Question 1

You develop and deploy an Azure App Service web app named App1. You create a new Azure Key Vault named Vault 1. You import several API keys, passwords, certificates, and cryptographic keys into Vault1.

You need to grant App1 access to Vault1 and automatically rotate credentials Credentials must not be stored in code.

What should you do?

Options :

A : Enable App Service authentication for Appt. Assign a custom RBAC role to Vault1.

B : Add a TLS/SSL binding to App1.

C : Assign a managed identity to App1.

D : Upload a self-signed client certificate to Vault1. Update App1 to use the client certificate.

Answer: D

Question 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You develop Azure solutions.

You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.

You need to obtain an Azure Resource Manager access token.

Solution: Use an X.509 certificate to authenticate the VM with Azure Resource Manager.

Does the solution meet the goal?

Options :

A : Yes

B : No

Answer: B

Question 3

You are a developing a SaaS application that stores data as key value pairs. You must make multiple editions of the application available. In the lowest cost edition, the performance must be best-effort, and there is no regional failover. In higher cos! editions customers must be able to select guaranteed performance and support for multiple regions. Azure costs must be minimized. Which Azure Cosmos OB API should you use for the application?

Options :

A : Core

B :

MongoDB

C : Cassandra

D : Table API

Answer: C

Question 4

You are developing several microservices to deploy to a Azure Service cluster. The microservices manage data stored in Azure Cosmos DB and Azure Blob storage. The data is secured by using customer-managed keys stored in Aue Key Vault.

You must automate key rotation for all Key Vault keys and allow for manual key rotation. Keys must rotate every three months. Notifications Of expiring keys must be sent before key expiry.

You need to configure key rotation and enable key expiry notifications.

Which two actions should you perform? Each correct answer presents part Of solution.

NOTE: Each correct selection is worth

Options :

A : Create and configure a new Azure Event Grid instance.

B : Create configure a key rotation policy during key creation

C : Create and assign an Azure Key Vault access

D : Configure Azure Key Vault

Answer: A,C

Question 5

You manage a data processing application that receives requests from an Azure Storage queue.

You need to manage access to the queue. You have the following requirements:

Provide other applications access to the Azure queue.

Ensure that you can revoke access to the queue without having to regenerate the storage account keys.

Specify access at the queue level and not at the storage account level.

Which type of shared access signature (SAS) should you use?

Options :

A : Service SAS with a stored access policy

B : Account SAS

C : User Delegation SAS

D : Service SAS with ad hoc SAS

Answer: A

Confidently Practice Online with Free AZ-204 Exam Cram

Buying Options: