QUESTION 1: What is the Azure SLA for single virtual machine with standard SSD storage? Show Answer Azure CloudAzure Virtual Machines Junior
QUESTION 2: Your Azure Virtual Machine (VM) needs to communicate with Azure SQL Database. How can you minimize latency? Show Answer Azure CloudAzure SQL DatabaseAzure Virtual Machines Senior
QUESTION 3: You need to make your Azure App Service fast and scalable. What Azure service can you use to store the content close to the application so that the content doesn't need to be retrieved from the slow source multiple times? Show Answer Azure App serviceAzure Cloud Senior
QUESTION 4: You need to make your Azure App Service fast and scalable. What Azure service can you use to store the static content close to the end users? Show Answer Azure App serviceAzure CDNAzure CloudAzure Front Door Senior
QUESTION 5: Your application that was moved from on-premises to Azure Virtual machine needs to be able to query Active Directory using LDAP without accessing on-premises network. How will you achieve this goal? Show Answer Azure Active DirectoryAzure AD Domain ServicesAzure CloudAzure Virtual Machines Senior
QUESTION 6: Can an app hosted in Azure App Service use Windows EventLog? Show Answer Azure App serviceAzure Cloud Senior
QUESTION 7: You are developing an application that has multiple services in Azure Cloud. You need to ensure that the services can communicate together asynchronously using REST messages. What will you recommend? Show Answer Azure CloudAzure Service Bus Senior
QUESTION 8: You have site-to-site VPN between on-premise network and Azure and want to make sure that the traffic from your Azure Vitual Machines will be routed through the virtual appliance that is placed in the on-premises network. How will you achieve this? Show Answer Azure CloudAzure Virtual Networks Senior
QUESTION 9: You need to host a containerized app in Azure. Your hosting option should support auto scaling, out of box Azure AD authentication and support for continuous deployment from Azure Container Registry (ACR). Which platform will you recommend to use? Show Answer Azure CloudAzure Container RegistryAzure Kubernetes Service Senior
QUESTION 10: What are the options to use Azure Function together with VNET integration? Show Answer Azure App serviceAzure CloudAzure Kubernetes Service Senior
QUESTION 12: What is Azure Function Consumption plan? Show Answer Azure App serviceAzure Cloud Senior
QUESTION 13: You have an on-premises web app that is using a legacy COM component. You plan to migrate the app to Azure. What solution do you recommend to have the web app available even if the data center fails? Show Answer Azure CloudAzure Virtual Machine Scale Sets Senior
QUESTION 14: How many Azure Site Recovery Provider installations do you need to do and where will you install the software? Show Answer Azure CloudAzure Site Recovery Senior
QUESTION 15: What is the cheapest solution in Azure for storing 10TB of data for long time? Show Answer Azure CloudAzure Storage Senior
QUESTION 16: You are designing a disaster recovery plan for your Azue Key Vault. Where can you restore the backup? Show Answer Azure CloudAzure Key Vault Senior
QUESTION 17: You have multiple applications deployed in Azure Kubernetes Services (AKS) where each cluster is deployed in a separate Azure region. You need to ensure that your applications remain available if any of the clusters fail. You also want the connection to be SSL encypted without the need to configure SSL on each container. Which Azure Service can help you? Show Answer Azure CloudAzure Front Door Senior
QUESTION 18: Your application uses Table Storage and is used in multiple regions. You want to upgrade the storage mechanism to support write latency that is less than 10ms, supports indexing of columns and enables simultaneous write operations in multiple Azure regions. What solution will you recommend? Show Answer Azure CloudAzure Cosmos DBAzure Storage Senior
QUESTION 19: You need to store large files that contain backups of your database and keep them for 6 years due to legislation requirements. What solution will you use to minimize the costs? Show Answer Azure CloudAzure Storage Senior
QUESTION 20: What is a difference between Azure Migrate: Server Migration agentless and agent-based migration? Show Answer Azure Cloud Senior
QUESTION 21: How does Azure Migrate Server Migration work with Site Recovery? Show Answer Azure CloudAzure Site Recovery Senior
QUESTION 22: What's the difference between Azure Migrate and Azure Site Recovery? Show Answer Azure CloudAzure Site Recovery Senior
QUESTION 23: You plan to deploy a highly available Azure SQL Database that can failover between replicas without any data loss. The database must remain available when the zone goes down. How will you solve this? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 24: How can you make files from Azure Storage accessible from anywhere in the world with as optimal latency as possible? Show Answer Azure CloudAzure Front DoorAzure Storage Senior
QUESTION 25: What is more expensive? Azure Front Door or Azure CDN? Show Answer Azure CDNAzure CloudAzure Front Door Senior
QUESTION 26: You have the on-premises network that has several branch offices. One branch office contains a virtual machine that is used as a file server and accessed from all other offices. How can you minimize latency and allow the offices to access the files as quickly as possible even when the branch office with the virtual machine goes down? Show Answer Azure CloudAzure File SyncAzure Virtual Machines Senior
QUESTION 27: You have multiple Azure AKS clusters in different regions. You need to recommend storage solution that would allow to automatically replicate updated container images. What solution do you recommend? Show Answer Azure CloudAzure Container RegistryAzure Kubernetes Service Senior
QUESTION 28: What is a minimum storage duration for Azure Storage account with archive access tier? Show Answer Azure CloudAzure Storage Senior
QUESTION 29: Can you migrate on-premises Windows and Linux virtual machine disks to Azure using AzCopy while making sure that they will remain available during migration? Show Answer Azure CloudAzure Site RecoveryAzure Virtual Machines Senior
QUESTION 30: Can you use immutable time-based policy for Azure File Share? Show Answer Azure CloudAzure Storage Senior
QUESTION 31: You need to ensure that some blobs are not removed for 5 years from Azure Storage Accoun. Not even the administrator can remove the data. How can you achieve this? Show Answer Azure CloudAzure Storage Senior
QUESTION 32: Can an Azure Storage account administrator remove a legal hold? Show Answer Azure CloudAzure Storage Senior
QUESTION 33: You have 9 virtual machines placed in an Availability Set. You set the number of fault domains to 2 and number of update domains to 20. How many virtual machines will be available during planned maintenance? Show Answer Azure Availability SetsAzure CloudAzure Virtual Machines Senior
QUESTION 35: What is more expensive Azure Storage account type - GRS or RA GRS? Show Answer Azure CloudAzure Storage Senior
QUESTION 36: The Azure Storage accounts have access tiers. What are the online and offline access tiers? Show Answer Azure CloudAzure Storage Senior
QUESTION 37: In your Azure Storage account, you have a block blob with access tier set to archive. Can you download the file immediately? Show Answer Azure CloudAzure Storage Senior
QUESTION 38: Your Azure Key Vault became unavailabe and was failed over to the second paired region. What operations are not available? Show Answer Azure CloudAzure Key Vault Senior
QUESTION 39: You have your Azure Backup policy configured to do daily backups an 3AM and to retain recovery snapshots for 3 days. What is Recovery Point Objective (RPO)? Show Answer Azure CloudAzure Storage Senior
QUESTION 40: You need to ensure that your Azure Storage v2 account archived data cannot be deleted for five years. Not even administrators should be able to delete data. How will you achieve this? Show Answer Azure CloudAzure Storage Senior
QUESTION 41: You are designing application where Recovery Time Objective needs to be max 10 hours. What Azure Service will you use? Show Answer Azure BackupAzure Cloud Senior
QUESTION 42: You are designing application where Recovery Time Objective needs to be max 10 minutes. What Azure Service will you use? Show Answer Azure Cloud Senior
QUESTION 46: You are designing a solution that uses Azure Cosmos DB. You need to support multiple regions and provide a latency-based SLA for writes. Which consistency will you recommend? Show Answer Azure CloudAzure Cosmos DB Senior
QUESTION 47: What are the available consistency levels in Azure Cosmos DB? Show Answer Azure CloudAzure Cosmos DB Senior
QUESTION 48: You plan to use Azure Reservations on your Azure SQL Database. To which resource type will the reservation discount be applied? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 49: You are thinking about using Azure Reservations. In which tool can you estimate the potential savings for your Azure SQL Database? Show Answer Azure Cloud Senior
QUESTION 50: Which Azure service should you use to store Application Insights data for five years? You plan to use continuous export. Show Answer Azure Application InsightsAzure CloudAzure Log Analytics WorkspaceAzure Storage Senior
QUESTION 51: You need to recommend a data-tier solution for the app. The solution needs to support multiple consistency levels, needs to be able to store at least 1TB of data, must be able to perform read/write operations in the Azure region local to the instance of the app. How will you solve the requirements? Show Answer Azure CloudAzure Cosmos DB Senior
QUESTION 52: You need to migrate 10 on-premises databases to Azure SQL Database, but there are also 100 SSIS packages that are configured to use on premise servers as destinations. What will you use for migration? Show Answer Azure CloudAzure Data Factory Senior
QUESTION 53: Your application runs in Azure and generates log files that must be archived for five years. The log files must be readable by the app but must not be modified. How will you solve this? Show Answer Azure CloudAzure Storage Senior
QUESTION 54: You plan to move many files from Azure Blob to Azure Data Lake storage. What solution do you recommend? Show Answer Azure CloudAzure Data Factory Senior
QUESTION 55: You need to encrypt multiple Azure Virtual Machines where operating system disks and data disks will be encrypted. What do you recommend? Show Answer Azure CloudAzure Key VaultAzure Virtual Machines Senior
QUESTION 57: You have a couple of files stored in Azure Storage Blob container. The data files are set to use the archive access tier. You need to ensure that one file is accessed immediately when the request is initiated. How will you achieve the goal? Show Answer Azure CloudAzure Storage Senior
QUESTION 58: You need to use CLR in your stored procedures. What Azure SQL service will you use? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 59: You have many devices that write performance data to Azure Blob Storage. You need to move the data to Azure SQL Database. How will you do it? Show Answer Azure CloudAzure Data FactoryAzure SQL DatabaseAzure Storage Senior
QUESTION 60: What tools would you recommend to use to copy data from Oracle database to Azure Databricks? Show Answer Azure CloudAzure Data Factory Senior
QUESTION 61: How is Azure Disk Encryption different from Storage server-side encryption with customer-managed key and when should I use each solution? Show Answer Azure CloudAzure StorageAzure Virtual Machines Senior
QUESTION 62: What is Storage server-side encryption in Azure? Show Answer Azure CloudAzure Storage Senior
QUESTION 63: What is Azure Disk Encryption? Show Answer Azure CloudAzure StorageAzure Virtual Machines Senior
QUESTION 64: What is Dynamic Data masking in Azure SQL Database? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 65: What is Transparent Data encryption for Azure SQL Database? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 66: What is Always Encrypted in Azure SQL Database? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 67: You need to create Azure resources for multiple departments. How will you organize the resources so that you can then generate a consolidated view of costs that displays cost broken down by department? Show Answer Azure CloudAzure Resource Manager Senior
QUESTION 68: You plan to copy 1TB of data files to Azure Blob storage. What storage type would you recommend to minimize the cost, support storage tiers and be available if a single data center fails? Show Answer Azure CloudAzure Storage Senior
QUESTION 69: What are the steps required to copy 0.5TB of data from your file server to Azure Storage account using Azure Data Factory? Show Answer Azure CloudAzure Data Factory Senior
QUESTION 70: How can you send emails as a response to CosmosDB data changes? Show Answer Azure App serviceAzure CloudAzure Cosmos DB Senior
QUESTION 71: You deciding between storing diagnostic data to Log Analytics Workspace or Azure Storage. What could be the factors that will affect the decision? Show Answer Azure CloudAzure Log Analytics WorkspaceAzure Storage Senior
QUESTION 72: You need to use transactions between multiple SQL databases. What database option will you use to support the transactions? Show Answer Azure CloudAzure SQL DatabaseAzure Virtual Machines Senior
QUESTION 73: You have multiple SQL databases with varying usage patterns. You need to host them and allow the compute resources allocated to the database to scale dynamically. The solution needs to meet an SLA of 99.99% uptime and have reserved capacity. How would you solve the requirements? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 74: How do you configure host caching for data disk and log disk for your VM that hosts SQL Server in Azure? Show Answer Azure CloudAzure SQL DatabaseAzure Virtual Machines Senior
QUESTION 75: What is Azure Data Factory self-hosted integration runtime? Show Answer Azure CloudAzure Data Factory Senior
QUESTION 78: What licenses do you need to use Privileged Identity Management? Show Answer Azure Active DirectoryAzure CloudAzure Privileged Identity Management Senior
QUESTION 79: You need to make sure that all your Azure resources are easily identifiable based on key parameters like environment, owner, department and cost center. You need to be able to generate reports and group resource by parameters. How will you do this? Show Answer Azure CloudAzure PolicyAzure Resource Manager Senior
QUESTION 80: What is Microsoft Identity Manager? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 81: You have an ASP.NET web app hosted on on-premises server. You have a hybrid deployment of Azure Active Directory. What do you need to do to allow users to sign in using their Azure AD account with Azure Multi-factor authentication (MFA)? Show Answer Azure Active DirectoryAzure AD Conditional AccessAzure Cloud Senior
QUESTION 82: What do you recommend to do when you experience Azure Key Vault throttling? Show Answer Azure CloudAzure Key Vault Senior
QUESTION 83: What is OAuth 2.0 Resource Owner Password Credentials (ROPC) grant? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 84: What is OAuth 2.0 Client credentials flow and when would you use it? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 85: What is OAuth 2.0 implicit flow and when would you use it? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 86: What is OAuth 2.0 authorization code flow and when would you use it? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 87: What signal types can you use in Azure Alert condition? Show Answer Azure AlertsAzure Cloud Senior
QUESTION 88: How can you allow an app to read and modify access reviews in Azure? Show Answer Azure Active DirectoryAzure CloudAzure Privileged Identity Management Senior
QUESTION 89: You have two different Azure tenants. Users of the tenant1 use an Azure web app that resides in the subscription under the tenant1. The app uses Microsoft Identity platform to handle user authentication and users from the tenant1 can successfuly authenticate. How do you allow users from the tenant2 authenticate and use the web app as well? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 90: How can you create a resource in such a way so that a user with RBAC Owner role cannot delete it? Show Answer Azure BlueprintsAzure Cloud Senior
QUESTION 91: In your hybrid environment with Azure Active Directory and on-premisees Active Directory Domain Services, you would like users to be automatically signed in to cloud apps when they access the apps on their corporate desktops that are connected to the corporate network. How do you achieve this? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 92: When would you recommend to use Append effect and when Modify effect in Azure Policy? Show Answer Azure CloudAzure PolicyAzure Resource Manager Senior
QUESTION 93: When using Azure Active Directory hybrid identity solution, how can you make sure that users can authenticate even if internet connection to on-premises Active Directory is unavailable? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 94: You have created an Azure Blueprint and added a resource group as an artifact. You haven't populated any parameter for the resource group artifact. What will you need to do when assigning the blueprint? Show Answer Azure BlueprintsAzure Cloud Senior
QUESTION 95: Can you assign an Azure Blueprint immediately after it has been created? Show Answer Azure BlueprintsAzure Cloud Senior
QUESTION 96: What Azure feature can you use to pre-authenticate a user by using their Azure Active Directory account before they connect to the Azure App Service web app? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 97: What are the options of access control type in Azure Cosmos DB data? Show Answer Azure CloudAzure Cosmos DB Senior
QUESTION 98: You need to ensure that all login attempts to the Azure portal from specific countries require Azure Multi-Factor Authentication (MFA). What will you do? Show Answer Azure Active DirectoryAzure AD Conditional AccessAzure Cloud Senior
QUESTION 99: You have two Azure Virtual machines. You need to configure notifications that will alarm two admin users when more than five events are added to the security log of VM1 or VM2 during a period of 120 seconds. How will you achieve this? Show Answer Azure AlertsAzure Cloud Senior
QUESTION 100: How can an application that is running in an Azure virtual machine and using user-assign identity retrieve a bearer token? Show Answer Azure CloudAzure Virtual Machines Senior
QUESTION 101: How do you make sure that when users in your company change jobs, the memberships of the user groups won't be forgotten to be updated and will be kept up-to-date? Show Answer Azure Active DirectoryAzure CloudAzure Privileged Identity Management Senior
QUESTION 102: What Azure feature allows you give security people ability to review membership of administrative roles, get alerts about changes in administrator assignments and see history of administrator activation? Show Answer Azure Active DirectoryAzure CloudAzure Privileged Identity Management Senior
QUESTION 103: What Azure feature allows you to enable the applications to access Azure Key Vault and retrieve keys for use in code? Show Answer Azure CloudAzure Key Vault Senior
QUESTION 104: What Azure feature allows you to provide users temporary administrator access to create and configure additional Web applications in the test environment? Show Answer Azure Active DirectoryAzure CloudAzure Privileged Identity Management Senior
QUESTION 105: Using Conditional Access, how do you make sure that users from 2 offices located in different locations always need to use Multi-factor authentication (MFA)? Show Answer Azure Active DirectoryAzure AD Conditional AccessAzure Cloud Senior
QUESTION 106: How can you ensure that users can create Azure virtual machine (VM) only in specific regions? Show Answer Azure CloudAzure PolicyAzure Virtual Machines Senior
QUESTION 107: You plan to deploy Azure Web App and need to make sure that users can connect to the app without being prompted for authentication. How will you achieve this? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 108: You plan to deploy Azure Web App and need to make sure that users can access the app only from company-owned computers. How will you achieve this? Show Answer Azure Active DirectoryAzure AD Conditional AccessAzure Cloud Senior
QUESTION 109: You need to implement Azure Function that is accessible for clients in a read-only manner. What authorization level will you use for the Azure Function? Show Answer Azure App serviceAzure Cloud Senior
QUESTION 110: You need to implement Azure Function that is accessible for clients in a read-only manner. What HTTP methods will you allow to be accessed? Show Answer Azure App serviceAzure Cloud Senior
QUESTION 111: What tool is used to perform discovery and remediation of identity objects and their attributes in an on-premises Active Directory environment in preparation for migration to Azure Active Directory? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 112: What Azure services can work as load balancers and at what OSI layer do they operate? Show Answer Azure CloudAzure Storage Senior
QUESTION 113: You need to give some of your contractors access to an Azure Storage blob container and limit the access to be active only for two months. What is the best way to do this? Show Answer Azure CloudAzure Storage Senior
QUESTION 114: You plan to integrate Azure API Management into your virtual network (VNET). What is the minimum size of the APIM subnet? Show Answer Azure API ManagementAzure CloudAzure Virtual Networks Senior
QUESTION 115: You plan to deploy apps to virtual machines in a virtual network together with microservices in AKS that are being consumed by the apps within the same network. You need to design a solution that will expose the microservices to the consuming apps. The ingress access to microservices must be restricted to a single private IP address and protected by using mutual TLS authentication. The number of microservices must be rate-limited and the cost must be minimized. How will you approach the challenge? Show Answer Azure API ManagementAzure CloudAzure Kubernetes ServiceAzure Virtual Networks Senior
QUESTION 116: You want to host your application on Azure Virtual Machines. You need to ensure that scaling out and in is done automatically based on CPU utilization. The infrastructure needs to remain available even if the zone or region fails. How will you solve the requirements? Show Answer Azure CloudAzure Virtual Machine Scale Sets Senior
QUESTION 117: What are host groups in relation to Azure Dedicated Hosts? Show Answer Azure Cloud Senior
QUESTION 119: What are Zone Redundant Virtual Machine Scale Sets in Azure? Show Answer Azure CloudAzure Virtual Machine Scale Sets Senior
QUESTION 120: You use Azure App Service and don't want to have any downtime. You are thinking whether you should scale up or scale out. What would you recommend? Show Answer Azure App serviceAzure Cloud Senior
QUESTION 121: You need to make sure that your Azure SQL Database backups will be retained for at least 5 years. How will you solve this requirement? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 122: You run application on Azure virtual machine. You need to ensure that the application will run even when a single data center fails. How will you solve this requirement? Show Answer Azure CloudAzure Virtual Machines Senior
QUESTION 123: You need to recommend a disaster recovery solution for your Azure SQL database that needs to remain available even when the whole region fails. What should you include in the recommendation? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 124: You need to recommend a disaster recovery solution for your Azure CosmosDB database that needs to remain available even when the whole region fails. What should you include in the recommendation? Show Answer Azure CloudAzure Cosmos DB Senior
QUESTION 125: You need to design a backup solution for Azure SQL Database that will store backups that can be restored for up to 5 years. What solution will you recommend? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 126: What is a difference between Azure SQL Database vCore and DTU purchase model? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 127: You want to use Azure Hybrid Benefit (AHB) for Azure SQL Database. What purchase model can you use it with? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 128: What is Azure SQL Database vCore purchase model? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 129: You use Azure CosmosDB with Table API. You need to make sure that the database will be available even if the whole region fails. How will you solve the requirements? Show Answer Azure CloudAzure Cosmos DB Senior
QUESTION 130: What is a difference between deterministic and randomized encryption when you use Always Encrypted feature of Azure SQL Database? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 131: You use Always Encrypted feature of Azure SQL Database. When the encryption keys are used, are they revealed to the database engine? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 132: What is a weakness of Transparent Data Encryption (TDE) in Azure SQL Database? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 133: How can you remediate non-compliant resources with Azure Policy? Show Answer Azure CloudAzure Policy Senior
QUESTION 134: You need to configure Azure Policy to ensure that Azure SQL databases have Transparent Data Encryption (TDE) enabled. What steps will you do? Show Answer Azure CloudAzure PolicyAzure SQL Database Senior
QUESTION 135: Your app that is running on Azure VM must be using managed identity. What endpoint should it use to obtain access token? Show Answer Azure CloudAzure Virtual Machines Senior
QUESTION 136: Your Azure application stores data to Azure Storage Account. You need to make data accessible for on-premises users as well, but data cannot be accessible over public internet. How will you solve this requirement? Show Answer Azure CloudAzure Virtual Networks Senior
QUESTION 137: In which part of the conditional access policy can you require MFA to be used? Show Answer Azure Active DirectoryAzure AD Conditional AccessAzure Cloud Senior
QUESTION 138: Do you recommend to use per-user MFA or conditional access policies of Azure AD Identity Protection? Show Answer Azure Active DirectoryAzure AD Conditional AccessAzure Cloud Senior
QUESTION 139: How can you ensure that data stored to your Azure Storage account cannot be deleted for a period of 3 years? Show Answer Azure CloudAzure Storage Senior
QUESTION 140: What is NFSv3 protocol recommended for in Azure? Show Answer Azure CloudAzure Storage Senior
QUESTION 143: You need to configure monitoring system that will notify you when any synchronization error occurs between your on-premises Active Directory and Azure Active Directory. What solution will you use? Show Answer Azure Active DirectoryAzure Cloud Senior
QUESTION 145: How can you migrate an existing SQL Server workload from your on-premises servers to Azure? The downtime during migration needs to be minimized. Show Answer Azure CloudAzure SQL Database Senior
QUESTION 146: What is Azure Hybrid Benefit? Show Answer Azure CloudAzure SQL DatabaseAzure Virtual Machines Senior
QUESTION 147: You have a requirement to send Azure Active Directory audit logs to Cosmos DB. What Azure services will you use the transition the logs to the database easily? Show Answer Azure App serviceAzure CloudAzure Cosmos DBAzure Event Hubs Senior
QUESTION 148: Can you use Azure Application Gateway to provide load balancing between multiple regions with rate limiting support? Show Answer Azure Application GatewayAzure Cloud Senior
QUESTION 149: You have deployed many Azure virtual machines where each has two network adapters. How can you increase the network performance? Show Answer Azure CloudAzure Virtual Machine Scale Sets Senior
QUESTION 150: How do you protect your Azure API Management from a distributed denial of service (DDoS) attack? Show Answer Azure API ManagementAzure Cloud Senior
QUESTION 151: You have Azure Virtual WAN. What do you need to do to use it with ExpressRoute? Show Answer Azure CloudAzure Virtual WAN Senior
QUESTION 152: What are Azure Service Bus topics good for? Show Answer Azure CloudAzure Service Bus Senior
QUESTION 153: What key features can you use as part of Azure AD Premium P2 license? Show Answer Azure Active DirectoryAzure AD Conditional AccessAzure AD Identity ProtectionAzure CloudAzure Privileged Identity Management Senior
QUESTION 154: Can you restrict which keys/secrets a user can access in an Azure Key Vault? Show Answer Azure CloudAzure Key Vault Senior
QUESTION 155: What features can you use as part of Azure AD Premium P1 license? Show Answer Azure CloudAzure Kubernetes Service Senior
QUESTION 156: What are Azure Virtual Nodes good for? Show Answer Azure CloudAzure Kubernetes Service Senior
QUESTION 157: What two Azure services can you use to migrate 500GB of files from your on-premises file server to Azure Blob Storage? Show Answer Azure CloudAzure Data FactoryAzure Import/Export jobs Senior
QUESTION 158: How can you connect on-premises network with Azure network using a redundant pair of cross connections to provide high availability. Show Answer Azure CloudAzure Virtual Networks Senior
QUESTION 159: Does Azure SQL Database support cross-database calls? Show Answer Azure CloudAzure SQL Database Senior
QUESTION 160: How do you allow your Azure Logic App connect to on-premises SQL Database that isn't accessible from internet? Show Answer Azure Cloud Senior
QUESTION 162: You use Azure Traffic Manager. How do you change the threshold for failing over the front end to the standby region? Show Answer Azure CloudAzure Traffic Manager Senior
QUESTION 163: You are using an Azure Traffic Manager in active-passive mode. What do you need to change it to active-active mode? Show Answer Azure CloudAzure Traffic Manager Senior
QUESTION 164: What are the Azure Traffic Manager routing methods that you can use? Show Answer Azure CloudAzure Traffic Manager Senior
QUESTION 165: You have an application that consists of multiple containers. What Azure service will you use to host it in order to be able to scale out when needed and also minimize compute costs? Show Answer Azure App serviceAzure CloudAzure Kubernetes Service Senior
QUESTION 166: You need to start and stop your virtual machines based on business hours and you also need to scale out when required. How will you do this while also minimizing compute costs? Show Answer Azure Automation AccountsAzure Cloud Senior
QUESTION 167: What Azure service can you use to expose some of your logic apps to a 3rd party consumer? You need to be able to throttle requests when a traffic reaches excessive levels, you don't want to use Azure AD Guest accounts and you want to use the existing OAuth 2.0 provider to get access to the logic apps. What is the best solution? Show Answer Azure Cloud Senior
QUESTION 168: What Azure load balancing service supports SSL offloading? Show Answer Azure Application GatewayAzure Cloud Senior
QUESTION 169: What is a recommended IP range size for the Gateway subnet? Show Answer Azure CloudAzure Virtual Networks Senior
QUESTION 170: What features does Azure Application Gateway Ingress Controller provide? Show Answer Azure Application GatewayAzure Cloud Senior
QUESTION 171: You need to recommend a load balancing service that is global and supports fail over to a different region, supports Azure Web Application Firewall (WAF), supports cookie-based affinity and URL routing. What will you propose? Show Answer Azure CloudAzure Front Door Senior
QUESTION 172: You are using Azure API Management and need to strip a specific header from the server response. How will you do it? Show Answer Azure Cloud Senior
QUESTION 173: You are designing a solution that will be polling an API using HTTP REST calls. When a change of the status is detected in the HTTP response, an email notification needs to be sent to an operator and later on the operators email response will be automatically processed. What Azure services do you recommend to use? Show Answer Azure App serviceAzure Cloud Senior
QUESTION 174: What other Azure service can you use for sending REST messages via HTTP protocol besides Azure Service Bus? Show Answer Azure CloudAzure Storage Senior
QUESTION 175: You are designing a job processing system that needs to run on multiple nodes, each node should be able to communicate with the other nodes, you need to maximize the number of nodes to process jobs as fast as possible. How will you solve the problem? Show Answer Azure BatchAzure Cloud Senior
QUESTION 176: What is the Azure Container Instance OnFailure restart policy good for? Show Answer Azure CloudAzure Container Instances Senior
QUESTION 177: What restart policies do Azure Container Instances support? Show Answer Azure CloudAzure Container Instances Senior
QUESTION 178: What is Virtual Machine Multiple Queues (VMMQ)? Show Answer Azure CloudAzure Virtual Machines Senior
QUESTION 179: What is Single root I/O virtualization (SR-IOV)? Show Answer Azure CloudAzure Virtual Machines Senior
QUESTION 180: You are designing a solution where stateless application will run on a virtual machine. You want to make sure that the system will fail over to a secondary region if the first region goes down. How will you achieve it? Show Answer Azure CloudAzure Traffic ManagerAzure Virtual Machines Senior
QUESTION 181: Does Azure Traffic Manager support rate limiting? Show Answer Azure CloudAzure Traffic Manager Senior
QUESTION 182: Does Azure Front Door support rate limiting? Show Answer Azure CloudAzure Front Door Senior
QUESTION 183: What are the Azure services that can be used for load balancing? Show Answer Azure Application GatewayAzure CloudAzure Front DoorAzure Load BalancerAzure Traffic Manager Senior
QUESTION 184: Can Azure Traffic Manager load balance across multiple regions? Show Answer Azure CloudAzure Traffic Manager Senior
QUESTION 185: Can Azure Load Balancer load balance across multiple regions? Show Answer Azure CloudAzure Load Balancer Senior
QUESTION 186: Can Azure Application Gateway load balance across multiple regions? Show Answer Azure Application GatewayAzure Cloud Senior
QUESTION 187: Can you use virtual machine scale set (VMSS) across multiple regions? Show Answer Azure CloudAzure Virtual Machine Scale Sets Senior
QUESTION 188: You are creating an Azure app that provides streaming video to users. You need to make sure that the application will store data in a geographical location that is as close as possible to a user. Which solution will you recommend? Show Answer Azure CDNAzure Cloud Senior
QUESTION 189: You have an Azure web application that runs in two regions. You use an Azure storage account for storing large files. You need to make the files available in both regions so that the users can download files in their region. You don't want to upload files two times. How will you solve this? Show Answer Azure CloudAzure Storage Senior
QUESTION 190: You plan to migrate your on-premises Windows HPC cluster workload to Azure Batch. What do you recommend to do in order to minimize cost and support the large-scale parallel execution of Azure Batch jobs? Show Answer Azure BatchAzure Cloud Senior
QUESTION 191: When creating an Azure Batch account, what are the two possible pool allocation modes? Show Answer Azure BatchAzure Cloud Senior
QUESTION 192: You plan to run a video rendering jobs in Azure. You plan to use parallel compute processes. What service will you select to run the workload? Show Answer Azure BatchAzure Cloud Senior
QUESTION 193: Your application that is supposed to run in Azure uses two containers. One container contains the backend API and is available to the public. The second container performs health monitoring of the API and will remain private. The containers need to be deployed as a group. What solution do you recommend to use to host the containers and minimize costs and maintenance overhead? Show Answer Azure CloudAzure Container Instances Senior
QUESTION 194: What is an Azure site-to-site VPN? Show Answer Azure CloudAzure Virtual Networks Senior
QUESTION 195: What is an Azure point-to-site VPN? Show Answer Azure CloudAzure Virtual Networks Senior
QUESTION 196: You need to connect your on-premises network with Azure VNET. What is a cheaper solution - site-to-site VPN or ExpressRoute? Show Answer Azure CloudAzure Virtual Networks Senior
QUESTION 197: Your Azure subscription contains multiple Azure virtual machines that run Windows Server and Linux. You are collecting security-related events using Azure Monitor. What log tables will you use for querying the events? Show Answer Azure CloudAzure MonitorAzure Virtual Machines Senior
QUESTION 198: You have an Azure Virtual Network (VNET) with 2 subnets. One subnet contains 2 Azure Virtual Machines, the other subnet has Azure API Management (APIM) integrated. The APIM Virtual network is set to External. Will public users be able to access the VMs? Show Answer Azure CloudAzure Virtual MachinesAzure Virtual Networks Senior
QUESTION 199: You are sending events to Azure Event Hub using HTTP protocol. How can you reduce the overhead associated with sending events to the hub? Show Answer Azure CloudAzure Event Hubs Senior
QUESTION 200: How can you enforce that your Azure AppService and Azure SQL Database will be deployed to the same location in your subscription? Show Answer Azure App serviceAzure CloudAzure PolicyAzure SQL Database Senior