All practice questions
1198 questions
An organization runs a critical transaction system on an Azure Virtual Machine. The virtual machine is configured with Premium SSD v2 managed disks. You need to establish a backup policy using Azure Backup that satisfies the following operational constraints:
* Retain daily recovery points for a total duration of 60 days.
* Guarantee near-instant recovery times for any file restoration from backups that are up to 6 days old.
* Recoveries from points older than 6 days may be performed using standard vault retrieval times.
Which backup policy configuration should you recommend?
You are designing the data storage and diagnostics architecture for a global smart-home automation platform. The platform manages telemetry and configuration data for IoT devices across North America, Europe, and Asia. The solution must meet the following requirements:
- Support real-time telemetry ingestion with a write-to-read ratio of .
- Maintain sub- write latency globally by utilizing an active-active multi-region write configuration.
- Achieve a recovery time objective (RTO) of zero for regional disaster recovery.
- Prevent hot partitions during mass device reconnect events.
- Provide external diagnostic partners with read-only access to device logs for a maximum of days, with the ability to immediately revoke access if a security compromise occurs.
Which architecture configuration should you recommend?
An organization is designing a high-performance, three-tier web application in Azure. The compute tier will host virtual machines (VMs) running business logic. The architecture must meet the following requirements:
- Achieve a minimum VM uptime service level agreement (SLA) of 99.99%.
- Maintain network latency of less than 1 millisecond between the web servers, application servers, and database servers.
- Ensure that compute resources are distributed across distinct physical hardware racks to prevent localized host outages from taking down the entire application.
Which two configurations should you include in the compute infrastructure design? (Select two.)
Select all that apply
A multinational financial services organization is designing a disaster recovery and high availability solution for its core ledger application. The application will be deployed across two Azure regions: East US (primary) and West US (secondary).
The database layer consists of an Azure SQL Managed Instance deployment in each region. The design must meet the following requirements:
- Support automatic failover to the secondary region if the primary region experiences an outage.
- Provide a connection configuration that automatically routes read-write operations to the active primary instance and read-only reporting queries to the secondary instance.
- Ensure that replication and database traffic between the primary and secondary instances does not traverse the public internet and uses private IP addresses.
Which two actions should you include in the design to meet these requirements?
Select all that apply
A company plans to deploy a new microservices application that consists of three containerized services. The application must support automatic scaling based on HTTP request volume, including scaling down to zero instances. The operations team has no Kubernetes experience and wants to minimize administrative overhead. Which Azure service should you recommend to host the application?
An organization is designing a privileged access solution for a team of external database administrators who need temporary access to the DocumentDB Database Account Contributor role on a production Cosmos DB account. The solution must minimize administrative overhead, enforce multi-factor authentication (MFA) and justification prior to access activation, and ensure that emergency access accounts are protected from lockout during MFA service outages. Which configuration should you recommend?
An enterprise is designing a data storage and lifecycle strategy for telemetry logs stored in Azure Data Lake Storage Gen2 (ADLS Gen2). The logs are stored as block blobs and must adhere to the following operational and compliance requirements:
* Operational Monitoring (Days 1–10): The logs are heavily queried with sub-second latency requirements.
* Batch Reconciliation (Days 11–90): The logs are read weekly for database reconciliation. Active, online access with low retrieval cost is required.
* Compliance Retention (Days 91–180): The logs are rarely accessed but must be retained. In the event of a regulatory audit, the logs must be readable within 3 hours. To minimize administrative overhead and avoid relying on High-Priority rehydration, the retrieval must use standard online access.
* Deletion (Day 180): Due to privacy regulations, the logs must be permanently deleted exactly 180 days after creation.
Which of the following JSON lifecycle policy configurations should you recommend to minimize storage and retrieval costs while avoiding early deletion charges?
"actions": {
"baseBlob": {
"tierToCool": {
"daysAfterModificationGreaterThan": 10
},
"tierToArchive": {
"daysAfterModificationGreaterThan": 90
},
"delete": {
"daysAfterModificationGreaterThan": 180
}
}
}
}
"actions": {
"baseBlob": {
"tierToCold": {
"daysAfterModificationGreaterThan": 10
},
"tierToArchive": {
"daysAfterModificationGreaterThan": 90
},
"delete": {
"daysAfterModificationGreaterThan": 180
}
}
}
}
"actions": {
"baseBlob": {
"tierToCool": {
"daysAfterModificationGreaterThan": 10
},
"tierToCold": {
"daysAfterModificationGreaterThan": 90
},
"delete": {
"daysAfterModificationGreaterThan": 180
}
}
}
}
"actions": {
"baseBlob": {
"tierToArchive": {
"daysAfterModificationGreaterThan": 10
},
"delete": {
"daysAfterModificationGreaterThan": 180
}
}
}
}
You are designing a backup solution for an Azure Virtual Machine that hosts a critical transaction database. The virtual machine is configured as follows:
* Operating system disk: Standard SSD
* Data disks: Premium SSD v2
The backup solution must meet the following requirements:
* Provide a Recovery Point Objective (RPO) of 4 hours for the data disks.
* Support instant recovery from snapshots for up to 7 days.
* Retain weekly backups for 12 months in the vault.
* Ensure that the backup data remains available even if a primary datacenter in the region experiences an outage.
* Minimize storage costs by excluding the operating system disk from the frequent backups.
Which three configurations should you include in the backup design? (Select three.)
Select all that apply
A company is designing a disaster recovery and traffic routing solution for a global web application. The solution must meet the following requirements:
* Route HTTPS traffic globally with SSL termination at the routing layer.
* Provide a single connection-string listener endpoint that automatically routes to the active database during a database failover.
* Store static files in a geo-redundant storage account that allows read-only access to the secondary region.
Which set of Azure services and configurations should you recommend?
A startup is designing a containerized microservices application that will process customer orders and store logs. The application consists of three simple, stateless containers. The design must meet the following requirements:
* Minimize the administrative effort required to manage the underlying container infrastructure.
* Automatically scale the containers based on the volume of incoming HTTP requests, including scaling down to zero during idle periods.
* Segregate the telemetry and application logs from different environments (development and production) into separate workspaces to comply with data access policies.
Which combination of Azure compute hosting and log monitoring configurations should you recommend?
An enterprise is designing a backup storage solution for a critical financial application. The backup files will be stored in Azure Blob Storage. The storage solution must satisfy the following requirements:
* The data must be protected against a regional disaster where the primary region becomes completely unavailable.
* External auditors must be granted temporary access to the backups via Shared Access Signatures (SAS).
* The security team must be able to immediately revoke access to the SAS tokens at any time without changing the storage account keys.
Which storage redundancy configuration and access control mechanism should you recommend?
A logistics company is designing an analytical data solution on Azure to monitor fleet telemetry and optimize delivery routes. The solution must satisfy the following technical requirements:
* Ingestion: Telemetry streams from active delivery vehicles, peaking at events per second.
* Storage: Telemetry data is saved in Parquet format on Azure Data Lake Storage Gen2 (ADLS Gen2). Total storage volume is expected to reach .
* Resilience: The stored telemetry data must remain available for read access in a secondary region if a primary datacenter outage occurs.
* Analytics: Data analysts will run ad-hoc SQL queries on the historical Parquet files to identify route inefficiencies. Queries are run infrequently and unpredictably during business hours, averaging to queries per day.
* Security: External logistics partners must be granted read-only access to specific folders in ADLS Gen2 for days. This access must be immediately revocable if the partnership ends early.
* Cost: The solution must minimize idle compute charges and administrative overhead.
Which combination of storage replication, analytical query service, and access security should you recommend?
A company is planning the backup strategy for a group of Azure Virtual Machines that run a payroll processing application. The virtual machines use Premium SSD v2 managed disks. The backup design must meet the following requirements:
- Achieve a Recovery Point Objective (RPO) of 8 hours.
- Retain backup snapshots in the local storage tier for 5 days to allow immediate recovery.
- Ensure backup data remains available if an entire availability zone in the primary region fails, without replicating data to a secondary region.
Which two configuration settings should you include in the backup design?
Select all that apply
VeloMed Solutions is designing a storage architecture for patient medical images and session recordings. The primary storage region is West US 3, and the secondary region is East US. The solution must meet the following requirements:
- The primary storage must tolerate the failure of a single Availability Zone in West US 3 with zero data loss () and immediate availability ().
- If a catastrophic regional disaster occurs in West US 3, read access to existing images must be available in the secondary region with an RTO of less than 15 minutes.
- The maximum acceptable data loss (RPO) for files replicated to the secondary region is 15 minutes.
- Write operations must be restored in the secondary region with an RTO of less than 1 hour during a regional disaster.
- Storage costs must be minimized while meeting all recovery objectives.
Which of the following configurations and disaster recovery procedures should the cloud architect recommend to satisfy these requirements? (Select TWO.)
Select all that apply
A startup needs to host a simple, containerized web API. The solution must support automated scaling, require zero server or cluster management overhead, and provide a secure, private registry to store the container images. Which two services should you recommend?
Select all that apply
An organization is deploying a critical production web application on Azure Virtual Machines. The application requires a compute service level agreement (SLA) of 99.99% for virtual machine uptime.
Which deployment strategy should you recommend to meet the SLA requirement?
An enterprise is designing a telemetry and analytical storage solution on Azure. The solution must support ad-hoc exploratory queries on of daily log files in CSV and Parquet formats stored in Azure Data Lake Storage Gen2 (ADLS Gen2). The queries will be run sporadically throughout the day.
The design must meet the following requirements:
- Minimize provisioning and compute cost when no queries are running.
- Ensure that the primary storage account survives a regional datacenter outage.
- Secure access to ADLS Gen2 using Shared Access Signatures (SAS) that can be easily revoked if compromised.
Which of the following configurations should you include in the solution design? (Select TWO.)
Select all that apply
A retail company is designing the storage infrastructure for a new cloud-native order processing system. The system will store transaction logs in Azure Blob Storage. The storage solution must meet the following requirements:
- The data must be resilient to a datacenter outage within the primary region with zero data loss.
- The data must be replicated to a secondary region located at least 300 miles away.
- Analysts in the secondary region must be able to run read-only reporting queries against the replicated data at any time without impacting performance on the primary region and without initiating a storage account failover.
Which two configurations or actions should you recommend to meet the storage requirements? (Choose two.)
Select all that apply
A logistics enterprise plans to deploy a high-performance document processing system on Azure. The system requires SMB file shares hosted on the Premium tier of Azure Files to meet sub-millisecond metadata latency requirements. The storage configuration must remain resilient and available if a single physical datacenter in the primary region experiences a power outage. Which storage redundancy configuration should you recommend?
A company is planning to migrate a legacy on-premises SQL Server database to Azure. The database has the following requirements:
* Requires the execution of Common Language Runtime (CLR) integration assemblies and SQL Server Agent.
* Requires operating system-level access to the database host to install and run a custom security agent.
* The database transaction log files must be stored on a disk configuration that guarantees at least IOPS and sub-millisecond write latency.
Which two configurations should you include in the design? (Select two.)
Select all that apply