Microsoft Azure Architect Design (AZ-304) Exam Dumps 2022
Microsoft Azure Architect Design (AZ-304) Exam Dumps 2022
Visit Official SkillCertPro Website :-
For a full set of 900+ questions. Go to
https://skillcertpro.com/product/microsoft-azure-architect-design-az-304-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.
Question 1
A company has the requirement to have an automated process in place which would upload logs to an Azure SQL database every week. Reports would then be generated from the SQL database. Which of the following would you use for this requirement?
A. The AzCopy tool
B. Azure Data Factory
C. Azure HDInsight
D. Data Migration Assistant
Answer: B
Explanation:
You can use the Azure Data Factory to create a pipeline that can be used to copy data. Below is an excerpt from the Microsoft documentation on the connector for SQL server.
Option A is incorrect since this is used for copying data from Azure storage accounts to on-premise and vice versa
Option C is incorrect since this is used to run Big data open source frameworks
Option D is incorrect since this is used to migrate data between SQL servers.
For more information on Azure Data Factory connector for SQL, please visit the below URL
https://docs.microsoft.com/en-us/azure/data-factory/connector-sql-server
Question 2
A company is planning on deploying an application onto Azure. The application will be based on the .Net core programming language. The application would be hosted using Azure Web apps. Below is part of the various requirements for the application
Gives the ability for the testing team to view the different components of an application and see the calls being made between the different application components
Helps business analyse how many users actually return to the application
Ensuring IT administrators get alerts based on critical conditions being met in the application
Which of the following service would be best suited for fulfilling the requirement of
“Helps business analyse how many users actually return to the application”
A. Application Insights
B. Azure Service Health
C. Azure Advisor
D. Azure Policies
Answer: A
Explanation:
This feature is part of the Application Insights tool. An example of this is given in the Microsoft documentation
Since this is clearly mentioned in the documentation, all other options are incorrect
For more information on the retention feature of Application Insights, please visit the below URL
https://docs.microsoft.com/en-us/azure/azure-monitor/app/usage-retention
Question 3
View Case Study
Overview:
skillcertlabs is an online training provider. They have several main offices and a couple of branch offices.
Existing Environment:
The company currently has the following Active Directory Environment in place:
Two Active Directory forests - One is quiz.skillcertlabs.com and the other is research.skillcertlabs.com
Currently there is no trust relationship between the forests
The quiz.skillcertlabs.com is the production forest that hosts all the identities required for internal user and computer authentication.
The research.skillcertlabs.com forest is only used by the research department
The company currently has the following Networking Environment in place:
The offices currently contain at least one domain controller from the quiz.skillcertlabs.com forest.
The main head office contains the domain controller of the research.skillcertlabs.com forest
All of the offices have high speed internet connections
Applications:
The company has a web application running on-premise named skillcertlab-app
The application is running on Microsoft Internet Information Services
The application stores its data on Microsoft SQL Server 2016
The servers are all running on Hyper-V
The same Hyper-V environment also hosts a staging environment to test all updates to the web application
All Microsoft based licences have been purchased via a Microsoft Enterprise Agreement that includes Software Assurance
Planned Changes:
The company wants to migrate its workloads to Azure.
They also want to create a hybrid identity model along with a Microsoft Office 365 deployment
The research department will continue to use the infrastructure in the on-premise environment.
Following are the key requirements for the migration to Azure:
The Web application "skillcertlab-app" needs to be migrated to Azure
Existing licences should be used wherever possible to minimize on costs
Users need to always authenticate using their quiz.skillcertlabs.com UPN identity
All new deployments to Azure must be redundant in the case of an Azure region failure
PaaS deployments are preferred wherever possible
Directory Synchronization must be established between Azure AD and the quiz.skillcertlabs.com forest. This synchronization must not be affected by a link failure between Azure and the on-premise network.
The following requirements need to be met in terms of the database:
When the database is migrated to Azure, it needs to be ensured that metrics are recorded for the database. The database administrators should be able to analyse the metrics for suggesting any further improvements to the database environment
Database downtime must be minimized when the database is being migrated onto Azure
Database backup's must be maintained for a period of 5 years
The following requirements need to be met in terms of Security:
Administrators should be able to authenticate to Azure by using the quiz.skillcertlabs.com credentials
Any administrative access to Azure must be complemented by multi-factor authentication
Question: The following architecture is being recommended for the Web application
Would this architecture require a manual configuration if an Azure region fails?
A. Yes
B. No
Answer: B
Explanation:
Here you can use the priority traffic routing method which would automatically failover the Web application if it detects a failure in the primary region. The Microsoft documentation mentions the following
For more information on the priority routing method, please visit the below URL
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods#priority
Question 4
A company has setup an Azure subscription and an Azure tenant. They have purchased Premium P2 licences. There are different departments that have different requirements for managing identities.
Which of the following would you suggest for the Logistics department?
A. Managed Service Identity
B. Identity Protection
C. Privileged Identity Management
D. Azure AD Connect
Answer: A
Explanation:
This is clearly given in the Microsoft documentation.
Since this is clearly mentioned, all other options are incorrect
For more information on Managed Service Identity, please visit the below URL
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
Question 5
A company has developed a web service that is made available on a virtual machine deployed to a subnet in the Virtual network skillcertlab-network.
An API Management service has been deployed, which will provide access to the API service hosted on the Virtual Machine.
Consultant companies must be able to connect to the API over the Internet.
Below is the configuration of the API management gateway instance
Based on the configuration, would the API be available to the consultants over the Internet?
A. Yes
B. No
Answer: A
Explanation:
An example of this configuration is given in the Microsoft documentation. By choosing the External option, the API management gateway instance would also be available over the Internet
For more information on using the API Management instance along with Virtual Networks, please visit the below URL
https://docs.microsoft.com/en-us/azure/api-management/api-management-using-with-vnet
For a full set of 900+ questions. Go to
https://skillcertpro.com/product/microsoft-azure-architect-design-az-304-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.
Question 6
A company wants to deploy an application to Azure. The application has the below requirements
Give the ability to install and provide access to the full .Net framework
Allow administrative access to the operating system
Provide a level of redundancy if an Azure region fails
You decide to deploy 2 Azure Virtual Machines in 2 separate regions. And then you create a Traffic Manager Profile
Does this solution meet the requirement?
A. Yes
B. No
Answer: A
Explanation:
Yes, this will meet all the requirements. Since you are using Azure Virtual Machines, IT administrators can get the required access. You can also then get the required access to the underlying software including the .Net framework.
Using a Traffic Manager profile along with the failover routing policy can ensure the requirement for redundancy is fulfilled.
For more information on Azure Traffic Manager, please visit the below URL
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview
Question 7
A team has an Azure CosmosDB account. A solution needs to be in place to generate an alert from Azure Log Analytics when a query request charge exceeds 40 units more than 10 times during a 10-minute window. Which of the following would you recommend? Choose 2 answers from the options given below
A. Create a search query to identify when the requestCharge_s exceeds 40.
B. Create a search query to identify when the requestCharge_s exceeds 10.
C. Create a search query to identify when the duration_s exceeds 10.
D. Configure a period of 10 and a frequency of 10.
Answer: A, D
Explanation:
If you look at the table for the log entries in Azure Log Analytics, you can see that in order to monitor the request unit rate, we have to check for the requestCharge_s log entry.
You can then generate alerts in Azure Monitor based on the period and frequency
Option B is incorrect since the question states to check if the request charge exceeds 40 units
Option C is incorrect since this is the wrong metric to monitor
For more information on CosmoDB logging, please go ahead and visit the below URL
https://docs.microsoft.com/en-us/azure/cosmos-db/logging
Question 8
Your team needs to deploy a Virtual machine that will host a SQL Server. The Virtual machine will have 2 data disks, one for the log file and the other for the data files. You need to recommend a caching policy for each disk
Which of the following would you recommend for the data disk containing the logs?
A. None
B. ReadOnly
C. WriteOnly
D. ReadWrite
Answer: A
Explanation:
This is clearly mentioned in the Microsoft documentation
Since this is clearly mentioned, all other options are incorrect
For more information on the performance guidelines for SQL Server on Virtual Machines, please go ahead and visit the below URL
Question 9
A company has setup an Azure subscription and an Azure tenant. You need to provide the development team to be able to start and stop Virtual Machines. The access needs to be granted on specific occasions only.
You need to ensure the permission gets assigned and use the principle of least privilege. You also need to minimize costs.
Which of the following security feature would you use for the requirement?
A. Conditional Access policy
B. Azure Policies
C. Just in time VM access
D. Privileged Identity Management
Answer: D
Explanation:
With Privileged Identity Management, you can implement just in time privileges for Azure resources.
Since this is clearly given in the Microsoft documentation, all other options are incorrect
For more information on Privileged Identity Management, please go ahead and visit the below URL
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
Question 10
View Case Study:
Overview:
skillcertlabs is an online training provider.
Current System - Financial Processing:
skillcertlabs currently has a system that consists of 3 tiers:
Front end Web App
Middle tier API
Back end data store
Below is the current set of the system:
The backend is running on Microsoft SQL server 2016
All servers are running on Windows
The Front and Middle tiers are written in C# and hosted on Internet Information Services
The database is currently 1 TB in size. The growth of the database is not expected to grow beyond 3 TB.
The system currently has the following requirements:
All data must be encrypted in rest and in transit
The front and middle tier components currently make use of encryption keys to protect the data store. Only these tiers should have the capability to access the encryption keys.
Database backups need to be maintained in 2 separate locations that are at least 100 miles apart
Database backups need to be stored for up to 7 years
Traffic to the servers needs to be controlled via source IP address and port no
Access to the system should only be via the internal network of skillcertlabs
The Security team needs to be able to inspect all inbound and outbound traffic
Current System - Transactional Query System:
skillcertlabs also has a Transaction Query system built on .Net. The data is stored in Azure Table storage. This .Net service currently runs on a client computer
Planned Changes:
skillcertlabs wants to migrate the Financial Processing system to Azure
Key requirements:
Infrastructure services must remain available if a region or a data center fails.
Failover must occur without any administrative intervention
Wherever possible, Azure managed services must be used to management overhead
Whenever possible, costs must be minimized.
Collect windows security logs from the Middle tier and retain the logs for several year
Generate alerts if any unauthorized access to the backend Virtua machines are detected.
The number of instances assigned to the front and middle tiers should be adjusted automatically based on the CPU utilization
An SLA of 99.95% must be guaranteed on the Infrastructure for the front and middle tier systems
Identity management must be performed via Active directory and all password hashes must be stored on the on-premise environment.
If there are any suspicious attempts for authentication, then that should trigger multi-factor authentication. Access should be allowed if the authentication attempt is successful.
The data store for the transactional query system will be move from Azure Table storage to a CosmosDB account
You have to recommend a strategy for the compute solution for the Financial Processing system. Which of the following would you recommend?
A. Azure Kubernetes Service
B. Virtual machine scale sets
C. Availability sets
D. App Service Environments
Answer: B
Explanation:
Since we need to cater to the below requirement of the case study
The number of instances assigned to the front and middle tiers should be adjusted automatically based on the CPU utilization
We have to use Virtual Machine scale sets for our compute solution. The Microsoft documentation mentions the following
Option A is incorrect since there is no mention of orchestrating docker containers for the application
Option C is incorrect since this is used for achieving high availability of the solution
Option D is incorrect since this is used for the Azure Web App service
For more information on virtual machine scale sets, please visit the below URL
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview
For a full set of 900+ questions. Go to
https://skillcertpro.com/product/microsoft-azure-architect-design-az-304-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.