NEW QUESTION 1
Your company is migrating applications to Azure. The U department must allow internal developers to communicate with Microsoft support.
The service agents of the IT department must only have view resources and create support ticket permissions to all subscriptions. A new custom role must be created by reusing a default role definition and changing the permissions.
You need to create the custom role.
To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 2
A company develops a series of mobile games. All games use a single leaderboard service. You have the following requirements:
• Code should be scalable and allow for growth.
• Each record must consist of a playerld, gameld, score, and time played.
• When users reach a new high score, the system will save the new score using the SaveScore function below
• Each game is assigned an Id based on the series title.
You have the following code. (Line numbers are included for reference only.)

You store customer information in an Azure Cosmos database. The following data already exists in the database:

You develop the following code. (Line numbers are included for reference only.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 3
Contoso. Ltd. provides an API to customers by using Azure API Management (ARM). The API authorizes users with a JWT token
You must implement response caching for the APIM gateway. The caching mechanism must detect the user ID of the client that accesses data for a given location and cache the response for that user ID.
You need to add the following policies to the policies file:
• a set-variable policy to store the detected user identity
• a cache-lookup-value policy
• a cache-store-value policy
• a find-and-replace policy to update the response body with the user profile information
To which policy section should you add the policies? To answer, drag the appropriate sections to the correct policies. Each section may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 4
You store customer information in Azure Cosmos DB. The following data already exists in the database:

You develop the following code. (Line numbers are included for reference only.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 5
You are developing an internal website for employees to view sensitive data. The website uses Azure Active Directory (AAD) for authentication. You need to implement multifactor authentication for the website.
What should you do? Each correct answer presents part of the solution. NOTE; Each correct selection is worth one point.

• A. In Azure AD, create a new conditional access policy.
• B. In Azure AD, enable application proxy.
• C. Configure the website to use Azure AD B2C.
• D. In Azure AD conditional access, enable the baseline policy.
• E. Upgrade to Azure AD Premium.

Answer: CE

NEW QUESTION 6
You need to update the chatbot to greet the user when they sign in.
Which two rich card formats can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point

• A. Thumbnail
• B. Adaptive
• C. Sign-in
• D. Hero
• E. Animation

Answer: AC

Explanation: Scenario: The chatbot greeting interface must match the formatting of the following example:

A message exchange between user and bot can contain one or more rich cards rendered as a list or carousel. The Attachments property of the Activity object contains an array of Attachment objects that represent the rich cards and media attachments within the message.
The Bot Framework currently supports eight types of rich cards:
Thumbnail Card. A card that typically contains a single thumbnail image, one or more buttons, and text.
SignIn Card. A card that enables a bot to request that a user sign-in. It typically contains text and one or more buttons that the user can click to initiate the sign-in process.

NEW QUESTION 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
You have the following resource group:

Developers must connect to Dev$erver onry through DevWorkstatioan. To maintain security, DevServer must not accept connections from the internet.
You need to create a private connection between the DevWortcstation and DevServer. Solution: Configure an IP address on each subnet within the same address space. Does the solution meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 8
You have a web app named MainApp. You are developing a triggered App Service background task by using the WebJobs SDK. This task automatically invokes a function in the code whenever any new data is received in a queue.
You need to configure the services.
Which service should you use for each scenario? To answer, drag the appropriate services to the correct scenarios. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 9
You develop a serverless application using several Azure Functions. These functions connect to data from within the code.
You want to configure tracing for an Azure Function App project. You need to change configuration settings in the hostjson file. Which tool should you use?

• A. Azure portal
• B. Azure PowerShell
• C. Azure Functions Core Tools (Azure CLI)
• D. Visual Studio

Answer: C

NEW QUESTION 10
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
You need to ensure that the SecurityPin security requirements are met.
Solution; Using the Azure Portal, add Data Masking to the SecurityPin column, and exclude the dbo user. Add a SQL security policy with a filter predicate based on the user identity.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 11
You need to resolve a notification latency issue.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point

• A. Ensure that the Azure Function is using an App Service plan.
• B. Set Always On to false
• C. Ensure that the Azure Function is set to use a consumption plan.
• D. Set Always On to true.

Answer: AD

Explanation: Azure Functions can run on either a Consumption Plan or a dedicated App Service Plan. If you run in a dedicated mode, you need to turn on the Always On setting for your Function App to run properly. The Function runtime will go idle after a few minutes of inactivity, so only HTTP triggers will actually "wake up" your functions. This is similar to how WebJobs must have Always On enabled.
Scenario: Notification latency: Users report that anomaly detection emails can sometimes arrive several minutes after an anomaly is detected.
Anomaly detection service: You have an anomaly detection service that analyzes log information for anomalies. It is implemented as an Azure Machine Learning model. The model is deployed as a web service.
If an anomaly is detected, an Azure Function that emails administrators is called by using an HTTP WebHook. References:
https://github.com/Azure/Azure-Functions/wiki/Enable-Always-On-when-running-on-dedicated-App-Service-Pl

NEW QUESTION 12
Note: In this section you will see one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem, and you must determine whether the solution meets the stated goals. More than one solution might solve the problem. It is also possible that none of the solutions solve the problem.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
You need to meet the LabelMaker application security requirement. Solution: Create a RoleBinding and assign it to the Azure AD account. Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: Scenario: The LabelMaker applications must be secured by using an AAD account that has full access to all namespaces of the Azure Kubernetes Service (AKS) cluster.
Permissions can be granted within a namespace with a RoleBinding, or cluster-wide with a ClusterRoleBinding.
References:
https://kubernetes.io/docs/reference/access-authn-authz/rbac/

NEW QUESTION 13
A company is creating an loT solution for connecting to smart refrigerators. You plan to use the Azure IoT Hub Device Provisioning Service for this process.
You need to provision the devices automatically. Which feature of Device Provisioning Service should you use?

• A. Error policy
• B. Device registration and configuration
• C. Template registration
• D. Remote monitoring

Answer: B

Explanation: Azure IoT auto-provisioning can be broken into three phases:
- Service configuration - a one-time configuration of the Azure IoT Hub and IoT Hub Device Provisioning Service instances, establishing them and creating linkage between them.
- Device enrollment - the process of making the Device Provisioning Service instance aware of the devices that will attempt to register in the future.Note: The Device Provisioning Service is a helper service that enables just-in-time provisioning of devices to an IoT hub, without requiring human intervention. After successful provisioning, devices connect directly with their designated IoT Hub. This process is referred to as auto-provisioning, and provides an out-of-the-box registration and initial configuration experience for devices.
- Device registration and configuration - initiated upon boot up by registration software, which is built using a Device Provisioning Service client SDK appropriate for the device and attestation mechanism. The software establishes a connection to the provisioning service for authentication of the device, and subsequent registration in the IoT Hub. Upon successful registration, the device is provided with its IoT Hub unique device ID and connection information, allowing it to pull its initial configuration and begin the telemetry process. In production environments, this phase can occur weeks or months after the previous two phases.
References:
https://docs.microsoft.com/en-us/azure/iot-dps/concepts-auto-provisioning

NEW QUESTION 14
You have an Azure App Service API that allows users to upload documents to the cloud with a mobile device. A mobile app connects to the service by using REST API calls. When new document is uploaded to the service, the service extracts the document metadata. Usage statistics for the app show significant increases in app usage.
The extraction process is CPU-intensive. You plan to modify the API to use a queue.
You need to ensure that the solution scales, handles request spikes, and reduces costs between request spikes. What should you do?

• A. Configure a CPU Optimized virtual machine (VM) and install the Web App service
• B. Move the extraction logic into an Azure Functio
• C. Create a queue triggered
• D. Move the extraction logic into WebJob
• E. Configure WebJobs to run in a loop and process a queue.
• F. Move the extraction logic into Azure Batc
• G. Configure Azure Batch to process from a queue across a pool of virtual machine (VM) nodes.

Answer: D

NEW QUESTION 15
You are developing an online order website that uses Azure Durable Functions- You develop the following processes for the website:

You need to identity what types of functions to use for each step of the process.
Which function types should you use? To answer, drag the appropriate function types to the correct operations. Each function type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
You need to identify what types of functions to use for each step of the process.
Which function types should you use? To answer, drag the appropriate function types to the correct operations. Each function type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 16
You use Azure Table storage to store customer information for an application. The data contains customer details and is partitioned by last name. You need to create a query that returns all customers with the last name Smith. Which code segment should you use?

• A. TableQuery.GeneratePilterCondition("LastName", QueryComparisons.Equal, "Smith")
• B. TableQuery.GeneratefilterCondition("PartitionKey", QueryComparison
• C. Equal, "Smith")
• D. TableQue.GenerateFilterCondition("PartitionKey", Equals, "Smith")
• E. TableQuer
• F. GenerateFilterCondition("LastName", Equals, "Smith")

Answer: D