You are developing several Azure API Management (APIM) hosted APIs.
You must transform the APIs to hide private backend information and obscure the technology stack used to implement the backend processing.
You need to protect all APIs.
What should you do?
A. Configure and apply a new inbound policy scoped to a product.
B. Configure and apply a new outbound policy scoped to the operation.
C. Configure and apply a new outbound policy scoped to global.
D. Configure and apply a new backend policy scoped to global.
Show Answer
Correct Answer: C
Explanation: To hide private backend information and obscure the backend technology stack, you must transform API responses, which is done using outbound policies in Azure API Management. Because the requirement is to protect all APIs hosted in the APIM instance, the policy must be applied at the global scope so it affects every API and operation consistently. Operation-scoped policies would only apply to a single operation, and backend policies do not control response transformations sent to clients.
Question 127
HOTSPOT
-
You are developing several microservices to run on Azure Container Apps. External HTTP ingress traffic has been enabled for the microservices.
A deployed microservice must be updated to allow users to test new features. You have the following requirements:
• Enable and maintain a single URL for the updated microservice to provide to test users.
• Update the microservice that corresponds to the current microservice version.
You need to configure Azure Container Apps.
Which features should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Single URL for test users:
Revision label
Current microservice activation:
Revision mode
Explanation: A revision label provides a stable, single URL that can be reassigned to different revisions for test users. Revision mode (set to multiple revisions) allows the current revision to remain active while a new revision is deployed and tested.
Question 128
You create and publish a new Azure App Service web app.
User authentication and authorization must use Azure Active Directory (Azure AD).
You need to configure authentication and authorization.
What should you do first?
A. Add an identity provider.
B. Map an existing custom DNS name.
C. Create and configure a new app setting.
D. Add a private certificate.
E. Create and configure a managed identity.
Show Answer
Correct Answer: A
Explanation: To enable user authentication and authorization for an Azure App Service using Azure Active Directory, the first required step is to add and configure an identity provider (Azure AD) in the App Service Authentication/Authorization settings. Other options like managed identity are for app-to-Azure resource access, not user sign-in, and DNS, app settings, or certificates are not prerequisites for enabling Azure AD authentication.
Question 129
You are developing several microservices to run on Azure Container Apps for a company. External TCP ingress traffic from the internet has been enabled for the microservices.
The company requires that the microservices must scale based on an Azure Event Hub trigger.
You need to scale the microservices by using a custom scaling rule.
Which two Kubernetes Event-driven Autoscaling (KEDA) trigger fields should you use? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. metadata
B. type
C. authenticationRef
D. name
E. metricType
Show Answer
Correct Answer: A, B
Explanation: In KEDA, every scaler definition requires the **type** field to specify which scaler to use (for example, `azure-eventhub`) and the **metadata** field to define the scaler-specific configuration such as event hub name, consumer group, and threshold values. These two fields are mandatory for defining a custom scaling rule. Other fields like `authenticationRef` are optional and only needed if authentication is not handled implicitly.
Question 130
HOTSPOT
-
You are developing an application to store millions of images in Azure blob storage.
The application has the following requirements:
• Store the Exif (exchangeable image file format) data from the image as blob metadata when the application uploads the image.
• Retrieve the Exif data from the image while minimizing bandwidth and processing time.
• Utilizes the REST API.
You need to use the image Exif data as blob metadata in the application.
Which HTTP verbs should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Store Exif data: PUT
Retrieve Exif data: HEAD
Explanation: Blob metadata is set using a PUT request (uploading the blob or setting metadata via REST). Metadata is retrieved with a HEAD request, which returns headers only, minimizing bandwidth and processing time.
Question 131
You are developing several Azure API Management (APIM) hosted APIs.
You must make several minor and non-breaking changes to one of the APIs. The API changes include the following requirements:
• Must not disrupt callers of the API.
• Enable roll back if you find issues.
• Documented to enable developers to understand what is new.
• Tested before publishing.
You need to update the API.
What should you do?
A. Configure and apply header-based versioning.
B. Create and publish a product.
C. Configure and apply a custom policy.
D. Add a new revision to the API.
E. Configure and apply query string-based versioning.
Show Answer
Correct Answer: D
Explanation: Azure API Management revisions are designed for minor, non-breaking changes. A new revision allows you to make updates without disrupting existing callers, test the changes before publishing, document what’s new, and easily roll back by switching the current revision if issues are found. Versioning options are for breaking changes, and products or policies do not address safe update and rollback requirements.
Question 132
HOTSPOT
-
You have an Azure API Management instance named API1 that uses a managed gateway.
You plan to implement a policy that will apply at a product scope and will set the header of inbound requests to include information about the region hosting the gateway of API1. The policy definition contains the following content:
You have the following requirements for the policy definition:
• Ensure that the header contains the information about the region hosting the gateway of API1.
• Ensure the policy applies only after any global level policies are processed first.
You need to complete the policy definition.
Which values should you choose? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: TARGET1: <base/>
TARGET2: context
Explanation: <base/> ensures global (and higher-scope) policies run first before the product-scope policy. The gateway region is exposed via policy expressions under the context object, using context.Deployment.Region.
Question 133
HOTSPOT
-
You plan to implement an Azure Functions app.
The Azure Functions app has the following requirements:
• Must be triggered by a message placed in an Azure Storage queue.
• Must use the queue name set by an app setting named input_queue.
• Must create an Azure Blob Storage named the same as the content of the message.
You need to identify how to reference the queue and blob name in the function.json file of the Azure Functions app.
How should you reference the names? To answer, select the appropriate values in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: In function.json, app settings are referenced using the %AppSettingName% syntax, so the queue name uses %input_queue%. The blob name can use trigger metadata; {queueTrigger} represents the content of the queue message, allowing the blob to be named the same as the message content.
Question 134
DRAG DROP
-
You have an Azure Cosmos DB for NoSQL account.
You plan to develop two apps named App1 and App2 that will use the change feed functionality to track changes to containers. App1 will use the pull model and App2 will use the push model.
You need to choose the method to track the most recently processed change in App1 and App2.
Which component should you use? To answer, drag the appropriate components to the correct apps. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Explanation: Pull model readers track progress manually using continuation tokens. Push model (change feed processor) automatically tracks state and partition ownership using a lease container.
Question 135
HOTSPOT
-
You are developing an application that uses Azure Storage to store customer data. The data must only be decrypted by the customer and the customer must be provided a script to rotate keys.
You need to provide a script to rotate keys to the customer.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: key
Microsoft.Keyvault
Explanation: Customer-managed encryption for Azure Storage uses a Key Vault **key** (not a secret). To rotate keys, the script lists key versions from Azure Key Vault and updates the storage account to use the new key version, with the encryption key source set to **Microsoft.Keyvault**.
$19
Get all 447 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
