Answer – B

Here we have to use the copy element to create multiple instances of a resource. We can reference each index value with the help of the copyIndex() function.

An example of this is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on creating multiple resources via ARM templates, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/copy-resources

Correct Answer:

Conceptually, below are the implementation steps:

• Register the backend API App and frontend Web App in Azure AD.
• In Azure Active Directory, allow the frontend Web App to connect to the backend API.
• Enable OAuth 2.0 into the API Management instance and then configure a JWT validation policy that will validate the incoming OAuth token.

Reference:

You can refer to the Microsoft documentation for more details on various ways for protecting an API using the azure active directory:

• https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-protect-backend-with-aad

Answer:  A and D 

While creating a new certificate in the azure Key Vault, first the command that creates a Certificate Policy is required. It specifies the subject name, issuer name, validity and other details. It can be created using the azure PowerShell module New-AzKeyVaultCertificatePolicy

Then we can add the certificate to the KeyVault using Add-AzKeyVaultCertificate command and specifying the KeyVault name, certificate policy and the name of the certificate that is being created.

Options B and C are incorrect as the syntax provided is not the recent PowerShell modules for Azure Key Vault.

Reference:

There are other options including retrieving certificates that be performed using PowerShell, they are available at

• https://docs.microsoft.com/en-us/azure/key-vault/certificates/quick-create-powershell

Answer – B

This is the wrong structure of the filter that needs to be used for this scenario

The right filter structure is as follows

"path": "data/{name}.png"

For more information on the blob trigger, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-blob-trigger?tabs=csharp

Answer – B

This is the wrong structure of the filter that needs to be used for this scenario

The right filter structure is as follows

"path": "data/{name}.png"

For more information on the blob trigger, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-blob-trigger?tabs=csharp

Answer - A

Yes, this is the right approach to creating the filter.

An example of this is also given in the Microsoft documentation

For more information on the blob trigger, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-blob-trigger?tabs=csharp

Answer – D

The first step is to get the current context of the request.

An example of this is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on using Cosmos DB stored procedures, please refer to the following URL

• https://docs.microsoft.com/en-us/rest/api/cosmos-db/stored-procedures

Answer – E

Here we have to use the createDocument method to create a new Cosmos DB document

An example of this is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on using Cosmos DB stored procedures, please refer to the following URL

• https://docs.microsoft.com/en-us/rest/api/cosmos-db/stored-procedures

Answer – B

Here we have to set the body of the response with the new document ID.

An example of this is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on using Cosmos DB stored procedures, please refer to the following URL

• https://docs.microsoft.com/en-us/rest/api/cosmos-db/stored-procedures

Answer – A

If you just need to download the blobs, you just need to have the Storage Blob Data Reader role.

This is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on working with the AzCopy tool, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?tabs=current#step-3-select-the-appropriate-role

Answer – B

Here we have to use the eventhubs keyword.

This is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on working with Event Hubs connection string, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-get-connection-string

Answer – C

Here we have to use the eventhub keyword.

This is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on working with Event Hubs connection string, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-get-connection-string

Answer – B

When you want to get a specific revision number of the secret, you have to use query string parameters.

This is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on getting secret versions, please refer to the following URL

https://learn.microsoft.com/en-us/rest/api/keyvault/secrets/get-secret-versions

Answer – C

Here we need to implement scheduling of messages. This will ensure messages are sent after a certain duration of time.

The Microsoft documentation mentions the following

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on scheduling of messages, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/service-bus-messaging/message-sequencing

Answer – C

For this requirement, we have to set Advanced filters.

An example of this is given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on event grid filtering, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/event-grid/event-filtering

Answer – D

For this requirement, we have to set Advanced filters and filter based on the values

An example of this is given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on event grid filtering, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/event-grid/event-filtering

Answer – B

You would use the Azure Event Grid service to listen to events emitted from the resource group that contains the virtual machines.

This is also given in the Microsoft documentation as an example

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on the actual use case scenario example, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/event-grid/monitor-virtual-machine-changes-event-grid-logic-app

Correct Answer: C

• Option C is CORRECT because "FUNCTIONS_WORKER_RUNTIME": "Custom" is required to define in the local.setting.json file.
• Option A is incorrect because "FUNCTIONS_RUNTIME": "Custom" is not the correct setup.
• Option B is incorrect because "WORKER_RUNTIME": "Custom" is not the correct setup.
• Option D is incorrect because "AZURE_FUNCTIONS_WORKER_RUNTIME": "Custom" is not the correct setup.

Reference:

• https://docs.microsoft.com/en-us/azure/azure-functions/functions-custom-handlers

Correct Answers:

• Option A is correct because to connect and take a remote desktop session, the RDP port 3389 should be enabled.
• Option B is incorrect because port 80 is the default port for HTTP connection. For taking a remote session, allowing this port is not required.
• Option C is correct because by default Ubuntu 18.04 LTS VM in Azure doesn't support a remote desktop environment. xfce is a lightweight desktop environment.
• Option D is incorrect because for initiating a remote desktop session the current SSH public key reset is not required.
• Option E is correct because Ubuntu 18.04 LTS VM in Azure doesn't support a remote desktop service. Hence, an open-source xrdp client can be installed to enable a remote desktop service.

Reference:

For more details on installing and configuring Remote Desktop to connect to a Linux VM in Azure, please check the link: 

• https://docs.microsoft.com/en-us/azure/virtual-machines/linux/use-remote-desktop

Answer – B

You would configure logging in the host.json file.

This is also mentioned in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on monitoring Azure Functions, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/azure-functions/functions-monitoring?tabs=cmd

Answer – B and C

There are different scenarios available in the Microsoft documentation when it comes to maximizing throughput for queues and topics.

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on best practices for Azure Service Bus, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-performance-improvements

Answer – B

Here the ideal solution is to use Azure Cache for Redis. This solution can be used to store session state data.

For more information on using the session state provider for Azure Cache for Redis, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/azure-cache-for-redis/cache-aspnet-session-state-provider

Answer – A

Yes, this is the ideal solution for caching session state data.

For more information on using the session state provider for Azure Cache for Redis, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/azure-cache-for-redis/cache-aspnet-session-state-provider

Answer – B

This service is a data ingestion service and not a caching service.

Here the ideal solution is to use Azure Cache for Redis. This solution can be used to store session state data.

For more information on using the session state provider for Azure Cache for Redis, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/azure-cache-for-redis/cache-aspnet-session-state-provider

Answer – C

Here since you have to ensure that all content expires after an hour, you have to use the Override setting.

Since this setting is used to explicitly set the cache duration, all other settings are incorrect

For more information on Azure CDN cache settings, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/cdn/cdn-caching-rules

Answer – C

Since the requirement mentions that the cache content needs to expire after an hour, we have to choose the setting of 1 hour.

Since the time frame is clearly mentioned in the requirement, all other options are incorrect.

For more information on Azure CDN cache settings, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/cdn/cdn-caching-rules

Answer:  C 

Option A is incorrect because the Azure active directory BSB would enable users from an external organization to collaborate with your organization. It won’t be useful in social media identity providers.

Option B is incorrect because enabling MFA only won’t be helpful in achieving the objective of allowing social media identity providers to authenticate users.  

Option C is CORRECT because Azure Active Directory B2C offers a solution to authenticate users through external social media identity providers as well as other organizations. It will help us achieve the objective of this use case.  

Option D is incorrect because won’t be helpful in achieving the objective of allowing social media identity providers to authenticate users.

Reference:

More details on Azure Active Directory B2C and its use cases are available in the following link:

• https://docs.microsoft.com/en-us/azure/active-directory-b2c/overview

Answer – A

Here we have to use the Get-AzRoleDefinition command.

An example of this is also given in the Microsoft documentation

Option B is incorrect since we have to use the Get-AzRoleDefinition command.

Option C is incorrect since the Owner role would have excess permissions that are not required for this scenario

Option D is incorrect since we have to use the ConvertTo-Json option

For more information on creating custom roles, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles-powershell

Answer – A

If you look at the Reader role in the documentation, here you can see that the Action of “*/read” evaluates to giving read permissions for the resources.

And if you look at a role that has support to raise a support ticket, you will see the following action

Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect

For more information on the built-in roles in Azure, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Answer - B

To create a new container instance, we have to use the az container create command

This is also given in the Microsoft documentation

Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect

For more information on Azure container instances, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart

Answer - D

To pull the container logs, we have to use the az container logs command

This is also given in the Microsoft documentation

Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect

For more information on Azure container instances, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/container-instances/container-instances-quickstart

Answer – D

Here we have to use the CreateContainerAsync class.

An example of this is also given in the Microsoft documentation

Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect

For more information on working with the time to live property for the items in Azure Cosmos DB, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-time-to-live

Answer – A

Here we have to set the property of DefaultTimeToLive

An example of this is also given in the Microsoft documentation

Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect

For more information on working with the time to live property for the items in Azure Cosmos DB, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-time-to-live

Answer – B

To get the properties of the container, we first have to use the GetPropertiesAsync(); method.

An example of this is also given in the Microsoft documentation

Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect

For more information on working with blob properties and metadata, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-container-properties-metadata

Answer – B

Here we can use the Properties property to work with the container level properties

An example of this is also given in the Microsoft documentation

Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect

For more information on working with blob properties and metadata, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-container-properties-metadata

Answer – A

If you look at the Microsoft documentation, when it comes to File compression for the Azure Front Door service, the XML MIME extension is supported.

For more information on Azure Front Door caching, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/frontdoor/front-door-caching

Answer – A

If you look at the Microsoft documentation, when it comes to File compression for the Azure Front Door service, the compression type is supported.

For more information on Azure Front Door caching, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/frontdoor/front-door-caching

Answer – B

If you need to order by multiple properties, you have to define a composite index

A Similar example of this is also given in the Microsoft documentation

Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect

For more information on indexes in Azure Cosmos DB, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-manage-indexing-policy

Answer – E

Here since we need to order by both properties in ascending order, we need to use the ascending keyword

A similar example of this is also given in the Microsoft documentation

Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect

For more information on indexes in Azure Cosmos DB, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-manage-indexing-policy

Answer – B

We can use the az container attach command for this purpose.

This is also given in the Microsoft documentation

Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect

For more information on getting container instance logs, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/container-instances/container-instances-get-logs

Answer – A

What is the user's agreement?

When a user submits content, they must agree to a user agreement. The agreement allows employees of the company to review content, store cookies on user devices and track user’s IP addresses.

Based on the number of agreements generated per hour, it's best to first ingest the data into Azure Event Hubs. Once the agreements are ingested into Azure Event Hubs, store the user's agreements data into Azure Blob storage.

URL: https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-faq#general

The other services mentioned as options are not ideal to use when you have so many agreements to ingest.

Option D: table storage is a non-relational NoSQL database and can not be used to store user documents. Hence this is not the correct answer

For more information on Azure Event Hubs, please refer to the following URL

https://docs.microsoft.com/en-us/azure/event-grid/compare-messaging-services

Answer – B

Here we have to specify the volumeMounts property.

An example is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on accessing secrets from within containers, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/container-instances/container-instances-volume-secret

Answer – C

Here we have to mention the volumes property

An example is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on accessing secrets from within containers, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/container-instances/container-instances-volume-secret

Answer – D

Here we have to mention the secret property

An example is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on accessing secrets from within containers, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/container-instances/container-instances-volume-secret

Answer – B

To fetch the properties of a Blob , you need to use the FetchAttributesAsync() method.

And then to set the metadata properties, you have to issue the Metadata.Add() and SetMetadataAsync() method.

For more information on working with properties and metadata from .Net, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-properties-metadata

Answer – B

No, this is not the right sequence of steps.

The correct steps are:
GetPropertiesAsync();
Metadata.Add();
SetMetadataAsync();

The Microsoft documentation mentions the following

For more information on working with properties and metadata from .Net, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-properties-metadata?tabs=dotnet

Answer – B

Here the requirement is "fetch and set metadata"

To retrieve metadata, call the GetProperties or GetPropertiesAsync method on your blob or container to populate the Metadata collection, then read the values.

To set metadata, add name-value pairs to the Metadata collection on the resource. Then, call one of the following methods to write the values:
SetMetadata
SetMetadataAsync

For more information on working with properties and metadata from .Net, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-properties-metadata

Answer – B and C

When you create an Azure Service Bus queue or topic, you can literally mention years and years for the messages to remain in either the queue or topic.

Options A and D are incorrect since here the messages have a maximum retention of 7 days.

For more information on message expiration for Azure Service Bus, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/service-bus-messaging/message-expiration

Answer – A

Here the issue could be that the Azure Function is executing in parallel and taking up all the connections in the connection pool. You can either increase the connection pool property on the database side or change the host.json file and edit the batchSize property which tells how many parallel executions should be allowed for the functions defined in the function app.

The Microsoft documentation mentions the following on the property

Since this is the ideal logical step to take, all other options are incorrect

For more information on the function bindings for storage queues, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-queue-output

Answer – B

Here we need to use the eventhub keyword to create an event hub

An example of this is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on creating events for the event hub service, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/event-grid/custom-event-to-eventhub

Answer - A

Here we need to use the eventgrid keyword to create a subscription onto Azure Event Grid

An example of this is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on creating events for the event hub service, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/event-grid/custom-event-to-eventhub

Answer – B

Here we need to use the eventhub keyword as the endpoint type

An example of this is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on creating events for the event hub service, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/event-grid/custom-event-to-eventhub

Answer – C

Here we have to create an object of the class type EventDataBatch

An example of this is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on send events to Azure Event Hub, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/event-hubs/get-started-dotnet-standard-send-v2

Answer - D

Here we have to invoke the method of CreateBatchAsync

An example of this is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on send events to Azure Event Hub, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/event-hubs/get-started-dotnet-standard-send-v2

Answer – A

Here we invoke the method of SendAsync to send the messages to the event hub

An example of this is also given in the Microsoft documentation

Since this is clearly given in the Microsoft documentation, all other options are incorrect

For more information on send events to Azure Event Hub, please refer to the following URL

• https://docs.microsoft.com/en-us/azure/event-hubs/get-started-dotnet-standard-send-v2