What does this exam validate?

Azure architect solution design.

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager resource deployments in your subscription. What should you include in the recommendation?

Correct Answer: Azure Activity Log

You need to design a solution that will execute custom C# code in response to an event routed to Azure Event Grid. The solution must meet the following requirements: ✑ The executed code must be able to access the private IP address of a Microsoft SQL Server instance that runs on an Azure virtual machine. ✑ Costs must be minimized. What should you include in the solution?

Correct Answer: Azure Functions in the Dedicated plan and the Basic Azure App Service plan

You need to recommend a strategy for migrating the database content of WebApp1 to Azure. What should you include in the recommendation?

Correct Answer: Copy the VHD that contains the Azure SQL database files to Azure Blob storage.

What should you include in the identity management strategy to support the planned changes?

Correct Answer: Deploy domain controllers for corp.fabrikam.com to virtual networks in Azure.

You need to recommend a solution for protecting the content of the payment processing system. What should you include in the recommendation?

Correct Answer: Azure Storage Service Encryption

You need to recommend a data storage strategy for WebApp1. What should you include in the recommendation?

Correct Answer: a vCore-based Azure SQL database

You need to recommend a backup solution for the data store of the payment processing system. What should you include in the recommendation?

Correct Answer: Azure Backup Server

You need to recommend a solution to meet the database retention requirement. What should you recommend?

Correct Answer: Configure a long-term retention policy for the database.

You need to recommend a compute solution for the middle tier of the payment processing system. What should you include in the recommendation?

Correct Answer: virtual machine scale sets

You have an Azure subscription that contains an Azure SQL database named DB1. Several queries that query the data in DB1 take a long time to execute. You need to recommend a solution to identify the queries that take the longest to execute. What should you include in the recommendation?

Correct Answer: Query Performance Insight

You have an Azure Storage v2 account named storage1. You plan to archive data to storage1. You need to ensure that the archived data cannot be deleted for five years. The solution must prevent administrators from deleting the data. What should you do?

Correct Answer: You create an Azure Blob storage container, and you configure a time-based retention policy and lock the policy.

The developers at your company are building a containerized Python Django app. You need to recommend platform to host the app. The solution must meet the following requirements: Support autoscaling. ✑ Support continuous deployment from an Azure Container Registry. ✑ Provide built-in functionality to authenticate app users by using Azure Active Directory (Azure AD). Which platform should you include in the recommendation?

Correct Answer: an Azure App Service instance that uses containers

You need to recommend a notification solution for the IT Support distribution group. What should you include in the recommendation?

Correct Answer: a SendGrid account with advanced reporting

You migrate App1 to Azure. You need to ensure that the data storage for App1 meets the security and compliance requirements. What should you do?

Correct Answer: Create an access policy for the blob service.

You need to recommend a disaster recovery solution for the back-end tier of the payment processing system. What should you include in the recommendation?

Correct Answer: an auto-failover group

You have an Azure Active Directory (Azure AD) tenant. You plan to provide users with access to shared files by using Azure Storage. The users will be provided with different levels of access to various Azure file shares based on their user account or their group membership. You need to recommend which additional Azure services must be used to support the planned deployment. What should you include in the recommendation?

Correct Answer: an Azure AD Domain Services (Azure AD DS) instance

You have an Azure virtual machine named VM1 that runs Windows Server 2019 and contains 500 GB of data files. You are designing a solution that will use Azure Data Factory to transform the data files, and then load the files to Azure Data Lake Storage. What should you deploy on VM1 to support the design?

Correct Answer: the self-hosted integration runtime

You need to recommend a high-availability solution for the middle tier of the payment processing system. What should you include in the recommendation?

Correct Answer: availability zones

You need to recommend a strategy for the web tier of WebApp1. The solution must minimize costs. What should you recommend?

Correct Answer: Configure the Scale Out settings for a web app.

You are developing a sales application that will contain several Azure cloud services and will handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using REST messages. What should you include in the recommendation?

Correct Answer: Azure Service Bus

You plan to migrate App1 to Azure. You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 data. The solution must meet the security and compliance requirements. What should you include in the recommendation?

Correct Answer: a private endpoint

You are reviewing an Azure architecture as shown in the Architecture exhibit. (Click the Architecture tab.) The estimated monthly costs for the architecture are shown in the Costs exhibit. (Click the Costs tab.) The log files are generated by user activity to Apache web servers. The log files are in a consistent format. Approximately 1 GB of logs are generated per day. Microsoft Power BI is used to display weekly reports of the user activity. You need to recommend a solution to minimize costs while maintaining the functionality of the architecture. What should you recommend?

Correct Answer: Replace Azure Data Factory with CRON jobs that use AzCopy.

You have an Azure Storage account that contains the data shown in the following exhibit. You need to identify which files can be accessed immediately from the storage account. Which files should you identify?

Correct Answer: File1.bin and File2.bin only

You plan to migrate App1 to Azure. The solution must meet the authentication and authorization requirements. Which type of endpoint should App1 use to obtain an access token?

Correct Answer: Azure Instance Metadata Service (IMDS)

A company has a hybrid ASP.NET Web API application that is based on a software as a service (SaaS) offering. Users report general issues with the data. You advise the company to implement live monitoring and use ad hoc queries on stored JSON data. You also advise the company to set up smart alerting to detect anomalies in the data. You need to recommend a solution to set up smart alerting. What should you recommend?

Correct Answer: Azure Application Insights and Azure Monitor Logs

You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam, Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for the Microsoft 365 E5 plan. You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements: ✑ To the manager of the developers, send a monthly email message that lists the access permissions to Application1. ✑ If the manager does not verify an access permission, automatically revoke that permission. ✑ Minimize development effort. What should you recommend?

Correct Answer: In Azure Active Directory (Azure AD), create an access review of Application1.

You deploy Azure App Service Web Apps that connect to on-premises Microsoft SQL Server instances by using Azure ExpressRoute. You plan to migrate the SQL Server instances to Azure. Migration of the SQL Server instances to Azure must: ✑ Support automatic patching and version updates to SQL Server. ✑ Provide automatic backup services. ✑ Allow for high-availability of the instances. ✑ Provide a native VNET with private IP addressing. ✑ Encrypt all data in transit. ✑ Be in a single-tenant environment with dedicated underlying infrastructure (compute, storage). You need to migrate the SQL Server instances to Azure. Which Azure service should you use?

Correct Answer: Azure SQL Database Managed Instance

You have a .NET web service named Service1 that has the following requirements: ✑ Must read and write temporary files to the local file system. ✑ Must write to the Application event log. You need to recommend a solution to host Service1 in Azure. The solution must meet the following requirements: ✑ Minimize maintenance overhead. ✑ Minimize costs. What should you include in the recommendation?

Correct Answer: an Azure virtual machine scale set

You are designing a microservices architecture that will support a web application. The solution must meet the following requirements: ✑ Allow independent upgrades to each microservice. ✑ Deploy the solution on-premises and to Azure. ✑ Set policies for performing automatic repairs to the microservices. ✑ Support low-latency and hyper-scale operations. You need to recommend a technology.

Correct Answer: Azure Service Fabric

Your company has the infrastructure shown in the following table. The on-premises Active Directory domain syncs to Azure Active Directory (Azure AD). Server1 runs an application named App1 that uses LDAP queries to verify user identities in the on-premises Active Directory domain. You plan to migrate Server1 to a virtual machine in Subscription1. A company security policy states that the virtual machines and services deployed to Subscription1 must be prevented from accessing the on-premises network. You need to recommend a solution to ensure that App1 continues to function after the migration. The solution must meet the security policy. What should you include in the recommendation?

Correct Answer: Azure AD Domain Services (Azure AD DS)

You are designing a SQL database solution. The solution will include 20 databases that will be 20 GB each and have varying usage patterns. You need to recommend a database platform to host the databases. The solution must meet the following requirements: ✑ The compute resources allocated to the databases must scale dynamically. ✑ The solution must meet an SLA of 99.99% uptime. ✑ The solution must have reserved capacity. ✑ Compute charges must be minimized. What should you include in the recommendation?

Correct Answer: an elastic pool that contains 20 Azure SQL databases

Your company uses Microsoft System Center Service Manager on its on-premises network. You plan to deploy several services to Azure. You need to recommend a solution to push Azure service health alerts to Service Manager. What should you include in the recommendation?

Correct Answer: IT Service Management Connector (ITSM)

You plan to deploy an application named App1 that will run on five Azure virtual machines. Additional virtual machines will be deployed later to run App1. You need to recommend a solution to meet the following requirements for the virtual machines that will run App1: ✑ Ensure that the virtual machines can authenticate to Azure Active Directory (Azure AD) to gain access to an Azure key vault, Azure Logic Apps instances, and an Azure SQL database. ✑ Avoid assigning new roles and permissions for Azure services when you deploy additional virtual machines. ✑ Avoid storing secrets and certificates on the virtual machines. ✑ Minimize administrative effort for managing identities. Which type of identity should you include in the recommendation?

Correct Answer: a user-assigned managed identity

You have an app named App1 that uses two on-premises Microsoft SQL Server databases named DB1 and DB2. You plan to migrate DB1 and DB2 to Azure. You need to recommend an Azure solution to host DB1 and DB2. The solution must meet the following requirements: ✑ Support server-side transactions across DB1 and DB2. ✑ Minimize administrative effort to update the solution. What should you recommend?

Correct Answer: two Azure SQL databases on the same Azure SQL Database managed instance

You use Azure virtual machines to run a custom application that uses an Azure SQL Database instance on the back end. The IT department at your company recently enabled forced tunneling. Since the configuration change, developers have noticed degraded performance when they access the database from the Azure virtual machine. You need to recommend a solution to minimize latency when accessing the database. The solution must minimize costs. What should you include in the recommendation?

Correct Answer: Always On availability groups

You have an Azure SQL database named DB1 that contains multiple tables. You need to improve the performance of DB1. The solution must minimize administrative effort. What should you use?

Correct Answer: automatic tuning

You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service (AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines. The virtual machines and the AKS cluster will reside on the same virtual network. You need to design a solution to expose the microservices to the consumer apps. The solution must meet the following requirements: ✑ Ingress access to the microservices must be restricted to a single private IP address and protected by using mutual TLS authentication. ✑ The number of incoming microservice calls must be rate-limited. ✑ Costs must be minimized. What should you include in the solution?

Correct Answer: Azure API Management Premium tier with virtual network connection

You plan to create an Azure Cosmos DB account that uses the SQL API. The account will contain data added by a web application. The web application will send data daily. You need to recommend a notification solution that meets the following requirements: ✑ Sends email notifications when data is received from the web application ✑ Minimizes compute cost What should you include in the recommendation?

Correct Answer: Deploy a function app that is configured to use the Consumption plan and a SendGrid binding.

Welcome to awslagi.com – Sharing AWS, Google Cloud, Microsoft Azure IT Exams. It's free for all!

Microsoft Azure Architect Design

Design Azure architect solutions for business outcomes.

4.8★★★★★(245 ratings)

20,941 studentsIntermediate

Strengthen your ability to design complete Azure solutions that match business requirements. The exam focuses on solution architecture, governance, security, and operational design across cloud workloads. This certification helps you move from technical implementation into broader solution leadership. It shows you can think holistically about Azure systems and their business impact.

What you'll learn

Design end-to-end solutions- Plan governance and security- Support business objectives- Optimize architecture choices- Improve cloud resiliency

AZ-304

Lectures2

Quizzes0

Duration30 week

Students20,941

$20.00

📢 Unlock Full Access to Success!

"The content displayed here is a promotional preview and contains only 50% of the actual exam database. To access the complete set of updated questions, please upgrade to the Full Version."

👉 Click the button and follow the instructions to secure your full access immediately!