All practice questions

You are designing a disaster recovery solution for a retail inventory system hosted on Azure virtual machines in the West US 2 region. The solution must replicate the workloads to the West Central US region.

The workload consists of the following virtual machines:
* VM-Web: Running web services with one OS disk (Premium SSD) experiencing a write churn of $2\text{ MB/s}$.
* VM-Data: Running an inventory processing database with one OS disk (Premium SSD) experiencing a write churn of $3\text{ MB/s}$, one database data disk (Premium SSD) experiencing a write churn of $14\text{ MB/s}$, and one temporary cache disk (Premium SSD) experiencing a write churn of $22\text{ MB/s}$.

You have a target Recovery Point Objective (RPO) of $4\text{ hours}$ and a Recovery Time Objective (RTO) of $1\text{ hour}$.

Which two actions should you include in the disaster recovery design to ensure supportability and minimize replication costs? (Select two.)

You are designing a high-availability infrastructure for a multi-tier web application deployed across the East US and West US regions. The design must meet the following requirements:
- Route incoming client requests to the closest regional endpoint with low latency using Anycast routing.
- Terminate SSL/TLS sessions at the global routing layer.
- Within each region, distribute client requests to different backend pools based on the URL path (e.g., routing /api/* to an API tier and /web/* to a web tier).

Which two Azure services should you include in your traffic routing and failover design to meet these requirements?

An educational technology company is designing a system that automatically executes and grades programming assignments submitted by students.

The grading process has the following requirements:
* Each submission must run in an isolated, sandboxed container.
* The execution of a grading job takes between 2 and 15 minutes to complete.
* The system must dynamically scale the number of running containers based on the queue depth of an Azure Service Bus queue containing the submissions.
* To meet strict audit requirements for regional data sovereignty, student execution logs must be isolated within their respective geographic regions and not cross regional boundaries.
* The company wants to minimize the administrative effort required to manage infrastructure, container orchestration, and virtual machine nodes.

You need to design the compute and monitoring solution for the grading system.

Which solution should you recommend?

An enterprise is modernizing a regional database application that uses TCP port 1433 for replication. The application is hosted on a pool of Azure Virtual Machines within a single region. The design requires a regional load balancer to distribute the TCP traffic without needing SSL/TLS termination or application-layer (HTTP/HTTPS) routing. You plan to deploy an Azure Standard Load Balancer.

Which two configurations are required to ensure the virtual machines can be successfully associated with the backend pool of the Standard Load Balancer? (Choose two.)

You are designing the compute infrastructure for a high-frequency financial trading API gateway on Azure. The gateway will run on three virtual machines that must replicate state in memory. The replication protocol requires network latency between the virtual machines to be less than 1 millisecond. The business requires a minimum compute uptime SLA of 99.95% for the gateway. You need to design the compute deployment topology to meet both the availability and latency requirements. Which configuration should you recommend?

A company is planning to migrate two containerized workloads to Azure:

* Workload 1: A workflow orchestrator engine that requires direct access to the Kubernetes API and uses custom resource definitions (CRDs) to manage external resources.
* Workload 2: A set of background processing microservices that process messages from Azure Service Bus queues and must scale to zero when no messages are present. The operations team wants to minimize cluster administration and infrastructure management effort for this workload.

Which two Azure container hosting services should you recommend?

An energy exploration company is designing the Azure compute virtualization infrastructure for a seismic modeling platform. The platform consists of two primary workloads:

* Database Engine: A stateful, steady-state data store containing sensitive telemetry data. It must run on physical hardware isolated at the host level to meet compliance requirements. It requires a high memory-to-vCPU ratio and must maintain an uptime SLA of 99.99%.
* Simulation Pipeline: A massive batch-oriented parallel simulation runner. The pipeline is stateless, highly fault-tolerant, can resume from checkpoints, and must run at the lowest possible cost.

Which two compute virtualization configurations should you recommend to meet these requirements? (Select two.)

A healthtech platform is designing an Azure architecture to ingest and analyze genomic sequencing datasets. The solution must support the following workloads:

* Workload A: An API endpoint that receives webhook notifications from external partners. The workload must scale dynamically from zero to handle high bursts of traffic, support custom domain names, and connect securely to an Azure SQL Database using virtual network integration.

* Workload B: A CPU-intensive file processing application packaged as a container image. Each processing run takes between 20 to 45 minutes depending on the file size. The compute resource must scale to zero when no files are available for processing, and it must minimize administrative overhead.

Which two Azure hosting services should you include in the design to meet these requirements?

A smart utilities company is designing a production telemetry processing system on Azure. The system will ingest continuous data streams from regional water meters and place them in an Azure Service Bus queue. A containerized backend application will retrieve the messages and perform complex data analysis.

The system must meet the following requirements:
* Scale container instances dynamically based on the queue length using Kubernetes Event-driven Autoscaling (KEDA).
* Support execution times of up to 25 minutes per data analysis task.
* Maintain continuous availability for this critical workload without risk of unexpected eviction.
* Minimize administrative and operational infrastructure overhead.

Which compute solution should you recommend?

A healthcare provider is designing the Azure compute virtualization infrastructure for a clinical trial analysis application that processes sensitive patient data. The solution must satisfy the following requirements:

* Confidentiality: The patient data must be encrypted in memory during processing to prevent access by hypervisor administrators or other tenants.
* Resilience: The application virtual machines must be distributed across multiple physical hardware racks (fault domains) within an Azure region to guarantee high availability without allocating dedicated physical servers.
* Availability: The compute tier must support a $99.95\%$ availability SLA.
* Storage: The application requires high-performance disk storage supporting at least $5,000\text{ IOPS}$ per virtual machine instance for transaction logging.
* Licensing Costs: The solution must leverage existing Windows Server licenses to minimize operational expenses.

Which of the following compute virtualization designs should you recommend?

An enterprise is designing a hub-and-spoke virtual network topology in Azure. The transit hub virtual network, `vnet-hub-transit` ($172.16.0.0/16$), contains a firewall subnet, `AzureFirewallSubnet` ($172.16.0.0/24$), hosting an Azure Firewall with a private IP address of $172.16.0.4$. The application virtual network, `vnet-spoke-app` ($172.17.0.0/16$), is peered with `vnet-hub-transit` and contains two subnets: `snet-web` ($172.17.1.0/24$) and `snet-biz` ($172.17.2.0/24$). Another virtual network, `vnet-spoke-db` ($172.18.0.0/16$), contains the database tier and is also peered with `vnet-hub-transit`.

You need to configure a route table associated with `snet-web`. The routing configuration must meet the following requirements:
- Route all outbound internet traffic from `snet-web` through the Azure Firewall.
- Route all database-bound traffic from `snet-web` to `vnet-spoke-db` through the Azure Firewall.
- Ensure that VMs within `snet-web` can communicate directly with VMs in `snet-biz` without routing traffic through the firewall.

Which route configuration should you apply to the route table associated with `snet-web`?

An enterprise is designing a data lifecycle management policy for a General-purpose v2 (GPv2) Azure Blob storage account that stores daily transactional logs. The storage strategy must meet the following requirements:
- Logs are frequently accessed and modified during the first $30$ days after creation.
- Between $31$ and $90$ days, logs are accessed occasionally but must remain available for immediate, sub-second retrieval.
- After $90$ days, logs are rarely accessed, and a retrieval latency of up to $15$ hours is acceptable.
- Logs must be retained for a total of $365$ days and then deleted to minimize costs.
- The lifecycle policy must minimize costs without violating any access or latency requirements.

Which two actions should you configure in the lifecycle management policy? (Select TWO.)

A company hosts a global web application across the North Europe and East US regions. During testing of a disaster recovery scenario, the team notices that when they simulate a regional outage, some external clients continue to send traffic to the failed region for several minutes. Investigation reveals that these clients ignore the low Time-to-Live (TTL) settings on DNS records. The company wants to migrate to a global routing solution that eliminates reliance on client-side DNS caching and provides SSL termination at the edge. Which Azure service should you recommend to meet these requirements?

A financial services company stores customer transaction logs in a General-purpose v2 (GPv2) storage account. The logs must be managed according to the following requirements:

* Logs are frequently accessed and analyzed for the first 30 days after creation.
* From day 31 to day 180, logs are rarely accessed but must be available for immediate, real-time security audits with sub-second retrieval times.
* After 180 days, logs must be retained for 5 years to meet regulatory compliance. A retrieval latency of up to 15 hours is acceptable during this period.
* Storage costs must be minimized.

Which lifecycle management policy should you recommend?

An administrator is configuring a high-availability backend pool for a Standard SKU Azure Load Balancer. The backend pool contains several Azure Virtual Machines, but each virtual machine currently has a Basic SKU public IP address associated with its network interface. During deployment, the administrator encounters a validation failure. Which of the following configuration changes can resolve this validation mismatch? (Select two.)

An organization is designing a disaster recovery (DR) solution from the East US region (primary) to the West US region (secondary) for a multi-tier application. The solution must achieve a Recovery Point Objective (RPO) of under $4\text{ hours}$ and a Recovery Time Objective (RTO) of under $2\text{ hours}$ for all workloads. The application consists of the following virtual machines (VMs):

1. AppVM1 (Application Tier):
- Disk 1 (OS, Premium SSD): $5\text{ MB/s}$ average write churn
- Disk 2 (Data, Premium SSD): $25\text{ MB/s}$ average write churn
- Total VM write churn: $30\text{ MB/s}$

2. DBVM1 (Database Tier running SQL Server):
- Disk 1 (OS, Premium SSD): $10\text{ MB/s}$ average write churn
- Disk 2 (Data, Premium SSD): $65\text{ MB/s}$ average write churn
- Disk 3 (Logs, Premium SSD): $45\text{ MB/s}$ average write churn
- Total VM write churn: $120\text{ MB/s}$

Which two configurations should you include in the disaster recovery design to meet the requirements while staying within supported limits?

A financial services company uses a General-purpose v2 (GPv2) storage account to store transactional record files. The files are frequently accessed during the first 30 days after creation to process active client requests. Between day 31 and day 365, the records are rarely accessed but must remain online to support regulatory compliance audits that require a retrieval latency of less than one second. After one year (365 days), the records must be permanently deleted. Which lifecycle management policy rule configuration meets these requirements while minimizing storage costs?

A digital marketing agency is designing the compute infrastructure for a new campaign analytics platform. The platform must support two distinct workloads:

1. **Workload $1$**: A public-facing REST API that collects clickstream events from active marketing campaigns. The API is containerized, requires outbound virtual network (VNet) integration to access an Azure SQL Database via private endpoints, and experiences highly unpredictable demand, scaling down to $0$ instances during off-peak hours to eliminate idle costs. Minimal infrastructure management is a key priority.
2. **Workload $2$**: A data processing worker that aggregates campaign metrics daily. The worker is packaged as a container, runs as a single batch job that executes for approximately $40$ minutes, and requires access to local scratch disk storage for temporary data processing.

Which compute hosting architecture should you recommend to meet these requirements?

An enterprise is designing a data storage solution for a medical genomics platform. Raw DNA sequencing files are uploaded to an Azure Blob Storage account configured with the Hot access tier.

* The sequencing files are processed by an analysis application immediately upon upload. The analysis requires sub-second retrieval latency and is guaranteed to complete within 7 days of upload.
* Once analyzed, the raw files are rarely accessed but must be retained for 365 days to meet regulatory compliance requirements.
* During the compliance retention period, a retrieval latency of up to 15 hours is acceptable.

You need to design a cost-effective data lifecycle management policy for the storage account.

Which two actions should you include in the lifecycle management policy?

An organization is designing a hub-and-spoke virtual network topology in Azure. The hub virtual network, `vnet-neure-hub-01` ($10.240.0.0/16$), contains an Azure Route Server in the `RouteServerSubnet` ($10.240.2.0/24$) and a pair of Network Virtual Appliances (NVAs) in `snet-nva` ($10.240.1.0/24$) that establish BGP sessions with the Route Server. The NVAs advertise on-premises network routes ($192.168.0.0/16$). You peer a spoke virtual network named `vnet-neure-spoke-app` ($10.241.0.0/24$) with `vnet-neure-hub-01`. You must ensure that virtual machines in `vnet-neure-spoke-app` can dynamically learn the routes advertised by the NVAs via Azure Route Server, without using User-Defined Routes (UDRs). Which two configurations should you implement?