Microsoft Certified: Azure Administrator Associate practice questions

240 free questions with answers and explanations.

Practice test
  1. 151.A company hosts a critical web application on multiple Azure virtual machines (VMs) behind an Azure Standard Load Balancer. The application experiences intermittent performance degradation, and you suspect that some backend VMs are becoming unhealthy. You need to configure a health probe to automatically remove unhealthy VMs from the load balancer rotation.Deploy and manage Azure compute resources
  2. 152.A company is deploying several Azure Virtual Machines (VMs) that will host a stateful application. The application requires that if a VM fails, another VM with the exact same configuration and data should automatically become available with minimal downtime. The solution must provide high availability within a single Azure region. Which Azure feature should you use to achieve this?Deploy and manage Azure compute resources
  3. 153.You manage an Azure Virtual Machine Scale Set (VMSS) that hosts a globally distributed, high-traffic web application. The application experiences fluctuating load throughout the day, with peak times requiring significantly more compute resources. You need to configure the VMSS to automatically scale out and scale in based on CPU utilization to optimize cost and performance.Deploy and manage Azure compute resources
  4. 154.A solutions architect is designing a highly available and scalable web application on Azure. The application will be deployed across multiple Azure Virtual Machines (VMs) and must be accessible via a single public IP address. Additionally, the solution requires advanced traffic management capabilities, such as SSL termination, web application firewall (WAF) protection, and URL-based routing. Which Azure service should the architect recommend to meet these requirements?Deploy and manage Azure compute resources
  5. 155.A company is deploying a new containerized application to Azure that requires robust networking features, including custom DNS resolution, fine-grained network policies, and integration with an existing Azure Virtual Network (VNet). The development team also needs a platform that offers full control over the container orchestration environment. Which Azure compute service should they choose?Deploy and manage Azure compute resources
  6. 156.A company wants to migrate an existing on-premises application that runs on a Windows Server VM to Azure. The application requires specific registry settings and custom installed components that are not available in standard Azure Marketplace images. You need to create an Azure virtual machine that includes all these configurations and can be used as a template for future deployments.Deploy and manage Azure compute resources
  7. 157.A company needs to deploy a highly available web application to Azure. The application's backend consists of several stateless APIs. You want to ensure automatic scaling, zero-downtime deployments, and integrated monitoring. You also need to control costs by scaling to zero when not in use.Deploy and manage Azure compute resources
  8. 158.A company is migrating an existing on-premises application to Azure. The application currently runs on a Windows Server 2019 VM and has several custom configurations and installed software that are difficult to automate via scripts. To streamline the migration and ensure consistency, you need to create a reusable template that includes the OS, custom configurations, and pre-installed software. Which Azure feature should you use?Deploy and manage Azure compute resources
  9. 159.You are deploying a new Azure Virtual Machine (VM) that will host a critical database. The database requires extremely low-latency disk performance and needs to support the highest possible IOPS. Which Azure VM disk type should you select to meet these requirements?Deploy and manage Azure compute resources
  10. 160.You need to automate the deployment of several Azure virtual machines (VMs) that will host a web application. Each VM requires the same operating system, specific software installations, and a unique hostname. You want to ensure consistency and minimize manual configuration.Deploy and manage Azure compute resources
  11. 161.A company is deploying several Azure Virtual Machines (VMs) that will host a critical application. The application requires high availability and resilience to hardware failures within an Azure region. The VMs must be distributed across different physical hardware, fault domains, and update domains within the same datacenter to minimize downtime during planned or unplanned maintenance. Which Azure feature should be used to meet these requirements?Deploy and manage Azure compute resources
  12. 162.You are managing an Azure Virtual Machine (VM) running a critical database. The VM needs to be restarted nightly for maintenance, but it must always come back online with the same public IP address to avoid reconfiguring client applications. Which type of public IP address allocation should be assigned to the VM?Deploy and manage Azure compute resources
  13. 163.A company is deploying a new web application to Azure and requires a compute solution that offers high scalability, automatic patching, and minimal administrative overhead for the underlying infrastructure. The application is stateless and can be deployed as a container. Which Azure compute service should you recommend?Deploy and manage Azure compute resources
  14. 164.A development team needs to deploy a containerized application to Azure. The application is stateless, requires rapid scaling based on HTTP traffic, and needs to be able to scale down to zero instances during periods of inactivity to minimize costs. Which Azure compute service is best suited for this scenario?Deploy and manage Azure compute resources
  15. 165.An administrator needs to create multiple Azure Virtual Machines (VMs) that are identical, including the operating system, installed applications, and specific configurations. These VMs will be deployed frequently across different subscriptions within the same Azure Active Directory tenant. What is the most efficient method to achieve this goal?Deploy and manage Azure compute resources
  16. 166.You are deploying an Azure Virtual Machine (VM) that will run a specialized scientific computing application. This application requires specific hardware configurations, including a particular GPU model, which is only available in certain VM sizes. You need to ensure that the VM is deployed with this exact hardware to guarantee application compatibility and performance. Which aspect of VM deployment should you pay close attention to?Deploy and manage Azure compute resources
  17. 167.You are tasked with deploying an Azure Virtual Machine (VM) that must have a specific set of software pre-installed and configured, including a custom database client and a monitoring agent. This VM will be part of a larger application environment, and similar VMs will be deployed frequently. Which method should you use to ensure consistent and efficient deployment of these VMs?Deploy and manage Azure compute resources
  18. 168.A company is using Azure Container Instances (ACI) to run several batch processing jobs. Each job requires specific CPU and memory resources. You need to ensure that each container group is provisioned with the correct resources to complete its task efficiently without over-provisioning.Deploy and manage Azure compute resources
  19. 169.A company plans to deploy a new web application that consists of a web frontend and several backend API services. Each API service is containerized and needs to be deployed independently, scale automatically based on demand, and communicate securely with other services within the same environment. The company wants to minimize operational overhead while maintaining flexibility. Which Azure compute service is the most appropriate for this scenario?Deploy and manage Azure compute resources
  20. 170.A developer is deploying an Azure App Service Web App that needs to connect to an Azure SQL Database. The database is secured with a firewall rule that only allows connections from specific IP addresses. To ensure secure connectivity without exposing the App Service to the public internet, which networking feature should be configured for the App Service?Deploy and manage Azure compute resources
  21. 171.A company has an Azure Virtual Machine Scale Set (VMSS) running a web application. The application experiences fluctuating load throughout the day. To ensure optimal performance and cost efficiency, the VMSS must automatically scale out when the average CPU utilization across instances exceeds 70% for 10 minutes and scale in when it drops below 30% for 10 minutes. Which type of scaling should be configured?Deploy and manage Azure compute resources
  22. 172.A company is deploying a new application to Azure App Service. The application is sensitive and requires all outbound network traffic from the App Service to be routed through a firewall appliance hosted in a virtual network (VNet) for inspection and auditing. Which networking feature must be enabled and configured for the App Service?Deploy and manage Azure compute resources
  23. 173.You are managing an Azure Virtual Machine (VM) running a critical application. The application generates a large volume of diagnostic logs that need to be collected and analyzed centrally. You want to ensure that these logs are automatically exported to an Azure Storage account for long-term retention and further processing by an analytics tool. Which Azure VM extension should you use?Deploy and manage Azure compute resources
  24. 174.A company is deploying a new web application to Azure. The application's backend requires access to an on-premises SQL Server instance. The security team mandates that all traffic to on-premises resources must flow through a secure, private connection and not traverse the public internet. You plan to deploy the web application using Azure App Service. Which Azure networking feature should you implement to meet these requirements?Deploy and manage Azure compute resources
  25. 175.A developer needs to deploy a containerized application consisting of a web front-end and a backend API. Both containers need to share a local disk volume for temporary data and be managed as a single unit with a shared lifecycle. Which Azure compute service is the most appropriate for this scenario?Deploy and manage Azure compute resources
  26. 176.You are deploying an Azure Virtual Machine (VM) that will run a Linux-based web server. After the VM is provisioned, you need to automatically install Nginx, configure its default index page, and start the Nginx service. This automation should happen as part of the VM creation process. Which Azure feature should you use?Deploy and manage Azure compute resources
  27. 177.A company is deploying a new application that consists of a web frontend and a backend API. Both components are containerized. The company wants to deploy these containers together, ensuring they share a network and can communicate via localhost, and that their lifecycle is managed as a single unit. Which Azure Container Instances (ACI) deployment model should be used?Deploy and manage Azure compute resources
  28. 178.A company plans to deploy several Azure virtual machines (VMs) that will host a critical line-of-business application. The application requires high availability and must be resilient to datacenter-level failures. You need to recommend an Azure compute solution that meets these requirements.Deploy and manage Azure compute resources
  29. 179.A company is deploying a new web application to Azure. The application will be hosted on Azure App Service. The company requires that all outbound traffic from the App Service Plan is routed through a specific virtual network (VNet) to access on-premises resources and apply network security group rules. Which App Service VNet integration type should be used?Deploy and manage Azure compute resources
  30. 180.A company is using Azure Virtual Machine Scale Sets (VMSS) to host a web application. Due to varying traffic patterns, the application experiences significant spikes in demand during peak hours and very low usage overnight. To optimize costs and ensure performance, you need to configure the VMSS to automatically adjust the number of VM instances based on CPU utilization, and also scale down to a minimum number of instances during off-peak hours. Which VMSS feature should you implement?Deploy and manage Azure compute resources
  31. 181.A developer is writing code to interact with Azure Blob Storage. They need to retrieve a list of all blobs within a specific container that were last modified more than 30 days ago. Which method of authentication should the developer use for their application to ensure secure and granular access, following the principle of least privilege?Implement and manage storage
  32. 182.A company uses Azure Blob Storage to store archival data. They need to implement an immutable storage policy for certain critical blobs to protect them from accidental deletion or modification for a period of 7 years. After this period, the blobs should be automatically deleted. Which feature should be configured?Implement and manage storage
  33. 183.A company needs to implement a solution to store configuration files for several applications in Azure. The files are small, accessed frequently by multiple applications, and require low-latency access. You need to recommend the most suitable Azure storage service.Implement and manage storage
  34. 184.A company is implementing a new application that stores critical data in Azure Blob Storage. The data needs to be highly available and resilient to regional outages, with synchronous replication across multiple availability zones within a region. You need to select the appropriate redundancy option for the storage account.Implement and manage storage
  35. 185.A company is migrating a legacy application that stores files on a Windows SMB share to Azure. The application requires consistent low-latency access to files and uses a small, fixed set of files that are frequently updated. Which Azure storage solution would be the most cost-effective while meeting these performance requirements?Implement and manage storage
  36. 186.A company is configuring an Azure File Share to be accessed by both Windows and Linux virtual machines within an Azure Virtual Network. The solution must support identity-based authentication for both operating systems. You need to recommend the authentication method for the Azure File Share.Implement and manage storage
  37. 187.A company is using Azure File Shares for their departmental file storage. They want to connect to these file shares from on-premises Windows 10 client computers. To ensure secure and performant access, they decide to use Azure AD authentication for SMB. Which prerequisite must be configured on the on-premises Windows 10 client computers to enable this authentication method?Implement and manage storage
  38. 188.A security auditor requires that all Azure storage accounts containing sensitive data must be encrypted with 256-bit AES encryption at rest. Additionally, the encryption keys must be managed by the customer. You need to configure a new storage account to meet these requirements.Implement and manage storage
  39. 189.A developer is creating an Azure Function that needs to upload large files (up to 100 GB) directly to Azure Blob Storage. The function will be triggered by HTTP requests and must complete the upload efficiently. Which Azure Blob Storage feature should the developer use to ensure reliable and efficient large file uploads?Implement and manage storage
  40. 190.A company has an Azure storage account configured with a default access tier of Cool. They have a new requirement to store archived financial records that will be accessed very rarely, perhaps once a year, and can tolerate retrieval times of several hours. To minimize costs, which action should the administrator take?Implement and manage storage
  41. 191.A company is migrating an on-premises application that stores unstructured data to Azure Blob Storage. The application frequently accesses a subset of data (20%) daily, while the remaining 80% is accessed infrequently (less than once a month). Data must be immediately available for all access patterns. You need to configure the storage account to minimize costs while meeting availability requirements.Implement and manage storage
  42. 192.A developer needs to create a new Azure storage account that will host a static website. The website content is expected to grow over time, and the developer wants to ensure that the storage account can scale to accommodate petabytes of data with high throughput. Which type of storage account should be created?Implement and manage storage
  43. 193.A manufacturing company uses Azure File Sync to synchronize files between an on-premises Windows Server and an Azure file share. They report that changes made to files directly in the Azure file share are not immediately synchronizing back to the on-premises server. Changes made on-premises synchronize quickly. What is the most likely reason for this behavior?Implement and manage storage
  44. 194.An administrator needs to configure an Azure storage account to allow specific Azure virtual machines (VMs) located in a particular virtual network to access its blob containers, while blocking all other network traffic. The solution must be implemented with the least administrative effort and without exposing the storage account to the public internet. Which network access configuration should be applied?Implement and manage storage
  45. 195.A company is planning to implement Azure Blob Storage for storing large amounts of unstructured data. They have a strict requirement that all data at rest must be encrypted using customer-managed keys (CMK) stored in Azure Key Vault. Which encryption option should be configured for the storage account?Implement and manage storage
  46. 196.A company is migrating an on-premises application that uses a local file system for shared storage to Azure. The application requires SMB access and must support both Windows and Linux clients. The solution needs to minimize latency for frequently accessed files and provide high availability within a single Azure region. Which Azure Storage solution should you recommend?Implement and manage storage
  47. 197.A developer is building a new application that will store images in Azure Blob Storage. The application needs to generate shared access signatures (SAS) for temporary, time-limited access to specific blobs for users. You need to recommend the most secure and granular method for generating these SAS tokens.Implement and manage storage
  48. 198.A company is implementing geo-redundant storage for their critical application data in Azure. They need to ensure data durability even in the event of a regional outage, with the ability to read data from the secondary region. Which redundancy option meets these requirements?Implement and manage storage
  49. 199.A company is deploying a new web application that will store user-generated content, including images and videos, in Azure Blob Storage. They anticipate frequent read access to this content and require the lowest possible latency for retrieval. Which Azure Blob Storage access tier should they choose for optimal performance in this scenario?Implement and manage storage
  50. 200.A company uses Azure Blob Storage to store application logs. The logs are generated continuously and need to be archived for compliance reasons for 7 years. During this 7-year period, the logs are rarely accessed, but when they are, they must be retrieved within a few hours. After 7 years, the logs must be permanently deleted. You need to configure a lifecycle management policy for the storage account.Implement and manage storage