Tüm alıştırma soruları

An administrator reports that querying telemetry data in Log Analytics for an Azure App Service web application is frequently timing out and exceeding workspace query scan limits.

The `dependencies` table contains the following sample schema and records:

You need to write an optimized Kusto Query Language (KQL) query that identifies the 95th percentile of the duration of all failed external HTTP dependency calls over the last 24 hours, grouped by the target of the dependency.

Which Kusto Query Language (KQL) query should you use to retrieve the required data while minimizing resource utilization?

You are developing a secure web application that runs on an Azure Virtual Machine. The application must generate a temporary URI to allow external clients to download PDF reports from a private Azure Blob Storage container named reports. To meet security requirements, you must not use storage account keys. Instead, you configure a User-Assigned Managed Identity for the Virtual Machine. In the application code, you successfully request a User Delegation Key and build a Shared Access Signature (SAS) token using the Azure.Storage.Blobs SDK. The SAS token is configured with read permissions and a lifetime of $1$ hour. However, when external clients attempt to download a report using the generated SAS URI, they receive an HTTP $403$ (Forbidden) error. You verify that the Virtual Machine's managed identity has been assigned the Storage Blob Delegator role at the storage account level. Which action should you perform to resolve the HTTP $403$ error?

You are deploying an ASP.NET Core web application to an Azure App Service. The application must retrieve secrets from an Azure Key Vault using a user-assigned managed identity. The application code uses DefaultAzureCredential from the Azure.Identity SDK to authenticate. Which sequence of steps should you perform to configure the environment and enable secure access?

You are deploying a web application to multiple Azure App Services in different regions. The applications need to retrieve a database connection string stored in an Azure Key Vault named `kv-checkout-prod`.

The Azure Key Vault is configured to use the Azure role-based access control (Azure RBAC) permission model for authorization. To simplify permission management across all regions and avoid recreating role assignments when App Services are redeployed, you decide to use a single user-assigned managed identity named `id-checkout-prod`.

You need to configure the App Services to retrieve the secret value using this identity while adhering to the principle of least privilege.

Which configuration should you apply?

An enterprise hotel management application uses Azure Cosmos DB to store reservation details. The container uses the guest's ID (guestId) as the partition key. You are writing a C# helper method using the Azure Cosmos DB .NET SDK v3 that retrieves an existing booking, modifies the check-out date, and saves the changes back to the database.

Which sequence of code statements must you execute to complete these tasks?

You are preparing to deploy a secure backend microservice to Azure Container Apps. The container image for the microservice is stored in a private Azure Container Registry (ACR). You must configure the Container App to pull the image from the private ACR using a user-assigned managed identity. Which four actions should you perform in sequence? To answer, arrange the actions in the correct order.

You are configuring an Azure CDN Standard from Akamai endpoint to deliver a game configuration file named config.json for a mobile game. The mobile client appends a unique, dynamic user session identifier as a query string parameter, such as config.json?session=usr_98231, to every request. The configuration file contents are identical for all users and change only during scheduled maintenance. You need to configure the CDN endpoint to minimize origin server load and maximize cache performance. Which query string caching behavior should you configure?

You are deploying a C# ASP.NET Core web application to an Azure App Service. In the Program.cs file, you register the telemetry services using builder.Services.AddApplicationInsightsTelemetry(). After deploying and running the application, you observe that no telemetry data is displayed in your Application Insights resource in the Azure portal. Which of the following configuration issues is the most likely cause of this behavior?

An organization has a web application deployed to Azure App Service named app-payment-prod. The application needs to retrieve a database connection string stored as a secret in an Azure Key Vault named kv-payment-prod. The Key Vault is configured to use the Azure Role-Based Access Control (Azure RBAC) authorization model. You must implement access using the principle of least privilege. Which set of configuration steps should you perform to grant the web application access to the Key Vault secret?

An Azure App Service web application logs performance and error telemetry to an Azure Application Insights resource. You need to write a Kusto Query Language (KQL) query to retrieve the top 10 slowest external dependency calls based on their average duration over the past 24 hours. The results must only include dependencies associated with failed web requests. To prevent query performance degradation and avoid scanning excessive telemetry data outside the target window, the query must be optimized. Which KQL query should you execute?

You are configuring a Java web application hosted on Azure App Service to load configuration settings from an Azure App Configuration store. The application needs to retrieve a database password stored in an Azure Key Vault named kv-prod.

In the Azure App Configuration store, you create a key-value pair where the key is DbPassword and the value is set to {"uri":"https://kv-prod.vault.azure.net/secrets/db-pass"}. During application startup, the App Configuration provider library retrieves the DbPassword configuration, but logs show the value is received as the raw JSON string {"uri":"https://kv-prod.vault.azure.net/secrets/db-pass"} instead of the resolved secret. The App Service is configured with a system-assigned managed identity that has the 'Key Vault Secrets User' role on kv-prod.

Which of the following actions should you take to ensure the secret is correctly resolved by the application?

You are designing an Azure Durable Functions application to orchestrate a nightly data migration process. The workflow starts by retrieving a list of database tables and then fans out to run a migration activity function for each table in parallel. The activity function for each table performs heavy data transformations and can take up to 20 minutes to complete. The migration process must run securely, requiring the functions to access an Azure SQL Database via a private endpoint, which necessitates virtual network (VNet) integration. You need to select the most cost-effective Azure Functions hosting plan that supports both the execution time and the network requirements. Which Azure Functions hosting plan should you choose?

Your team is configuring a distributed C# application hosted on an Azure Virtual Machine Scale Set (VMSS) to access an Azure Storage account. Multiple VMSS instances will be scaled out and in dynamically. The identity used for accessing the storage account must persist independently of the VMSS lifecycle.

Which two configurations are required to ensure the application can successfully authenticate and read blobs from the storage account using the Azure.Identity library? (Select two.)

You are developing a worker utility in C# that processes queue messages. You need to configure Application Insights telemetry programmatically without using dependency injection. Complete the following C# code snippet to initialize the telemetry configuration and apply the connection string. What are the correct API members to write in the blanks?

You are developing a serverless workflow using Azure Durable Functions. You need to sequence the execution and replay steps of a basic orchestration that starts, runs a single activity function, and completes. Move the events to the correct order in which they occur during this execution lifecycle.

You are designing an integration solution that uses Azure Event Grid to route messages to a custom Webhook endpoint. You need to configure an Event Grid subscription for a custom topic with the following requirements:
- The subscription must write any events that cannot be delivered to an Azure Blob Storage container named undelivered.
- The subscription must authenticate to the Storage account using its own system-assigned managed identity to write the dead-lettered events.
- The Webhook endpoint must successfully receive events by completing the standard synchronous validation handshake during subscription creation.

Which set of configurations must you implement to meet these requirements?

You are implementing an Azure Event Grid solution. You need to configure dead-lettering for an Event Grid subscription that routes events from a custom topic to an Azure Queue Storage queue. The dead-lettered events must be securely stored in an Azure Blob Storage container using a system-assigned managed identity.

Which four actions should you perform in sequence to configure and test this dead-lettering solution? To answer, arrange the actions in the correct order.

An enterprise web application is hosted on a Windows-based Azure App Service. The application occasionally returns HTTP 500 Internal Server Error responses during startup and routing processes, but standard application traces do not contain enough detail about which IIS module or pipeline step is causing the failure. You need to capture detailed trace reports for these specific HTTP 500 errors, including the execution time and status of each IIS module in the request pipeline. Which diagnostic logging feature should you enable?

You are developing a C# backend service for a multi-tenant SaaS document editor. The Azure Cosmos DB container contains document metadata and is configured with Session consistency. The container's partition key is `/tenantId`.

Initially, the development team considered partitioning the container by a status field, `/isArchived`, but chose `/tenantId` to avoid hot partitions.

A user reports that when they modify a document on one device, the updated metadata is not immediately visible when they open the application on another device (which runs in a separate client session). You capture the session token from the write operation's response on the first device as `capturedSessionToken`.

You need to perform a point read on the second device to guarantee that the user reads the latest update.

Which C# code segment should you use?

You are developing an ASP.NET Core Web API named InventoryAPI that exposes operations to manage warehouse inventory. You register InventoryAPI in Microsoft Entra ID. You need to configure permissions and scopes to support the following client applications:

1. InventorySPA: A Single Page Application where warehouse employees sign in and manage stock. The application must perform operations on behalf of the signed-in user.
2. InventoryDaemon: A background console application that syncs stock levels from an external system overnight. The daemon runs without user interaction.

Which two configurations should you perform to support these applications using the principle of least privilege?