This page was exported from Braindump2go Free Exam Dumps with PDF and VCE Collection [ https://www.mcitpdump.com ] Export date:Tue May 21 6:19:50 2024 / +0000 GMT ___________________________________________________ Title: [January-2021]Real Exam Questions-Braindump2go AZ-204 PDF and VCE Dumps AZ-204 291 Download[Q121-Q136] --------------------------------------------------- 2021/January Latest Braindump2go AZ-204 Exam Dumps with PDF and VCE Free Updated Today! Following are some new AZ-204 Real Exam Questions!QUESTION 121Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a solution that will be deployed to an Azure Kubernetes Service (AKS) cluster. The solution will include a custom VNet, Azure Container Registry images, and an Azure Storage account.The solution must allow dynamic creation and management of all Azure resources within the AKS cluster.You need to configure an AKS cluster for use with the Azure APIs.Solution: Enable the Azure Policy Add-on for Kubernetes to connect the Azure Policy service to the GateKeeper admission controller for the AKS cluster. Apply a built-in policy to the cluster.Does the solution meet the goal?A. YesB. NoAnswer: BExplanation:Instead create an AKS cluster that supports network policy. Create and apply a network to allow traffic only from within a defined namespaceReferences:https://docs.microsoft.com/en-us/azure/aks/use-network-policiesQUESTION 122Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a solution that will be deployed to an Azure Kubernetes Service (AKS) cluster. The solution will include a custom VNet, Azure Container Registry images, and an Azure Storage account.The solution must allow dynamic creation and management of all Azure resources within the AKS cluster.You need to configure an AKS cluster for use with the Azure APIs.Solution: Create an AKS cluster that supports network policy. Create and apply a network to allow traffic only from within a defined namespace.Does the solution meet the goal?A. YesB. NoAnswer: AExplanation:When you run modern, microservices-based applications in Kubernetes, you often want to control which components can communicate with each other. The principle of least privilege should be applied to how traffic can flow between pods in an Azure Kubernetes Service (AKS) cluster. Let's say you likely want to block traffic directly to back-end applications. The Network Policy feature in Kubernetes lets you define rules for ingress and egress traffic between pods in a cluster.References:https://docs.microsoft.com/en-us/azure/aks/use-network-policiesQUESTION 123Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.You are developing and deploying several ASP.Net web applications to Azure App Service. You plan to save session state information and HTML output. You must use a storage mechanism with the following requirements:- Share session state across all ASP.NET web applications- Support controlled, concurrent access to the same session state data for multiple readers and a single writer- Save full HTTP responses for concurrent requestsYou need to store the information.Proposed Solution: Deploy and configure an Azure Database for PostgreSQL. Update the web applications.Does the solution meet the goal?A. YesB. NoAnswer: BExplanation:The worst solution from a performance and scalability standpoint is to use a database backed session state provider. Instead use Azure Cache for Redis.QUESTION 124Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.You are developing and deploying several ASP.Net web applications to Azure App Service. You plan to save session state information and HTML output. You must use a storage mechanism with the following requirements:- Share session state across all ASP.NET web applications- Support controlled, concurrent access to the same session state data for multiple readers and a single writer- Save full HTTP responses for concurrent requestsYou need to store the information.Proposed Solution: Deploy and configure Azure Cache for Redis. Update the web applications.Does the solution meet the goal?A. YesB. NoAnswer: AExplanation:Azure Cache for Redis provides a session state provider that you can use to store your session state inmemory with Azure Cache for Redis instead of a SQL Server database. To use the caching session state provider, first configure your cache, and then configure your ASP.NET application for cache using the Azure Cache for Redis Session State NuGet package.Reference: https://docs.microsoft.com/en-us/azure/azure-cache-for-redis/cache-aspnet-session-stateproviderQUESTION 125Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data.You must store the device in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future.You need to implement a solution to receive the device data.Solution: Provision an Azure Event Hub. Configure the machine identifier as the partition key and enable capture.Does the solution meet the goal?A. YesB. NoAnswer: AExplanation:https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-programming-guideQUESTION 126Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data.You must store the device in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future. You need to implement a solution to receive the device data.Solution: Provision an Azure Event Grid. Configure event filtering to evaluate the device identifier.Does the solution meet the goal?A. YesB. NoAnswer: BExplanation:https://docs.microsoft.com/en-us/azure/event-grid/event-filteringQUESTION 127Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data.You must store the device in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future.You need to implement a solution to receive the device data.Solution: Provision an Azure Notification Hub. Register all devices with the hub.Does the solution meet the goal?A. YesB. NoAnswer: BExplanation:Instead provision an Azure Event Hub. Configure the machine identifier as the partition key and enable capture.References:https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-programming-guideQUESTION 128You develop and deploy a Java RESTful API to Azure App Service.You open a browser and navigate to the URL for the API. You receive the following error message:You need to resolve the error.What should you do?A. Bind an SSL certificateB. Enable authenticationC. Enable CORSD. Map a custom domainE. Add a CDNAnswer: CExplanation:We need to enable Cross-Origin Resource Sharing (CORS).References:https://medium.com/@xinganwang/a-practical-guide-to-cors-51e8fd329a1fQUESTION 129Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.You are developing and deploying several ASP.Net web applications to Azure App Service. You plan to save session state information and HTML output. You must use a storage mechanism with the following requirements:- Share session state across all ASP.NET web applications- Support controlled, concurrent access to the same session state data for multiple readers and a single writer- Save full HTTP responses for concurrent requestsYou need to store the information.Proposed Solution: Add the web applications to Docker containers. Deploy the containers. Deploy the containers to Azure Kubernetes Service (AKS).Does the solution meet the goal?A. YesB. NoAnswer: BExplanation:Instead use Azure Cache for Redis.Note: Azure Cache for Redis provides a session state provider that you can use to store your session state in-memory with Azure Cache for Redis instead of a SQL Server database. To use the caching session state provider, first configure your cache, and then configure your ASP.NET application for cache using the Azure Cache for Redis Session State NuGet package.References:https://docs.microsoft.com/en-us/azure/azure-cache-for-redis/cache-aspnet-session-state-providerQUESTION 130You are developing an Azure Cosmos DB solution by using the Azure Cosmos DB SQL API. The data includes millions of documents. Each document may contain hundreds of properties.The properties of the documents do not contain distinct values for partitioning. Azure Cosmos DB must scale individual containers in the database to meet the performance needs of the application by spreading the workload evenly across all partitions over time.You need to select a partition key.Which two partition keys can you use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.A. a concatenation of multiple property values with a random suffix appendedB. a single property value that does not appear frequently in the documentsC. a hash suffix appended to a property valueD. a value containing the collection nameE. a single property value that appears frequently in the documentsAnswer: ACExplanation:You can form a partition key by concatenating multiple property values into a single artificial partitionKey property. These keys are referred to as synthetic keys.Another possible strategy to distribute the workload more evenly is to append a random number at the end of the partition key value. When you distribute items in this way, you can perform parallel write operations across partitions.Note: It's the best practice to have a partition key with many distinct values, such as hundreds or thousands. The goal is to distribute your data and workload evenly across the items associated with these partition key values. If such a property doesn't exist in your data, you can construct a synthetic partition key.References:https://docs.microsoft.com/en-us/azure/cosmos-db/synthetic-partition-keysQUESTION 131Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level. You need to configure authorization.Solution:Create a new Azure AD application's manifest, set value of the groupMembershipClaims option to All.In the website, use the value of the groups claim from the JWI for the user to determine permissions.Does the solution meet the goal?A. YesB. NoAnswer: AExplanation:To configure Manifest to include Group Claims in Auth Token1. Go to Azure Active Directory to configure the Manifest. Click on Azure Active Directory, and go to App registrations to find your application:2. Click on your application (or search for it if you have a lot of apps) and edit the Manifest by clicking on it.3. Locate the "groupMembershipClaims" setting. Set its value to either "SecurityGroup" or "All". To help you decide which:"SecurityGroup" groups claim will contain the identifiers of all security groups of which the user is a member."All" groups claim will contain the identifiers of all security groups and all distribution lists of which the user is a memberNow your application will include group claims in your manifest and you can use this fact in your code.References:https://blogs.msdn.microsoft.com/waws/2017/03/13/azure-app-service-authentication-aad-groups/QUESTION 132Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level. You need to configure authorization.Solution: Configure the Azure Web App for the website to allow only authenticated requests and require Azure AD log on.Does the solution meet the goal?A. YesB. NoAnswer: BExplanation:Instead in the Azure AD application's manifest, set value of the groupMembershipClaims option to All.References:https://blogs.msdn.microsoft.com/waws/2017/03/13/azure-app-service-authentication-aad-groups/QUESTION 133Drag and Drop QuestionYou are preparing to deploy an Azure virtual machine (VM)-based application. The VMs that run the application have the following requirements:- When a VM is provisioned the firewall must be automatically configured before it can access Azure resources- Supporting services must be installed by using an Azure PowerShell script that is stored in Azure StorageYou need to ensure that the requirements are met.Which features should you use? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Answer: Explanation:https://docs.microsoft.com/en-us/azure/automation/automation-hybrid-runbook-workerhttps://docs.microsoft.com/en-us/azure/virtual-machines/windows/run-commandQUESTION 134Drag and Drop QuestionYou are developing a microservices solution. You plan to deploy the solution to a multinode Azure Kubernetes Service (AKS) cluster.You need to deploy a solution that includes the following features:- reverse proxy capabilities- configurable traffic routing- TLS termination with a custom certificateWhich components should you use? To answer, drag the appropriate components to the correct requirements. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Answer: Explanation:Box 1: HelmTo create the ingress controller, use Helm to install nginx-ingress.Box 2: kubectlTo find the cluster IP address of a Kubernetes pod, use the kubectl get pod command on your local machine, with the option -o wide .Box 3: Ingress ControllerAn ingress controller is a piece of software that provides reverse proxy, configurable traffic routing, and TLS termination for Kubernetes services. Kubernetes ingress resources are used to configure the ingress rules and routes for individual Kubernetes services.Incorrect Answers:Virtual Kubelet: Virtual Kubelet is an open-source Kubernetes kubelet implementation that masquerades as a kubelet. This allows Kubernetes nodes to be backed by Virtual Kubelet providers such as serverless cloud container platforms.CoreDNS: CoreDNS is a flexible, extensible DNS server that can serve as the Kubernetes cluster DNS. Like Kubernetes, the CoreDNS project is hosted by the CNCF.Reference:https://docs.microsoft.com/bs-cyrl-ba/azure/aks/ingress-basichttps://www.digitalocean.com/community/tutorials/how-to-inspect-kubernetes-networkingQUESTION 135Hotspot QuestionYou are configuring a development environment for your team. You deploy the latest Visual Studio image from the Azure Marketplace to your Azure subscription.The development environment requires several software development kits (SDKs) and third-party components to support application development across the organization. You install and customize the deployed virtual machine (VM) for your development team. The customized VM must be saved to allow provisioning of a new team member development environment.You need to save the customized VM for future provisioning. Which tools or services should you use? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Answer: Explanation:Box 1: Azure PowershellCreating an image directly from the VM ensures that the image includes all of the disks associated with the VM, including the OS disk and any data disks.Before you begin, make sure that you have the latest version of the Azure PowerShell module.You use Sysprep to generalize the virtual machine, then use Azure PowerShell to create the image.Box 2: Azure Blob StorageReferences:https://docs.microsoft.com/en-us/azure/virtual-machines/windows/capture-image-resource#create-animage-of-a-vm-using-powershellQUESTION 136Drag and Drop QuestionYou are preparing to deploy an application to an Azure Kubernetes Service (AKS) cluster. The application must only be available from within the VNet that includes the cluster.You need to deploy the application.How should you complete the deployment YAML? To answer, drag the appropriate YAML segments to the correct locations. Each YAML segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Answer: Explanation:To create an internal load balancer, create a service manifest named internal-lb.yaml with the service type LoadBalancer and the azure-load-balancer-internal annotation as shown in the following example:YAML:apiVersion: v1kind: Servicemetadata:name: internal-appannotations:service.beta.kubernetes.io/azure-load-balancer-internal: "true" spec:type: LoadBalancerports:port: 80selector:app: internal-appReferences:https://docs.microsoft.com/en-us/azure/aks/internal-lbResources From:1.2020 Latest Braindump2go AZ-204 Exam Dumps (PDF & VCE) Free Share:https://www.braindump2go.com/az-204.html2.2020 Latest Braindump2go AZ-204 PDF and AZ-204 VCE Dumps Free Share:https://drive.google.com/drive/folders/1qSt-4_6x_lmYQoqET8lOEQmDK4tWxrUP?usp=sharing3.2020 Free Braindump2go AZ-204 PDF Download:https://www.braindump2go.com/free-online-pdf/AZ-204-Dumps(158-168).pdfhttps://www.braindump2go.com/free-online-pdf/AZ-204-PDF(147-157).pdfhttps://www.braindump2go.com/free-online-pdf/AZ-204-PDF-Dumps(82-93).pdfhttps://www.braindump2go.com/free-online-pdf/AZ-204-VCE(136-146).pdfhttps://www.braindump2go.com/free-online-pdf/AZ-204-VCE-Dumps(169-184).pdfFree Resources from Braindump2go,We Devoted to Helping You 100% Pass All Exams! --------------------------------------------------- Images: http://examgod.com/bdimages/January-2021Q121-Q136_9E60/image_thumb_thumb_thumb_thumb.png http://examgod.com/bdimages/January-2021Q121-Q136_9E60/image_thumb1_thumb_thumb_thumb.png http://examgod.com/bdimages/January-2021Q121-Q136_9E60/image_thumb2_thumb_thumb_thumb.png http://examgod.com/bdimages/January-2021Q121-Q136_9E60/image_thumb3_thumb_thumb_thumb.png https://www.mcitpdump.com/file:///C:/Users/KongWei/AppData/Local/Temp/OpenLiveWriter1112546002/supfiles2886DB/image_thumb4_thumb_thumb.png https://www.mcitpdump.com/file:///C:/Users/KongWei/AppData/Local/Temp/OpenLiveWriter1112546002/supfiles2886DB/image_thumb5_thumb_thumb.png https://www.mcitpdump.com/file:///C:/Users/KongWei/AppData/Local/Temp/OpenLiveWriter1112546002/supfiles2886DB/image_thumb6_thumb_thumb.png https://www.mcitpdump.com/file:///C:/Users/KongWei/AppData/Local/Temp/OpenLiveWriter1112546002/supfiles2886DB/image_thumb7_thumb_thumb.png --------------------------------------------------- --------------------------------------------------- Post date: 2021-01-16 03:19:30 Post date GMT: 2021-01-16 03:19:30 Post modified date: 2021-01-16 03:19:30 Post modified date GMT: 2021-01-16 03:19:30 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com