Free Microsoft AZ-204 Exam Questions

Become Microsoft Certified with updated AZ-204 exam questions and correct answers

Page: 1 / 97

Total 482 Questions | Updated On: Mar 12, 2025

Add To Cart

Question 1

You are developing a Java application to be deployed in Azure. The application stores sensitive data in Azure Cosmos DB. You need to configure Always Encrypted to encrypt the sensitive data inside the application. What should you do first?

A : eate a customer-managed key (CMK) and store the key in a new Azure Key Vault instance.

B : eate an Azure AD managed identity and assign the identity to a new Azure Key Vault instance.

C : eate a data encryption key (DEK) by using the Azure Cosmos DB SDK and store the key in Azure Cosmos DB.

D : eate a new container to include an encryption policy with the JSON properties to be encrypted.

Answer: C

Question 2

A development team is creating a new REST API. The API will store data in Azure Blob storage. You plan to deploy the API to Azure App Service.

Developers must access the Azure Blob storage account to develop the API for the next two months. The Azure Blob storage account must not be accessible by the developers after the two-month time period.

You need to grant developers access to the Azure Blob storage account.

What should you do?

A : nerate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers.

B : eate and apply a new lifecycle management policy to include a last accessed date value. Apply the policy to the Azure Blob storage account.

C : ovide all developers with the access key for the Azure Blob storage account. Update the API to include the Coordinated Universal Time (UTC) timestamp for the request header.

D : ant all developers access to the Azure Blob storage account by assigning role-based access control (RBAC) roles.

Answer: A

Question 3

This question requires that you evaluate the underlined text to determine if it is correct.

Your Azure Active Directory Azure (Azure AD) tenant has an Azure subscription linked to it.

Your developer has created a mobile application that obtains Azure AD access tokens using the OAuth 2 implicit grant type.

The mobile application must be registered in Azure AD.

You require a redirect URI from the developer for registration purposes.

Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed.` If the statement is incorrect, select the answer choice that makes the statement correct.

A : No change required.

B : a secret

C : a login hint

D : a client ID

Answer: A

Question 4

You need to resolve the log capacity issue.

What should you do?

A : eate an Application Insights Telemetry Filter

B : ange the minimum log level in the host.json file for the function

C : plement Application Insights Sampling

D : t a LogCategoryFilter during startup

Answer: C

Question 5

You are a developing a SaaS application that stores data as key value pairs.

You must make multiple editions of the application available. In the lowest cost edition, the performance must be best-effort, and there is no regional failover.

In higher cos! editions customers must be able to select guaranteed performance and support for multiple regions. Azure costs must be minimized.

Which Azure Cosmos OB API should you use for the application?

A : Core

B : MongoDB

C : Cassandra

D : Table API

Answer: D

Page: 1 / 97

Total 482 Questions | Updated On: Mar 12, 2025

Add To Cart