AZ-304: Microsoft Azure Architect Design Practice Questions Part 1

Your company has an azure subscription that contains the following resources

The company has an Azure SQL database named azuredb. The database is hosted in the East US region.
On the database the following diagnostic setting is configured
Name: azuresetting
Archive SQL Insights to azurestore1000 and azure-workspace1
Would be able to add a new diagnostic setting for the database that archives SQL Insights logs to store2000?

Your company has an Azure Subscription that contains the following resources

The company has an Azure SQL database named azuredb. The database is hosted in the East US region.
On the database the following diagnostic setting is configured
Name: azuresetting
Archive SQL Insights to azurestore1000 and azure-workspace1
Would be able to add a new diagnostic setting for the database that archives SQL Insights logs to azurestore2000?

Your company has an Azure Subscription that contains the following resources

The company has an Azure SQL database named azuredb. The database is hosted in the East US region.
On the database the following diagnostic setting is configured
Name: azuresetting
Archive SQL Insights to azurestore1000 and azure-workspace1
Would be able to add a new diagnostic setting for the database that archives SQL Insights logs to azurestore2000?

A company has an Azure AD tenant. The tenant contains a security group named azuregrp. There are currently 50 members assigned to the group. This also includes 20 guest users. You have to recommend a solution for the evaluation of users in the group. Below are the key requirements.

• The evaluation needs to be conducted every month
• Every member should be able to report on whether they need to be part of the group
• Users who report that they don’t want to be part of the group should be removed automatically
• Users who don’t report whether they want to be part of the group should be removed automatically

Which of the following would you implement for this requirement?

Your company has an on-premises Hyper-V cluster that contains 20 virtual machines. Some of the virtual machines are based on Windows and some in Linux. You have to migrate the virtual machines onto Azure.
You have to recommend a solution that would be used to replicate the disks of the virtual machines to Azure. The solution needs to ensure that the virtual machines remain available when the migration of the disks is in progress.
You decide to create an Azure storage account that has the file service and blob service and then use the Data Migration Assistant
Would this fulfil the requirements?

Your company has an on-premises Hyper-V cluster that contains 20 virtual machines. Some of the virtual machines are based on Windows and some in Linux. You have to migrate the virtual machines onto Azure.
You have to recommend a solution that would be used to replicate the disks of the virtual machines to Azure. The solution needs to ensure that the virtual machines remain available when the migration of the disks is in progress.
You decide to create an Azure storage account and then run AzCopy
Would this fulfil the requirements?

Your company has an on-premises Hyper-V cluster that contains 20 virtual machines. Some of the virtual machines are based on Windows and some in Linux. You have to migrate the virtual machines onto Azure.
You have to recommend a solution that would be used to replicate the disks of the virtual machines to Azure. The solution needs to ensure that the virtual machines remain available when the migration of the disks is in progress.
You decide to create a Recovery services Vault and then use Azure Site Recovery
Would this fulfil the requirements?

A company needs to solution for the deployment of software for testing and production. The solution needs to adhere to the following requirements
• Applications should be able to be deployed to several different environments and must run without the need of installation of dependencies
• Application developers must have the flexibility when architecting their code

Which of the following would you recommend for the hosting of applications?

A company needs to migrate an on-premises Microsoft SQL Server instance to Azure via Azure ExpressRoute. The migrated instance in Azure must follow the below requirements.
• Provide automatic patching and version updates to SQL Server
• Provide automatic backup services
• Provide high availability
• Encrypt all data in transit
• Provide a native virtual network with private IP addressing
• Be a single-tenant environment with dedicated underlying infrastructure

Which of the following would you implement for this requirement?

A company has an Azure subscription that contains 50 virtual machines. You have to recommend a solution that would be used to encrypt the disks by using Azure Disk Encryption. The solution must ensure the operating and data disks can be encrypted. Which of the following would you recommend for this purpose?

A company has an Azure subscription and several resource groups. There is also a resource group named azure-rg. This resource group contains mission critical resources. There is a user named azure-admin that is assigned the Owner role for the subscription. You need to prevent the administrator from being able to modify the resources in the azure-rg resource group. The administrator should still be able to modify resources in other resource groups. Which of the following would you implement for this requirement?

Your company has an application that is hosted in their on-premises environment and on four Azure virtual machines. Each of the virtual machines are located in different regions. You have to recommend a routing solution that would ensure users always connect to the closest instance of the application. It must also ensure that user don’t connect to a failed instance of the application. Which of the following are two solutions that can be used to achieve this requirement? Choose two answers from the options given below

Your company wants to deploy a new Azure web application. The web application will use Azure blob storage for storage of static content. The web application uses a large number of JavaScript files along with cascading style sheets. The users of the web application are located across the world. You have to ensure the time to load individual pages is minimized. Which of the following would you recommend for this requirement?

A company needs to host a set of applications on Azure virtual machines. There are different requirements for each of the applications
• Maintain performance on a set of identical virtual machines
• Ensure application is running in the event of a data center failure

Which of the following can be used to fulfil the requirement?
Maintain performance on a set of identical virtual machines

A company needs to host a set of applications on Azure virtual machines. There are different requirements for each of the applications
• Maintain performance on a set of identical virtual machines
• Ensure application is running in the event of a data center failure

Which of the following can be used to fulfil the requirements?
Ensure application is running in the event of a data center failure

A company has the following resources as part of their Azure subscription
Name Type Location
Azure-sql Azure SQL database East US
Azurevm Azure virtual machine East US
Azurestore4000 Azure storage account West US
You need to ensure the following security requirements are met
• All data in the Azure SQL database in encrypted at rest and in transit
• All data in the storage account is encrypted at rest
• All data on the operating and data disks for the virtual machine are encrypted at rest

Which of the following would you implement for the following requirement?
All data in the Azure SQL database in encrypted at rest and in transit

A company has the following resources as part of their Azure subscription
Name Type Location
Azure-sql Azure SQL database East US
Azurevm Azure virtual machine East US
Azurestore4000 Azure storage account West US
You need to ensure the following security requirements are met
• All data in the Azure SQL database in encrypted at rest and in transit
• All data in the storage account is encrypted at rest
• All data on the operating and data disks for the virtual machine are encrypted at rest

Which of the following would you implement for the following requirement?
All data in the storage account is encrypted at rest

A company has the following resources as part of their Azure subscription
Name Type Location
Azure-sql Azure SQL database East US
Azurevm Azure virtual machine East US
Azurestore4000 Azure storage account West US
You need to ensure the following security requirements are met
• All data in the Azure SQL database in encrypted at rest and in transit
• All data in the storage account is encrypted at rest
• All data on the operating and data disks for the virtual machine are encrypted at rest

Which of the following would you implement for the following requirement?
All data on the operating and data disks for the virtual machine are encrypted
at rest

Your company currently has an Azure AD tenant and an Azure subscription. They are also using Azure AD Connect to synchronize users from their on-premises environment onto Azure AD. They want to implement the following requirements
• Allow their cloud-only users to change their passwords
• Allow their cloud-only users to reset their passwords
• Allow their Active Directory users to change their password in Azure

You have to decide on the right licence that can be used to fulfil each requirement
Costs should be minimized
Which licence can be procured for the below requirement?
Allow their cloud-only users to change their passwords

Your company currently has an Azure AD tenant and an Azure subscription. They are also using Azure AD Connect to synchronize users from their on-premises environment onto Azure AD. They want to implement the following requirements
• Allow their cloud-only users to change their passwords
• Allow their cloud-only users to reset their passwords
• Allow their Active Directory users to change their password in Azure

You have to decide on the right licence that can be used to fulfil each requirement
Costs should be minimized
Which licence can be procured for the below requirement?
Allow their cloud-only users to reset their passwords

Your company currently has an Azure AD tenant and an Azure subscription. They are also using Azure AD Connect to synchronize users from their on-premises environment onto Azure AD. They want to implement the following requirements
• Allow their cloud-only users to change their passwords
• Allow their cloud-only users to reset their passwords
• Allow their Active Directory users to change their password in Azure

You have to decide on the right licence that can be used to fulfil each requirement
Costs should be minimized
Which licence can be procured for the below requirement?
Allow their Active Directory users to change their password in Azure

A company currently has an on-premise network with an IP address space of 186.16.0.0/16. The company is going to deploy 20 virtual machines to Azure. The virtual machines will be placed in a subnet in an Azure virtual network. The requirement is to ensure the on-premise servers can communicate with the virtual machines hosted in Azure via a site-to-site VPN connection. You have to design the subnet for the virtual network in Azure which will be used to host the virtual machines.
Which of the following address space would you assign for the subnet in the virtual network?

A company currently has an on-premise network with an IP address space of 186.16.0.0/16. The company is going to deploy 20 virtual machines to Azure. The virtual machines will be placed in a subnet in an Azure virtual network. The requirement is to ensure the on-premise servers can communicate with the virtual machines hosted in Azure via a site-to-site VPN connection. You have to design the subnet for the virtual network in Azure which will be used to host the virtual machines.
Which of the following address space would you assign for the subnet in the virtual network?

A company has an API service that currently returns XML data to its internal users. The API is going to be migrated onto Azure. It will sit behind an API Management instance. Below are the requirements for the API when it is moved to Azure
• The API must send data in JSON format to its internal users
• When external consultants access the API, the header information must be stripped before the data is received
What is the minimum number of API’s that need to be added to Azure API management?

A company has an API service that currently returns XML data to its internal users. The API is going to be migrated onto Azure. It will sit behind an API Management instance. Below are the requirements for the API when it is moved to Azure
• The API must send data in JSON format to its internal users
• When external consultants access the API, the header information must be stripped before the data is received
What is the minimum number of products to publish in Azure API management?

A company has an API service that currently returns XML data to its internal users. The API is going to be migrated onto Azure. It will sit behind an API Management instance. Below are the requirements for the API when it is moved to Azure
• The API must send data in JSON format to its internal users
• When external consultants access the API, the header information must be stripped before the data is received

What is the minimum number of policy elements that need to be added to the API?

A team has created a storage account in Azure. They also have the following object available in the storage account. In order to access the sample txt.file, which of the following must be done first?

A team has created a storage account in Azure. They also have the following object available in the storage account. Currently the sample.txt.file will be stored.

A company has the following on-premise stores
• A Microsoft SQL Server 2012 database
• A Microsoft SQL Server 2008 database
The data needs to be migrated to Azure
• Requirement 1 – the data in the Microsoft SQL Server 2012 database needs to be migrated to an Azure SQL database
• Requirement 2 – the data in a table in the Microsoft SQL Server 2008 database needs to be migrated to an Azure CosmoDB account that uses the SQL API
Which of the following should be used to accomplish requirement 1?

A company has the following on-premise stores
• A Microsoft SQL Server 2012 database
• A Microsoft SQL Server 2008 database
The data needs to be migrated to Azure
• Requirement 1 – the data in the Microsoft SQL Server 2012 database needs to be migrated to an Azure SQL database
• Requirement 2 – the data in a table in the Microsoft SQL Server 2008 database needs to be migrated to an Azure CosmoDB account that uses the SQL API
Which of the following should be used to accomplish requirement 2?

Your team is planning on hosting an application that will be hosted on 2 virtual machines in Azure named demovm1 and demovm2. You have to load balance the traffic from the internet to the virtual machines using one Azure Load Balancer.
You need to recommend the minimum number of public IP addresses that would be required
What is the minimum number of Public IP addresses that would be required for the Load Balancer?

Your team is planning on hosting an application that will be hosted on 2 virtual machines in Azure named demovm1 and demovm2. You have to load balance the traffic from the internet to the virtual machines using one Azure Load Balancer.
You need to recommend the minimum number of public IP addresses that would be required
What is the minimum number of Public IP addresses that would be required for the demovm1?

Your team is planning on hosting an application that will be hosted on 2 virtual machines in Azure named demovm1 and demovm2. You have to load balance the traffic from the internet to the virtual machines using one Azure Load Balancer.
You need to recommend the minimum number of public IP addresses that would be required
What is the minimum number of Public IP addresses that would be required for the demovm2?

Your company needs to generate a monthly report on all resources that were deployed to the Azure subscription. Which of the following would help achieve this requirement?

A company is planning on deploying an application onto Azure. The application will be based on the .Net core programming language. The application would be hosted using Azure Web apps. Below is the part of various requirements for the application
• Give the ability to correlate Azure resource usage and the performance data with the actual application configuration and performance data
• Give the ability to visualize the relationships between application components
• Give the ability to track requests and exceptions to specific lines of code from within the application
• Give the ability to actually analyse how uses return to an application and see how often they only select a particular drop-down value
Which of the following service would be best suited for fulfilling the requirement of
“Give the ability to correlate Azure resource usage and the performance data
with the actual application configuration and performance data”

A company is planning on deploying an application onto Azure. The application will be based on the .Net core programming language. The application would be hosted using Azure Web apps. Below is the part of various requirements for the application
• Give the ability to correlate Azure resource usage and the performance data with the actual application configuration and performance data
• Give the ability to visualize the relationships between application components
• Give the ability to track requests and exceptions to specific lines of code from within the application
• Give the ability to actually analyse how uses return to an application and see how often they only select a particular drop-down value
Which of the following service would be best suited for fulfilling the requirement of
“Give the ability to visualize the relationships between application components”

A company is planning on deploying an application onto Azure. The application will be based on the .Net core programming language. The application would be hosted using Azure Web apps. Below is the part of various requirements for the application
• Give the ability to correlate Azure resource usage and the performance data with the actual application configuration and performance data
• Give the ability to visualize the relationships between application components
• Give the ability to track requests and exceptions to specific lines of code from within the application
• Give the ability to actually analyse how uses return to an application and see how often they only select a particular drop-down value
Which of the following service would be best suited for fulfilling the requirement of
“Give the ability to track requests and exceptions to specific lines of code from
within the application”

A company is planning on deploying an application onto Azure. The application will be based on the .Net core programming language. The application would be hosted using Azure Web apps. Below is the part of various requirements for the application
• Give the ability to correlate Azure resource usage and the performance data with the actual application configuration and performance data
• Give the ability to visualize the relationships between application components
• Give the ability to track requests and exceptions to specific lines of code from within the application
• Give the ability to actually analyse how uses return to an application and see how often they only select a particular drop-down value
Which of the following service would be best suited for fulfilling the requirement of
“Give the ability to actually analyse how uses return to an application and see
how often they only select a particular drop-down value”

A company is setting up the required privileges for users in their Azure AD tenant. They need to assign a group of users with the below mentioned privileges
• The users should be able to manage virtual networks
• They should not be allowed to manage role assignments
You need to ensure the right role is assigned based on the least privilege access
You decide to provide the Owner role to the group
Would this fulfil the requirement?

A company is setting up the required privileges for users in their Azure AD tenant. They need to assign a group of users with the below mentioned privileges
• The users should be able to manage virtual networks
• They should not be allowed to manage role assignments
You need to ensure the right role is assigned based on the least privilege access
You decide to provide the Owner role to the group
Would this fulfil the requirement?