HOTSPOT - You need to configure the integration for Azure Service Bus and Azure Event Grid. How should you complete the CLI statement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
Box 1: eventgrid - To create event subscription use: az eventgrid event-subscription create Box 2: event-subscription - Box 3: servicebusqueue - Scenario: Azure Service Bus and Azure Event Grid Azure Event Grid must use Azure Service Bus for queue-based load leveling. Events in Azure Event Grid must be routed directly to Service Bus queues for use in buffering. Events from Azure Service Bus and other Azure services must continue to be routed to Azure Event Grid for processing. Reference: https://docs.microsoft.com/en-us/cli/azure/eventgrid/event-subscription?view=azure-cli-latest#az_eventgrid_event_subscription_create
Question 342
You need to ensure that all messages from Azure Event Grid are processed. What should you use?
A. Azure Event Grid topic
B. Azure Service Bus topic
C. Azure Service Bus queue
D. Azure Storage queue
E. Azure Logic App custom connector
As a solution architect/developer, you should consider using Service Bus queues when: - Your solution needs to receive messages without having to poll the queue. With Service Bus, you can achieve it by using a long-polling receive operation using the TCP-based protocols that Service Bus supports. Reference: https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-azure-and-service-bus-queues-compared-contrasted
Question 343
DRAG DROP - You need to add code at line EG15 in EventGridController.cs to ensure that the Log policy applies to all services. How should you complete the code? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:
Scenario, Log policy: All Azure App Service Web Apps must write logs to Azure Blob storage. Box 1: Status - Box 2: Succeeded - Box 3: operationName - Microsoft.Web/sites/write is resource provider operation. It creates a new Web App or updates an existing one. Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations
Question 344
HOTSPOT - You need to insert code at line LE03 of LoginEvent.cs to ensure that all authentication events are processed correctly. How should you complete the code? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
Box 1: id - id is a unique identifier for the event. Box 2: eventType - eventType is one of the registered event types for this event source. Box 3: dataVersion - dataVersion is the schema version of the data object. The publisher defines the schema version. Scenario: Authentication events are used to monitor users signing in and signing out. All authentication events must be processed by Policy service. Sign outs must be processed as quickly as possible. The following example shows the properties that are used by all event publishers: [ { "topic": string, "subject": string, "id": string, "eventType": string, "eventTime": string, "data":{ object-unique-to-each-publisher }, "dataVersion": string, "metadataVersion": string } ] Reference: https://docs.microsoft.com/en-us/azure/event-grid/event-schema
Question 345
HOTSPOT - You need to implement the Log policy. How should you complete the EnsureLogging method in EventGridController.cs? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
Box 1: logdrop - All log files should be saved to a container named logdrop. Box 2: 15 - Logs must remain in the container for 15 days. Box 3: UpdateApplicationSettings All Azure App Service Web Apps must write logs to Azure Blob storage. Reference: https://blog.hompus.nl/2017/05/29/adding-application-logging-blob-to-a-azure-web-app-service-using-powershell/
Question 346
You need to resolve a notification latency issue. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Set Always On to true.
B. Ensure that the Azure Function is using an App Service plan.
C. Set Always On to false.
D. Ensure that the Azure Function is set to use a consumption plan.
Azure Functions can run on either a Consumption Plan or a dedicated App Service Plan. If you run in a dedicated mode, you need to turn on the Always On setting for your Function App to run properly. The Function runtime will go idle after a few minutes of inactivity, so only HTTP triggers will actually "wake up" your functions. This is similar to how WebJobs must have Always On enabled. Scenario: Notification latency: Users report that anomaly detection emails can sometimes arrive several minutes after an anomaly is detected. Anomaly detection service: You have an anomaly detection service that analyzes log information for anomalies. It is implemented as an Azure Machine Learning model. The model is deployed as a web service. If an anomaly is detected, an Azure Function that emails administrators is called by using an HTTP WebHook. Reference: https://github.com/Azure/Azure-Functions/wiki/Enable-Always-On-when-running-on-dedicated-App-Service-Plan
Question 347
HOTSPOT - You need to ensure that validation testing is triggered per the requirements. How should you complete the code segment? To answer, select the appropriate values in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
Box 1: RepositoryUpdated - When a new version of the ContentAnalysisService is available the previous seven days of content must be processed with the new version to verify that the new version does not significantly deviate from the old version. Box 2: service - Box 3: imageCollection - Reference: https://docs.microsoft.com/en-us/azure/devops/notifications/oob-supported-event-types
Question 348
You need to deploy the CheckUserContent Azure Function. The solution must meet the security and cost requirements. Which hosting model should you use?
A. Premium plan
B. App Service plan
C. Consumption plan
Scenario: You must minimize costs for all Azure services. All Internal services must only be accessible from internal Virtual Networks (VNets). Best for long-running scenarios where Durable Functions can't be used. Consider an App Service plan in the following situations: - You have existing, underutilized VMs that are already running other App Service instances. - You want to provide a custom image on which to run your functions. - Predictive scaling and costs are required. Note: When you create a function app in Azure, you must choose a hosting plan for your app. There are three basic hosting plans available for Azure Functions: Consumption plan, Premium plan, and Dedicated (App Service) plan. Incorrect Answers: A: A Premium plan would be more costly. C: Need the VNET functionality. Reference: https://docs.microsoft.com/en-us/azure/azure-functions/functions-scale
Question 349
DRAG DROP - You need to deploy a new version of the LabelMaker application to ACR. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:
Step 1: Build a new application image by using dockerfile Step 2: Create an alias if the image with the fully qualified path to the registry Before you can push the image to a private registry, you've to ensure a proper image name. This can be achieved using the docker tag command. For demonstration purpose, we'll use Docker's hello world image, rename it and push it to ACR. # pulls hello-world from the public docker hub $ docker pull hello-world # tag the image in order to be able to push it to a private registry $ docker tag hello-word <REGISTRY_NAME>/hello-world # push the image $ docker push <REGISTRY_NAME>/hello-world Step 3: Log in to the registry and push image In order to push images to the newly created ACR instance, you need to login to ACR form the Docker CLI. Once logged in, you can push any existing docker image to your ACR instance. Scenario: Coho Winery plans to move the application to Azure and continue to support label creation. LabelMaker app - Azure Monitor Container Health must be used to monitor the performance of workloads that are deployed to Kubernetes environments and hosted on Azure Kubernetes Service (AKS). You must use Azure Container Registry to publish images that support the AKS deployment. Reference: https://thorsten-hans.com/how-to-use-a-private-azure-container-registry-with-kubernetes-9b86e67b93b6 https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-quick-task
Question 350
You need to access data from the user claim object in the e-commerce web app. What should you do first?
A. Write custom code to make a Microsoft Graph API call from the e-commerce web app.
B. Assign the Contributor RBAC role to the e-commerce web app by using the Resource Manager create role assignment API.
C. Update the e-commerce web app to read the HTTP request header values.
D. Using the Azure CLI, enable Cross-origin resource sharing (CORS) from the e-commerce checkout API to the e-commerce web app.
Methods to Get User Identity and Claims in a .NET Azure Functions App include: - ClaimsPrincipal from the Request Context The ClaimsPrincipal object is also available as part of the request context and can be extracted from the HttpRequest.HttpContext. - User Claims from the Request Headers. App Service passes user claims to the app by using special request headers. Reference: https://levelup.gitconnected.com/four-alternative-methods-to-get-user-identity-and-claims-in-a-net-azure-functions-app-df98c40424bb
