AZ-204 – Question 148

• Ocean Transport `” This workflow gathers and validates container information including container contents and arrival notices at various shipping ports.
• Inland Transport `” This workflow gathers and validates trucking information including fuel usage, number of stops, and routes.

• Container API `” This API provides container information including weight, contents, and other attributes.
• Location API `” This API provides location information regarding shipping ports of call and trucking stops.
• Shipping REST API `” This API provides shipping information for use and display on the shipping website.

Shipping Web Site –
The site displays shipping container tracking information and container contents. The site is located at http://shipping.wideworldimporters.com/

Proposed solution –
The on-premises shipping application must be moved to Azure. The VM has been migrated to a new Standard_D16s_v3 Azure VM by using Azure Site Recovery and must remain running in Azure to complete the BizTalk component migrations. You create a Standard_D16s_v3 Azure VM to host BizTalk Server. The Azure architecture diagram for the proposed solution is shown below:

• Secure resources to the corporate VNet.
• Allow deployment to a testing location within Azure while not incurring additional costs.
• Automatically scale to double capacity during peak shipping times while not causing application downtime.
• Minimize costs when selecting an Azure payment model.

Shipping website –
Use Azure Content Delivery Network (CDN) and ensure maximum performance for dynamic content while minimizing latency and costs.

Issues –
Windows Server 2016 VM –
The VM shows high network latency, jitter, and high CPU utilization. The VM is critical and has not been backed up in the past. The VM must enable a quick restore from a 7-day snapshot to include in-place restore of disks in case of failure.

Shipping website and REST APIs –
The following error message displays while you are testing the website:
Failed to load http://test-shippingapi.wideworldimporters.com/: No ‘Access-Control-Allow-Origin’ header is present on the requested resource. Origin ‘http://test.wideworldimporters.com/’ is therefore not allowed access.

Question 1.
HOTSPOT –
You need to configure Azure CDN for the Shipping web site.
Which configuration options should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Scenario: Shipping website –
Use Azure Content Delivery Network (CDN) and ensure maximum performance for dynamic content while minimizing latency and costs.
Tier: Standard –

Profile: Akamai –
Optimization: Dynamic site acceleration
Dynamic site acceleration (DSA) is available for Azure CDN Standard from Akamai, Azure CDN Standard from Verizon, and Azure CDN Premium from Verizon profiles.
DSA includes various techniques that benefit the latency and performance of dynamic content. Techniques include route and network optimization, TCP optimization, and more.
You can use this optimization to accelerate a web app that includes numerous responses that aren’t cacheable. Examples are search results, checkout transactions, or real-time data. You can continue to use core Azure CDN caching capabilities for static data.

Reference: https://docs.microsoft.com/en-us/azure/cdn/cdn-optimization-overview

Question 2.
HOTSPOT –
You need to correct the VM issues.
Which tools should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Reference: https://azure.microsoft.com/en-us/blog/an-easy-way-to-bring-back-your-azure-vm-with-in-place-restore/

Question 3.
HOTSPOT –
You need to secure the Shipping Function app.
How should you configure the app? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Scenario: Shipping Function app: Implement secure function endpoints by using app-level security and include Azure Active Directory (Azure AD).

Box 1: Anonymous –
Implement secure function endpoints by using app-level security and include Azure Active Directory (Azure AD).
=> First answer should be anonymous, as the authentication happens at app service level

Box 2: JSON based Token (JWT)

Azure AD uses JSON based tokens (JWTs) that contain claims

Box 3: HTTP –

How a web app delegates sign-in to Azure AD and obtains a token
User authentication happens via the browser. The OpenID protocol uses standard HTTP protocol messages.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-scenarios

Question 4.

You need to secure the Shipping Logic App.

What should you use?

A. Azure App Service Environment (ASE)

B. Integration Service Environment (ISE)

C. VNet service endpoint

D. Azure AD B2B integrationCorrect Answer: B 

Scenario: The Shipping Logic App requires secure resources to the corporate VNet and use dedicated storage resources with a fixed costing model.

You can access to Azure Virtual Network resources from Azure Logic Apps by using integration service environments (ISEs).

Sometimes, your logic apps and integration accounts need access to secured resources, such as virtual machines (VMs) and other systems or services, that are inside an Azure virtual network. To set up this access, you can create an integration service environment (ISE) where you can run your logic apps and create your integration accounts.

Reference: https://docs.microsoft.com/en-us/azure/logic-apps/connect-virtual-network-vnet-isolated-environment-overview