Microsoft AZ-204 Developing Solutions for Microsoft Azure Online Training
Microsoft AZ-204 Online Training
The questions for AZ-204 were last updated at Feb 21,2025.
- Exam Code: AZ-204
- Exam Name: Developing Solutions for Microsoft Azure
- Certification Provider: Microsoft
- Latest update: Feb 21,2025
you need to reduce read latency for the retail store solution.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
- A . Create a new composite index for the store location data queries in Azure Cosmos DB. Modify the queries to support parameterized SQL and update the Azure function app to call the new Queries.
- B . Configure Azure Cosmos DB consistency to strong consistency Increase the RUs for the container supporting store location data.
- C . Provision an Azure Cosmos OB dedicated gateway, update blob storage to use the new dedicated gateway endpoint.
- D . Configure Azure Cosmos DB consistency to session consistency. Cache session tokens in a new Azure Redis cache instance after every write. Update reads to use the session token stored in Azure Redis.
- E . Provision an Azure Cosmos DB dedicated gateway Update the Azure Function app connection string to use the new dedicated gateway endpoint.
HOTSPOT
You need to implement the corporate website.
How should you configure the solution?
You need to test the availability of the corporate website.
Which two test types can you use?
- A . Custom testing using the TrackAvailability API method
- B . Standard
- C . URL Ping
- D . Multi-step
You need to secure the Azure Functions to meet the security requirements.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A . Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled
- B . Store the RSA-HSM key in Azure Blob storage with an immutability policy applied to the container.
- C . Store the RSA-HSM key in Azure Cosmos DB. Apply the built-in policies for customer-managed Keys and allowed locations
- D . Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.
- E . Create a free tier Azure App Configuration instance with a new Azure AD service principal.
You need to grant access to the retail store location data for the inventory service development effort.
What should you use?
- A . Azure AD access token
- B . Azure RBAC role
- C . Azure AD ID token
- D . Shared access signature (SAS) token
- E . Azure AD refresh token
Topic 8, Munson’s Pickles and Preserves Farm
Overview
Munson’s Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds, fertilizers, chemicals, fuel, and farm machinery to the farms.
The company is migrating all applications from an on-premises datacenter to Microsoft Azure.
Applications support distributors, farmers, and internal company staff.
Corporate website
• The company hosts a public website located at http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.
Farms
• The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.
Distributors
• Distributors integrate their applications with data that is accessible by using APIs hosted at http://www.munsonspicklesandpreservesfarm com/api to receive and update resource data.
The application components must meet the following requirements:
Corporate website
• The site must be migrated to Azure App Service.
• Costs must be minimized when hosting in Azure.
• Applications must automatically scale independent of the compute resources.
• All code changes must be validated by internal staff before release to production.
• File transfer speeds must improve, and webpage-load performance must increase.
• All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
• A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.
Farms
• Farmers must authenticate to applications by using Microsoft Entra ID.
Distributors
• The company must track a custom telemetry value with each API call and monitor performance of all APIs.
• API telemetry values must be charted to evaluate variations and trends for resource data.
Internal staff
• App and API updates must be validated before release to production.
• Staff must be able to select a link to direct them back to the production app when validating an app or API update.
• Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.
Security
• All web communications must be secured by using TLS/HTTPS.
• Web content must be restricted by country/region to support corporate compliance standards
• The principle of least privilege must be applied when providing any user rights or process access rights
• Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.
Corporate website
• Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
• Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
• Internal staff report webpage load sizes are large and take a long time to load.
• Developers receive authentication errors to Service Bus when they debug locally.
Distributors
• Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.
HOTSPOT
You need to resolve the authentication errors for developers.
Which Service Bus security configuration should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You need to secure the corporate website to meet the security requirements.
What should you do?
- A . Create an App Service instance with a standard plan. Configure the custom domain with a TLS/SSL certificate.
- B . Create an Azure Application Gateway with a Web Application Firewall (WAF). Configure end-to-end TLS encryption and the WAF.
- C . Create an Azure Cache for Radis instance. Update the code to support the cache.
- D . Create an Azure Content Delivery Network profile and endpoint. Configure the endpoint.
HOTSPOT
You need to configure App Service to support the corporate website migration.
Which configuration should you use? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point.
You need to implement farmer authentication.
Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A . Add the shared access signature (SAS) token to the app
- B . Create a shared access signature (SAS) token.
- C . Register the app in Microsoft Entra ID.
- D . Create a user flow.
- E . Add the app to the user flow.
You need to configure all site configuration settings for the corporate website.
Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A . Create a managed identity.
- B . Update the role assignments for the Azure App Configuration store
- C . Create an Azure Key Vault.
- D . Create an Azure App Configuration store.
- E . Update the role assignments for the Azure Key Vault.
Latest AZ-204 Dumps Valid Version with 254 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund
