0% found this document useful (0 votes)
709 views41 pages

Case Study

This document contains case studies and questions from various topics related to configuring and securing Azure services. It includes multiple choice questions about configuring CDN, virtual machines, function apps, logic apps, integration accounts, and more. For each question, the correct solution is provided.

Uploaded by

Antonio Miralles
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
709 views41 pages

Case Study

This document contains case studies and questions from various topics related to configuring and securing Azure services. It includes multiple choice questions about configuring CDN, virtual machines, function apps, logic apps, integration accounts, and more. For each question, the correct solution is provided.

Uploaded by

Antonio Miralles
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 41

Case Study

Wide World Importers -6


7/1 - 7/2 - 12/1 - 12/2 - 23/1 - 23/2

· Topic 7 / Question 1

You need to configure Azure CDN for the Shipping web site. Which configuration options
should you use?

Solution:

Standard // Akamai // Dynamic site acceleration


· Topic 7 / Question 2

You need to correct the VM issues. Which tools should you use?

Solution:

Azure Backup // Accelerated Networking

· Topic 12 / Question 1

You need to secure the Shipping Function app. How should you configure the app?
Solution:

Anonymous // JSON Web Token (JWT) // HTTP

· Topic 12 / Question 2

You need to secure the Shipping Logic App. What should you use?

A. Azure App Service Environment (ASE)

B. Integration Service Environment (ISE)

C. VNet service endpoint

D. Azure AD B2B integration

Solution:

B. Integration Service Environment (ISE)

· Topic 23/ Question 1

You need to support the message processing for the ocean transport workflow. Which
four actions should you perform in sequence?
Solution:

Create an integration account in the Azure portal // Link the Logic App to the integration
account // Add partners // Update logic app..

· Topic 23/ Question 2

You need to support the requirements for the Shipping Logic App. What should you use?

A. Azure Active Directory Application Proxy

B. Site-to-Site (S2S) VPN connection

C. On-premises Data Gateway

D. Point-to-Site (P2S) VPN connection

Solution:

C. On-premises Data Gateway

Case Study
Litware Inc. -7
8/1 8/2 14/1 14/2 20/1 20/2 20/3

· Topic 8 / Question 1

You need to add code at line PC32 in Processing.cs to implement the GetCredentials
method in the Processing class. How should you complete the code?
Solution:

AzureServiceTokenProvider() // tp.GetAccessTokenAsync(“…”)

· Topic 8 / Question 2

You need to ensure disaster recovery requirements are met. What code should you add at
line PC16?
Solution:

SingleTransferContext // ShouldOverwriteCallbackAsync // true

· Topic 14 / Question 1

You need to add code at line PC26 of Processing.cs to ensure that security policies are
met. How should you complete the code that you will add at line PC26?

Solution:

Var key = await resolver.ResolveKeyAsync(keyBundle.KeyIdentifier.Identifier,


CancellationToken.None); // var x = new BlobEncryptionPolicy(key,resolver); //
cloudBlobClient.DefaultRequestOptions.EncryptionPolicy=X;
· Topic 14 / Question 2

You need to ensure the security policies are met. What code do you add at line CS07 of
ConfigureSSE.ps1?

A. ‫ג‬€"PermissionsToKeys create, encrypt, decrypt

B. ‫ג‬€"PermissionsToCertificates create, encrypt, decrypt

C. ‫ג‬€"PermissionsToCertificates wrapkey, unwrapkey, get

D. ‫ג‬€"PermissionsToKeys wrapkey, unwrapkey, get

Solution:

D. €”PermissionsToKeys wrapkey,unwrapkey, get

· Topic 20/ Question 1

You need to ensure receipt processing occurs correctly. What should you do?

A. Use blob properties to prevent concurrency problems

B. Use blob SnapshotTime to prevent concurrency problems

C. Use blob metadata to prevent concurrency problems

D. Use blob leases to prevent concurrency problems

Solution:

D. Use blob leases to prevent concurrency poblems


· Topic 20/ Question 2

You need to resolve the capacity issue. What should you do?

A. Convert the trigger on the Azure Function to an Azure Blob storage trigger

B. Ensure that the consumption plan is configured correctly to allow scaling

C. Move the Azure Function to a dedicated App Service Plan

D. Update the loop starting on line PC09 to process items in parallel

Solution:

D.Update the loop starting on line PC09 to process ítems in parallel

· Topic 20/ Question 3

You need to resolve the log capacity issue.What should you do?

A. Create an Application Insights Telemetry Filter

B. Change the minimum log level in the host.json file for the function

C. Implement Application Insights Sampling

D. Set a LogCategoryFilter during startup

Solution:

C. Implement Application Insights Sampling


------------------------------------------------------------------------------------------------------------------------

Case Study
Coho Winery produces -6
9/1 9/2 22/1 22/2 28/1 28/2

· Topic 9/ Question 1

You need to configure Azure Cosmos DB. Which settings should you use?
Solution:

Strong // SQL

· Topic 9/ Question 2

You need to retrieve all order line items from Order.json and sort the data alphabetically
by the city. How should you complete the code?

Solution:

Orders o // li // o.line_items // o.address.city


· Topic 22/ Question 1

You need to troubleshoot the order workflow. Which two actions should you perform?

A. Review the API connections.

B. Review the activity log.

C. Review the run history.

D. Review the trigger history.

Solution:

C. Review the run history // D. Review the trigger history

· Topic 22/ Question 2

You need to update the order workflow to address the issue when calling the Printer API
App. How should you complete the code?
Solution:

Fixed // PT10S // 5

· Topic 28/ Question 1

You need to deploy a new version of the LabelMaker application to ACR. Which three
actions should you perform in sequence?

Solution:

Build a new application image by using dockerfile // Create an alias of the image with the
fully qualified path to the registry // Log in to the registry and push image
· Topic 28/ Question 2

You need to access data from the user claim object in the e-commerce web app. What
should you do first?

A. Write custom code to make a Microsoft Graph API call from the e-commerce web app.

B. Assign the Contributor RBAC role to the e-commerce web app by using the Resource
Manager create role assignment API.

C. Update the e-commerce web app to read the HTTP request header values.

D. Using the Azure CLI, enable Cross-origin resource sharing (CORS) from the e-commerce
checkout API to the e-commerce web app.

Solution:

C. Update the e-commerce web app to read the HTTP request header values

------------------------------------------------------------------------------------------------------------------------

Case Study
VanArsdel, Ltd. -10
10/1 10/2 10/3 10/4 15/1 15/2 21/1 29/1 29/2 30/1
· Topic 10/ Question 1

You need to implement the Azure Function for delivery driver profile information. Which
configurations should you use?

Solution:

Microsoft Authentitcation Library (MSAL) // Microsoft Graph

· Topic 10/ Question 2

You need to grant access to the retail store location data for the inventory service
development effort. What should you use?

A. Azure AD access token

B. Azure RBAC role

C. Shared access signature (SAS) token

D. Azure AD ID token

E. Azure AD refresh token


Solution:

C.Shared Access signature (SAS) token

· Topic 10/ Question 3

You need to reliably identify the delivery driver profile information. How should you
configure the system?

Solution:

ID // oid
· Topic 10/ Question 4

You need to secure the Azure Functions to meet the security requirements. Which two
actions should you perform?

A. Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features
enabled.

B. Store the RSA-HSM key in Azure Blob storage with an immutability policy applied to the
container.

C. Create a free tier Azure App Configuration instance with a new Azure AD service
principal.

D. Create a standard tier Azure App Configuration instance with an assigned Azure AD
managed identity.

E. Store the RSA-HSM key in Azure Cosmos DB. Apply the built-in policies for customer-
managed keys and allowed locations.

Solution:

A.Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features
enabled // D. Create a standard tier Azure App Configuration instance with an assigned
Azure AD managed identity

· Topic 15/ Question 1

You need to reduce read latency for the retail store solution. What are two possible ways
to achieve the goal?

A. Create a new composite index for the store location data queries in Azure Cosmos DB.
Modify the queries to support parameterized SQL

and update the Azure Function app to call the new queries.

B. Provision an Azure Cosmos DB dedicated gateway. Update the Azure Function app
connection string to use the new dedicated gateway

endpoint.

C. Configure Azure Cosmos DB consistency to session consistency. Cache session tokens in


a new Azure Redis cache instance after every

write. Update reads to use the session token stored in Azure Redis.

D. Provision an Azure Cosmos DB dedicated gateway. Update blob storage to use the new
dedicated gateway endpoint.
E. Configure Azure Cosmos DB consistency to strong consistency. Increase the RUs for the
container supporting store location data.

Solution:

A.Create a new composite index for the store location data queries in Azure Cosmos DB.
Modify the queries to support parameterized SQL and update the Azure Function app to
call the new queries. // B. Provision an Azure Cosmos DB dedicated gateway. Update the
Azure Function app connection string to use the new dedicated Gateway endpoint.

· Topic 15/ Question 2

You need to audit the retail store sales transactions. What are two possible ways to
achieve the goal?

A. Update the retail store location data upload process to include blob index tags. Create
an Azure Function to process the blob index tags

and filter by store location.

B. Process the change feed logs of the Azure Blob storage account by using an Azure
Function. Specify a time range for the change feed data.

C. Enable blob versioning for the storage account. Use an Azure Function to process a list of
the blob versions per day.

D. Process an Azure Storage blob inventory report by using an Azure Function. Create rule
filters on the blob inventory report.

E. Subscribe to blob storage events by using an Azure Function and Azure Event Grid. Filter
the events by store location.

Solution:

B. Process the change feed logs of the Azure Blob Storage account by using an Azure
Function. Specify a time range for the change feed data // E. Subscribe to blob storage
events by using an Azure Function and Azure Event Grid. Filter the events by store location
· Topic 21/ Question 1

You need to implement event routing for retail store location data. Which configurations
should you use?

Solution:

Azure Blob Storage // Azure Event Grid // Azure Function App


· Topic 29/ Question 1

You need to implement the retail store location Azure Function. How should you
configure the solution?

Solution:

Azure Cosmos DB // Output // Blob storage


· Topic 29/ Question 2

You need to implement the corporate website. How should you configure the solution?

Solution:

Standard // App Service Web App


· Topic 30/ Question 1

You need to implement a solution to resolve the retail store location data issue. Which
three Azure Blob features should you enable?

A. Soft delete

B. Change feed

C. Snapshots

D. Versioning

E. Object replication

F. Immutability

Solution:

A.Soft delete // B.Change feed // D. Versioning

Case Study
Contoso, Ltd. -12
11/1 - 11/2 - 11/3 - 11/4 - 11/5 -16/1 - 16/2 - 27/1 - 27/2 - 31/1 - 31/2 - 31/3
· Topic 11/ Question 1

You need to add markup at line AM04 to implement the ContentReview role.

How should you complete the markup?

Solution:

allowedMemberTypes // User // value

· Topic 11/ Question 2

You need to add code at line AM09 to ensure that users can review content using
ContentAnalysisService. How should you complete the code?
Solution:

“oauth2AllowIdTokenImplicitFlow”:true // “oauth2AllowImplicitFlow”: true

· Topic 11/ Question 3

You need to ensure that network security policies are met. How should you configure
network security?
Solution:

Valid root certificate // Azure Application Gateway

· Topic 11/ Question 4

You need to add YAML markup at line CS17 to ensure that the ContentUploadService can
access Azure Storage access keys. How should you complete the YAML markup?
Solution:

volumeMounts // volumes // secret

· Topic 11/ Question 5

You need to add code at line AM10 of the application manifest to ensure that the
requirement for manually reviewing content can be met. How should you complete the
code?

Solution:

Sid // email

· Topic 16/ Question 1

You need to monitor ContentUploadService according to the requirements. Which


command should you use?

A. az monitor metrics alert create ‫ג‬€"n alert ‫ג‬€"g ‫ג‬€¦ - -scopes ‫ג‬€¦ - -condition "avg
Percentage CPU > 8"
B. az monitor metrics alert create ‫ג‬€"n alert ‫ג‬€"g ‫ג‬€¦ - -scopes ‫ג‬€¦ - -condition "avg
Percentage CPU > 800"

C. az monitor metrics alert create ‫ג‬€"n alert ‫ג‬€"g ‫ג‬€¦ - -scopes ‫ג‬€¦ - -condition "CPU Usage
> 800"

D. az monitor metrics alert create ‫ג‬€"n alert ‫ג‬€"g ‫ג‬€¦ - -scopes ‫ג‬€¦ - -condition "CPU Usage
> 8"

Solution:

C.Az monitor metrics alert create ¬€ “n alert ¬€”g ¬€| --scopes ¬€| --condition “CPU Usage
Usage >800”

· Topic 16/ Question 2

You need to investigate the http server log output to resolve the issue with the
ContentUploadService. Which command should you use first?

A. az webapp log

B. az ams live-output

C. az monitor activity-log

D. az container attach

Solution:

D. Az container attach

· Topic 27/ Question 1

You need to ensure that validation testing is triggered per the requirements. How should
you complete the code segment?
Solution:

imagePushed // repository // topic

· Topic 27/ Question 2

You need to deploy the CheckUserContent Azure Function. The solution must meet the
security and cost requirements. Which hosting model should you use?

A. Premium plan

B. App Service plan

C. Consumption plan

Solution:

B. App Service plan

· Topic 31/ Question 1

You need to store the user agreements. Where should you store the agreement after it is
completed?

A. Azure Storage queue

B. Azure Event Hub

C. Azure Service Bus topic


D. Azure Event Grid topic

Solution:

B. Azure Event Hub

· Topic 31/ Question 2

You need to implement the bindings for the CheckUserContent function. How should you
complete the code segment?

Solution:

[QueueTrigger(“userContent”)] // [Blob(“userContent/{name}”,FileAccess.Write)]
· Topic 31/ Question 3

You need to configure the ContentUploadService deployment. Which two actions should
you perform? Each correct answer presents part of the solution.

A. Add the following markup to line CS23: type: Private

B. Add the following markup to line CS24: osType: Windows

C. Add the following markup to line CS24: osType: Linux

D. Add the following markup to line CS23: type: Public

Solution:

A. Add the fllowing markup to line CS23:type:Private // C. Add the following markup to
line CS24: osType:Linux

------------------------------------------------------------------------------------------------------------------------

Case Study
City Power & Light -12
13/1 - 13/2 - 13/3 - 13/4 - 13/5 - 13/6 - 17/1 - 17/2 - 18/1 - 24/1 - 24/2 - 32/1

· Topic 13/ Question 1

You need to retrieve the database connection string. Which values should you use?
Solution:

Cpandkeyvault // PostgreSQLConn // Environment

· Topic 13/ Question 2

You need to correct the corporate website error. Which four actions should you
recommend be performed in sequence?

Solution:

Generate a certificate // Upload the certificate to Azure Key Vault // Import the certificate
to Azure App Service // Add the certificate thumbprint to the
WEBSITE_LOAD_CERTIFICATES app setting
· Topic 13/ Question 3

You need to configure API Management for authentication. Which policy values should
you use?

Solution:

Validate JWT // Inbound

· Topic 13/ Question 4

You need to authenticate the user to the corporate website as indicated by the
architectural diagram. Which two values should you use?

A. ID token signatura

B. ID token claims

C. HTTP response code

D. Azure AD endpoint URI

E. Azure AD tenant ID

Solution:

A.ID token signature // D. Azure AD endpoint URI


· Topic 13/ Question 5

You need to correct the Azure Logic app error message. Which configuration values
should you use?

Solution:

Anonymous // system-assigned

· Topic 13/ Question 6

You need to configure Azure Service Bus to Event Grid integration. Which Azure Service
Bus settings should you use?
Solution:

Premium // Contributor

· Topic 17/ Question 1

You need to investigate the Azure Function app error message in the development
environment. What should you do?

A. Connect Live Metrics Stream from Application Insights to the Azure Function app and
filter the metrics.

B. Create a new Azure Log Analytics workspace and instrument the Azure Function app
with Application Insights.

C. Update the Azure Function app with extension methods from


Microsoft.Extensions.Logging to log events by using the log instance.

D. Add a new diagnostic setting to the Azure Function app to send logs to Log Analytics.

Solution:

A.Connect Live Metrics Stream from Application Insights to the Azure Function app and
filter the metrics

· Topic 17/ Question 2

You need to configure security and compliance for the corporate website files. Which
Azure Blob storage settings should you use?
Solution:

Shared Access signature (SAS) token // change feed

· Topic 18/ Question 1

You need to correct the RequestUserApproval Function app error.

What should you do?

A. Update line RA13 to use the async keyword and return an HttpRequest object value.

B. Configure the Function app to use an App Service hosting plan. Enable the Always On
setting of the hosting plan.

C. Update the function to be stateful by using Durable Functions to process the request
payload.

D. Update the functionTimeout property of the host.json project file to 15 minutes.

Solution:

C.Update the function to be stateful by using Durable Functions to process the request
payload

· Topic 24/ Question 1

You need to configure the integration for Azure Service Bus and Azure Event Grid. How
should you complete the CLI statement?
Solution:

eventgrid // event-subscription // servicebusqueue

· Topic 24/ Question 2

You need to ensure that all messages from Azure Event Grid are processed. What should
you use?

A. Azure Event Grid topic

B. Azure Service Bus topic

C. Azure Service Bus queue

D. Azure Storage queue

E. Azure Logic App custom connector

Solution:

C.Azure Service Bus queue

· Topic 32/ Question 1

You need to configure the Account Kind, Replication, and Access tier options for the
corporate website's Azure Storage account. How should you complete the configuration?
Solution:

StorageV2 (general purpose v2) // GZRS // Cool

------------------------------------------------------------------------------------------------------------------------

Case Study
Proseware Inc. – 9
19/1 19/2 19/3 19/4 25/1 25/2 25/3 26/1

· Topic 19/ Question 1

You need to implement the Log policy. How should you complete the Azure Event Grid
subscription?
Solution:

WebHook // subjectBeginsWith // Microsof.Storage.BlobCreated

· Topic 19/ Question 2

You need to ensure that the solution can meet the scaling requirements for Policy Service.
Which Azure Application Insights data model should you use?

A. an Application Insights dependency

B. an Application Insights event

C. an Application Insights trace

D. an Application Insights metric

Solution:

D. an Application Insights metric

· Topic 19/ Question 3

You need to implement telemetry for non-user actions. How should you complete the
Filter class?
Solution:

ITelemetryProcessor // ITelemetryProcessor // ITelemetryProcessor // RequestTelemetry //


/health

· Topic 19/ Question 4

You need to ensure that PolicyLib requirements are met. How should you complete the
code segment?

Solution:

ITTelemetryInitializer // Initialize // telemetry.context // EventGridController…


· Topic 25/ Question 1

You need to add code at line EG15 in EventGridController.cs to ensure that the Log policy
applies to all services. How should you complete the code?

Solution:

Status // Succeeded // operationName

· Topic 25/ Question 2

You need to insert code at line LE03 of LoginEvent.cs to ensure that all authentication
events areprocessed correctly. How should you complete the code?
Solution:

Id // eventType // dataVersion

· Topic 25/ Question 3

You need to implement the Log policy. How should you complete the EnsureLogging
method in EventGridController.cs?

Solution:

Logdrop // 15 // UpdateApplicationSettings

· Topic 26/ Question 1

You need to resolve a notification latency issue. Which two actions should you perform?

A. Set Always On to true.

B. Ensure that the Azure Function is using an App Service plan.

C. Set Always On to false.

D. Ensure that the Azure Function is set to use a consumption plan


Solution:

A.Set Always On to true // B. Ensure that the Azure Function is using an App Service plan

You might also like