AZ 204 Task Questions with 100% Correct
Answers
Which of the following Azure Functions hosting plans is best when predictive scaling
and costs are required?
Functions Premium Plan
Dedicated plan
Consumption plan
Dedicated plan
An organization wants to implement a serverless workflow to solve a business problem.
One of the requirements is the solution needs to use a designer-first (declarative)
development model. Which of the choices below meets the requirements?
Azure Functions
Azure Logic Apps
WebJobs
Azure Logic Apps
Which of the following is required for a function to run?
Binding
Trigger
Both triggers and bindings
Trigger
,Which of the following supports both the in and out direction settings?
Bindings
Trigger
Connection value
Bindings
What is an extension of Azure Functions that lets you write stateful functions in a
serverless compute environment?
Durable Functions
What are the four durable function types in Azure Runctions?
orchestrator, activity, entity, client
You manage an Azure App Service web app named app1. App1 is registered as an
application in Azure Active Directory (Azure AD). You need to ensure that Azure AD
signed-in user information can be retrieved by app1 by using Microsoft Graph. What
should you configure?
Select only one answer.
appRole
sapplication permissions
groupMembershipClaims
delegated permissions
delegated permissions
,You have an Azure Storage account. You need to provide external users the ability to
create and update blobs. Which enum value of BlobSasPermissions should you use?
Select only one answer.
Add
Create
Read
Write
Write
You manage an Azure App Service web app named app1. App1 is registered as a multi-
tenant application in an Azure Active Directory (Azure AD) tenant named tenant1.
You need to grant app1 the permission to access the Microsoft Graph API in tenant1.
Which service principal should you use?
Select only one answer.
legacy
system-assigned managed identity
application
user-assigned managed identity
application
You manage an Azure Active Directory registered application named app1. App1 calls
a web API, which then calls Microsoft Graph. You need to ensure the signed-in user
, identity is delegated through the request chain. Which authentication flow should you
use?
Select only one answer.
Authorization code
On-Behalf-Of
Client credentials
Implicit
On-Behalf-Of
You develop a multitenant web application named App1. You plan to register App1
with multiple Azure Active Directory (Azure AD) tenants.
You need to identify the relationship between the application objects and security
principals associated with App1.
Which relationship should you identify?
Select only one answer.
App1 will have multiple application objects and multiple service principals.
App1 will have multiple application objects and a single service principal.
App1 will have a single application object and multiple service principals.
App1 will have a single application object and a single service principal.
App1 will have a single application object and multiple service principals.
You need to generate a shared access signature token that grants the Read permission
to a blob container.
Answers
Which of the following Azure Functions hosting plans is best when predictive scaling
and costs are required?
Functions Premium Plan
Dedicated plan
Consumption plan
Dedicated plan
An organization wants to implement a serverless workflow to solve a business problem.
One of the requirements is the solution needs to use a designer-first (declarative)
development model. Which of the choices below meets the requirements?
Azure Functions
Azure Logic Apps
WebJobs
Azure Logic Apps
Which of the following is required for a function to run?
Binding
Trigger
Both triggers and bindings
Trigger
,Which of the following supports both the in and out direction settings?
Bindings
Trigger
Connection value
Bindings
What is an extension of Azure Functions that lets you write stateful functions in a
serverless compute environment?
Durable Functions
What are the four durable function types in Azure Runctions?
orchestrator, activity, entity, client
You manage an Azure App Service web app named app1. App1 is registered as an
application in Azure Active Directory (Azure AD). You need to ensure that Azure AD
signed-in user information can be retrieved by app1 by using Microsoft Graph. What
should you configure?
Select only one answer.
appRole
sapplication permissions
groupMembershipClaims
delegated permissions
delegated permissions
,You have an Azure Storage account. You need to provide external users the ability to
create and update blobs. Which enum value of BlobSasPermissions should you use?
Select only one answer.
Add
Create
Read
Write
Write
You manage an Azure App Service web app named app1. App1 is registered as a multi-
tenant application in an Azure Active Directory (Azure AD) tenant named tenant1.
You need to grant app1 the permission to access the Microsoft Graph API in tenant1.
Which service principal should you use?
Select only one answer.
legacy
system-assigned managed identity
application
user-assigned managed identity
application
You manage an Azure Active Directory registered application named app1. App1 calls
a web API, which then calls Microsoft Graph. You need to ensure the signed-in user
, identity is delegated through the request chain. Which authentication flow should you
use?
Select only one answer.
Authorization code
On-Behalf-Of
Client credentials
Implicit
On-Behalf-Of
You develop a multitenant web application named App1. You plan to register App1
with multiple Azure Active Directory (Azure AD) tenants.
You need to identify the relationship between the application objects and security
principals associated with App1.
Which relationship should you identify?
Select only one answer.
App1 will have multiple application objects and multiple service principals.
App1 will have multiple application objects and a single service principal.
App1 will have a single application object and multiple service principals.
App1 will have a single application object and a single service principal.
App1 will have a single application object and multiple service principals.
You need to generate a shared access signature token that grants the Read permission
to a blob container.
