correct the errors for farmers and distributors.
Which solution should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Farmers' errors:
Scale up the App Service plan to Premium.
Distributors' errors:
Create a custom autoscale rule to increase the instance count.
Explanation: HTTP 503 errors with high CPU and memory indicate insufficient compute capacity, which is addressed by scaling up the App Service plan. HTTP 502 errors occurring alongside high response times and network traffic indicate load-related issues, which are mitigated by scaling out with autoscale rules to add instances.
Question 111
Case study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Background -
Munson’s Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.
Current Environment -
The company is migrating all applications from an on-premises datacenter to Microsoft Azure. Applications support distributors, farmers, and internal company staff.
Corporate website -
• The company hosts a public website located at http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms -
• The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors -
• Distributors integrate their applications with data that is accessible by using APIs hosted at http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.
Requirements -
The application components must meet the following requirements:
Corporate website -
• The site must be migrated to Azure App Service.
• Costs must be minimized when hosting in Azure.
• Applications must automatically scale independent of the compute resources.
• All code changes must be validated by internal staff before release to production.
• File transfer speeds must improve, and webpage-load performance must increase.
• All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
• A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms -
• Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors -
• The company must track a custom telemetry value with each API call and monitor performance of all APIs.
• API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff -
• App and API updates must be validated before release to production.
• Staff must be able to select a link to direct them back to the production app when validating an app or API update.
• Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security -
• All web communications must be secured by using TLS/HTTPS.
• Web content must be restricted by country/region to support corporate compliance standards.
• The principle of least privilege must be applied when providing any user rights or process access rights.
• Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Issues -
Corporate website -
• Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
• Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
• Internal staff report webpage load sizes are large and take a long time to load.
• Developers receive authentication errors to Service Bus when they debug locally.
Distributors -
• Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
You need to implement an aggregate of telemetry values for distributor API calls.
Which Application Insights API method should you use?
A. TrackEvent
B. TrackDependency
C. TrackMetric
D. TrackException
E. TrackTrace
Show Answer
Correct Answer: C
Explanation: The requirement is to aggregate a large volume of telemetry values while reducing traffic, storage, and cost, yet still enable statistical analysis and charting. Application Insights TrackMetric supports metric telemetry, including pre-aggregated metrics (min, max, count, sum, standard deviation), which is specifically designed for high-volume numeric data aggregation. Other options capture discrete events, traces, dependencies, or exceptions and do not provide efficient aggregation.
Question 112
You are developing an application that uses keys stored in Azure Key Vault.
You need to enforce a specific cryptographic algorithm and key size for keys stored in the vault.
What should you use?
A. Secret versioning
B. Azure Policy
C. Key Vault Firewall
D. Access policies
Show Answer
Correct Answer: B
Explanation: Azure Policy allows you to define and enforce governance rules on Azure resources, including Azure Key Vault. It can require specific cryptographic algorithms and key sizes for keys created in a vault, ensuring compliance at scale. Secret versioning, firewall settings, and access policies do not control cryptographic algorithms or key sizes.
Question 113
HOTSPOT -
Case study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Background -
Munson’s Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.
Current Environment -
The company is migrating all applications from an on-premises datacenter to Microsoft Azure. Applications support distributors, farmers, and internal company staff.
Corporate website -
• The company hosts a public website located at http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms -
• The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors -
• Distributors integrate their applications with data that is accessible by using APIs hosted at http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.
Requirements -
The application components must meet the following requirements:
Corporate website -
• The site must be migrated to Azure App Service.
• Costs must be minimized when hosting in Azure.
• Applications must automatically scale independent of the compute resources.
• All code changes must be validated by internal staff before release to production.
• File transfer speeds must improve, and webpage-load performance must increase.
• All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
• A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms -
• Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors -
• The company must track a custom telemetry value with each API call and monitor performance of all APIs.
• API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff -
• App and API updates must be validated before release to production.
• Staff must be able to select a link to direct them back to the production app when validating an app or API update.
• Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security -
• All web communications must be secured by using TLS/HTTPS.
• Web content must be restricted by country/region to support corporate compliance standards.
• The principle of least privilege must be applied when providing any user rights or process access rights.
• Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Issues -
Corporate website -
• Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
• Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
• Internal staff report webpage load sizes are large and take a long time to load.
• Developers receive authentication errors to Service Bus when they debug locally.
Distributors -
• Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
You need to configure App Service to support the corporate website migration.
Which configuration should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Standard
Deployment slot
Explanation: The Standard App Service plan supports automatic scaling at a lower cost than Premium and includes deployment slots. Deployment slots allow internal staff to validate code changes in a non-production environment and swap back to production, meeting the validation and release requirements.
Question 114
You are developing an ASP.NET Core app hosted in Azure App Service.
The app requires custom claims to be returned from Microsoft Entra ID for user authorization. The claims must be removed when the app registration is removed.
You need to include the custom claims in the user access token.
What should you do?
A. Require the https://graph.microsoft.com/.default scope during authentication.
B. Configure the app to use the OAuth 2.0 authorization code flow.
C. Implement custom middleware to retrieve role information from Azure AD.
D. Add the groups to the groupMembershipClaims attribute in the app manifest.
E. Add the roles to the appRoles attribute in the app manifest.
Show Answer
Correct Answer: E
Explanation: To include custom claims in access tokens that are tightly bound to the application and automatically removed when the app registration is deleted, you should define application roles (appRoles) in the Microsoft Entra ID app manifest. App roles are emitted as role claims in the access token when assigned to users or groups and are scoped to the app registration itself, ensuring they disappear when the app registration is removed. Other options either do not create custom claims, do not guarantee token inclusion, or are not lifecycle-bound to the app registration.
Question 115
HOTSPOT
-
You are developing an Azure Function App named App1. You also plan to use cross-origin requests (CORS).
You have the following requirements:
• App1 functions must securely access an Azure Blob Storage account.
• Access to the Azure Blob Storage account must not require the provisioning or rotation of secrets.
• JavaScript code running in a browser on an external host must not be allowed to interact with the function.
You need to implement App1.
Which configuration should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: System-assigned managed identity
Configure CORS allowed origins to none
Explanation: Use a system-assigned managed identity so the Function App can access Azure Blob Storage securely without secrets or key rotation. To prevent browser-based JavaScript from other domains from calling the function, configure CORS with no allowed origins, which blocks cross-origin requests.
$19
Get all 447 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.