AZ-304: Microsoft Azure Architect Design Practice Questions Part 3

There is currently an Azure AD tenant for a company. They want to monitor all of the user sign-ins using Azure Monitor and then create alerts based on unique user sign-in events.
Which of the following will you use for Azure AD log storage purposes?

There is currently an Azure AD tenant for a company. They want to monitor all of the user sign-ins using Azure Monitor and then create alerts based on unique user sign-in events.
In order to activate the alerts, which of the following will you use as the signal type?

Azure Application Insights is currently being used by a company. They want to use the continuous export feature and can be store the Application Insights data for five years. Which of the following would they use for the data storage?

There is an Azure SQL database for a company. How many times the query below is launched against the database must be monitored?
select * from ipsapp where appId=100
Which of the following would be used to fulfil this requirement?

In 2 different locations, an organization has deployed online applications on virtual machines. They want to load balance traffic at Layer 7. Moreover, they want the web server to be secure from SQL injection attacks.
Which of the following service would you use to fulfil this requirement?

In 2 different locations, an organization has deployed online applications on virtual machines. They want to load balance traffic at Layer 7. Moreover, they want the web server to be secure from SQL injection attacks.
Which of the following service would you use to fulfil this requirement?

A business is preparing to deploy an Azure application. The .Net core programming language will be the basis of the application. The application will be hosted at Azure Web apps. Below is part of the different application specifications.
• Enables the testing team to view the different components of an application and observe the calls being made between the different application components.
• Helps business in analyzing how many users really return to the application.
• Make sure that IT administrators get alerts based on critical situations being occurred in the application.
What service of the following will be ideally suited to fulfil the requirement of?
Enables the testing team to view the different components of an application and observe the calls being made between the different application components

A business is preparing to deploy an Azure application. The .Net core programming language will be the basis of the application. The application will be hosted at Azure Web apps. Below is part of the different application specifications.
• Enables the testing team to view the different components of an application and observe the calls being made between the different application components.
• Helps business in analyzing how many users really return to the application.
• Make sure that IT administrators get alerts based on critical situations being occurred in the application.
What service of the following will be ideally suited to fulfil the requirement of?
Helps business in analyzing how many users really return to the application.

A business is preparing to deploy an Azure application. The .Net core programming language will be the basis of the application. The application will be hosted at Azure Web apps. Below is part of the different application specifications.
• Enables the testing team to view the different components of an application and observe the calls being made between the different application components.
• Helps business in analyzing how many users really return to the application.
• Make sure that IT administrators get alerts based on critical situations being occurred in the application.
What service of the following will be ideally suited to fulfil the requirement of?
Make sure that IT administrators get alerts based on critical situations being occurred in the application

A business is planning to switch its on-premise services to Azure. They have 3 different apps that lead to multiple departments agencies. As given below, each application has a different scenario for business continuity.
HR Department – For 3 years, the application data has to be preserved. The application has to run from a particular Azure area from a disaster recovery viewpoint. The goal for recovery time will be 15 minutes.
Logistics Department – The Service Management team here needs to ensure that the application must be able to recover point-in-time data at a regular level of functionality. The goal for recovery time will be 6 hours.
Procurement Department – The application here must be able to switchover to a secondary on-premise data centre.
You have to recommend which service to each department should use. You must also make sure the expenditures are minimized.
For the HR Department, which of the following will you use?

A business is planning to switch its on-premise services to Azure. They have 3 different apps that lead to multiple departments agencies. As given below, each application has a different scenario for business continuity.
HR Department – For 3 years, the application data has to be preserved. The application has to run from a particular Azure area from a disaster recovery viewpoint. The goal for recovery time will be 15 minutes.
Logistics Department – The Service Management team here needs to ensure that the application must be able to recover point-in-time data at a regular level of functionality. The goal for recovery time will be 6 hours.
Procurement Department – The application here must be able to switchover to a secondary on-premise data centre.
You have to recommend which service to each department should use. You must also make sure the expenditures are minimized.
For the Logistics Department, which of the following will you use?

A business is planning to switch its on-premise services to Azure. They have 3 different apps that lead to multiple departments agencies. As given below, each application has a different scenario for business continuity.
HR Department – For 3 years, the application data has to be preserved. The application has to run from a particular Azure area from a disaster recovery viewpoint. The goal for recovery time will be 15 minutes.
Logistics Department – The Service Management team here needs to ensure that the application must be able to recover point-in-time data at a regular level of functionality. The goal for recovery time will be 6 hours.
Procurement Department – The application here must be able to switchover to a secondary on-premise data centre.
You have to recommend which service to each department should use. You must also make sure the expenditures are minimized.
For the Procurement Department, which of the following will you use?

An Azure subscription and an Azure tenant have been set up by a company. They bought licences for Premium P2. There are numerous divisions that have distinct requirements for identity management.
Department Requirement
Procurement Receive alerts if roles are turned on
Focus on providing access to Azure resources just in time
Human Resources Capability to perform access reviews
Logistics Make sure the application hosted on virtual machines can access the Azure Key vault service
securely.
For the Procurement department, which of the following would you suggest?

An Azure subscription and an Azure tenant have been set up by a company. They bought licences for Premium P2. There are numerous divisions that have distinct requirements for identity management.
Department Requirement
Procurement Receive alerts if roles are turned on
Focus on providing access to Azure resources just in time
Human Resources Capability to perform access reviews
Logistics Make sure the application hosted on virtual machines can access the Azure Key vault service
securely.
For the Human Resources department, which of the following would you suggest?

An Azure subscription and an Azure tenant have been set up by a company. They bought licences for Premium P2. There are numerous divisions that have distinct requirements for identity management.
Department Requirement
Procurement Receive alerts if roles are turned on
Focus on providing access to Azure resources just in time
Human Resources Capability to perform access reviews
Logistics Make sure the application hosted on virtual machines can access the Azure Key vault service
securely.
For the Logistics department, which of the following would you suggest?

An API management instance has been implemented by a company. To secure the API from a DDoS (Distributed denial of service) attack, they need a solution. For this purpose, which of the following would be recommended?

Two virtual networks have been developed by a corporation, one in the Central US and the other in the East US area. There is a provision to ensure that virtual machines on virtual networks are able to use their private IP addresses to connect with each other. You will need to maintain low latency access between the Virtual machines. You will need to make sure that the solution is economical.
You are planning to implement Virtual Network Peering.
Does the requirement comply with this?

Two virtual networks have been developed by a corporation, one in the Central US and the other in the East US area. There is a provision to ensure that virtual machines on virtual networks are able to use their private IP addresses to connect with each other. You will need to maintain low latency access between the Virtual machines. You will need to make sure that the solution is economical.
You are planning to implement ExpressRoute connection.
Does the requirement comply with this?

Two virtual networks have been developed by a corporation, one in the Central US and the other in the East US area. There is a provision to ensure that virtual machines on virtual networks are able to use their private IP addresses to connect with each other. You will need to maintain low latency access between the Virtual machines. You will need to make sure that the solution is economical.
You are planning to implement custom route tables.
Does the requirement comply with this?

An organization has just setup an Azure subscription. They have offices situated in Karachi and Lahore.
Now they are preparing an approach for network connectivity. In Azure, they have defined the following networks.
Virtual Network Name Address Space Region
ips-network1 10.0.1.0/24 North Europe
ips-network2 10.0.2.0/24 West Europe
The networks have the subnets described below.
Subnet Name Virtual Network
SubnetA ips-network1
SubnetB ips-network1
When it refers to connectivity, the organization has the following specifications.
• Only customers based in the Karachi office must have access to the Virtual Machines hosted in SubnetA.
• IT operators operating on dedicated workstations must provide access to SubnetA virtual machines on a particular TCP/IP port management interface over the internet.
• The ips-network1 hosted Azure Virtual Machines must be able to communicate with ips-network2 hosted Azure Virtual Machines across all ports.
Only customers based in the Karachi office must have access to the Virtual Machines hosted in SubnetA.
For this reason, which of the following will you use?

An organization has just setup an Azure subscription. They have offices situated in Karachi and Lahore.
Now they are preparing an approach for network connectivity. In Azure, they have defined the following networks.
Virtual Network Name Address Space Region
ips-network1 10.0.1.0/24 North Europe
ips-network2 10.0.2.0/24 West Europe
The networks have the subnets described below.
Subnet Name Virtual Network
SubnetA ips-network1
SubnetB ips-network1
When it refers to connectivity, the organization has the following specifications.
• Only customers based in the Karachi office must have access to the Virtual Machines hosted in SubnetA.
• IT operators operating on dedicated workstations must provide access to SubnetA virtual machines on a particular TCP/IP port management interface over the internet.
• The ips-network1 hosted Azure Virtual Machines must be able to communicate with ips-network2 hosted Azure Virtual Machines across all ports.
IT operators operating on dedicated workstations must provide access to SubnetA virtual machines on a particular TCP/IP port management interface over the internet
For this reason, which of the following will you use?

An organization has just setup an Azure subscription. They have offices situated in Karachi and Lahore.
Now they are preparing an approach for network connectivity. In Azure, they have defined the following networks.
Virtual Network Name Address Space Region
ips-network1 10.0.1.0/24 North Europe
ips-network2 10.0.2.0/24 West Europe
The networks have the subnets described below.
Subnet Name Virtual Network
SubnetA ips-network1
SubnetB ips-network1
When it refers to connectivity, the organization has the following specifications.
• Only customers based in the Karachi office must have access to the Virtual Machines hosted in SubnetA.
• IT operators operating on dedicated workstations must provide access to SubnetA virtual machines on a particular TCP/IP port management interface over the internet.
• The ips-network1 hosted Azure Virtual Machines must be able to communicate with ips-network2 hosted Azure Virtual Machines across all ports.
The ips-network1 hosted Azure Virtual Machines must be able to communicate with ips-network2 hosted Azure Virtual Machines across all ports.
For this reason, which of the following will you use?

What is the minimum number of Azure tenants to be configured?

What is the minimum number of custom domains that Azure AD requires to be added?

What is the minimum number of policies for conditional access that must be created?

To host the SQL database in Azure, you need to recommend how to set up the database. Which of the following would you recommend?

Approaches to transferring data from the on-premise SQL server to the Azure SQL server should be recommended. Which of the following are you going to recommend?

For the Web application-‘ips-app’- a technique needs to be recommended. It will be difficult to estimate the loads on the application. It has to be assured that large workloads will support the application on its own. It must therefore be assured that costs are lowered as workloads are decreased. Which of the following are you going to recommend?

For a Web application, the following architecture is preferred.

Would the web server support continuity by this architecture?

For a Web application, the following architecture is preferred.

Would the web server support autoscaling by this architecture?

For a Web application, the following architecture is preferred.

If an Azure region fails, does this architecture need a manual configuration?

Which of the following would be recommended for the database retention period?

You need to determine whether the different requirements of the case study require Azure storage.
Will you need to have a SQL Server database migration Azure storage account?

You need to determine whether the different requirements of the case study require Azure storage. Will you need to provide the content of the website with an Azure storage account?

You need to determine whether the different requirements of the case study require Azure storage.
Will you need to provision an Azure storage account for database metric monitoring?

Currently, a company has an on-site infrastructure consisting of
• A domain with an Active Directory called IPlab.com
• Services for the Active Directory Federation
• Application External Link Proxy Servers
The company has recently set up a tenant for Azure AD. Azure AD Connect has now been configured to synchronize users from on-premise AD to Azure AD. They have the following additional requirements:
• Ability to monitor solutions that combine Azure AD with Azure
• Identify any possible problems within AD FS
• Identify some difficulties with directory synchronization
For each form of server, you must find the correct monitoring solution.
Which of the following will you use to monitor the AD FS servers?

Currently, a company has an on-site infrastructure consisting of
• A domain with an Active Directory called IPSlab.com
• Services for the Active Directory Federation
• Application External Link Proxy Servers
The company has recently set up a tenant for Azure AD. Azure AD Connect has now been configured to synchronize users from on-premise AD to Azure AD. They have the following additional requirements:
• Ability to monitor solutions that combine Azure AD with Azure
• Identify any possible problems within AD FS
• Identify some difficulties with directory synchronization
For each form of server, you must find the correct monitoring solution.
Which of the following will you use to monitor the AD Connect servers?

A company has a storage account for Azure. It is important to configure the storage account so that it is only accessible from one particular Azure Virtual Network. You have to make sure that there is no access to the storage account from the Internet. To implement this requirement, which of the following will you use?

Your company has an Azure storage account. Two files named IPSlab-file1 and IPSlab-file2 are stored in the storage account. Each data files are 1 GB in size. The archive access tier is used for each of the files.
You have to ensure that IPSlab-file1 is accessible immediately when a retrieval request is initiated.
You choose to set the Access tier for the file to Cool.
Will the requirement fulfil this?