Free Microsoft AZ-204 Exam Questions

Become Microsoft Certified with updated AZ-204 exam questions and correct answers

Page: 1 / 101

Total 504 Questions | Updated On: Dec 06, 2025

Add To Cart

Question 1

You need to secure the corporate website to meet the security requirements.

What should you do?

A : Create an Azure Cache for Redis instance. Update the code to support the cache.

B : Create an Azure Content Delivery Network profile and endpoint. Configure the endpoint.

C : Create an App Service instance with a standard plan. Configure the custom domain with a TLS/SSL certificate.

D : Create an Azure Application Gateway with a Web Application Firewall (WAF). Configure end-to-end TLS encryption and the WAF.

Answer: C

Question 2

A development team is creating a new REST API. The API will store data in Azure Blob storage. You plan to deploy the API to Azure App Service.

Developers must access the Azure Blob storage account to develop the API for the next two months. The Azure Blob storage account must not be accessible by the developers after the two-month time period.

You need to grant developers access to the Azure Blob storage account.

What should you do?

A : nerate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers.

B : eate and apply a new lifecycle management policy to include a last accessed date value. Apply the policy to the Azure Blob storage account.

C : ovide all developers with the access key for the Azure Blob storage account. Update the API to include the Coordinated Universal Time (UTC) timestamp for the request header.

D : ant all developers access to the Azure Blob storage account by assigning role-based access control (RBAC) roles.

Answer: A

Question 3

You are developing a Java application to be deployed in Azure. The application stores sensitive data in Azure Cosmos DB. You need to configure Always Encrypted to encrypt the sensitive data inside the application. What should you do first?

A : eate a customer-managed key (CMK) and store the key in a new Azure Key Vault instance.

B : eate an Azure AD managed identity and assign the identity to a new Azure Key Vault instance.

C : eate a data encryption key (DEK) by using the Azure Cosmos DB SDK and store the key in Azure Cosmos DB.

D : eate a new container to include an encryption policy with the JSON properties to be encrypted.

Answer: C

Question 4

A company is implementing a publish-subscribe (Pub/Sub) messaging component by using Azure Service Bus. You are developing the first subscription application.

In the Azure portal you see that messages are being sent to the subscription for each topic. You create and initialize a subscription client object by supplying the correct details, but the subscription application is still not consuming the messages.

You need to ensure that the subscription client processes all messages.

Which code segment should you use?

A : await subscriptionClient.AddRuleAsync(new RuleDescription(RuleDescription.DefaultRuleName, new TrueFilter()));

B : subscriptionClient = new SubscriptionClient(ServiceBusConnectionString,TopicName, SubscriptionName);

C : ait subscriptionClient.CloseAsync();

D : subscriptionClient.RegisterMessageHandler(ProcessMessagesAsync,messageHandlerOptions);

Answer: D

Question 5

D18912E1457D5D1DDCBD40AB3BF70D5D

You are building a website that uses Azure Blob storage for data storage. You configure Azure Blob storage lifecycle to move all blobs to the archive tier after 30 days.

Customers have requested a service-level agreement (SLA) for viewing data older than 30 days.

You need to document the minimum SLA for data recovery.

Which SLA should you use?

A : least two days

B : tween one and 15 hours

C : least one day

D : tween zero and 60 minutes

Answer: B

Page: 1 / 101

Total 504 Questions | Updated On: Dec 06, 2025

Add To Cart