Step2Study

Microsoft Certified: Azure Solutions Architect Expert practice questions

230 free questions with answers and explanations.

Practice test
  1. 1.A software development company uses Azure DevOps for its source code management and CI/CD pipelines. They host a self-hosted Azure DevOps agent on an Azure Virtual Machine. The company needs to ensure that the agent VM can be recovered quickly in case of an outage or corruption, with a minimal loss of work. The agent VM stores configuration files and temporary build artifacts. The RPO must be less than 1 hour and RTO less than 4 hours. Which backup solution should be implemented for the Azure DevOps agent VM?Design business continuity solutions
  2. 2.A global e-commerce platform relies on Azure Kubernetes Service (AKS) clusters deployed in multiple regions to serve its customers. The platform needs to ensure that if an entire Azure region becomes unavailable, traffic is automatically redirected to the nearest healthy region. Which Azure service should be used to achieve this global traffic redirection and high availability for the AKS clusters?Design business continuity solutions
  3. 3.A healthcare organization is migrating its on-premises SQL Server databases to Azure. These databases contain highly sensitive patient data and require a backup solution that ensures data immutability for 7 years to meet regulatory compliance, preventing any modification or deletion of backups during this period. Which Azure service should be used?Design business continuity solutions
  4. 4.A multinational corporation uses Azure Virtual Machines to host its critical ERP system. The company requires a robust disaster recovery solution that can recover the entire application environment, including VMs, networks, and storage, to a secondary Azure region with an RTO of less than 2 hours and an RPO of less than 15 minutes. The solution must be automated and orchestrated. Which Azure service should be implemented?Design business continuity solutions
  5. 5.A global media company uses Azure for its content delivery network (CDN) and streaming services. They need to monitor the performance and availability of their CDN endpoints, track user-perceived performance, and analyze logs for potential security threats. The solution must provide real-time alerts and integrate with their existing incident management system. Which Azure monitoring service should be primarily used to meet these requirements?Design identity, governance, and monitoring solutions
  6. 6.A company is migrating its file shares to Azure. The files are critical business documents and require a highly available solution that can be accessed from on-premises servers and Azure VMs. Data must be resilient to zone-level failures within the Azure region. Which Azure service and redundancy option should be chosen?Design business continuity solutions
  7. 7.A global manufacturing company is deploying a new IoT solution on Azure to monitor factory equipment. They need to collect telemetry data from thousands of devices, process it in real-time, and store it for long-term analysis. The solution must be highly scalable, handle intermittent connectivity from devices, and allow for bi-directional communication (device-to-cloud and cloud-to-device). Which Azure service should be used as the central hub for device connectivity and management?Design identity, governance, and monitoring solutions
  8. 8.A global manufacturing company is deploying a new IoT solution on Azure to monitor factory equipment. They need to collect telemetry data from thousands of devices, process it in real-time, and store it for historical analysis. The solution must also provide insights into equipment health and predict potential failures. Which combination of Azure services should be used for monitoring and data ingestion?Design identity, governance, and monitoring solutions
  9. 9.A financial services company is developing a new serverless application on Azure that uses Azure Functions to process transactions. The application needs to store sensitive audit logs in a dedicated Azure Storage Account. To meet compliance requirements, all data written to the storage account must be encrypted at rest, and access to the storage account must be restricted to only the Azure Functions application, using a highly secure and auditable method that avoids managing connection strings. Which combination of features ensures this security posture?Design identity, governance, and monitoring solutions
  10. 10.A company is designing a highly available solution for a stateless web application running on Azure Virtual Machine Scale Sets. The application must remain available even if an entire Azure Availability Zone fails. Which high availability strategy should be implemented?Design business continuity solutions
  11. 11.A global e-commerce company operates its primary web application from a single Azure region. Due to recent growth, the company wants to ensure that its application remains available even if an entire Azure region experiences a major outage. The application uses Azure App Service for its front end, Azure SQL Database for its primary data store, and Azure Storage for static content. The company requires a recovery time objective (RTO) of less than 4 hours and a recovery point objective (RPO) of less than 15 minutes. Which disaster recovery strategy should the company implement for its Azure SQL Database to meet these requirements?Design business continuity solutions
  12. 12.A financial institution is migrating its applications to Azure. They require a highly secure authentication solution for their critical applications that mandates multi-factor authentication (MFA) and provides conditional access based on user location, device compliance, and sign-in risk. The solution must integrate seamlessly with Azure AD. Which Azure AD feature should be designed to achieve these requirements?Design identity, governance, and monitoring solutions
  13. 13.A research laboratory is using Azure to host a high-performance computing (HPC) cluster. They need to collect detailed performance metrics (CPU, memory, disk I/O) and logs from both Windows and Linux virtual machines within the cluster. This data must be sent to a central Log Analytics workspace for analysis. Which agent should be installed on the virtual machines to achieve this?Design identity, governance, and monitoring solutions
  14. 14.A global media company uses Azure Blob Storage to store large video files that are accessed frequently by users worldwide. The company requires maximum data durability, immediate accessibility, and protection against regional outages. Data must be replicated to a secondary region and across multiple availability zones within both the primary and secondary regions. Which Azure Storage redundancy option should be selected?Design business continuity solutions
  15. 15.A global manufacturing company uses Azure Virtual Machines to host its critical ERP system. The company requires a recovery point objective (RPO) of 4 hours and a recovery time objective (RTO) of 8 hours. The solution must provide disaster recovery capabilities to a secondary Azure region. Which Azure service should be used to meet these requirements?Design business continuity solutions
  16. 16.A financial institution is deploying a new web application in Azure that will process highly sensitive customer data. They need to ensure that the application can securely access other Azure services, such as Azure Key Vault and Azure SQL Database, without storing credentials directly in the application's code. The application runs on Azure App Service. How should the application be authenticated to Azure services?Design identity, governance, and monitoring solutions
  17. 17.A global manufacturing company with existing on-premises Active Directory (AD) requires a hybrid identity solution for its Azure environment. Users must be able to log in to Azure resources using their existing on-premises credentials. The solution must support single sign-on (SSO) and synchronize user accounts and password hashes to Azure AD, without requiring any dedicated servers in the perimeter network (DMZ) for authentication. Which authentication solution should be implemented?Design identity, governance, and monitoring solutions
  18. 18.A global e-commerce platform relies on Azure Kubernetes Service (AKS) clusters deployed in multiple Azure regions to serve its customers. To optimize user experience, the company wants to ensure that user requests are routed to the closest healthy AKS cluster. Additionally, in case of a regional outage, traffic should automatically fail over to the next available region. Which Azure service should be used to achieve this global traffic routing and failover?Design business continuity solutions
  19. 19.A software development company is building a new microservices application in Azure. Each microservice needs to securely communicate with other services and Azure resources (e.g., Azure Key Vault, Azure SQL Database) without managing credentials in code. The security team mandates that the identity for each service should be managed by Azure AD and automatically rotated. Which Azure AD feature should be used to assign identities to these microservices?Design identity, governance, and monitoring solutions
  20. 20.A company is designing a new Azure solution that requires a highly available database. The database must support read and write operations across multiple Azure regions with automatic failover and minimal data loss in the event of a regional outage. Which Azure database service best meets these requirements?Design business continuity solutions
  21. 21.A financial services company is migrating its on-premises data center to Azure. They have several critical applications running on Windows Server VMs that require highly available file shares for user profiles and application data. The company needs to ensure that these file shares are accessible even if a single data center in an Azure region becomes unavailable. The solution must provide strong consistency and be easily manageable. Which Azure storage solution should the company choose for these file shares?Design business continuity solutions
  22. 22.A software company is developing a multi-tenant SaaS application on Azure. Each customer (tenant) has its own set of users and requires isolation of identity data. The application needs to authenticate users from various organizations, potentially using their existing corporate identities (e.g., Azure AD, Google, Facebook). Which Azure AD feature is best suited for this multi-tenant identity requirement?Design identity, governance, and monitoring solutions
  23. 23.A company is designing a high availability solution for its critical API backend hosted on Azure Kubernetes Service (AKS). The solution must ensure that the API remains available even if a single Azure region experiences a complete outage. Which approach should be taken?Design business continuity solutions
  24. 24.A global e-commerce company uses Azure to host its customer-facing web application. They need to ensure that only traffic from their corporate network and specific trusted partner networks can access the application's backend APIs hosted on Azure App Service. Additionally, they must prevent direct public internet access to these backend APIs. Which Azure networking and security features should be combined to achieve this?Design identity, governance, and monitoring solutions
  25. 25.A global e-commerce platform relies on Azure Kubernetes Service (AKS) clusters deployed in multiple Azure regions for high availability. The platform needs to distribute incoming user traffic across these regionally deployed AKS clusters and ensure that users are always routed to the closest healthy cluster. Additionally, the solution must provide Web Application Firewall (WAF) capabilities. Which combination of Azure services should be used?Design business continuity solutions
  26. 26.A healthcare organization requires a backup solution for its on-premises SQL Server databases before migrating them to Azure. The solution must support point-in-time recovery and encrypt backups at rest. Which Azure service should be used?Design business continuity solutions
  27. 27.A global media company uses Azure for its content delivery network (CDN) and streaming services. They need to analyze log data from various Azure resources, including web servers, databases, and network components, to identify performance bottlenecks, security threats, and operational issues. The solution must support custom queries and provide long-term retention. Which Azure service should be used?Design identity, governance, and monitoring solutions
  28. 28.A small business needs a cost-effective backup solution for its Azure Virtual Machines. The VMs host non-critical development environments, and a daily backup is sufficient. The Recovery Point Objective (RPO) can be up to 24 hours. Which Azure service is most appropriate for this scenario?Design business continuity solutions
  29. 29.A healthcare organization is migrating its patient records system to Azure. The system requires that all data stored in Azure SQL Database must be encrypted at rest and in transit. Additionally, the organization needs to implement row-level security to ensure that doctors can only view patient records relevant to their assigned patients, and auditors can only view a subset of columns for all patients. Which combination of Azure SQL Database features should be implemented?Design identity, governance, and monitoring solutions
  30. 30.A company is designing a highly available solution for a critical web application. The application's backend consists of stateless microservices deployed on Azure Kubernetes Service (AKS) clusters. To minimize downtime during updates and ensure resilience against zone-wide outages, the company wants to deploy the AKS cluster across multiple Availability Zones within a single Azure region. Which AKS feature should be enabled to meet this requirement?Design business continuity solutions
  31. 31.A healthcare provider is migrating its on-premises SQL Server databases to Azure. These databases contain highly sensitive patient data and require a backup solution that supports long-term retention (up to 10 years) and granular point-in-time recovery. The existing on-premises backup strategy uses SQL Server native backups. Which Azure service should be recommended for migrating and managing these backups in Azure?Design business continuity solutions
  32. 32.A media company uses Azure Blob Storage for archiving large video files. These files are rarely accessed but must be retained for 7 years for compliance. The company wants the most cost-effective storage tier and a backup solution that meets the retention policy. Which Azure Blob Storage tier and backup strategy should be implemented?Design business continuity solutions
  33. 33.A global media company uses Azure Blob Storage to store large video files that are frequently accessed by users worldwide. The company requires maximum durability and availability, even in the event of a regional outage. Data consistency is important but eventual consistency is acceptable for reads from the secondary region. Which Azure Storage redundancy option should be selected for the storage account?Design business continuity solutions
  34. 34.An application relies on an Azure Function App that processes messages from an Azure Service Bus queue. To ensure the Function App remains available during regional outages, the company needs a disaster recovery strategy. Which strategy ensures the Function App can continue processing messages in another region?Design business continuity solutions
  35. 35.A global financial institution uses Azure for its critical trading applications. The institution requires a backup solution for its Azure SQL Database instances that allows for granular, self-service recovery of individual tables and stored procedures, with a recovery point objective (RPO) of 1 hour. Which Azure service should be recommended to meet these requirements?Design business continuity solutions
  36. 36.A government agency is deploying a highly sensitive application to Azure. They require that access to the application is only granted from managed devices that meet specific security standards, and only when users are connecting from within the corporate network or via a compliant VPN connection. Users attempting to access from unmanaged devices or untrusted locations must be blocked. Which Azure service should be configured to enforce these access policies?Design identity, governance, and monitoring solutions
  37. 37.A financial services company needs to store highly sensitive customer data in Azure Blob Storage. The data must be immutable for a period of 7 years to comply with regulatory requirements. Additionally, the data should be immediately accessible for auditing purposes throughout this retention period. Which Azure Blob Storage feature should be used?Design business continuity solutions
  38. 38.A multinational corporation is deploying a sensitive application to Azure. They require that all users accessing the application, regardless of their location, must use a compliant device and multi-factor authentication (MFA). They also need to block access from specific high-risk countries. Which Azure service can enforce these access requirements?Design identity, governance, and monitoring solutions
  39. 39.A global software company provides a SaaS application hosted on Azure. The application's backend consists of several stateless microservices running in an Azure Kubernetes Service (AKS) cluster. To ensure high availability and low latency for users worldwide, the company plans to deploy the AKS cluster in multiple Azure regions. Which additional Azure service is crucial to distribute user traffic efficiently across these regional AKS deployments and ensure seamless failover?Design business continuity solutions
  40. 40.A multinational corporation uses Azure Virtual Machines to host its critical ERP system. The company requires a disaster recovery solution that can achieve a Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 15 minutes. The solution must support testing failovers without impacting the production environment. Which Azure service is best suited for these requirements?Design business continuity solutions
  41. 41.A media company is hosting a large-scale video streaming platform on Azure. They need to monitor the end-to-end performance and availability of their web applications, measure response times, track user sessions, and identify performance bottlenecks across different components (web server, database, external APIs). The solution must provide code-level insights for .NET applications. Which Azure Monitor feature should be implemented?Design identity, governance, and monitoring solutions
  42. 42.An enterprise organization uses Azure Files to store critical shared documents. The files are frequently accessed by users across different departments and must remain available even if a single data center within an Azure region becomes unavailable. The organization needs a solution that provides high availability within a region but does not require cross-region replication for disaster recovery. Which Azure Files redundancy option should be chosen?Design business continuity solutions
  43. 43.A global e-commerce platform relies on Azure Kubernetes Service (AKS) clusters deployed in multiple Azure regions for its customer-facing applications. The company needs to ensure that user requests are always routed to the closest healthy AKS cluster to minimize latency. In the event of a regional outage or cluster failure, traffic must automatically failover to the next available healthy cluster. Which Azure service should be used to manage global traffic distribution and failover for the AKS clusters?Design business continuity solutions
  44. 44.A manufacturing company uses an Azure App Service to host its critical order processing API. The API needs to be highly available within a single Azure region and should remain operational even if a data center within that region experiences an outage. Which Azure App Service deployment strategy should be implemented?Design business continuity solutions
  45. 45.A global company uses an Azure Service Bus namespace to handle critical messages between its microservices deployed across different Azure regions. The company requires a disaster recovery solution for Service Bus that ensures messages are not lost and processing can continue with minimal downtime in the event of a regional outage. Which Azure Service Bus feature should be implemented?Design business continuity solutions
  46. 46.A financial services company is migrating its on-premises data center to Azure. They have critical file shares that must maintain 99.99% availability and be resilient to failures of individual data centers within an Azure region. The files are frequently accessed and modified by applications. Which Azure Files redundancy option should be recommended?Design business continuity solutions
  47. 47.A multinational corporation uses Azure Virtual Machines to host its critical ERP system. The system requires near-zero downtime and minimal data loss in case of a regional outage. The company has a Recovery Point Objective (RPO) of 5 minutes and a Recovery Time Objective (RTO) of 15 minutes. The solution must support automatic failover and failback between Azure regions. The company also requires that its disaster recovery solution be cost-optimized for inactive secondary regions, meaning resources in the secondary region should only be activated during a disaster. Which Azure service is BEST suited to meet these requirements for disaster recovery?Design business continuity solutions
  48. 48.An architect is designing a backup solution for a critical Azure SQL Database that requires a Recovery Point Objective (RPO) of 5 minutes. The database is transactional, and data loss must be minimized. Which backup strategy should be implemented?Design business continuity solutions
  49. 49.A software development company is building a new multi-tenant SaaS application on Azure. The application needs to authenticate users from various customer Azure AD tenants and provide them access to their specific data. How should the application be configured to allow users from different Azure AD tenants to sign in?Design identity, governance, and monitoring solutions
  50. 50.A small business uses an Azure Virtual Machine to host its internal CRM application. The company requires daily backups of the VM, with a retention period of 30 days. The backup solution must be cost-effective and easy to manage. Which Azure backup solution should be implemented?Design business continuity solutions