Free Microsoft AZ-204 Exam Questions

Become Microsoft Certified with updated AZ-204 exam questions and correct answers

Page: 1 / 101

Total 504 Questions | Updated On: Sep 11, 2025

Add To Cart

Question 1

You need to secure the Azure Functions to meet the security requirements.

Which two actions should you perform? Each correct answer presents part of the solution

NOTE: Each correct selection is worth one point.

A : ore the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled

B : ore the RSA-HSM key in Azure Blob storage with an immutability policy applied to the container.

C : ore the RSA-HSM key in Azure Cosmos DB. Apply the built-in policies for customer-managed Keys and allowed locations

D : eate a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

E : eate a free tier Azure App Configuration instance with a new Azure AD service principal.

Answer: B,C

Question 2

You are developing a web application that runs as an Azure Web App. The web application stores data in Azure SQL Database and stores files in an Azure Storage account. The web application makes HTTP requests to external services as part of normal operations.

The web application is instrumented with Application Insights. The external services are OpenTelemetry compliant.

You need to ensure that the customer ID of the signed in user is associated with all operations throughout the overall system.

What should you do?

A : eate a new SpanContext with the TraceRags value set to the customer ID for the signed in user.

B : the current SpanContext, set the Traceld to the customer ID for the signed in user.

C : the customer ID for the signed in user to the CorrelationContext in the web application.

D : t the header Ocp-Apim-Trace to the customer ID for the signed in user.

Answer: C

Question 3

Your company has an Azure Kubernetes Service (AKS) cluster that you manage from an Azure AD-joined device. The cluster is located in a resource group.

Developers have created an application named MyApp. MyApp was packaged into a container image.

You need to deploy the YAML manifest file for the application.

Solution: You install the docker client on the device and run the docker run -it microsoft/azure-cli:0.10.17 command.

Does this meet the goal?

A : Yes

B : No

Answer: B

Question 4

You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days.

Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

A : abledForDeployment

B : ablePurgeProtection

C : abledForTemplateDeployment

D : ableSoftDelete

Answer: B,D

Question 5

You need to secure the corporate website to meet the security requirements.

What should you do?

A : Create an Azure Cache for Redis instance. Update the code to support the cache.

B : Create an Azure Content Delivery Network profile and endpoint. Configure the endpoint.

C : Create an App Service instance with a standard plan. Configure the custom domain with a TLS/SSL certificate.

D : Create an Azure Application Gateway with a Web Application Firewall (WAF). Configure end-to-end TLS encryption and the WAF.

Answer: C

Page: 1 / 101

Total 504 Questions | Updated On: Sep 11, 2025

Add To Cart