AZ-203 practice test

1. Question 1 · 15

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that authentication events are triggered and processed according to the authentication events policy. Solution: Create a new Azure Event Grid topic and add a subscription for the events. Does the solution meet the goal?

   Choose one answer.

   • Yes
   • No

   Read explanation

   Instead ensure that signout events have a subject prefix. Create an Azure Event Grid subscription that uses the subjectBeginsWith filter. Scenario: Authentication events are used to monitor users signing in and signing out. All authentication events must be processed by Policy service. Sign outs must be processed as quickly as possible.

2. Question 2 · 15

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that authentication events are triggered and processed according to the authentication events policy. Solution: Create separate Azure Event Grid topics and subscriptions for sign-in and sign-out events. Does the solution meet the goal?

   Choose one answer.

   • Yes
   • No

   Read explanation

   Instead ensure that signout events have a subject prefix. Create an Azure Event Grid subscription that uses the subjectBeginsWith filter. Scenario: Authentication events are used to monitor users signing in and signing out. All authentication events must be processed by Policy service. Sign outs must be processed as quickly as possible.

3. Question 3 · 19

   You need to provision and deploy the order workflow. Which three components should you include? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   Choose all answers that apply.

   • Connections
   • On-premises Data Gateway
   • Workflow definition
   • Resources
   • Functions

   Read explanation

   Scenario: The order workflow fails to run upon initial deployment to Azure.

4. Question 4 · 2

   You develop a website. You plan to host the website in Azure. You expect the website to experience high traffic volumes after it is published. You must ensure that the website remains available and responsive while minimizing cost. You need to deploy the website. What should you do?

   Choose one answer.

   • Deploy the website to a virtual machine. Configure the virtual machine to automatically scale when the CPU load is high.
   • Deploy the website to an App Service that uses the Shared service tier. Configure the App service plan to automatically scale when the CPU load is high.
   • Deploy the website to an App Service that uses the Standard service tier. Configure the App service plan to automatically scale when the CPU load is high.
   • Deploy the website to a virtual machine. Configure a Scale Set to increase the virtual machine instance count when the CPU load is high.

   Read explanation

   Windows Azure Web Sites (WAWS) offers 3 modes: Standard, Free, and Shared. Standard mode carries an enterprise-grade SLA (Service Level Agreement) of 99.9% monthly, even for sites with just one instance. Standard mode runs on dedicated instances, making it different from the other ways to buy Windows Azure Web Sites. Incorrect Answers: B: Shared and Free modes do not offer the scaling flexibility of Standard, and they have some important limits. Shared mode, just as the name states, also uses shared Compute resources, and also has a CPU limit. So, while neither Free nor Shared is likely to be the best choice for your production environment due to these limits.

5. Question 5 · 24

   You need to ensure that the SecurityPin security requirements are met.

   Choose one answer.

   • Configure the web application to connect to the database using the WebAppIdentity security principal. Using the Azure Portal, add Data Masking to the SecurityPin column and exclude the WebAppIdentity service principal.
   • Using the Azure Portal, add Data Masking to the SecurityPin column, and exclude the dbo user. Add a SQL security policy with a filter predicate based on the user identity.
   • Enable Always Encrypted for the SecurityPin column using a certificate based on a trusted certificate authority. Update the Getting Started document with instructions to ensure that the certificate is installed on user machines.
   • Enable Always Encrypted for the SecurityPin column using a certificate contained in Azure Key Vault and grant the WebAppIdentity service principal access to the certificate.

   Read explanation

   Scenario: Users' SecurityPin must be stored in such a way that access to the database does not allow the viewing of SecurityPins. The web application is the only system that should have access to SecurityPins. Incorrect Answers: A, B: Instead of DataMasing, enable Always Encrypted for the SecurityPin column. C: Enable Always Encrypted is correct, but only the WebAppIdentity service principal should be given access to the certificate. Implement Azure security

6. Question 6 · 3

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. You are developing and deploying several ASP.Net web applications to Azure App Service. You plan to save session state information and HTML output. You must use a storage mechanism with the following requirements: ✑ Share session state across all ASP.NET web applications ✑ Support controlled, concurrent access to the same session state data for multiple readers and a single writer ✑ Save full HTTP responses for concurrent requests You need to store the information. Proposed Solution: Deploy and configure an Azure Database for PostgreSQL. Update the web applications. Does the solution meet the goal?

   Choose one answer.

   • Yes
   • No

7. Question 7 · 3

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. You are developing and deploying several ASP.Net web applications to Azure App Service. You plan to save session state information and HTML output. You must use a storage mechanism with the following requirements: ✑ Share session state across all ASP.NET web applications ✑ Support controlled, concurrent access to the same session state data for multiple readers and a single writer ✑ Save full HTTP responses for concurrent requests You need to store the information. Proposed Solution: Deploy and configure Azure Cache for Redis. Update the web applications. Does the solution meet the goal?

   Choose one answer.

   • Yes
   • No

8. Question 8 · 4

   You provide an Azure API Management managed web service to clients. The back-end web service implements HTTP Strict Transport Security (HSTS). Every request to the backend service must include a valid HTTP authorization header. You need to configure the Azure API Management instance with an authentication policy. Which two policies can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   Choose all answers that apply.

   • OAuth Client Credential Grant
   • Basic Authentication
   • Certificate Authentication
   • Digest Authentication

9. Question 9 · 8

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that the SecurityPin security requirements are met. Solution: Enable Always Encrypted for the SecurityPin column using a certificate based on a trusted certificate authority. Update the Getting Started document with instructions to ensure that the certificate is installed on user machines. Does the solution meet the goal?

   Choose one answer.

   • Yes
   • No

   Read explanation

   Enable Always Encrypted is correct, but only the WebAppIdentity service principal should be given access to the certificate. Scenario: Users' SecurityPin must be stored in such a way that access to the database does not allow the viewing of SecurityPins. The web application is the only system that should have access to SecurityPins.

10. Question 10 · 8

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that the SecurityPin security requirements are met. Solution: Using the Azure Portal, add Data Masking to the SecurityPin column, and exclude the dbo user. Add a SQL security policy with a filter predicate based on the user identity. Does the solution meet the goal?

    Choose one answer.

    • Yes
    • No

    Read explanation

    Instead of DataMasing, enable Always Encrypted for the SecurityPin column. Scenario: Users' SecurityPin must be stored in such a way that access to the database does not allow the viewing of SecurityPins. The web application is the only system that should have access to SecurityPins.

11. Question 11 · 8

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that the SecurityPin security requirements are met. Solution: Enable Always Encrypted for the SecurityPin column using a certificate contained in Azure Key Vault and grant the WebAppIdentity service principal access to the certificate. Does the solution meet the goal?

    Choose one answer.

    • Yes
    • No

    Read explanation

    Scenario: Users' SecurityPin must be stored in such a way that access to the database does not allow the viewing of SecurityPins. The web application is the only system that should have access to SecurityPins.

12. Question 12 · 8

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that the SecurityPin security requirements are met. Solution: Configure the web application to connect to the database using the WebAppIdentity security prinicipal. Using the Azure Portal, add Data Masking to the SecurityPin column and exclude the WebAppIdentity service principal. Does the solution meet the goal?

    Choose one answer.

    • Yes
    • No

    Read explanation

    Scenario: Users' SecurityPin must be stored in such a way that access to the database does not allow the viewing of SecurityPins. The web application is the only system that should have access to SecurityPins. All certificates and secrets used to secure data must be stored in Azure Key Vault.

Paid access to all 12 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.