Tüm alıştırma soruları

An organization is planning the migration of an on-premises database to Azure. The database currently supports a critical business application and has the following requirements:
- It must support SQL Server Agent for scheduled T-SQL maintenance jobs.
- It must allow cross-database queries using three-part names across multiple databases.
- The deployment must reside within a delegated subnet of an Azure Virtual Network for secure private connectivity.
- The administrative overhead of managing the host operating system, patching, and backups must be minimized.
- The backup strategy must guarantee that data remains recoverable even in the event of a complete primary Azure datacenter outage.

Which database solution should you recommend?

You are designing the storage configuration for a high-performance transactional database hosted on Azure Virtual Machines. The database has the following requirements:

- The transaction log volume must support up to $8,000\text{ IOPS}$ and $200\text{ MB/s}$ throughput with consistent sub-millisecond latency.
- You must be able to scale the log volume's IOPS and throughput dynamically during peak processing windows without restarting the virtual machine or detaching the disk.
- Database backups must survive a localized datacenter outage within the primary region without incurring the high latency or costs of cross-region replication during recovery operations.

Which storage configuration should you recommend to meet these requirements?

You are designing an identity governance and privileged access solution for a large Azure enterprise environment. The environment has the following requirements:

* A team of tier-2 cloud engineers must be able to manage role assignments on a critical subscription, but only when actively performing scheduled maintenance.
* To maintain a clear audit trail and ease of administration, individual user accounts must not be assigned roles directly.
* All administrative activations must require multi-factor authentication (MFA) and administrative approval.
* The organization's emergency access (glass-breaker) account must be protected from accidental lockout during a Microsoft Entra ID authentication outage.

Which design recommendation should you include in the identity governance strategy to meet these requirements?

An enterprise is migrating an on-premises transactional database to an Azure Virtual Machine. You are designing the storage architecture to meet the following requirements:

- Transaction Logs: The drive hosting the database transaction logs must support at least $25,000$ IOPS and deliver sub-millisecond write latency.
- Database Backups: Backups must be stored in Azure Blob Storage and remain available even in the event of a complete regional outage of the primary Azure region.
- Auditor Access: An external auditing firm requires access to download specific backup files for a period of $14$ days. You must be able to immediately revoke this access at any point during the $14$ days without affecting other clients or rotating the storage account access keys.

Which storage design should you recommend?

A manufacturing enterprise is designing a monitoring and log routing architecture for its workloads deployed across the West US 3 and West Europe regions. The design must satisfy the following constraints:
- All application logs generated in the West Europe region must reside in Europe to comply with local data sovereignty regulations.
- Operations team members who only manage West US 3 resources must only be allowed to view logs originating from those West US 3 resources.
- High-priority security alerts must be streamed in near real-time to a third-party Security Information and Event Management (SIEM) system.
- The deployment and maintenance of diagnostic settings should be automated.

Which two of the following components should you include in the design? (Select two.)

A company named Kusto Corp has a multi-subscription Azure environment managed under a single management group named Kusto-Global. The company wants to enforce database security. Specifically, all Azure SQL databases in all subscriptions must have vulnerability assessment scanning enabled. If a SQL database is deployed without a vulnerability assessment configuration, the system must automatically deploy the configuration after the database is created, using a specific storage account for scan results. Additionally, the security team wants to exempt a subscription named Kusto-Sandbox, which is under Kusto-Global, from this compliance requirement. You need to design an Azure Policy solution that meets these requirements with the least administrative overhead. Which Azure Policy configuration should you recommend?

An organization plans to migrate an on-premises ERP application and its SQL Server database to Azure. The migration must meet the following requirements:
- Support SQL Server Agent jobs for internal database maintenance.
- Enable cross-database queries between databases hosted on the same instance.
- Minimize administrative effort for database host patching, operating system management, and backups.
- Provide automatic failover to a secondary Azure region with a single write listener endpoint in the event of a regional outage.

Which two technologies should you recommend to meet these requirements? (Select two.)

A logistics company plans to migrate an on-premises SQL Server database system to Azure. The migration must meet the following requirements:

* Support scheduled data aggregation jobs using SQL Server Agent.
* Enable cross-database queries using three-part names across multiple databases on the same instance.
* Ensure the database is natively deployed within a private virtual network subnet with no public endpoints.
* Minimize administrative effort for managing operating system patching and physical storage.

Which database solution should you recommend?

An organization is designing a shared storage solution for a financial reporting application hosted on Azure Virtual Machines. The application has the following requirements:
- Concurrent access from multiple VMs using the SMB protocol.
- High-throughput, sub-millisecond latencies for metadata operations.
- Maximum resilience against localized datacenter outages within the primary Azure region.
- Access to the storage must be secured using Shared Access Signatures (SAS) that can be instantly revoked if compromised, without rotating the storage account keys.

Which storage configuration should you recommend?

An enterprise is planning to migrate a mission-critical on-premises SQL Server database to Azure. The database has the following requirements:

* Must support legacy features including SQL Server Agent jobs, cross-database queries, and Common Language Runtime (CLR) integration.
* Must support read scale-out to offload reporting workloads to a read-only replica in the primary region.
* Must support automated cross-region failover to a secondary Azure region.
* Must minimize administrative effort for operating system and database engine updates.

Which two components should you include in the recommendation?

Aventis Logistics is designing a hybrid identity solution to integrate their on-premises Active Directory Domain Services (AD DS) forest of 6,200 users with a Microsoft Entra ID tenant. The design must satisfy the following requirements:
- Users must be able to sign in to Azure resources using their current on-premises passwords.
- Users must be able to perform self-service password resets from the cloud, and these updates must immediately synchronize back to the on-premises directory.
- The sign-in service must remain operational for users even if the network link between the on-premises datacenter and Azure is temporarily offline.
- On-premises server infrastructure and administrative overhead must be minimized.
Which two components should you include in the hybrid identity design? (Select two.)

An organization is deploying a globally distributed multiplayer game. You are designing the Azure Cosmos DB NoSQL API account to store player profile data. The database must replicate data between East US and West US to support a read/write ratio of $70\%$ reads and $30\%$ writes. The architecture requires a $99.999\%$ availability SLA for both read and write operations. The player profile documents contain a unique `playerId`, a `countryCode` (with $5$ possible values), and a `lastLoginTimestamp`.

Which two options should you include in the design to meet the SLA and performance requirements? (Select TWO.)

An enterprise is designing a secure identity and access management infrastructure. You are tasked with mapping specific access control requirements to their corresponding Microsoft Entra ID or Conditional Access configuration. Match each requirement on the left to the most appropriate configuration on the right to satisfy the requirement.

An organization named CloudVibe is designing a governance strategy for its Azure subscriptions. The subscriptions are organized under a single management group named CloudVibe-MG.

The organization has the following compliance and security requirements:
- Automatically enable Azure Backup for all new virtual machines deployed to the production subscription. If a virtual machine is deployed without a backup configuration, the backup must be configured automatically without manual intervention.
- Prevent developers from creating public IP addresses in the development subscription.

You need to recommend the Azure Policy configurations to meet these requirements.

Which two policy configurations should you include in the design?

An organization is designing the storage infrastructure for a mission-critical financial application hosted on Azure Virtual Machines. The application requires a database data drive that must support at least $15,000$ IOPS and sub-millisecond write latency. The database files must survive a storage zone failure. Additionally, you must provide secure, temporary, write-only access to specific database backup blobs for external auditors, and this access must be easily revocable at any time. Which two configurations should you include in the storage design? (Select two.)

An organization plans to migrate two on-premises SQL Server databases to Azure. The migration must meet the following requirements:

* Database 1: Requires native SQL Server Agent jobs and cross-database queries. The organization wants to minimize administrative overhead, including operating system patching.
* Database 2: Requires access to the underlying operating system to run a proprietary third-party compliance agent. The database transaction log files require high-throughput and low-latency storage.

Which two database solutions should you include in the design?

A financial services provider is planning to transition a localized underwriting database to Microsoft Azure. The database deployment must satisfy the following constraints:

* Support the execution of complex SQL Server Integration Services (SSIS) packages scheduled via SQL Server Agent.
* Permit the execution of cross-database queries across two distinct schemas within the same relational engine.
* Ensure direct connectivity via virtual network (VNet) delegation for private communication.
* Reduce administrative overhead associated with operating system patching and storage management.

Which database solution should you recommend?

Tailwind Traders is designing an identity security strategy for its Microsoft Entra ID tenant. The organization plans to implement a Conditional Access policy that requires Multi-Factor Authentication (MFA) for all users when accessing Azure management portals. The architect must ensure that administrators do not get locked out of the tenant if there is an outage of the MFA service or if the policy is misconfigured. Which of the following configurations should the architect include in the security design?

An educational technology provider is designing a monitoring and audit log routing architecture for its multi-tenant platform. You need to match each workload telemetry source or monitoring requirement to its most appropriate Azure destination or storage configuration to optimize cost, performance, and capability.

A company named Solis Energy is designing a governance strategy for its Azure subscriptions. The subscriptions are organized under a parent management group named Solis-Production.

The company has the following requirements:
1. All newly deployed virtual machines must have the Azure Monitor Dependency Agent installed automatically.
2. Virtual machines deployed in a specific subscription named Solis-DevTest, which is nested under Solis-Production, must not have the agent installed to minimize costs.
3. The solution must minimize administrative overhead.

Which Azure Policy design should you recommend?