| Question.91 You develop and deploy a Java RESTful API to Azure App Service. You open a browser and navigate to the URL for the API. You receive the following error message:  You need to resolve the error. What should you do? (A) Bind an SSL certificate (B) Enable authentication (C) Enable CORS (D) Map a custom domain (E) Add a CDN |
91. Click here to View Answer
Correct Answer: C
We need to enable Cross-Origin Resource Sharing (CORS).
References:
https://medium.com/@xinganwang/a-practical-guide-to-cors-51e8fd329a1f
| Question.92 You need to secure the Azure Functions to meet the security requirements. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. (A) Store the RSA-HSM key in Azure Cosmos DB. Apery the built-in policies for customer-managed keys and allowed locations. (B) Create a free tier Azure App Configuration instance with a new Azure AD service principal. (C) Store the RSA-HSM key in Azure Key Vault with soft-delete and purge-protection features enabled. (D) Store the RSA-HSM key in Azure Blob storage with an Immutability policy applied to the container. (E) Create a standard tier Azure App Configuration instance with an assigned Azure AD managed identity. |
92. Click here to View Answer
Correct Answer: C,E
Scenario: All Azure Functions must centralize management and distribution of configuration data for different environments and geographies, encrypted by using a company-provided RSA-HSM key.
Microsoft Azure Key Vault is a cloud-hosted management service that allows users to encrypt keys and small secrets by using keys that are protected by hardware security modules (HSMs).
You need to create a managed identity for your application.
Reference:
https://docs.microsoft.com/en-us/azure/app-service/app-service-key-vault-references
| Question.93 You are developing a web application by using the Azure SDK. The web application accesses data m a zone- redundant BlockBlobStorage storage account The application must determine whether the data has changed since the application last reao the data. Update operations must use the latest data changes when writing data to the storages……………… You need to implement the update operations. Which values should you use? To answer, select the appropriate option m the answer area. NOTE Each correct selection is worth one point. |
93. Click here to View Answer
Correct Answer:
See the answer in below image.
| Question.94 You need to implement telemetry for non-user actions. How should you complete the Filter class? To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.  |
94. Click here to View Answer
Correct Answer:
Explanation:
Scenario: Exclude non-user actions from Application Insights telemetry.
Box 1: ITelemetryProcessor
To create a filter, implement ITelemetryProcessor. This technique gives you more direct control over what is included or excluded from the telemetry stream.
Box 2: ITelemetryProcessor
Box 3: ITelemetryProcessor
Box 4: RequestTelemetry
Box 5: /health
To filter out an item, just terminate the chain.
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/app/api-filtering-sampling
| Question.95 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You develop and deploy an Azure App Service API app to a Windows-hosted deployment slot named Development. You create additional deployment slots named Testing and Production. You enable auto swap on the Production deployment slot. You need to ensure that scripts run and resources are available before a swap operation occurs. Solution: Enable auto swap for the Testing slot. Deploy the app to the Testing slot. Does the solution meet the goal? (A) Yes (B) No |
95. Click here to View Answer
Correct Answer: B
Instead update the web.config file to include the applicationInitialization configuration element. Specify custom initialization actions to run the scripts.
Note: Some apps might require custom warm-up actions before the swap. The applicationInitialization configuration element in web.config lets you specify custom initialization actions. The swap operation waits for this custom warm-up to finish before swapping with the target slot. Here’s a sample web.config fragment.
<system.webServer>
<applicationInitialization>
<add initializationPage=”/” hostName=”[app hostname]” />
<add initializationPage=”/Home/About” hostName=”[app hostname]” />
</applicationInitialization>
</system.webServer>
Reference:
https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots#troubleshoot-swaps