AZ204 Microsoft Azure Developer Practice Test Questions

The speed of an Azure Event Hub is determined by the number of Throughput units you reserve for it. You can set between 1 and 20 throughput units for the Event Hub. How fast does 1 throughput unit represent for data coming in to an Event Hub?

1 MB per second or 1000 events per second (whichever comes first)

When deploying an Azure Storage account, and you choose Zone Redundant Storage (ZRS), how many copies of your data does Azure keep? https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy

3 Azure Storage always stores multiple copies of your data so that it is protected from planned and unplanned events, including transient hardware failures, network or power outages, and massive natural disasters. Redundancy ensures that your storage account meets its availability and durability targets even in the face of failures. Zone-redundant storage (ZRS) copies your data synchronously across three Azure availability zones in the primary region. For applications requiring high availability, Microsoft recommends using ZRS in the primary region, and also replicating to a secondary region.

When deploying an Azure Storage account, and you choose Geo Redundant Storage (GRS), how many copies of your data does Azure keep? https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy

6 Azure Storage always stores multiple copies of your data so that it is protected from planned and unplanned events, including transient hardware failures, network or power outages, and massive natural disasters. Redundancy ensures that your storage account meets its availability and durability targets even in the face of failures. Geo-redundant storage (GRS) copies your data synchronously three times within a single physical location in the primary region using LRS. It then copies your data asynchronously to a single physical location in the secondary region. Within the secondary region, your data is copied synchronously three times using LRS.

What does the PowerShell command 'Get-AzVMImageSku -Location "EastUS" -PublisherName "MicrosoftWindowsServer" -Offer "WindowsServer"' return? https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-manage-vm

A list of publicly available Windows Server OS images in the EastUS region. A list of publicly available Windows Server OS images in the EastUS region. There could be dozens of Windows VM images available to you. I get 62 when I run this command myself.

What is an App Service Plan? https://docs.microsoft.com/en-us/azure/app-service/overview-hosting-plans

A serverless environment in which App services and Functions can run. In App Service (Web Apps, API Apps, or Mobile Apps), an app always runs in an App Service plan. In addition, Azure Functions also has the option of running in an App Service plan. An App Service plan defines a set of compute resources for a web app to run. These compute resources are analogous to the server farm in conventional web hosting. One or more apps can be configured to run on the same computing resources (or in the same App Service plan).

How can you create a shared access signature and modify the expiry date and time after it's already been created? https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

A shared access signature (SAS) provides secure delegated access to resources in your storage account. With a SAS, you have granular control over how a client can access your data. A stored access policy is defined on a resource container, which can be a blob container, table, queue, or file share. The stored access policy can be used to manage constraints for one or more service shared access signatures. When you associate a service SAS with a stored access policy, the SAS inherits the constraints-the start time, expiry time, and permissions-defined for the stored access policy. You can modify the stored access policy at any time after the SAS has been created.

Which Azure technology allows you to implement infrastructure as code? https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/overview

ARM Templates As infrastructure has become part of the iterative process, the division between operations and development has disappeared. Teams need to manage infrastructure and application code through a unified process. To implement infrastructure as code for your Azure solutions, use Azure Resource Manager templates (ARM templates). The template is a JavaScript Object Notation (JSON) file that defines the infrastructure and configuration for your project. The template uses declarative syntax, which lets you state what you intend to deploy without having to write the sequence of programming commands to create it. In the template, you specify the resources to deploy and the properties for those resources.

What method of provisioning a non-relational database involves first defining the database in a JSON file, which can then be checked into a code repository for source control, sometimes also referred to as Infrastructure as Code? https://docs.microsoft.com/en-us/learn/modules/explore-provision-deploy-non-relational-data-services-azure/2-describe-provision-non-relational-data-services

ARM templates ARM templates are a way of defining your infrastructure using declaritive statements, as opposed to scripts. You define what you want your resources to look like, including the properties and values, and Azure will ensure they look that way. Scripts suffer from the problem of not being able to run the same script twice, whereas ARM templates can be deployed again and again without issue. This is sometimes called Desired State Configuration (or DSC).

Which ASP.NET language is cross-platform and can run on both Windows and Linux Web Apps? https://docs.microsoft.com/en-us/azure/app-service/overview

ASP.NET Core ASP.NET Core is a cross-platform version of ASP.NET. Ruby and Python are only natively supported on Linux. ASP.NET 4 is only supported on Windows.

Your Azure Web App is currently throwing a 500 server error when viewed. You'd like to see more detail on the error. In order to accomplish this, what app setting do you need to set, and to what value? https://docs.microsoft.com/en-us/azure/app-service/configure-language-dotnetcore?pivots=platform-windows#access-environment-variables

ASPNETCORE_ENVIRONMENT="Development" The development environment can enable features that shouldn't be exposed in production. If the environment isn't set, it defaults to Production, which disables most debugging features.

Which of the following statements describes the type of data that can be retrieved using Microsoft Graph? https://docs.microsoft.com/en-us/graph/overview#whats-in-microsoft-graph

All of the data contained in Microsoft 365, including documents, calendar, email, Teams and people Microsoft Graph is the gateway to data and intelligence in Microsoft 365. It provides a unified programmability model that you can use to access the tremendous amount of data in Microsoft 365, Windows 10, and Enterprise Mobility + Security. Microsoft Graph exposes REST APIs and client libraries to access data on the following Microsoft cloud services: (A) Microsoft 365 core services: Bookings, Calendar, Delve, Excel, Microsoft 365 compliance eDiscovery, Microsoft Search, OneDrive, OneNote, Outlook/Exchange, People (Outlook contacts), Planner, SharePoint, Teams, To Do, Workplace Analytics. (B) Enterprise Mobility and Security services: Advanced Threat Analytics, Advanced Threat Protection, Azure Active Directory, Identity Manager, and Intune. (C) Windows 10 services: activities, devices, notifications, Universal Print. (D) Dynamics 365 Business Central.

How many input bindings is an Azure Function allowed to have? https://docs.microsoft.com/en-us/azure/azure-functions/functions-triggers-bindings?tabs=csharp

Any number or zero. You can mix and match different bindings to suit your needs. Bindings are optional and a function might have one or multiple input and/or output bindings. Refer to Microsoft

Once you enable App Service Logging in the Azure Portal, how long does Azure keep it on? https://docs.microsoft.com/en-us/learn/modules/capture-application-logs-app-service/2-enable-and-configure-app-service-application-logging

App logs are the output of runtime trace statements in app code. For example, you might want to check some logic in your code by adding a trace to show when a particular function is being processed, or you might only want to see a logged message when a particular level of error has occurred. App logging is primarily for apps in pre-production and for troublesome issues, because excessive logs can carry a performance hit and quickly consume storage; for this reason, logging to the file system is automatically disabled after 12 hours.

What type of App Service log files store the web server logs? https://docs.microsoft.com/en-us/azure/app-service/troubleshoot-diagnostic-logs

AppServiceAppLogs AppServiceHTTPLogs are web logs. AppServiceAppLogs are application logs. AppServiceAuditLogs contain login activity via FTP and kudu. And AllMetrics are not logs, but performance metrics.

You have a Timer Trigger Function that uses "0 15,30,45 0 * * *" as it's timer setting. How often will the function run? https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-timer?tabs=csharp#ncrontab-expressions

At 00:15, 00:30, and 00:45 (12:15am, 12:30am, and 12:45am); three times per day only. CRON uses a "{second} {minute} {hour} {day} {month} {day-of-week}" format for expressions. The first "0" means that it runs when the second equals 0. The second "15,30,45" means when the minutes equal 15, 30 and 45. The third "0" means at midnight. So the answer is at 12:15, 12:30, and 12:45 every day.

You have a Timer Trigger Function that uses "0 0 0 1 1 *" as it's timer setting. How often will the function run? https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-timer?tabs=csharp#ncrontab-expressions

At midnight on Jan 1st only CRON uses a "{second} {minute} {hour} {day} {month} {day-of-week}" format for expressions. The first "0" means that it runs when the second equals 0. The first three "0" means 0:00 or midnight. The fourth "1" means on the 1st day of the month. The fifth "1" means January. So the function triggers once per year, on Jan 1 at midnight. Happy new year!

Which of the following two-factor authentication verification methods are available in Azure AD? https://docs.microsoft.com/en-us/azure/active-directory/user-help/security-info-setup-email

Authenticator app, text message, phone call, security key Only the following methods can be used for two-factor verification: Authenticator app, text message, phone call, security key

Which Azure service provides the ability to store and manage your private Docker container images?

Azure Container Registry (ACR) You can send your container images to Azure Container Registry (ACR) to store them before deployment

Which Azure service allows you to extend Azure File Shares from the cloud to on-premises by creating a local cache of the files? https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-introduction

Azure File Sync Azure File Sync service allows you to keep a local copy of files that are stored in the Azure File Shares in the cloud. While some users may opt to keep a full copy of their data locally, Azure File Sync additionally has the ability to transform Windows Server into a quick cache of your Azure file share. You can use any protocol that's available on Windows Server to access your data locally, including SMB, NFS, and FTPS. You can have as many caches as you need across the world.

Which feature within Azure collects all of the logs from various resources into a central dashboard, where you can run queries, view graphs, and create alerts on certain events? https://docs.microsoft.com/en-us/azure/azure-monitor/overview

Azure Monitor Azure Monitor - a centralized dashboard that collects all the logs, metrics and events from your resources

You have a Timer Trigger Function that uses "0 5 * * * *" as it's timer setting. How often will the function run? https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-timer?tabs=csharp#ncrontab-expressions

CRON uses a "{second} {minute} {hour} {day} {month} {day-of-week}" format for expressions. The first "0" means that it runs when the second equals 0. The second "5" means it will run at 5 minutes past the hour. The third "*" means that it will run every hour of every day.

Which Azure Architecture pattern is specifically designed to increase application performance by using a cache service? https://docs.microsoft.com/en-us/azure/architecture/patterns/cache-aside

Cache-aside pattern The name gives it away. Cache-Aside pattern is designed to load data on demand into a cache from a data store. This can improve performance and also helps to maintain consistency between data held in the cache and data in the underlying data store.

Your company has several applications running on Azure App Services - App1, App2, App3 and App4. Each application is configured to use a system-managed identity to access resources. Your applications all store their secrets in a KeyVault named KV1. You are finding it difficult to manage the permissions for all these applications, and would like to move to a single managed identity for all applications instead of each application having their own. What action do you take to implement that? https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

Change the applications t the same user-managed identity Managed identities eliminate the need for developers to manage credentials. Managed identities provide an identity for applications to use when connecting to resources that support Azure Active Directory (Azure AD) authentication. Applications may use the managed identity to obtain Azure AD tokens. For example, an application may use a managed identity to access resources like Azure Key Vault where developers can store credentials in a secure manner or to access storage accounts. You cannot configure multiple applications to use the same system-assigned identity. You must use a user-assigned identity for this purpose.

You have a Python app running in an Azure App Service, and need to insure that it is running on Python 3.8. Where in the Azure Portal do you set the Python version for an App Service? https://docs.microsoft.com/en-us/azure/app-service/configure-common

Configuration > General Settings

A Kubernetes cluster is dividend into which two components? https://docs.microsoft.com/en-us/azure/aks/concepts-clusters-workloads

Control plane, Nodes A Kubernetes cluster is divided into two components: 1. Control plane: provides the core Kubernetes services and orchestration of application workloads. 2. Nodes: run your application workloads.

Which CosmosDB API format works best with document (JSON) data? https://docs.microsoft.com/en-us/azure/cosmos-db/introduction

Core SQL Core (SQL) API stores data in JSON document format. Cassandra API stores data in column-oriented schema. Gremlin API allows users to make graph queries and stores data as edges and vertices. MongoDB API also uses documents but is BSON format, which is a binary format and not text-based.

Which library allows you to develop and test Azure Functions locally before deploying into Azure? https://docs.microsoft.com/en-us/azure/azure-functions/functions-develop-local

Core Tools, cross-platform on Windows, macOS and Linux Azure Functions Core Tools provides the core runtime and templates for creating functions, which enable local development. Version 2.X supports development on Windows, Linux and MacOS.

What option do you have to grant someone access to a single container in your Azure storage account without having to give them your storage account keys?

Create them a Shared Access Signature (SAS) Storage accounts are access by keys. Using SAS will let them have very granular access without exposing any other part of your storage account.

Which feature of Azure functions allow you to use a runtime not currently supported natively by Azure? https://docs.microsoft.com/en-us/azure/azure-functions/functions-custom-handlers

Custom Handlers Every Functions app is executed by a language-specific handler. While Azure Functions features many language handlers by default, there are cases where you may want to use other languages or runtimes. Custom handlers are lightweight web servers that receive events from the Functions host. Any language that supports HTTP primitives can implement a custom handler.

You have a new project coming up and the development team would like to use Go as the programming language. At least some of the new project needs to be handled by Azure Functions. Go is not a native language supported by Functions. What is a feature of Azure Functions that you can use to implement Go code? https://docs.microsoft.com/en-us/azure/azure-functions/functions-custom-handlers

Custom Handlers Every Functions app is executed by a language-specific handler. While Azure Functions features many language handlers by default, there are cases where you may want to use other languages or runtimes. Custom handlers are lightweight web servers that receive events from the Functions host. Any language that supports HTTP primitives can implement a custom handler.

Which type of data can most benefit from being stored in a caching system like Azure Redis Cache? https://docs.microsoft.com/en-us/azure/architecture/best-practices/caching?toc=%2fazure%2fredis-cache%2ftoc.json

Data that is repeatedly read Data that is static but read frequently benefits most from being cached, because you can use the cache to retrieve the data instead of having to go back to the original data source every time. Data that is written and never read does not need to be cached since caching only benefits reading. Data that is always changing (like a stock price) cannot be cached since you always have to go back to the original source to retrieve the latest. Data that is infrequently read but is static can benefit from caching, but it does not benefit the most of the four options.

Which type of data can most benefit from being stored in a caching system like Azure Redis Cache? https://docs.microsoft.com/en-us/azure/architecture/best-practices/caching?toc=%2fazure%2fredis-cache%2ftoc.json

Data that is static benefits most from being cached, because you can use the cache to retrieve the data instead of having to go back to the original data source every time. Data that is written and never read does not need to be cached since caching only benefits reading. Data that is only ever used once by a session does not need to be cached as well since the first time the data is read, you have to go to the original source. So if you never need it a second time, you don't need to cache it. And data that is always changing (like a stock price) cannot be cached since you always have to go back to the original source to retrieve the latest.

What container image formats does Azure Container Registry support? https://docs.microsoft.com/en-us/azure/container-registry/container-registry-image-formats

Docker images, OCI images, OCI artifacts, Helm charts The following Docker container image formats are supported: Docker images, OCI images, OCI artifacts, Helm charts

What Azure Functions library do you need to implement in order for Functions to be able to call other Functions? https://docs.microsoft.com/en-us/azure/azure-functions/durable/durable-functions-overview?tabs=csharp

Durable Functions Durable Functions is an extension of Azure Functions that lets you write stateful functions in a serverless compute environment. The extension lets you define stateful workflows by writing orchestrator functions and stateful entities by writing entity functions using the Azure Functions programming model. Behind the scenes, the extension manages state, checkpoints, and restarts for you, allowing you to focus on your business logic.

You have an Azure App Service, with a WebJob. The WebJob is supposed to run continuously, but sometimes stops running as the App Service is unloaded when there are not enough incoming visitors. What can you do to ensure the App Service is never unloaded? https://docs.microsoft.com/en-us/azure/app-service/configure-common

Enable Always On setting on the General Settings page Always On: Keeps the app loaded even when there's no traffic. When Always On is not turned on (default), the app is unloaded after 20 minutes without any incoming requests. The unloaded app can cause high latency for new requests because of its warm-up time. When Always On is turned on, the front-end load balancer sends a GET request to the application root every five minutes. The continuous ping prevents the app from being unloaded.

You have an App Service with several instances. You notice the setting ARR Affinity is enabled on the General Settings page. What does ARR Affinity do when enabled? https://docs.microsoft.com/en-us/azure/app-service/configure-common

Ensure that the client is always routed to the same instance for the life of the session. ARR affinity: In a multi-instance deployment, ensure that the client is routed to the same instance for the life of the session. You can set this option to Off for stateless applications.

You have a Timer Trigger Function that uses "0 */5 * * * *" as it's timer setting. How often will the function run? https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-timer?tabs=csharp#ncrontab-expressions

Every 5 minutes CRON uses a "{second} {minute} {hour} {day} {month} {day-of-week}" format for expressions. The first "0" means that it runs when the second equals 0. The second "*/5" means every 5th minute of every hour, of every day.

What is the major downside/risk to using Spot VMs compared to regularly-provisioned VMs? https://docs.microsoft.com/en-us/azure/virtual-machines/spot-vms

Eviction VMs can be evicted based on capacity or the max price you set. When creating an Azure Spot Virtual Machine, you can set the eviction policy to Deallocate (default) or Delete. As well, pricing is variable. Even though there is no SLA (for obvious reasons), this is not the major risk to using spot instances. Your account is limited to the number of any instance type you have per region, and so the limit on spot instances is not different than that. They should cost less than regular VMs though.

How many triggers can an Azure Function have? https://docs.microsoft.com/en-us/azure/azure-functions/functions-triggers-bindings?tabs=csharp

Exactly one Triggers are what cause a function to run. A trigger defines how a function is invoked and a function must have exactly one trigger. Triggers have associated data, which is often provided as the payload of the function.

What advantage does the Compute-Optimized (Fsv2) instance family have over the General Purpose (Dsv4) instance family? https://docs.microsoft.com/en-us/azure/virtual-machines/acu

F-series VMs provide higher performance (ACU) per virtual CPU compared to D-series The best advantage of the F-series VMs is that they provide faster performance per virtual CPU than the D-series. The machine hardware is designed for CPU performance. Pricing is actually comparable.

For Linux App Services, where can you choose to have logging saved to? https://docs.microsoft.com/en-us/learn/modules/capture-application-logs-app-service/2-enable-and-configure-app-service-application-logging

File system only To route messages to log files, Azure Web apps use the Web server (IIS process). Because Windows-based Web apps are a well-established Azure service, and messaging for ASP.NET apps is tightly integrated with the underlying IIS service, Windows apps benefit from a rich logging infrastructure. For other apps, logging options may be limited by the development platform, even when running on a Windows app service. The logging functionality available to Linux-based scripted apps, such as Node, is determined by the Docker image used for the app's container. Basic logging, using redirections to STDERR or STDOUT, uses the Docker logs. Richer logging functionality is dependent on the underlying image, such as whether this is running PHP, Perl, Ruby, and so on. To download equivalent Web application logging as provided by IIS for Windows apps, may require connecting to your container using SSH.

For Windows App Services, where can you choose to have logging saved to? https://docs.microsoft.com/en-us/learn/modules/capture-application-logs-app-service/2-enable-and-configure-app-service-application-logging

File system, and blog storage To route messages to log files, Azure Web apps use the Web server (IIS process). Because Windows-based Web apps are a well-established Azure service, and messaging for ASP.NET apps is tightly integrated with the underlying IIS service, Windows apps benefit from a rich logging infrastructure. For other apps, logging options may be limited by the development platform, even when running on a Windows app service.

Which CosmosDB API format works best with graph data? https://docs.microsoft.com/en-us/azure/cosmos-db/introduction

Gemlin API Gremlin API allows users to make graph queries and stores data as edges and vertices. Cassandra API stores data in column-oriented schema. Core (SQL) API stores data in document format. Table API stores data in key/value format.

You would like to receive an email every time a new Azure Container Registry is created. Which of the following steps would accomplish that goal? https://docs.microsoft.com/en-us/azure/container-registry/monitor-service

Go into Azure Monitor. Go into Alerts. Select the Subscription scope. Select the Create or Update Container Registry signal. Add the action group that emails you. Give it a name and click save

Your company uses Azure API Management as the public front-end to its APIs, to control access. You'd like to implement certificate authentication to ensure that only authorized clients are calling the API. In which policy section do you add the <authentication-certificate> policy? https://docs.microsoft.com/en-us/azure/api-management/api-management-authentication-policies

Inbound Authentication is an inbound policy. Requests that fail to authenticate do not have the requests passed on to the API backend at all.

Azure App Service has options to scale up and scale out. What does scaling out an app do? https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up

Increases the number of VM instances that run your app Scale out: Increase the number of VM instances that run your app. You can scale out to as many as 30 instances, depending on your pricing tier. App Service Environments in Isolated tier further increases your scale-out count to 100 instances.

Azure App Service has options to scale up and scale out. What does scaling up an app do? https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up

It moves your App Service plan to a higher pricing tier, giving you more CPU, memory, disk space and extra features. Scale up: Get more CPU, memory, disk space, and extra features like dedicated virtual machines (VMs), custom domains and certificates, staging slots, autoscaling, and more. You scale up by changing the pricing tier of the App Service plan that your app belongs to.

What is the engine behind Azure App Service source control based deployment, and other deployment methods like ZIP file upload? https://docs.microsoft.com/en-us/azure/app-service/resources-kudu

Kudu Kudu is the engine behind a number of features in Azure App Service related to source control based deployment, and other deployment methods like Dropbox and OneDrive sync.

Generally speaking, regardless of which region, which is the lowest cost redundancy option for Blob Storage? https://azure.microsoft.com/en-ca/pricing/details/storage/blobs/

LRS Azure Storage always stores multiple copies of your data so that it is protected from planned and unplanned events, including transient hardware failures, network or power outages, and massive natural disasters. Redundancy ensures that your storage account meets its availability and durability targets even in the face of failures. Locally redundant storage (LRS) copies your data synchronously three times within a single physical location in the primary region. LRS is the least expensive replication option, but is not recommended for applications requiring high availability or durability.

What type of storage container is specifically used to collect log and metric data from various Azure Resources so that it can be analyzed in Azure Monitor? https://docs.microsoft.com/en-us/azure/azure-monitor/platform/manage-access

Log Analytics Workspace Log Analytics Workspace is required to collect logs and metrics

If you want to use nested ARM templates - have one ARM template include the contents of another template in it's deployment, what resource type do you use? https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/linked-templates?tabs=azure-powershell

Microsoft.Resources/deployments To deploy complex solutions, you can break your Azure Resource Manager template (ARM template) into many related templates, and then deploy them together through a main template. The related templates can be separate files or template syntax that is embedded within the main template. To link a template, add a deployments resource to your main template. In the templateLink property, specify the URI of the template to include.

Which Durable Functions application pattern would you use for an Azure Function that only needs to run whenever an external API returns a status change? https://docs.microsoft.com/en-us/azure/azure-functions/durable/durable-functions-overview?tabs=csharp#monitoring

Monitor pattern The monitor pattern refers to a flexible, recurring process in a workflow. An example is polling until specific conditions are met. You can use a regular timer trigger to address a basic scenario, such as a periodic cleanup job, but its interval is static and managing instance lifetimes becomes complex. You can use Durable Functions to create flexible recurrence intervals, manage task lifetimes, and create multiple monitor processes from a single orchestration. An example of the monitor pattern is to reverse the earlier async HTTP API scenario. Instead of exposing an endpoint for an external client to monitor a long-running operation, the long-running monitor consumes an external endpoint, and then waits for a state change.

You've created a Cosmos DB account named Account1. Inside, you create one database named Db1, and one container named Container1. The data you are storing is document data using the Core (SQL) API. You have a new requirement to add a graph database using the Gremlin API. Can you create another database named Db2 inside Account1 for the graph data? https://docs.microsoft.com/en-us/azure/cosmos-db/account-databases-containers-items

No, each account can only contain one type of data

You have a Lifecycle Storage policy that moves blobs from hot storage to cool storage if they have not been modified in 30 days. You realize that there is a frequently accessed file that is in cool storage due to this policy, and you'd like to save money by moving it back to hot storage. So you manually move this file back to hot storage. Will this solve your problem? https://docs.microsoft.com/en-us/azure/storage/blobs/storage-lifecycle-management-concepts?tabs=azure-portal

No, the blob will be automatically moved back to cool storage the next day Moving the blob from cool to hot does not modify it's modification date, and so it will be moved back to cool storage the next time lifecycle management runs. You need to either modify the rule to be based on last access date, or modify the file when moving it back so that the modification date is updated.

What is the REST API command for uploading a ZIP file into an Azure App Service using the Kudu SCM endpoint? https://github.com/projectkudu/kudu/wiki/REST-API

PUT /api/zip/{path}/ The Zip API allows downloading folders as zip files, or expanding zip files into folders.

What does the CLI command 'az acr build --registry $ACR_NAME --image helloacrtasks:v1 .' do? https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-quick-task

Performs a docker build and immediately pushes the result image into an ACR ACR Tasks is a suite of features within Azure Container Registry that provides streamlined and efficient Docker container image builds in Azure. az acr build is an ACR Task which queues a quick build, providing streaming logs for an Azure Container Registry.

The API Management Gateway includes a powerful feature called Policies. What is the main function of policies?

Policies allow you to modify the behavior of the API using configuration instead of code. A policy can change both the inbound request and the outbound response. Policies allow you to modify the inbound request as well as the outbound results without modifying the API code itself.

Which of the following metrics affect how much an Azure Redis Cache instance costs? https://azure.microsoft.com/en-us/pricing/details/cache/

Region, pricing tier, hours Redis Cache is charged by the hour, and varies by region. It also depends on the tier you choose.

All Azure data resources (Cosmos DB, SQL Database, Redis Cache, etc) must belong to one and only one.... ? https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/overview

Resource Group Each resource can exist in only one resource group. However, you can move a resource from one resource group to another group. The resources inside the resource group do not have to exist in the same region as the resource group.

When writing code that connects to an Azure Storage account, you set the Retry option mode to Exponential. What does Exponential mode do? https://docs.microsoft.com/en-us/dotnet/api/azure.core.retrymode?view=azure-dotnet

Retry attempts will delay based on a backoff strategy where each attempt will increase the duration that it waits before retrying Exponential = Retry attempts will delay based on a backoff strategy, where each attempt will increase the duration that it waits before retrying. Fixed = Retry attempts happen at fixed intervals; each delay is a consistent duration.

What type of compute is Azure Container Instances considered to be? https://docs.microsoft.com/bs-cyrl-ba/azure/container-instances/

Serverless Azure Container Instances are on-demand containers in a managed, serverless Azure environment. Azure Container Instances is a solution for any scenario that can operate in isolated containers, without orchestration. Run event-driven applications, quickly deploy from your container development pipelines, and run data processing and build jobs.

You are a developer for Acme Inc. Your company's flagship application is the Wind Monitoring software that Wind Energy farms use to monitor their equipment. At the end of each day, the Wind Collector sends a message that contains all of the days statistics in JSON format which needs to be read, processed, and posted to the database. Which Azure Service is best for processing this type of data?

Service Bus Service Bus Queue is enterprise-grade message queue.

What can you do to ensure your Azure Redis Cache removes keys proactively instead of waiting until memory is full? https://docs.microsoft.com/en-us/azure/azure-cache-for-redis/cache-best-practices

Set an expiration value on your keys Setting an expiration value for keys allows the system to keep the cache size smaller for you, and you never need to worry about reaching maximum cache size.

When creating a Cosmos DB account, you indicate which consistency level you would like to follow: Strong, Bounded Staleness, Session, Consistent Prefix and Eventual. How can a developer force Strong consistency on a query when the database itself is Eventual consistency? https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.cosmos.queryrequestoptions.consistencylevel?view=azure-dotnet#Microsoft_Azure_Cosmos_QueryRequestOptions_ConsistencyLevel

Set the ConsistencyLevel property of QueryRequestOptions when making the query QueryRequestOptions.ConsistencyLevel Property gets or sets the consistency level required for the request in the Azure Cosmos DB service. This is a request level property, and doesn't affect the database settings.

Under which menu item of the Azure Portal can you find the logs for a container instance? https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart-portal

Settings > Container > Logs Viewing the logs for a container instance is helpful when troubleshooting issues with your container or the application it runs. To view the container's logs, under Settings, select Containers, then Logs. You should see the HTTP GET request generated when you viewed the application in your browser.

What advantage does a Spot VM provide over a regularly-provisioned VM? https://docs.microsoft.com/en-us/azure/virtual-machines/spot-vms

Spot instances are significantly cheaper. Using Azure Spot Virtual Machines allows you to take advantage of our unused capacity at a significant cost savings. At any point in time when Azure needs the capacity back, the Azure infrastructure will evict Azure Spot Virtual Machines. Therefore, Azure Spot Virtual Machines are great for workloads that can handle interruptions like batch processing jobs, dev/test environments, large compute workloads, and more.

What is it that makes a caching system like Redis Cache faster than a traditional data store like Azure SQL Database? https://docs.microsoft.com/en-us/azure/architecture/best-practices/caching?toc=%2fazure%2fredis-cache%2ftoc.json

Store data in memory Redis Cache uses memory (RAM) to store your information which allows it almost instant retrieval. As a result, there is an upper limit to the amount of data a single Redis node can store, and then you must cluster nodes to go above it.

What is the concept of strong consistency with Cosmos DB? https://docs.microsoft.com/en-us/azure/cosmos-db/consistency-levels

Strong consistency is that, across the world, readers are guaranteed to always get the most recent committed version of an item. https://docs.microsoft.com/en-us/azure/cosmos-db/consistency-levels

You are a developer for Acme Inc. Your application uses a Service Bus Queue to receive messages from an outside app, and your have a number of applications processing those messages. You have recently been told that the business is seeing a problem of some messages in an unusal circumstance being processed twice. When you debug the problem, it's a message that was successfully processed by the job but then the program fails before the queue could be updated to delete the message. Your boss wants you to fix the problem such that it might be better if a message was missed than if a message was processed twice. What do you do to ensure messages do not get processed twice, even if sometimes they don't get processed?

Switch the queue to "at-most-once" delivery At-most-once delivery is designed for this

You are a developer for Acme Inc. You are deploying an Azure App Service, and would like to store the application secrets in Azure Key Vault. You would not like to store any user id/passwords at all inside your application. Using what method can you assign the application the permission to read the secrets from the vault, without having to store any type of authentication credentials in code? https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity?tabs=dotnet

System-assigned Managed Identity, User-Assigned Managed Identity Azure Key Vault is a service that provides centralized secrets management, with full control over access policies and audit history. In order to read secrets from Key Vault, you need to have a vault created and give your app permission to access it. You must create a managed identity and assign it permissions to read the vault, or you can use a user-assigned identity.

Which ASP.NET method outputs log messages to the application diagnostics log? https://docs.microsoft.com/en-us/azure/app-service/troubleshoot-diagnostic-logs

System.Diagnostics.Trace.TraceError("message"); Logs messages generated by your application code. The messages can be generated by the web framework you choose, or from your application code directly using the standard logging pattern of your language. Each message is assigned one of the following categories: Critical, Error, Warning, Info, Debug, and Trace. You can select how verbose you want the logging to be by setting the severity level when you enable application logging.

When a Virtual Machine named VM1 is deployed to a virtual network named Vnet1, and a subnet named Subnet1, which private IP address is it given? https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal

The first available private IP address in the Subnet1 address range A virtual machine (VM) is automatically assigned a private IP address from a range that you specify, based on the subnet in which the VM is deployed. The VM retains the address until the VM is deleted. Azure dynamically assigns the next available private IP address from the subnet you create a VM in. If you want a specific IP address from the subnet assigned to the VM, assign a static IP address.

You have five applications installed on a single App Service Plan. Each application has two deployment slots - production and staging. You have scaled the plan out to three instances. How many VMs are running to support this? https://docs.microsoft.com/en-us/azure/app-service/overview-hosting-plans

Three When you create an app in App Service, it is put into an App Service plan. When the app runs, it runs on all the VM instances configured in the App Service plan. If multiple apps are in the same App Service plan, they all share the same VM instances. If you have multiple deployment slots for an app, all deployment slots also run on the same VM instances. In this way, the App Service plan is the scale unit of the App Service apps. If the plan is configured to run five VM instances, then all apps in the plan run on all five instances. If the plan is configured for autoscaling, then all apps in the plan are scaled out together based on the autoscale settings.

In ASP.NET, how do you write a message to the application diagnostics log that only shows up when the user has enabled verbose level messages? https://docs.microsoft.com/en-us/learn/modules/capture-application-logs-app-service/2-enable-and-configure-app-service-application-logging

Trace.TraceInformation("message") To log information to the app diagnostics log, use the System.Diagnostics.Trace class. There are four trace levels you can use, and these correlate with error, warning, information, and verbose logging levels shown in the Azure portal.

In ASP.NET, how do you write a message to the application diagnostics log that only shows up when the user has enabled warning level messages? https://docs.microsoft.com/en-us/learn/modules/capture-application-logs-app-service/2-enable-and-configure-app-service-application-logging

Trace.TraceWarning("message") To log information to the app diagnostics log, use the System.Diagnostics.Trace class. There are four trace levels you can use, and these correlate with error, warning, information, and verbose logging levels shown in the Azure portal.

What is the maximum storage capacity of a Cosmos DB container?

Unlimited Cosmos DB can store an unlimited amount of data. There is no specific limit.

Which operating systems can mount an external drive using Azure File Share? https://docs.microsoft.com/en-us/azure/storage/files/storage-files-introduction

Windows, Linux and macOS Azure Files offers fully managed file shares in the cloud that are accessible via the industry standard Server Message Block (SMB) protocol or Network File System (NFS) protocol. Azure file shares can be mounted concurrently by cloud or on-premises deployments. Azure Files SMB file shares are accessible from Windows, Linux, and macOS clients.

ARM templates are said to have a declarative syntax. Why is a declarative syntax better than a programmatic approach? https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/overview

You don't have to check if the resource exists, you simply declare that it should exist ARM templates allow you to create and deploy an entire Azure infrastructure declaratively. For example, you can deploy not only virtual machines, but also the network infrastructure, storage systems, and any other resources you may need.

ARM templates are said to have a declarative syntax. Why is a declarative syntax better than a programmatic approach? https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/overview

You don't need to worry about the order of operations to create resources(dependencies), Azure takes care of creating them in the correct order You don't have to worry about the complexities of ordering operations. Resource Manager orchestrates the deployment of interdependent resources so they're created in the correct order. When possible, Resource Manager deploys resources in parallel so your deployments finish faster than serial deployments. You deploy the template through one command, rather than through multiple imperative commands.

You need to modify an ARM template. You would like the location of the Azure resources to be in the same region as the resource group itself. Which ARM template function meets the criteria? https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-functions-resource#resourcegroup

[resourceGroup().location] [resourceGroup().location] is the best answer because it accesses the resource group, and looks at the location parameter. The other answers do not do that. We don't know if the location is passed in as a parameter, and the requirement said the resource group location.

Which of the following Azure CLI commands is considered part of the ACR Tasks set? https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-quick-task

az acr build ACR Tasks is a suite of features within Azure Container Registry that provides streamlined and efficient Docker container image builds in Azure. az acr build is an ACR Task which queues a quick build, providing streaming logs for an Azure Container Registry.

Which Azure CLI command will create a container image of your code and automatically deploy to Azure Container Registry? https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-quick-task

az acr build az acr build is a ACR Task. ACR Tasks is a suite of features within Azure Container Registry that provides streamlined and efficient Docker container image builds in Azure. Because ACR tasks use docker build to build your images, no changes to your Dockerfiles are required to start using ACR Tasks immediately.

If your Azure solution relies on third-party public images, some risks are added to your process. Microsoft recommends keeping a private copy of public images and deploying from there, instead of deploying directly from public image locations like DockerHub. Which CLI command is able to copy a public image into Azure Container Registry? https://docs.microsoft.com/en-ca/azure/container-registry/buffer-gate-public-content#import-images-to-an-azure-container-registry

az acr import As a recommended one-time step, import base images and other public content to your Azure container registry. The az acr import command in the Azure CLI supports image import from public registries such as Docker Hub and Microsoft Container Registry and from other private container registries.

What is the Azure CLI command to download application log files to the local disk? https://docs.microsoft.com/en-us/learn/modules/capture-application-logs-app-service/2-enable-and-configure-app-service-application-logging

az webapp log download az webapp log download allows you to download the logs to your local disk.

What is the Azure CLI command to do live streaming of application log files? https://docs.microsoft.com/en-us/learn/modules/capture-application-logs-app-service/2-enable-and-configure-app-service-application-logging

az webapp log will retrive the log, and the tail operator will read the last lines of the log and keep a live stream of it going.

What is the Azure CLI command to create an Azure Container Instance? Fill in the blank. az _______ _______ --resource-group myResourceGroup --name mycontainer --image mcr.microsoft.com/azuredocs/aci-helloworld --dns-name-label aci-demo --ports 80 https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart

container create az container create will create a new container instance.

What is the Azure CLI command to delete an Azure Container Instance? Fill in the blank. az ______ _______ --resource-group myResourceGroup --name mycontainer https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart

container delete azure container delete will delete a running container instance.

You have an Azure Container Registry named 'contoso.azurecr.io'. There are several departments in your company that need to push images to the registry, and you want to keep them organized. You decide to use respository namespaces to separate out 'sales', 'marketing', 'technology' and 'customerservice'. How do you pull down the container image for the 'website' project located in the marketing namespace? https://docs.microsoft.com/en-us/azure/container-registry/container-registry-best-practices#repository-namespaces

docker pull constoso.azurecr.io/marketing/website By using repository namespaces, you can allow sharing a single registry across multiple groups within your organization. Registries can be shared across deployments and teams. Azure Container Registry supports nested namespaces, enabling group isolation. However, the registry manages all repositories independently, not as a hierarchy. The syntax is contoso.azurecr.io/marketing/website

You have a docker image in your local repository that you'd like to share to the Azure Container Register. Your local respository image is named myimage, and your ACR is named myacr.azurecr.io. What is the command to get the image from your local into ACR? https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-docker-cli?tabs=azure-cli#push-the-image-to-your-registry

docker push myacr.azurecr.io/myimage

Azure Functions store their configuration settings in which file? https://docs.microsoft.com/en-us/azure/azure-functions/functions-triggers-bindings?tabs=csharp

function.json The function.json file defines the function's trigger, bindings, and other configuration settings. Every function has one and only one trigger. The runtime uses this config file to determine the events to monitor and how to pass data into and return data from a function execution. The following is an example function.json file.

What is the URL for the Azure App Service Kudu companion app? https://docs.microsoft.com/en-us/azure/app-service/resources-kudu

https://(app-name).scm.azurewebsites.net Kudu is the engine behind a number of features in Azure App Service related to source control based deployment, and other deployment methods like Dropbox and OneDrive sync. App not in Isolated tier uses https://(app-name).scm.azurewebsites.net, while apps in the isolated tier use https://(app-name).scm.(ase-name).p.azurewebsites.net.

Your function uses the following code. You want to add a message to the log when the function starts late. What code belongs in the missing line? [FunctionName("TimerTriggerCSharp")] public static void Run([TimerTrigger("0 */5 * * * *")]TimerInfo myTimer, ILogger log) { >>>>> LINE MISSING HERE <<<<< { log.LogInformation("Timer is running late!"); } log.LogInformation($"C# Timer trigger function executed at: {DateTime.Now}");} https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-timer?tabs=csharp#ncrontab-expressions

if (myTimer.IsPastDue) if (myTimer.IsPastDue) is the correct answer.

You are a developer for Acme Inc. You have implemented Redis as a caching service and it's going great. You are running on a premium plan, and using the top 120 GB of memory cache. You'd like to increase the memory limit to 500 GB, but Redis does not support that. How can you get more memory when using Azure Redis? Choose the best answer.

implement the Redis Cluster feature, and add a second shard to double the memory available. Redis Cluster supports up to 10 shards to create 1.2 TB of memory.

For Azure Functions, what are the possible values for the direction property in the function.json file? https://docs.microsoft.com/en-us/azure/azure-functions/functions-triggers-bindings?tabs=csharp

in, out, inout All triggers and bindings have a direction property in the function.json file. For triggers, the direction is always in. Input and output bindings use in and out. Some bindings support a special direction inout. If you use inout, only the Advanced editor is available via the Integrate tab in the portal.

In ASP.NET Core, using the logger factory class, how do you write a message to the application diagnostics log that only shows up with the user has enabled error level messages? https://docs.microsoft.com/en-us/learn/modules/capture-application-logs-app-service/2-enable-and-configure-app-service-application-logging

logger.LogCritical("message") logger.LogCritical("Message") writes a critical message at log level 5. Levels 4 and 5 are "error" messages.

In ASP.NET Core, using the logger factory class, how do you write a message to the application diagnostics log that only shows up with the user has enabled warning level messages? https://docs.microsoft.com/en-us/learn/modules/capture-application-logs-app-service/2-enable-and-configure-app-service-application-logging

logger.LogWarning("message")

You have an Azure Container Instance with the DNS label "mycontainer". What is the public Fully-Qualified Domain Name (FQDN) for that instance? https://docs.microsoft.com/en-us/azure/container-instances/container-instances-overview

mycontainer.(azureregion).azurecontainer.io Azure Container Instances enables exposing your container groups directly to the internet with an IP address and a fully qualified domain name (FQDN). When you create a container instance, you can specify a custom DNS name label so your application is reachable at customlabel.azureregion.azurecontainer.io.

What does the Azure Container Registry endpoint look like? https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-portal

myprivateacr.azurecr.io azurecr.io is the general domain name for ACR, and myprivateacr.azurecr.io points to your own private registry (where myprivateacr is the name of your unique registry).

Why would someone prefer a Consumption-based pricing model as opposed to a Time-based pricing model? https://docs.microsoft.com/en-us/azure/azure-functions/functions-consumption-costs

you can save a log of money if you don't use the resource often as opposed to having it available for use 24/7 Consumption-Based Model - paying for something based on how much you used, as opposed to paying for something no matter if you use it or not.