Microsoft AZ-204 AZ-305 AZ-400 AZ-500 - Developer Architect DevOps Security

By Taylor Kim · Updated Jul 10, 2026

Questions25
Passing Score75%
Format100% Multiple Choice
Sessions Logged1,645
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
Community rating 4.3 out of 5 from 45 ratings.
4.3 (45)

Topics covered

This quiz

Uncategorized25 (100%)

Uncategorized25 questions

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

A solutions architect designs a microservices architecture on Azure. Services need to communicate asynchronously, and each service should only receive messages relevant to it (e.g., "OrderCreated" events go to both inventory and shipping services). Which Azure messaging architecture achieves fan-out?

Answer choices

  • A. Azure Service Bus Queue

  • B. Azure Service Bus Topic with subscriptions and filters

  • C. Azure Storage Queue

  • D. Azure Event Hubs

Question 2

An architect designs a solution for processing high-volume IoT events. The solution receives 1 million events per hour, needs real-time stream processing, and must store processed results in Azure Synapse Analytics. Which Azure architecture is recommended?

Answer choices

  • A. IoT devices → Azure Queue Storage → Azure Functions → Azure SQL

  • B. IoT devices → Azure IoT Hub → Azure Stream Analytics → Azure Synapse Analytics

  • C. IoT devices → Azure Event Grid → Azure Logic Apps → Cosmos DB

  • D. IoT devices → Service Bus → APIM → Azure SQL

Question 3

A company deploys microservices to Azure Kubernetes Service. Security requirements state that pods must not run as root. Which Kubernetes/AKS security control enforces this?

Answer choices

  • A. Azure AD RBAC for Kubernetes

  • B. Kubernetes Pod Security Admission (PSA) with "restricted" or "baseline" policy

  • C. AKS network policy with Cilium

  • D. Azure Defender for Containers runtime threat detection

Question 4

An Azure Security Engineer must ensure that all Azure VMs have Microsoft Defender for Endpoint (MDE) installed and configured. Which solution automates this across the organization?

Answer choices

  • A. Manually install MDE agent on each VM

  • B. Azure Policy with DeployIfNotExists effect and Guest Configuration or Defender for Cloud auto-provisioning

  • C. Azure Update Management

  • D. Azure Automation runbook

Question 5

A DevOps engineer uses Azure Container Apps for microservices. A new service version is deployed, and the engineer wants 20% of traffic routed to the new version while monitoring for errors. Which Azure Container Apps feature enables this?

Answer choices

  • A. Container App revision management with traffic splitting

  • B. AKS Horizontal Pod Autoscaler

  • C. Azure Load Balancer weighted rules

  • D. App Service deployment slots