AZ 305 New study

A company needs to migrate a simple web application from on-premises to Azure. The application is stateless and can handle horizontal scaling. What is the simplest Azure compute option to deploy this application? A) Azure App Service B) Azure Virtual Machines C) Azure Kubernetes Service (AKS) D) Azure Container Instances

A

A retail company requires 99.9% availability for their critical database. What is the minimum number of replicas needed for Azure SQL Database to achieve this SLA? A) 1 replica (primary only) B) 2 replicas (primary + secondary with automatic failover) C) 3 replicas (for quorum consensus) D) 5 replicas (for high redundancy)

B

An organization needs to store data with compliance requirement: data must never leave a specific region. Which Azure Storage redundancy option meets this requirement? A) Locally Redundant Storage (LRS) B) Geo-Redundant Storage (GRS) C) Zone-Redundant Storage (ZRS) D) Read-Access Geo-Redundant Storage (RA-GRS)

A

A company experiences unpredictable traffic spikes and wants to avoid over-provisioning. Which Azure service provides automatic scaling without managing servers? A) Azure Virtual Machines B) Azure App Service with Standard tier C) Azure Functions (Consumption plan) D) Azure Kubernetes Service (AKS)

C

A financial institution requires encryption of data at rest across all Azure services. What is the default encryption behavior in Azure? A) All data encrypted at rest by default using Microsoft-managed keys B) Data only encrypted if customer explicitly enables encryption C) Data requires customer-managed keys for encryption D) Encryption is not available for all Azure services

A

A company wants to reduce costs for a predictable, baseline workload. What Azure purchasing option provides the greatest discount? A) Pay-as-you-go B) 3-year Reserved Instances C) 1-year Reserved Instances D) Spot instances

B

A manufacturing company runs batch jobs that process overnight data. The jobs can tolerate delays and don't need constant availability. What is the most cost-effective compute option? A) Azure Virtual Machines (always on) B) Azure Batch with low-priority VMs C) Azure App Service Premium tier D) Azure Kubernetes Service (AKS)

B

A healthcare provider needs to ensure business continuity if a primary region fails. What is the minimum RTO/RPO requirement to achieve 99.9% availability? A) RTO: 24 hours, RPO: 24 hours B) RTO: 1 hour, RPO: 1 hour (approximately) C) RTO: 15 minutes, RPO: 15 minutes D) RTO: 5 minutes, RPO: 5 minutes

B

A company needs to select between App Service vs. Container Instances for their application. The application runs continuously with predictable traffic. Which is more cost-effective? A) App Service (continuous operation, lower per-hour cost) B) Container Instances (better for continuous workloads) C) Both cost the same for continuous operation D) Depends entirely on the programming language

A

A startup needs a NoSQL database for rapidly evolving schema. What Azure database service is best suited for this requirement? A) Azure SQL Database B) Azure SQL Managed Instance C) Azure Cosmos DB D) Azure Database for PostgreSQL

C

An organization requires high-speed, low-latency access to on-premises data from Azure applications. What should they implement? A) Site-to-Site VPN B) ExpressRoute C) Internet connection D) Public IP addresses

B

A company stores sensitive customer data in Azure Blob Storage and needs to prevent accidental deletion. What should they enable? A) Encryption at rest B) Soft delete for blobs C) Immutable storage D) Archive tier

B

A retail company has customers globally distributed and needs <100ms latency for all regions. What architecture pattern should they implement? A) Single region deployment with CDN B) Multi-region deployment with Azure Front Door C) Single region with ExpressRoute D) Multi-region with manual failover

B

An organization uses Azure SQL Database and needs point-in-time recovery for the past 35 days. What is the default retention period? A) 7 days (automatic backups included) B) 35 days (automatic backups included) C) 7 days (requires manual backup configuration) D) Unlimited (automatic backups included)

B

A company needs to monitor virtual machine CPU and memory usage to create alerts. What Azure service provides this capability? A) Azure Monitor B) Azure Advisor C) Azure Application Insights D) Azure Log Analytics only

A

A manufacturing company needs to integrate on-premises systems with cloud applications. What is the recommended approach for secure, hybrid connectivity? A) Internet connection with firewall B) Site-to-Site VPN or ExpressRoute C) Public IP addresses D) Azure CDN

B

A company implements Azure virtual networks and needs to connect two VNets in the same region. What should they use? A) VNet peering B) Site-to-Site VPN C) ExpressRoute D) Application Gateway

A

A healthcare organization requires HIPAA-compliant infrastructure. What must they implement for compliance? A) Only encryption at rest B) Encryption at rest, encryption in transit, audit logging, access controls C) Only encryption in transit D) Firewall only

B

A company has existing Microsoft licenses and wants to reduce cloud costs. What Azure program allows them to bring existing licenses? A) Azure Free account B) Azure Hybrid Benefits C) Enterprise discount program D) Pay-as-you-go discount

B

A startup experiences rapid growth and needs infrastructure that scales automatically. Which compute service best supports this requirement? A) Single Azure Virtual Machine B) Azure Kubernetes Service (AKS) with autoscaling C) Azure Batch D) Azure App Service Standard tier only

B

A company runs legacy monolithic application that cannot be containerized. What Azure compute option is most suitable? A) Azure Container Instances B) Azure Kubernetes Service (AKS) C) Azure Virtual Machines D) Azure Functions

C

An organization needs to share files between on-premises and cloud locations with SMB protocol support. What should they deploy? A) Azure Blob Storage B) Azure Files C) Azure Data Lake Storage D) Azure Table Storage

B

A company needs real-time analytics on streaming data. What Azure service processes streaming data with low latency? A) Azure Data Lake Storage B) Azure Stream Analytics C) Azure Batch D) Azure Synapse Analytics only

B

An organization implements Role-Based Access Control (RBAC). What is the minimum permission required for users to deploy resources? A) Reader role B) Virtual Machine Contributor role C) Contributor role at subscription level D) Owner role only

C

A company needs automated backups for all virtual machines across multiple subscriptions. What should they implement? A) Manual snapshots B) Azure Backup with a Recovery Services vault C) Azure Site Recovery only D) Storage account backup

B

A retailer needs to cache frequently accessed data to reduce database load. What Azure service provides in-memory caching? A) Azure Content Delivery Network (CDN) B) Azure Cache for Redis C) Azure Storage accounts D) Azure SQL Database in-memory tables

B

A company requires disaster recovery with minimal data loss. What should they implement? A) Continuous replication with automated failover (Site Recovery or failover groups) B) Weekly manual backups C) Daily snapshots D) No redundancy

A

An organization uses multiple Azure subscriptions and needs centralized billing and governance. What should they implement? A) Azure Policy only B) Management Groups C) Cost Management only D) Blueprints only

B

A company needs to store unstructured data (documents, images) at lowest cost for archived data. What Azure Storage tier should they use? A) Hot tier B) Cool tier C) Archive tier D) Premium tier

C

A startup develops a REST API that needs to be consumed by multiple clients. What should they implement for API management and throttling? A) Azure Load Balancer B) Azure API Management C) Azure Front Door D) Azure Application Gateway

B

A company implements DDoS protection requirements. What Azure service provides DDoS protection at the edge? A) Azure DDoS Protection Standard B) Network Security Groups (NSGs) C) Azure Firewall D) Azure Virtual Network only

A

An organization needs to ensure all databases are encrypted and meet compliance requirements. What should they implement? A) Enable encryption manually on each database B) Azure Policy with encryption requirements C) Database-specific encryption only D) No specific policy needed

B

A company runs stateful applications requiring persistent storage in Kubernetes. What storage option is most appropriate? A) Ephemeral container storage B) Azure Managed Disks attached to pods C) Local node storage D) Network shares only

B

A healthcare provider needs to store 10 years of patient records (compliance requirement) with minimal access. What storage tier is most cost-effective? A) Hot tier B) Cool tier C) Archive tier D) Premium tier

C

An organization implements Azure SQL Database with read-heavy workload. What should they deploy to improve read performance? A) Upgrade to Premium tier only B) Read replicas or read scale-out feature C) Increase backup frequency D) Add more storage

B

A company needs to replicate virtual machines to a secondary region for disaster recovery. What Azure service automatically orchestrates the replication? A) Azure Site Recovery B) Azure Backup C) Azure Storage replication D) Azure DevOps

A

A startup needs serverless application infrastructure without managing servers. What is the recommended approach? A) Azure Virtual Machines B) Azure Functions + Azure App Service (or other PaaS services) C) Azure Kubernetes Service (AKS) D) Azure Container Instances

B

An organization requires encryption of passwords and API keys. What Azure service is designed for secret management? A) Application configuration files B) Azure Key Vault C) Azure Storage accounts D) Azure Service Bus

B

A company experiences unplanned costs due to untracked resources. What should they implement for cost visibility? A) Remove unused resources randomly B) Azure Cost Management and Billing with resource tagging C) Reduce all services D) Use only free services

B

A retailer needs to distribute traffic across multiple web servers to improve availability. What should they implement? A) DNS round-robin only B) Azure Load Balancer or Application Gateway C) Manual traffic distribution D) Single server with high capacity

B

An organization implements compliance requirement: all network traffic must be inspected. What should they deploy? A) Network Security Groups (NSGs) only B) Azure Firewall C) Service Endpoints only D) No inspection needed

B

A company needs to log all administrative actions on Azure resources for compliance audit trail. What should they enable? A) Application logs only B) Azure Activity Log and Log Analytics C) Virtual machine event logs D) No logging needed

B

A healthcare provider needs to ensure rapid recovery from ransomware attack. What backup strategy is most effective? A) Single backup copy in primary region B) Immutable backup copies in separate location C) No backup needed D) Manual daily backups

B

A startup needs to quickly deploy infrastructure based on templates. What should they use? A) Manually create each resource B) Azure Resource Manager (ARM) templates or Infrastructure as Code C) Azure Portal only D) Copy from existing subscriptions

B

An organization requires geo-redundancy for their database. Which Azure SQL Database option provides automatic geo-replication? A) Single database without replication B) Failover groups (geo-replication with automatic failover) C) Manual backup only D) No redundancy available

B

A company needs to monitor thousands of resources across multiple subscriptions. What Azure service provides unified monitoring? A) Single subscription monitoring B) Azure Monitor with Log Analytics workspace C) Manual resource checks D) No centralized monitoring

B

A retailer needs customer data to be available in multiple regions with low replication lag. What should they implement? A) Manual data copying B) Cosmos DB with multi-region writes or SQL Database with geo-replication C) Single region deployment D) No replication needed

B

An organization implements virtual networks and needs to block specific traffic between subnets. What should they configure? A) Nothing (all traffic allowed by default) B) Network Security Groups (NSGs) C) Public IP addresses D) Load Balancer rules

B

A company needs to ensure all storage accounts are private (no public access). What should they implement? A) Firewall rules only B) Azure Policy to require Private Endpoints C) Accept public access D) No specific requirement

B

A healthcare organization requires compliance with HIPAA. What is the minimum encryption requirement? A) Encryption at rest only B) Encryption in transit only C) Encryption in transit and at rest D) No encryption required

C

A startup needs automated deployment of applications across multiple environments. What should they implement? A) Manual deployment process B) Azure DevOps with CI/CD pipelines C) Manual copy and paste files D) Single manual deployment

B

An organization requires database backup with specific retention periods per compliance. What should they configure? A) No specific backup policy B) Azure Backup with tiered retention policy C) Manual backups only D) Single backup copy

B

A company implements Azure Virtual Machines and needs to minimize downtime during OS updates. What should they use? A) Single VM with no protection B) Availability sets or Availability zones C) Manual backup before updates D) No protection needed

B