Tüm alıştırma soruları

An enterprise is designing a modern data platform on Azure to process and analyze telemetry data. The design must meet the following requirements:
- Data analysts must perform ad-hoc, exploratory queries directly against raw CSV and JSON files stored in the data lake, paying only for the queries run.
- The data storage solution must remain resilient and available even in the event of a primary datacenter outage within the region.
- Shared Access Signatures (SAS) provided to external partners must be easily revocable at any time without rotating the storage account access keys.

Which of the following architectural recommendations should you include in the design? (Select TWO).

A logistics company is designing a multi-region architecture for storing shipment images using Azure Block Blobs. To ensure high availability, the application must be able to write new images to the storage endpoints in both the primary and secondary Azure regions simultaneously. A junior architect suggests configuring the storage account with Read-Access Geo-Redundant Storage (RA-GRS). Why is this suggestion invalid?

You are designing a disaster recovery solution for a web application database in Azure. The database is currently deployed as an Azure SQL Database. The disaster recovery design must support automatic failover to a secondary region and allow the application to connect using a single read-write connection string that remains unchanged after a failover event. Which two actions should you include in the design? (Select two.)

You are designing the storage architecture for an enterprise modernization project. You need to match the application workloads and migration requirements to the most appropriate Azure Cosmos DB API. To answer, match each workload scenario on the left with its corresponding Azure Cosmos DB API on the right.

Meridian Retail is designing an identity security strategy for its Microsoft Entra ID tenant. You are configuring a Conditional Access policy that enforces multi-factor authentication (MFA) for all directory administrators. The design must prevent administrative lockout in the event of an Azure MFA service outage or policy misconfiguration. Which strategy should you include in the design?

A retail company stores point-of-sale (POS) transaction audit logs in an Azure Blob Storage container named pos-audit-logs. A third-party auditing firm requires temporary read access to this container. You must design an access control solution that meets the following security requirements:

- Access must be limited to a specific 30-day auditing window.
- The security team must be able to revoke the access immediately in the event of a credential compromise, without affecting other integrations that rely on the storage account keys.
- The external auditors must be granted only the minimum required permissions.

Which access control strategy should you recommend?

You are designing a disaster recovery solution for an Azure virtual machine (VM) that runs a database workload. The VM has a single Premium SSD data disk with a constant write churn rate of $25\text{ MB/s}$. The solution must replicate the VM to a secondary Azure region and support a Recovery Point Objective (RPO) of 15 minutes. Which replication option should you select to meet these requirements?

An organization is designing a relational database solution in Azure to support a new large-scale analytics platform. The solution must meet the following requirements:
- Support a database size that is projected to grow to $35\text{ TB}$.
- Ensure database backups are completed in under $15\text{ minutes}$ regardless of the database volume size.
- Minimize database administrative and management overhead by using a fully managed Platform as a Service (PaaS) solution.
- Support up to $4$ read-only replicas to offload reporting workloads.

Which Azure SQL database deployment option should you recommend?

An enterprise is designing a secure storage solution on Azure to hold sensitive transaction logs in a Blob Storage container. The logs contain highly confidential financial records. You need to design the access control strategy to meet the following security requirements:

- A team of external auditors must be granted temporary read access to the logs for a maximum duration of 4 hours per session, and this access must be immediately revocable in the event of a suspected security breach.
- A team of internal storage administrators requires privileged access to manage the storage container, but their permissions must not be permanently active and must require activation through Microsoft Entra Privileged Identity Management (PIM).
- Permissions must be managed at scale, avoiding direct assignment of role privileges to individual user identities.

Which two actions should you recommend to meet these requirements? (Select TWO.)

A retail company is planning the high availability and disaster recovery strategy for its new customer feedback system. The system's relational database will be hosted on Azure SQL Database. The operations team has specified that if the primary region experiences an outage, database failover to the secondary region must happen automatically. Additionally, the application must connect using a read-write listener that automatically routes traffic to the active primary region without updating connection strings. Which feature should be implemented to satisfy these requirements?

An organization stores application log files in an Azure Blob Storage container. The logs are frequently accessed for the first 30 days. After 30 days, the logs are rarely accessed but must be available for immediate, sub-second retrieval to support troubleshooting. The logs must be retained for a total of 365 days and then removed to minimize storage costs. Which two actions should you include in the Azure Blob Storage lifecycle management policy to meet these requirements at the lowest cost? (Select TWO.)

An energy company is designing a security and access control solution for wind turbine telemetry logs stored in an Azure Blob Storage container named telemetry-logs. The solution must meet the following requirements:
- External wind farm maintenance contractors must be granted read-only access to the telemetry-logs container for a maximum of 24 hours.
- You must be able to immediately revoke the contractors' access before the 24-hour window expires, without changing the storage account key or impacting other active access tokens.
- Internal infrastructure engineers must be granted administrative access to manage the storage settings only when performing scheduled maintenance tasks, and their access must be audited and automatically expire.
Which two security controls should you recommend to meet the requirements? (Select two.)

A global maritime shipping logistics company is designing the disaster recovery architecture for its core vessel dispatch system. The database layer is deployed on an Azure SQL Managed Instance in the North Europe region.

The company has the following requirements for the disaster recovery site in the West Europe region:
- The Recovery Time Objective (RTO) must be less than 10 seconds.
- The Recovery Point Objective (RPO) must be less than 5 seconds.
- Client applications must connect using a single, unchanging connection string that automatically handles failovers.
- Read-heavy reporting queries must be automatically offloaded to the secondary replica.
- All database replication traffic must remain completely private and isolated from the public internet.

Which two components should you include in the relational database design to meet the requirements? (Select TWO.)

You are designing the data storage architecture for a global multiplayer online game. The game requires a database to store player session state and real-time match telemetry.

The database tier must meet the following requirements:
- Support a write-heavy workload with an $80:20$ write-to-read ratio.
- Provide sub-$10\text{ ms}$ write latency for session updates.
- Achieve a recovery point objective ($RPO = 0$) guaranteeing zero data loss in the event of a regional datacenter outage.
- Store cold telemetry data older than $30$ days in Azure Blob Storage, ensuring the archived data also survives a regional datacenter outage.
- Secure client-side telemetry uploads to the archive storage using Shared Access Signatures (SAS) that can be immediately revoked if client credentials are compromised.

You have the following data fields for partitioning the database:
- `gameRegion` ($5$ distinct values)
- `tenantId` ($12$ distinct values)
- `playerId` (millions of unique values, uniformly distributed)
- `sessionType` ($4$ distinct values)

Which architecture should you recommend?

A company plans to migrate an on-premises database environment to Azure. The environment contains multiple databases that require the execution of native cross-database queries using three-part names. In addition, the databases rely heavily on SQL Server Agent for scheduled ETL processes.

Which two database options should you recommend to support this migration? (Select two.)

A financial services company is migrating an on-premises database workload to Azure Virtual Machines. You are designing the storage configuration for the database transaction logs, which require consistent high write throughput and single-digit millisecond latency. The storage design must also ensure that the database remains operational even if a single datacenter within the target Azure region experiences a power failure. Which storage option should you recommend?

An organization is designing a shared storage solution for a critical financial transaction processing application hosted on Azure Virtual Machines. The application requires a shared file system that can deliver consistent sub-millisecond latency for metadata and file operations. To meet high availability requirements, the storage must survive the failure of an entire availability zone within the primary region without any data loss and without manual intervention. Additionally, the solution must replicate data to a secondary region for disaster recovery purposes. Which storage configuration should you recommend?

A financial services company is designing a new analytical data platform on Azure to query historical audit logs. The audit logs are stored in Parquet format in an Azure Data Lake Storage Gen2 account.

The platform must meet the following requirements:
- Volume: $80\text{ TB}$ of data is currently stored, growing by $2\text{ TB}$ per month.
- Velocity: Batch uploads occur once every week.
- Query Latency and Pattern: Data analysts run highly complex, ad-hoc exploratory queries to investigate anomalies. These queries occur irregularly, and the system may remain idle for several days.
- Resilience: The data must remain available even during a complete regional datacenter outage.
- Security: Access to the data lake must be delegated to external audit teams via Shared Access Signatures (SAS) that can be immediately revoked if security policies are violated.

You need to recommend the storage configuration and the query engine for the platform.

Which two components should you include in the recommendation? (Select TWO.)

An organization is designing an identity security strategy using Microsoft Entra ID. You need to match the specific security and access requirements to the correct Microsoft Entra ID Authentication or Conditional Access feature. How should you match the requirements to the appropriate features?

You are designing a disaster recovery solution to Azure for an on-premises VMware virtual machine that hosts a financial database. The source environment has a $10\text{ Gbps}$ ExpressRoute connection to Azure.

The virtual machine has the following specifications:
- Operating system disk: $80\text{ GB}$ size, $4\text{ MB/s}$ average write churn
- Database log disk: $500\text{ GB}$ size, $35\text{ MB/s}$ average write churn
- Recovery Point Objective (RPO) goal: $15\text{ minutes}$
- Recovery Time Objective (RTO) goal: $4\text{ hours}$

Which two actions should you include in the disaster recovery design to meet the requirements? (Select two.)