Question 1

You have an application that includes an Azure Web app and several Azure Function apps. Application secrets including connection strings and certificates are stored in Azure Key Vault.

Secrets must not be stored in the application or application runtime environment. Changes to Azure Active Directory (Azure AD) must be minimized.

You need to design the approach to loading application secrets.

What should you do?

Options :

A : Create a single user-assigned Managed Identity with permission to access Key Vault and configure each App Service to use that Managed Identity.

B : Create a single Azure AD Service Principal with permission to access Key Vault and use a client secret from within the App Services to access Key Vault.

C : Create a system assigned Managed Identity in each App Service with permission to access Key Vault.

D : Create an Azure AD Service Principal with Permissions to access Key Vault for each App Service and use a certificate from within the App Services to access Key Vault.

Answer: A

Question 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series

contains a unique solution that might meet the stated goals. Some question sets might have more than one

correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions

will not appear on the review screen.

You are implementing an application by using Azure Event Grid to push near-real-time information to

customers.

You have the following requirements:

• You must send events to thousands of customers that include hundreds of various event types.

• The events must be filtered by event type before processing.

• Authentication and authorization must be handled by using Microsoft Entra ID.

• The events must be published to a single endpoint.

You need to implement Azure Event Grid.

Solution: Publish events to a partner topic. Create an event subscription for each customer.

Does the solution meet the goal?

Options :

A : Yes

B : No

Answer: B

Question 3

You ate developing an application that allows users to find musicians that ate looking for work. The application must store information about musicians, the instruments that they play, and other related data.

The application must also allow users to determine which musicians have played together, including groups of three or more musicians that have performed together at a specific location.

Which Azure Cosmos D6 API should you use for the application?

Options :

A : Core

B : MongoDB

C : Cassandra

D : Gremlin

Answer: B

Question 4

You manage an Azure Key Vault named kv1 of Standard SKU.

You plan to programmatically store in kv1 an asymmetric key pair and use the key pair for encryption

and decryption.

You must develop an application named app1 that will access the key pair in kv1.

You need to configure an object to retrieve a key pair from kv1.

Which object should you use?

Options :

A : SecretClient

B : KeyVaultSettingsClient

C : CertificateClient

D : KeyClient

Answer: D

Question 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You develop an HTTP triggered Azure Function app to process Azure Storage blob dat

a. The app is triggered using an output binding on the blob.

The app continues to time out after four minutes. The app must process the blob data.

You need to ensure the app does not time out and processes the blob data.

Solution: Pass the HTTP trigger payload into an Azure Service Bus queue to be processed by a queue trigger function and return an immediate HTTP success response.

Does the solution meet the goal?

Options :

A : Yes

B : No

Answer: A

Higher Test Marks with Free Online AZ-204 Exam Practice

Buying Options: