All practice questions
972 questions
An Azure App Service web app retrieves secrets from an Azure Key Vault. You configure Application Insights to monitor the web app. During testing, you find that no telemetry data is arriving in Application Insights. In addition, you must establish an alert that sends an email to the operations team if the Key Vault's overall availability falls below 99% over a 5-minute interval. Which configuration should you implement to resolve the telemetry issue and set up the alert?
You are developing a serverless monitoring solution using Azure Durable Functions in C# (.NET Isolated). The orchestrator function is designed to poll an external database migration status endpoint every minutes until the status returns as 'Success' or 'Failed'. To comply with orchestrator constraints and avoid wasting resources, the orchestrator must yield execution and release the thread between status checks.
Which code segment should you use in the orchestrator function to implement the -minute wait?
await context.CreateTimer(nextCheck, CancellationToken.None);
await context.CreateTimer(nextCheck, CancellationToken.None);
An administrator provisions a new Azure API Management (APIM) instance and imports several backend services as APIs. You need to configure APIM to package these APIs and allow external developers to register and obtain subscription keys to consume them.
Which two components must you configure in APIM to achieve this goal? (Select two.)
Select all that apply
You are troubleshooting an application error on a Windows-based Azure App Service named `marketing-prod` in a resource group named `marketing-rg`.
You need to perform the following tasks:
1. Enable verbose-level application logging to the file system.
2. Monitor the log messages in real-time as they occur.
3. Generate telemetry by sending HTTP requests to the application.
4. Download the historical log files locally for offline review.
Which sequence of Azure CLI commands and actions should you perform? To answer, arrange the actions in the correct order.
Drag items to arrange them in the correct order
You are deploying a backend worker service as an Azure Container App named `order-processor`. The app needs to process messages from an Azure Service Bus queue named `orders` and scale dynamically between and replicas based on the queue depth. You are configuring this deployment using a Bicep template.
Which two of the following configurations must you define in the Bicep template to meet these scaling requirements? (Select two.)
Select all that apply
You are configuring an Azure Monitor alert rule to notify your operations team when a critical application error occurs. You need to configure the Azure Monitor Action Group that will handle the response.
Which of the following actions are supported directly within an Azure Monitor Action Group? (Select two).
Select all that apply
You are developing a Single Page Application (SPA) using React and MSAL.js . The application must authenticate users using the Microsoft Identity Platform and call a downstream secured Microsoft Graph API. You register the application in the Microsoft Entra admin center. Under the Authentication blade, you add a redirect URI of `http://localhost:3000` but configure the platform type as Web instead of Single-page application. During testing, users can successfully sign in and the application receives an authorization code. However, when the application attempts to exchange the authorization code for an access token, the token endpoint returns an error. You need to resolve the error and ensure that the application can successfully acquire access tokens. Which of the following actions should you perform?
A manufacturing company is implementing an Azure Event Grid custom topic to process telemetry reports from IoT sensors. Individual telemetry payloads can reach up to in size. You plan to configure an Event Grid subscription that routes these events directly to an Azure Queue Storage queue for processing by a background service. Which statement correctly identifies the limitation of this design and the appropriate solution?
A developer hosts a web application on a Windows-based Azure App Service. To troubleshoot intermittent database connection errors, the developer enables Application Logging (Filesystem) with a level of Verbose. Two days later, the developer notices that new log files are no longer appearing in the filesystem, even though the database connection errors are still occurring. Which of the following explains why the log files are no longer being generated?
You are developing a C# application that updates the metadata and changes the access tier of an existing blob using the `Azure.Storage.Blobs` SDK. The blob is currently protected by an active write lease. You also need to retrieve the updated metadata to verify the changes.
Which two actions must you perform? (Select two.)
Select all that apply
You are developing a secure application in C# that interacts with an Azure Storage account. The application must generate a Shared Access Signature (SAS) token to grant an external service temporary read and write permissions to a private blob container named invoices. The solution must meet the following security requirements:
- Access must be limited to HTTPS only.
- The storage account access keys must not be exposed or used to sign the SAS.
- The SAS must be valid for exactly two hours, starting immediately, while accounting for potential clock synchronization differences between clients and Azure.
Which two actions should you perform to create the SAS token? (Select two.)
Select all that apply
You are implementing an alert rule in Azure Monitor to detect when an Azure App Service web app exceeds its allocated memory limit. When the alert fires, you want to send an email notification to the operations team and trigger a webhook.
Which Azure Monitor resource must you configure and associate with the alert rule to define these notification and routing actions?
You are configuring caching for an Azure CDN Standard from Microsoft endpoint. The endpoint distributes content for a web application that includes:
- Static product images under `/images/products/` which should be cached long-term.
- An API endpoint at `/api/inventory/status` that returns real-time stock levels and must not be cached by the CDN.
- A search page at `/search` that displays results based on a query parameter named `q`. Each unique search query must be cached independently to optimize performance for recurring searches.
Which two configuration settings should you apply to the Azure CDN endpoint? (Select two.)
Select all that apply
You are developing a C# service that manages smart-home IoT devices using the Azure Cosmos DB .NET SDK v3. The container stores configuration settings and is partitioned by the `/deviceId` path. The database uses Session consistency. When a device's settings are updated, your service must replace the existing document, retrieve the resulting session token to pass to other reading clients, and ensure the write operation is routed to the correct partition. Which C# code segment should you use?
string sessionToken = response.Headers.Session;
string sessionToken = response.Headers.Session;
string sessionToken = response.Headers.Session;
string sessionToken = response.RequestCharge.ToString();
Your company is developing a background service to process telemetry from an Azure Event Hub. The service is written in C# using the .NET SDK, and it utilizes the `EventProcessorClient` class. To coordinate partition ownership and perform checkpointing, the service uses an Azure Blob Storage container as its checkpoint store.
Which configuration or permission is required to ensure that the `EventProcessorClient` can successfully coordinate partition ownership between multiple running instances of the service?
You are troubleshooting performance issues in an Azure web application. You need to write a Kusto Query Language (KQL) query in Application Insights to analyze external dependency calls.
The query must meet the following requirements:
- Retrieve data logged in the last hours.
- Identify dependency calls that took longer than seconds to complete.
- Group the results by the target and type of the dependency.
- Calculate the percentile of the duration for each group.
- Execute with optimal performance and minimize the volume of scanned telemetry data.
Which two of the following KQL queries should you use to satisfy these requirements?
Select all that apply
| where timestamp > ago(12h)
| where duration > 2000
| summarize percentiles(duration, 90) by target, type
| where timestamp > ago(12h) and duration > 2000
| summarize percentiles(duration, 90) by target, type
| where duration > 2000
| summarize percentiles(duration, 90) by target, type
| where duration > 2000
| summarize percentiles(duration, 90) by target, type
| where timestamp > ago(12h)
| where timestamp > ago(12h)
| where duration > 2
| summarize percentiles(duration, 90) by target, type
You are setting up monitoring for a multi-tier web application. You need to configure an Azure Monitor Log Search alert rule to detect critical database exceptions logged to Application Insights, and configure an Action Group to notify your DevOps team via their internal API endpoint. Which two configurations should you implement to achieve this?
Select all that apply
You provision a new Azure API Management (APIM) instance. You need to configure the APIM instance to authenticate securely to a backend Azure App Service API without storing any credentials, connection strings, or certificates in the APIM configuration. What should you configure first on the API Management instance?
An organization plans to host a background task container in Azure Container Apps. The container image is stored in a private Azure Container Registry named `myregistry.azurecr.io`. A developer creates a user-assigned managed identity named `my-pull-identity` to allow secure access to the registry. The Bicep template includes the user-assigned managed identity in the top-level `identity` block of the Container App resource.
To ensure the container app can successfully authenticate and pull the image from the private registry during deployment, which code block must be included inside the `properties` section of the Container App resource definition?
registries: [
{
server: 'myregistry.azurecr.io'
identity: myPullIdentity.id
}
]
}
registries: [
{
server: 'myregistry.azurecr.io'
identity: 'System'
}
]
}
registries: [
{
server: 'myregistry.azurecr.io'
username: 'my-pull-identity'
passwordRef: 'acr-password'
}
]
}
registries: [
{
server: 'myregistry.azurecr.io'
identity: myPullIdentity.name
}
]
}
An organization hosts a web application where static assets are updated periodically. To force client browsers and CDN edge servers to retrieve the latest version of an asset, the application appends a version parameter as a query string to the asset URL, such as `/assets/logo.png?v=2`. You deploy an Azure CDN Standard from Akamai endpoint to distribute these assets. You need to ensure that when a new version of an asset is released with an updated query string parameter, the CDN retrieves the updated asset from the origin server. For subsequent requests with the same version query string, the CDN must serve the cached asset from the edge cache to minimize origin load. Which query string caching behavior should you configure on the Azure CDN endpoint?