You are developing an app to store globally distributed data in several Azure Blob Storage containers. Each container hosts multiple blobs where each instance of the app will store the data. You enable versioning and soft delete for the blobs.
App testing and incorrect code have frequently corrupted data. Development of the app must allow data to be restored to a previous day for testing.
You need to configure the storage account to support point-in-time restore.
What should you do?
A. Enable the change feed on the storage account to begin capturing and recording changes.
B. Configure object replication and specify replication rules.
C. Create a snapshot of the blob in the hot tier.
D. Configure an immutability policy that is scoped to a blob version.
Show Answer
Correct Answer: A
Explanation: Point-in-time restore for Azure Blob Storage has strict prerequisites. In this scenario, blob versioning and soft delete are already enabled. The remaining required feature is the change feed, which records all write, delete, and update operations on blobs. Without the change feed, Azure cannot reconstruct the state of data at a previous point in time. Therefore, enabling the change feed on the storage account is necessary to support point-in-time restore.
Question 87
You manage an Azure subscription that contains 100 Azure App Service web apps. Each web app is associated with an individual Application Insights instance.
You plan to remove Classic availability tests from all Application Insights instances that have this functionality configured.
You have the following PowerShell statement:
Get-AzApplicationInsightsWebTest | Where-Object { $condition }
You need to set the value of the $condition variable.
Which value should you use?
A. $_.Type -eq "ping"
B. $_.WebTestKind -eq "ping"
C. $_.WebTestKind -eq "standard"
D. $_.Type -eq "standard"
Show Answer
Correct Answer: B
Explanation: Classic availability tests in Application Insights are URL ping tests. When using Get-AzApplicationInsightsWebTest, classic tests are identified by the WebTestKind property set to "ping". Filtering on $_.WebTestKind -eq "ping" correctly selects only Classic availability tests for removal.
Question 88
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure App Service plan named APSPlan1 set to the Basic B1 pricing tier. APSPlan1 contains an App Service web app named WebApp1.
You plan to enable schedule-based autoscaling for APSPlan1.
You need to minimize the cost of running WebApp1.
Solution: Scale up ASPPlan1 to the Premium V2 pricing tier.
Does the solution meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: Schedule-based autoscaling is not supported on the Basic (B1) tier, so scaling up is required. However, scaling up to Premium V2 significantly increases cost and is not the minimum-cost option. The Standard tier supports autoscaling at a lower price than Premium V2, so the proposed solution does not meet the goal of minimizing cost.
Question 89
HOTSPOT
-
You develop a containerized application. The application must be deployed to an existing Azure Kubernetes Service (AKS) cluster from an Azure Container Registry (ACR) instance. You use the Azure command-line interface (Azure CLI) to deploy the application image to AKS.
Images must be pulled from the registry. You must be able to view all registries within the current Azure subscription. Authentication must be managed by Microsoft Entra ID and removed when the registry is deleted. The solution must use the principle of least privilege.
You need to configure authentication to the registry.
Which authentication configuration should you use? To answer, select the appropriate configuration values in the answer area,
NOTE: Each correct selection is worth one point.
Explanation: Use a system-assigned managed identity so authentication is handled by Microsoft Entra ID and automatically removed with the resource. Assign the AcrPull role to allow the AKS cluster to pull images from ACR with least privilege. Listing registries in the subscription is handled by the user’s Azure RBAC permissions, not the AKS identity.
Question 90
DRAG DROP
-
You are developing a web service that will run on Azure virtual machines that use Azure Storage. You configure all virtual machines to use managed identities.
You have the following requirements:
• Secret-based authentication mechanisms are not permitted for accessing an Azure Storage account.
• Must use only Azure Instance Metadata Service endpoints.
You need to write code to retrieve an access token to access Azure Storage. To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Explanation: Managed identities on Azure VMs retrieve tokens via the Azure Instance Metadata Service at the link-local IP 169.254.169.254 using the /metadata/identity/oauth2/token endpoint. The IMDS token response is returned as JSON, so it must be parsed with json.loads.
Question 91
HOTSPOT
-
Case study
-
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
-
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Background
-
Munson’s Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.
Current Environment
-
The company is migrating all applications from an on-premises datacenter to Microsoft Azure. Applications support distributors, farmers, and internal company staff.
Corporate website
-
• The company hosts a public website located at http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms
-
• The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors
-
• Distributors integrate their applications with data that is accessible by using APIs hosted at http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.
Requirements
-
The application components must meet the following requirements:
Corporate website
-
• The site must be migrated to Azure App Service.
• Costs must be minimized when hosting in Azure.
• Applications must automatically scale independent of the compute resources.
• All code changes must be validated by internal staff before release to production.
• File transfer speeds must improve, and webpage-load performance must increase.
• All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
• A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms
-
• Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors
-
• The company must track a custom telemetry value with each API call and monitor performance of all APIs.
• API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff
-
• App and API updates must be validated before release to production.
• Staff must be able to select a link to direct them back to the production app when validating an app or API update.
• Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security
-
• All web communications must be secured by using TLS/HTTPS.
• Web content must be restricted by country/region to support corporate compliance standards.
• The principle of least privilege must be applied when providing any user rights or process access rights.
• Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Issues
-
Corporate website
-
• Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
• Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
• Internal staff report webpage load sizes are large and take a long time to load.
• Developers receive authentication errors to Service Bus when they debug locally.
Distributors
-
• Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
You need to resolve the authentication errors for developers.
Which Service Bus security configuration should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Service Bus Data Owner
Namespace
Explanation: Developers debugging locally need data-plane permissions to both send and receive messages using Microsoft Entra ID authentication. The Service Bus Data Owner role provides full data access required for debugging, and assigning it at the namespace scope enables access across queues without using secrets, resolving authentication errors.
Question 92
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are implementing an application by using Azure Event Grid to push near-real-time information to customers.
You have the following requirements:
• You must send events to thousands of customers that include hundreds of various event types.
• The events must be filtered by event type before processing.
• Authentication and authorization must be handled by using Microsoft Entra ID.
• The events must be published to a single endpoint.
You need to implement Azure Event Grid.
Solution: Publish events to a system topic. Create an event subscription for each customer.
Does the solution meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: System topics are used for Azure service–generated events, not for publishing custom application events. In addition, creating an event subscription per customer contradicts the requirement to publish events to a single endpoint and does not scale well for thousands of customers. Scenarios with many customers and event-type filtering are better suited to Event Grid custom topics or event domains with appropriate subscriptions and Entra ID–based access.
Question 93
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are implementing an application by using Azure Event Grid to push near-real-time information to customers.
You have the following requirements:
• You must send events to thousands of customers that include hundreds of various event types.
• The events must be filtered by event type before processing.
• Authentication and authorization must be handled by using Microsoft Entra ID.
• The events must be published to a single endpoint.
You need to implement Azure Event Grid.
Solution: Enable ingress, create a TCP scale rule, and apply the rule to the container app.
Does the solution meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: The proposed solution describes configuring Azure Container Apps ingress and a TCP scaling rule, which is unrelated to Azure Event Grid functionality. It does not address Event Grid concepts such as event types, event filtering, publishing to a single Event Grid topic or domain, or Microsoft Entra ID–based authentication and authorization. Therefore, it does not meet the stated requirements.
Question 94
Case study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Background -
Munson’s Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.
Current Environment -
The company is migrating all applications from an on-premises datacenter to Microsoft Azure. Applications support distributors, farmers, and internal company staff.
Corporate website -
• The company hosts a public website located at http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms -
• The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors -
• Distributors integrate their applications with data that is accessible by using APIs hosted at http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.
Requirements -
The application components must meet the following requirements:
Corporate website -
• The site must be migrated to Azure App Service.
• Costs must be minimized when hosting in Azure.
• Applications must automatically scale independent of the compute resources.
• All code changes must be validated by internal staff before release to production.
• File transfer speeds must improve, and webpage-load performance must increase.
• All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
• A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms -
• Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors -
• The company must track a custom telemetry value with each API call and monitor performance of all APIs.
• API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff -
• App and API updates must be validated before release to production.
• Staff must be able to select a link to direct them back to the production app when validating an app or API update.
• Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security -
• All web communications must be secured by using TLS/HTTPS.
• Web content must be restricted by country/region to support corporate compliance standards.
• The principle of least privilege must be applied when providing any user rights or process access rights.
• Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Issues -
Corporate website -
• Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
• Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
• Internal staff report webpage load sizes are large and take a long time to load.
• Developers receive authentication errors to Service Bus when they debug locally.
Distributors -
• Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
You need to secure the corporate website to meet the security requirements.
What should you do?
A. Create an Azure Cache for Redis instance. Update the code to support the cache.
B. Create an Azure Content Delivery Network profile and endpoint. Configure the endpoint. С. Create an App Service instance with a standard plan. Configure the custom domain with a TLS/SSL certificate.
D. Create an Azure Application Gateway with a Web Application Firewall (WAF). Configure end-to-end TLS encryption and the WAF.
Show Answer
Correct Answer: D
Explanation: The primary goal is to secure the corporate website. Azure Application Gateway with Web Application Firewall (WAF) directly addresses the security requirements: it enforces TLS/HTTPS end-to-end, provides protection against common web exploits, supports geo-based access restrictions via WAF rules, and offers centralized traffic inspection consistent with least-privilege principles. Other options focus on performance or hosting but do not comprehensively meet the stated security controls.
Question 95
Case study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Background -
Munson’s Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.
Current Environment -
The company is migrating all applications from an on-premises datacenter to Microsoft Azure. Applications support distributors, farmers, and internal company staff.
Corporate website -
• The company hosts a public website located at http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms -
• The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors -
• Distributors integrate their applications with data that is accessible by using APIs hosted at http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.
Requirements -
The application components must meet the following requirements:
Corporate website -
• The site must be migrated to Azure App Service.
• Costs must be minimized when hosting in Azure.
• Applications must automatically scale independent of the compute resources.
• All code changes must be validated by internal staff before release to production.
• File transfer speeds must improve, and webpage-load performance must increase.
• All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
• A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms -
• Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors -
• The company must track a custom telemetry value with each API call and monitor performance of all APIs.
• API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff -
• App and API updates must be validated before release to production.
• Staff must be able to select a link to direct them back to the production app when validating an app or API update.
• Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security -
• All web communications must be secured by using TLS/HTTPS.
• Web content must be restricted by country/region to support corporate compliance standards.
• The principle of least privilege must be applied when providing any user rights or process access rights.
• Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Issues -
Corporate website -
• Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
• Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
• Internal staff report webpage load sizes are large and take a long time to load.
• Developers receive authentication errors to Service Bus when they debug locally.
Distributors -
• Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
You need to configure all site configuration settings for the corporate website.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Create a managed identity.
B. Update the role assignments for the Azure Key Vault.
C. Create an Azure App Configuration store.
D. Update the role assignments for the Azure App Configuration store.
E. Create an Azure Key Vault.
Show Answer
Correct Answer: A, C, D
Explanation: The requirement states that all site configuration settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit. Azure App Configuration is designed to centrally manage non-secret application settings and provides encryption, satisfying this requirement. To allow the App Service to access App Configuration securely without secrets, a managed identity must be created for the app. Applying the principle of least privilege then requires updating role assignments on the Azure App Configuration store so the managed identity can read the configuration. Azure Key Vault is not required because the requirement explicitly avoids using secrets for site settings.
$19
Get all 447 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.