Container-Based Workloads

55 questions

Question 1Question

A healthcare company is designing a container-based application on Azure to host a patient portal API. The application consists of several microservices that handle patient queries. The design must satisfy the following requirements:
- The microservices must scale down to zero instances when there is no incoming traffic to reduce costs.
- The application components must communicate privately and be isolated within an existing Azure virtual network.
- The solution must minimize administrative and infrastructure management overhead.
- Audit logs must be kept strictly isolated in their respective deployment regions to comply with data sovereignty regulations.

Which two configurations should you recommend?

Select all that apply

Show answer & explanation

Answer: Host the microservices using Azure Container Apps.; Deploy the container hosting environment as an internal Azure Container Apps environment.

Answer

To meet the requirements, you should recommend hosting the microservices using Azure Container Apps and deploying the container hosting environment as an internal Azure Container Apps environment.
Hosting the microservices using Azure Container Apps is correct because it provides serverless container hosting that natively scales down to zero instances when idle and minimizes operational overhead by eliminating Kubernetes cluster management. Deploying the container hosting environment as an internal Azure Container Apps environment is correct because it securely integrates the services directly into an existing Azure Virtual Network for isolated private communication.

Step-by-Step Solution

1
Evaluate compute hosting options based on operational overhead and scaling requirements.
Azure Container Apps is selected over Azure Kubernetes Service because it provides a serverless platform that scales to zero with minimal administrative overhead, satisfying the requirement to minimize infrastructure management.
Choosing Azure Container Apps eliminates the need to manage Kubernetes control planes and node pools while still providing scale-to-zero capabilities for microservices.
2
Determine the appropriate network deployment configuration for private communication.
An internal Azure Container Apps environment is selected to host the containerized services.
An internal environment ensures the container apps are deployed inside the existing virtual network and can only be accessed privately, satisfying the isolation and secure communication requirements.
3
Analyze compliance requirements regarding audit logs and data sovereignty.
Reject the option to centralize all regional logs into a single workspace, as regional data isolation is required.
To comply with data sovereignty regulations, logs must be kept isolated within their respective regions, requiring separate workspaces instead of a single centralized workspace.

Key Concept

Designing compute and networking architectures for containerized microservices in Azure using low-overhead services with virtual network integration.
Estimated Time:2m 0s
Question 2Question

An organization plans to deploy a microservices-based application consisting of several containerized background services. The services need to scale dynamically in response to incoming messages in an Azure Service Bus queue using Kubernetes Event-driven Autoscaling (KEDA). The organization wants to avoid managing Kubernetes nodes, clusters, or control planes, and does not require direct access to the Kubernetes API. Which Azure service should you recommend to host these containerized services?

Show answer & explanation

Answer: Azure Container Apps

Answer

Azure Container Apps
Azure Container Apps is a serverless container platform designed for microservices and background workloads. It natively supports Kubernetes Event-driven Autoscaling (KEDA), enabling scale-to-zero configurations based on metrics such as Azure Service Bus message counts, all while eliminating the administrative overhead of managing Kubernetes clusters, nodes, or control planes.

Step-by-Step Solution

1
Identify the core workload requirement.
The application requires hosting background processing microservices that scale dynamically based on Azure Service Bus queue messages using KEDA.
This establishes the scale trigger and deployment pattern required by the design.
2
Evaluate the administrative overhead constraints.
The organization wants to avoid managing nodes, clusters, or control planes, and does not require direct access to the Kubernetes API.
This rules out full-featured Kubernetes orchestrators that require active infrastructure management.
3
Select the Azure container service that meets both scaling and management requirements.
Azure Container Apps provides a serverless platform that supports KEDA out of the box without requiring cluster administration.
It matches all requirements while minimizing administrative effort, aligning with Microsoft best practices.

Key Concept

Azure container hosting service selection based on operational overhead and scaling requirements
Question 3Question

You are designing a compute solution for a new microservices application in Azure. The application must support event-driven auto-scaling and dynamic web traffic routing. You need to minimize the operational and administrative effort required to manage the container orchestration infrastructure. Which Azure service should you recommend?

Show answer & explanation

Answer: Azure Container Apps

Answer

Azure Container Apps
Azure Container Apps is the correct service because it provides a serverless platform built on Kubernetes technologies like KEDA and Dapr, enabling auto-scaling and traffic routing with minimal operational overhead.

Step-by-Step Solution

1
Analyze the requirements to identify the core needs: event-driven auto-scaling, dynamic web traffic routing, and minimized operational and administrative effort.
Determined that the solution must be a fully managed, serverless platform to minimize administrative overhead.
This rules out solutions that require virtual machine or Kubernetes infrastructure management.
2
Compare Azure Container Apps against Azure Kubernetes Service (AKS).
Selected Azure Container Apps as it natively supports KEDA-based event scaling and ingress routing without cluster management.
Using Azure Kubernetes Service (AKS) introduces unnecessary administrative complexity for simple microservice hosting.

Key Concept

Serverless container hosting with Azure Container Apps
Estimated Time:1m 0s
Question 4Question

A company is designing a container-based solution to process sensitive transaction workloads. The design must satisfy the following requirements:
- Host containerized applications that scale dynamically based on request load.
- Minimize container infrastructure management and administrative effort.
- Ensure that transaction audit logs are stored in compliance with strict data residency laws, requiring complete isolation of logs between different geographic regions.

Which two components should you include in the design? (Select two.)

Select all that apply

Show answer & explanation

Answer: Azure Container Apps for hosting the workloads; Dedicated regional Log Analytics workspaces for each geographical region

Answer

The design should include Azure Container Apps to host the workloads and dedicated regional Log Analytics workspaces for each geographical region.
The correct solution includes Azure Container Apps to host the containerized applications because it is a serverless container service that minimizes administration overhead by eliminating the need to manage Kubernetes nodes or APIs. Additionally, it includes dedicated regional Log Analytics workspaces to satisfy compliance constraints requiring geographic log isolation and data residency.

Step-by-Step Solution

1
Evaluate the container hosting requirements against the constraint of minimizing administrative overhead.
Identify that Azure Container Apps provides a managed serverless platform that simplifies container management compared to Azure Kubernetes Service.
Choosing a serverless hosting model removes the operational burdens of cluster administration, scaling configurations, and node updates.
2
Evaluate compliance and logging isolation constraints.
Determine that dedicated regional Log Analytics workspaces are necessary to isolate log data geographically.
A single shared workspace cannot guarantee regional segregation, which violates data sovereignty laws.

Key Concept

Choosing low-overhead serverless container options and designing geographically isolated monitoring solutions to satisfy regulatory compliance.
Question 5Question

A multinational logistics provider requires a containerized architecture to process international package shipments across two distinct geographic regions: Europe and North America. The solution must adhere to the following design constraints:

* Event-driven scaling: Individual container instances must scale dynamically from 00 to a high volume of concurrent instances based on the message volume in an Azure Service Bus queue.
* Minimal operational complexity: The cloud architecture team has no dedicated container orchestration administrators and wants to avoid managing virtual machine nodes, orchestrator control planes, or complex deployment manifests.
* Compliance and governance: Regional package processing telemetry and event logs must remain strictly within their origin region to comply with local data sovereignty laws.

Which infrastructure design meets these requirements?

Show answer & explanation

Answer: Deploy Azure Container Apps in both regions, and configure them to send telemetry to separate regional Log Analytics workspaces.

Answer

Deploy Azure Container Apps in both regions, and configure them to send telemetry to separate regional Log Analytics workspaces.
Deploying Azure Container Apps in both regions configured with regional Log Analytics workspaces is correct. Azure Container Apps is a serverless platform that supports event-driven autoscaling (including scaling to 00) using KEDA natively, eliminating the operational complexity of managing Kubernetes clusters. Utilizing regional Log Analytics workspaces ensures that telemetry and logs remain within their respective regions, satisfying the data sovereignty requirements.

Step-by-Step Solution

1
Evaluate the scaling and operational requirements.
The workload requires event-driven scaling to 00 based on queue depth with minimal administrative overhead.
This rules out Azure Kubernetes Service (AKS) due to high management complexity, and Azure Container Instances (ACI) because it lacks native KEDA scaling integration.
2
Evaluate the logging and compliance requirements.
Telemetry and event logs must reside strictly within their region of origin to comply with data sovereignty laws.
This rules out a centralized Log Analytics workspace, necessitating separate workspaces for each region.
3
Select the optimal Azure services that fulfill all requirements.
Azure Container Apps deployed with regional Log Analytics workspaces matches all constraints.
Azure Container Apps natively supports KEDA-based scale-to-zero without cluster management overhead, and regional Log Analytics workspaces preserve data residency.

Key Concept

Azure container services selection and regional log configuration based on operational complexity and data sovereignty rules.
Question 6Question

A company plans to deploy a new microservices application that consists of three containerized services. The application must support automatic scaling based on HTTP request volume, including scaling down to zero instances. The operations team has no Kubernetes experience and wants to minimize administrative overhead. Which Azure service should you recommend to host the application?

Show answer & explanation

Answer: Azure Container Apps

Answer

Azure Container Apps
Azure Container Apps is the correct choice because it is a serverless container platform designed for microservices that scales dynamically based on HTTP traffic, supports scaling to zero, and abstracts away the underlying Kubernetes cluster management, minimizing administrative overhead.

Step-by-Step Solution

1
Identify the key workload requirements: a multi-container microservices application, HTTP-based autoscaling to zero, and the need to minimize administrative overhead without Kubernetes expertise.
The solution must be a serverless, low-overhead hosting platform that manages container orchestration automatically.
This rules out complex container orchestration platforms that require manual cluster management.
2
Compare the available Azure container hosting options against these requirements.
Azure Container Apps provides serverless container execution, automatic scaling to zero based on HTTP traffic, and does not require Kubernetes cluster administration.
This perfectly matches all customer constraints.

Key Concept

Azure Container Apps provides a fully managed, serverless platform for hosting containerized microservices with scaling capabilities and minimal management overhead, making it the preferred choice over Azure Kubernetes Service for teams wanting to avoid cluster management.
Question 7Question

A startup is designing a containerized microservices application that will process customer orders and store logs. The application consists of three simple, stateless containers. The design must meet the following requirements:

* Minimize the administrative effort required to manage the underlying container infrastructure.
* Automatically scale the containers based on the volume of incoming HTTP requests, including scaling down to zero during idle periods.
* Segregate the telemetry and application logs from different environments (development and production) into separate workspaces to comply with data access policies.

Which combination of Azure compute hosting and log monitoring configurations should you recommend?

Show answer & explanation

Answer: Azure Container Apps to host the containers, and separate Log Analytics workspaces for the development and production environments

Answer

Azure Container Apps to host the containers, and separate Log Analytics workspaces for the development and production environments
The correct option is correct because Azure Container Apps is a fully managed serverless container service that allows scaling to zero and eliminates the operational complexity of managing Kubernetes clusters. Additionally, deploying separate Log Analytics workspaces for development and production ensures strict data isolation and compliance with environment segregation policies.

Step-by-Step Solution

1
Evaluate the container hosting requirements to determine the appropriate compute service.
Identify that the application uses simple, stateless containers, requires minimal administrative effort, and must scale to zero.
Azure Container Apps is a serverless hosting platform that abstracts Kubernetes management while supporting container scaling to zero, whereas Azure Kubernetes Service (AKS) requires managing nodes, clusters, and control planes, creating unnecessary management overhead.
2
Evaluate the logging and compliance requirements for environment segregation.
Determine that development and production logs must be isolated in separate workspaces to meet data access policies.
Separate Log Analytics workspaces are required to guarantee logical segregation and data sovereignty between environment levels, ensuring production data access is restricted.
3
Combine the chosen compute hosting and monitoring configurations.
Recommend Azure Container Apps paired with separate Log Analytics workspaces.
This combination successfully meets all operational simplicity, scaling, and compliance requirements.

Key Concept

Selecting container hosting services based on management overhead and scaling properties, combined with environment logging isolation.
Estimated Time:1m 30s
Question 8Question

A startup needs to host a simple, containerized web API. The solution must support automated scaling, require zero server or cluster management overhead, and provide a secure, private registry to store the container images. Which two services should you recommend?

Select all that apply

Show answer & explanation

Answer: Azure Container Apps; Azure Container Registry

Answer

Azure Container Apps and Azure Container Registry
Azure Container Apps offers serverless container execution that scales automatically, fulfilling the requirement for zero cluster management overhead. Azure Container Registry provides a secure, private repository to manage and store container images.

Step-by-Step Solution

1
Analyze the hosting requirements.
The web API is a simple containerized workload that requires automatic scaling and zero cluster management overhead.
This rules out services requiring manual server management or Kubernetes infrastructure administration.
2
Select the appropriate container hosting service.
Azure Container Apps is selected because it provides serverless hosting for containers without requiring cluster configuration or management.
Azure Container Apps is optimized for simple microservices and APIs needing serverless scaling.
3
Select the secure image storage service.
Azure Container Registry is selected to securely store the container images in a private registry.
Azure Container Registry is the standard managed private registry service in Azure.

Key Concept

Selecting managed container hosting and private image storage solutions to minimize administrative overhead.
Question 9Question

An enterprise is designing a compute and logging architecture for a containerized order-processing application. The design must satisfy the following requirements:
- Host multiple microservices that scale dynamically based on the queue depth of an Azure Service Bus queue using Kubernetes Event-driven Autoscaling (KEDA).
- Minimize the administrative and operational overhead associated with managing cluster infrastructure and virtual machines.
- Separate log data into different geographical regions to comply with strict regional data residency regulations.

Which compute and monitoring configuration should you recommend?

Show answer & explanation

Answer: Azure Container Apps with regional environments, routing logs to regional Log Analytics workspaces

Answer

Azure Container Apps with regional environments, routing logs to regional Log Analytics workspaces
The correct option is the one proposing Azure Container Apps with regional environments and regional Log Analytics workspaces. Azure Container Apps is a serverless platform that supports KEDA-based event-driven scaling out of the box, fulfilling the scaling needs while minimizing cluster management overhead. Deploying regional environments and routing their logs to regional Log Analytics workspaces ensures compliance with data residency regulations by keeping logs within their respective geographic regions.

Step-by-Step Solution

1
Evaluate the compute options against the operational overhead and KEDA scaling requirements.
Azure Container Apps (ACA) and Azure Kubernetes Service (AKS) both support KEDA scaling natively. However, ACA is serverless and eliminates cluster management overhead, making it the preferred choice over AKS to minimize administrative effort.
The scenario requires minimizing administrative and operational overhead while scaling containers with KEDA.
2
Evaluate the compliance and logging architecture against data residency requirements.
Routing logs from regional environments to regional Log Analytics workspaces ensures that log data is kept within its respective geographical boundaries, meeting data residency compliance.
The scenario requires separating log data into different geographical regions.
3
Select the option that satisfies all criteria.
Azure Container Apps with regional environments combined with regional Log Analytics workspaces satisfies the KEDA, operational overhead, and regional compliance requirements.
This configuration balances serverless container hosting with compliant regional monitoring.

Key Concept

Selecting the appropriate container hosting platform in Azure based on management overhead, KEDA support, and designing compliant regional monitoring architectures.
Estimated Time:2m 0s
Question 10Question

An organization is designing a compute and monitoring solution for a new microservices-based application. The application will run in containers and must meet the following requirements:
- Support dynamic, event-driven scaling based on CPU utilization and Azure Service Bus queue depth.
- Minimize the administrative and operational overhead of the container infrastructure.
- Isolate log and telemetry data for two distinct departments (Finance and HR) into separate regulatory boundaries to satisfy strict data sovereignty requirements.

Which two configurations should you recommend in the design?

Select all that apply

Show answer & explanation

Answer: Azure Container Apps to host the microservices; Two distinct Azure Log Analytics workspaces, one for each department

Answer

The correct recommendations are to deploy Azure Container Apps to host the microservices and to create two distinct Azure Log Analytics workspaces (one for each department).
The design requires minimizing operational overhead while supporting event-driven scaling, which makes Azure Container Apps the ideal choice over Azure Kubernetes Service. Furthermore, because there is a strict requirement for regulatory boundaries and data sovereignty, deploying two separate Log Analytics workspaces is necessary to guarantee complete data segregation.

Step-by-Step Solution

1
Evaluate the container hosting requirements to minimize administrative effort and support event-driven scaling.
Identify Azure Container Apps as the optimal service because it offers a serverless container platform with built-in KEDA scaling, avoiding the infrastructure management overhead associated with Azure Kubernetes Service.
Azure Container Apps removes the need to manage Kubernetes APIs, control planes, or node pools while still supporting dynamic scaling from zero based on queue depth.
2
Evaluate the logging and compliance requirements for data sovereignty and isolation.
Identify that separate Azure Log Analytics workspaces are required for the Finance and HR departments.
A single workspace cannot guarantee the complete segregation of log data required by strict data sovereignty regulations, whereas separate workspaces provide distinct administrative and geographical boundaries.

Key Concept

Selecting serverless container services to reduce operational overhead while configuring separate monitoring workspaces to satisfy strict data sovereignty requirements.
Question 11Question

An enterprise administrator needs to run a single containerized database maintenance script once per week. The container executes for approximately three minutes and then terminates. The solution must minimize deployment complexity and administrative overhead. Which Azure service should you recommend?

Show answer & explanation

Answer: Azure Container Instances

Answer

Azure Container Instances
The correct answer is Azure Container Instances because it provides a serverless platform to run isolated containers on demand with the lowest possible administrative effort. It does not require managing virtual machines, clustering, or application environments, and billing is based on the exact duration of the container's execution.

Step-by-Step Solution

1
Identify the workload requirements
The workload is a single, isolated container task that runs briefly on a weekly schedule.
Understanding the lifecycle and complexity of the container task determines the ideal hosting model.
2
Evaluate administrative overhead
Azure Container Instances requires zero cluster management, no environment creation, and minimal configuration compared to AKS or Container Apps.
The requirement specifies minimizing deployment complexity and administrative overhead.
3
Select the most cost-effective and simplest service
Azure Container Instances charges only for the exact CPU and memory resources consumed during the three-minute execution, with no idle costs.
ACI matches the requirement for transient workloads that do not need orchestration or continuous scaling.

Key Concept

Selecting the appropriate Azure container hosting service based on simplicity, scale, and administrative overhead.
Estimated Time:45s
Question 12Question

You are designing the container compute infrastructure for a new retail analytics platform. The platform includes the following two workloads:
- A message-processing service that reads tasks from an Azure Service Bus queue and must scale dynamically based on the queue depth, including scaling down to zero instances.
- A daily reporting job that aggregates transactional data, runs for up to three hours per execution, and must execute to completion.

You need to recommend a containerized hosting solution for both workloads. The solution must minimize administrative effort.

Which two Azure container hosting options should you recommend?

Select all that apply

Show answer & explanation

Answer: Azure Container Apps to host the message-processing service; Azure Container Apps Jobs to host the daily reporting job

Answer

Azure Container Apps to host the message-processing service and Azure Container Apps Jobs to host the daily reporting job.
The correct recommendation is to use Azure Container Apps to host the message-processing service and Azure Container Apps Jobs to host the daily reporting job. Azure Container Apps manages event-driven scaling (KEDA) and supports scaling to zero, satisfying the requirements of the message-processing service. Azure Container Apps Jobs provides a serverless execution environment designed for run-to-completion tasks, supporting long-running executions of up to 24 hours, which accommodates the three-hour daily reporting job. Both services are fully managed, meeting the goal of minimizing administrative effort.

Step-by-Step Solution

1
Analyze the scaling and operational requirements of the message-processing workload.
The service needs dynamic scaling based on queue depth (KEDA), scale-to-zero capabilities, and minimized administrative overhead.
This workload maps to Azure Container Apps, which handles event-driven scaling automatically under a fully managed serverless model.
2
Analyze the execution duration and lifecycle of the reporting workload.
The job is a daily, run-to-completion batch process that takes up to three hours.
Azure Container Apps Jobs is ideal for this since it supports executions lasting up to 24 hours without cluster management overhead.
3
Evaluate the administrative overhead of Azure Kubernetes Service (AKS).
AKS is rejected because it requires cluster, virtual machine node pool, and control plane management, failing the requirement to minimize administrative effort.
AKS is suitable when custom Kubernetes API access or deep control plane customization is needed, which is not required here.
4
Evaluate the execution constraints of Azure Functions Consumption plan.
Azure Functions on a Consumption plan is rejected because of its 10-minute timeout limit.
The daily reporting job runs for three hours, which exceeds the platform's hard limits.

Key Concept

Selecting the optimal Azure container hosting option based on scaling needs, execution duration, and administrative overhead constraints.
Question 13Question

A financial services company is designing a new event-driven transaction reconciliation system. The system consists of 15 microservices that run as Docker containers and scale dynamically based on the volume of messages in an Azure Service Bus queue.

The design must meet the following requirements:
- Support event-driven autoscaling using Kubernetes Event-driven Autoscaling (KEDA) specifications.
- Minimize administrative effort by avoiding the provisioning, patching, and management of container clusters, nodes, or control planes.
- Ensure strict network isolation between the development and production environments by routing all egress traffic through a centralized Azure Firewall.
- Isolate production logs from development logs in separate storage repositories to meet regulatory compliance, while preventing administrative overhead associated with managing log workspaces.

Which container hosting and logging solution should you recommend?

Show answer & explanation

Answer: Deploy the microservices to two separate Azure Container Apps Environments (one for development and one for production) integrated with dedicated virtual networks. Configure virtual network routing to direct egress traffic through the central Azure Firewall, and associate each environment with a separate Log Analytics workspace.

Answer

Deploy the microservices to two separate Azure Container Apps Environments (one for development and one for production) integrated with dedicated virtual networks. Configure virtual network routing to direct egress traffic through the central Azure Firewall, and associate each environment with a separate Log Analytics workspace.
The correct design utilizes Azure Container Apps (ACA) because it is a serverless container platform that natively supports Kubernetes Event-driven Autoscaling (KEDA) scaling rules without the operational overhead of managing clusters, nodes, or control planes. To achieve strict network isolation, each environment is deployed into its own virtual network with custom route tables directing egress through the Azure Firewall. To satisfy regulatory logging compliance, separate Log Analytics workspaces are used for each Container Apps Environment, ensuring production data isolation while keeping management overhead low compared to managing a cluster-based logging agent configuration.

Step-by-Step Solution

1
Analyze compute and infrastructure management requirements.
Determine that the serverless requirement and the aversion to cluster/node provisioning rule out standard AKS, leading to Azure Container Apps (ACA) as the primary compute candidate.
ACA provides a fully managed, serverless container platform that automatically abstracts node management while supporting native KEDA-based scaling.
2
Evaluate network isolation and egress routing constraints.
Determine that a dual-environment virtual network configuration is required to separate development and production, allowing custom route tables to direct egress traffic through Azure Firewall.
Strict environment-level network boundaries cannot be securely maintained within a single Container Apps Environment or a single shared VNet without complex, error-prone configurations.
3
Assess the logging compliance and administrative overhead constraints.
Conclude that two separate Log Analytics workspaces must be deployed (one per Container Apps Environment).
This satisfies the regulatory segregation of production logs from development logs, while avoiding the overhead of managing a massive multi-workspace mesh or a single workspace that violates the compliance boundary.

Key Concept

Selecting the optimal container platform and isolation boundary under strict administrative, networking, and compliance constraints in Microsoft Azure.
Question 14Question

A financial services company is designing a system to process payment transactions from an Azure Service Bus queue using containerized worker applications. The design must satisfy the following requirements:
- Scale the container instances dynamically from 00 to 100100 based on queue message depth.
- Support Kubernetes Event-driven Autoscaling (KEDA) natively without manual agent configuration.
- Minimize administrative effort and cluster management overhead.

Which Azure compute service should you recommend for the containerized worker applications?

Show answer & explanation

Answer: Azure Container Apps

Answer

Azure Container Apps should be recommended because it natively supports event-driven scaling using KEDA (including scaling to zero) while minimizing the operational and administrative effort of managing the underlying cluster infrastructure.
Azure Container Apps is the ideal solution because it is a serverless container hosting service that provides native support for Kubernetes Event-driven Autoscaling (KEDA). This allows the application to scale dynamically from zero to many instances based on queue depth, while completely removing the administrative overhead of managing Kubernetes control planes, node pools, or cluster maintenance.

Step-by-Step Solution

1
Analyze the requirements for container hosting, scaling behavior, and administrative effort constraints.
The workload requires dynamic scaling from 00 to 100100 instances based on queue depth using KEDA, and the team wants to minimize cluster management overhead.
This establishes the key criteria to evaluate against Azure container hosting options.
2
Evaluate the administrative overhead of the candidate services.
Azure Kubernetes Service (AKS) requires managing control planes and node pools, whereas Azure Container Apps (ACA) is a fully managed serverless platform that abstracts the underlying Kubernetes infrastructure.
To satisfy the requirement of minimizing administrative effort, a serverless or managed service is preferred over AKS.
3
Compare scaling capabilities of serverless container options.
Azure Container Apps natively supports KEDA for event-driven scaling and scaling down to zero. Azure Container Instances (ACI) and App Service do not natively support KEDA-based scaling.
This identifies the only service that fulfills both the KEDA auto-scaling requirement and the low administrative overhead goal.

Key Concept

Selecting Azure container hosting services based on scaling requirements (KEDA) and administrative overhead constraints.
Estimated Time:2m 0s
Question 15Question

An organization plans to deploy a containerized order-processing application to Azure. The application must be deployed across two separate regions (East US and West US) to meet local data sovereignty requirements.

The solution must satisfy the following requirements:
- Support event-driven scaling of containers using KEDA.
- Minimize administrative and operational overhead.
- Ensure container logs do not cross regional boundaries.

Which two configurations should you recommend in the design? (Select two.)

Select all that apply

Show answer & explanation

Answer: Azure Container Apps to host the application containers; A separate Log Analytics workspace in each deployment region

Answer

To meet the requirements, the design should include Azure Container Apps to host the application containers, and a separate Log Analytics workspace in each deployment region.
The correct options are using Azure Container Apps for hosting the containers and setting up a separate Log Analytics workspace in each region. Azure Container Apps provides serverless container hosting that natively supports event-driven scaling using KEDA while minimizing infrastructure management. Using a separate Log Analytics workspace in each region ensures that telemetry and console logs are kept within the respective geographical regions, complying with local data sovereignty requirements.

Step-by-Step Solution

1
Evaluate compute hosting requirements to minimize administrative overhead and support event-driven scaling with KEDA.
Azure Container Apps is selected because it is a serverless platform that supports KEDA scaling natively with lower administrative overhead than Azure Kubernetes Service.
Azure Kubernetes Service requires cluster management and configuration, which increases operational effort.
2
Evaluate logging requirements to ensure compliance with regional data sovereignty limits.
Separate Log Analytics workspaces are selected in East US and West US.
A single centralized workspace would route logs across regional boundaries, violating the requirement to keep logs locally within the region.

Key Concept

Selecting container hosting and monitoring strategies in Azure based on scaling, administrative overhead, and regional compliance requirements.
Estimated Time:1m 0s
Question 16Question

A logistics company is designing a hosting solution for a new containerized web API. The API is packaged as a single Docker container. The workload must support scaling down to zero instances when idle to minimize costs, and the solution must require the lowest administrative overhead. Which service should you recommend?

Show answer & explanation

Answer: Azure Container Apps

Answer

Azure Container Apps
Azure Container Apps is the ideal solution because it provides a serverless platform designed for containerized microservices and APIs. It allows scaling down to zero instances during idle periods to eliminate compute costs, while removing the administrative burden of provisioning and managing clusters or virtual machines.

Step-by-Step Solution

1
Analyze the workload requirements
The application is a single containerized web API that requires request-driven scaling (including scaling to zero) and must be managed with minimal administrative effort.
Understanding the scaling pattern and management constraints helps narrow down the appropriate Azure container hosting options.
2
Evaluate Azure container hosting services against requirements
Azure Container Apps provides serverless container hosting, request-based scaling to zero, and low administrative overhead. Azure Kubernetes Service (AKS) requires cluster management and has high overhead. Azure Virtual Machines with Spot VMs cannot guarantee availability and do not scale to zero natively. Azure Functions introduces execution timeout limitations and code modification overhead.
Comparing the capabilities of each candidate service ensures the selected solution satisfies all design constraints.

Key Concept

Selecting the appropriate Azure container hosting service based on scaling requirements and administrative overhead
Question 17Question

An enterprise is designing a container-based ingestion and processing solution for healthcare telemetry data. The telemetry is ingested in two distinct geographical regions: East US and West US. The design must accommodate the following requirements:

- Workload 1: A lightweight microservice that processes telemetry messages from an Azure Service Bus queue. The workload must support event-driven scaling using KEDA, including scaling to zero instances when no messages are present, while minimizing infrastructure management overhead.
- Workload 2: A batch processing job that runs model training algorithms. The job requires custom access to the underlying Kubernetes API to orchestrate child pods across dedicated, physically isolated compute nodes.
- Logging: Container logs from the East US and West US regions must be kept strictly segregated within their respective geographical boundaries to comply with local healthcare privacy and data residency laws.

Which three design decisions should you recommend?

Select all that apply

Show answer & explanation

Answer: Deploy Workload 1 to Azure Container Apps.; Deploy Workload 2 to Azure Kubernetes Service (AKS).; Provision two separate regional Log Analytics workspaces to store container logs.

Answer

Deploy Workload 1 to Azure Container Apps, deploy Workload 2 to Azure Kubernetes Service (AKS), and provision two separate regional Log Analytics workspaces.
The correct design decisions are to deploy Workload 1 to Azure Container Apps, deploy Workload 2 to Azure Kubernetes Service (AKS), and provision two separate regional Log Analytics workspaces. Azure Container Apps is optimized for microservices requiring event-driven scaling (KEDA) and scaling to zero without the administrative overhead of managing clusters. Azure Kubernetes Service (AKS) is required for Workload 2 because it exposes direct access to the Kubernetes API for pod orchestration and supports dedicated physical hosts for compute isolation. Separate regional Log Analytics workspaces are necessary to satisfy strict regional data residency and isolation compliance requirements, preventing cross-region log replication.

Step-by-Step Solution

1
Analyze requirements for Workload 1.
Workload 1 needs event-driven scaling (KEDA), scale-to-zero capability, and minimal administrative overhead.
Azure Container Apps natively supports KEDA and scaling to zero without the overhead of cluster management, making it the best fit.
2
Analyze requirements for Workload 2.
Workload 2 requires direct access to the Kubernetes API and physical isolation on dedicated hosts.
Azure Kubernetes Service (AKS) supports dedicated hosts and exposes the Kubernetes API, whereas Azure Container Apps abstracts the control plane and does not allow Kubernetes API access.
3
Analyze regional compliance and data residency requirements.
Logs from East US and West US must be kept strictly segregated within their geographical boundaries.
Two separate regional Log Analytics workspaces must be provisioned to ensure data residency compliance, avoiding a single centralized workspace.

Key Concept

Selecting container hosting solutions (Azure Container Apps vs. Azure Kubernetes Service) based on scaling, API access, and infrastructure overhead constraints, combined with regional log segregation for compliance.
Estimated Time:3m 0s
Question 18Question

A digital health platform is designing a containerized microservice-based architecture to process patient data in two regions: North Europe (Ireland) and West Europe (Netherlands). The platform has the following requirements:
- The microservices must scale dynamically from zero based on HTTP traffic and message queue depth.
- You must minimize the administrative effort required to manage container orchestration, patching, and OS maintenance.
- For compliance and data sovereignty reasons, application log data from the Irish region must be strictly segregated at the data-plane level and stored within Ireland, while Netherlands log data must remain within the Netherlands.

Which two configurations should you recommend to meet the requirements? (Select two.)

Select all that apply

Show answer & explanation

Answer: Host the microservices on Azure Container Apps; Provision separate Azure Log Analytics workspaces in the North Europe and West Europe regions

Answer

Host the microservices on Azure Container Apps, and provision separate Azure Log Analytics workspaces in the North Europe and West Europe regions.
Hosting the microservices on Azure Container Apps meets the requirements of running containerized workloads, scaling from zero, and supporting KEDA out-of-the-box while minimizing administrative overhead by using a fully managed serverless platform. Provisioning separate Log Analytics workspaces in the North Europe and West Europe regions ensures compliance with strict data sovereignty and log isolation requirements between the two regions.

Step-by-Step Solution

1
Evaluate the compute options based on administrative effort and autoscaling requirements.
Azure Container Apps is selected because it is a serverless platform that supports event-driven scaling natively and minimizes administrative overhead compared to AKS, which requires manual node and cluster management.
The scenario requires minimizing administrative effort while supporting container scaling based on HTTP traffic and queue depth.
2
Evaluate the monitoring and compliance requirements for log data residency.
Separate Log Analytics workspaces must be deployed in each region (North Europe and West Europe).
Compliance and data sovereignty demand that log data from Ireland and the Netherlands be physically segregated and stored in their respective regions.

Key Concept

Selecting container hosting platforms and designing regional monitoring architectures based on operational overhead and compliance requirements.
Estimated Time:3m 0s
Question 19Question

An enterprise is designing a container-based application on Azure. The application consists of two workloads:

* Workload 1: An API gateway that requires custom Kubernetes Custom Resource Definitions (CRDs) and direct access to the Kubernetes control plane API.
* Workload 2: A queue processing service that scales dynamically based on the count of active messages in an Azure Service Bus queue.

The solution must minimize administrative overhead for Workload 2.

Which two services should you recommend? (Select two.)

Select all that apply

Show answer & explanation

Answer: Azure Kubernetes Service (AKS) for Workload 1; Azure Container Apps for Workload 2

Answer

The correct answers are the options recommending Azure Kubernetes Service (AKS) for Workload 1 and Azure Container Apps for Workload 2.
Azure Kubernetes Service (AKS) is the correct choice for Workload 1 because it provides full access to the Kubernetes control plane API and supports custom Custom Resource Definitions (CRDs). Azure Container Apps is the correct choice for Workload 2 because it natively integrates with KEDA (Kubernetes Event-driven Autoscaling) to scale dynamically based on Azure Service Bus queue length, while minimizing administrative overhead by operating as a serverless container platform.

Step-by-Step Solution

1
Analyze the technical requirements of Workload 1.
Workload 1 requires custom Kubernetes CRDs and direct control plane API access.
These requirements dictate a hosting service that exposes full Kubernetes management capabilities.
2
Compare Azure Kubernetes Service (AKS) and Azure Container Apps (ACA) against the requirements of Workload 1.
Only AKS supports custom CRDs and direct API access, whereas ACA abstracts the control plane and does not support these features.
This identifies the correct compute solution for the first workload.
3
Analyze the requirements and administrative constraints of Workload 2.
Workload 2 requires queue-based autoscaling (KEDA) and must minimize administrative effort.
This helps choose between a serverless container service (ACA) and a fully managed Kubernetes cluster (AKS).
4
Evaluate hosting options for Workload 2.
Azure Container Apps provides built-in KEDA scaling and serverless management, whereas AKS introduces high administrative overhead and ACI lacks native queue-based scaling.
This determines the best hosting service that satisfies both the technical and operational constraints.

Key Concept

Selecting container hosting services based on Kubernetes API access requirements and administrative overhead constraints.
Question 20Question

A LegalTech company is designing a document indexing and analysis solution on Azure. The architecture must satisfy the following requirements:
- Process uploaded PDF agreements using a custom containerized parser that dynamically scales from zero based on the number of messages in an Azure Storage queue.
- Provide a containerized HTTP API front-end to receive document upload metadata.
- Run all containers on a platform that minimizes operational and infrastructure management overhead.
- Support event-driven autoscaling using KEDA natively without managing virtual machine nodes or Kubernetes control planes.
- Ensure all components are deployed securely with private IP addresses within an Azure Virtual Network.

Which compute solution should you recommend for hosting the containerized parser?

Show answer & explanation

Answer: Azure Container Apps

Answer

Azure Container Apps is the recommended solution because it provides a serverless environment that natively integrates with KEDA for event-driven autoscaling (including scaling to zero), supports deployment into an internal Virtual Network, and eliminates the administrative overhead associated with managing Kubernetes clusters.
The correct answer is Azure Container Apps because it provides a serverless container hosting environment that completely abstracts cluster management. It natively supports event-driven scaling using KEDA, allowing containers to scale to zero when the Azure Storage queue is empty. Furthermore, it supports deployment into an internal Azure Virtual Network, meeting all security and connectivity criteria with minimal operational overhead.

Step-by-Step Solution

1
Analyze the operational constraints
The solution must minimize administrative effort, ruling out solutions that require managing cluster control planes or virtual machine nodes.
This requirement differentiates managed Kubernetes environments from serverless container services.
2
Evaluate autoscaling requirements
The platform must support event-driven scaling using KEDA natively, specifically scaling from and to zero instances based on Azure Storage Queue length.
This rules out standard container instances or web apps that lack native KEDA scaling hooks.
3
Evaluate network isolation requirements
The platform must support deployment within an Azure Virtual Network with private IP addresses.
Both Azure Kubernetes Service and Azure Container Apps support internal virtual network environments, but Azure Container Apps achieves this with much lower operational overhead.

Key Concept

Selecting container compute solutions based on operational overhead and native scaling mechanisms
Page 1 / 3Next