AZ 204 Test Comprehensive
Questions (Frequently Tested)
with Verified Answers Graded
A+
Which of the following Azure Functions hosting plans is best when predictive scaling and costs
are required?
Functions Premium Plan
Dedicated plan
Consumption plan - Answer: Dedicated plan
An organization wants to implement a serverless workflow to solve a business problem. One of
the requirements is the solution needs to use a designer-first (declarative) development model.
Which of the choices below meets the requirements?
Azure Functions
Azure Logic Apps
WebJobs - Answer: Azure Logic Apps
Which of the following is required for a function to run?
Binding
,Trigger
Both triggers and bindings - Answer: Trigger
Which of the following supports both the in and out direction settings?
Bindings
Trigger
Connection value - Answer: Bindings
What is an extension of Azure Functions that lets you write stateful functions in a serverless
compute environment? - Answer: Durable Functions
What are the four durable function types in Azure Runctions? - Answer: orchestrator, activity,
entity, client
You manage an Azure App Service web app named app1. App1 is registered as an application in
Azure Active Directory (Azure AD). You need to ensure that Azure AD signed-in user information
can be retrieved by app1 by using Microsoft Graph. What should you configure?
Select only one answer.
appRole
sapplication permissions
groupMembershipClaims
delegated permissions - Answer: delegated permissions
You have an Azure Storage account. You need to provide external users the ability to create and
update blobs. Which enum value of BlobSasPermissions should you use?
,Select only one answer.
Add
Create
Read
Write - Answer: Write
You manage an Azure App Service web app named app1. App1 is registered as a multi-tenant
application in an Azure Active Directory (Azure AD) tenant named tenant1.
You need to grant app1 the permission to access the Microsoft Graph API in tenant1.
Which service principal should you use?
Select only one answer.
legacy
system-assigned managed identity
application
user-assigned managed identity - Answer: application
You manage an Azure Active Directory registered application named app1. App1 calls a web API,
which then calls Microsoft Graph. You need to ensure the signed-in user identity is delegated
through the request chain. Which authentication flow should you use?
Select only one answer.
Authorization code
On-Behalf-Of
, Client credentials
Implicit - Answer: On-Behalf-Of
You develop a multitenant web application named App1. You plan to register App1 with
multiple Azure Active Directory (Azure AD) tenants.
You need to identify the relationship between the application objects and security principals
associated with App1.
Which relationship should you identify?
Select only one answer.
App1 will have multiple application objects and multiple service principals.
App1 will have multiple application objects and a single service principal.
App1 will have a single application object and multiple service principals.
App1 will have a single application object and a single service principal. - Answer: App1 will have
a single application object and multiple service principals.
You need to generate a shared access signature token that grants the Read permission to a blob
container.
Which code segment should you use?
Select only one answer.
BlobSasBuilder sasBuilder = new BlobSasBuilder() { BlobContainerName =
containerClient.Name, Resource = "b" };
Questions (Frequently Tested)
with Verified Answers Graded
A+
Which of the following Azure Functions hosting plans is best when predictive scaling and costs
are required?
Functions Premium Plan
Dedicated plan
Consumption plan - Answer: Dedicated plan
An organization wants to implement a serverless workflow to solve a business problem. One of
the requirements is the solution needs to use a designer-first (declarative) development model.
Which of the choices below meets the requirements?
Azure Functions
Azure Logic Apps
WebJobs - Answer: Azure Logic Apps
Which of the following is required for a function to run?
Binding
,Trigger
Both triggers and bindings - Answer: Trigger
Which of the following supports both the in and out direction settings?
Bindings
Trigger
Connection value - Answer: Bindings
What is an extension of Azure Functions that lets you write stateful functions in a serverless
compute environment? - Answer: Durable Functions
What are the four durable function types in Azure Runctions? - Answer: orchestrator, activity,
entity, client
You manage an Azure App Service web app named app1. App1 is registered as an application in
Azure Active Directory (Azure AD). You need to ensure that Azure AD signed-in user information
can be retrieved by app1 by using Microsoft Graph. What should you configure?
Select only one answer.
appRole
sapplication permissions
groupMembershipClaims
delegated permissions - Answer: delegated permissions
You have an Azure Storage account. You need to provide external users the ability to create and
update blobs. Which enum value of BlobSasPermissions should you use?
,Select only one answer.
Add
Create
Read
Write - Answer: Write
You manage an Azure App Service web app named app1. App1 is registered as a multi-tenant
application in an Azure Active Directory (Azure AD) tenant named tenant1.
You need to grant app1 the permission to access the Microsoft Graph API in tenant1.
Which service principal should you use?
Select only one answer.
legacy
system-assigned managed identity
application
user-assigned managed identity - Answer: application
You manage an Azure Active Directory registered application named app1. App1 calls a web API,
which then calls Microsoft Graph. You need to ensure the signed-in user identity is delegated
through the request chain. Which authentication flow should you use?
Select only one answer.
Authorization code
On-Behalf-Of
, Client credentials
Implicit - Answer: On-Behalf-Of
You develop a multitenant web application named App1. You plan to register App1 with
multiple Azure Active Directory (Azure AD) tenants.
You need to identify the relationship between the application objects and security principals
associated with App1.
Which relationship should you identify?
Select only one answer.
App1 will have multiple application objects and multiple service principals.
App1 will have multiple application objects and a single service principal.
App1 will have a single application object and multiple service principals.
App1 will have a single application object and a single service principal. - Answer: App1 will have
a single application object and multiple service principals.
You need to generate a shared access signature token that grants the Read permission to a blob
container.
Which code segment should you use?
Select only one answer.
BlobSasBuilder sasBuilder = new BlobSasBuilder() { BlobContainerName =
containerClient.Name, Resource = "b" };
