AZ-204 Communication & Stakeholder Relations 4 — Questions and Answers
Question 1: An Azure API Management policy must transform an XML response from a backend API into JSON before returning it to callers. In which policy section should this transformation be placed?
- outbound (Correct answer)
- inbound
- backend
- on-error
Correct answer: outbound
The outbound policy section executes after the backend response is received, making it the correct place to transform the response before delivery to the caller.
Question 2: A Logic App workflow must trigger whenever a new blob is added to an Azure Storage container. Which trigger type should the developer use?
- Azure Blob Storage - When a blob is added or modified (V2) (Correct answer)
- HTTP Request - When an HTTP request is received
- Recurrence - Schedule
- Event Grid - When a resource event occurs
Correct answer: Azure Blob Storage - When a blob is added or modified (V2)
The Azure Blob Storage connector's polling trigger fires when new or modified blobs are detected in the specified container.
Question 3: A developer wants to limit each API Management subscriber to 1000 API calls per hour. Which built-in policy should they apply?
- rate-limit-by-key (Correct answer)
- quota-by-key
- ip-filter
- check-header
Correct answer: rate-limit-by-key
The rate-limit-by-key policy enforces a call rate limit (calls per time period) per subscription key, blocking excess requests with HTTP 429.
Question 4: An external service sends a webhook to an Azure Function to notify of events. To validate that requests are genuine, the service sends a secret in a custom HTTP header. How should the developer verify this in the Function?
- Read the custom header from the HttpRequest object and compare it to a stored secret (Correct answer)
- Enable Azure Function key authorization and share the function key with the sender
- Use Event Grid's built-in webhook validation handshake
- Configure an API Management inbound policy to check the header
Correct answer: Read the custom header from the HttpRequest object and compare it to a stored secret
Reading the custom header from the incoming HttpRequest and comparing it to a pre-shared secret stored in app settings is the standard approach for webhook secret validation.
Question 5: A Logic App integrates with Salesforce. After updating a record the workflow must wait for a Salesforce approval before continuing. Which Logic Apps feature handles this pause?
- Approval action with wait for response (Correct answer)
- Delay until action
- Do-until loop
- Recurrence trigger
Correct answer: Approval action with wait for response
Logic Apps built-in approval actions send an approval email or Teams message and pause execution until a response is received.
Question 6: An API Management policy must forward the caller's JWT token to the backend unchanged. Which policy element should be used to pass the Authorization header from the inbound request to the backend?
- set-header with the original Authorization value (Correct answer)
- validate-jwt policy in the outbound section
- authentication-basic policy
- find-and-replace policy on the body
Correct answer: set-header with the original Authorization value
The set-header policy in the inbound or backend section copies or sets the Authorization header, forwarding the original token to the backend service.
Question 7: A Logic App workflow encounters an error in one action and the developer wants subsequent actions to run only when that action fails. How should this be configured?
- Set the 'Run After' condition of the subsequent action to 'has failed' (Correct answer)
- Add a Scope action wrapping the failing step with error handling
- Use a parallel branch that always runs
- Configure a recurrence trigger as a fallback
Correct answer: Set the 'Run After' condition of the subsequent action to 'has failed'
Logic Apps 'Run After' settings let you configure an action to execute specifically when a preceding action has failed, timed out, or been skipped.
AZ-204 Communication & Stakeholder Relations 4
An Azure API Management policy must transform an XML response from a backend API into JSON before returning it to callers.
In which policy section should this transformation be placed?