100% Free Microsoft AZ-204 Practice Test Questions

Question 1

You need to secure the Azure Functions to meet the security requirements.

Which two actions should you perform? Each correct answer presents part of the solution

NOTE: Each correct selection is worth one point.

A : Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled

B : Store the RSA-HSM key in Azure Blob storage with an immutability policy applied to the container.

C : Store the RSA-HSM key in Azure Cosmos DB. Apply the built-in policies for customer-managed Keys and allowed locations

D : Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

E : Create a free tier Azure App Configuration instance with a new Azure AD service principal.

Answer: B,C

Question 2

You develop and deploy an Azure Logic app that calls an Azure Function app. The Azure Function app includes an OpenAPl (Swagger) definition and uses an Azure Blob storage account. All resources are secured by using Azure Active Directory (Azure AD).

The Azure Logic app must securely access the Azure Blob storage account. Azure AD resources must remain if the Azure Logic app is deleted.

You need to secure the Azure Logic app.

What should you do?

A : Create an Azure AD custom role and assign role-based access controls.

B : Create an Azure AD custom role and assign the role to the Azure Blob storage account.

C : Create an Azure Key Vault and issue a client certificate.

D : Create a user-assigned managed identity and assign role-based access controls.

E : Create a system-assigned managed identity and issue a client certificate.

Answer: D

Question 3

You have an Azure subscription that contains an Application Insights resource named All and anAzure App Service web app named Appl. You create a Standard availability test in AM. You set its URLto point to App1.You need to ensure that any failed tests generate email notifications to the owners of thesubscription. What should you do?

A : Enable the test

B : Create an alert rule.

C : Create an action group.

D : Enable the alert.

Answer: B

Question 4

You have an Azure subscription that contains an Application Insights resource named All and anAzure App Service web app named Appl. You create a Standard availability test in AM. You set its URLto point to App1.You need to ensure that any failed tests generate email notifications to the owners of thesubscription. What should you do?

A : Enable the test

B : Create an alert rule.

C : Create an action group.

D : Enable the alert.

Answer: B

Question 5

You need to resolve the log capacity issue.

What should you do?

A : Create an Application Insights Telemetry Filter

B : Change the minimum log level in the host.json file for the function

C : Implement Application Insights Sampling

D : Set a LogCategoryFilter during startup

Answer: C

Free Practice Microsoft AZ-204 Exam Questions 2025