Microsoft AZ-202 시험

Question No : 1

Note: In this section you will see one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem, and you must determine whether the solution meets the stated goals. More than one solution might solve the problem. It is also possible that none of the solutions solve the problem.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
You need to meet the LabelMaker application security requirement.
Solution: Create a RoleBinding and assign it to the Azure AD account.
Does the solution meet the goal?

• A.Yes
• B.No

답을 확인하기

정답:
Explanation:
Scenario: The LabelMaker applications must be secured by using an AAD account that has full access to all namespaces of the Azure Kubernetes Service (AKS) cluster.
Permissions can be granted within a namespace with a RoleBinding, or cluster-wide with a ClusterRoleBinding.
References: https://kubernetes.io/docs/reference/access-authn-authz/rbac/

Question No : 2

You need to troubleshoot the order workflow.
What should you do? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Review the run history.
• B.Review the trigger history.
• C.Review the API connections.
• D.Review the activity log.

답을 확인하기

정답:
Explanation:
Scenario: The order workflow fails to run upon initial deployment to Azure.
Deployment errors arise from conditions that occur during the deployment process. They appear in the activity log.
References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-audit

Question No : 3

DRAG DROP
You need to deploy a new version of the LabelMaker application.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Step 1: Build a new application image by using dockerfile
Step 2: Create an alias if the image with the fully qualified path to the registry Before you can push the image to a private registry, you’ve to ensure a proper image name. This can be achieved using the docker tag command. For demonstration purpose, we’ll use Docker’s hello world image, rename it and push it to ACR.
# pulls hello-world from the public docker hub
$ docker pull hello-world # tag the image in order to be able to push it to a private registry $ docker tag hello-word <REGISTRY_NAME>/hello-world # push the image $ docker push <REGISTRY_NAME>/hello-world
Step 3: Log in to the registry and push image In order to push images to the newly created ACR instance, you need to login to ACR form the Docker CLI. Once logged in, you can push any existing docker image to your ACR instance.
Scenario: Coho Winery plans to move the application to Azure and continue to support label creation.
LabelMaker app
Azure Monitor Container Health must be used to monitor the performance of workloads that are deployed to Kubernetes environments and hosted on Azure Kubernetes Service (AKS).
You must use Azure Container Registry to publish images that support the AKS deployment.
References: https://thorsten-hans.com/how-to-use-a-private-azure-container-registry-with-kubernetes­9b86e67b93b6 https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-quick-task

Question No : 4

HOTSPOT
You need to ensure that you can deploy the LabelMaker application.
How should you complete the CLI commands? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Box 1: group Create a resource group with the az group create command. An Azure resource group is a logical group in which Azure resources are deployed and managed.
The following example creates a resource group named myResourceGroup in the westeurope location.
az group create --name myResourceGroup --location westeurope
Box 2: CohoWinterLabelMaker Use the resource group named, which is used in the second command.
Box 3: aks The command az aks create, is used to create a new managed Kubernetes cluster.
Box 4: monitoring Scenario: LabelMaker app Azure Monitor Container Health must be used to monitor the performance of workloads that are deployed to Kubernetes environments and hosted on Azure Kubernetes Service (AKS).
You must use Azure Container Registry to publish images that support the AKS deployment.

Question No : 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
You need to meet the LabelMaker application security requirement.
Solution: Create a Microsoft Azure Active Directory service principal and assign it to the Azure Kubernetes Service (AKS) cluster.
Does the solution meet the goal?

• A.Yes
• B.No

답을 확인하기

정답:

Question No : 6

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
You need to meet the LabelMaker application security requirement.
Solution: Place the Azure Active Directory account into an Azure AD group. Create a ClusterRoleBinding and assign it to the group.
Does the solution meet the goal?

• A.Yes
• B.No

답을 확인하기

정답:
Explanation:
Scenario: The LabelMaker applications must be secured by using an AAD account that has full access to all namespaces of the Azure Kubernetes Service (AKS) cluster.
Permissions can be granted within a namespace with a RoleBinding, or cluster-wide with a ClusterRoleBinding.
References: https://kubernetes.io/docs/reference/access-authn-authz/rbac/

Question No : 7

Topic 4, Coho WineryLabelMaker app
Coho Winery produces, bottles, and distributes a variety of wines globally. You are a developer implementing highly scalable and resilient applications to support online order processing by using Azure solutions.
Coho Winery has a LabelMaker application that prints labels for wine bottles. The application sends data to several printers. The application consists of five modules that run independently on virtual machines (VMs). Coho Winery plans to move the application to Azure and continue to support label creation.
External partners send data to the LabelMaker application to include artwork and text for custom label designs.

Requirements
Data
You identify the following requirements for data management and manipulation:
- Order data is stored as nonrelational JSON and must be queried using Structured Query Language (SQL).
- Changes to the Order data must reflect immediately across all partitions. All reads to the Order data must fetch the most recent writes.

Security
You have the following security requirements:
- Users of Coho Winery applications must be able to provide access to documents, resources, and applications to external partners.
- External partners must use their own credentials and authenticate with their organization's identity management solution.
- External partner logins must be audited monthly for application use by a user account administrator to maintain company compliance.
- Storage of e-commerce application settings must be maintained in Azure Key Vault.
- E-commerce application sign-ins must be secured by using Azure App Service authentication and Azure Active Directory (AAD).
- Conditional access policies must be applied at the application level to protect company content.
- The LabelMaker application must be secured by using an AAD account that has full access to all namespaces of the Azure Kubernetes Service (AKS) cluster.

LabelMaker app
Azure Monitor Container Health must be used to monitor the performance of workloads that are deployed to Kubernetes environments and hosted on Azure Kubernetes Service (AKS).
You must use Azure Container Registry to publish images that support the AKS deployment.

Architecture



Issues
Calls to the Printer API App fall periodically due to printer communication timeouts.
Printer communication timeouts occur after 10 seconds. The label printer must only receive up to 5 attempts within one minute
The order workflow fails to run upon initial deployment to Azure.

Order.Json
Relevant portions oi the app files are shown below. Line numbers are included for reference only. The JSON file contains a representation of the data for an order that includes a single item.







Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution.
Determine whether the solution meets the stated goals.
You need to meet the LabelMaket application
Solution; Create a conditional access policy and assign it to the Azure Kubernetes service cluster.
Does the solution meet the goal?

• A.Yes
• B.No

답을 확인하기

정답:
Explanation:
Scenario: The LabelMaker applications must be secured by using an AAD account that has full access to all namespaces of the Azure Kubernetes Service (AKS) cluster.
Before an Azure Active Directory account can be used with the AKS cluster, a role binding or cluster role binding needs to be created.
References: https://docs.microsoft.com/en-us/azure/aks/aad-integration

Question No : 8

You need to resolve the Policy Loss issue.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

• A.Add an Azure Event Hub. Send the policy to the event hub. Configure the Policy service to read actions from the event hub.
• B.Add an Azure Service Bus queue. Send the policy to the queue. Configure the Policy service to read actions from the queue.
• C.Add an Azure Queue storage queue. Send the policy to the queue. Configure the Policy service to read actions from the queue.
• D.Add an Azure Service Bus topic. Send the policy to the topic. Configure the Policy service to read actions from the topic.

답을 확인하기

정답:

Question No : 9

HOTSPOT
You need to tool code at line LE03 of Login Event to ensure that all authentication events are processed correctly.
How should you complete the code? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

답을 확인하기

정답:

Question No : 10

You need to meet the scaling requirement for Policy Service.
What should you store in Azure Redis Cache?

• A.HttpContext.Items
• B.ViewState
• C.Session state
• D.TempData

답을 확인하기

정답:

Question No : 11

You need to ensure that the solution can meet the scaling requirements for Policy Service.
Which Azure Application Insights data model should you use?

• A.an Application Insights metric
• B.an Application Insights dependency
• C.an Application Insights trace
• D.an Application Insights event

답을 확인하기

정답:

Question No : 12

DRAG DROP
You need to ensure that PolicyLib requirements are met.
How should you complete the code segment? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one Point.

답을 확인하기

정답:

Question No : 13

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
You need to ensure that authentication events are triggered and processed according to the policy.
Solution: Create a new Azure Event Grid subscription for all authentication that delivers messages to an Azure Event Hub. Use the subscription to process signout events.
Does the solution meet the goal?

• A.Yes
• B.No

답을 확인하기

정답:
Explanation:
Use a separate Azure Event Grid topics and subscriptions for sign-in and sign-out events.
Scenario: Authentication events are used to monitor users signing in and signing out. All authentication events must be processed by Policy service. Sign outs must be processed as quickly as possible.

Question No : 14

You need to resolve a notification latency issue.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point

• A.Ensure that the Azure Function is using an App Service plan.
• B.Set Always On to false
• C.Ensure that the Azure Function is set to use a consumption plan.
• D.Set Always On to true.

답을 확인하기

정답:
Explanation:
Azure Functions can run on either a Consumption Plan or a dedicated App Service Plan. If you run in a dedicated mode, you need to turn on the Always On setting for your Function App to run properly. The Function runtime will go idle after a few minutes of inactivity, so only HTTP triggers will actually "wake up" your functions. This is similar to how WebJobs must have Always On enabled.
Scenario: Notification latency: Users report that anomaly detection emails can sometimes arrive several minutes after an anomaly is detected.
Anomaly detection service: You have an anomaly detection service that analyzes log information for anomalies. It is implemented as an Azure Machine Learning model. The model is deployed as a web service. If an anomaly is detected, an Azure Function that emails administrators is called by using an HTTP WebHook.
References: https://github.com/Azure/Azure-Functions/wiki/Enable-Always-On-when-running-on-dedicated­App-Service-Plan

Question No : 15

DRAG DROP
You need to add code at line EG15 in EventGridController.cs to ensure that the Log policy applies to all services.
How should you complete the code? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Box 1: Status
Box 2: Succeded
Box 3: operationName
Scenario: Policy service
You develop and deploy a stateful ASP.NET Core 2.1 web application named Policy service to an
Azure App Service Web App. The application reacts to events from Azure Event Grid and
performs policy actions based on those events.
The application must include the Event Grid Event ID field in all Application Insights telemetry.