QUESTION: 37 Exam Topic: Implement Azure security questions

HOTSPOT (Drag & Drop is not supported)
You are developing a web application that makes calls to the Microsoft Graph API. You register the application in the Azure portal and upload a valid X509 certificate.

You create an appsettings.json file containing the certificate name, client identifier for the application, and the tenant identifier of the Azure Active Directory (Azure AD). You create a method named ReadCertificate to return the X509 certificate by name.

You need to implement code that acquires a token by using the certificate.
How should you complete the code segment? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: ConfidentialClientApplicationBuilder
Here's the code to instantiate the confidential client application with a client secret:
app = ConfidentialClientApplicationBuilder.Create(config.ClientId)
.WithClientSecret(config.ClientSecret)
.WithAuthority(new Uri(config.Authority))
.Build();

Box 2: scopes
After you've constructed a confidential client application, you can acquire a token for the app by calling AcquireTokenForClient, passing the scope, and optionally forcing a refresh of the token.

Sample code: result = await app.AcquireTokenForClient(scopes)
.ExecuteAsync();

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/develop/scenario-daemon-app-configuration
https://docs.microsoft.com/en-us/azure/active-directory/develop/scenario-daemon-acquire-token

Reveal Solution Next Question

QUESTION: 38 Exam Topic: Implement Azure security questions

A development team is creating a new REST API. The API will store data in Azure Blob storage. You plan to deploy the API to Azure App Service.

Developers must access the Azure Blob storage account to develop the API for the next two months. The Azure Blob storage account must not be accessible by the developers after the two-month time period.

You need to grant developers access to the Azure Blob storage account.
What should you do?

Generate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers.
Create and apply a new lifecycle management policy to include a last accessed date value. Apply the policy to the Azure Blob storage account.
Provide all developers with the access key for the Azure Blob storage account. Update the API to include the Coordinated Universal Time (UTC) timestamp for the request header.
Grant all developers access to the Azure Blob storage account by assigning role-based access control (RBAC) roles.

Answer(s): A

Reference:

https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

Reveal Solution Next Question

QUESTION: 41 Exam Topic: Implement Azure security questions

DRAG DROP (Drag & Drop is not supported)
An organization plans to deploy Azure storage services.
You need to configure shared access signature (SAS) for granting access to Azure Storage.

Which SAS types should you use? To answer, drag the appropriate SAS types to the correct requirements. Each SAS type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

Reveal Solution Next Question

QUESTION: 42 Exam Topic: Implement Azure security questions

HOTSPOT (Drag & Drop is not supported)
You are developing an ASP.NET Core app that includes feature flags which are managed by Azure App Configuration. You create an Azure App Configuration store named AppFeatureflagStore as shown in the exhibit:

You must be able to use the feature in the app by using the following markup:

You need to update the app to use the feature flag.
Which values should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: FeatureGate
You can use the FeatureGate attribute to control whether a whole controller class or a specific action is enabled.

Box 2: AddAzureAppConfiguration
The extension method AddAzureAppConfiguration is used to add the Azure App Configuration Provider.

Box 3: https://appfeatureflagstore.azconfig.io
You need to request the access token with resource=https://<yourstorename>.azconfig.io

Reference:

https://docs.microsoft.com/en-us/azure/azure-app-configuration/use-feature-flags-dotnet-core
https://csharp.christiannagel.com/2020/05/19/azureappconfiguration/
https://stackoverflow.com/questions/61899063/how-to-use-azure-app-configuration-rest-api

Reveal Solution Next Question

Free AZ-204 Exam Braindumps (page: 32)

QUESTION: 37 Exam Topic: Implement Azure security questions

Explanation:

Reference:

QUESTION: 38 Exam Topic: Implement Azure security questions

Reference:

QUESTION: 41 Exam Topic: Implement Azure security questions

Explanation:

Reference:

QUESTION: 42 Exam Topic: Implement Azure security questions

Explanation:

Reference: