Step2Study

Microsoft Certified: Azure Solutions Architect Expert practice questions

230 free questions with answers and explanations.

Practice test
  1. 101.A global company uses an Azure Service Bus namespace to handle critical messages between its distributed applications. The company needs to ensure that message processing can continue even if an entire Azure region becomes unavailable. The solution must support active/passive failover with minimal data loss and provide a consistent endpoint for applications. Which Azure Service Bus feature should be implemented?Design business continuity solutions
  2. 102.An online education platform uses an Azure Function App that processes messages from an Azure Service Bus queue. The platform serves students globally and requires the messaging system to be highly available and resilient to regional outages, ensuring that messages are not lost and processing can continue without interruption. The solution must provide automatic failover of the Service Bus namespace to a secondary region. Which Azure Service Bus feature should be implemented?Design business continuity solutions
  3. 103.A global manufacturing company needs to monitor the health and performance of its Azure Kubernetes Service (AKS) clusters, including container logs, pod metrics, and node utilization. They also require the ability to visualize this data in custom dashboards and set up alerts for critical events. Which Azure monitoring service is purpose-built for this requirement?Design identity, governance, and monitoring solutions
  4. 104.A company hosts a critical web application on Azure App Service. To ensure high availability, the company wants to distribute traffic across multiple instances of the App Service in different Azure regions and automatically route users to the closest healthy endpoint. Which Azure service should be used?Design business continuity solutions
  5. 105.A research institution uses Azure to host sensitive genomic data. They need to continuously monitor their Azure environment for misconfigurations that could lead to security vulnerabilities, such as unencrypted storage accounts or VMs exposed to the internet without NSGs. The solution must provide a security score and recommendations for remediation. Which Azure service should be used?Design identity, governance, and monitoring solutions
  6. 106.A government agency is deploying a highly sensitive application to Azure. They require that all access to the application, regardless of the user's location or device, must use multi-factor authentication (MFA). Additionally, if a user attempts to sign in from an unfamiliar location or a non-compliant device, access should be blocked entirely. Which Azure service should be configured to enforce these rules?Design identity, governance, and monitoring solutions
  7. 107.A global media company uses Azure Blob Storage to store large video files that are accessed frequently for streaming and editing. The company requires maximum durability and availability for these files, even in the event of a regional outage or a zone outage within a region. The solution must also support read access to the data from a secondary region. Which Azure Storage redundancy option should be chosen?Design business continuity solutions
  8. 108.A healthcare organization is migrating its patient records system to Azure. The system requires fine-grained authorization, where access to individual patient records is determined by the user's role (e.g., Doctor, Nurse, Administrator) and their association with a specific patient or department. The application is built on Azure App Service and uses Azure SQL Database. How should this authorization be implemented?Design identity, governance, and monitoring solutions
  9. 109.A global manufacturing company uses Azure Virtual Machines to host its critical ERP system. The system requires near-zero downtime and minimal data loss in case of a regional outage. The company has a Recovery Point Objective (RPO) of 5 minutes and a Recovery Time Objective (RTO) of 15 minutes. The solution must support automatic failover and failback between Azure regions. Which Azure service is BEST suited to meet these requirements for disaster recovery?Design business continuity solutions
  10. 110.A multinational corporation is implementing a new enterprise data warehouse solution in Azure. The solution needs to process petabytes of data, support complex analytical queries, and scale compute and storage independently. Data retention policies require storing historical data for over 10 years for compliance. Which Azure service is the most cost-effective and scalable choice for this data warehouse?Design infrastructure solutions
  11. 111.A financial institution is migrating a critical, high-performance trading application to Azure. The application requires extremely low-latency access to shared storage and supports a distributed file system (DFS) namespace. The solution must provide enterprise-grade availability and performance. Which Azure storage solution should you recommend?Design infrastructure solutions
  12. 112.A pharmaceutical company is migrating a legacy on-premises application that processes highly sensitive patient health information (PHI). The application requires strict control over the underlying operating system and application runtime, and must meet stringent regulatory compliance standards. Which Azure compute model offers the most control to satisfy these requirements?Design infrastructure solutions
  13. 113.A global e-commerce company is deploying a new platform that must achieve maximum uptime and be resilient to regional outages. The platform needs to serve customers worldwide with low latency. Which architectural design principle should be prioritized to meet these requirements?Design infrastructure solutions
  14. 114.A global software development company uses Azure DevOps for its CI/CD pipelines. They need a secure way to store and manage secrets (e.g., API keys, connection strings, certificates) used by their applications and pipeline scripts. The solution must provide centralized management, granular access control, and audit logging. Which Azure service should be used to store these secrets?Design infrastructure solutions
  15. 115.A global retail company is deploying a new e-commerce platform that must be highly available and resilient to regional outages. The platform will serve customers worldwide and requires extremely low latency access to product catalogs and customer profiles. Data consistency is eventually consistent. Which Azure database solution should be chosen to meet these requirements?Design infrastructure solutions
  16. 116.A company is designing a highly available and scalable network architecture for its mission-critical application hosted across multiple virtual machines in an Azure Virtual Network. The application requires even distribution of incoming traffic among healthy backend instances at the transport layer (Layer 4). The solution needs to support both TCP and UDP protocols. Which Azure service is best suited for this requirement?Design infrastructure solutions
  17. 117.A global enterprise requires a highly available and scalable network solution to connect its numerous branch offices worldwide to Azure and provide inter-branch connectivity. The solution must simplify routing, security, and policy management across the entire global network. Which Azure service is designed for this large-scale, global network connectivity and management?Design infrastructure solutions
  18. 118.A multinational corporation is implementing a new enterprise data warehouse solution in Azure. The solution needs to integrate data from various on-premises and cloud sources, perform complex analytical queries on petabytes of data, and provide real-time insights for business intelligence dashboards. The company requires a unified analytics platform that can handle large-scale data ingestion, processing, and serving. Which Azure service should be recommended?Design infrastructure solutions
  19. 119.A global retail company is deploying a new e-commerce platform that must be highly available and resilient to regional outages. The platform needs to serve customers worldwide with minimum latency. Data consistency is eventually consistent across regions. Which Azure networking and application architecture approach should be recommended?Design infrastructure solutions
  20. 120.A media company uses Azure Batch to process large video files for transcoding. The processing involves computationally intensive tasks that can take several hours per file. The company needs to optimize costs by only paying for compute resources when jobs are actively running and wants to ensure that the compute nodes are pre-warmed and ready to process tasks immediately when a job starts. Which type of Azure Batch pool should be configured?Design infrastructure solutions
  21. 121.A global software development company uses Azure DevOps for its CI/CD pipelines. They need a secure way to store and manage secrets such as database connection strings, API keys, and certificates, which are used by their applications and deployment scripts. The solution must integrate seamlessly with Azure DevOps and support automated secret rotation. Which Azure service should they use?Design infrastructure solutions
  22. 122.A media company is migrating its video transcoding workflow to Azure. The workflow involves processing large video files, which can take several hours per file, and requires dynamic scaling of compute resources based on incoming job queues. The company needs to minimize operational overhead for managing virtual machines. Which Azure compute solution is best suited for this scenario?Design infrastructure solutions
  23. 123.A healthcare provider is deploying a new application that will store highly sensitive patient health information (PHI). The application uses Azure SQL Database. Regulatory compliance mandates that all encryption keys for the database must be stored in a FIPS 140-2 Level 3 validated hardware security module (HSM) and managed exclusively by the customer. Which Azure security feature should be implemented for this requirement?Design infrastructure solutions
  24. 124.A financial services company is migrating a high-performance, latency-sensitive trading application to Azure. The application relies on shared file storage with extremely low latency and high IOPS (Input/Output Operations Per Second) requirements, typically found in on-premises Fibre Channel SANs. Which Azure storage solution would best meet these performance demands?Design infrastructure solutions
  25. 125.A global manufacturing company wants to implement a new IoT solution to monitor factory equipment across multiple geographically dispersed sites. The solution needs to ingest telemetry data from thousands of devices, process it in near real-time for anomaly detection, and store it for long-term analytics. Which Azure service is best suited for ingesting and processing this high volume of streaming data efficiently?Design infrastructure solutions
  26. 126.A global enterprise requires a highly available and scalable network solution to connect its numerous branch offices worldwide to Azure and to each other. The solution must support site-to-site VPNs, ExpressRoute connectivity, and provide centralized network management and security policies across all connections. Which Azure networking service is BEST suited for this hub-and-spoke topology across a global network?Design infrastructure solutions
  27. 127.A company is migrating a legacy application to Azure. The application currently runs on Windows Server VMs and uses an Active Directory Domain Services (AD DS) forest for authentication and authorization. The company wants to extend its existing AD DS to Azure with minimal latency and maintain a single, unified identity management solution. Which Azure identity solution is most appropriate?Design infrastructure solutions
  28. 128.A company is designing a new application that will store highly sensitive customer data. The data at rest must be encrypted using customer-managed keys (CMK) in a hardware security module (HSM). The application requires low-latency access to this data. Which Azure storage solution should be recommended?Design infrastructure solutions
  29. 129.A global manufacturing company is designing a new solution to monitor its factory equipment across multiple regions. The solution needs to ingest telemetry data from millions of devices, process it in near real-time, and store it for historical analysis. Which Azure service is BEST suited for ingesting this high volume of streaming data?Design infrastructure solutions
  30. 130.A global financial services company is designing a new highly available and fault-tolerant application that processes critical payment transactions. The application needs to ensure messages are delivered reliably, even if a receiving component is temporarily unavailable. The solution must support asynchronous communication and provide 'at-least-once' delivery guarantees. Which Azure messaging service is BEST suited for this scenario?Design infrastructure solutions
  31. 131.A media company hosts a public-facing web application in Azure. The application is a common target for various web-based attacks, including SQL injection, cross-site scripting (XSS), and DDoS attacks. The company needs a solution to protect the application from these common web vulnerabilities and to filter malicious traffic before it reaches the backend servers. Which Azure networking service should be implemented?Design infrastructure solutions
  32. 132.A software company is developing a new microservices-based application. Each microservice needs to be deployed as a container, scale independently based on demand, and communicate securely with other microservices. The company wants to minimize operational overhead for managing the underlying container orchestration platform. Which Azure service is the most appropriate fit?Design infrastructure solutions
  33. 133.A company is migrating a multi-tier application to Azure. The application consists of a web front-end, an application layer, and a database layer. The company wants to minimize administrative overhead, maximize developer productivity, and ensure high availability for the application and database tiers. Which Azure PaaS services should be considered for this architecture?Design infrastructure solutions
  34. 134.A global media company is building a new content delivery platform that needs to distribute large video files and static assets to users worldwide with low latency and high availability. The solution must cache content close to end-users and offload traffic from origin servers. Which Azure service is BEST suited for this purpose?Design infrastructure solutions
  35. 135.A financial institution is deploying a new trading platform in Azure. The platform requires extremely low latency (sub-millisecond) connectivity between its application servers and a high-performance database. The application servers and the database are deployed in separate virtual networks within the same Azure region. Which networking solution should be used to ensure the lowest possible latency between these components?Design infrastructure solutions
  36. 136.A company requires a network solution to filter incoming internet traffic to its Azure Virtual Network, protecting web applications from common web vulnerabilities like SQL injection and cross-site scripting. The solution must also provide centralized management and logging. Which Azure networking service should be recommended?Design infrastructure solutions
  37. 137.A consulting firm is designing a new solution for a client that involves processing large volumes of semi-structured data (e.g., JSON logs, CSV files) for analytical purposes. The data will be ingested from various sources, stored for long-term retention, and then analyzed using big data analytics tools like Apache Spark. The solution requires a highly scalable, cost-effective storage service that supports hierarchical namespaces and fine-grained access control. Which Azure service should be used?Design infrastructure solutions
  38. 138.A company is designing a new microservices-based application. Each microservice should be independently deployable, scalable, and isolated. The development team prefers using Docker containers. The solution needs to support automatic scaling based on demand and integrate with Azure DevOps for CI/CD. Which Azure compute service is the most appropriate for hosting these microservices?Design infrastructure solutions
  39. 139.A financial institution is migrating a critical, high-performance trading application to Azure. The application requires extremely low-latency file storage with support for the Network File System (NFS) protocol, and it frequently performs random I/O operations. The solution must also support concurrent access from multiple Linux virtual machines. Which Azure storage solution is BEST suited for these requirements?Design infrastructure solutions
  40. 140.A global software development company uses Azure DevOps for its CI/CD pipelines. They need a secure way to store and manage sensitive information like API keys, database connection strings, and certificates, which are used by their pipelines and application code. This sensitive information must be accessible only by authorized services and users, with robust auditing capabilities. Which Azure service is the most secure and appropriate for this purpose?Design infrastructure solutions
  41. 141.A healthcare provider is deploying a new application that will store highly sensitive patient data. The regulatory compliance requirements mandate that all data at rest must be encrypted using customer-managed keys (CMK) stored in a FIPS 140-2 Level 3 validated hardware security module (HSM). Which Azure service should be used to store and manage these encryption keys?Design infrastructure solutions
  42. 142.A global media company is building a new content delivery platform that needs to distribute large video files and images globally with extremely low latency. The platform must cache static and dynamic content at edge locations worldwide to improve user experience and reduce origin server load. Which Azure service is BEST suited for this content delivery requirement?Design infrastructure solutions
  43. 143.A global retail company is designing a new loyalty program application that needs to handle millions of customer interactions daily, including real-time updates to customer profiles and personalized offer delivery. The application must be highly scalable, fault-tolerant, and support asynchronous communication between various microservices. Which combination of Azure messaging services should be used to achieve these goals?Design infrastructure solutions
  44. 144.A global financial services company is designing a new highly available and fault-tolerant application that processes critical financial transactions. The application requires asynchronous messaging between its microservices, ensuring guaranteed message delivery, duplicate detection, and ordered message processing for certain transaction types. Which Azure messaging service is best suited for these requirements?Design infrastructure solutions
  45. 145.A global software development company uses Azure DevOps for its CI/CD pipelines. They need a secure way to store and manage sensitive information such as API keys, database connection strings, and certificates, which are used by their build and release pipelines. This solution must adhere to strict security best practices, including automatic key rotation and granular access control. Which Azure service should be recommended?Design infrastructure solutions
  46. 146.A global financial services company is designing a new highly available and fault-tolerant application that processes critical financial transactions. The application needs to ensure messages are delivered reliably, even if components fail, and support complex message routing based on message content. The solution must also provide auditing capabilities for compliance. Which Azure messaging service should be used?Design infrastructure solutions
  47. 147.A global e-commerce company is designing a new platform that requires a highly available and globally distributed database. The database must support multiple write regions, automatic failover, and provide single-digit millisecond latency for reads and writes to users worldwide. Which Azure database service should you recommend?Design infrastructure solutions
  48. 148.A company is migrating a legacy on-premises application to Azure. The application is a monolithic Java enterprise application that relies heavily on a shared file system for session state and user-uploaded content. The company wants to minimize code changes during migration and maintain high availability and disaster recovery for the file system. Which Azure storage solution best meets these requirements?Design infrastructure solutions
  49. 149.A consulting firm is designing a new solution for a client that involves processing large amounts of unstructured data (e.g., documents, images, videos) for machine learning model training and inference. The data needs to be highly available, durable, and accessible from various compute services (e.g., Azure Machine Learning, Azure Databricks). The solution requires petabyte-scale storage with hierarchical namespace capabilities and POSIX-compliant access. Which Azure storage solution should be recommended?Design infrastructure solutions
  50. 150.A global manufacturing company is designing a new IoT solution to monitor factory equipment across multiple geographically dispersed sites. The solution needs to ingest millions of data points per second, process them in near real-time for anomaly detection, and store them for long-term analytics. Which Azure service is most appropriate for ingesting this high-volume, high-velocity data stream?Design infrastructure solutions