Free Microsoft AZ-204 Exam Questions

Question 1

You develop and deploy an Azure Logic app that calls an Azure Function app. The Azure Function app includes an OpenAPl (Swagger) definition and uses an Azure Blob storage account. All resources are secured by using Azure Active Directory (Azure AD).

The Azure Logic app must securely access the Azure Blob storage account. Azure AD resources must remain if the Azure Logic app is deleted.

You need to secure the Azure Logic app.

What should you do?

A : eate an Azure AD custom role and assign role-based access controls.

B : eate an Azure AD custom role and assign the role to the Azure Blob storage account.

C : eate an Azure Key Vault and issue a client certificate.

D : eate a user-assigned managed identity and assign role-based access controls.

E : eate a system-assigned managed identity and issue a client certificate.

Answer: D

Question 2

D18912E1457D5D1DDCBD40AB3BF70D5D

You are building a website that uses Azure Blob storage for data storage. You configure Azure Blob storage lifecycle to move all blobs to the archive tier after 30 days.

Customers have requested a service-level agreement (SLA) for viewing data older than 30 days.

You need to document the minimum SLA for data recovery.

Which SLA should you use?

A : least two days

B : tween one and 15 hours

C : least one day

D : tween zero and 60 minutes

Answer: B

Question 3

You have an Azure subscription that contains an Application Insights resource named All and anAzure App Service web app named Appl. You create a Standard availability test in AM. You set its URLto point to App1.You need to ensure that any failed tests generate email notifications to the owners of thesubscription. What should you do?

A : Enable the test

B : Create an alert rule.

C : Create an action group.

D : Enable the alert.

Answer: B

Question 4

You deploy an Azure App Service web app. You create an app registration for the app in Azure Active Directory (Azure AD) and Twitter. the app must authenticate users and must use SSL for all communications. The app must use Twitter as the identity provider. You need to validate the Azure AD request in the app code. What should you validate?

A : TP response code

B : token header

C : token signature

D : nant ID

Answer: B

Question 5

You have an Azure subscription that contains an Application Insights resource named All and anAzure App Service web app named Appl. You create a Standard availability test in AM. You set its URLto point to App1.You need to ensure that any failed tests generate email notifications to the owners of thesubscription. What should you do?

A : Enable the test

B : Create an alert rule.

C : Create an action group.

D : Enable the alert.

Answer: B