Design Infrastructure Solutions

360 soru

Soru 161Soru

A pharmaceutical company is planning to migrate a proprietary drug-discovery modeling application to Azure. The application has the following requirements:
- The virtual machines must run on hardware dedicated to a single customer at the physical host level to meet compliance standards.
- The workload requires a memory-to-vCPU ratio of at least 88 GiB of RAM per vCPU.
- The workload is steady-state, runs continuously, and cannot tolerate unexpected eviction or downtime.
- The storage layer requires a single disk that provides 10,00010,000 IOPS and 200200 MB/s throughput, with the capability to dynamically scale IOPS without resizing the disk.
- The architecture must guarantee a 99.99%99.99\% VM availability SLA.

Which of the following compute virtualization and storage solutions should you recommend to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Azure Dedicated Hosts deploying Esv5-series virtual machines distributed across multiple Availability Zones, using Premium SSD v2 storage.

Cevap

Azure Dedicated Hosts deploying Esv5-series virtual machines distributed across multiple Availability Zones, using Premium SSD v2 storage.
The correct option satisfies all constraints: Azure Dedicated Hosts provide the required physical hardware isolation; the Esv5-series VM size provides the minimum 88 GiB of RAM per vCPU; Premium SSD v2 supports 10,00010,000 IOPS and allows independent performance scaling without disk resizing; and distributing VMs across multiple Availability Zones meets the 99.99%99.99\% availability SLA requirement.

Adım Adım Çözüm

1
Analyze the tenant isolation and workload characteristics.
Single-tenant physical host isolation requires Azure Dedicated Hosts, which rules out public multi-tenant virtual machines and Spot VMs.
Regulatory compliance demands dedicated hardware, and the steady-state nature rules out Spot VMs due to eviction risk.
2
Determine the memory and virtual machine series requirements.
A memory-to-vCPU ratio of 88 GiB requires a memory-optimized VM family like the Esv5-series, which is supported on Azure Dedicated Hosts.
General-purpose (D-series) or compute-optimized (F-series) families do not meet the minimum 88 GiB per vCPU requirement.
3
Evaluate storage performance and scaling capabilities.
Premium SSD v2 is selected because it supports provisioning up to 80,00080,000 IOPS and allows independent tuning of IOPS and throughput without resizing the disk.
Standard SSDs do not scale to 10,00010,000 IOPS, and Standard/Premium SSD v1 requires expanding disk size to increase performance limits.
4
Validate the SLA and high availability design.
Distribute the Azure Dedicated Hosts and corresponding virtual machines across at least two Availability Zones.
A 99.99%99.99\% SLA for Azure VMs requires instances to be deployed across two or more Availability Zones in the same region.

Anahtar Kavram

Designing compute virtualization using Azure Dedicated Hosts, memory-optimized VM sizes, Premium SSD v2, and multi-zone high availability to meet SLA, compliance, and performance requirements.
Tahmini Süre:2m 30s
Soru 162Soru

A healthcare analytics company is designing the Azure compute and storage infrastructure for a new real-time patient health tracking application. The architecture must satisfy the following requirements:
- The analytics engine runs steady-state, 24/7, and processes highly sensitive health records. It must protect data in use via hardware-based memory encryption.
- The compute layer must automatically scale out to handle peak loads.
- The compute infrastructure must achieve a 99.99% availability Service Level Agreement (SLA).
- The database engine stores transaction logs that require high IOPS and sub-millisecond write latency.

Which virtual machine configuration and storage architecture should you recommend?

Cevabı ve açıklamayı göster

Cevap: A Virtual Machine Scale Set utilizing DCasv5-series Virtual Machines deployed across three Availability Zones, with Premium SSD v2 disks for database transaction logs.

Cevap

A Virtual Machine Scale Set utilizing DCasv5-series Virtual Machines deployed across three Availability Zones, with Premium SSD v2 disks for database transaction logs.
The correct option combines a Virtual Machine Scale Set (VMSS) with confidential computing (DCasv5-series) for hardware-based memory encryption. Distributing these VMs across three Availability Zones ensures a 99.99% SLA. Utilizing Premium SSD v2 satisfies the sub-millisecond write latency and high IOPS required for database transaction logs.

Adım Adım Çözüm

1
Analyze security requirements for memory encryption.
Identify that confidential computing (DC-series, such as DCasv5) is required to provide hardware-based virtualization and memory encryption for sensitive data in use.
Standard virtual machines do not encrypt data in memory during processing.
2
Analyze availability requirements for SLA.
Select a multi-zone deployment strategy across at least two (ideally three) Availability Zones to qualify for the 99.99% Virtual Machine SLA.
Single Availability Zone deployments only guarantee up to a 99.9% SLA.
3
Determine compute orchestration and scaling requirements.
Select Virtual Machine Scale Sets (VMSS) to support automatic scaling rules.
Individual virtual machines require manual scaling configuration and do not group instances uniformly out-of-the-box.
4
Select storage tier for database transaction logs.
Choose Premium SSD v2 to achieve sub-millisecond write latency and support high IOPS.
Standard HDD disks are slow, high-latency, and unsuitable for database write-intensive workloads.

Anahtar Kavram

Designing high-availability confidential compute virtualization solutions with high-performance storage in Azure.
Tahmini Süre:2m 0s
Soru 163Soru

A financial services company is designing a new cloud-native application on Azure. The application will consist of several containerized microservices that process transactions.

The design requirements are as follows:
* The microservices must scale dynamically based on the number of messages in an Azure Service Bus queue using Kubernetes Event-driven Autoscaling (KEDA).
* Administrative effort for infrastructure management, such as cluster upgrades and node patching, must be minimized.
* The application does not require direct access to the Kubernetes API or custom resource definitions (CRDs).
* The application must be deployed across two different Azure regions to comply with strict regional data sovereignty laws. Log data originating from each region must be kept isolated and accessible only within that region.

You need to recommend a solution that meets the requirements.

Which solution should you recommend?

Cevabı ve açıklamayı göster

Cevap: Deploy the microservices to Azure Container Apps (ACA) in each region. Configure a separate Log Analytics workspace in each region.

Cevap

Deploy the microservices to Azure Container Apps (ACA) in each region and configure a separate Log Analytics workspace in each region.
The correct solution uses Azure Container Apps (ACA) combined with separate regional Log Analytics workspaces. Azure Container Apps is a serverless container hosting platform that supports event-driven autoscaling using KEDA natively. Because the workload does not require custom Kubernetes API access, choosing ACA minimizes the administrative overhead of managing underlying nodes and cluster configurations. Configuring separate Log Analytics workspaces in each region ensures logs originating from those regions are isolated, adhering to the data sovereignty rules.

Adım Adım Çözüm

1
Analyze compute requirements to select between Azure Kubernetes Service (AKS) and Azure Container Apps (ACA).
Azure Container Apps is chosen because the application requires KEDA scaling, requires no custom Kubernetes API access, and has a strict requirement to minimize infrastructure administration effort.
AKS requires administrative effort for node configuration, cluster upgrades, and patching, which is unnecessary for this microservices application.
2
Analyze compliance requirements for logging and data residency.
Separate Log Analytics workspaces must be deployed in each region.
Data sovereignty laws require that logs from each region remain isolated and accessible only within their respective regions, preventing the use of a single centralized workspace.
3
Combine compute and logging selections to identify the correct architecture.
The final recommendation is Azure Container Apps paired with separate regional Log Analytics workspaces.
This configuration meets all constraints regarding scaling, administrative overhead minimization, and regional log isolation.

Anahtar Kavram

Selecting container hosting options based on administrative effort constraints, KEDA integration, and logging isolation compliance.
Soru 164Soru

A digital media broadcasting company is designing an Azure compute infrastructure for two new workloads:
- Workload 1: A video rendering system that processes non-urgent, interruptible background encoding tasks. The primary goal is to minimize compute costs, even if virtual machines are evicted during processing.
- Workload 2: A core licensing service that processes cryptographic keys, handles highly sensitive user data, requires physical isolation at the hardware level due to regulatory compliance, and must run continuously with a 99.99% availability SLA.

Which two compute virtualization solutions should you recommend to meet the requirements for these workloads? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Spot Virtual Machines for Workload 1; Azure Dedicated Hosts for Workload 2

Cevap

Azure Spot Virtual Machines for Workload 1 and Azure Dedicated Hosts for Workload 2
Azure Spot Virtual Machines are correct for the video rendering workload because they allow the customer to take advantage of unused Azure capacity at significant cost savings, which is ideal for workloads that are non-urgent and can be interrupted. Azure Dedicated Hosts are correct for the licensing service because they provide physical servers dedicated to a single Azure subscription, satisfying the physical isolation requirement, and support zone-redundant deployments to meet the 99.99% SLA.

Adım Adım Çözüm

1
Analyze the requirements for Workload 1.
Identify that the workload consists of background, non-urgent, interruptible tasks where minimizing cost is the primary goal.
This establishes that the workload is suitable for transient compute models.
2
Evaluate compute solutions for Workload 1.
Determine that Azure Spot Virtual Machines offer the lowest cost for workloads that can tolerate eviction.
This matches the low-cost and interruptible nature of the video rendering jobs.
3
Analyze the requirements for Workload 2.
Identify that the workload requires physical hardware isolation for regulatory compliance and a 99.99% availability SLA.
This dictates the need for non-shared physical infrastructure and high-availability design.
4
Evaluate compute solutions for Workload 2.
Determine that Azure Dedicated Hosts provide physical isolation at the host level and can be placed across multiple availability zones to meet the 99.99% SLA.
This fully addresses the compliance and availability constraints.

Anahtar Kavram

Selecting Azure compute virtualization services based on cost, workload flexibility, hardware isolation, and availability SLA requirements.
Soru 165Soru

An organization is designing a container-based application on Azure that consists of public-facing web microservices and background processing jobs.

The application has the following requirements:
- The background processing jobs must scale dynamically to zero based on the number of messages in an Azure Service Bus queue.
- The web microservices must scale based on concurrent HTTP requests.
- You must minimize the administrative effort required to manage the container hosting infrastructure.
- You must store application logs in a way that strictly isolates development environment data from production environment data.

Which two components should you recommend as part of the architecture? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Container Apps to host the microservices and background jobs; Two separate Azure Log Analytics workspaces to store logs for the development and production environments

Cevap

To meet the requirements, the architecture should include Azure Container Apps to host the workloads, minimizing administrative effort while providing native scaling features, and two separate Azure Log Analytics workspaces to ensure strict isolation of log data between environments.
Hosting workloads on Azure Container Apps meets the requirements for scaling to zero based on queue depth (using built-in KEDA integration) and HTTP-based scaling, while avoiding the operational burden of managing Kubernetes nodes. Additionally, configuring two separate Log Analytics workspaces ensures that development and production log data are completely isolated, fulfilling compliance boundaries.

Adım Adım Çözüm

1
Evaluate the compute hosting requirements for scaling and management overhead.
Azure Container Apps is selected over Azure Kubernetes Service because it supports scaling to zero via KEDA, scales on HTTP requests, and is a fully managed serverless service that minimizes cluster management overhead.
Reduces operational complexity while meeting dynamic scaling needs.
2
Evaluate the monitoring and compliance requirements for log data segregation.
Two separate Log Analytics workspaces are selected instead of a single centralized workspace.
Ensures strict isolation and boundary segregation between development and production log data to comply with security requirements.

Anahtar Kavram

Designing Azure container solutions with appropriate scaling and management overhead, along with compliant logging configurations.
Soru 166Soru

You are designing the hosting infrastructure for a new event-driven image processing solution in Azure. The solution has the following workloads:

* API Ingestion: A lightweight endpoint that receives image upload metadata. It requires rapid auto-scaling to handle unpredictable spikes in traffic, and it must scale to zero instances during idle periods to minimize costs. It does not require virtual network (VNet) integration.
* Image Analyzer: A background processor that pulls image analysis tasks from a queue, processes the images, and writes the output to an Azure SQL Database. The processor requires VNet integration to connect securely to the database via a private endpoint, can take up to 1515 minutes to process a single complex image, and must scale to zero instances when the queue is empty to minimize costs.

Which compute configuration should you recommend to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Host the API Ingestion on Azure Functions on a Consumption plan, and host the Image Analyzer on Azure Container Apps.

Cevap

Host the API Ingestion on Azure Functions on a Consumption plan, and host the Image Analyzer on Azure Container Apps.
Hosting the API Ingestion on the Azure Functions Consumption plan provides cost-effective, rapid scaling that goes down to zero instances when idle. Hosting the Image Analyzer on Azure Container Apps allows the background task to run for the required 1515 minutes, provides outbound virtual network integration to securely access the database via a private endpoint, and supports scaling down to zero instances using event-driven autoscaling to eliminate idle costs.

Adım Adım Çözüm

1
Analyze the API Ingestion hosting requirements.
The API endpoint requires rapid auto-scaling to handle traffic spikes and must scale to zero during idle periods to avoid costs. Virtual network integration is not required. Azure Functions on a Consumption plan is the most cost-effective service that satisfies these conditions.
The Consumption plan scales dynamically from zero and charges only when executions occur, with no base cost.
2
Evaluate Azure Functions options for the Image Analyzer workload.
The Image Analyzer requires outbound virtual network integration, runs for up to 1515 minutes, and must scale to zero instances. The standard Consumption plan is ruled out due to its 1010-minute execution timeout limit and lack of VNet integration. The Premium plan supports VNet integration and longer durations but requires at least one pre-warmed instance, failing the scale-to-zero requirement.
Identifying that standard Azure Functions plans violate either execution timeout limits or scale-to-zero cost constraints.
3
Select the optimal container-based compute option for the Image Analyzer.
Azure Container Apps supports custom virtual network deployments, has no strict 1010-minute execution limit, and scales to zero instances based on queue metrics (via KEDA). Azure Kubernetes Service also meets these technical requirements but introduces excessive operational overhead.
Choosing Azure Container Apps over Azure Kubernetes Service minimizes management overhead while fulfilling all functional and cost constraints.

Anahtar Kavram

Selecting the optimal Azure serverless or web hosting compute option by evaluating scaling requirements, execution timeout limits, network isolation, and operational overhead.
Soru 167Soru

A multinational bank is designing the compute virtualization infrastructure for a critical, steady-state financial compliance auditing application. The application has the following requirements:

- Must run continuously 2424 hours a day, 77 days a week (24/724/7) without unexpected evictions or interruptions.
- Must be deployed on physical servers dedicated to a single customer to satisfy hardware isolation compliance rules.
- Must support memory-optimized virtual machines with high memory-to-vCPU ratios.
- Must achieve a minimum compute availability SLA of 99.99%99.99\%.

Which of the following compute virtualization solutions should you recommend to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Deploy Azure Dedicated Hosts for Ev5-series virtual machines across at least two Availability Zones, and provision standard virtual machines on these hosts.

Cevap

Deploy Azure Dedicated Hosts for Ev5-series virtual machines across at least two Availability Zones, and provision standard virtual machines on these hosts.
Deploying Azure Dedicated Hosts provides physical servers dedicated to a single Azure subscription, satisfying the hardware isolation requirement. To achieve a 99.99%99.99\% availability SLA, Dedicated Hosts must be deployed across at least two Availability Zones in a region. Standard virtual machines (such as the memory-optimized Ev5-series) running on these hosts ensure steady-state, continuous execution without the eviction risk associated with Spot instances.

Adım Adım Çözüm

1
Identify the hardware isolation requirement.
Requires the use of Azure Dedicated Hosts to ensure the physical servers are dedicated to a single Azure subscription.
Standard multi-tenant virtual machines do not satisfy the hardware isolation compliance rule.
2
Determine the availability SLA requirement.
Requires deploying the Dedicated Hosts across at least two Availability Zones in the selected Azure region.
An availability SLA of 99.99%99.99\% for virtual machines requires multi-zone deployment. A single zone deployment only provides a lower SLA.
3
Evaluate the workload continuity and eviction constraints.
Requires provisioning standard (non-Spot) virtual machines.
Azure Spot VMs are subject to eviction at any time when capacity is needed, which violates the requirement to run continuously without unexpected evictions or interruptions.
4
Match the compute memory requirement.
Configure Ev5-series virtual machines on the Dedicated Hosts.
Ev5-series virtual machines are memory-optimized and satisfy the high memory-to-vCPU ratio constraint.

Anahtar Kavram

Azure Dedicated Hosts high availability and workload design
Tahmini Süre:2m 30s
Soru 168Soru

A retail company is designing the hosting architecture for a new serverless order management system. The solution must host two distinct services:

1. An order intake service that processes incoming HTTP webhooks. This service must scale dynamically to zero when idle and executes for less than three minutes per invocation.
2. A data ingestion background service that processes large files from a storage queue. Each message processing job runs continuously and can take up to 25 minutes to complete.

Which two Azure hosting options should you recommend to meet these requirements while minimizing administrative overhead? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Functions on a Consumption plan to host the order intake service; Azure Container Apps Jobs to host the data ingestion background service

Cevap

Azure Functions on a Consumption plan should be used to host the order intake service, and Azure Container Apps Jobs should be used to host the data ingestion background service.
The correct recommendation is to host the order intake service on Azure Functions on a Consumption plan and host the data ingestion background service on Azure Container Apps Jobs. Azure Functions on a Consumption plan scale to zero and easily accommodate the 3-minute execution limit of the HTTP webhooks. Azure Container Apps Jobs are optimized for containerized tasks that run to completion and can execute for up to several hours, which accommodates the 25-minute execution duration without the management overhead of an AKS cluster.

Adım Adım Çözüm

1
Evaluate the execution time and workload characteristics of the order intake service.
The order intake service receives short-lived HTTP requests that execute in under 3 minutes. It requires automatic scaling and scaling to zero to optimize costs.
Azure Functions on a Consumption plan matches these serverless requirements and provides built-in scaling to zero with a maximum execution time limit of 10 minutes.
2
Evaluate the execution time and workload characteristics of the data ingestion background service.
The background service processes queue-based workloads that can take up to 25 minutes per execution, which exceeds standard serverless timeout limits.
An Azure Functions Consumption plan would time out after 10 minutes. Azure Container Apps Jobs support long-running, run-to-completion tasks that can execute for hours, while scaling to zero when the queue is empty.
3
Assess the administrative overhead constraints of the available solutions.
Azure Kubernetes Service (AKS) introduces unnecessary administrative complexity for hosting simple webhooks compared to serverless offerings.
Choosing Azure Functions and Azure Container Apps Jobs minimizes operational overhead, satisfying the host management constraints.

Anahtar Kavram

Selecting serverless hosting options based on execution timeouts and administrative overhead
Tahmini Süre:1m 30s
Soru 169Soru

A logistics company is designing a new cloud-native fleet tracking solution on Azure. The solution requires hosting two distinct workloads:

* A real-time telemetry service that processes GPS events from delivery vehicles. This service must scale out dynamically based on the number of pending messages in an Azure Service Bus queue using KEDA.
* A route optimization batch job that runs once per day, processes historical route data to completion, and then terminates.

The solution must minimize administrative effort.

Which two services should you recommend?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Container Apps to host the real-time telemetry service; Azure Container Apps Jobs to run the daily route optimization batch job

Cevap

Azure Container Apps to host the real-time telemetry service and Azure Container Apps Jobs to run the daily route optimization batch job
Azure Container Apps is a serverless container platform that allows running microservices and APIs with native KEDA integration for event-driven scaling, making it the ideal low-overhead choice for the real-time telemetry service. Azure Container Apps Jobs extends this capability by providing a managed environment for run-to-completion workloads, which is perfect for the daily route optimization batch task without introducing cluster management overhead.

Adım Adım Çözüm

1
Analyze the workload requirements and administrative constraints.
The telemetry service requires event-driven scaling (KEDA) for continuous processing, while the route optimization task is a transient batch job. The overriding design goal is to minimize administrative effort.
This establishes the criteria for selecting serverless or managed hosting options over complex container orchestration platforms.
2
Evaluate the telemetry service hosting options.
Azure Container Apps supports serverless scale-to-zero and event-driven scaling with KEDA natively. Azure Kubernetes Service (AKS) also supports KEDA but requires cluster administration, violating the minimization of overhead.
This identifies the optimal solution for the continuous ingestion service.
3
Evaluate the batch job hosting options.
Azure Container Apps Jobs is designed explicitly for run-to-completion, scheduled, or event-triggered tasks. Azure Container Instances (ACI) would require custom scheduling scripts or external orchestration to run daily, increasing management overhead.
This completes the selection for the transient batch processing workload.

Anahtar Kavram

Selecting serverless container services (Azure Container Apps and Jobs) to minimize administrative overhead while supporting KEDA-based scaling and batch execution.
Tahmini Süre:1m 30s
Soru 170Soru

An enterprise plans to migrate a legacy batch processing utility to Azure. The utility is currently packaged as a Linux container. The migrated workload must meet the following requirements:
- It must execute once a day, triggered by a message in an Azure Queue Storage queue.
- Each execution takes between 25 and 45 minutes to complete.
- It must securely access an Azure SQL Database that is restricted to a private endpoint within a virtual network.
- To minimize costs, no compute charges must be incurred when the utility is idle.
- Administrative and infrastructure management overhead must be minimized.

Which Azure compute solution should you recommend?

Cevabı ve açıklamayı göster

Cevap: An Azure Container Apps job deployed in a custom virtual network

Cevap

An Azure Container Apps job deployed in a custom virtual network
The correct answer is the solution specifying Azure Container Apps jobs. Azure Container Apps jobs are purpose-built for executing containerized tasks that run to completion. They support long-running processes (exceeding the 10-minute serverless function limit), can be triggered by queue messages, support virtual network integration to secure connection to the database private endpoint, and scale down to zero instances when idle, ensuring no compute costs are incurred. This serverless container offering also requires very low administrative overhead.

Adım Adım Çözüm

1
Analyze the execution duration requirement of 25 to 45 minutes.
Azure Functions on a Consumption plan is ruled out due to its maximum 10-minute timeout constraint.
Selecting a compute option that cannot accommodate the workload's execution duration will lead to task failures.
2
Evaluate the scaling and cost requirement to incur zero compute charges when idle.
Azure Functions on a Premium plan is ruled out because it requires a minimum of one active instance, which incurs baseline costs even when no tasks are running.
The solution must support scaling to absolute zero instance count to meet the zero-cost idle requirement.
3
Assess the administrative overhead and workload type.
Azure Container Apps jobs are selected over Azure Kubernetes Service because Container Apps jobs run containerized run-to-completion tasks with serverless management, avoiding the high operational overhead of maintaining an AKS cluster.
The scenario requires minimizing infrastructure management and operational overhead.

Anahtar Kavram

Selecting serverless compute hosting options based on execution duration, cost limits, container support, and virtual network connectivity constraints.
Soru 171Soru

A company is planning to deploy a web application on Azure and requires a load balancing solution. The solution must support SSL/TLS termination at the load balancer level and URL path-based routing (such as routing requests for '/video/*' to a specific backend pool).

Which of the following Azure services support these requirements? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Application Gateway; Azure Front Door

Cevap

Azure Application Gateway and Azure Front Door are the services that support both SSL/TLS termination and URL path-based routing.
Azure Application Gateway and Azure Front Door both operate at Layer 7 (HTTP/HTTPS) and support SSL/TLS termination and URL-based path routing to backend pools.

Adım Adım Çözüm

1
Identify the required routing capabilities.
The requirements specify SSL/TLS termination and URL path-based routing, which require Layer 7 (application-layer) capabilities.
This allows us to filter out services that do not operate at the application layer.
2
Evaluate the capabilities of Azure Front Door and Azure Application Gateway.
Both services operate at Layer 7 and natively support SSL/TLS offloading and URL path-based routing.
This identifies the correct services meeting the application requirements.
3
Evaluate the incorrect options based on limitations and SKU constraints.
Azure Traffic Manager is DNS-based and cannot inspect URL paths or terminate SSL. Azure Load Balancer operates at Layer 4, lacks these Layer 7 features, and cannot mix Basic and Standard SKUs in its configuration.
This confirms why the other options fail to meet the requirements.

Anahtar Kavram

Azure Layer 7 load balancing services (Application Gateway and Front Door) support application-layer features like SSL/TLS offloading and path-based routing, unlike Layer 4 or DNS-based balancers.
Soru 172Soru

You are designing the serverless compute architecture for a telemetry processing solution. The solution must support two workloads:

* Workload 1: An HTTPS ingestion endpoint that receives telemetry data in unpredictable spikes. The endpoint must scale to zero when idle, support outbound virtual network (VNet) integration to connect to a private backend database, and minimize cold-start latency.
* Workload 2: A batch processing job that runs whenever a new raw data file is uploaded to Azure Blob Storage. Each execution performs complex transformations and takes approximately 1515 minutes to complete.

Which two hosting plans should you recommend to meet the requirements for the workloads? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: An Azure Functions App on the Flex Consumption plan to host Workload 1; An Azure Container Apps Job to host Workload 2

Cevap

To meet the requirements, you should recommend hosting Workload 1 on an Azure Functions App using the Flex Consumption plan and hosting Workload 2 on an Azure Container Apps Job.
The Azure Functions Flex Consumption plan is the correct choice for the ingestion endpoint because it provides serverless scaling to zero and built-in virtual network integration to access the private database securely. Azure Container Apps Jobs are correct for the batch processing job because they execute tasks to completion on demand and support execution times that exceed the ten-minute limit of standard serverless functions.

Adım Adım Çözüm

1
Evaluate the requirements of Workload 1.
Workload 1 requires serverless scaling (scale to zero), low cold start latency, and outbound VNet integration to access a private database.
Identifying these key networking and performance constraints narrow down the choices from standard consumption plans.
2
Select the hosting plan for Workload 1.
The Azure Functions Flex Consumption plan supports scale-to-zero and outbound VNet integration, whereas the standard Consumption plan does not support VNet integration.
Matching VNet support and scale-to-zero capabilities ensures secure database connectivity and cost-efficiency.
3
Evaluate the requirements of Workload 2.
Workload 2 requires running a batch processing job triggered by file uploads that takes approximately 1515 minutes to complete.
Understanding the execution duration is critical for avoiding serverless timeout limitations.
4
Select the hosting plan for Workload 2.
An Azure Container Apps Job is selected because it runs on-demand tasks to completion without the 1010-minute execution timeout limit of standard Azure Functions Consumption plans.
This prevents execution timeouts while maintaining serverless execution semantics.

Anahtar Kavram

Architecting serverless solutions in Azure based on network isolation, scaling, and execution duration constraints.
Soru 173Soru

A retail logistics company is designing the compute infrastructure for a new real-time inventory routing engine. The system has the following requirements:
- Must run continuously 24/7 as a steady-state production workload with a guaranteed virtual machine uptime SLA of 99.99%.
- Requires memory-optimized compute resources offering at least 8 GB of RAM per vCPU.
- Requires high-performance storage capable of sustaining at least 50,000 IOPS.
- Must ensure that data is encrypted in memory during execution to comply with strict internal data security standards.

Which compute and storage architecture should you recommend to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Deploy ECesv5-series confidential virtual machines across two or more Availability Zones with Premium SSD v2 storage.

Cevap

Deploy ECesv5-series confidential virtual machines across two or more Availability Zones with Premium SSD v2 storage.
The correct architecture uses ECesv5-series VMs which utilize AMD SEV-SNP technology to encrypt data in use, satisfying the security requirement, and provide 8 GB RAM per vCPU, satisfying the memory-optimized requirement. Distributing these VMs across multiple Availability Zones guarantees a 99.99% uptime SLA. Attaching Premium SSD v2 disks easily meets the 50,000 IOPS threshold.

Adım Adım Çözüm

1
Analyze security and memory requirements.
Identify that the system requires confidential computing (in-memory encryption) and memory-optimized resources (8 GB RAM per vCPU). The ECesv5-series meets both criteria.
This filters out general-purpose options like DCesv5-series and standard non-confidential options.
2
Analyze SLA and availability requirements.
To meet the 99.99% virtual machine uptime SLA, the virtual machines must be deployed across two or more Availability Zones in the same region. Deploying in a single zone or using Spot VMs is ruled out.
Single zone deployments offer up to 99.9% SLA, and Spot VMs offer no SLA due to eviction risk.
3
Analyze storage performance requirements.
Verify that Premium SSD v2 can sustain the required 50,000 IOPS.
Standard SSDs cannot scale to 50,000 IOPS, which eliminates options using lower-tier storage.

Anahtar Kavram

Designing high-availability confidential compute solutions with memory-optimized workloads and high-performance storage.
Tahmini Süre:2m 30s
Soru 174Soru

A media company is designing a new cloud-native video processing platform on Azure. The platform must host containerized microservices that perform video encoding. The microservices must scale dynamically based on the number of messages in an Azure Service Bus queue using Kubernetes Event-driven Autoscaling (KEDA). The design must minimize the administrative and operational effort of managing container infrastructure. Which Azure service should you recommend?

Cevabı ve açıklamayı göster

Cevap: Azure Container Apps

Cevap

Azure Container Apps
Azure Container Apps is the correct choice because it is a serverless container platform that provides built-in integration with Kubernetes Event-driven Autoscaling (KEDA). This allows microservices to scale dynamically based on Service Bus queue length while abstracting the underlying Kubernetes infrastructure, satisfying the requirement to minimize administrative and operational overhead.

Adım Adım Çözüm

1
Analyze the requirements
The solution requires hosting containerized microservices, using KEDA-based event-driven scaling (Azure Service Bus queue metrics), and minimizing administrative and operational overhead.
This establishes the constraints and capability requirements for the target Azure compute service.
2
Evaluate candidate Azure services against KEDA support and management overhead
Azure Container Apps natively supports KEDA and is fully managed (serverless). Azure Kubernetes Service (AKS) supports KEDA but requires high administrative overhead. Azure Container Instances and Azure App Service do not natively support KEDA scaling for microservices.
This rules out AKS due to the overhead constraint and rules out ACI and App Service due to the functional constraint (native KEDA support).
3
Select the optimal service
Azure Container Apps satisfies all constraints by offering serverless containers with native KEDA integration and minimal management overhead.
It aligns with the Microsoft Best Practice of selecting Azure Container Apps over AKS for microservices when custom Kubernetes API access is not required and low administrative overhead is preferred.

Anahtar Kavram

Selecting the appropriate Azure container hosting service based on scaling requirements (KEDA) and operational overhead constraints.
Soru 175Soru

An agricultural technology company is designing the compute virtualization infrastructure for two distinct workloads:

* Workload A: A continuous, time-sensitive telemetry ingestion service that processes real-time sensor data from global farms. It must run 24/7, guarantee 99.99%99.99\% availability, and maintain low, predictable disk and network latency.
* Workload B: A batch-processing machine learning model that analyzes historical weather patterns to generate seasonal yield predictions. The model runs once a week, takes approximately 66 hours to complete, and can resume from checkpoints if interrupted.

The company wants to minimize compute costs for Workload B while ensuring Workload A meets its performance and availability SLAs. Which two compute configurations should you recommend to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploy Workload A on Azure Virtual Machines distributed across multiple Availability Zones using Premium SSDs.; Deploy Workload B on Azure Spot Virtual Machines.

Cevap

Deploy Workload A on Azure Virtual Machines distributed across multiple Availability Zones using Premium SSDs, and deploy Workload B on Azure Spot Virtual Machines.
To meet the requirements of both workloads, Workload A must be deployed on standard Virtual Machines across multiple Availability Zones with Premium SSDs to guarantee a 99.99%99.99\% availability SLA and low-latency performance. Workload B must be deployed on Azure Spot Virtual Machines to achieve the lowest possible compute cost while accommodating the interruptible nature of the weekly batch run.

Adım Adım Çözüm

1
Analyze the availability and latency requirements for Workload A.
Workload A requires 24/7 availability with a 99.99%99.99\% SLA and low, predictable disk latency.
This establishes the baseline infrastructure tier needed to prevent service interruption.
2
Select the appropriate compute and storage configuration for Workload A.
Distributing standard Virtual Machines across multiple Availability Zones provides a 99.99%99.99\% SLA. Configuring them with Premium SSDs meets the low-latency storage requirements.
This meets the SLA requirements without the eviction risk associated with Spot VMs.
3
Analyze the run frequency, duration, and cost requirements for Workload B.
Workload B runs weekly for 66 hours, can resume from checkpoints if interrupted, and must have the lowest possible compute cost.
This identifies the tolerance for interruption and the primary optimization goal.
4
Evaluate and select the cost-effective compute option for Workload B.
Azure Spot VMs offer the lowest compute cost. Since the workload can tolerate interruptions, the eviction policy is acceptable. Serverless Consumption plans are ruled out due to execution timeouts.
This maximizes cost savings while avoiding execution failures due to timeout limits.

Anahtar Kavram

Selecting Azure compute solutions based on availability SLAs, workload interruption tolerance, and execution durations.
Tahmini Süre:2m 30s
Soru 176Soru

A financial technology company is designing a container-based background processing service on Azure. The service must retrieve and process transaction records from an Azure Service Bus queue. Each transaction record takes up to 1212 minutes to process.

The solution must meet the following requirements:
- Automatically scale down to zero instances when no messages are in the queue.
- Scale out dynamically based on the queue depth using Kubernetes Event-driven Autoscaling (KEDA).
- Support strict regulatory compliance requiring complete administrative and network isolation between production and development environments.
- Minimize administrative effort and operational overhead.

Which two configurations should you recommend as part of the architecture? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Container Apps to host the background processing service; Separate Azure Container Apps environments, each connected to a dedicated Log Analytics workspace, for production and development

Cevap

Deploy the background processing service on Azure Container Apps, and isolate production and development workloads by running them in separate Azure Container Apps environments configured with dedicated Log Analytics workspaces.
Deploying the workload to Azure Container Apps is correct because it is a serverless platform that supports containerized workloads, scales dynamically to zero, and integrates natively with KEDA out of the box, fulfilling all scaling and management requirements with minimal administrative overhead. Using separate environments, each with its own Log Analytics workspace, fulfills the compliance requirement by enforcing strict administrative and network isolation boundaries between production and development.

Adım Adım Çözüm

1
Evaluate the hosting requirements for container workloads that scale to zero and leverage KEDA while minimizing administrative overhead.
Azure Container Apps is identified as the best fit because it provides serverless containers with native KEDA integration, avoiding the cluster management overhead of Azure Kubernetes Service (AKS).
This filters out AKS as it increases administrative effort, and highlights Azure Container Apps as the primary compute candidate.
2
Check the execution time constraints against the serverless hosting options.
Since processing a record can take up to 12 minutes, Azure Functions on a Consumption plan is ruled out because it enforces a maximum timeout of 10 minutes.
This prevents runtime failures caused by system-level execution timeout limits.
3
Determine the isolation configuration needed to meet regulatory compliance for separate environments.
Separate Azure Container Apps environments and separate Log Analytics workspaces must be deployed.
A single environment or shared workspace violates compliance requirements for absolute administrative and network boundary isolation.

Anahtar Kavram

Selecting the optimal Azure container hosting option (Azure Container Apps vs. AKS vs. Azure Functions) based on scaling mechanisms, execution timeouts, operational overhead, and compliance isolation boundaries.
Soru 177Soru

A healthcare provider is deploying a regional medical records synchronization service on virtual machines in a single Azure region. The service requires low-latency TCP communication on port 5000, does not require SSL/TLS termination, and does not require URL-based routing. To distribute traffic, the provider attempts to configure an Azure Standard Load Balancer. However, the deployment fails because the backend virtual machines are associated with Basic SKU public IP addresses.

Which action should you recommend to resolve the deployment failure while meeting all service requirements?

Cevabı ve açıklamayı göster

Cevap: Upgrade the public IP addresses of the virtual machines to the Standard SKU.

Cevap

Upgrade the public IP addresses of the virtual machines to the Standard SKU.
Upgrading the public IP addresses of the virtual machines to the Standard SKU is the correct solution. Standard Load Balancer backend pools require Standard SKU IP addresses. This change satisfies the validation constraint while keeping the layer-4 TCP load balancing architecture intact to support the port 5000 service requirement.

Adım Adım Çözüm

1
Identify the protocol and routing requirements of the service.
The service requires regional distribution of low-latency TCP traffic on port 5000 with no HTTP/S layer-7 routing or SSL/TLS termination.
This limits the suitable load balancers to Layer 4 solutions (Azure Load Balancer) and excludes Layer 7 options (Application Gateway, Front Door) and DNS-based routing (Traffic Manager).
2
Analyze the cause of the deployment failure.
Azure Standard Load Balancer is incompatible with Basic SKU public IP addresses on the backend virtual machines.
Azure resource rules mandate that all resources connected to a Standard Load Balancer must use the Standard SKU to ensure security and predictability.
3
Determine the resolution that maintains the required service architecture.
Upgrading the virtual machines' public IP addresses to the Standard SKU resolves the validation error.
This allows the Standard Load Balancer to successfully bind to the virtual machines while satisfying the TCP port 5000 and regional distribution requirements.

Anahtar Kavram

Azure Load Balancer SKU alignment and protocol routing constraints
Soru 178Soru

An educational technology company is designing a system that automatically executes and grades programming assignments submitted by students.

The grading process has the following requirements:
* Each submission must run in an isolated, sandboxed container.
* The execution of a grading job takes between 2 and 15 minutes to complete.
* The system must dynamically scale the number of running containers based on the queue depth of an Azure Service Bus queue containing the submissions.
* To meet strict audit requirements for regional data sovereignty, student execution logs must be isolated within their respective geographic regions and not cross regional boundaries.
* The company wants to minimize the administrative effort required to manage infrastructure, container orchestration, and virtual machine nodes.

You need to design the compute and monitoring solution for the grading system.

Which solution should you recommend?

Cevabı ve açıklamayı göster

Cevap: Azure Container Apps jobs configured with event-driven scaling based on the Service Bus queue and separate Log Analytics workspaces in each region.

Cevap

Azure Container Apps jobs configured with event-driven scaling based on the Service Bus queue and separate Log Analytics workspaces in each region.
The design utilizing Azure Container Apps jobs with separate regional Log Analytics workspaces is correct because Container Apps jobs run containerized tasks to completion, scale serverlessly based on event triggers (like Service Bus queue depth using KEDA) with zero virtual machine or cluster management overhead, and can handle execution times up to the container job configuration limit (which easily supports 15 minutes). Implementing separate regional Log Analytics workspaces ensures compliance with strict data sovereignty requirements by keeping student execution logs within their respective geographic regions.

Adım Adım Çözüm

1
Evaluate the execution duration and scaling triggers for the workload.
The grading workload takes up to 15 minutes to run and needs to scale dynamically based on the message count of an Azure Service Bus queue.
This rules out Azure Functions on a Consumption plan, which is restricted to a maximum 10-minute timeout.
2
Compare container orchestration options against the administrative effort constraint.
Azure Container Apps jobs provide serverless execution of containerized tasks that run to completion with native KEDA queue-based scaling and no cluster management. Azure Kubernetes Service (AKS) requires node and cluster lifecycle management.
Choosing Azure Container Apps jobs satisfies the requirement to minimize infrastructure administration effort.
3
Evaluate logging configuration in relation to the regulatory audit requirements.
Separate regional Log Analytics workspaces keep execution logs isolated within their geographic boundaries, whereas a single central workspace aggregates data across regions.
Separate regional workspaces are required to satisfy the strict data sovereignty constraints.

Anahtar Kavram

Container-Based Workloads
Soru 179Soru

An enterprise is modernizing a regional database application that uses TCP port 1433 for replication. The application is hosted on a pool of Azure Virtual Machines within a single region. The design requires a regional load balancer to distribute the TCP traffic without needing SSL/TLS termination or application-layer (HTTP/HTTPS) routing. You plan to deploy an Azure Standard Load Balancer.

Which two configurations are required to ensure the virtual machines can be successfully associated with the backend pool of the Standard Load Balancer? (Choose two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploy the virtual machines using Standard SKU public IP addresses if public IPs are assigned.; Configure the virtual machines within the same virtual network as the Standard Load Balancer.

Cevap

To associate virtual machines with the backend pool of an Azure Standard Load Balancer, the virtual machines must be configured to use Standard SKU public IP addresses (if public IPs are assigned) and must be located in the same virtual network as the Standard Load Balancer.
The correct configurations are deploying the virtual machines using Standard SKU public IP addresses and placing the virtual machines in the same virtual network as the load balancer. The Azure Standard Load Balancer has strict SKU matching rules: any public IP addresses assigned to the backend virtual machines must be of the Standard SKU. In addition, the virtual machines must exist in the same virtual network as the load balancer.

Adım Adım Çözüm

1
Determine the load balancing layer and SKU requirement.
The scenario specifies a regional TCP application utilizing an Azure Standard Load Balancer.
This establishes that the backend pool configuration must adhere to the Standard Load Balancer's requirements.
2
Evaluate the IP configuration requirements for the backend pool.
Virtual machines connected to the Standard Load Balancer's backend pool must not use Basic SKU public IP addresses.
Azure enforces SKU matching, meaning Standard Load Balancers require Standard SKU public IPs for any backend virtual machines that possess public IPs.
3
Determine the network boundary requirements.
The virtual machines and the Standard Load Balancer must reside within the same virtual network boundary.
This is a network connectivity prerequisite for the backend pool of an Azure Standard Load Balancer.

Anahtar Kavram

Azure Standard Load Balancer SKU alignment and virtual network requirements
Soru 180Soru

A company is planning to migrate two containerized workloads to Azure:

* Workload 1: A workflow orchestrator engine that requires direct access to the Kubernetes API and uses custom resource definitions (CRDs) to manage external resources.
* Workload 2: A set of background processing microservices that process messages from Azure Service Bus queues and must scale to zero when no messages are present. The operations team wants to minimize cluster administration and infrastructure management effort for this workload.

Which two Azure container hosting services should you recommend?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Container Apps; Azure Kubernetes Service (AKS)

Cevap

Azure Kubernetes Service (AKS) and Azure Container Apps
Azure Kubernetes Service is correct for Workload 1 because it allows full control over the Kubernetes cluster, API, and the ability to register Custom Resource Definitions. Azure Container Apps is correct for Workload 2 because it abstract cluster management, drastically lowering administrative effort, and features built-in KEDA integration that supports scaling down to zero replicas based on queue depth.

Adım Adım Çözüm

1
Analyze the requirements for Workload 1.
Workload 1 requires custom resource definitions (CRDs) and direct Kubernetes API access. This necessitates a hosting environment with access to the underlying control plane, which points to Azure Kubernetes Service.
Only Azure Kubernetes Service provides full access to the Kubernetes API and control plane to deploy CRDs and custom operators.
2
Analyze the requirements for Workload 2.
Workload 2 requires queue-based autoscaling (Service Bus) that scales to zero, while minimizing administrative overhead. This aligns with Azure Container Apps, which uses KEDA under the hood to scale workloads dynamically.
Azure Container Apps provides a managed, serverless platform that simplifies operational tasks like patching and upgrading while supporting KEDA natively.

Anahtar Kavram

Selecting Azure container hosting services based on control plane access needs and operational overhead requirements.
ÖncekiSayfa 9 / 18Sonraki