AZ-204 Practice Exam Questions and Answers

A.  

Create a custom Microsoft Entra role

Assign the custom role to the Azure Cosmos DB account Update the function app to use certificate-based authentication.

B.  

Create a SQL role definition under the Azure Cosmos DB account.

Create a user-assigned managed identity and assign the identity to the function app.

Assign the user-assigned managed identity the SQL role definition.

Update the function app code to implement the DefaultAzurecredential class and reference the user-assigned managed identity.

C.  

Create a system-assigned managed identity for the function app with read access to secrets in Azure Key Vault. Store the Azure Cosmos DB primary key and URI in Azure Key Vault as secrets.

Use function app settings to reference the secret values.

D.  

Create a custom Microsoft Entra role. Assign the custom role to Azure Key Vault. Assign the custom role to the function app.

Reference the custom role in the function app code when accessing Azure Key Vault values.

E.  

Create a SQL role definition under the Azure Cosmos DB account. Assign the role to the function app's system-assigned managed identity. Programmatically access the Azure Cosmos OB keys from the function app.

A.  

Store the RSA-HSM key in Azure Cosmos D

B.  

B.  

Create a free tier Azure App Configuration instance with a new Azure AD service principal.

C.  

Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled.

D.  

Store the RSA-HSM key in Azure Blob storage with an Immutability policy applied to the container.

E.  

Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

A.  

Azure AD access token

B.  

Azure RBAC role

C.  

Azure AD ID token

D.  

Shared access signature (SAS) token

E.  

Azure AD refresh token

A.  

Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled

B.  

Store the RSA-HSM key in Azure Blob storage with an immutability policy applied to the container.

C.  

Store the RSA-HSM key in Azure Cosmos D

B.  

D.  

Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

E.  

Create a free tier Azure App Configuration instance with a new Azure AD service principal.

A.  

Create a new composite index for the store location data queries in Azure Cosmos D

B.  

B.  

Configure Azure Cosmos DB consistency to strong consistency Increase the RUs for the container supporting store location data.

C.  

Provision an Azure Cosmos OB dedicated gateway, update blob storage to use the new dedicated gateway endpoint.

D.  

Configure Azure Cosmos DB consistency to session consistency. Cache session tokens in a new Azure Redis cache instance after every write. Update reads to use the session token stored in Azure Redis.

E.  

Provision an Azure Cosmos DB dedicated gateway Update the Azure Function app connection string to use the new dedicated gateway endpoint.

A.  

Immutability

B.  

Snapshots

C.  

Versioning

D.  

Soft delete

E.  

Object replication

F.  

Change feed

A.  

Update the retail store location data upload process to include blob index tags. Create an Azure Function to process the blob index tags and filter by store location

B.  

Enable blob versioning for the storage account. Use an Azure Function to process a list of the blob versions per day.

C.  

Process an Azure Storage blob inventory report by using an Azure Function. Create rule filters on the blob inventory report,

D.  

Subscribe to blob storage events by using an Azure Function and Azure Event Grid. Filter the events by store location.

E.  

Process the change feed logs of the Azure Blob storage account by using an Azure Function. Specify a time range for the change feed data.