All practice questions

A logistics enterprise is designing the storage architecture for a high-performance inventory tracking system. The system requires Azure Premium Block Blob storage to handle high-frequency write operations with sub-millisecond latency. The architecture must meet the following requirements:

- The storage must survive the loss of an entire datacenter (Availability Zone) within the primary region with zero data loss ($RPO = 0$).
- A replica of the data must be maintained in a secondary region to support disaster recovery.
- A reporting application in the secondary region must have continuous read access to the replicated data.
- The system must support writing test data directly to the secondary region's storage endpoint during simulated disaster recovery drills without initiating a failover of the primary storage account.

Which storage design should you recommend?

A company is designing a storage solution for storing critical transaction records in Azure Blob Storage. The solution must meet the following requirements:
- Data must be replicated synchronously across three availability zones in the primary region.
- In the event of a regional outage in the primary region, the application must have immediate read-only access to the replicated data in the secondary region without waiting for a failover to be initiated.
- In the event of a prolonged primary region outage, the application must be able to resume write operations to the same primary endpoint URI after a failover is executed.

Which two options should you include in the storage design to meet the requirements?

A software-as-a-service (SaaS) provider is designing a privileged access solution for 10 operations engineers who need temporary, approved Contributor access to a production Azure subscription. The design must enforce the principle of least privilege, require multi-factor authentication (MFA) for role activation, and ensure that access eligibility automatically expires after 180 days. Which of the following identity governance designs should you recommend?

An organization needs to design a disaster recovery solution to the Azure East US region for an on-premises VMware virtual machine named `SQL-VM1`. The VM has an OS disk and a single Premium SSD data disk. The write churn on the data disk is $8 \text{ MB/s}$, and the total write churn for the entire VM is $10 \text{ MB/s}$. The solution must achieve a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 1 hour. Which replication solution should you design to meet these requirements?

A manufacturing enterprise operates globally and needs to design a data platform on Azure to process and analyze telemetry data from industrial IoT sensors. The platform must meet the following technical specifications:
- Ingestion rate: A continuous stream of $15{}000$ events per second.
- Volume: A total storage capacity of $200\text{ TB}$ of historical sensor data stored in Parquet format.
- Query patterns: Data analysts execute ad-hoc, exploratory SQL queries on the historical Parquet files approximately $8$ to $12$ times per week. The query latency must be under $45\text{ seconds}$.
- Resilience: The storage solution must remain available and readable in a secondary region in the event of a primary region outage.
- Cost and Operations: You must minimize operational overhead and ensure you do not pay for idle compute resources.

Which combination of Azure compute and storage configurations should you recommend?

A healthcare provider is designing the disaster recovery architecture for its patient management application. The database layer has the following requirements:
- Must support SQL Server Agent jobs to schedule nightly data synchronization.
- Must support cross-database queries between the patient records database and the billing database.
- Must support automatic failover to a secondary Azure region, utilizing a single connection endpoint that automatically redirects traffic without requiring application reconfiguration.
- Must ensure that all databases are isolated from the public internet, using private network paths for all communication.

Which database deployment and high availability/disaster recovery (HA/DR) configuration should you recommend?

Aventis Pharmaceuticals is designing a secure access and identity solution for its Microsoft Entra ID tenant. The tenant will synchronize identities from an on-premises Active Directory Domain Services (AD DS) environment.

The solution must meet the following requirements:
- Enforce multi-factor authentication (MFA) for all administrative users using Conditional Access policies.
- Ensure that administrators can access the tenant even if a misconfiguration or outage affects the MFA service.
- Prevent administrators from having standing access to highly privileged roles.
- Implement the simplest possible hybrid identity authentication model that requires no on-premises server infrastructure for credential validation.

Which two of the following components should you include in the identity and authentication design? (Select TWO.)

You are designing a backup solution for a cluster of Azure Virtual Machines that host a critical manufacturing execution system (MES). The virtual machines are configured as Trusted Launch VMs.

The solution must meet the following requirements:
- Backups must be performed every 4 hours to minimize data loss.
- In the event of a file deletion, you must be able to perform instant recoveries from snapshots for files deleted within the last 7 days.
- Backups must be resilient to zone-level outages.
- Backups older than 90 days must be automatically moved to a cost-effective archive storage tier.

Which two configurations should you include in the backup design? (Select two.)

Your company is designing a governance solution for a multi-subscription Azure environment. A security team requires a custom RBAC role named 'Network Security Operator' to manage network security groups (NSGs) across all subscriptions in a specific department. These subscriptions are organized under a single department-level management group. You need to implement the custom role following the principle of least privilege. What is the correct sequence of steps to configure and assign this custom role?

An enterprise is planning their Azure load balancing and high availability architecture. You must select the appropriate routing solutions for their workloads. Match each Azure service to its primary traffic routing mechanism and scope.

An energy grid utility company deploys its core telemetry monitoring application to an Azure SQL Managed Instance in the East US region. To design a disaster recovery solution in the West US region, you must satisfy the following requirements:
- The Recovery Time Objective (RTO) must be less than 30 minutes.
- The Recovery Point Objective (RPO) must be less than 15 minutes.
- Client applications must automatically reconnect after a failover without requiring connection string modifications.
- Read-heavy reporting workloads must be offloaded to the secondary region to avoid impacting primary write operations.

Which two configurations should you include in the design to meet these requirements?

Your enterprise has a management group hierarchy. You need to design a governance solution that delegates the ability to manage Azure resource locks across all subscriptions under a specific management group to an operations team. The solution must meet the following requirements:

* Ensure operations team members can only manage locks during authorized maintenance windows.
* Minimize administrative overhead as members of the operations team change.
* Follow the principle of least privilege.

Which two configurations should you include in the design?

You are designing a compute solution for a new microservices application in Azure. The application must support event-driven auto-scaling and dynamic web traffic routing. You need to minimize the operational and administrative effort required to manage the container orchestration infrastructure. Which Azure service should you recommend?

You are designing a backup solution for a set of Azure Virtual Machines running a critical enterprise application. The virtual machines are configured with Premium SSD v2 managed disks and require backups to be taken every 12 hours. The solution must meet the following requirements:
- Ensure backups are resilient to a zone outage in the primary region.
- Support restoring the virtual machines to a paired region in the event of a regional disaster.
- Allow instant recovery of the virtual machines from snapshots for up to 10 days.

Which two configurations should you include in the backup design? Select two.

An organization is designing a high availability compute solution in Azure for a legacy line-of-business application. The application will run on two virtual machines. The organization has the following requirements:
- The virtual machines must be protected against a datacenter outage within the Azure region.
- The solution must achieve a virtual machine uptime SLA of 99.99%.

Which two configurations should you recommend to meet these requirements? (Select two.)

A company is designing a container-based solution to process sensitive transaction workloads. The design must satisfy the following requirements:
- Host containerized applications that scale dynamically based on request load.
- Minimize container infrastructure management and administrative effort.
- Ensure that transaction audit logs are stored in compliance with strict data residency laws, requiring complete isolation of logs between different geographic regions.

Which two components should you include in the design? (Select two.)

A media streaming platform needs to host user-uploaded images and subtitles in a standard Azure General Purpose v2 storage account. The design requires the data to survive a major regional disaster. Additionally, during a primary region outage, the application must be able to immediately switch to reading the images and subtitles from the secondary region without triggering any failover process. Which two replication tiers should the architect select?

A company is designing a storage solution for a legal compliance application that stores historical case documents. The documents are accessed frequently during the first 30 days after creation. After 30 days, the documents are rarely accessed, but the company is legally required to retain them for 7 years. When a document is requested, it must be available for immediate download with sub-second retrieval times. The storage solution must survive a regional disaster. Which storage configuration should you recommend?

A clinical research organization is designing a security solution for an Azure Blob Storage container named researchdata that stores sensitive genetic sequencing results. The solution must meet the following access requirements:
1. Internal researchers require ongoing read access to the sequencing data. Access must be managed at scale rather than via individual assignments.
2. A partner laboratory requires read access to the data for a specific 48-hour window to validate findings.
3. The partner laboratory's access must support immediate revocation in case of a security anomaly, without affecting the access of internal researchers.

Which security configuration should you recommend to meet these requirements?

A logistics company is designing a highly available and disaster-resilient relational database backend for its global fleet-tracking application. The database tier must support cross-database queries and SQL Server Agent jobs to orchestrate daily ETL tasks. The disaster recovery design must meet a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 5 seconds. All failover operations must occur automatically without requiring client application connection string modifications, and all reporting queries must be dynamically offloaded to a readable secondary replica in the disaster recovery region. To maintain compliance, all database replication traffic must remain isolated from the public internet.

Which two configurations should you include in the disaster recovery design?