You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam,
Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for the
Microsoft 365 E5 plan.
You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements:
✑ To the manager of the developers, send a monthly email message that lists the access permissions to Application1.
✑ If the manager does not verify an access permission, automatically revoke that permission.
✑ Minimize development effort.
What should you recommend? In Azure Active Directory (Azure AD), create an access review of Application1 Create an Azure Automation runbook that runs the Get-AzRoleAssignment cmdlet In Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role assignment for the Application1 resources Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet.
You have an Azure subscription. The subscription has a blob container that contains multiple blobs.
Ten users in the finance department of your company plan to access the blobs during the month of April.
You need to recommend a solution to enable access to the blobs during the month of April only.
Which security solution should you include in the recommendation? shared access signatures (SAS) Conditional Access policies certificates access keys.
You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned membership. Group1 has 50 members, including 20 guest users.
You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:
✑ The evaluation must be repeated automatically every three months.
✑ Every member must be able to report whether they need to be in Group1.
✑ Users who report that they do not need to be in Group1 must be removed from Group1 automatically.
✑ Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.
What should you include in the recommendation? Implement Azure AD Identity Protection. Change the Membership type of Group1 to Dynamic User. Create an access review. Implement Azure AD Privileged Identity Management (PIM).
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.
Solution: Use Azure Traffic Analytics in Azure Network Watcher to analyze the network traffic.
Does this meet the goal? Yes No.
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.
Solution: Use Azure Advisor to analyze the network traffic.
Does this meet the goal? Yes No.
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.
Solution: Use Azure Network Watcher to run IP flow verify to analyze the network traffic.
Does this meet the goal? Yes No.
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.
What should you include in the recommendation? Azure Activity Log Azure Advisor Azure Analysis Services Azure Monitor action groups.
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.
Solution: Install and configure the Azure Monitoring agent and the Dependency Agent on all the virtual machines. Use VM insights in Azure Monitor to analyze the network traffic.
Does this meet the goal? Yes No.
Your company, named Contoso, Ltd., implements several Azure logic apps that have HTTP triggers. The logic apps provide access to an on-premises web service.
Contoso establishes a partnership with another company named Fabrikam, Inc.
Fabrikam does not have an existing Azure Active Directory (Azure AD) tenant and uses third-party OAuth 2.0 identity management to authenticate its users.
Developers at Fabrikam plan to use a subset of the logic apps to build applications that will integrate with the on-premises web service of Contoso.
You need to design a solution to provide the Fabrikam developers with access to the logic apps. The solution must meet the following requirements:
✑ Requests to the logic apps from the developers must be limited to lower rates than the requests from the users at Contoso.
✑ The developers must be able to rely on their existing OAuth 2.0 provider to gain access to the logic apps.
✑ The solution must NOT require changes to the logic apps.
✑ The solution must NOT use Azure AD guest accounts.
What should you include in the solution? Azure Front Door Azure AD Application Proxy Azure AD business-to-business (B2B) Azure API Management.
You plan to deploy an Azure SQL database that will store Personally Identifiable Information (PII).
You need to ensure that only privileged users can view the PII.
What should you include in the solution? dynamic data masking role-based access control (RBAC) Data Discovery & Classification Data Discovery & Classification.
You plan to deploy an app that will use an Azure Storage account.
You need to deploy the storage account. The storage account must meet the following requirements:
✑ Store the data for multiple users.
✑ Encrypt each user's data by using a separate key.
✑ Encrypt all the data in the storage account by using customer-managed keys.
What should you deploy? files in a premium file share storage account blobs in a general purpose v2 storage account blobs in an Azure Data Lake Storage Gen2 account files in a general purpose v2 storage account.
You plan to deploy an application named App1 that will run on five Azure virtual machines. Additional virtual machines will be deployed later to run App1.
You need to recommend a solution to meet the following requirements for the virtual machines that will run App1:
✑ Ensure that the virtual machines can authenticate to Azure Active Directory (Azure AD) to gain access to an Azure key vault, Azure Logic Apps instances, and an Azure SQL database.
✑ Avoid assigning new roles and permissions for Azure services when you deploy additional virtual machines.
✑ Avoid storing secrets and certificates on the virtual machines.
✑ Minimize administrative effort for managing identities.
Which type of identity should you include in the recommendation? a service principal that is configured to use a certificate a system-assigned managed identity a service principal that is configured to use a client secret a user-assigned managed identity.
You have the resources shown in the following table: (See image)
CDB1 hosts a container that stores continuously updated operational data.
You are designing a solution that will use AS1 to analyze the operational data daily.
You need to recommend a solution to analyze the data without affecting the performance of the operational data store.
What should you include in the recommendation? Azure Cosmos DB change feed Azure Data Factory with Azure Cosmos DB and Azure Synapse Analytics connectors Azure Synapse Link for Azure Cosmos DB Azure Synapse Analytics with PolyBase data loading.
You have an application that is used by 6,000 users to validate their vacation requests. The application manages its own credential store.
Users must enter a username and password to access the application. The application does NOT support identity providers.
You plan to upgrade the application to use single sign-on (SSO) authentication by using an Azure Active Directory (Azure AD) application registration.
Which SSO method should you use? header-based SAML password-based OpenID Connect.
You are designing an Azure governance solution.
All Azure resources must be easily identifiable based on the following operational information: environment, owner, department and cost center.
You need to ensure that you can use the operational information when you generate reports for the Azure resources.
What should you include in the solution? an Azure data catalog that uses the Azure REST API as a data source an Azure management group that uses parent groups to create a hierarchy an Azure policy that enforces tagging rules Azure Active Directory (Azure AD) administrative units.
A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that is integrated with Microsoft 365 and an Azure subscription.
Contoso has an on-premises identity infrastructure. The infrastructure includes servers that run Active Directory Domain Services (AD DS) and Azure AD Connect.
Contoso has a partnership with a company named Fabrikam. Inc. Fabrikam has an Active Directory forest and a Microsoft 365 tenant. Fabrikam has the same on- premises identity infrastructure components as Contoso.
A team of 10 developers from Fabrikam will work on an Azure solution that will be hosted in the Azure subscription of Contoso. The developers must be added to the Contributor role for a resource group in the Contoso subscription.
You need to recommend a solution to ensure that Contoso can assign the role to the 10 Fabrikam developers. The solution must ensure that the Fabrikam developers use their existing credentials to access resources
What should you recommend? In the Azure AD tenant of Contoso. create cloud-only user accounts for the Fabrikam developers. Configure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam. Configure an organization relationship between the Microsoft 365 tenants of Fabrikam and Contoso. In the Azure AD tenant of Contoso, create guest accounts for the Fabnkam developers.
Your company has the divisions shown in the following table. (See image)
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend? Configure the Azure AD provisioning service. Enable Azure AD pass-through authentication and update the sign-in endpoint. Use Azure AD entitlement management to govern external users. Configure Azure AD join.
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.
What should you include in the recommendation? Azure Log Analytics Azure Arc Azure Analysis Services Application Insights.
Your company has the divisions shown in the following table. (See image)
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend? Configure the Azure AD provisioning service. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM). Use Azure AD entitlement management to govern external users. Configure Azure AD Identity Protection.
You are developing an app that will read activity logs for an Azure subscription by using Azure Functions.
You need to recommend an authentication solution for Azure Functions. The solution must minimize administrative effort.
What should you include in the recommendation? an enterprise application in Azure AD system-assigned managed identities shared access signatures (SAS) application registration in Azure AD.
Your company has the divisions shown in the following table. (See image)
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend? Configure Azure AD join. Use Azure AD entitlement management to govern external users. Enable Azure AD pass-through authentication and update the sign-in endpoint. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
Your company has the divisions shown in the following table. (See image)
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend? Configure Azure AD join. Configure Azure AD Identity Protection. Use Azure AD entitlement management to govern external users. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.
What should you include in the recommendation? Azure Activity Log Azure Arc Azure Analysis Services Azure Monitor metrics.
Your company has the divisions shown in the following table. (See image)
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend? Configure Azure AD join. Configure Azure AD Identity Protection. Configure a Conditional Access policy. Configure Supported account types in the application registration and update the sign-in endpoint.
You have an Azure AD tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned memberships. Group1 has 50 members, including 20 guest users.
You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:
• The evaluation must be repeated automatically every three months.
• Every member must be able to report whether they need to be in Group1.
• Users who report that they do not need to be in Group1 must be removed from Group1 automatically.
• Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.
What should you include in the recommendation? Implement Azure AD Identity Protection. Change the Membership type of Group1 to Dynamic User. Create an access review. Implement Azure AD Privileged Identity Management (PIM).
Your company has the divisions shown in the following table. (See image)
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend? Enable Azure AD pass-through authentication and update the sign-in endpoint. Use Azure AD entitlement management to govern external users. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM). Configure Azure AD Identity Protection.
Your company has the divisions shown in the following table. (See image)
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend? Configure the Azure AD provisioning service. Enable Azure AD pass-through authentication and update the sign-in endpoint. Configure Supported account types in the application registration and update the sign-in endpoint. Configure Azure AD join.
Your company has the divisions shown in the following table. (See image)
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend? Configure Azure AD Identity Protection. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM). Configure Supported account types in the application registration and update the sign-in endpoint. Configure a Conditional Access policy.
Your company has the divisions shown in the following table. (See image)
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend? Use Azure AD entitlement management to govern external users. Enable Azure AD pass-through authentication and update the sign-in endpoint. Configure a Conditional Access policy. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
You have an Azure subscription that contains 1,000 resources.
You need to generate compliance reports for the subscription. The solution must ensure that the resources can be grouped by department.
What should you use to organize the resources? application groups and quotas Azure Policy and tags administrative units and Azure Lighthouse resource groups and role assignments.
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.
What should you include in the recommendation? Azure Arc Azure Monitor metrics Azure Advisor Azure Log Analytics.
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.
What should you include in the recommendation? Azure Monitor action groups Azure Arc Azure Monitor metrics Azure Activity Log.
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.
What should you include in the recommendation? Azure Arc Azure Log Analytics Application insights Azure Monitor action groups.
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.
What should you include in the recommendation? Azure Arc Azure Log Analytics Application insights Azure Monitor metrics.
You have an Azure subscription.
You plan to deploy a monitoring solution that will include the following:
• Azure Monitor Network Insights
• Application Insights
• Microsoft Sentinel
• VM insights
The monitoring solution will be managed by a single team.
What is the minimum number of Azure Monitor workspaces required? 1 2 3 4.
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.
What should you include in the recommendation? Application Insights Azure Analysis Services Azure Advisor Azure Activity Log.
You have 100 servers that run Windows Server 2012 R2 and host Microsoft SQL Server 2014 instances. The instances host databases that have the following characteristics:
✑ Stored procedures are implemented by using CLR.
✑ The largest database is currently 3 TB. None of the databases will ever exceed 4 TB.
You plan to move all the data from SQL Server to Azure.
You need to recommend a service to host the databases. The solution must meet the following requirements:
✑ Whenever possible, minimize management overhead for the migrated databases.
✑ Ensure that users can authenticate by using Azure Active Directory (Azure AD) credentials.
✑ Minimize the number of database changes required to facilitate the migration.
What should you include in the recommendation? Azure SQL Database elastic pools Azure SQL Managed Instance Azure SQL Database single databases SQL Server 2016 on Azure virtual machines.
You have an Azure subscription that contains two applications named App1 and App2. App1 is a sales processing application. When a transaction in App1 requires shipping, a message is added to an Azure Storage account queue, and then App2 listens to the queue for relevant transactions.
In the future, additional applications will be added that will process some of the shipping requests based on the specific details of the transactions.
You need to recommend a replacement for the storage account queue to ensure that each additional application will be able to read the relevant transactions.
What should you recommend? one Azure Data Factory pipeline multiple storage account queues one Azure Service Bus queue one Azure Service Bus topic.
You are designing an application that will be hosted in Azure.
The application will host video files that range from 50 MB to 12 GB. The application will use certificate-based authentication and will be available to users on the internet.
You need to recommend a storage option for the video files. The solution must provide the fastest read performance and must minimize storage costs.
What should you recommend? Azure Files Azure Data Lake Storage Gen2 Azure Blob Storage Azure SQL Database.
You are designing a SQL database solution. The solution will include 20 databases that will be 20 GB each and have varying usage patterns.
You need to recommend a database platform to host the databases. The solution must meet the following requirements:
✑ The solution must meet a Service Level Agreement (SLA) of 99.99% uptime.
✑ The compute resources allocated to the databases must scale dynamically.
✑ The solution must have reserved capacity.
Compute charges must be minimized.
What should you include in the recommendation? an elastic pool that contains 20 Azure SQL databases 20 databases on a Microsoft SQL server that runs on an Azure virtual machine in an availability set 20 databases on a Microsoft SQL server that runs on an Azure virtual machine 20 instances of Azure SQL Database serverless.
You are designing an application that will aggregate content for users.
You need to recommend a database solution for the application. The solution must meet the following requirements:
✑ Support SQL commands.
✑ Support multi-master writes.
✑ Guarantee low latency read operations.
What should you include in the recommendation? Azure Cosmos DB SQL API Azure SQL Database that uses active geo-replication Azure SQL Database Hyperscale Azure Database for PostgreSQL.
You store web access logs data in Azure Blob Storage.
You plan to generate monthly reports from the access logs.
You need to recommend an automated process to upload the data to Azure SQL Database every month.
What should you include in the recommendation? Microsoft SQL Server Migration Assistant (SSMA) Data Migration Assistant (DMA) AzCopy Azure Data Factory.
You have an app named App1 that uses two on-premises Microsoft SQL Server databases named DB1 and DB2.
You plan to migrate DB1 and DB2 to Azure
You need to recommend an Azure solution to host DB1 and DB2. The solution must meet the following requirements:
✑ Support server-side transactions across DB1 and DB2.
✑ Minimize administrative effort to update the solution.
What should you recommend? two Azure SQL databases in an elastic pool two databases on the same Azure SQL managed instance two databases on the same SQL Server instance on an Azure virtual machine two Azure SQL databases on different Azure SQL Database servers.
You need to design a highly available Azure SQL database that meets the following requirements:
✑ Failover between replicas of the database must occur without any data loss.
✑ The database must remain available in the event of a zone outage.
✑ Costs must be minimized.
Which deployment option should you use? Azure SQL Database Hyperscale Azure SQL Database Premium Azure SQL Database Basic Azure SQL Managed Instance General Purpose.
You have an app named App1 that uses an on-premises Microsoft SQL Server database named DB1.
You plan to migrate DB1 to an Azure SQL managed instance.
You need to enable customer managed Transparent Data Encryption (TDE) for the instance. The solution must maximize encryption strength.
Which type of encryption algorithm and key length should you use for the TDE protector? RSA 3072 AES 256 RSA 4096 RSA 2048.
You have an on-premises storage solution.
You need to migrate the solution to Azure. The solution must support Hadoop Distributed File System (HDFS).
What should you use? Azure Data Lake Storage Gen2 Azure NetApp Files Azure Data Share Azure Table storage.
You are designing an application that will aggregate content for users.
You need to recommend a database solution for the application. The solution must meet the following requirements:
• Support SQL commands.
• Support multi-master writes.
• Guarantee low latency read operations.
What should you include in the recommendation? Azure Cosmos DB for NoSQL Azure SQL Database that uses active geo-replication Azure SQL Database Hyperscale Azure Cosmos DB for PostgreSQL.
You plan to migrate on-premises MySQL databases to Azure Database for MySQL Flexible Server.
You need to recommend a solution for the Azure Database for MySQL Flexible Server configuration. The solution must meet the following requirements:
• The databases must be accessible if a datacenter fails.
• Costs must be minimized.
Which compute tier should you recommend? Burstable General Purpose Memory Optimized.
You are designing an app that will use Azure Cosmos DB to collate sales from multiple countries.
You need to recommend an API for the app. The solution must meet the following requirements:
• Support SQL queries.
• Support geo-replication.
• Store and access data relationally.
Which API should you recommend? Apache Cassandra PostgreSQL MongoDB NoSQL.
You have the resources shown in the following table.(See image)
CDB1 hosts a container that stores continuously updated operational data.
You are designing a solution that will use AS1 to analyze the operational data daily.
You need to recommend a solution to analyze the data without affecting the performance of the operational data store.
What should you include in the recommendation? Azure Data Factory with Azure Cosmos DB and Azure Synapse Analytics connectors Azure Synapse Analytics with PolyBase data loading Azure Synapse Link for Azure Cosmos DB Azure Cosmos DB change feed.
You have SQL Server on an Azure virtual machine. The databases are written to nightly as part of a batch process.
You need to recommend a disaster recovery solution for the data. The solution must meet the following requirements:
✑ Provide the ability to recover in the event of a regional outage.
✑ Support a recovery time objective (RTO) of 15 minutes.
✑ Support a recovery point objective (RPO) of 24 hours.
✑ Support automated recovery.
✑ Minimize costs.
What should you include in the recommendation? Azure virtual machine availability sets Azure Disk Backup an Always On availability group Azure Site Recovery.
You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
✑ Provide access to the full .NET framework.
Provide redundancy if an Azure region fails.
✑ Grant administrators access to the operating system to install custom application dependencies.
Solution: You deploy two Azure virtual machines to two Azure regions, and you create an Azure Traffic Manager profile.
Does this meet the goal? Yes No.
You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
✑ Provide access to the full .NET framework.
✑ Provide redundancy if an Azure region fails.
✑ Grant administrators access to the operating system to install custom application dependencies.
Solution: You deploy two Azure virtual machines to two Azure regions, and you deploy an Azure Application Gateway.
Does this meet the goal? Yes No.
You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
✑ Provide access to the full .NET framework.
✑ Provide redundancy if an Azure region fails.
✑ Grant administrators access to the operating system to install custom application dependencies.
Solution: You deploy an Azure virtual machine scale set that uses autoscaling.
Does this meet the goal? Yes No.
You plan to deploy 10 applications to Azure. The applications will be deployed to two Azure Kubernetes Service (AKS) clusters. Each cluster will be deployed to a separate Azure region.
The application deployment must meet the following requirements:
✑ Ensure that the applications remain available if a single AKS cluster fails.
✑ Ensure that the connection traffic over the internet is encrypted by using SSL without having to configure SSL on each container.
Which service should you include in the recommendation? Azure Front Door Azure Traffic Manager AKS ingress controller Azure Load Balancer.
You need to design a highly available Azure SQL database that meets the following requirements:
✑ Failover between replicas of the database must occur without any data loss.
✑ The database must remain available in the event of a zone outage.
✑ Costs must be minimized.
Which deployment option should you use? Azure SQL Managed Instance Business Critical Azure SQL Database Premium Azure SQL Database Basic Azure SQL Managed Instance General Purpose Azure SQL Database Hyperscale.
You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
✑ Provide access to the full .NET framework.
✑ Provide redundancy if an Azure region fails.
✑ Grant administrators access to the operating system to install custom application dependencies.
Solution: You deploy a web app in an Isolated App Service plan.
Does this meet the goal? Yes No.
You need to design a highly available Azure SQL database that meets the following requirements:
✑ Failover between replicas of the database must occur without any data loss.
✑ The database must remain available in the event of a zone outage.
✑ Costs must be minimized.
Which deployment option should you use? Azure SQL Database Serverless Azure SQL Database Business Critical Azure SQL Database Basic Azure SQL Database Standard.
You plan to deploy an Azure Database for MySQL flexible server named Server1 to the East US Azure region.
You need to implement a business continuity solution for Server1. The solution must minimize downtime in the event of a failover to a paired region.
What should you do? Create a read replica. Store the database files in Azure premium file shares. Implement Geo-redundant backup. Configure native MySQL replication.
You have an Azure subscription that contains a Basic Azure virtual WAN named VirtualWAN1 and the virtual hubs shown in the following table. (See image)
You have an ExpressRoute circuit in the US East Azure region.
You need to create an ExpressRoute association to VirtualWAN1.
What should you do first? Upgrade VirtualWAN1 to Standard. Create a gateway on Hub1. Enable the ExpressRoute premium add-on. Create a hub virtual network in US East.
You have an Azure subscription that contains a storage account.
An application sometimes writes duplicate files to the storage account.
You have a PowerShell script that identifies and deletes duplicate files in the storage account. Currently, the script is run manually after approval from the operations manager.
You need to recommend a serverless solution that performs the following actions:
✑ Runs the script once an hour to identify whether duplicate files exist
✑ Sends an email notification to the operations manager requesting approval to delete the duplicate files
✑ Processes an email response from the operations manager specifying whether the deletion was approved
✑ Runs the script if the deletion was approved
What should you include in the recommendation? Azure Logic Apps and Azure Event Grid Azure Logic Apps and Azure Functions Azure Pipelines and Azure Service Fabric Azure Functions and Azure Batch.
Your company has the infrastructure shown in the following table. (See image)
The on-premises Active Directory domain syncs with Azure Active Directory (Azure AD).
Server1 runs an application named App1 that uses LDAP queries to verify user identities in the on-premises Active Directory domain.
You plan to migrate Server1 to a virtual machine in Subscription1.
A company security policy states that the virtual machines and services deployed to Subscription1 must be prevented from accessing the on-premises network.
You need to recommend a solution to ensure that App1 continues to function after the migration. The solution must meet the security policy.
What should you include in the recommendation? Azure AD Application Proxy the Active Directory Domain Services role on a virtual machine an Azure VPN gateway Azure AD Domain Services (Azure AD DS).
You need to design a solution that will execute custom C# code in response to an event routed to Azure Event Grid. The solution must meet the following requirements:
✑ The executed code must be able to access the private IP address of a Microsoft SQL Server instance that runs on an Azure virtual machine.
✑ Costs must be minimized.
What should you include in the solution? Azure Logic Apps in the Consumption plan Azure Functions in the Premium plan Azure Functions in the Consumption plan Azure Logic Apps in the integrated service environment.
You have an on-premises network and an Azure subscription. The on-premises network has several branch offices.
A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server. Users access the shared files on VM1 from all the offices.
You need to recommend a solution to ensure that the users can access the shared files as quickly as possible if the Toronto branch office is inaccessible.
What should you include in the recommendation? a Recovery Services vault and Windows Server Backup Azure blob containers and Azure File Sync a Recovery Services vault and Azure Backup an Azure file share and Azure File Sync.
You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service (AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines. The virtual machines and the AKS cluster will reside on the same virtual network.
You need to design a solution to expose the microservices to the consumer apps. The solution must meet the following requirements:
✑ Ingress access to the microservices must be restricted to a single private IP address and protected by using mutual TLS authentication.
✑ The number of incoming microservice calls must be rate-limited.
✑ Costs must be minimized.
What should you include in the solution? Azure App Gateway with Azure Web Application Firewall (WAF) Azure API Management Standard tier with a service endpoint Azure Front Door with Azure Web Application Firewall (WAF) Azure API Management Premium tier with virtual network connection.
You have a .NET web service named Service1 that performs the following tasks:
✑ Reads and writes temporary files to the local file system.
✑ Writes to the Application event log.
You need to recommend a solution to host Service1 in Azure. The solution must meet the following requirements:
✑ Minimize maintenance overhead.
✑ Minimize costs.
What should you include in the recommendation? an Azure App Service web app an Azure virtual machine scale set an App Service Environment (ASE) an Azure Functions app.
You have a .NET web service named Service1 that has the following requirements:
✑ Must read and write temporary files to the local file system.
✑ Must write to the Application event log.
You need to recommend a solution to host Service1 in Azure. The solution must meet the following requirements:
✑ Minimize maintenance overhead.
✑ Minimize costs.
What should you include in the recommendation? an Azure App Service web app an Azure virtual machine scale set an App Service Environment (ASE) an Azure Functions app.
Your company has an app named App1 that uses data from the on-premises Microsoft SQL Server databases shown in the following table. (See image)
App1 and the data are used on the first day of the month only. The data is not expected to grow more than 3 percent each year.
The company is rewriting App1 as an Azure web app and plans to migrate all the data to Azure.
You need to migrate the data to Azure SQL Database and ensure that the database is only available on the first day of each month.
Which service tier should you use? vCore-based General Purpose DTU-based Standard vCore-based Business Critical DTU-based Basic.
You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.
What should you include in the recommendation? Azure Service Fabric Azure Data Lake Azure Service Bus Azure Traffic Manager.
Your company has 300 virtual machines hosted in a VMware environment. The virtual machines vary in size and have various utilization levels.
You plan to move all the virtual machines to Azure.
You need to recommend how many and what size Azure virtual machines will be required to move the current workloads to Azure. The solution must minimize administrative effort.
What should you use to make the recommendation? Azure Pricing calculator Azure Advisor Azure Migrate Azure Cost Management.
You plan to deploy multiple instances of an Azure web app across several Azure regions.
You need to design an access solution for the app. The solution must meet the following replication requirements:
✑ Support rate limiting.
✑ Balance requests between all instances.
✑ Ensure that users can access the app in the event of a regional outage.
Solution: You use Azure Traffic Manager to provide access to the app.
Does this meet the goal? Yes No.
You plan to deploy multiple instances of an Azure web app across several Azure regions.
You need to design an access solution for the app. The solution must meet the following replication requirements:
✑ Support rate limiting.
✑ Balance requests between all instances.
✑ Ensure that users can access the app in the event of a regional outage.
Solution: You use Azure Load Balancer to provide access to the app.
Does this meet the goal? Yes No.
You plan to deploy multiple instances of an Azure web app across several Azure regions.
You need to design an access solution for the app. The solution must meet the following replication requirements:
✑ Support rate limiting.
✑ Balance requests between all instances.
✑ Ensure that users can access the app in the event of a regional outage.
Solution: You use Azure Application Gateway to provide access to the app.
Does this meet the goal? Yes No.
You have an Azure subscription.
You need to recommend a solution to provide developers with the ability to provision Azure virtual machines. The solution must meet the following requirements:
✑ Only allow the creation of the virtual machines in specific regions.
✑ Only allow the creation of specific sizes of virtual machines.
What should you include in the recommendation? Azure Resource Manager (ARM) templates Azure Policy Conditional Access policies role-based access control (RBAC).
You have data files in Azure Blob Storage.
You plan to transform the files and move them to Azure Data Lake Storage.
You need to transform the data by using mapping data flow.
Which service should you use? Azure Databricks Azure Storage Sync Azure Data Factory Azure Data Box Gateway.
You have an Azure subscription.
You need to deploy an Azure Kubernetes Service (AKS) solution that will use Windows Server 2019 nodes. The solution must meet the following requirements:
✑ Minimize the time it takes to provision compute resources during scale-out operations.
✑ Support autoscaling of Windows Server containers.
Which scaling option should you recommend? Kubernetes version 1.20.2 or newer Virtual nodes with Virtual Kubelet ACI cluster autoscaler horizontal pod autoscaler.
You have an Azure subscription.
You need to recommend an Azure Kubernetes Service (AKS) solution that will use Linux nodes. The solution must meet the following requirements:
✑ Minimize the time it takes to provision compute resources during scale-out operations.
✑ Support autoscaling of Linux containers.
✑ Minimize administrative effort.
Which scaling option should you recommend? horizontal pod autoscaler cluster autoscaler virtual nodes Virtual Kubelet.
You are designing an order processing system in Azure that will contain the Azure resources shown in the following table. (See image)
The order processing system will have the following transaction flow:
✑ A customer will place an order by using App1.
✑ When the order is received, App1 will generate a message to check for product availability at vendor 1 and vendor 2.
✑ An integration component will process the message, and then trigger either Function1 or Function2 depending on the type of order.
✑ Once a vendor confirms the product availability, a status message for App1 will be generated by Function1 or Function2.
✑ All the steps of the transaction will be logged to storage1.
Which type of resource should you recommend for the integration component? an Azure Service Bus queue an Azure Data Factory pipeline an Azure Event Grid domain an Azure Event Hubs capture.
You have 100 Microsoft SQL Server Integration Services (SSIS) packages that are configured to use 10 on-premises SQL Server databases as their destinations.
You plan to migrate the 10 on-premises databases to Azure SQL Database.
You need to recommend a solution to create Azure-SQL Server Integration Services (SSIS) packages. The solution must ensure that the packages can target the
SQL Database instances as their destinations.
What should you include in the recommendation? Data Migration Assistant (DMA) Azure Data Factory Azure Data Catalog SQL Server Migration Assistant (SSMA).
You have an Azure virtual machine named VM1 that runs Windows Server 2019 and contains 500 GB of data files.
You are designing a solution that will use Azure Data Factory to transform the data files, and then load the files to Azure Data Lake Storage.
What should you deploy on VM1 to support the design? the On-premises data gateway the Azure Pipelines agent the self-hosted integration runtime the Azure File Sync agent.
|
