AZ-204 Technology & Digital Applications 4

Question 1

A developer needs to read a secret from Azure Key Vault in a .NET application using DefaultAzureCredential. The app runs locally using a developer account and in production using a managed identity. What is the correct NuGet package to add?

Accepted Answer

Azure.Security.KeyVault.Secrets and Azure.Identity

Answer

Azure.Security.KeyVault.Secrets provides the SecretClient class, and Azure.Identity provides DefaultAzureCredential, which supports both local developer auth and managed identity in production.

Question 2

You need to monitor the performance of an Azure Function and receive an alert when the average execution duration exceeds 2 seconds over a 5-minute window. What should you configure?

Accepted Answer

Create an Azure Monitor metric alert on the FunctionExecutionTimeMs metric

Answer

Azure Monitor provides a built-in FunctionExecutionTimeMs metric for Azure Functions, which supports metric alert rules with configurable aggregation windows.

Question 3

An Azure Service Bus topic has three subscriptions. A message published to the topic must be received by all three subscriptions. After processing, each subscription's copy of the message should be deleted independently. Is this the default behavior?

Accepted Answer

Yes — each subscription receives its own independent copy of every message

Answer

Service Bus topics create an independent copy of each message for every subscription by default, enabling pub/sub fan-out where each subscriber processes at its own pace.

Question 4

You need to cache the results of an expensive database query in an Azure Function for 10 minutes. The function runs on a Consumption plan. What is the recommended approach?

Accepted Answer

Use Azure Cache for Redis with a 10-minute TTL

Answer

Azure Cache for Redis provides reliable, distributed caching with native TTL support; static in-memory caches are unreliable on Consumption plans because instances can be recycled at any time.

Question 5

You are deploying a containerized application to Azure Kubernetes Service (AKS). The app needs to read a connection string stored in Azure Key Vault. What is the most secure way to provide this?

Accepted Answer

Use the Azure Key Vault Provider for Secrets Store CSI Driver to mount the secret as a volume

Answer

The Secrets Store CSI Driver integrates AKS with Key Vault to mount secrets as volumes, leveraging workload identity with no credentials stored in the cluster or image.

AZ-204 - Microsoft Azure Developer Associate Practice Test

AZ-204 - Microsoft Azure Developer Associate Practice Test

AZ-204 Technology & Digital Applications 4