Step2Study

Microsoft Certified: Azure Solutions Architect Expert practice questions

230 free questions with answers and explanations.

Practice test
  1. 51.A global e-commerce company operates its primary web application from a single Azure region and experiences occasional regional outages that impact availability. The company needs to implement a solution that ensures continuous availability of its web application across multiple Azure regions, with automatic failover in case of a regional outage. The solution must also provide global traffic distribution and low-latency access for users worldwide. Which combination of Azure services should be used?Design business continuity solutions
  2. 52.A company is implementing a robust monitoring strategy for its critical Azure infrastructure. They need to collect performance counters, event logs, and custom metrics from Azure Virtual Machines (VMs) and send them to a centralized Log Analytics workspace. The solution must be configurable to collect specific data points and support custom log parsing. Which Azure Monitor component should be used to achieve this for VMs?Design identity, governance, and monitoring solutions
  3. 53.A manufacturing company uses Azure to host its critical production control system. They need to ensure that all administrative access to Azure resources (virtual machines, databases, storage accounts) is highly secure and follows the principle of least privilege. Furthermore, they want to review and approve all elevated access requests. Which Azure service should be implemented?Design identity, governance, and monitoring solutions
  4. 54.A company is designing a backup solution for its critical Azure SQL Database. The database stores transaction data and requires a recovery point objective (RPO) of 5 minutes and a recovery time objective (RTO) of 30 minutes. Which Azure SQL Database backup feature should be leveraged?Design business continuity solutions
  5. 55.A financial services company stores highly sensitive customer data, including transaction records and personal identifiable information (PII), in Azure Blob Storage. Regulatory compliance dictates that this data must be immutable for a period of 7 years and cannot be deleted or modified by anyone, including administrators, during this time. After 7 years, the data can be deleted. Which Azure Blob Storage feature should be implemented?Design business continuity solutions
  6. 56.A multinational corporation uses Azure Virtual Machines to host its critical ERP system. The system requires near-zero downtime and minimal data loss in case of a regional outage. The company has a Recovery Point Objective (RPO) of 5 minutes and a Recovery Time Objective (RTO) of 15 minutes. The solution must support automatic failover and failback between Azure regions. Additionally, the disaster recovery solution needs to be tested periodically without impacting the production environment. Which Azure service is BEST suited to meet these requirements for disaster recovery?Design business continuity solutions
  7. 57.A global logistics company uses Azure for its critical order fulfillment system. They need to implement a solution that allows specific users to elevate their privileges for a limited time to perform administrative tasks, such as modifying critical Azure resources. After the time limit, the privileges should automatically revert. All elevations must be auditable. Which Azure service should be used?Design identity, governance, and monitoring solutions
  8. 58.A global pharmaceutical company is deploying a new research application to Azure. The application will store highly sensitive patient trial data. Regulatory compliance dictates that all access to this data must be explicitly granted and revoked, and that access permissions must be time-limited and require multi-factor authentication (MFA) approval for activation. Which Azure service should be used to enforce these requirements for Azure resource access?Design identity, governance, and monitoring solutions
  9. 59.A global software company provides a SaaS application hosted on Azure. The application's backend consists of stateless web APIs running on Azure App Services deployed in 'East US' and 'West Europe'. The company wants to ensure that users are always routed to the application instance with the lowest network latency, and if one region experiences an outage, traffic automatically fails over to the other region. Which Azure service should be used?Design business continuity solutions
  10. 60.A media company uses Azure Blob Storage to store large video files that are accessed frequently for streaming and editing. The company requires a storage solution that can withstand regional outages and ensures data durability across multiple Azure regions. Which storage redundancy option should be selected for this Blob Storage account?Design business continuity solutions
  11. 61.A large enterprise has several Azure subscriptions, each managed by different departments. The company needs to enforce a consistent naming convention for all resources, ensure specific resource tags are applied, and restrict resource deployments to approved Azure regions across all subscriptions. The solution must be centrally managed and applied hierarchically. Which Azure governance construct should be used to apply these policies effectively?Design identity, governance, and monitoring solutions
  12. 62.A global conglomerate with numerous subsidiaries is migrating its on-premises applications to Azure. Each subsidiary has its own Active Directory forest, and they all need to authenticate users to Azure AD with a single sign-on experience. The solution must ensure that users authenticate against their respective on-premises Active Directory forests, and credentials are never synchronized to Azure AD. Which Azure AD authentication method should be recommended?Design identity, governance, and monitoring solutions
  13. 63.An online retail company uses Azure Cosmos DB for its product catalog. The company operates globally and requires that the product catalog remains available and writable even if an entire Azure region becomes unavailable. The solution must ensure low-latency writes for users worldwide. Which Cosmos DB configuration meets these requirements?Design business continuity solutions
  14. 64.A large e-commerce company is migrating its on-premises applications to Azure. They have a significant investment in on-premises Active Directory and want to extend its capabilities to Azure without deploying new domain controllers in the cloud. Users should authenticate against their existing on-premises credentials for Azure-hosted applications. Which authentication method should be used for Azure AD Connect?Design identity, governance, and monitoring solutions
  15. 65.A software development company uses Azure DevOps for its source code management and CI/CD pipelines. They require a cost-effective backup solution for their Azure Virtual Machines that host their self-hosted build agents. The solution needs to provide daily backups, a retention policy of 30 days, and the ability to restore entire VMs or individual files. There is no requirement for cross-region disaster recovery, only protection against accidental deletion or corruption within the primary region. Which Azure service should be implemented?Design business continuity solutions
  16. 66.A company is designing a highly available solution for a critical web application. The application consists of stateless web servers and a stateful database. The web servers are deployed across multiple Azure regions using Azure Front Door for global traffic distribution. The database is an Azure SQL Database. To ensure high availability for the database with automatic failover across regions, which Azure SQL Database feature should be implemented?Design business continuity solutions
  17. 67.An educational institution is hosting a research portal on Azure. They need to ensure that specific virtual machines (VMs) are only accessible from within their campus network or via a dedicated VPN connection, and never directly from the public internet. The solution must also log all connection attempts. Which Azure networking and security feature set should be used?Design identity, governance, and monitoring solutions
  18. 68.A software development company is building a new microservices application in Azure. Each microservice needs to securely access Azure Key Vault to retrieve secrets and Azure SQL Database to store data. The developers want to avoid embedding credentials in their code or managing service principal secrets. Which authentication mechanism should they use for their microservices?Design identity, governance, and monitoring solutions
  19. 69.A global media company uses Azure for its content delivery network (CDN) and streaming services. They need to collect and analyze operational data (logs and metrics) from various Azure resources, custom applications, and on-premises servers into a single, centralized repository. The solution must provide powerful querying capabilities, customizable dashboards, and support for automated alerting based on specific log patterns or metric thresholds. Which Azure monitoring service is primarily responsible for this centralized data collection and analysis?Design identity, governance, and monitoring solutions
  20. 70.An educational institution is hosting a research portal on Azure. They need to ensure that only authenticated users from the institution's network can access the portal, and all data transmitted between users and the portal is encrypted. They also need to ensure that the portal's backend web servers are not directly exposed to the public internet. Which combination of Azure services should be used to meet these requirements?Design identity, governance, and monitoring solutions
  21. 71.A company requires a solution to manage access to its Azure resources using role-based access control (RBAC). They have a complex organizational structure and need to assign permissions at various granularities, from subscription level down to individual resources. The solution must also support custom roles and integrate with Azure AD groups. Which authorization framework should be used?Design identity, governance, and monitoring solutions
  22. 72.A manufacturing company uses an Azure App Service to host its critical order processing API. To ensure high availability, the company wants the API to remain operational even if a single data center within an Azure region experiences an outage. The solution must provide automatic failover within the region. Which feature should be enabled for the App Service?Design business continuity solutions
  23. 73.A multinational corporation is implementing a new governance strategy for its Azure environment. They have multiple subscriptions across different departments and need to enforce consistent policies, such as requiring specific tags on all resources and restricting resource deployments to approved regions. The solution must allow for hierarchical application of these rules. Which Azure service should be used to achieve this?Design identity, governance, and monitoring solutions
  24. 74.A large enterprise is migrating its legacy applications to Azure. These applications rely heavily on Kerberos and NTLM authentication and require domain join capabilities. The enterprise does not want to manage domain controllers in Azure but needs to extend its on-premises Active Directory functionality to support these applications in the cloud seamlessly. Which Azure service should be implemented?Design identity, governance, and monitoring solutions
  25. 75.A global e-commerce company uses Azure Blob Storage for storing product images. To ensure high availability and durability, the company needs to ensure that its data is replicated across multiple data centers within a region and also to a secondary region hundreds of miles away. Which Azure Storage redundancy option should be selected?Design business continuity solutions
  26. 76.A company is implementing a Zero Trust security model in Azure. They need to ensure that administrative access to all Azure resources is granted only when explicitly needed, for a limited time, and with full audit trails. The solution must also integrate with Azure AD roles and provide automated alerts when privileged roles are activated. Which Azure AD feature is best suited for this requirement?Design identity, governance, and monitoring solutions
  27. 77.A small online retail company uses Azure SQL Database for its primary product catalog and customer order information. The company has a strict Recovery Point Objective (RPO) of 1 hour and a Recovery Time Objective (RTO) of 4 hours. They need a cost-effective solution that provides automated backups and the ability to restore the database to a specific point in time within the last 7 days. Which Azure SQL Database feature should be implemented?Design business continuity solutions
  28. 78.A manufacturing company uses an Azure App Service to host its critical order processing API. To ensure high availability and resilience against datacenter-level failures within a region, the company needs to deploy the App Service across multiple physical locations. The application is stateless. Which configuration should be used for the Azure App Service?Design business continuity solutions
  29. 79.A global consulting firm uses Azure to host client applications. They need to ensure that all new Azure Storage Accounts deployed across all client subscriptions are configured with a minimum TLS version of 1.2 to meet security compliance standards. This policy must be enforced automatically at the time of resource creation and prevent non-compliant deployments. Which Azure service should be used to achieve this?Design identity, governance, and monitoring solutions
  30. 80.A global pharmaceutical company is migrating its on-premises applications to Azure. They require a centralized identity solution that integrates with their existing on-premises Active Directory (AD) and allows users to seamlessly access cloud-based applications without re-entering credentials. The solution must also support multi-factor authentication (MFA) for enhanced security. Which Azure identity solution should be recommended?Design identity, governance, and monitoring solutions
  31. 81.A global online gaming company uses Azure Cosmos DB for its player profiles and game state data. The company operates in multiple continents and requires low-latency access for its users worldwide, as well as automatic failover in case of a regional outage. Data conflicts must be handled automatically by the database. Which Cosmos DB feature should be enabled to meet these requirements?Design business continuity solutions
  32. 82.A research institution stores large volumes of scientific data in Azure Blob Storage. This data is rarely accessed after its initial upload but must be retained for regulatory compliance for 10 years. The institution requires the lowest possible storage cost for this long-term retention, while still being able to retrieve data if necessary, albeit with potentially higher retrieval costs and latency. Immutability is also a key requirement to prevent accidental or malicious modification. Which combination of Blob Storage tier and immutability policy should be used?Design business continuity solutions
  33. 83.An enterprise organization uses Azure Files to store critical shared documents. The files need to be highly available and resilient to zonal outages within a single Azure region. The storage solution must also offer synchronous replication. Which Azure Files redundancy option should be selected?Design business continuity solutions
  34. 84.A global media company uses Azure for its content delivery network (CDN) and streaming services. They need to monitor the end-to-end performance of their web applications, including page load times, response times for API calls, and user behavior. They also require distributed tracing and dependency mapping to quickly identify bottlenecks. Which Azure service should be used?Design identity, governance, and monitoring solutions
  35. 85.A financial institution is migrating its on-premises application to Azure. The application processes critical transactions and has a Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 1 hour. The institution needs to design a disaster recovery solution for its Azure Virtual Machines (VMs). Which Azure service should be used to meet these RTO and RPO requirements?Design business continuity solutions
  36. 86.A healthcare organization is migrating its on-premises SQL Server databases to Azure. These databases contain highly sensitive patient data and are critical for daily operations. The organization requires a backup solution that offers long-term retention (7 years) for compliance, point-in-time recovery, and protection against accidental deletion or malicious attacks. The solution must be cost-effective and integrated with Azure. Which Azure backup solution should be implemented?Design business continuity solutions
  37. 87.A multinational corporation is migrating its on-premises applications to Azure. They require a centralized identity solution that allows users to sign in once with their existing on-premises Active Directory credentials and access both on-premises and Azure-based applications seamlessly. The solution must minimize infrastructure overhead in Azure and avoid synchronizing password hashes to the cloud. Which authentication method should be implemented?Design identity, governance, and monitoring solutions
  38. 88.A global online gaming company uses Azure Cosmos DB for its player profiles and game state. The company operates in multiple continents and requires ultra-low latency reads and writes for all users, regardless of their geographic location. The solution must also provide high availability and automatic failover across regions without any application code changes. Which Cosmos DB feature set should be implemented?Design business continuity solutions
  39. 89.A healthcare organization is deploying a new patient management system to Azure. The system requires strict access control, ensuring that only authorized personnel can view patient records. Specifically, doctors can view all records, nurses can view records for their assigned patients, and administrative staff can only view demographic information. The solution must be granular and prevent 'over-permissioning'. Which Azure authorization mechanism should be used?Design identity, governance, and monitoring solutions
  40. 90.A financial services company is developing a new serverless application on Azure that uses Azure Functions and Azure Storage. The application needs to securely access data in an Azure SQL Database. The security team mandates that no connection strings or secrets should be stored directly in the application code or configuration files. Which authentication mechanism should be used for the Azure Function to access Azure SQL Database?Design identity, governance, and monitoring solutions
  41. 91.A global consulting firm uses Azure to host client applications. They need to ensure that all Azure resources deployed within specific subscriptions adhere to corporate compliance standards, such as resource tagging, allowed locations, and VM sizes. How should they implement this governance requirement across multiple subscriptions?Design identity, governance, and monitoring solutions
  42. 92.A global e-commerce company is deploying a multi-region application on Azure. They require a centralized monitoring solution that can collect logs, metrics, and application traces from various Azure resources (VMs, App Services, Functions, SQL Databases) across different regions. The solution must provide advanced analytics, custom dashboards, alert capabilities, and integration with third-party incident management tools. Which Azure monitoring service should be used?Design identity, governance, and monitoring solutions
  43. 93.An enterprise organization uses Azure Files to store critical shared documents. The files are frequently accessed by users across different departments within a single Azure region. The organization requires a highly available solution that protects against data loss due to hardware failures or power outages within an Azure data center. Data consistency must be strong. Which Azure Storage redundancy option should be configured for the Azure File Share?Design business continuity solutions
  44. 94.A global media company uses Azure for its content delivery network (CDN) and streaming services. They need to monitor the performance and availability of their web applications, identify bottlenecks, and diagnose issues quickly across various components, including web servers, databases, and external APIs. They also require detailed performance metrics, dependency mapping, and custom event tracking. Which Azure monitoring service is best suited for this application-centric monitoring?Design identity, governance, and monitoring solutions
  45. 95.An international research institution uses Azure to store vast amounts of scientific data in Azure Storage accounts. They need a solution to continuously monitor these storage accounts for suspicious activities, such as unauthorized access attempts, unusual data deletion patterns, or changes to security configurations. The solution should provide alerts and recommendations for remediation. Which Azure service should be implemented?Design identity, governance, and monitoring solutions
  46. 96.A healthcare organization is migrating its on-premises SQL Server databases to Azure. These databases are hosted on Azure Virtual Machines (VMs) and contain critical patient data. The organization needs a backup solution that provides application-consistent backups, supports long-term retention (up to 10 years), and allows for granular recovery of individual databases or even specific tables. Which Azure service should be used?Design business continuity solutions
  47. 97.A global financial institution is developing a new trading platform on Azure. The platform will use several Azure Kubernetes Service (AKS) clusters. The operations team needs to centrally monitor the health and performance of these AKS clusters, including container CPU/memory utilization, network performance, and logs from all pods and nodes, to quickly identify and troubleshoot issues. Which Azure monitoring solution should they implement?Design identity, governance, and monitoring solutions
  48. 98.An online retail company utilizes Azure Cosmos DB for its product catalog. The company operates globally and requires that the database remains available and responsive even if an entire Azure region becomes unavailable. All write operations must be distributed across multiple regions to minimize latency for users worldwide. Which Cosmos DB feature should be enabled?Design business continuity solutions
  49. 99.A company is migrating a legacy application to Azure. The application currently uses LDAP to authenticate users against an on-premises Active Directory. The company wants to lift and shift the application to Azure Virtual Machines (VMs) and continue using LDAP for authentication without making significant code changes to the application. They also want to avoid deploying and managing domain controllers in Azure. Which Azure service should be used to provide LDAP authentication for the application in Azure?Design identity, governance, and monitoring solutions
  50. 100.A large enterprise has several Azure subscriptions, each managed by different departments. The IT governance team needs to enforce a consistent set of compliance policies across all subscriptions, such as mandatory tagging for resources and restricting resource deployments to specific Azure regions. They also need to delegate policy management to departmental IT teams but retain an overarching control. Which Azure governance construct should be used?Design identity, governance, and monitoring solutions