Question 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series

contains a unique solution that might meet the stated goals. Some question sets might have more than one

correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions

will not appear on the review screen.

You are implementing an application by using Azure Event Grid to push near-real-time information to

customers.

You have the following requirements:

• You must send events to thousands of customers that include hundreds of various event types.

• The events must be filtered by event type before processing.

• Authentication and authorization must be handled by using Microsoft Entra ID.

• The events must be published to a single endpoint

You need to implement Azure Event Gnd.

Solution: Publish events to a system topic. Create an event subscription for each customer.

Does the solution meet the goal?

Options :

A : Yes

B : No

Answer: B

Question 2

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

You are configuring a web app that delivers streaming video to users. The application makes use of continuous integration and deployment.

You need to ensure that the application is highly available and that the users' streaming experience is constant. You also want to configure the application to store data in a geographic location that is nearest to the user.

Solution: You include the use of Azure Redis Cache in your design.

Does the solution meet the goal?

Options :

A : Yes

B : No

Answer: B

Question 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing an Azure Service application that processes queue data when it receives a message from a mobile application. Messages may not be sent to the service consistently.

You have the following requirements:

Queue size must not grow larger than 80 gigabytes (GB).

Use first-in-first-out (FIFO) ordering of messages.

Minimize Azure costs.

You need to implement the messaging solution.

Solution: Use the .Net API to add a message to an Azure Storage Queue from the mobile application. Create an Azure Function App that uses an Azure Storage Queue trigger.

Does the solution meet the goal?

Options :

A : Yes

B : No

Answer: B

Question 4

You need to secure the Azure Functions to meet the security requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options :

A : Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled.

B : Store the RSA-HSM key in Azure Blob storage with an immutability policy applied to the container.

C : Store the RSA-HSM key in Azure Cosmos DB. Apply the built-in policies for customer-managed Keys and allowed locations

D :

Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity.

E : Create a free tier Azure App Configuration instance with a new Azure AD service principal.

Answer: A,D

Question 5

You are developing a Java application to be deployed in Azure. The application stores sensitive data in Azure Cosmos DB. You need to configure Always Encrypted to encrypt the sensitive data inside the application. What should you do first?

Options :

A : Create a customer-managed key (CMK) and store the key in a new Azure Key Vault instance.

B : Create an Azure AD managed identity and assign the identity to a new Azure Key Vault instance.

C :

Create a data encryption key (DEK) by using the Azure Cosmos DB SDK and store the key in Azure Cosmos DB.

D : Create a new container to include an encryption policy with the JSON properties to be encrypted.

Answer: A