AZ-204 Professional Standards & Competencies 5

Question 1

A developer must protect an Azure Web API using OAuth 2.0. Which Azure service should they integrate to validate bearer tokens on incoming requests?

Accepted Answer

Azure Active Directory with JWT bearer token validation middleware

Answer

Integrating Azure AD JWT bearer token validation middleware ensures only requests with valid tokens issued by the configured authority are accepted.

Question 2

When writing unit tests for Azure Functions, which professional practice isolates the function logic from Azure SDK dependencies?

Accepted Answer

Mocking Azure service clients and injecting them via dependency injection

Answer

Mocking Azure SDK clients and injecting them via DI allows unit tests to run without real Azure resources, improving speed and reliability.

Question 3

An Azure developer is implementing feature flags for a progressive rollout. Which Azure service provides dynamic feature flag management without redeployment?

Accepted Answer

Azure App Configuration with feature management

Answer

Azure App Configuration's feature management capability allows feature flags to be toggled at runtime without requiring a new deployment.

Question 4

A developer needs to comply with SOC 2 controls by ensuring all data at rest in Azure Storage is encrypted. What is the correct professional action?

Accepted Answer

Verify that Azure Storage Service Encryption is enabled, which is on by default

Answer

Azure Storage Service Encryption encrypts all data at rest by default using AES-256, satisfying compliance requirements without additional configuration.

Question 5

A developer is following secure coding practices for an Azure-deployed web application. Which OWASP mitigation prevents SQL injection in Cosmos DB queries?

Accepted Answer

Using parameterized queries with SqlQuerySpec in the Cosmos DB SDK

Answer

Using SqlQuerySpec with named parameters prevents injection by separating query logic from user-supplied values in Cosmos DB SQL API queries.

AZ-204 - Microsoft Azure Developer Associate Practice Test

AZ-204 - Microsoft Azure Developer Associate Practice Test

AZ-204 Professional Standards & Competencies 5