All practice questions

An organization deploys a critical application that uses an Azure SQL Database. You need to design a high availability and disaster recovery (HA/DR) solution for the database to meet the following requirements:
- The database must support automatic failover to a partner region.
- The recovery time objective (RTO) must be less than 1 hour.
- The recovery point objective (RPO) must be less than 10 seconds.
- The application must connect to the database using unified endpoints that automatically route read-write and read-only traffic to the correct replicas without requiring connection string updates after a failover.

Which two configurations should you include in the design?

You are designing the container compute infrastructure for a new retail analytics platform. The platform includes the following two workloads:
- A message-processing service that reads tasks from an Azure Service Bus queue and must scale dynamically based on the queue depth, including scaling down to zero instances.
- A daily reporting job that aggregates transactional data, runs for up to three hours per execution, and must execute to completion.

You need to recommend a containerized hosting solution for both workloads. The solution must minimize administrative effort.

Which two Azure container hosting options should you recommend?

An organization is deploying a critical, steady-state production web application to Azure. The application requires continuous availability and a guaranteed service level agreement (SLA) with zero tolerance for unexpected virtual machine evictions or downtime. Which compute virtualization solution should you recommend?

An enterprise is designing the infrastructure for a critical distributed database platform on Azure. The platform consists of two distinct node types: three memory-optimized write nodes (E-series VMs) and three storage-optimized read-replicas (L-series VMs). The architecture must satisfy the following requirements:

* Achieve a compute uptime SLA of $99.99\%$ for both the write and read tiers.
* Maintain the lowest possible network latency and highest throughput for replication traffic between the write nodes and read-replicas.
* Allow administrators to perform rolling OS updates, stop, and start individual VMs manually without affecting other instances in the tier.
* Avoid the operational overhead of managing separate availability configurations for each tier.

Which two configurations should you recommend to meet these requirements? (Select two.)

A financial services company is designing a new event-driven transaction reconciliation system. The system consists of 15 microservices that run as Docker containers and scale dynamically based on the volume of messages in an Azure Service Bus queue.

The design must meet the following requirements:
- Support event-driven autoscaling using Kubernetes Event-driven Autoscaling (KEDA) specifications.
- Minimize administrative effort by avoiding the provisioning, patching, and management of container clusters, nodes, or control planes.
- Ensure strict network isolation between the development and production environments by routing all egress traffic through a centralized Azure Firewall.
- Isolate production logs from development logs in separate storage repositories to meet regulatory compliance, while preventing administrative overhead associated with managing log workspaces.

Which container hosting and logging solution should you recommend?

You are designing a compute solution in Azure for a web application. The solution must meet the following requirements:
- The virtual machines (VMs) hosting the web application must have a guaranteed uptime SLA of $99.99\%$.
- Incoming web traffic must be distributed across the VMs.

Which two actions should you include in the design to meet the requirements? (Select two.)

An enterprise is deploying a critical database workload on Azure Virtual Machines. The virtual machines are configured with Premium SSD v2 managed disks and are deployed across multiple Availability Zones in the East US region.

You are designing a business continuity and disaster recovery solution using Azure Backup. The solution must meet the following requirements:
- Data Residency: All backup data must remain within the East US region.
- Resiliency: The backup infrastructure must survive a single Availability Zone outage within the primary region.
- Performance: The solution must support restoring the virtual machines from snapshots stored on local disks for up to $7$ days to meet a recovery time objective (RTO) of less than $15$ minutes.
- Retention: Backups must be retained daily for $60$ days.

Which two of the following configuration options should you select to meet these requirements? Select two.

You are designing a backup solution for an Azure Virtual Machine that hosts a critical enterprise resource planning (ERP) application. The virtual machine is configured with Premium SSD v2 managed disks.

Your design must meet the following requirements:
* The Recovery Time Objective (RTO) for restoring backups from the last 7 days must be minimized by using local snapshots.
* Backups must remain available even if an entire Azure region experiences an outage.
* Daily backups must be retained in the vault for 180 days.
* Administrative effort and cost must be minimized.

Which two configurations should you include in the backup design? (Select two.)

A healthcare provider plans to store patient telemetry logs in an Azure General Purpose v2 storage account. The storage configuration must meet the following requirements:

* Telemetry logs must remain writeable in the primary region even if an entire Azure availability zone (datacenter) within that region goes offline.
* The logs must be replicated to a secondary Azure region to ensure business continuity in the event of a regional disaster.
* The application running in the secondary region does not require read access to the logs unless a failover to the secondary region is initiated.
* The solution must minimize costs.

Which redundancy option should you recommend?

A media streaming company is structuring its Azure environment to support multiple independent engineering teams. Each engineering team has a separate Azure subscription under a single Management Group. You need to design a governance structure that allows a central auditing team to inspect resource configurations across all subscriptions, without granting them permissions to modify any resources or view secrets and keys. The auditing team's membership changes frequently. Which of the following solutions should you recommend to meet these requirements while minimizing administrative overhead?

A financial services company is designing a system to process payment transactions from an Azure Service Bus queue using containerized worker applications. The design must satisfy the following requirements:
- Scale the container instances dynamically from $0$ to $100$ based on queue message depth.
- Support Kubernetes Event-driven Autoscaling (KEDA) natively without manual agent configuration.
- Minimize administrative effort and cluster management overhead.

Which Azure compute service should you recommend for the containerized worker applications?

An enterprise is designing a global disaster recovery and traffic routing solution for a hybrid workload deployed across the East US and West US regions. The workload consists of two primary services:

1. A web application API running on HTTPS that requires Web Application Firewall (WAF) protection, URL path-based routing (routing `/static/*` to storage and `/api/*` to compute), and SSL/TLS termination at the edge.
2. A latency-sensitive database replication daemon communicating over custom TCP port $1433$. The database clients have a legacy configuration that hardcodes or aggressively caches DNS query results, ignoring any DNS Time to Live (TTL) values.

Which two routing and load balancing strategies should you implement to satisfy the requirements for both services?

A healthcare provider is deploying a multi-tier clinical application across multiple Azure subscriptions under a single management group. The security operations center (SOC) team must be granted permissions to review and update network security rules on all subnets, but only when actively responding to a security incident. The solution must minimize administrative overhead, adhere to the principle of least privilege, and prevent permanent administrative access. Which configuration should you recommend to meet the requirements?

A digital publishing company is implementing a governance policy for external compliance reviewers who need temporary read-only access to all resources in a production subscription. The access must be time-limited, require multi-factor authentication (MFA) and business justification, and minimize administrative overhead by avoiding individual assignment configurations.

Which two configurations should you recommend as part of the solution? (Select two.)

An organization plans to deploy a containerized order-processing application to Azure. The application must be deployed across two separate regions (East US and West US) to meet local data sovereignty requirements.

The solution must satisfy the following requirements:
- Support event-driven scaling of containers using KEDA.
- Minimize administrative and operational overhead.
- Ensure container logs do not cross regional boundaries.

Which two configurations should you recommend in the design? (Select two.)

Elysian Healthcare is designing a hybrid identity and access management solution for its Microsoft Entra ID tenant. The organization currently synchronizes user accounts from an on-premises Active Directory Domain Services (AD DS) domain.

The solution must meet the following requirements:
- Users must sign in to cloud services using their on-premises passwords.
- Users must be prompted for multi-factor authentication (MFA) when accessing any Azure management portal from an untrusted network.
- To prevent accidental tenant lockout during a service outage, a dedicated cloud-only emergency-access account must remain functional without MFA requirements.
- Administrative privileges for Azure resources must be granted dynamically on-demand for a limited time rather than being permanently assigned.
- On-premises infrastructure footprint and administrative overhead must be minimized.

Which of the following designs meets all of the requirements?

A digital education company is designing an analytical data platform to process and analyze student interaction logs on Azure. The platform must meet the following requirements:

* Volume & Ingestion: Ingest $3 \text{ TB}$ of JSON logs daily at a peak velocity of $2,000$ events per second.
* Latency: Raw logs must be queryable via standard SQL within $15$ minutes of ingestion.
* Query Patterns: Daily dashboard queries targeting the last $24$ hours, and monthly exploratory reports analyzing historical data up to $2$ years old. Historical reports must execute without manual intervention or data retrieval delays.
* Business Continuity: The analytical data store must remain available and resilient against a primary datacenter outage.
* Cost Optimization: Storage costs must be minimized by automatically moving older data to a lower-cost tier when it is no longer queried by the daily dashboards.

Which design should you recommend for the analytical storage, lifecycle policy, and query engine?

NovaPharm Logistics is designing a storage architecture for a new pharmaceutical inventory tracking system. The system writes transaction logs to an Azure Block Blob storage account located in East US. To satisfy regulatory compliance and ensure business continuity, the storage architecture must meet the following requirements:
- Designate West US as the secondary region for disaster recovery.
- Provide read access to the transaction logs in the secondary region with a Recovery Time Objective (RTO) of less than 15 minutes if the primary region experiences an outage.
- Permit write operations to the secondary region only after a failover is initiated, while minimizing overall storage costs.

Which replication and failover strategy should you recommend to meet these requirements?

A company is planning to deploy two workloads on Azure Virtual Machines:
1. A batch processing job that runs nightly, can be interrupted at any time, and requires minimal costs.
2. A critical customer-facing API that must run continuously with a 99.9% uptime SLA.

Which two of the following virtual machine deployment strategies should you recommend to meet these requirements while minimizing costs? (Select two.)

An online gaming company runs its matchmaking database on a single database in Azure SQL Database. You are designing a disaster recovery and high availability solution that replicates database updates to a secondary Azure region. The solution must support automatic failover to the secondary region if the primary region experiences a prolonged outage, without requiring connection string updates in the gaming clients. Additionally, the secondary replica must handle read-heavy analytics queries to offload the primary database. Which database configuration should you recommend?