Question 1

You are developing several microservices to deploy to a Azure Service cluster. The microservices manage data stored in Azure Cosmos DB and Azure Blob storage. The data is secured by using customer-managed keys stored in Aue Key Vault.

You must automate key rotation for all Key Vault keys and allow for manual key rotation. Keys must rotate every three months. Notifications Of expiring keys must be sent before key expiry.

You need to configure key rotation and enable key expiry notifications.

Which two actions should you perform? Each correct answer presents part Of solution.

NOTE: Each correct selection is worth

Options :

A : Create and configure a new Azure Event Grid instance.

B : Create configure a key rotation policy during key creation

C : Create and assign an Azure Key Vault access

D : Configure Azure Key Vault

Answer: A,C

Question 2

You ate developing an application that allows users to find musicians that ate looking for work. The application must store information about musicians, the instruments that they play, and other related data.

The application must also allow users to determine which musicians have played together, including groups of three or more musicians that have performed together at a specific location.

Which Azure Cosmos D6 API should you use for the application?

Options :

A : Core

B : MongoDB

C : Cassandra

D : Gremlin

Answer: B

Question 3

You are developing a Java application to be deployed in Azure. The application stores sensitive data in Azure Cosmos DB. You need to configure Always Encrypted to encrypt the sensitive data inside the application. What should you do first?

Options :

A : Create a customer-managed key (CMK) and store the key in a new Azure Key Vault instance.

B : Create an Azure AD managed identity and assign the identity to a new Azure Key Vault instance.

C :

Create a data encryption key (DEK) by using the Azure Cosmos DB SDK and store the key in Azure Cosmos DB.

D : Create a new container to include an encryption policy with the JSON properties to be encrypted.

Answer: A

Question 4

A development team is creating a new REST API. The API will store data in Azure Blob storage. You plan to deploy the API to Azure App Service.

Developers must access the Azure Blob storage account to develop the API for the next two months. The Azure Blob storage account must not be accessible by the developers after the two-month time period.

You need to grant developers access to the Azure Blob storage account.

What should you do?

Options :

A : Generate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers.

B : Create and apply a new lifecycle management policy to include a last accessed date value. Apply the policy to the Azure Blob storage account.

C : Provide all developers with the access key for the Azure Blob storage account. Update the API to include the Coordinated Universal Time (UTC) timestamp for the request header.

D : Grant all developers access to the Azure Blob storage account by assigning role-based access control (RBAC) roles.

Answer: A

Question 5

Your company is designing an application named App1 that will use data from Azure SQL Database. App1 will be accessed over the internet by many users.

You need to recommend a solution for improving the performance ofApp1.

What should you include in the recommendation?

Options :

A : Azure HPC cache

B : ExpressRoute

C : a CON profile

D : Azure Cache for Redis

Answer: D

Confidently Practice Online with Free AZ-204 Exam Cram

Buying Options: