All practice questions

You are designing a disaster recovery (DR) solution for a critical financial application migrating to Azure. The application database has the following requirements:
- Employs native cross-database queries and relies heavily on SQL Server Agent jobs.
- Requires database replication between East US (primary) and West US (secondary).
- The write workload must connect via a single endpoint that remains unchanged during a failover.
- Reporting applications must run read-only queries against the secondary region using a dedicated endpoint.
- All database traffic must remain within private virtual networks without traversing the public internet.

Which database configuration should you recommend to meet these requirements?

A software development company is designing a security and access control strategy for an Azure Storage account named devlogs. You must design a solution that meets the following requirements:

1. A team of five internal security auditors must be granted temporary access to read audit logs in a specific blob container for 90 days. The solution must support immediate revocation of this access.
2. A database administrator must be able to manage the storage account configurations, but only when actively performing scheduled maintenance tasks. This administrative access must not be permanently active.
3. Access configuration must follow the principle of least privilege and minimize administrative overhead.

Which two actions should you include in the design?

You are designing an Azure Backup solution for a suite of critical Azure Virtual Machines hosting a high-performance SAP HANA database. The solution must satisfy the following requirements:
- Back up the virtual machines $2$ times per day to protect against database transaction losses.
- Retain the local instant recovery snapshots on the virtual machines' managed disks for $14$ days to allow quick operational restores.
- Protect the backup data against regional disasters by replicating it to a secondary paired region, allowing recovery even if the primary region is completely unavailable.

Which of the following configuration options must you include in your backup design? (Select TWO)

An organization is designing a backup solution for business-critical Azure Virtual Machines hosting an enterprise database. The solution must meet the following requirements:

* Daily backups must be retained for a minimum of $30$ days.
* Restore operations for any backup up to $14$ days old must be performed as an 'Instant Restore' to meet strict Recovery Time Objective (RTO) targets.
* Backups must remain available even in the event of a regional datacenter disaster.

Which two configurations should you include in the backup design to meet the requirements?

A company plans to migrate two on-premises SQL Server databases to Azure. The databases have the following requirements:

* Database 1: Supports a legacy human resources application that requires SQL Server Agent, Common Language Runtime (CLR) integration, and cross-database queries.
* Database 2: Supports a lightweight web API that has highly unpredictable traffic patterns, requiring automatic scaling of compute resources and a cost model where compute is billed per second of active usage.

The migration strategy must minimize administrative overhead for managing operating systems and database software updates.

Which two Azure SQL deployment options should you recommend? (Choose two.)

Aetheris Biotech is designing an identity and access management strategy for its Microsoft Entra ID tenant to comply with new pharmaceutical data protection standards. The cloud architecture team has identified four distinct security requirements for different groups of users and applications. Match each security and compliance requirement on the left to the most appropriate Microsoft Entra ID Conditional Access configuration or feature on the right that achieves the requirement with the least administrative effort.

A multinational e-commerce company uses an Azure General Purpose v2 (GPv2) storage account to store product catalog images. The account is configured with Read-Access Geo-Zone-Redundant Storage (RA-GZRS). The primary region is East US (which supports availability zones) and the secondary paired region is West US (which does not support availability zones for standard GPv2 storage accounts).

The company's application is designed with a connection string that reads from the primary endpoint (catalog.blob.core.windows.net) and automatically falls back to the read-only secondary endpoint (catalog-secondary.blob.core.windows.net) if a primary read request fails.

A major disaster causes a complete outage of the East US region. The operations team initiates a customer-managed failover for the storage account. The last sync time reported prior to the outage was 8 minutes ago.

What is the state of the storage account and the application endpoints after the failover completes?

You are designing a backup solution for Azure Virtual Machines that host a critical business application. The design must meet the following requirements:
- Backups must be recoverable even if the primary Azure region experiences a complete disaster.
- Recent backups from the last 5 days must be available for fast recovery directly from local snapshots without vault latency.
- Backups must be retained for a total of 5 years to meet regulatory compliance.

Which two configurations should you include in the backup design? Select two.

A media production company stores high-value, pre-release film assets in an Azure Blob Storage container named `pre-release-footage`. You must design an access control solution that meets the following requirements:
1. Internal media editors must be allowed to modify the storage account's networking configurations and manage access keys, but only during scheduled maintenance windows. Their elevated access must require justification and automatically expire after 2 hours.
2. An external post-production vendor must be granted read-only access to a specific folder within `pre-release-footage` for exactly 30 days. If the vendor's access credentials are leaked, security administrators must be able to immediately revoke access for this vendor without rotating the storage account access keys or affecting other active tokens.
3. Access privileges must be granted to Microsoft Entra security groups rather than individual user accounts to ensure scalable management.

Which access control and security design should you recommend?

A media production agency is designing a secure storage solution on Azure to allow external freelance animators to upload raw rendering files to a specific Blob storage container named raw-renders. The access must meet the following requirements:

1. The animators must only have access to the raw-renders container for a maximum of 30 days.
2. The security team must be able to instantly revoke access to the container in the event of a credential leak, without rotating the storage account access keys or impacting other applications.
3. Access must be granted with the minimum necessary permissions.

Which of the following access control strategies should you recommend?

A company plans to deploy a new application that stores user profile photos in an Azure Blob Storage account. The architecture design requires the storage solution to remain available if a single datacenter within the primary region suffers a complete outage. The design does not require replication to a secondary region, and the company wants to minimize storage costs. Which redundancy option should you recommend for the storage account?

An organization is designing a high availability and disaster recovery (HA/DR) solution for a retail application database layer that is migrating to Azure. The database workload depends on SQL Server Agent for scheduled data-aggregation tasks and requires cross-database queries. The solution must meet the following requirements:
- Recover from a regional outage automatically with a Recovery Time Objective (RTO) of less than 1 hour.
- Maintain a single connection string for the application tier that does not require modification during a regional failover.
- Allow read-heavy reporting applications to query the secondary replica in the secondary region to reduce query impact on the primary database.

Which two options should you recommend to meet these requirements? (Select TWO.)

A medical research facility is deploying a genomic data analysis application on Azure. The application utilizes a combination of virtual machine-based analytics engines and a shared storage platform. The storage infrastructure must satisfy the following constraints:

* The analytics database requires high-performance write operations for transient scratch space, needing sub-millisecond latencies.
* A shared file storage system must support POSIX-compliant file access over NFS for multiple Linux-based compute nodes, with high throughput and resiliency against local datacenter zone outages.
* Temporary datasets must be shared with external research teams via pre-signed URLs. The facility must be able to invalidate these URLs immediately if a security anomaly is detected, without affecting other shared datasets.

Which TWO of the following configurations should you recommend in the storage architecture design? (Select TWO.)

You are designing a globally distributed package delivery tracking application. The solution has the following requirements:
- Save package telemetry (JSON documents) in an Azure Cosmos DB for NoSQL database. The data must be partitioned to prevent hot partitions and scale horizontally. Telemetry contains $PackageId$ (GUID), $LogisticsHubId$ (10 unique values), and $DestinationCountry$ (190 unique values).
- Replicate the database to three regions (East US, West Europe, and East Asia) with multi-region writes enabled to ensure sub-$10\text{ ms}$ read/write latency.
- Store high-resolution photos of delivered packages (up to $5\text{ MB}$ each) in an Azure Blob Storage account. The photo storage must survive regional outages and allow read access from a secondary region if the primary region fails.

Which two configurations should you include in the design?

You are designing a backup solution for a production SAP HANA database running on an Azure virtual machine. The solution must satisfy the following requirements:
- Retain weekly full backups for 365 days.
- Ensure backup data is resilient to a primary region outage.
- Enable database restoration to a secondary paired region with minimal delay in the event of a primary region disaster.

Which backup configuration should you recommend?

You are designing a disaster recovery solution for an application that uses an Azure SQL Database. The solution must support automatic failover to a secondary Azure region in the event of a primary region outage. The application must be able to reconnect to the database after failover without any changes to its connection string. Which solution should you recommend?

A healthcare provider requires a business continuity strategy for an electronic health record (EHR) database migrating to Azure. The database workload has the following requirements:

* It must support legacy cross-database queries and execute SQL Server Agent jobs for nightly aggregation tasks.
* It must survive a regional outage with a Recovery Time Objective (RTO) of $1$ hour and a Recovery Point Objective (RPO) of $5$ seconds.
* Failover to the secondary region (West US) must occur automatically, using a single connection endpoint that redirects write traffic without requiring application configuration updates.
* Read-only analytical queries must be offloaded to the secondary region.

You plan to implement Azure SQL Managed Instances in East US (primary) and West US (secondary).

Which of the following configuration actions must you perform to satisfy these requirements? (Select $2$.)

A company is planning a new deployment of a relational database for a corporate application. The database solution must satisfy the following requirements:
* Support the execution of SQL Server Agent jobs and native cross-database queries.
* Provide a fully managed platform to minimize administrative overhead for operating system and database patching.
* Guarantee that in the event of a regional outage, database failover to a secondary region is automated with a single connection endpoint.

Which database solution and configuration should the company select?

You are designing a backup solution for a fleet of critical Azure Virtual Machines hosting an enterprise resource planning (ERP) application. The solution must meet the following requirements:
- Restore requests for data deleted within the last $14$ days must be completed in under $10$ minutes using local snapshots.
- The backup schedule must achieve a Recovery Point Objective (RPO) of $12$ hours.
- In the event of a complete primary region outage, administrators must be able to immediately initiate restores of the virtual machines in the secondary paired region.
- The storage redundancy configuration must survive a primary region disaster.

Which vault configuration and backup policy design should you recommend to meet these requirements?

CloudFin Associates is designing a hybrid identity and access management solution for their Microsoft Entra ID tenant. The organization requires that:

1. Users must sign in to cloud services using their on-premises Active Directory Domain Services (AD DS) passwords.
2. In the event of an on-premises datacenter outage, users must still be able to authenticate to cloud services without administrative intervention.
3. Administrative overhead and infrastructure complexity must be minimized.
4. Multi-factor authentication (MFA) must be enforced for all administrative roles, while ensuring that the organization does not get locked out of the tenant in an emergency.

Which of the following authentication and access control designs should you recommend?