AZ-304: Microsoft Azure Architect Design Practice Questions Part 2

A company is setting up the required privileges for users in their Azure AD tenant. They need to assign a group of users with the below mentioned privileges
• The users should be able to manage virtual networks
• They should not be allowed to manage role assignments
You need to ensure the right role is assigned based on the least privilege access
You decide to provide the Owner role to the group
Would this fulfil the requirement?

A company currently has a web application deployed in classic ASP. The application makes use of third-party DLLs. The deployment process for the application is to prone to errors and scaling and high availability are always issues.
You need to devise an approach to modernize the application that could be deployed to Azure and also ensure deployment and administrative overheads are reduced.
Which of the following would you use as the Modernization approach?

A company currently has a web application deployed in classic ASP. The application makes use of third-party DLLs. The deployment process for the application is to prone to errors and scaling and high availability are always issues.
You need to devise an approach to modernize the application that could be deployed to Azure and also ensure deployment and administrative overheads are reduced.
Which of the following would you recommend as the deployment approach?

The IT Security department has the requirement to ensure they get notified if there are any changes made to the configuration of the underlying Virtual Machines. A workflow needs to be designed for this requirement. Which of the following would you use for this purpose?

Which of the following service would you use to fulfil the below case study requirement
“The virtual machines need to have a central location for storage of files. They would connect to these file shares using SMB”

You need to comply with the below case study requirement
“There should be an encrypted connection between the On-premise data centre and the Virtual Network azure-net2”
You decide to provision a point to site VPN connection
Would this fulfil the reuiqrement?

You need to comply with the below case study requirement
“There should be an encrypted connection between the On-premise data centre and the Virtual Network azure-net2”
You decide to implement Virtual Network Peering
Would this fulfil the requirement?

You need to comply with the below case study requirement
“There should be an encrypted connection between the On-premise data centre and the Virtual Network azure-net2”
you decide to implement a site-to-site VPN Connection
would this fulfil the requirement?

You need to decide on the implementation strategy for the synchronization of users passwords between the on-premise AD and the Azure AD Tenant. You need to ensure that the sign-in is completely managed in the cloud. The company currently does have the need to apply any policies from their on-premise AD for authentication process. Which of the following would you consider for the configuration of the synchronization?

A company currently has the following systems running on their on-premise environment
• An ASP.Net application running on Internet Information Services
• A MongoDB database
The company wants to migrate the system onto Azure. They want to ensure to use managed services to reduce the administrative overhead. They want to minimize the time for migration as well and also reduce costs wherever possible
Which of the following Azure service would you use for the ASP.Net application?

A company currently has the following systems running on their on-premise environment
• An ASP.Net application running on Internet Information Services
• A MongoDB database
The company wants to migrate the system onto Azure. They want to ensure to use managed services to reduce the administrative overhead. They want to minimize the time for migration as well and also reduce costs wherever possible
Which of the following Azure service would you use for the MongoDB database?

A company needs to create a storage account as shown below
The storage account must meet the following requirements
• Ensure that the documents can be stored in the storage account
• The documents must be made accessible via drive mappings from Azure virtual machines that run windows server 2016
• Provide the highest possible redundancy for the documents
• Minimize storage access costs
Which of the following would you choose for the performance of the Storage account?

A company needs to create a storage account as shown below
The storage account must meet the following requirements
• Ensure that the documents can be stored in the storage account
• The documents must be made accessible via drive mappings from Azure virtual machines that run windows server 2016
• Provide the highest possible redundancy for the documents
• Minimize storage access costs
Which of the following would you choose for the account kind?

A company needs to create a storage account as shown below
The storage account must meet the following requirements
• Ensure that the documents can be stored in the storage account
• The documents must be made accessible via drive mappings from Azure virtual machines that run windows server 2016
• Provide the highest possible redundancy for the documents
• Minimize storage access costs
Which of the following would you choose for the replication?

A testing team needs to create resources in an Azure subscription.
These resources will be pertinent to applications that need to be tested in Azure.
These applications will make use of shared resources and application specific resources.
You have to create a deployment solution that meets the following requirements
• Minimize the administrative effort for the testing team to create the application environment
• Ensure that the application environment can be created consistency multiple times
• When the testing of the application is complete, all resources except for the shared resources should be deleted
Which of the following should be used to implement this requirement?

An Azure subscription and an Azure AD tenant have been created by a company. The company aims to build many applications that can make use of resources based on Azure. Each application has a particular requirement for messaging. The main requirements for each application are given below.
Name Requirements
IPS-app1 Should be able to send and receive messages based on First-in First out message order.
IPS-app2 Should be able to receive and process millions of messages at once.
IPS-app3 This application needs to listen and process events that are released from other Azure services.

Which one of the following would a company use as a messaging service for IPS-app3?

Your company has an Azure storage account. Two files named IPS-file1 and IPS-file2 are stored in the storage account. Each data files are 1 GB in size. The archive access tier is used for each of the files.
You have to ensure that IPS-file1 is accessible immediately when a retrieval request is initiated.
You choose to set the Access tier for the file to Hot.
Will the requirement fulfil this?

Currently, a company uses Microsoft System Center Support Manager for its on-premises network. The company wants a solution to push Azure service health alerts to the Service Manager. Which of the following would you recommend in the solution?

At present, a company has an Azure subscription. They are preparing to deploy an application to be hosted in the regions of the East US, Central Europe and East Asia. A data storage solution that will satisfy the following requirements should be recommended.
• The data store must be capable of storing at least 1 TB of data
• The data store must be capable of supporting multiple levels of consistency
• It must be able to perform read and write operations in the Azure region that is local to the application instance
Which of the following can you use for the above requirement?

A company plans to deploy two clusters of Azure Kubernetes to distinct Azure regions. In these clusters, different applications will be hosted. The deployment of applications shall satisfy the following requirements.
• It must be guaranteed that an application is still available, even though a single Kubernetes clusters fails.
• It must be assured that the connected traffic is encrypted through the Internet using SSL
• You should not need to configure SSL on each container instance as well
For these requirements, which of the following will you use as an Azure service?

An Azure subscription and an Azure AD tenant have been created by your company. The company needs to setup multiple data stores. The requirements for each data store are below:
Name Requirements
IPS-store1 Capable of being store JSON documents. Developers should be capable to query the documents using SQL
statements.
IPS-store2 This is a file system that will be shared across multiple Windows virtual machines.
IPS-store3 There will be a need for this store to store documents. These documents can be accessed by end
users. You should be able to provide access to the documents to users through Access Control lists.

Which of the following would you use as the data store for IPS-store3?

A company has three Hyper-V failover clusters as presented below
Name Number of nodes Number of Virtual Machines
IPS-cluster1 3 10
IPS-cluster2 5 20
IPS-cluster3 10 30

By using the Azure Migrate service, you have to prepare to evaluate and migrate virtual machines.
What is the minimum number of Azure Site Recovery agents you need to recommend?

Your organization plans to deploy application across seven Azure virtual machines. As part of an Availability Set, the virtual machines will run. In the Availability Set, the number of fault domains is set to 3. The number of domains that are updated is set to 20.
How many virtual machines would be available during the scheduled maintenance period?

Your company has an Azure storage account named as IPSstore9000. In this storage account, they want to archive data. For five years, you have to ensure that archived data cannot be deleted. Even the administrators must not be able to delete the archived data.
You plan to create a file share and then set up an access policy
Will the requirement fulfil this?

Currently the company has an Azure tenant and a subscription in place. They have more than 10,000 licensed users and 50 mission critical applications. They want to provide advanced threat detection and remediation for endpoints. For this requirement, any of the following would be recommended?

Your company has an Azure subscription that contains the following resources
Name Type Kind Location
IPSstore1000 Azure Storage Account Storage East US
IPSstore2000 Azure Storage Account StorageV2 East US
IPS-workspace1 Azure Log Analytics workspace Not applicable East US
IPS-workspace2 Azure Log Analytics workspace Not applicable East US
IPS-hub Azure Event Hub Not applicable East US

There is an Azure SQL database named IPSdb for the company. The database is hosted in the East US region.
The following diagnostic setting is configured on the database:
• Name: IPSsetting
• Archive SQL Insights to IPSstore1000 and IPS-workspace1
Could a new database diagnostic setting that archives SQLInsights logs for IPS-hub be added?

Your company has an on-premises Hyper-V cluster that comprises 20 virtual machines. Few virtual computers are Windows-based and some are Linux-based. You have to migrate the virtual machines onto Azure.
A solution that can be used to replicate the disks of virtual machines to Azure is suggested. The solution must ensure that while the migration of the disks is in progress, virtual machines remain available.
You plan to create a Recovery Services Vault and then use Azure Site Recovery
Will the requirement fulfil this?

For the deployment of software for testing and production, an organization wants a solution. The solution shall comply with the following requirements:
• Applications should be able to be deployed to many different environments and must operate without the need of installation of dependencies
• Application developers must have the flexibility when designing their code
For the hosting of applications, which of the following would you recommend?

An on-premises Microsoft SQL Server instance needs to be migrated to Azure via Azure ExpressRoute by a company. The migrated instance must comply with the requirements below in Azure
• Provide SQL Server with automatic patching and version updates
• Provide automatic backup services
• Offer high availability
• Encrypt all data in transit
• Provide private IP addressing for a native virtual network
• Be an environment for single-tenants with dedicated underlying infrastructure
Which of the following would you implement for this requirement?

There is currently an Azure AD tenant and an Azure subscription for your company. They also use Azure AD Connect to synchronize users to Azure AD from their on-premises environment. The following requirements need to be enforced.
• Let their cloud-only users to change their passwords
• Let their cloud-only users to reset their passwords
• Let their Active Directory users to change their password in Azure
To satisfy each requirement, you must plan about the right licence that can be used. Costs need to be reduced.
Which licence can be procured for the below requirement?
Let their Active Directory users to change their password in Azure

An Azure subscription and an Azure AD tenant have been created by a company. The company aims to build many applications that can make use of services based on Azure. Each application has a particular requirement for messaging. The main requirements for each application are given below.

Name Requirements
ips-app1 Should be able to send and receive messages based on First-in First out message order
ips-app2 Should be able to receive and process millions of messages at once.
ips-app3 This application needs to listen and process events that are released from other Azure services.

Which one of the following would a company use as a messaging service for ips-app1?

An Azure subscription and an Azure AD tenant have been created by a company. The company aims to build many applications that can make use of services based on Azure. Each application has a particular requirement for messaging. The main requirements for each application are given below.
Name Requirements
ips-app1 Should be able to send and receive messages based on First-in First out message order
ips-app2 Should be able to receive and process millions of messages at once.
ips-app3 This application needs to listen and process events that are released from other Azure services.

Which one of the following would a company use as a messaging service for ips-app2?

Your company has an Azure storage account. Two files named ips-file1 and ips-file2 are stored in the storage account. Each data files are 1 GB in size. The archive access tier is used for each of the files.
• You have to ensure that ips-file1 is accessible immediately when a retrieval request is initiated.
• You decide to set move the file to a new storage account and then set the Access tier of the file to Archive
Will the requirement fulfil this?

As part of their subscription, a company has defined the following Azure SQL servers.
Name Resource group Location
ips-server1 ips-rg1 East US
ips-server2 ips-rg2 West US

The company also has specified the following Azure storage accounts in the subscription.
Name Resource group Location Account kind
ips-store1 ips-rg1 East US StorageV2
ips-store2 ips-rg2 Central US BlobStorage

The company also has the following Azure SQL Databases in site.
Name Resource group Server Pricing tier
ipsdb1 ips-rg1 ips-server1 Standard
ipsdb2 ips-rg1 ips-server1 Standard
ipsdb3 ips-rg2 ips-server2 Premium
If the company allows auditing on the ipsdb1 servers, can ips-store1 store the audit information?

As part of their subscription, a company has defined the following Azure SQL servers.
Name Resource group Location
ips-server1 ips-rg1 East US
ips-server2 ips-rg2 West US

The company also has specified the following Azure storage accounts in the subscription.
Name Resource group Location Account kind
ips-store1 ips-rg1 East US StorageV2
ips-store2 ips-rg2 Central US BlobStorage

The company also has the following Azure SQL Databases in site.
Name Resource group Server Pricing tier
ipsdb1 ips-rg1 ips-server1 Standard
ipsdb2 ips-rg1 ips-server1 Standard
ipsdb3 ips-rg2 ips-server2 Premium
If the company allows auditing on the ipsdb2 servers, can ips-store2 store the audit information?

As part of their subscription, a company has defined the following Azure SQL servers.
Name Resource group Location
ips-server1 ips-rg1 East US
ips-server2 ips-rg2 West US

The company also has specified the following Azure storage accounts in the subscription.
Name Resource group Location Account kind
ips-store1 ips-rg1 East US StorageV2
ips-store2 ips-rg2 Central US BlobStorage

The company also has the following Azure SQL Databases in site.
Name Resource group Server Pricing tier
ipsdb1 ips-rg1 ips-server1 Standard
ipsdb2 ips-rg1 ips-server1 Standard
ipsdb3 ips-rg2 ips-server2 Premium
If the company allows auditing on the ipsdb3 servers, can ips-store2 store the audit information?

Currently a company has an Azure subscription. Third-party hosting providers also provide them. They must provide a centralized solution for monitoring in place. The key requirements for the monitoring solution are below.
• Gather all of the record and diagnostic data from all of the third-party vendors.
• Make sure that all data is collected in a centralized repository
• Capable of analyzing the log data and threats detection
• Enable the automated response to all identified events
Which Azure service from the following you would use for these requirements?

There is an on-site directory for a company that is synced to Azure Active Directory. The following users are outlined.
Name User type Source
ipsusr1 Member Azure Active Directory
ipsusr2 Member Windows Server AD
ipsusr3 Guest Microsoft Account
ipsusr4 Member Azure Active Directory
The User Administrator role is delegated to ipsusr4.
Which of the following users would ipsusr4 can change the attribute Job info for?

There is an on-site directory for a company that is synced to Azure Active Directory. The following users are outlined.
Name User type Source
ipsusr1 Member Azure Active Directory
ipsusr2 Member Windows Server AD
ipsusr3 Guest Microsoft Account
ipsusr4 Member Azure Active Directory
The User Administrator role is delegated to ipsusr4.
Which of the following users would ipsusr4 can change the attribute Authentication contact info for?

The company has an on-premise network. On the on-site network, they already have a virtual appliance deployed. The company needs to install many Azure virtual machines and then use a Site-to-Site connection to link them to their on-site network. They still want to confirm that all traffic is directed to the on-site virtual system from the Azure virtual machines.
For this requirement, which of the above will you implement?
From the options given below, select two answers.