HOTSPOT
-
You are developing an Azure Static Web app that contains training materials for a tool company. Each tool’s training material is contained in a static web page that is linked from the tool’s publicly available description page.
A user must be authenticated using Azure AD prior to viewing training.
You need to ensure that the user can view training material pages after authentication.
How should you complete the configuration file? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: Use responseOverrides to intercept 401 (Unauthorized) responses and redirect unauthenticated users to Azure AD login. A 302 redirect sends the user to /.auth/login/aad, and post_login_redirect_uri=.referrer returns the user to the originally requested training page after authentication.
Question 192
HOTSPOT -
You need to implement the corporate website.
How should you configure the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: Plan: Standard
Service: App Service Web App
Explanation: The Standard App Service plan meets the 99.95% SLA, supports SSL, Application Insights, availability tests, and CI/CD. An App Service Web App supports hosting the React site with integration to Azure Functions APIs and global distribution options.
Question 193
HOTSPOT -
You need to reliably identify the delivery driver profile information.
How should you configure the system? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: JSON web token (JWT) type: ID
Payload claim value: oid
Explanation: Use an ID token to identify the authenticated user. The oid (object ID) claim is an immutable, tenant-wide unique identifier for the user or service principal, making it reliable for identifying the delivery driver profile across applications.
Question 194
You need to grant access to the retail store location data for the inventory service development effort.
What should you use?
A. Azure AD access token
B. Azure RBAC role
C. Shared access signature (SAS) token
D. Azure AD ID token
E. Azure AD refresh token
Show Answer
Correct Answer: C
Explanation: The requirement is to grant a third-party limited, read-only access to a specific blob for a fixed period (three months). A Shared Access Signature (SAS) token is designed for this scenario because it can scope access to a specific resource, restrict permissions (read-only), and enforce an expiration time, without granting broader account or identity-level access.
Question 195
You develop and deploy an Azure App Service web app to a production environment. You enable the Always On setting and the Application Insights site extensions.
You deploy a code update and receive multiple failed requests and exceptions in the web app.
You need to validate the performance and failure counts of the web app in near real time.
Which Application Insights tool should you use?
A. Profiler
B. Smart Detection
C. Live Metrics Stream
D. Application Map
E. Snapshot Debugger
Show Answer
Correct Answer: C
Explanation: The requirement is to validate performance and failure counts in near real time. Application Insights Live Metrics Stream provides real-time telemetry such as request rates, failure rates, and response times with minimal latency. Other options analyze data after ingestion (Smart Detection), focus on architecture (Application Map), or target deep diagnostics rather than live monitoring (Profiler, Snapshot Debugger).
Question 196
HOTSPOT -
You deploy an ASP.NET web app to Azure App Service.
You must monitor the web app by using Application Insights.
You need to configure Application Insights to meet the requirements.
Which feature should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: Automatically warn of potential performance problems and failure anomalies:
Smart Detection
Automatically collect source code and variable state on exception:
Snapshot Debugger
Capture performance traces without negatively affecting users:
Profiler
Explanation: Smart Detection provides proactive anomaly and performance alerts. Snapshot Debugger captures code and variable state when exceptions occur. Application Insights Profiler collects low-overhead performance traces in production.
Question 197
HOTSPOT -
An organization deploys a blob storage account. Users take multiple snapshots of the blob storage account over time.
You need to delete all snapshots of the blob storage account. You must not delete the blob storage account itself.
How should you complete the code segment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: delete_snapshots
Only
Explanation: To remove all snapshots without deleting the base blob, the delete_blob method must specify the delete_snapshots parameter with the value 'Only', which deletes snapshots while retaining the blob itself.
Question 198
HOTSPOT -
You are a developer building a web site using a web app. The web site stores configuration data in Azure App Configuration.
Access to Azure App Configuration has been configured to use the identity of the web app for authentication. Security requirements specify that no other authentication systems must be used.
You need to load configuration data from Azure App Configuration.
How should you complete the code? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation: Use AddAzureAppConfiguration to load settings from Azure App Configuration. Use ManagedIdentityCredential to authenticate strictly with the web app’s managed identity, meeting the requirement to avoid any other authentication mechanisms (unlike DefaultAzureCredential).
Question 199
You are developing a user portal for a company.
You need to create a report for the portal that lists information about employees who are subject matter experts for a specific topic. You must ensure that administrators have full control and consent over the data.
Which technology should you use?
A. Microsoft Graph data connect
B. Microsoft Graph API
C. Microsoft Graph connectors
Show Answer
Correct Answer: A
Explanation: The scenario emphasizes creating a report that identifies subject matter experts while ensuring administrators have full control and explicit consent over the data. Microsoft Graph Data Connect is specifically designed for accessing Microsoft 365 data at scale with granular administrative consent and governance controls. It is well suited for reporting and analytics scenarios where bulk data extraction and strong admin oversight are required. Microsoft Graph API is optimized for real-time app interactions, and Graph connectors are for ingesting external data into Microsoft Search, making them less appropriate here.
Question 200
You develop a Python application for image rendering that uses GPU resources to optimize rendering processes. You deploy the application to an Azure
Container Instances (ACI) Linux container.
The application requires a secret value to be passed when the container is started. The value must only be accessed from within the container.
You need to pass the secret value.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Create an environment variable Set the secureValue property to the secret value.
B. Add the secret value to the container image. Use a managed identity.
C. Add the secret value to the application code Set the container startup command.
D. Add the secret value to an Azure Blob storage account. Generate a SAS token.
E. Mount a secret volume containing the secret value in a secrets file.
Show Answer
Correct Answer: A, E
Explanation: Azure Container Instances supports securely passing secrets at container startup in two ways that restrict access to within the container. You can define environment variables using the secureValue property so the secret is not exposed in logs or the container definition. Alternatively, you can mount a secret volume, which makes the secret available as a file inside the container. Both approaches meet the requirement to pass the secret securely at startup and limit access to the container only.
$19
Get all 447 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
