Tüm alıştırma soruları

An enterprise is designing a hub-and-spoke network topology in Azure to support their application infrastructure. The topology includes the following components:
* A hub virtual network named `vnet-hub-useast` ($10.100.0.0/16$) that hosts a Virtual Network Gateway and an Azure Firewall with the private IP address `$10.100.1.4$`.
* A spoke virtual network named `vnet-spoke-app` ($10.101.0.0/16$) that contains two subnets: `snet-web` ($10.101.1.0/24$) and `snet-db` ($10.101.2.0/24$).
* An on-premises network ($172.16.0.0/12$) connected to the hub's Virtual Network Gateway via an ExpressRoute circuit.
* Virtual network peering established between `vnet-hub-useast` and `vnet-spoke-app` with gateway transit enabled.

You are designing a routing solution for the subnets in `vnet-spoke-app` to meet these requirements:
1. All outbound traffic destined for the internet must be inspected by the Azure Firewall.
2. All traffic destined for the on-premises network ($172.16.0.0/12$) must route through the Virtual Network Gateway.
3. Traffic between `snet-web` and `snet-db` must route directly within the spoke virtual network without traversing the hub.
4. The configuration must minimize administrative overhead and avoid using statically defined routes for on-premises address ranges.

Which two configurations should you include in the route table associated with the spoke subnets to meet these requirements?

A logistics enterprise is designing the compute architecture for a core dispatch routing service on Azure. The service runs on Azure Virtual Machines and requires a minimum virtual machine uptime SLA of $99.99\%$ to meet business requirements. The architecture must protect the service against localized datacenter failures within the Azure region. Which of the following compute deployment strategies should you recommend to meet these requirements?

A logistics company is designing a serverless infrastructure solution for two application workloads:

* A REST API for package tracking that must scale out rapidly to handle sudden spikes in traffic, integrate with an Azure Virtual Network (VNet), and avoid cold-start latency.
* An event-driven invoice processing job that extracts metadata from uploaded documents using OCR. This job can take up to 20 minutes to complete.

You need to recommend the compute services that satisfy these requirements while minimizing operational overhead.

Which two Azure compute solutions should you recommend? (Select TWO.)

An enterprise is designing a secure hybrid network topology in Azure. The design includes a hub virtual network named `vnet-hub-prod` ($10.50.0.0/16$) that contains an Azure VPN Gateway connected to an on-premises datacenter. A spoke virtual network named `vnet-spoke-app` ($10.60.0.0/16$) is peered with `vnet-hub-prod`. The spoke network contains a subnet named `subnet-app` ($10.60.1.0/24$).

The enterprise requires that all outbound internet traffic from `subnet-app` is redirected to the on-premises datacenter for security inspection. Resources within `vnet-spoke-app` must retain the ability to communicate directly with each other.

Which three configuration steps should you recommend to meet these requirements?

An organization is designing a secure network environment for a microservices application hosted on Azure Virtual Machine Scale Sets in a dedicated subnet. The application must connect to an Azure Key Vault and an Azure Storage account. Corporate security policy requires restricting outbound traffic to the internet, and the design must minimize administrative effort to maintain security rules as Azure services evolve. Which two actions should you include in the network security design? (Select two.)

An organization is designing a serverless solution for a new application that processes user-uploaded medical images. The solution contains two workloads:

1. An API frontend that receives image upload events and metadata. This API experiences highly volatile traffic patterns with long periods of idle time and must scale to zero to minimize hosting costs.
2. A background worker that performs computational analysis on the uploaded images. Each analysis task takes approximately 15 minutes to complete.

You need to select the compute resources that minimize operational overhead and hosting costs while ensuring that all processing tasks complete successfully.

Which two Azure hosting options should you recommend? (Select two.)

An organization is designing the compute layer for a telemetry processing workload. The workload will run on Azure Virtual Machines.

The design must meet the following requirements:
- Provide a virtual machine uptime SLA of $99.99\%$.
- Protect the workload against localized datacenter outages within an Azure region.
- Minimize network latency between the virtual machine instances.

Which two actions should you include in the design? (Select two.)

A financial services company is designing a serverless solution to process end-of-day transaction reconciliation files. The reconciliation process runs once daily, parses large files containing transaction records, validates the data, and writes the results to a database. The process typically takes 25 minutes to complete. The company wants to minimize administrative overhead and ensure they only pay for compute resources while the process is running. Which hosting solution should you recommend?

An enterprise is implementing a hub-and-spoke network topology in Azure. The hub virtual network, `vnet-prod-hub` ($10.10.0.0/16$), hosts a firewall at $10.10.1.4$. The spoke virtual network, `vnet-prod-spoke` ($10.20.0.0/16$), contains two subnets named `subnet-web` ($10.20.1.0/24$) and `subnet-app` ($10.20.2.0/24$). To inspect traffic between the two spoke subnets, an administrator creates a route table and associates it with both subnets in `vnet-prod-spoke`. The route table contains a user-defined route (UDR) with the address prefix $10.20.0.0/16$ and a next hop of the firewall at $10.10.1.4$. After this change, virtual machines within `subnet-web` can no longer communicate with each other, nor with virtual machines in `subnet-app`. Which of the following describes the cause of this connectivity failure?

A digital publishing company is migrating its content management and rendering platforms to Azure. The system requires two compute tiers:

1. Editorial Backend: A stateful web application that runs continuously, requires a $99.99\%$ availability SLA, and must be isolated on dedicated physical hardware due to compliance requirements.
2. Rendering Workers: A stateless batch video-rendering workload that can tolerate interruptions and must run at the absolute lowest cost.

Which compute virtualization solution should you recommend to meet these requirements?

An enterprise architecture team is implementing a hub-and-spoke virtual network topology in Azure for a secure payment application. The hub virtual network hosts an Azure Firewall with the private IP address $10.0.0.4$. A spoke virtual network named `VNet1` contains two subnets:

* `Subnet1` ($10.1.1.0/24$): Contains Azure Virtual Machines hosting the payment application.
* `Subnet2` ($10.1.2.0/24$): Contains a Private Endpoint (IP address $10.1.2.4$) for a secure Azure SQL Database.

You must ensure that all traffic from the Virtual Machines in `Subnet1` to the SQL Database Private Endpoint in `Subnet2` is inspected by the Azure Firewall. The design must also enforce network security group (NSG) rules on both subnets.

Which two actions should you perform? (Select two.)

Solaris Energy operates a distributed workload on Azure Virtual Machines within a subnet named BackendSubnet. The application running on these virtual machines must securely connect to Azure Key Vault to retrieve database credentials and certificate keys. The network team must implement a security design that restricts outbound traffic from the virtual machines to ONLY Azure Key Vault, blocking all other internet-bound traffic. Which network security configuration should you recommend to meet these requirements with the least administrative effort?

A retail company is designing the compute infrastructure for a new customer loyalty portal. The portal must run on Azure Virtual Machines and requires at least two VM instances to handle traffic. The architecture must guarantee a compute SLA of $99.99\%$ and protect against the failure of an entire datacenter. Which VM deployment configuration meets the requirements?

A biotechnology firm is designing the Azure compute virtualization infrastructure for two workloads:
- Genomic Sequencing Analyzer: A batch processing job that executes for up to $45$ minutes per run. It is highly resource-intensive, interruptible, can save progress to a checkpoint database, and must be optimized for the lowest possible compute costs.
- Customer Operations Portal: A steady-state web application database backend that requires a $99.99\%$ availability SLA and is critical to business continuity.

Which two compute solutions should you recommend to meet these requirements? (Select two).

An enterprise is designing a hub-and-spoke virtual network topology in Azure. The topology consists of a hub virtual network named `vnet-hub-prod` ($10.100.0.0/16$), a spoke virtual network named `vnet-spoke-app` ($10.101.0.0/16$), and a spoke virtual network named `vnet-spoke-db` ($10.102.0.0/16$). The hub virtual network contains an Azure Firewall deployed at $10.100.2.4$. Virtual network peering is established between the hub and each spoke virtual network.

The following routing requirements must be met:
- All traffic between `vnet-spoke-app` and `vnet-spoke-db` must transit through the Azure Firewall in the hub.
- All outbound internet traffic from the spokes must be routed through the Azure Firewall.
- Virtual machines within `vnet-spoke-app` must communicate directly with each other without sending traffic to the firewall.

Which of the following routing configurations should you implement to satisfy these requirements? (Select TWO.)

An enterprise is designing a hub-and-spoke network topology in Azure. The hub virtual network, `vnet-useast-hub` ($10.100.0.0/16$), contains an Azure Firewall deployed at $10.100.3.4$ in the `AzureFirewallSubnet` ($10.100.3.0/24$). The spoke virtual network, `vnet-useast-prod` ($10.101.0.0/16$), contains two subnets: `snet-prod-web` ($10.101.1.0/24$) and `snet-prod-db` ($10.101.2.0/24$). The two virtual networks are peered. You need to design a routing solution for the route table associated with `snet-prod-web` to meet the following requirements:
- All traffic destined for the internet must be routed through the Azure Firewall.
- All traffic destined for `snet-prod-db` must be routed through the Azure Firewall.
- Traffic between virtual machines within the same `snet-prod-web` subnet must bypass the Azure Firewall and communicate directly.
- The configuration must minimize administrative maintenance when new subnets are added to `vnet-useast-prod` in the future.

Which configuration should you use for the route table associated with `snet-prod-web`?

An organization plans to migrate an on-premises web application to Azure. The environment consists of:
- Four web servers running Apache Tomcat on VMware vSphere VMs.
- An Oracle Database running on two physical Red Hat Enterprise Linux (RHEL) servers configured in a hardware-level cluster.

The organization has the following requirements:
- Map network dependencies between the Tomcat VMs and the physical database servers to ensure no components are left behind.
- Minimize administrative overhead for the hybrid identity solution. Federated authentication is not required.
- Identify database compatibility and determine the correct target Azure service for the Oracle database workload.

Which two actions should you include in the migration assessment and strategy? (Choose two.)

An enterprise is designing a virtual network routing architecture in Azure to support their workload migration. The architecture consists of a hub virtual network named `vnet-prod-hub` ($10.100.0.0/16$) that contains a Virtual Network Gateway (`vgw-prod-hub`) in the `GatewaySubnet` ($10.100.0.0/24$), and a spoke virtual network named `vnet-prod-spoke1` ($10.101.0.0/16$) hosting an application subnet named `snet-app` ($10.101.1.0/24$). You need to design a routing solution that forces all internet-bound traffic from the VMs in `snet-app` to go through `vgw-prod-hub` to the on-premises network, while ensuring that VMs within `vnet-prod-spoke1` can communicate directly with each other without routing through the hub. Which two configurations should you include in the design? Select two.

AeroSpace Dynamics is designing the network security for a subnet named ProcessingSubnet that hosts Azure Virtual Machines. The virtual machines require outbound access to Azure Storage and Azure Key Vault to process data. All other outbound internet access from the subnet must be blocked. The design must minimize administrative maintenance.

Which two outbound configurations should you recommend for the Network Security Group (NSG) associated with ProcessingSubnet?

A university is designing the compute infrastructure for a student registration portal that will run on Azure Virtual Machines. The registration portal experiences high seasonal traffic and must remain resilient during infrastructure updates or datacenter-level disruptions. The portal requires a virtual machine uptime SLA of at least $99.99\%$.

Which two actions should you include in the design? (Select two.)