Practice Test #2

Simulate the real exam experience with 50 questions and a 100-minute time limit. Practice with AI-verified answers and detailed explanations.

50Questions100Minutes700/1000Passing Score

Browse Practice Questions

AI-Powered

Triple AI-Verified Answers & Explanations

Every answer is cross-verified by 3 leading AI models to ensure maximum accuracy. Get detailed per-option explanations and in-depth question analysis.

GPT Pro

Claude Opus

Gemini Pro

Per-option explanations

In-depth question analysis

3-model consensus accuracy

Practice Questions

Question 1

You are developing an application that uses Azure Blob storage. The application must read the transaction logs of all the changes that occur to the blobs and the blob metadata in the storage account for auditing purposes. The changes must be in the order in which they occurred, include only create, update, delete, and copy operations and be retained for compliance reasons. You need to process the transaction logs asynchronously. What should you do?

Want to practice all questions on the go?

Download Cloud Pass — includes practice tests, progress tracking & more.

Other Practice Tests

Start Practicing Now

Download Cloud Pass and start practicing all Microsoft AZ-204 exam questions.

Want to practice all questions on the go?

Get the app

Download Cloud Pass — includes practice tests, progress tracking & more.

Question 2

HOTSPOT - A company is developing a Java web app. The web app code is hosted in a GitHub repository located at https://github.com/Contoso/webapp. The web app must be evaluated before it is moved to production. You must deploy the initial code release to a deployment slot named staging. You need to create the web app and deploy the code. How should you complete the commands? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Part 1:

az ______ create --location centralus --name $resourcegroupname

Part 2:

az ______ create --name $webappname --resource-group $resourcegroupname --sku S3

Part 3:

az ______ create --name $webappname --resource-group $resourcegroupname --plan $webappname

Part 4:

az ______ create --name $webappname --resource-group $resourcegroupname --slot staging

Part 5:

az ______ config --name $webappname --resource-group $resourcegroupname --slot staging --repo-url $gitrepo --branch master --manual-integration

Question 3

Your company is developing an Azure API. You need to implement authentication for the Azure API. You have the following requirements: All API calls must be secure.

✑ Callers to the API must not send credentials to the API. Which authentication mechanism should you use?

Part 1:

Select the correct answer(s) in the image below.

question-image

Question 4

HOTSPOT - You are building a website to access project data related to teams within your organization. The website does not allow anonymous access. Authentication is performed using an Azure Active Directory (Azure AD) app named internal. The website has the following authentication requirements: ✑ Azure AD users must be able to login to the website. ✑ Personalization of the website must be based on membership in Active Directory groups. You need to configure the application's manifest to meet the authentication requirements. How should you configure the manifest? To answer, select the appropriate configuration in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Part 1:

"optionalClaims" ______

Part 2:

"groupMembershipClaims" ______

Question 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You develop an HTTP triggered Azure Function app to process Azure Storage blob data. The app is triggered using an output binding on the blob. The app continues to time out after four minutes. The app must process the blob data. You need to ensure the app does not time out and processes the blob data. Solution: Pass the HTTP trigger payload into an Azure Service Bus queue to be processed by a queue trigger function and return an immediate HTTP success response. Does the solution meet the goal?

Question Analysis

Core concept: This scenario tests Azure Event Grid for event routing/filtering across multiple Azure services, and Azure Functions (Event Grid trigger) for serverless processing. It also touches reliability patterns such as dead-lettering and retry behavior. Why the answer is correct: Using Event Grid system topics per service is an appropriate way to ingest events from Azure services like Blob Storage and Azure Resource Manager in near-real time without managing infrastructure. Event subscriptions with Advanced Filters (by event type, subject, data fields, or resource patterns) ensure the application receives only relevant events, minimizing downstream processing and custom routing code. Azure Functions with an Event Grid trigger provides a fully managed, auto-scaling compute option that meets the “no infrastructure” requirement. Ensuring no events are missed: Event Grid provides at-least-once delivery with built-in retries over a defined retry window. If the Function endpoint is temporarily unavailable or returns failures, Event Grid retries delivery. Enabling dead-lettering on the subscription (to a Storage account container) captures events that could not be delivered/processed after retries, enabling later reprocessing and preventing silent loss. This aligns with reliability best practices in the Azure Well-Architected Framework (design for failure, use asynchronous messaging, and implement poison/dead-letter handling). Key features and best practices: - System topics: managed integration for Azure resource events (e.g., Storage, ARM). - Advanced Filters: reduce noise and cost by filtering at the broker. - Azure Functions Event Grid trigger: serverless, scales with event volume. - Dead-lettering: operational safety net for undeliverable events. - Consider idempotency: because Event Grid is at-least-once, Functions should handle duplicate events safely. Common misconceptions: Some assume Event Grid “stores” events like a queue. It does not provide long-term retention; reliability comes from retries plus dead-lettering and your reprocessing strategy. If you needed durable buffering for long outages, you might add Service Bus/Storage Queue as an intermediary, but the proposed design still meets the stated requirements via dead-lettering and retries. Exam tips: For near-real-time eventing from Azure services with filtering, choose Event Grid. For serverless processing, pair it with Azure Functions triggers. When the question emphasizes “no missed events,” look for retries + dead-lettering and remember to mention idempotent handlers.

Question 6

HOTSPOT - You are creating a CLI script that creates an Azure web app and related services in Azure App Service. The web app uses the following variables: Variable name | Value $gitrepo | https://github.com/Contos/webapp $webappname | Webapp1103 You need to automatically deploy code from GitHub to the newly created web app. How should you complete the script? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Part 1:

az group create --location westeurope --name myResourceGroup ______ --name $webappname --resource-group myResourceGroup --sku FREE

Part 2:

______ --repo-url $gitrepo --branch master --manual-integration

Part 3:

______ source config --name $webappname --resource-group myResourceGroup

Part 4:

______ --repo-url $gitrepo --branch master --manual-integration

Question 7

HOTSPOT - You are developing a solution that uses the Azure Storage Client library for .NET. You have the following code: (Line numbers are included for reference only.)

CloudBlockBlob src = null;
try
{
    src = container.ListBlobs().OfType().FirstOrDefault();
    var id = await src.AcquireLeaseAsync(null);
    var dst = container.GetBlockBlobReference(src.Name);
    string cpid = await dst.StartCopyAsync(src);
    await dst.FetchAttributeAsync();
    return id;
}
catch (Exception e)
{
    throw;
}
finally
{
    if (src != null)
        await src.FetchAttributesAsync();
    if (src.Properties.LeaseState != LeaseState.Available)
        await src.BreakLeaseAsync(new TimeSpan(0));
}

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Part 1:

The code creates an infinite lease

Part 2:

The code at line 06 always creates a new blob

Part 3:

The finally block releases the lease

Question 8

(Select 2)

You are preparing to deploy a website to an Azure Web App from a GitHub repository. The website includes static content generated by a script. You plan to use the Azure Web App continuous deployment feature. You need to run the static generation script before the website starts serving traffic. What are two possible ways to achieve this goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Question 9

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms. If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised. You need to store the intake forms according to the requirements. Solution:

Create an Azure Key Vault key named skey.
Encrypt the intake forms using the public key portion of skey.
Store the encrypted data in Azure Blob storage. Does the solution meet the goal?

Question 10

HOTSPOT - You need to configure API Management for authentication. Which policy values should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Part 1:

Policy ______

Part 2:

Policy section ______

Practice Test #2

Triple AI-Verified Answers & Explanations

Practice Questions

Other Practice Tests

Practice Test #1

Practice Test #3

Practice Test #4

Practice Test #5

Start Practicing Now