Home/Directory/az 204

az 204 Practice Questions

Page 1 of 1 (50 total questions)

You are building an Azure Function that processes orders from an Azure Service Bus queue. The function must ensure that each order is processed exactly once, even if the function crashes mid-processing. Which Service Bus feature guarantees this behavior?
View Question & Answer ➔
Your Azure Function app needs to store temporary state between multiple function executions as part of a long-running workflow. The workflow includes human approval steps that can pause for days. Which solution should you implement?
View Question & Answer ➔
You have an Azure Function triggered by a Timer. During load testing you notice that multiple instances of the function run simultaneously, causing duplicate processing. How do you prevent concurrent executions of a timer-triggered function?
View Question & Answer ➔
You are deploying a web application to Azure App Service. Your team uses slot deployments. After deploying a new version to the staging slot and running smoke tests, you swap staging to production. Users report the app is slow for the first few minutes after the swap. What feature eliminates this cold-start issue?
View Question & Answer ➔
Your Azure App Service web app stores connection strings for a database. You need to ensure the connection string value is different between your staging and production deployment slots. Which approach is correct?
View Question & Answer ➔
You are building an application that uploads large files (up to 5 TB) to Azure Blob Storage. You need to implement a reliable upload that can resume if interrupted. Which approach should you use?
View Question & Answer ➔
Your application needs to grant a third-party vendor temporary read access to a specific blob in a private Azure Storage container without exposing the storage account key. The access should expire in 2 hours. What should you use?
View Question & Answer ➔
You are designing a multi-tenant SaaS application using Azure Cosmos DB for NoSQL. Each tenant's data must be logically isolated and queries should never cross tenant boundaries. Query performance must be predictable. How should you partition the container?
View Question & Answer ➔
Your application reads Azure Cosmos DB data globally across three regions. The marketing team needs data to eventually be the same across all regions, and can tolerate reading slightly stale data (up to 5 minutes old) in exchange for lower latency reads. Which consistency level should you configure?
View Question & Answer ➔
You have published APIs through Azure API Management. A partner application is making too many requests and affecting other consumers. You need to limit the partner to 1,000 requests per hour without modifying backend code. What should you configure in APIM?
View Question & Answer ➔
Your company exposes internal microservices through Azure API Management. You need to cache the response of a frequently called GET endpoint for 60 seconds to reduce backend load. How do you implement this?
View Question & Answer ➔
You are implementing a publish-subscribe pattern where multiple services (email, SMS, audit) need to receive every order event independently. Each subscriber must process all messages at its own pace without affecting other subscribers. Which Azure Service Bus feature should you use?
View Question & Answer ➔
Your order processing Service Bus queue has messages failing repeatedly. After 3 delivery attempts, the messages should be moved to a separate location for investigation without being lost. Which feature handles this automatically?
View Question & Answer ➔
You need to trigger an Azure Function every time a new blob is uploaded to a specific Azure Storage container. The trigger must fire within seconds of the upload. Which approach offers the lowest latency and most native integration?
View Question & Answer ➔
Your Event Grid subscription is receiving events but your Azure Function endpoint is failing to process them. Event Grid keeps retrying. You need to preserve undelivered events for up to 24 hours so they can be reprocessed after the bug is fixed. What should you configure?
View Question & Answer ➔
Your Azure App Service application reads a database password from Azure Key Vault at startup. You want to avoid storing any credentials in code or configuration. The app must access Key Vault without a client secret. What is the recommended approach?
View Question & Answer ➔
You rotated a database password and updated the secret in Azure Key Vault. Your App Service uses a Key Vault Reference to load the secret. However, the app still uses the old password. What is the most likely cause and how do you fix it?
View Question & Answer ➔
Your ASP.NET Core application experiences database overload during peak traffic because the same product catalog queries run thousands of times per minute. You add Azure Cache for Redis to cache query results. Which caching pattern should you implement to ensure stale data is never served indefinitely?
View Question & Answer ➔
You are implementing distributed session management for a horizontally scaled ASP.NET Core app using Azure Cache for Redis. After deployment, some users are getting logged out unexpectedly between requests. What is the most likely cause?
View Question & Answer ➔
Your development team builds Docker images in a CI/CD pipeline and needs to store them securely in Azure. Only Azure Kubernetes Service (AKS) and Azure Container Instances (ACI) in the same subscription should be able to pull images without using admin credentials. What is the recommended setup?
View Question & Answer ➔
You are deploying a microservice to Azure Container Apps. The service handles variable traffic — near-zero traffic at night and thousands of requests during business hours. You want to minimize cost during low-traffic periods. Which scaling configuration should you set?
View Question & Answer ➔
You are building a web application that signs in users with their Microsoft work accounts and reads their calendar events from Microsoft Graph. During sign-in, you need to request permission to read calendars. Which OAuth 2.0 flow and permission type is correct for a server-side web app?
View Question & Answer ➔
Your Azure Function app is throwing exceptions in production. You need to capture the full exception details, correlated request traces, and custom business events (like 'OrderPlaced') in one place so you can diagnose issues efficiently. Which solution should you implement?
View Question & Answer ➔
You are analyzing Application Insights telemetry for your web API. You need to find all requests that took longer than 2 seconds in the last 24 hours and count them by operation name. Which tool in Application Insights should you use?
View Question & Answer ➔
You are developing an API that must be called by other backend services (daemon apps) with no user interaction. These services need to access your API using their own identity. Which Microsoft Identity Platform flow should the calling services use?
View Question & Answer ➔
You are building an event-driven microservice using Azure Functions. The function must process messages from an Azure Service Bus queue and write results to Azure Cosmos DB. To minimize cold-start latency and ensure the function scales with message volume, which hosting plan and trigger combination is most appropriate?
View Question & Answer ➔
Your team deploys a new version of a web application to Azure App Service using deployment slots. After deploying to the staging slot and running smoke tests, you perform a slot swap to production. Users report a brief period where some requests returned a 500 error during the swap. What caused this, and how should you fix it?
View Question & Answer ➔
A developer hardcoded database connection strings (including passwords) directly in their application's appsettings.json, which is committed to source control. You need to remediate this security issue. What is the recommended Azure approach to inject secrets into the application without code changes?
View Question & Answer ➔
You are designing a multi-tenant SaaS application where each tenant's data must be isolated and queries must be highly efficient for per-tenant reads. The application will have thousands of tenants. Which Cosmos DB partition key design is most appropriate?
View Question & Answer ➔
Your production Azure App Service application is experiencing intermittent slow response times that are hard to reproduce. You want to capture the exact call stack, dependencies (database queries, external API calls), and execution time automatically for every slow request without modifying source code. Which Application Insights feature should you enable?
View Question & Answer ➔
A payment processing microservice sends order events to an Azure Service Bus queue. Downstream consumers occasionally crash mid-processing, and in that case the message must be retried. However, if the same message fails more than 5 times, it must be moved to a separate queue for manual review without blocking healthy messages. Which Service Bus feature handles this automatically?
View Question & Answer ➔
You have published an API through Azure API Management (APIM). You want to ensure that API consumers cannot make more than 100 calls per minute per subscription key to prevent abuse and protect the backend service. Which APIM policy should you configure?
View Question & Answer ➔
You are deploying a containerized microservice to Azure Container Apps. The service handles image processing workloads that arrive in bursts. During quiet periods, you want zero containers running to save cost. During peak periods, you want up to 20 container replicas automatically. What is the correct scaling configuration?
View Question & Answer ➔
Your application uploads user profile images to Azure Blob Storage. The images are frequently accessed for the first 30 days, then rarely accessed, and after 90 days they should be deleted automatically. You want to minimize storage costs without writing custom cleanup code. Which feature achieves this?
View Question & Answer ➔
Your ASP.NET Core web API must allow users to authenticate via Microsoft Entra ID (Azure AD) and must only grant access if the caller has the 'Reports.Read' app role assigned. Which authentication flow and validation approach is most appropriate for API-to-API calls?
View Question & Answer ➔
You are building a system where multiple services need to react when a new image is uploaded to Azure Blob Storage. For example, a thumbnail service, a virus scanner, and an audit logger all need to be triggered by the same upload event. Which Azure messaging service is best suited for this fan-out event distribution pattern?
View Question & Answer ➔
Your ASP.NET Core API queries the same product catalog data from SQL Database on every request. Under load, the database becomes a bottleneck with high DTU consumption. You want to add a caching layer that stores catalog data for 10 minutes and automatically refreshes stale data. Which implementation pattern should you use with Azure Cache for Redis?
View Question & Answer ➔
Your team builds Docker images in a CI/CD pipeline and needs to store them privately before deployment to Azure Kubernetes Service. The security team requires that only authenticated service principals can pull images, and that old image tags are automatically purged after 30 days to reduce storage costs. Which Azure service and features satisfy both requirements?
View Question & Answer ➔
You are developing a background service that runs as a daemon (no user interaction) and needs to read all users' calendar events from Microsoft 365 to generate an occupancy report. Which authentication approach should this daemon application use to call Microsoft Graph?
View Question & Answer ➔
Your web application hosted on Azure App Service needs to connect to an Azure SQL Database without storing the database connection string (including password) in any configuration file or environment variable. The solution must work without any code changes to the connection string format. Which feature achieves this?
View Question & Answer ➔
Your cloud application uses Azure App Configuration to manage application settings and feature flags. The application needs to detect changes to configuration values and feature flags in near real-time without polling the configuration store continuously, which would consume too many requests. How should you implement this dynamic configuration refresh?
View Question & Answer ➔
You are developing a high-throughput shopping cart service using Azure Cosmos DB for NoSQL. The service needs to update a customer's shopping cart document by adding an item. To ensure high efficiency, minimize RU/s consumption, and prevent concurrent modification conflicts without loading the entire document first, which feature should you use?
View Question & Answer ➔
You need to grant temporary, time-limited access to specific files stored in a private Azure Blob Storage container to third-party clients. Security requirements dictate that you must be able to instantly revoke this access at any time before the expiration period if a client's subscription is canceled. What is the most secure and manageable way to implement this?
View Question & Answer ➔
You are hosting a REST API on Azure App Service. To comply with corporate security standards, the API must only accept requests from a single external partner company's static public IP address. The solution must run at the platform level to prevent invalid traffic from consuming compute resources in your App Service plan. How should you configure this?
View Question & Answer ➔
You are designing an Azure Function workflow that coordinates a complex, long-running order processing system. The workflow must execute three tasks in sequence (Validate Order, Charge Card, Ship Item). If the 'Charge Card' step fails, it must execute a compensating transaction to void the order. The orchestrator must be able to pause its execution without consuming billing resources while waiting for tasks to complete. Which feature should you use?
View Question & Answer ➔
Your backend services return responses in XML format, but your mobile application client requires JSON payloads. You need to perform this translation at the API gateway layer to avoid modifying the legacy backend service code. Which policy and policy section in Azure API Management (APIM) should you use?
View Question & Answer ➔
You are designing an IoT ingestion pipeline using Azure Event Hubs to process real-time telemetry from 50,000 devices. Downstream services need to process events in the order they were sent by each device. How should you ensure that all telemetry events from a specific device are sent to and processed in sequence from the same partition?
View Question & Answer ➔
Your web application uses Application Insights for monitoring. You want to enrich all collected telemetry (requests, exceptions, dependencies) with custom metadata, such as the current deployment slot name and the user's subscription tier, so that you can filter performance metrics in Log Analytics. Which Application Insights extensibility point should you implement?
View Question & Answer ➔
You are building a microservices architecture. You need a data sync solution where changes to documents in your primary Azure Cosmos DB database automatically trigger a downstream search index service to update its records in real-time. Which Cosmos DB feature allows you to listen for changes without polling the database?
View Question & Answer ➔
You are developing a secure multi-tier web application consisting of a front-end single-page application (SPA) and a backend web API. The SPA must acquire a secure token to call the backend web API on behalf of the signed-in user. Which OAuth 2.0 flow is recommended for the SPA to obtain this access token?
View Question & Answer ➔

Page 1 of 1

az 204 Practice Questions

You are building an Azure Function that processes orders from an Azure Service Bus queue. The function must ensure that each order is processed exactly once, even if the function crashes mid-processing. Which Service Bus feature guarantees this behavior?

Your Azure Function app needs to store temporary state between multiple function executions as part of a long-running workflow. The workflow includes human approval steps that can pause for days. Which solution should you implement?

You have an Azure Function triggered by a Timer. During load testing you notice that multiple instances of the function run simultaneously, causing duplicate processing. How do you prevent concurrent executions of a timer-triggered function?

Your Azure App Service web app stores connection strings for a database. You need to ensure the connection string value is different between your staging and production deployment slots. Which approach is correct?

You are building an application that uploads large files (up to 5 TB) to Azure Blob Storage. You need to implement a reliable upload that can resume if interrupted. Which approach should you use?

Your application needs to grant a third-party vendor temporary read access to a specific blob in a private Azure Storage container without exposing the storage account key. The access should expire in 2 hours. What should you use?

You are designing a multi-tenant SaaS application using Azure Cosmos DB for NoSQL. Each tenant's data must be logically isolated and queries should never cross tenant boundaries. Query performance must be predictable. How should you partition the container?

You have published APIs through Azure API Management. A partner application is making too many requests and affecting other consumers. You need to limit the partner to 1,000 requests per hour without modifying backend code. What should you configure in APIM?

Your company exposes internal microservices through Azure API Management. You need to cache the response of a frequently called GET endpoint for 60 seconds to reduce backend load. How do you implement this?

You are implementing a publish-subscribe pattern where multiple services (email, SMS, audit) need to receive every order event independently. Each subscriber must process all messages at its own pace without affecting other subscribers. Which Azure Service Bus feature should you use?

Your order processing Service Bus queue has messages failing repeatedly. After 3 delivery attempts, the messages should be moved to a separate location for investigation without being lost. Which feature handles this automatically?

You need to trigger an Azure Function every time a new blob is uploaded to a specific Azure Storage container. The trigger must fire within seconds of the upload. Which approach offers the lowest latency and most native integration?

Your Event Grid subscription is receiving events but your Azure Function endpoint is failing to process them. Event Grid keeps retrying. You need to preserve undelivered events for up to 24 hours so they can be reprocessed after the bug is fixed. What should you configure?

Your Azure App Service application reads a database password from Azure Key Vault at startup. You want to avoid storing any credentials in code or configuration. The app must access Key Vault without a client secret. What is the recommended approach?

You rotated a database password and updated the secret in Azure Key Vault. Your App Service uses a Key Vault Reference to load the secret. However, the app still uses the old password. What is the most likely cause and how do you fix it?

You are implementing distributed session management for a horizontally scaled ASP.NET Core app using Azure Cache for Redis. After deployment, some users are getting logged out unexpectedly between requests. What is the most likely cause?

Your development team builds Docker images in a CI/CD pipeline and needs to store them securely in Azure. Only Azure Kubernetes Service (AKS) and Azure Container Instances (ACI) in the same subscription should be able to pull images without using admin credentials. What is the recommended setup?

You are deploying a microservice to Azure Container Apps. The service handles variable traffic — near-zero traffic at night and thousands of requests during business hours. You want to minimize cost during low-traffic periods. Which scaling configuration should you set?

You are building a web application that signs in users with their Microsoft work accounts and reads their calendar events from Microsoft Graph. During sign-in, you need to request permission to read calendars. Which OAuth 2.0 flow and permission type is correct for a server-side web app?

Your Azure Function app is throwing exceptions in production. You need to capture the full exception details, correlated request traces, and custom business events (like 'OrderPlaced') in one place so you can diagnose issues efficiently. Which solution should you implement?

You are analyzing Application Insights telemetry for your web API. You need to find all requests that took longer than 2 seconds in the last 24 hours and count them by operation name. Which tool in Application Insights should you use?

You are developing an API that must be called by other backend services (daemon apps) with no user interaction. These services need to access your API using their own identity. Which Microsoft Identity Platform flow should the calling services use?

You are designing a multi-tenant SaaS application where each tenant's data must be isolated and queries must be highly efficient for per-tenant reads. The application will have thousands of tenants. Which Cosmos DB partition key design is most appropriate?

You have published an API through Azure API Management (APIM). You want to ensure that API consumers cannot make more than 100 calls per minute per subscription key to prevent abuse and protect the backend service. Which APIM policy should you configure?

Your ASP.NET Core web API must allow users to authenticate via Microsoft Entra ID (Azure AD) and must only grant access if the caller has the 'Reports.Read' app role assigned. Which authentication flow and validation approach is most appropriate for API-to-API calls?

You are developing a background service that runs as a daemon (no user interaction) and needs to read all users' calendar events from Microsoft 365 to generate an occupancy report. Which authentication approach should this daemon application use to call Microsoft Graph?