Tüm alıştırma soruları

A media production company is migrating its rendering and asset management platform to Azure. The platform consists of Linux-based virtual machines (VMs) and has the following requirements:

* A shared file storage volume that supports the NFS v $4.1$ protocol and POSIX-compliant file locking.
* A database transaction log volume that must support at least $12,000$ IOPS and sub-millisecond write latency.
* Both the shared file storage and the database transaction log volume must be resilient to a primary datacenter outage within the Azure region.

Which combination of Azure storage solutions should you recommend to meet these requirements?

You are designing a storage solution for a shared file repository in Azure. The repository must be accessible simultaneously by multiple Azure Virtual Machines (VMs) using the SMB protocol. The storage configuration must ensure that data remains available even if a single physical datacenter in the primary region undergoes an outage. Which two storage configurations should you recommend to meet these requirements? (Select two.)

Your company is designing a delegated administration model for a team of database administrators (DBAs) who manage resources across multiple Azure subscriptions. The DBAs require temporary, time-bound permissions to manage Azure SQL databases within a specific subset of subscriptions, adhering to the principle of least privilege.

You plan to implement a custom Azure RBAC role and delegate it using Microsoft Entra Privileged Identity Management (PIM) for Groups.

Which sequence of steps should you perform to implement this governance solution?

A global financial enterprise is designing a hybrid identity and access management solution using Microsoft Entra ID. You need to align specific security and authentication requirements with the appropriate Microsoft Entra ID feature or Conditional Access configuration.

Match each security requirement on the left to its corresponding feature or configuration on the right. (Each option on the right may be used once, more than once, or not at all.)

An organization is designing a high-availability SQL Server Failover Cluster Instance (FCI) hosted on Azure Virtual Machines. The VMs are distributed across Zone 1 and Zone 2 in the East US region.

The storage solution for the FCI database files must meet the following requirements:
- Must be a shared block storage volume that can be attached to all cluster nodes concurrently using SCSI persistent reservations.
- Must survive an availability zone failure with zero data loss (Recovery Point Objective (RPO) = 0).
- Must support sub-millisecond read and write latencies for database transactions.
- Must allow administrative teams to scale storage capacity, IOPS, and throughput independently and dynamically without taking the disks offline or restarting the virtual machines.

Which storage configuration should you recommend?

An organization is designing the relational data storage architecture on Azure for two workloads.

- Workload 1: A legacy back-office application that requires SQL Server Agent for automated job scheduling and relies on cross-database queries.
- Workload 2: A customer-facing portal with highly unpredictable traffic that frequently experiences long periods of inactivity. Minimizing cost during idle times is a key requirement.

To ensure business continuity, the storage backups for both workloads must survive the physical failure of a primary datacenter.

Which two Azure SQL options should you recommend to meet these requirements?

A healthcare provider operates a single-tenant Azure environment with a management group hierarchy. The internal IT support department has 15 engineers who need the Virtual Machine Contributor role at the subscription scope to resolve high-priority incidents. You must design an administrative access solution that satisfies the following conditions:
1. Operations must scale efficiently when engineers join or leave the department without manually editing role assignments.
2. The principle of least privilege must be enforced by granting administrative permissions only during active incident response windows and automatically removing them afterward.
3. Every elevation of privilege must be recorded for compliance auditing.

Which configuration should you recommend?

You are designing the storage configuration for a critical production database hosted on an Azure Virtual Machine. The database transaction logs require high write throughput and consistent sub-millisecond latency. In addition, the storage solution must remain available in the event of a physical outage or power failure at a single datacenter within the Azure region. Which disk storage configuration should you recommend?

Your company needs to grant an external audit team temporary read-only access to financial reports stored in an Azure Blob storage container. You need to design an access solution that allows immediate revocation of access and adheres to cloud security best practices for identity and access management. Which two security controls should you implement? (Select two.)

A financial services firm is migrating a critical core banking reporting application to Azure. The application runs on Azure Virtual Machines and requires a shared storage volume. The storage solution must meet the following requirements:

* Support concurrent read and write operations via the SMB protocol.
* Guarantee sub-millisecond read and write latency for highly transactional file metadata updates.
* Ensure that the data remains fully writeable and accessible even if a single Azure datacenter (Availability Zone) within the primary region suffers a total outage.
* Authenticate file access using the firm's on-premises Active Directory Domain Services (AD DS).

Which storage solution should you recommend?

You are designing the storage infrastructure for a hybrid high-performance computing (HPC) workload and database migration to Azure. The architecture must satisfy the following requirements:

* A shared file system must support POSIX-compliant permissions, concurrent access from multiple Linux-based virtual machines, and low-latency metadata operations. The file storage must survive an availability zone failure.
* A database transaction log store must support up to $15,000$ IOPS and $300\text{ MB/s}$ throughput with sub-millisecond latency. The database VM must be able to failover to another availability zone in the same region while preserving the disk contents without application-level replication.
* External applications must be granted access to specific blobs in a storage account. The access must expire after 2 hours and must be instantly revocable at any time without rotating the primary or secondary storage account keys.

Which three storage configurations should you include in the design?

An architect is designing a globally distributed telemetry ingestion system for a fleet of $100,000$ autonomous transport vehicles. The solution uses Azure Cosmos DB for NoSQL and replicates data across East US, West Europe, and East Asia to support local writes (multi-region writes enabled). The workload consists of $80\%$ writes and $20\%$ reads, aiming for a $99.999\%$ availability SLA for both reads and writes. Large diagnostic payloads must be archived to Azure Blob Storage. You must select a design that:

1. Avoids hot partitions in the Cosmos DB container during high-concurrency periods.
2. Ensures the archived payloads in Blob Storage survive a regional disaster.
3. Provides a secure method to generate SAS tokens for accessing the archives, ensuring they can be revoked instantly if compromised.

Which design configuration should you recommend?

You are designing access control for an Azure Storage account. You need to grant a team of five support engineers read access to a specific blob container. You want to minimize administrative overhead and follow the principle of least privilege.

How should you assign the required permissions?

An enterprise has a single-tenant Azure environment structured under a root Management Group named Contoso-Root. You are designing a subscription governance and access control solution for two groups of users:

1. Auditors: Must have read-only access to all resources and security logs across all current and future subscriptions under the Contoso-Root hierarchy. This access must be restricted to active audit periods, requiring multi-factor authentication (MFA) and administrative approval for each activation.
2. Operations Team: Must be able to restart virtual machines and modify web application settings within a resource group named Prod-RG-01. They must be prevented from modifying any virtual network configurations or deleting network security groups (NSGs) within the resource group.

Which two configurations should you include in the design to meet the requirements while minimizing administrative overhead and adhering to the principle of least privilege?

You are designing the security and access control architecture for an Azure Storage account named clinicaldata that contains proprietary research datasets. The solution must satisfy the following requirements:
- Internal researchers must only be granted access to the data during active project phases, which typically last up to 90 days. They must not have permanent standing permissions.
- Permissions for the internal researchers must be managed collectively to minimize administrative overhead.
- An external third-party analysis tool requires write access to a specific container for the same 90-day period. The tool does not support Microsoft Entra ID authentication.
- Access for the third-party tool must be easily revoked if a security compromise is suspected, without rotating the storage account keys and without affecting other workloads.

Which access control configuration should you recommend to meet these requirements?

A logistics company stores shipment logs in an Azure Blob Storage container. You need to grant an external auditor temporary read-only access to this container. The access must expire automatically after 24 hours, and you must have the ability to revoke the access immediately if a security policy is violated. Which security control should you implement to meet the requirements?

A multinational financial services enterprise is designing a privileged access governance and identity protection strategy for its Azure tenant. The design must satisfy the following administrative and security requirements:
- System administrators must only be granted the User Access Administrator and Contributor roles on an as-needed basis for troubleshooting subscription-level issues, with all sessions automatically expiring after a maximum of 4 hours.
- In the event of a tenant-wide identity outage or Conditional Access misconfiguration, administrators must be able to log in using emergency break-glass accounts without being blocked by multi-factor authentication (MFA) requirements.
Which two of the following configurations should you include in the identity and governance design?

An enterprise is designing a new data analytics platform in Azure to process and analyze telemetry data from global manufacturing plants. The platform must meet the following requirements:
- Ingest raw telemetry data at an ingestion rate of up to $8\text{ GB/sec}$ with sub-second ingestion latency, resulting in an expected daily volume of $150\text{ TB}$.
- Store raw data in an Azure Data Lake Storage Gen2 (ADLS Gen2) account.
- Enable data analysts to perform exploratory ad-hoc queries on raw files (CSV and Parquet) with a target query latency of under $10\text{ seconds}$ for small datasets, using a serverless model to minimize operational overhead and costs.
- Provide a persistent, centralized enterprise data warehouse for complex analytical queries on historical data (volume exceeding $5\text{ PB}$), supporting clustered columnstore indexes and massive parallel processing (MPP) with sub-minute query latency.
- Ensure that both the storage and analytical layers survive a primary regional outage.
- Dynamically authorize access to raw files without exposing long-lived access keys or connection strings.

Which three solutions should you recommend to meet these requirements? (Select three.)

A manufacturing enterprise is migrating its on-premises SQL Server environment to Azure. The migration includes two databases with the following requirements:

* Database_Prod: A transaction processing system that requires SQL Server Agent for scheduling local ETL jobs, cross-database queries, and common language runtime (CLR) integration. The database must survive a primary datacenter outage within the chosen Azure region.
* Database_Archive: A legacy database that stores historical telemetry data. It requires the use of SQL Server FILESTREAM to store unstructured files, requires the installation of custom security agents directly on the hosting operating system, and requires sub-millisecond disk write latency for transaction logs.

Which two Azure SQL options should you recommend to meet the requirements? (Select two.)

An organization is designing a security and identity infrastructure solution using Microsoft Entra ID. Match each organization's technical or security requirement to the most appropriate Microsoft Entra ID authentication method or Conditional Access feature.