Free Microsoft AZ-204 Exam Dumps

DragDrop

You are developing a microservices solution. You plan to deploy the solution to a multinode Azure Kubernetes Service (AKS) cluster.

You need to deploy a solution that includes the following features:

*reverse proxy capabilities

*configurable traffic routing

*TLS termination with a custom certificate

Which components should you use? To answer, drag the appropriate components to the correct requirements. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

MultipleChoice

Your company is developing an Azure API.

You need to implement authentication for the Azure API. You have the following requirements:

*All API calls must be secure.

*Callers to the API must not send credentials to the API.

Which authentication mechanism should you use?

MultipleChoice

You are a developer for a SaaS company that offers many web services.

All web services for the company must meet the following requirements:

*Use API Management to access the services

*Use OpenID Connect for authentication

*Prevent anonymous usage

A recent security audit found that several web services can be called without any authentication.

Which API Management policy should you implement?

MultipleChoice

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing an Azure Service application that processes queue data when it receives a message from a mobile application. Messages may not be sent to the service consistently.

You have the following requirements:

*Queue size must not grow larger than 80 gigabytes (GB).

*Use first-in-first-out (FIFO) ordering of messages.

*Minimize Azure costs.

You need to implement the messaging solution.

Solution: Use the .Net API to add a message to an Azure Service Bus Queue from the mobile application. Create an Azure Function App that uses an Azure Service Bus Queue trigger.

Does the solution meet the goal?

Hotspot

You are developing an Azure Function App by using Visual Studio. The app will process orders input by an Azure Web App. The web app places the order information into Azure Queue Storage.

You need to review the Azure Function App code shown below.

Hotspot

ASP.NET Core API app by using C#. The API app will allow users to authenticate by using Twitter and Azure Active Directory (Azure AD).

Users must be authenticated before calling API methods. You must log the user's name for each method call.

You need to configure the API method calls.

Which values should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

+ Explanation:

Box 1: Authorize

Box 2: X-MS-CLIENT-PRINCIPAL-NAME

App Service passes user claims to your application by using special headers. External requests aren't allowed to set these headers, so they are present only if set by App Service. Some example headers include:

X-MS-CLIENT-PRINCIPAL-NAME

X-MS-CLIENT-PRINCIPAL-ID

Here's the set of headers you get from Easy Auth for a Twitter authenticated user:

{

"cookie": "AppServiceAuthSession=Lx43...xHDTA==",

...

"x-ms-client-principal-name": "evilSnobu",

"x-ms-client-principal-id": "35....",

"x-ms-client-principal-idp": "twitter",

"x-ms-token-twitter-access-token": "35...Dj",

"x-ms-token-twitter-access-token-secret": "OK3...Jx",

}

References:

DragDrop

You are developing an ASP.NET Core website that can be used to manage photographs which are stored in Azure Blob Storage containers.

Users of the website authenticate by using their Azure Active Directory (Azure AD) credentials.

You implement role-based access control (RBAC) role permission on the containers that store photographs. You assign users to RBAC role.

You need to configure the website's Azure AD Application so that user's permissions can be used with the Azure Blob containers.

How should you configure the application? To answer, drag the appropriate setting to the correct location. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Box 1: user_impersonation

Box 2: delegated

Example:

1.Select the API permissions section

2.Click the Add a permission button and then:

Ensure that the My APIs tab is selected

3.In the list of APIs, select the API TodoListService-aspnetcore.

4.In the Delegated permissions section, ensure that the right permissions are checked: user_impersonation.

5.Select the Add permissions button.

Box 3: delegated

Example

1.Select the API permissions section

2.Click the Add a permission button and then,

Ensure that the Microsoft APIs tab is selected

3.In the Commonly used Microsoft APIs section, click on Microsoft Graph

4.In the Delegated permissions section, ensure that the right permissions are checked: User.Read. Use the search box if necessary.

5.Select the Add permissions button

References:

MultipleChoice

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.

You are developing and deploying several ASP.NET web applications to Azure App Service. You plan to save session state information and HTML output.

You must use a storage mechanism with the following requirements:

* Share session state across all ASP.NET web applications.

* Support controlled, concurrent access to the same session state data for multiple readers and a single writer.

* Save full HTTP responses for concurrent requests.

You need to store the information.

Solution: Enable Application Request Routing (ARR).

Does the solution meet the goal?

MultipleChoice

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Margie's Travel is an international travel and bookings management service. The company is expanding into restaurant bookings. You are tasked with implementing Azure Search for the restaurants listed in their solution

You create the index in Azure Search.

You need to import the restaurant data into the Azure Search service by using the Azure Search NET SDK.

Solution:

1 Create a SearchlndexClient object to connect to the search index

2. Create an IndexBatch that contains the documents which must be added.

3. Call the Documents.Index method of the SearchIndexClient and pass the IndexBatch.

Does the solution meet the goal?

MultipleChoice

unforeseen failures occur.