exam questions

Exam AZ-204 All Questions

View all questions & answers for the AZ-204 exam

Exam AZ-204 topic 5 question 49 discussion

Actual exam question from Microsoft's AZ-204
Question #: 49
Topic #: 5
[All AZ-204 Questions]

HOTSPOT
-


Case study
-

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.

To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.


To start the case study
-
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.


Background
-

Munson’s Pickles and Preserves Farm is an agricultural cooperative corporation based in Washington, US, with farms located across the United States. The company supports agricultural production resources by distributing seeds fertilizers, chemicals, fuel, and farm machinery to the farms.


Current Environment
-

The company is migrating all applications from an on-premises datacenter to Microsoft Azure. Applications support distributors, farmers, and internal company staff.


Corporate website
-
• The company hosts a public website located at http://www.munsonspicklesandpreservesfarm.com. The site supports farmers and distributors who request agricultural production resources.


Farms
-
• The company created a new customer tenant in the Microsoft Entra admin center to support authentication and authorization for applications.


Distributors
-
• Distributors integrate their applications with data that is accessible by using APIs hosted at http://www.munsonspicklesandpreservesfarm.com/api to receive and update resource data.


Requirements
-

The application components must meet the following requirements:


Corporate website
-
• The site must be migrated to Azure App Service.
• Costs must be minimized when hosting in Azure.
• Applications must automatically scale independent of the compute resources.
• All code changes must be validated by internal staff before release to production.
• File transfer speeds must improve, and webpage-load performance must increase.
• All site settings must be centrally stored, secured without using secrets, and encrypted at rest and in transit.
• A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.


Farms
-
• Farmers must authenticate to applications by using Microsoft Entra ID.


Distributors
-
• The company must track a custom telemetry value with each API call and monitor performance of all APIs.
• API telemetry values must be charted to evaluate variations and trends for resource data.


Internal staff
-
• App and API updates must be validated before release to production.
• Staff must be able to select a link to direct them back to the production app when validating an app or API update.
• Staff profile photos and email must be displayed on the website once they authenticate to applications by using their Microsoft Entra ID.


Security
-
• All web communications must be secured by using TLS/HTTPS.
• Web content must be restricted by country/region to support corporate compliance standards.
• The principle of least privilege must be applied when providing any user rights or process access rights.
• Managed identities for Azure resources must be used to authenticate services that support Microsoft Entra ID authentication.


Issues
-


Corporate website
-
• Farmers report HTTP 503 errors at the same time as internal staff report that CPU and memory usage are high.
• Distributors report HTTP 502 errors at the same time as internal staff report that average response times and networking traffic are high.
• Internal staff report webpage load sizes are large and take a long time to load.
• Developers receive authentication errors to Service Bus when they debug locally.


Distributors
-
• Many API telemetry values are sent in a short period of time. Telemetry traffic, data costs, and storage costs must be reduced while preserving a statistically correct analysis of the data points sent by the APIs.


You need to resolve the authentication errors for developers.

Which Service Bus security configuration should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
oskx2
Highly Voted 1 year, 1 month ago
The answer is correct. I have found the exact instruction from microsoft: https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-dotnet-get-started-with-queues?tabs=passwordless#add-microsoft-entra-user-to-azure-service-bus-owner-role "Add your Microsoft Entra user name to the Azure Service Bus Data Owner role at the Service Bus namespace level."
upvoted 10 times
...
overhill
Most Recent 5 months, 4 weeks ago
Owner and Contributor are not even options Data owner allows sending and receiving so it's more appropriate for development purposes
upvoted 1 times
...
Greenozaur
7 months ago
Based on https://github.com/MicrosoftDocs/azure-docs/blob/main/includes/passwordless/service-bus/service-bus-assign-roles.md 1. Role: "Service Bus Data Owner": When developing locally, make sure that the user account that connects to Azure Service Bus has the correct permissions. You'll need the Azure Service Bus Data Owner role in order to send and receive messages. 2. Scope: "Namespace": "Add your Microsoft Entra user name to the Azure Service Bus Data Owner role at the Service Bus namespace level. It will allow an app running in the context of your user account to send messages to a queue or a topic, and receive messages from a queue or a topic's subscription."
upvoted 1 times
...
raymond_abcd
1 year, 3 months ago
Think the answer is correct, reference: https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-managed-service-identity
upvoted 2 times
...
FeriAZ
1 year, 3 months ago
correct. Azure RBAC Role: Service Bus Data Owner. This role is appropriate for developers who need to debug Service Bus as it provides comprehensive access to the data plane, including both sending and receiving messages, which are essential capabilities for debugging. Service Bus Scope: Namespace. The Namespace scope is recommended if the developers need to work across multiple queues or topics within the same Service Bus namespace. If the debugging is limited to a single queue, then "Queue" could be more appropriate. However, "Namespace" offers more flexibility without being overly broad.
upvoted 4 times
...
emysa341
1 year, 3 months ago
"using Azure Service Bus queues to support high volumes of website agricultural production resource requests." Service bus data sender --> principle of least privilege queue
upvoted 3 times
1CY1
10 months, 3 weeks ago
Not seeing why the developers are given more access so I agree with this.
upvoted 1 times
1CY1
10 months, 3 weeks ago
Sorry correction... Details are not very clear on this. Developers receive authentication errors to Service Bus when they debug locally. Maybe : Queue, Data Owner.
upvoted 1 times
...
...
...
AzDeveloper
1 year, 3 months ago
Correct answer is Service Bus Data Owner, Namespace
upvoted 1 times
AzDeveloper
1 year, 3 months ago
Sorry the correct answer is : Service Bus Data Sender, Namespace
upvoted 1 times
azure1282
1 year, 3 months ago
IMO - Scope should be Queue. Any reason why you are suggesting Namespace?
upvoted 2 times
...
...
...
emysa341
1 year, 3 months ago
Contributor (The principle of least privilege must be applied when providing any user rights or process access rights.) Queue (A queue-based load leveling pattern must be implemented by using Azure Service Bus queues to support high volumes of website agricultural production resource requests.)
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago