Developing Solutions for Microsoft Azure

• #201

  You develop a gateway solution for a public facing news API. The news API back end is implemented as a RESTful service and hosted in an Azure App Service instance. You need to configure back-end authentication for the API Management service instance. Which target and gateway credential type should you use?

  • ATarget: Azure Resource. Gateway credentials: Client cert.
  • BTarget: Client cert. Gateway credentials: Basic.
  • CTarget: Azure Resource. Gateway credentials: Basic.
  • DTarget: HTTP(s) endpoint. Gateway credentials: Client cert.
  解答を表示
• #202

  You are developing an Azure Web App. You configure TLS mutual authentication for the web app. You need to validate the client certificate in the web app.

  • AClient certificate location: Client cookie. Encoding type: URL.
  • BClient certificate location: HTTP message body. Encoding type: Base64.
  • CClient certificate location: HTTP request header. Encoding type: Unicode.
  • DClient certificate location: HTTP request header. Encoding type: Base64.
  解答を表示
• #203

  You create the following PowerShell script. Question 3: The log alert is scheduled to run every two hours.

  • AYes.
  • BNo.
  解答を表示
• #204

  You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment. You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user. Solution: You include the use of an Azure Content Delivery Network (CDN) in your design. Does the solution meet the goal?

  • AYes.
  • BNo.
  解答を表示
• #205

  You are developing a web service that will run on Azure virtual machines that use Azure Storage. You configure all virtual machines to use managed identities. You have the following requirements: Secret-based authentication mechanisms are not permitted for accessing an Azure Storage account. Must use only Azure Instance Metadata Service endpoints. You need to write code to retrieve an access token to access Azure Storage.

  • ACode segment 1: http://localhost::50342/oauth2/token. Code segment 2: new MultipartContent(payload);.
  • BCode segment 1: http://localhost/metadata/identity/oauth2/token. Code segment 2: JsonConvert.DeserializeObject>(payload);.
  • CCode segment 1: http://169.254.169.254:50432/metadata/identity/oauth2/token. Code segment 2: new NetworkCredential('Azure', payload);.
  • DCode segment 1: http://169.254.169.254:50432/metadata/identity/oauth2/token. Code segment 2: JsonConvert.DeserializeObject>(payload);.
  解答を表示
• #2062 つ選択

  You are developing a web app that is protected by Azure Web Application Firewall (WAF). All traffic to the web app is routed through an Azure Application Gateway instance that is used by multiple web apps. The web app address is contoso.azurewebsites.net. All traffic must be secured with SSL. The Azure Application Gateway instance is used by multiple web apps. You need to configure the Azure Application Gateway for the web app. Which two actions should you perform?

  • AIn the Azure Application Gateway's HTTP setting, enable the Use for App service setting.
  • BConvert the web app to run in an Azure App service environment (ASE).
  • CAdd an authentication certificate for contoso.azurewebsites.net to the Azure Application Gateway.
  • DIn the Azure Application Gateway's HTTP setting, set the value of the Override backend path option to contoso22.azurewebsites.net.
  解答を表示
• #207

  You develop an application. You plan to host the application on a set of virtual machines (VMs) in Azure. You need to configure Azure Monitor to collect logs from the application. Which four actions should you perform in sequence?

  • ABox 1: Create a Log Analytics workspace. Box 2: Add a VMInsights solution. Box 3: Install agents on the VM and VM scale set to be monitored. Box 4: Create an Application Insights resource.
  • BBox 1: Add a VMInsights solution. Box 2: Create a Log Analytics workspace. Box 3: AInstall agents on the VM and VM scale set to be monitored. Box 4: Create an Application Insights resource.
  • CBox 1: Create an Application Insights resource. Box 2: Add a VMInsights solution. Box 3: AInstall agents on the VM and VM scale set to be monitored. Box 4: Create a Log Analytics workspace.
  • DBox 1: Create a Log Analytics workspace. Box 2: Add a VMInsights solution. Box 3: Create an Application Insights resource. Box 4: Install agents on the VM and VM scale set to be monitored.
  解答を表示
• #208

  You are developing a mobile app that uses an Azure SQL Database named Weyland. The database contains a table named Customers that has a field named email_address. You want to implement dynamic data masking to hide the data in the email_address field. Solution: You run the Set-AzSqlDatabaseDataMaskingRule -DatabaseName 'Weyland' -SchemaName 'dbo' -TableName 'Customers' -ColumnName 'email_address' -MaskingFunction 'email' Powershell cmdlet Does the solution meet the goal?

  • AYes.
  • BNo.
  解答を表示
• #209

  You are a developer for Contoso, Ltd. The company has a social networking website that is developed as a Single Page Application (SPA). The main web application for the social networking website loads user uploaded content from blob storage. You are developing a solution to monitor uploaded data for inappropriate content. The following process occurs when users upload content by using the SPA: Messages are sent to ContentUploadService. Content is processed by ContentAnalysisService. After processing is complete, the content is posted to the social network or a rejection message is posted in its place. The ContentAnalysisService is deployed with Azure Container Instances from a private Azure Container Registry named contosoimages. The solution will use eight CPU cores. Microsoft Entra ID: Contoso, Ltd. uses Microsoft Entra ID for both internal and guest accounts. Requirements: ContentAnalysisService - The company's data science group built ContentAnalysisService which accepts user generated content as a string and returns a probable value for inappropriate content. Any values over a specific threshold must be reviewed by an employee of Contoso, Ltd. You must create an Azure Function named CheckUserContent to perform the content checks. Costs: You must minimize costs for all Azure services. Manual review: To review content, the user must authenticate to the website portion of the ContentAnalysisService using their Microsoft Entra ID credentials. The website is built using React and all pages and API endpoints require authentication. In order to review content a user must be part of a ContentReviewer role. All completed reviews must include the reviewer's email address for auditing purposes. High availability: All services must run in multiple regions. The failure of any service in a region must not impact overall application availability. Monitoring: An alert must be raised if the ContentUploadService uses more than 80 percent of available CPU cores. Security: You have the following security requirements: Any web service accessible over the Internet must be protected from cross site scripting attacks. All websites and services must use SSL from a valid root certificate authority. Azure Storage access keys must only be stored in memory and must be available only to the service. All Internal services must only be accessible from internal Virtual Networks (VNets). All parts of the system must support inbound and outbound traffic restrictions. All service calls must be authenticated by using Microsoft Entra ID. User agreements: When a user submits content, they must agree to a user agreement. The agreement allows employees of Contoso, Ltd. to review content, store cookies on user devices, and track user's IP addresses. Information regarding agreements is used by multiple divisions within Contoso, Ltd. User responses must not be lost and must be available to all parties regardless of individual service uptime. The volume of agreements is expected to be in the millions per hour. Validation testing: When a new version of the ContentAnalysisService is available the previous seven days of content must be processed with the new version to verify that the new version does not significantly deviate from the old version. Issues: Users of the ContentUploadService report that they occasionally see HTTP 502 responses on specific pages. Code - ContentUploadService - ApplicationManifest. You need to add code at line AM09 to ensure that users can review content using ContentAnalysisService. How should you complete the code?

  • ABox 1: "oauth2Permissions": ["login"]. Box 2: "oauth2AllowImplicitFlow": true.
  • BBox 1: "oauth2AllowIdTokenImplicitFlow": true. Box 2: "oauth2AllowImplicitFlow": true.
  • CBox 1: "allowPublicClient": true. Box 2: "knownClientApplications": ["ContentAnalysisService"].
  • DBox 1: "oauth2Permissions": ["login"]. Box 2: "preAuthorizedApplications": ["SPA"].
  解答を表示
• #210

  You develop and add several functions to an Azure Function app that uses the latest runtime host. The functions contain several REST API endpoints secured by using SSL. The Azure Function app runs in a Consumption plan. You must send an alert when any of the function endpoints are unavailable or responding too slowly. You need to monitor the availability and responsiveness of the functions. What should you do?

  • ACreate a URL ping test.
  • BCreate a timer triggered function that calls TrackAvailability() and send the results to Application Insights.
  • CCreate a timer triggered function that calls GetMetric('Request Size') and send the results to Application Insights.
  • DAdd a new diagnostic setting to the Azure Function app. Enable the FunctionAppLogs and Send to Log Analytics options.
  解答を表示
• #211

  You are developing a Docker/Go using Azure App Service Web App for Containers. You plan to run the container in an App Service on Linux. You identify a Docker container image to use. None of your current resource groups reside in a location that supports Linux. You must minimize the number of resource groups required. You need to create the application and perform an initial deployment. Which three Azure CLI commands should you use to develop the solution?

  • ABox 1: az webapp create. Box 2: az appservice plan create. Box 3: az group create.
  • BBox 1: az appservice plan create. Box 2: az group create. Box 3: az group update.
  • CBox 1: az group create. Box 2: az appservice plan create. Box 3: az webapp create.
  • DBox 1: az appservice plan create. Box 2: az webapp create. Box 3: az webapp update.
  解答を表示
• #212

  You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five devices that send data. You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier. Additional stores are expected to open in the future. You need to implement a solution to receive the device data. Solution: Provision an Azure Service Bus. Configure a topic to receive the device data by using a correlation filter. Does the solution meet the goal?

  • AYes.
  • BNo.
  解答を表示
• #213

  You develop Azure solutions. You must connect to a No-SQL globally-distributed database by using the .NET API. You need to create an object to configure and execute requests in the database. Which code segment should you use?

  • Anew Container(EndpointUri, PrimaryKey);.
  • Bnew Database(EndpointUri, PrimaryKey);.
  • Cnew CosmosClient(EndpointUri, PrimaryKey);.
  解答を表示
• #214

  You are building a website to access project data related to teams within your organization. The website does not allow anonymous access. Authentication is performed using an Microsoft Entra ID app named internal. The website has the following authentication requirements: Microsoft Entra ID users must be able to login to the website. Personalization of the website must be based on membership in Microsoft Entra ID groups. You need to configure the application's manifest to meet the authentication requirements. How should you configure the manifest?

  • ABox 1: "optionalClaims". Box 2: "allowPublicClient".
  • BBox 1: "optionalClaims". Box 2: "requiredResourceAccess".
  • CBox 1: "groupMembershipClaims". Box 2: "oauth2Permissions".
  • DBox 1: "groupMembershipClaims". Box 2: "oauth2AllowimplicitFlow".
  解答を表示
• #215

  You are developing a serverless Java application on Azure. You create a new Azure Key Vault to work with secrets from a new Azure Functions application. The application must meet the following requirements: Reference the Azure Key Vault without requiring any changes to the Java code. Dynamically add and remove instances of the Azure Functions host based on the number of incoming application events. Ensure that instances are perpetually warm to avoid any cold starts. Connect to a VNet. Authentication to the Azure Key Vault instance must be removed if the Azure Function application is deleted. You need to grant the Azure Functions application access to the Azure Key Vault. Which three actions should you perform in sequence?

  • ABox 1: Create the Azure Functions app with a Consumption plan type. Box 2: Create an access policy in Azure Key Vault for the application identity. Box 3: Create a user-assigned managed identity for the application.
  • BBox 1: Create the Azure Functions app with a Premium plan type. Box 2: Create a system-assigned managed identity for the application. Box 3: Create an access policy in Azure Key Vault for the application identity.
  • CBox 1: Create the Azure Functions app with a Consumption plan type. Box 2: Create a user-assigned managed identity for the application. Box 3: Create an access policy in Azure Key Vault for the application identity.
  • DBox 1: Create the Azure Functions app with a Premium plan type. Box 2: Create a user-assigned managed identity for the application. Box 3: Create an access policy in Azure Key Vault for the application identity.
  解答を表示
• #216

  You develop and deploy an Azure App Service API app to a Windows-hosted deployment slot named Development. You create additional deployment slots named Testing and Production. You enable auto swap on the Production deployment slot. You need to ensure that scripts run and resources are available before a swap operation occurs. Solution: Enable auto swap for the Testing slot. Deploy the app to the Testing slot. Does the solution meet the goal?

  • AYes.
  • BNo.
  解答を表示
• #217

  A company is implementing a publish-subscribe (Pub/Sub) messaging component by using Azure Service Bus. You are developing the first subscription application. In the Azure portal you see that messages are being sent to the subscription for each topic. You create and initialize a subscription client object by supplying the correct details, but the subscription application is still not consuming the messages. You need to ensure that the subscription client processes all messages. Which code segment should you use?

  • Aawait subscriptionClient.AddRuleAsync(new RuleDescription(RuleDescription.DefaultRuleName, new TrueFilter()));.
  • BsubscriptionClient = new SubscriptionClient(ServiceBusConnectionString, TopicName, SubscriptionName);.
  • Cawait subscriptionClient.CloseAsync();.
  • DsubscriptionClient.RegisterMessageHandler(ProcessMessagesAsync, messageHandlerOptions);.
  解答を表示
• #218

  You have an Azure Web app that uses Cosmos DB as a data store. You create a CosmosDB container by running the following PowerShell script: $resourceGroupName = 'testResourceGroup' $accountName = 'testCosmosAccount' $databaseName = 'testDatabase' $containerName = 'testContainer' $partitionKeyPath = '/EmployeeId' $autoscaleMaxThroughput = 5000 New-AzCosmosDBSqlContainer - -ResourceGroupName $resourceGroupName -AccountName $accountName -DatabaseName $databaseName -Name $containerName -PartitionKeyKind Hash -PartitionKeyPath $partitionKeyPath -AutoscaleMaxThroughput $autoscaleMaxThroughput. You create the following queries that target the container: SELECT FROM c WHERE c.EmployeeId > '12345' SELECT FROM c WHERE c.UserID = '12345'. Is the second query statement a cross-partition query?

  • AYes.
  • BNo.
  解答を表示

スコアの記録、時間制限付き模擬試験、AI解説をご利用になりますか？ 無料アカウントを作成