AZ-204 Free Practice Questions — Page 4

Question 34

DRAG DROP - You have an Azure Virtual Machine (VM) named VM1 running Windows Server 2022 and an Azure Key Vault instance named kv1. You are developing a .NET application named App1 that you plan to deploy to VM1. You have the following requirements: • App1 will require access to kv1. • The identity used by App1 to access kv1 must be automatically deprovisioned when VM1 is deleted. You need to identify the procedure that will meet the requirements. Which three actions should you include in the procedure? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 35

You develop applications that integrate with a Microsoft Entra tenant. You plan to implement a permission classification in the tenant. You need to select permissions to include in your classification. Which permissions should you select?

Question 36

HOTSPOT - You are developing a web application that makes calls to the Microsoft Graph API. You register the application in the Azure portal and upload a valid X509 certificate. You create an appsettings.json file containing the certificate name, client identifier for the application, and the tenant identifier of the Microsoft Entra ID. You create a method named ReadCertificate to return the X509 certificate by name. You need to implement code that acquires a token by using the certificate. How should you complete the code segment? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 37

You have 100 Azure virtual machines (VMs) with the system-assigned managed identity enabled. You need to identify the value of the object ID attribute for each of the identities. Which command should you use?

Question 38

You have 100 Azure virtual machines (VMs) with the system-assigned managed identity enabled. You need to identify the value of the object ID attribute for each of the identities. Which command should you use?

Question 39

HOTSPOT - You have an Azure Blob Storage account named account1. You plan to grant permissions for access to blobs in account1 by using a combination of a shared access signature token and a stored access policy. You must set the duration of the token validity by using the stored access policy. You need to complete the configuration of the stored access policy and generate the shared access signature token. Which token setting and token type should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 41

DRAG DROP - You manage an Azure subscription associated with a Microsoft Entra tenant named contoso.com. The subscription contains an Azure Blob Storage account named storage1. Your user account has the Contributor Azure role-based access control (RBAC) role within the scope of the subscription. You plan to implement secure access to containers and blobs in storage1. Your solution must satisfy the following requirements: • Authorization requests to access storage1 content must be authenticated by using Microsoft Entra credentials. • Authorized access to storage1 content must be time-limited based on arbitrary values specified when requests are raised. • The principle of least privilege must be satisfied. You need to implement the plan. Which three actions should you perform in sequence? To answer, move the appropriate secure access implementation options from the list of secure access implementations to the answer area and arrange them in the correct order.

Question 42

DRAG DROP - You manage an Azure Cosmos DB for a NoSQL API account named account1. You configure account1 with the default consistency level. An application named app1 must access containers in account1 to perform read and write operations. The connections from app1 to account1 must be established by using the direct mode. You plan to configure app1 to override the default consistency level by using the Azure Cosmos DB SDK client. You need to set the maximum consistency level for app1 to use for read and write operations. Which consistency level should you set? To answer, move the appropriate maximum consistency levels to the correct operation types. You may use each maximum consistency level once, more than once, or not at all. You may need to move the split bar between panes or scroll to view content.

Question 43

HOTSPOT - You have a Dockerfile that builds a container image named image1. The container image and its base image are stored in separate repositories of an Azure Container registry named registry1. The codebase of image1 is stored in a GitHub repo named app1 of an account named account1. You plan to implement automatic updates to image1 whenever its base image is updated or an update to the main branch of the GitHub repo occurs. You need to complete the Azure CLI command that will apply the planned implementation. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 44

HOTSPOT - You have an Azure Function app named App1 written in C# and an Application Insights workspace named Workspace1. App is implemented with Application Insights enabled and is configured to send its telemetry to Workspace1. You observe that App1 telemetry collection regularly exceeds monthly quotas of Workspace1. You need to ensure that the telemetry volume remains within the monthly quotas of Workspace1. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.