All practice questions
972 questions
Match each Azure Monitor autoscale parameter on the left to its correct functional description on the right.
Click a left item, then click its matching right item
Items
Matches
An organization requires that all client requests to a public API gateway verify a JSON Web Token (JWT) before the request is routed to any backend microservice. A developer is adding the `<jwt-validate>` policy.
In which policy section must this policy be defined?
You are implementing an ASP.NET Core Web API controller that serves as a Webhook endpoint for an Azure Event Grid subscription. During the creation of the event subscription, the deployment fails with a validation handshake error. You verify that the controller receives the validation request, returns an HTTP 200 OK status code, and includes the validation code as a plain text string in the response body. Which action must you take to resolve the validation handshake failure?
You are developing a batch processing system in C# that optimizes storage costs. The system retrieves blobs from a Hot container, adds a metadata key-value pair of "ArchivedBy: BatchProcessor", and then transitions them to the Archive access tier using the Azure.Storage.Blobs SDK.
The current implementation contains the following code:
csharp
// blobClient is a valid instance of BlobClient
await blobClient.SetAccessTierAsync(AccessTier.Archive);
var metadata = new Dictionary<string, string> { { "ArchivedBy", "BatchProcessor" } };
await blobClient.SetMetadataAsync(metadata);
During testing, the system throws a RequestFailedException at the last line.
Which of the following changes must you make to resolve this error?
A web application stores user shopping cart data in an Azure Cache for Redis instance. The application does not specify an expiration time (Time to Live) for the cache keys. You need to configure the cache to automatically evict the least recently used keys across the entire dataset when memory limit is reached. Which maxmemory eviction policy should you configure?
You manage an Azure App Service plan hosting a critical web application. You have configured an Azure Monitor metric alert rule that uses dynamic thresholds to detect CPU spikes and trigger an action group to notify the operations team. A scheduled database synchronization job runs daily from 02:00 to 03:00 UTC, causing legitimate CPU spikes that trigger false positive alerts. You need to prevent notifications from being sent to the operations team during this period while keeping the alert rule active for reporting and historical analysis. What should you configure to achieve this?
A developer is configuring a multi-tenant web application in Microsoft Entra ID. The application manifest has the signInAudience parameter configured as AzureADMultipleOrgs. The developer wants to configure the authentication middleware in the application to redirect users to the correct Microsoft identity platform endpoint so that users from any organizational tenant can sign in, but personal Microsoft accounts (such as Xbox or Outlook accounts) are excluded. Which authority URL should the developer configure for the authentication endpoint?
You are setting up an API gateway in Azure API Management. You need to restrict client access to a specific range of IP addresses and enable response caching for incoming requests. Which two of the following policy elements must be placed inside the <inbound> section of the policy XML to achieve this?
Select all that apply
You are developing a background service in C# that uses the Azure Cosmos DB .NET SDK v3 Change Feed Processor to process document updates from a monitored container. Which of the following statements correctly describes the configuration or behavior of the Change Feed Processor?
You are configuring Application Insights telemetry in a C# console application. You need to enrich all telemetry sent to Application Insights with a custom cloud role name by implementing and registering a telemetry initializer.
Complete the code snippet by identifying the correct types and properties for each blank.
Fill in the blanks below
using Microsoft.ApplicationInsights.Extensibility;
// A custom initializer to enrich all telemetry with cloud role details
public class CloudRoleNameInitializer :
{
public void Initialize( telemetry)
{
telemetry.Context.Cloud.RoleName = "OrderProcessingService";
}
}
// In the application startup code:
var config = TelemetryConfiguration.CreateDefault();
config.ConnectionString = "ConnectionStringValue";
config..Add(new CloudRoleNameInitializer());
You are configuring an existing Azure API Management instance to be deployed inside an Azure Virtual Network in Internal mode. You need to ensure that internal clients can successfully resolve and access the API gateway. Which sequence of steps should you perform?
Drag items to arrange them in the correct order
You are configuring Azure Monitor autoscale rules for different workloads. Match each scaling requirement on the left to its correct Azure Monitor metric and time aggregation configuration on the right.
Click a left item, then click its matching right item
Items
Matches
You are designing a monitoring solution for a critical REST API hosted behind Azure API Management (APIM). The backend service dynamically adds a custom response header named `X-Backend-Server` to indicate which server instance processed the request. The monitoring solution must meet the following requirements:
1. Send an HTTP POST request to `https://api.contoso.com/health` with a JSON payload of `{"ping": true}` every 5 minutes.
2. Verify that the response status code is 200.
3. Verify that the response contains the `X-Backend-Server` header to ensure routing is functioning correctly.
4. Report the test duration, location, and success status as availability metrics to Application Insights.
You need to implement the availability monitoring solution. Which of the following should you do?
You are developing a solution that uses Azure Event Grid to route system events from an Event Grid custom topic to a Webhook. You must ensure that any events that cannot be delivered are routed to a container named "deadletters" in an Azure Storage account named "mystorage2026". The solution must secure access to the storage account by using a system-assigned managed identity associated with the custom topic. Which four actions should you perform in sequence? To answer, arrange the actions in the correct order.
Drag items to arrange them in the correct order
A logistics company runs a warehouse management system that processes package delivery messages from an Azure Service Bus queue. The processing application must meet the following requirements:
- Ensure that messages are only removed from the queue after they are successfully processed.
- If the application crashes or fails during processing, the message must automatically become visible to other instances of the receiver after the lock duration expires.
- Follow the principle of least privilege for security configuration.
Which two actions should you perform to implement this solution? (Select two.)
Select all that apply
You are developing a C# console application that updates the metadata of a block blob in Azure Blob Storage. The application uses the Azure.Storage.Blobs SDK (version 12). To prevent other processes from modifying the blob during the update, you must acquire a write lease on the blob, perform the metadata update, and then release the lease.
Which five actions should you perform in sequence? To answer, arrange the actions in the correct order.
Drag items to arrange them in the correct order
A developer is configuring an Azure API Management (APIM) instance to expose a backend API. The backend API includes a custom response header named `X-Backend-Version` that contains sensitive version information. The developer needs to remove this header from all responses before they are returned to the client. In which policy section must the policy to remove this header be placed?
You are developing a C# background service that processes real-time transaction updates from an Azure Cosmos DB container using the .NET SDK v3 Change Feed Processor.
You need to initialize and run the Change Feed Processor.
In which order should you execute the steps? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Drag items to arrange them in the correct order
You are configuring a multi-tenant web application registration in Microsoft Entra ID. The application must allow users from any organizational Microsoft Entra ID tenant to sign in, but it must explicitly block users signing in with personal Microsoft accounts (such as outlook.com or hotmail.com). Which two configurations should you implement to satisfy this requirement? (Select two)
Select all that apply
An online retail inventory application is hosted on an Azure Virtual Machine (VM) and uses a C# worker service with the Azure.Messaging.EventHubs.Processor library to consume messages from an Azure Event Hub. The application uses a system-assigned managed identity to authenticate and utilizes an Azure Blob Storage container as a checkpoint store for partition load balancing. When the service starts up, it connects to the Event Hub successfully but fails to process partitions, throwing an error indicating that it is unauthorized to perform operations on the blob checkpoint container. You need to configure the minimal permissions required to allow the EventProcessorClient to initialize, manage partition leases, and write checkpoints. Which of the following actions should you perform?