All practice questions

An organization is migrating a legacy on-premises application to Azure. The database tier has the following requirements:
- Must support native SQL Server Agent jobs and cross-database queries.
- Must provide a disaster recovery (DR) solution to a secondary Azure region with a Recovery Time Objective (RTO) of 15 minutes.
- Must automatically route both read-write and read-only traffic to the active database replicas without requiring modifications to the application connection strings during a failover.

Which database deployment and disaster recovery strategy should you recommend?

A manufacturing enterprise is designing an Azure data platform to collect and analyze telemetry from industrial wind turbines. The turbines emit continuous sensor readings totaling $20,000$ events per second with an ingestion volume of $3\text{ GB}$ per minute. The raw data must be preserved indefinitely in a cost-effective storage account that provides resilience against a datacenter outage in the primary region. Business analysts require the ability to run ad-hoc, exploratory SQL queries on the raw turbine data. These queries are executed sporadically, and a query latency of up to $45\text{ seconds}$ is acceptable. Which data integration and analytical storage architecture should you recommend to meet the requirements while minimizing cost and operational overhead?

An enterprise is migrating an on-premises document management system to Azure Blob Storage. The system will store sensitive contract documents in a container named contracts. You need to design an access control solution that meets the following security requirements:

1. Internal operations staff must be granted read and write access to the contracts. Access management must scale efficiently as staff members join or leave the team.
2. External legal auditors must be granted temporary read-only access to specific documents. The company must be able to revoke this access immediately if an audit is terminated, without disrupting other clients or regenerating storage account keys.

Which two actions should you include in the design? (Select two.)

You are designing the data tier for a global smart grid utility monitoring application. The application must ingest telemetry data from $5,000,000$ smart meters distributed across three geographic regions: East US, West Europe, and East Asia. The workload is highly write-heavy, with a write-to-read ratio of $95:5$. The system must guarantee sub-$10$ ms write latency locally and achieve a $99.999\%$ write availability SLA. The primary query pattern involves retrieving the last $24$ hours of readings for a specific meter. Additionally, the solution must meet strict disaster recovery compliance, requiring survival of a complete regional outage. Which design strategy should you recommend to meet the performance, availability, and resilience requirements?

Zephyr Energy Solutions is designing a secure identity access strategy for its Microsoft Entra ID tenant. The design must meet the following requirements:

* All administrators must be prompted for Multi-Factor Authentication (MFA) when accessing the Azure portal.
* The risk of administrative lockout due to Conditional Access misconfiguration or MFA service failure must be minimized.
* Hybrid users must authenticate using their on-premises credentials, with authentication processed entirely in the cloud to minimize on-premises infrastructure footprint.

Which of the following configurations should you include in the design? (Select TWO.)

You are designing a backup solution for several production Azure Virtual Machines. The business continuity requirements state that the backup data must be protected against a regional disaster that causes a complete outage of the primary Azure region. The solution must also allow for the restoration of the virtual machines to a secondary paired region. Which storage redundancy configuration should you select for the Recovery Services vault?

An organization is designing the storage infrastructure for a multi-tier application suite running on Azure Virtual Machines. The solution must meet the following requirements:
- High-performance, shared storage for a Linux-based cluster that supports the NFS $v4.1$ protocol and remains available during a single zone outage.
- Disk storage for database virtual machines hosting transactional workloads that require sub-millisecond write response times and must survive zone-level failures.
- Secure, temporary access to application diagnostics logs stored in blob containers, with the ability to immediately revoke access if credentials are leaked.

Which three design decisions should you recommend to meet the requirements? (Select three.)

VeloCart Delivery is designing an Azure Storage account to host customer delivery records. The storage solution must synchronously replicate data across three availability zones in the primary region. Additionally, the data must be replicated to a secondary region to protect against a regional outage. Which two Azure Storage redundancy options meet these requirements?

An enterprise is designing a subscription governance strategy for a production Azure subscription. The strategy must meet the following requirements:
- A database operations group must be able to manage database resources only during scheduled maintenance windows, with all access requested on-demand.
- All new resource groups deployed to the subscription must be automatically protected with a 'CanNotDelete' resource lock upon creation.
- Administrative overhead for managing team membership changes must be minimized.

Which solution should you recommend?

An automotive engineering company is designing a secure storage solution on Azure for crash test simulation video files. The files will be stored in an Azure Blob Storage container. The design must meet the following requirements:
1. Internal simulation analysis engineers must have read access to the video files. Access permissions must be managed collectively to minimize administrative overhead, rather than at the individual user level.
2. Storage administrators must have administrative permissions to manage the storage resources. These permissions must be granted dynamically on-demand with a required approval workflow, rather than being permanently assigned.
3. An external safety auditing partner needs temporary read-only access to specific video files. This access must be easily revocable at any time and must expire automatically after 30 days. The duration of this access must be controlled from the server side rather than by the client.

Which of the following security controls should you include in the storage design to meet these requirements? (Select TWO.)

You are designing a backup solution for Azure Virtual Machines that host a financial application. The solution must meet the following requirements:
- Backups must be performed twice daily to meet a strict recovery point objective (RPO).
- File-level recoveries from the last $7$ days must be performed instantly using local snapshots to minimize the recovery time objective (RTO).
- All vault backups must be available for restore in a paired secondary Azure region in the event of a primary region disaster.
- Vaulted backups must be retained for $3$ years.

Which two configurations should you include in the design?

A retail company's transactional data is hosted on Azure Virtual Machines. You need to configure Azure Backup for these VMs to satisfy the following requirements:
- Daily backups must run automatically.
- The Recovery Point Objective (RPO) must be 24 hours.
- File-level restores from backups taken within the last 4 days must be performed instantly without waiting for data transfer from the vault.
- All backups must be kept for 60 days.
- Backups must remain available even if the primary Azure region suffers a complete disaster, while keeping storage costs to a minimum.
Which configuration should you recommend?

You are designing the storage infrastructure for a reporting application migrating to Azure. The application components have the following storage requirements:

- The database transaction logs require single-digit millisecond write latency.
- The storage hosting the transaction logs must remain available if a single datacenter in the primary region fails.
- External partners need temporary access to raw log files stored in Azure Blob Storage. You must be able to revoke this access immediately if a security compromise occurs.

Which two storage configurations should you include in the design?

A financial services firm has an Azure subscription containing production database workloads. The firm's compliance team requires that database administrators (DBAs) only be granted database management administrative access temporarily when executing specific maintenance tasks. Under normal operating conditions, these DBAs should have read-only access to verify service health. Additionally, access assignments must scale efficiently as DBAs join or leave the organization. Which of the following access and governance designs meets these requirements while minimizing administrative overhead and adhering to the principle of least privilege?

An enterprise plans to migrate an on-premises relational database to Azure. The database requires native support for SQL Server Agent jobs and cross-database queries. The business continuity requirements for the new architecture are as follows:
- Provide automatic cross-region failover to a secondary region with a Recovery Time Objective (RTO) of less than 1 hour.
- Maintain a single, unchanged connection string for read-write operations during a failover event.
- Offload reporting workloads to a read-only endpoint in the secondary region.

Which two configurations should you recommend in the design?

An enterprise is designing a disaster recovery and high availability solution for an inventory management application. The database tier has the following requirements:
- Support for SQL Server Agent jobs and cross-database queries.
- Automatic failover to a secondary Azure region with a single connection string that automatically routes write traffic to the active primary.
- Provision of a secondary read-only endpoint in the secondary region for reporting workloads.

Which two database configurations should you include in the design to meet the requirements? (Select two.)

A healthcare organization is designing a security and access control solution for clinical trial data uploaded by external research partners to a private container in an Azure Storage account named clinicaltrialsdata. The solution must meet the following requirements:
- External partners must be granted temporary access to upload new data files directly to the container, without the ability to delete or modify existing files.
- The access credentials given to external partners must be immediately revocable in bulk, without regenerating the storage account access keys.
- Internal data auditors must have read-only access to the data, restricted to when they are performing active audits. The access must require approval and be restricted to a maximum duration of 8 hours.
- Administrative overhead must be minimized, and all assignments must adhere to the principle of least privilege and scale effectively.
Which of the following security architectures should you recommend?

You are designing an Azure Backup solution for a suite of critical Azure Virtual Machines hosting an enterprise financial application. The solution must satisfy the following technical requirements:
- Recovery Point Objective (RPO): The maximum data loss window must be no more than $4$ hours.
- Recovery Time Objective (RTO): The solution must support immediate recovery from local disk snapshots for backups taken within the last $5$ days.
- Disaster Recovery: Backups must be replicated to a secondary region. The design must allow administrators to restore virtual machines to the secondary region even if the primary Azure region suffers a complete, prolonged outage.
- Cost Optimization: Yearly backup recovery points must be stored in the most cost-effective tier after their first $30$ days in the vault.

Which two configuration actions should you include in the backup design to meet the requirements?

A logistics company is setting up a new Azure environment. The security team requires that a specific group of external systems administrators be allowed to restart virtual machines and read resource logs within a dedicated resource group named 'rg-shipping-prod'. The access model must enforce the principle of least privilege, facilitate simplified auditing, and support temporary access elevation when troubleshooting critical incidents.

Which two configurations should you include in the governance design? (Select two.)

You are designing the storage infrastructure for a SQL database migrating to Azure Virtual Machines. The database transaction logs require sub-10ms write latency and high IOPS. The storage solution for the database files must remain available even during an availability zone-level outage. Additionally, database backups must be written to Azure Blob Storage daily, and external auditors must be granted temporary access to these backups with the ability to immediately revoke the access if a security compromise is suspected. Which storage configuration should you recommend?