All practice questions

A scientific research institute is designing the storage infrastructure for a high-performance computing (HPC) application. The application requires Azure Blob Storage with sub-millisecond latency and high throughput for write operations, which necessitates the Premium block blobs performance tier.

The architecture must satisfy the following resilience and accessibility requirements:
1. Protect against the outage of a single datacenter in the primary region by replicating data synchronously.
2. Protect against a regional disaster by maintaining an asynchronous copy of the data in a secondary paired region.
3. Allow a reporting tool located in the secondary region to read the data at any time without initiating a storage account failover.

Which storage solution should you recommend to meet these requirements?

A financial services company is designing a disaster recovery solution for its transaction logs stored in Azure Blob Storage. The architect recommends configuring the storage account with Read-Access Geo-Redundant Storage (RA-GRS). The development team is updating the client application to handle failover scenarios and needs to understand the write capabilities of this storage design. Which two statements correctly describe the write operations behavior for this configuration? (Select two.)

You are designing the storage architecture for a global pharmaceutical cold-chain monitoring system. Sensor devices on transport containers in North America, Europe, and Asia write telemetry data (temperature, humidity, and location) every $10$ seconds. The read/write ratio is $95\%$ writes and $5\%$ reads. The application requires a $99.999\%$ write availability SLA, sub-$10\text{ ms}$ write latency, and must survive regional outages. You decide to use Azure Cosmos DB for NoSQL. Which of the following configurations should you recommend?

An enterprise uses Azure Files shares to store business-critical documents. You are designing a backup solution using Azure Backup that satisfies the following requirements:
- Shared file data must be backed up three times per day to achieve an $8$-hour Recovery Point Objective (RPO).
- Backup data must be retained for $10$ years to comply with regulatory requirements.
- The vault storage must remain resilient to zone outages within the primary region while minimizing storage costs.

Which two of the following configuration options should you select to meet these requirements? (Select two.)

A financial services provider stores daily transaction receipts in an Azure Blob Storage container. The receipts are frequently accessed for auditing within the first 7 days and must support immediate, sub-second retrieval at any time. After 7 days, the receipts are rarely accessed but must be retained for 365 days to meet regulatory compliance requirements. The provider wants to configure an Azure Blob Storage lifecycle management policy to minimize storage costs.

Which lifecycle management policy rule should you recommend?

An enterprise is migrating a high-throughput transactional database workload to Azure Virtual Machines. The database storage architecture must satisfy the following requirements:
- The database transaction logs require consistent sub-millisecond write response times and high IOPS.
- The storage infrastructure must survive a localized datacenter (zone) failure within the primary region without data loss.
- Backup files containing database exports must be stored securely and made accessible to external auditors via a HTTPS URL for exactly seven days, with the capability to immediately revoke access if a security anomaly is detected.

Which storage and access configuration should you recommend to meet these requirements?

An e-sports tournament platform is designing a disaster recovery and high availability strategy for its matchmaking and player state tracking database layer. The platform has the following requirements:
- The database must support SQL Server Agent jobs and native cross-database queries.
- The primary database must be deployed in the Business Critical tier in East US.
- A secondary replica must be configured in West US to meet a Recovery Time Objective (RTO) of less than $15$ seconds and a Recovery Point Objective (RPO) of less than $5$ seconds.
- Client applications must automatically reconnect to the active primary replica without manual connection string modifications during a failover.
- Read-only analytics queries must be offloaded to the secondary replica.
- All database replication traffic must travel privately over Microsoft's backbone network without traversing the public internet.

To implement this, the database administration team peers the virtual networks (VNets) in East US and West US, opens ports $5022$ and $11000-11999$ in the Network Security Groups (NSGs), deploys the primary Azure SQL Managed Instance, and deploys the secondary Azure SQL Managed Instance. However, when they attempt to establish an auto-failover group, the configuration fails.

Which of the following options identifies the cause of this failure and the correct configuration step to resolve it?

You are designing a disaster recovery solution to Azure for an on-premises VMware virtual machine named VM1. The virtual machine hosts a web application and has the following disk configuration and write churn metrics:

- Disk 1 (OS): Standard SSD, $4\text{ MB/s}$ write churn
- Disk 2 (Temp Data): Premium SSD, $85\text{ MB/s}$ write churn (contains temporary cache files that do not need to be preserved)
- Disk 3 (App Logs): Premium SSD, $12\text{ MB/s}$ write churn

The solution must meet a Recovery Point Objective (RPO) of $2\text{ hours}$ and a Recovery Time Objective (RTO) of $4\text{ hours}$.

Which of the following actions should you recommend? (Select TWO).

A software-as-a-service (SaaS) provider has a customer billing application that runs on a single database in Azure SQL Database. The database is deployed in the East US region. You need to design a disaster recovery solution that meets the following requirements:
- In the event of a regional outage, the database must support automatic failover to the West US region with a recovery time objective (RTO) of less than 1 hour.
- The application must use a constant read-write endpoint that does not require updating connection strings when a failover occurs.
- Read-only billing reports must be offloaded to the secondary region database replica.
- Administrative intervention during failover must be minimized.

Which database configuration should you select?

Solarize Logistics is designing an identity and access management solution for its Microsoft Entra ID tenant. The security and infrastructure teams specify the following requirements:
- Require multi-factor authentication (MFA) for all administrative access.
- Prevent administrative tenant lockout in the event of an Azure MFA service outage.
- Provide just-in-time (JIT) access for administrative roles.
- Minimize on-premises infrastructure overhead for hybrid identity synchronization.

Which set of design decisions should you recommend?

A software company is designing a relational database solution in Azure for a critical multi-tenant inventory application. The database architecture must meet the following requirements:
- Provide high availability within the primary region that can survive a datacenter zone outage.
- Replicate database data to a secondary Azure region to support disaster recovery with an RTO of less than $1$ hour and an RPO of less than $5$ minutes.
- Ensure that client applications can automatically reconnect to the secondary region database during a failover without requiring configuration updates or DNS changes.
- Support routing read-only inventory reports to the secondary region to reduce the load on the primary database.

Which two configurations should you include in the database design to meet these requirements?

A smart-home IoT company is designing a data storage architecture for device telemetry logs stored in Azure Blob Storage. The system must meet the following requirements:
- Survive a complete regional outage of the primary Azure region.
- Support active-active write operations in both the primary and secondary regions simultaneously.
- Minimize storage costs.
An architect recommends using Read-Access Geo-Redundant Storage (RA-GRS) to allow telemetry ingestion services in both regions to write directly to the storage account.
Why does the recommended solution fail to meet the requirements?

A manufacturing company is designing a storage solution for archiving smart factory telemetry files in an Azure Blob Storage container. The solution must meet the following security and administrative requirements:

- Internal data analysts must have read access to the container. Access permissions must scale automatically when analysts join or leave the organization without modifying individual resource permissions.
- External manufacturing partners require read access to specific telemetry files for a maximum duration of 8 hours. The company must be able to immediately revoke this access at any time without rotating the primary or secondary storage account keys.
- Storage administrators must only obtain permission to manage the storage account settings on-demand after an approval process, and the permission must automatically expire after 2 hours.

Which combination of security controls should you recommend to meet these requirements?

An enterprise is designing an identity governance and privileged access strategy for its Azure subscription. The subscription contains critical production workloads. The solution must meet the following requirements:
- A group of external compliance auditors needs read-only access to all subscription resources for a temporary period of three weeks.
- A group of internal security administrators needs to manage Azure role assignments, but only when actively conducting access reviews.
- Administrative overhead must be minimized, and the principle of least privilege must be strictly followed.

Which of the following actions should you include in the design? (Select TWO.)

An organization is deploying a media rendering application on Azure Virtual Machines. The application has the following storage requirements:
- A shared file system that must be concurrently mounted by multiple Linux rendering nodes using the NFS protocol, requiring low-latency file access and resilience against availability zone outages.
- High-performance block storage for active rendering jobs that requires sub-millisecond write response times and high IOPS.

Which two storage solutions should you include in the design?

You are designing a disaster recovery (DR) solution from the North Europe region to the West Europe region for an e-commerce application hosted on Azure Virtual Machines. The application architecture and workload metrics are as follows:

* Web Tier: Two virtual machines, each with a single $128\text{ GB}$ Standard SSD OS disk. The average write churn is $0.2\text{ MB/s}$ per VM.
* Application Tier: Two virtual machines, each with a single $256\text{ GB}$ Premium SSD disk. The average write churn is $3\text{ MB/s}$ per VM.
* Database Tier: One SQL Server virtual machine with three Premium SSD disks: an OS disk ($1.5\text{ MB/s}$ write churn), a data disk ($12\text{ MB/s}$ write churn), and a transaction log disk ($26\text{ MB/s}$ write churn).

The business continuity requirements specify:

* Web and Application Tiers: Recovery Point Objective (RPO) of $2\text{ hours}$ and Recovery Time Objective (RTO) of $2\text{ hours}$.
* Database Tier: RPO of $15\text{ seconds}$ and RTO of $30\text{ minutes}$.

Which two replication methods should you include in the disaster recovery design? (Select two.)

An organization plans to deploy a microservices-based application consisting of several containerized background services. The services need to scale dynamically in response to incoming messages in an Azure Service Bus queue using Kubernetes Event-driven Autoscaling (KEDA). The organization wants to avoid managing Kubernetes nodes, clusters, or control planes, and does not require direct access to the Kubernetes API. Which Azure service should you recommend to host these containerized services?

A company is migrating a business-critical application to Azure Virtual Machines. The database VMs require a robust backup strategy to meet strict operational recovery objectives. The backup design must satisfy the following technical requirements:
- Backups must be replicated to a secondary Azure region to allow restore operations even if the primary region is completely unavailable.
- To support rapid recovery of database files, local snapshots must be kept in the hardware source tier for 7 days.
- Daily recovery points must be retained in the vault for 45 days.

Which backup configuration should you select to meet these requirements?

A company plans a new deployment of a customer portal application that requires 30 separate relational databases, one for each regional office. The databases have highly variable and unpredictable usage patterns throughout the day, with peaks occurring at different times. The solution must ensure high availability, minimize administrative overhead, and optimize hosting costs by sharing database resources. No database requires instance-level features such as SQL Server Agent or CLR. Which Azure SQL deployment option should you recommend?

A gaming company is designing a secure storage solution to share log files stored in an Azure Blob Storage container named `gamelogs` with an external game analytics agency. The agency requires access to the container for 30 days from a specific public IP range. You must ensure that access can be revoked immediately if a security breach occurs. Additionally, a group of internal security administrators must be able to temporarily elevate their permissions to manage the storage account settings when an incident is reported, but they must not hold these privileges permanently. Which two actions should you include in the storage security design? (Select two.)