HOTSPOT
-
A company has an Azure storage static website with a custom domain name.
The company informs you that unauthorized users from a different country/region are accessing the website. The company provides the following requirements for the static website:
• Unauthorized users must not be able to access the website.
• Users must be able to access the website using the HTTPS protocol.
You need to implement the changes to the static website.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Prevent access from unauthorized users:
Configure the AllowBlobPublicAccess property for the storage account to False.
Require HTTPS access to the website:
Enable Azure Content Delivery Network on the storage account.
Explanation: Disabling AllowBlobPublicAccess prevents anonymous access to the static website regardless of container settings. For a static website with a custom domain, Azure Storage does not natively support HTTPS, so Azure CDN is required to provide HTTPS support for the custom domain.
Question 77
You have a Standard tier instance of Azure Cache for Redis named redis1 configured with the default settings.
You need to configure a Maxmemory policy to increase the amount of cache available for read operations.
How should you configure the Maxmemory policy?
A. Decrease the value of maxmemory-reserved.
B. Increase the value of maxmemory-reserved.
C. Set the Maxmemory policy to noeviction.
D. Set the Maxmemory policy to volatile-lru.
Show Answer
Correct Answer: A
Explanation: In Azure Cache for Redis, maxmemory-reserved defines how much memory is held back for non-cache operations such as replication and failover. That reserved memory is not available for storing cached data. Decreasing maxmemory-reserved directly increases the memory available for cached keys, which improves the amount of cache available for read operations. Changing the eviction policy (such as volatile-lru or noeviction) does not increase available cache memory, and increasing maxmemory-reserved would reduce it.
Question 78
You manage an Azure Cosmos DB for a NoSQL API account named account1. The account contains a database named db1, which contains a container named container1. You configure account1 with a session consistency level.
You plan to develop an application named App1 that will access container1. Individual instances of App1 must perform reads and writes. App1 must allow multiple nodes to participate in the same session.
You need to configure an object to share the session token between the nodes.
Which object should you use?
A. Document response
B. Request options
C. Feed options
D. Connection policy
Show Answer
Correct Answer: B
Explanation: With session consistency, sharing a session across multiple application nodes requires manually propagating the session token. The session token is obtained from responses and must be set on subsequent requests via RequestOptions (e.g., RequestOptions/ItemRequestOptions.SessionToken). This allows multiple nodes to participate in the same session. Other options do not provide the correct per-request mechanism for sharing session tokens.
Question 79
HOTSPOT -
You are creating an Azure Functions app project in your local development environment by using Azure Functions Core Tools.
You must create the project in either Python or C# without using a template.
You need to specify the command and its parameter required to create the Azure Functions app project.
Which command and parameter should you specify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: Use func init to create a new Azure Functions project (not a function template). The --worker-runtime parameter specifies the language runtime such as Python or C#.
Question 80
DRAG DROP
-
Case study
-
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
-
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Background
-
Fourth Coffee is a global coffeehouse chain and coffee company recognized as one of the world’s most influential coffee brands. The company is renowned for its specialty coffee beverages, including a wide range of espresso-based drinks, teas, and other beverages. Fourth Coffee operates thousands of stores worldwide.
Current environment
-
The company is developing cloud-native applications hosted in Azure.
Corporate website
-
The company hosts a public website located at http://www.fourthcoffee.com/. The website is used to place orders as well as view and update inventory items.
Inventory items
-
In addition to its core coffee offerings, Fourth Coffee recently expanded its menu to include inventory items such as lunch items, snacks, and merchandise. Corporate team members constantly update inventory. Users can customize items. Corporate team members configure inventory items and associated images on the website.
Orders
-
Associates in the store serve customized beverages and items to customers. Orders are placed on the website for pickup.
The application components process data as follows:
1. Azure Traffic Manager routes a user order request to the corporate website hosted in Azure App Service.
2. Azure Content Delivery Network serves static images and content to the user.
3. The user signs in to the application through a Microsoft Entra ID for customers tenant.
4. Users search for items and place an order on the website as item images are pulled from Azure Blob Storage.
5. Item customizations are placed in an Azure Service Bus queue message.
6. Azure Functions processes item customizations and saves the customized items to Azure Cosmos DB.
7. The website saves order details to Azure SQL Database.
8. SQL Database query results are cached in Azure Cache for Redis to improve performance.
The application consists of the following Azure services:
Requirements
-
The application components must meet the following requirements:
• Azure Cosmos DB development must use a native API that receives the latest updates and stores data in a document format.
• Costs must be minimized for all Azure services.
• Developers must test Azure Blob Storage integrations locally before deployment to Azure. Testing must support the latest versions of the Azure Storage APIs.
Corporate website
-
• User authentication and authorization must allow one-time passcode sign-in methods and social identity providers (Google or Facebook).
• Static web content must be stored closest to end users to reduce network latency.
Inventory items
-
• Customized items read from Azure Cosmos DB must maximize throughput while ensuring data is accurate for the current user on the website.
• Processing of inventory item updates must automatically scale and enable updates across an entire Azure Cosmos DB container.
• Inventory items must be processed in the order they were placed in the queue.
• Inventory item images must be stored as JPEG files in their native format to include exchangeable image file format (data) stored with the blob data upon upload of the image file.
• The Inventory Items API must securely access the Azure Cosmos DB data.
Orders
-
• Orders must receive inventory item changes automatically after inventory items are updated or saved.
Issues
-
• Developers are storing the Azure Cosmos DB credentials in an insecure clear text manner within the Inventory Items API code.
• Production Azure Cache for Redis maintenance has negatively affected application performance.
You need to secure the corporate website for users.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Show Answer
Correct Answer: Register the web app with Microsoft Entra.
Create a client secret.
Create a user flow and associate the web app.
Grant Microsoft Graph API permissions to the web app.
Explanation: The web app must first be registered in Microsoft Entra to enable authentication. A client secret is then created for secure app authentication. A user flow is required to support one-time passcodes and social identity providers. Finally, Microsoft Graph API permissions are granted so the web app can securely access required user information.
Question 81
HOTSPOT
-
You have an Azure Cosmos DB for NoSQL API account named account1. Multiple instances of an on-premises application named app1 read data from account1.
You plan to implement integrated cache for connections from the instances of app to account1.
You need to set the connection mode and maximum consistency level of app1.
Which values should you use for the configuration settings? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: Azure Cosmos DB integrated cache is hosted on the dedicated gateway, so applications must use gateway mode with a dedicated gateway. Integrated cache supports only session and eventual consistency; the maximum supported consistency level is session, which is preferred for applications with multiple instances to ensure consistent reads per session.
Question 82
HOTSPOT
-
You have the following data lifecycle management policy:
You plan to implement an Azure Blob Storage account and apply to it Policy1. The solution should maximize resiliency and performance.
You need to configure the account to support the policy.
Which redundancy option and storage account type should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: The lifecycle policy moves blobs to the Archive tier, which is supported only on standard General-purpose v2 accounts. Archive tier is supported with LRS, GRS, and RA-GRS, but not with ZRS, GZRS, or RA-GZRS. To maximize resiliency and performance while supporting archive and read access to the secondary region, RA-GRS is the best fit.
Question 83
You are developing a Cosmos DB solution that will be deployed to multiple Azure regions.
Your solution must meet the following requirements:
• Read operations will never receive write operations that are out of order.
• Maximize concurrency of read operations in all regions.
You need to choose the consistency level for the solution.
Which consistency level should you use?
A. session
B. eventual
C. bounded staleness
D. consistent prefix
Show Answer
Correct Answer: D
Explanation: The solution requires that reads never observe out-of-order writes and that read concurrency across regions be maximized. Eventual consistency allows out-of-order reads, so it is excluded. Session consistency is scoped to a client session and does not maximize global read concurrency. Bounded staleness adds additional constraints (time or version windows) that reduce concurrency more than necessary. Consistent prefix guarantees that reads never see writes out of order while offering higher availability and concurrency across regions than bounded staleness or stronger levels. Therefore, consistent prefix is the best fit.
Question 84
You have an Azure Queue Storage named queue1.
You plan to develop code that will process messages in queue1.
You need to implement a queue operation to set the visibility timeout value of individual messages in queue1.
Which two operations can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Peek at a message in the queue.
B. Delete a message in the queue.
C. Add a message to the queue.
D. Update a message in the queue.
E. Receive a message from the queue.
Show Answer
Correct Answer: D, E
Explanation: In Azure Queue Storage, the visibility timeout of an individual message can be set or changed in two ways. When you receive a message, you can specify a visibility timeout that controls how long the message remains invisible to other consumers. After a message has been received, you can use the Update Message operation to modify its visibility timeout (and optionally its content). Other operations like peek, add, or delete do not allow setting visibility timeout.
Question 85
HOTSPOT
-
Case study
-
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
-
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Background
-
Fourth Coffee is a global coffeehouse chain and coffee company recognized as one of the world’s most influential coffee brands. The company is renowned for its specialty coffee beverages, including a wide range of espresso-based drinks, teas, and other beverages. Fourth Coffee operates thousands of stores worldwide.
Current environment
-
The company is developing cloud-native applications hosted in Azure.
Corporate website
-
The company hosts a public website located at http://www.fourthcoffee.com/. The website is used to place orders as well as view and update inventory items.
Inventory items
-
In addition to its core coffee offerings, Fourth Coffee recently expanded its menu to include inventory items such as lunch items, snacks, and merchandise. Corporate team members constantly update inventory. Users can customize items. Corporate team members configure inventory items and associated images on the website.
Orders
-
Associates in the store serve customized beverages and items to customers. Orders are placed on the website for pickup.
The application components process data as follows:
1. Azure Traffic Manager routes a user order request to the corporate website hosted in Azure App Service.
2. Azure Content Delivery Network serves static images and content to the user.
3. The user signs in to the application through a Microsoft Entra ID for customers tenant.
4. Users search for items and place an order on the website as item images are pulled from Azure Blob Storage.
5. Item customizations are placed in an Azure Service Bus queue message.
6. Azure Functions processes item customizations and saves the customized items to Azure Cosmos DB.
7. The website saves order details to Azure SQL Database.
8. SQL Database query results are cached in Azure Cache for Redis to improve performance.
The application consists of the following Azure services:
Requirements
-
The application components must meet the following requirements:
• Azure Cosmos DB development must use a native API that receives the latest updates and stores data in a document format.
• Costs must be minimized for all Azure services.
• Developers must test Azure Blob Storage integrations locally before deployment to Azure. Testing must support the latest versions of the Azure Storage APIs.
Corporate website
-
• User authentication and authorization must allow one-time passcode sign-in methods and social identity providers (Google or Facebook).
• Static web content must be stored closest to end users to reduce network latency.
Inventory items
-
• Customized items read from Azure Cosmos DB must maximize throughput while ensuring data is accurate for the current user on the website.
• Processing of inventory item updates must automatically scale and enable updates across an entire Azure Cosmos DB container.
• Inventory items must be processed in the order they were placed in the queue.
• Inventory item images must be stored as JPEG files in their native format to include exchangeable image file format (data) stored with the blob data upon upload of the image file.
• The Inventory Items API must securely access the Azure Cosmos DB data.
Orders
-
• Orders must receive inventory item changes automatically after inventory items are updated or saved.
Issues
-
• Developers are storing the Azure Cosmos DB credentials in an insecure clear text manner within the Inventory Items API code.
• Production Azure Cache for Redis maintenance has negatively affected application performance.
You need to save customized items to Azure Cosmos DB.
Which Azure Cosmos DB configuration should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: The application requires a native Azure Cosmos DB API that stores data in document (JSON) format and receives the latest updates, which is the Cosmos DB NoSQL API. To maximize throughput while ensuring data accuracy for the current user, Session consistency is optimal because it guarantees read-your-own-writes within a user session with lower latency than Strong consistency.
$19
Get all 447 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.