Free Microsoft AZ-204 Exam Questions

Become Microsoft Certified with updated AZ-204 exam questions and correct answers

Page: 1 / 97

Total 482 Questions | Updated On: Mar 26, 2025

Add To Cart

Question 1

You are creating an Azure key vault using PowerShell. Objects deleted from the key vault must be kept for a set period of 90 days.

Which two of the following parameters must be used in conjunction to meet the requirement? (Choose two.)

A : abledForDeployment

B : ablePurgeProtection

C : abledForTemplateDeployment

D : ableSoftDelete

Answer: B,D

Question 2

This question requires that you evaluate the underlined text to determine if it is correct.

You company has an on-premises deployment of MongoDB, and an Azure Cosmos DB account that makes use of the MongoDB API.

You need to devise a strategy to migrate MongoDB to the Azure Cosmos DB account.

You include the Data Management Gateway tool in your migration strategy.

Instructions: Review the underlined text. If it makes the statement correct, select `No change required.` If the statement is incorrect, select the answer choice that makes the statement correct.

A : No change required

B : mongorestore

C : Azure Storage Explorer

D : AzCopy

Answer: B

Question 3

You are developing an internal website for employees to view sensitive dat

a. The website uses Azure Active Directory (AAD) for authentication. You need to implement multifactor authentication for the website.

What should you do? Each correct answer presents part of the solution.

NOTE; Each correct selection is worth one point.

A : Azure AD, create a new conditional access policy.

B : Azure AD, enable application proxy.

C : nfigure the website to use Azure AD B2C.

D : Azure AD conditional access, enable the baseline policy.

E : grade to Azure AD Premium.

Answer: A

Question 4

You are developing a Java application to be deployed in Azure. The application stores sensitive data in Azure Cosmos DB. You need to configure Always Encrypted to encrypt the sensitive data inside the application. What should you do first?

A : eate a customer-managed key (CMK) and store the key in a new Azure Key Vault instance.

B : eate an Azure AD managed identity and assign the identity to a new Azure Key Vault instance.

C : eate a data encryption key (DEK) by using the Azure Cosmos DB SDK and store the key in Azure Cosmos DB.

D : eate a new container to include an encryption policy with the JSON properties to be encrypted.

Answer: C

Question 5

You need to grant access to the retail store location data for the inventory service development effort. What should you use?

A : ure AD access token

B : ure RBAC role

C : ure AD ID token

D : ared access signature (SAS) token

E : ure AD refresh token

Answer: D

Page: 1 / 97

Total 482 Questions | Updated On: Mar 26, 2025

Add To Cart