AZ-300 Test 1

Question 1

Subscription1 and Subscription2 are the names of two subscriptions you have. Each Azure AD tenant is paired with a distinct subscription.
VNet1 is a virtual network that is part of Subscription1. VNet1 has an IP address space of 10.0.0.0/16 and contains an Azure virtual machine named VM1.
VNet2 is a virtual network that is part of Subscription2. Vnet2 has an IP address space of 10.10.0.0/24 and contains an Azure virtual machine named VM2.
VNet1 must be connected to VNet2.
What should you start with?

Accepted Answer

Provision virtual network gateways

Answer

To connect two virtual networks (VNets) that reside in different Azure subscriptions, you need to establish a VNet-to-VNet connection. This type of connection requires provisioning a virtual network gateway in each VNet. These gateways act as the endpoints for the VPN tunnel, enabling secure and private communication between resources in VNet1 and VNet2 across the different subscriptions.

Question 2

You have a tenant for Azure Active Directory (Azure AD).
Policy1 is an Azure AD conditional access policy that you already have. When members of the Global Administrators group authenticate to Azure AD from untrusted sites,
Policy1 requires them to use Azure AD-joined devices.
When authenticating from untrusted locations, you must guarantee that members of the Global Administrators group are likewise obliged to use multi-factor authentication.
What are your options?

Accepted Answer

From the Azure portal, modify grant control of Policy1

Answer

To enforce multi-factor authentication (MFA) within an Azure AD Conditional Access policy, you must configure the 'Grant' control. The 'Grant' control specifies the requirements users must satisfy to gain access, such as requiring MFA, a compliant device, or a hybrid Azure AD joined device. Modifying Policy1's grant control to include 'Require multi-factor authentication' will ensure Global Administrators are prompted for MFA when authenticating from untrusted locations.

Question 3

In the e-commerce web app, you must access user claims. What should you start with?

Accepted Answer

Make a Microsoft Graph API call from the ecommerce web app using custom code.

Answer

To access comprehensive user claims beyond basic identity information in an e-commerce web app, the most effective method is to make a Microsoft Graph API call using custom code. The Microsoft Graph API provides a unified endpoint for accessing data across Microsoft 365, including detailed user profiles and claims from Azure AD. The web app can obtain an access token and then use it to query the Graph API for the specific user's claims, ensuring access to rich and up-to-date information.

Question 4

For Policy Service, you must meet the scaling requirements.
What kind of data should you keep in Azure Redis Cache?

Accepted Answer

HttpContext.tems

Answer

While `HttpContext.Items` is typically used for transient, request-scoped data within a single server instance, in highly distributed or microservices architectures, specific request context or intermediate policy evaluation results might need to be temporarily shared across multiple service instances or asynchronous operations involved in processing a single request. In such advanced scaling scenarios, `HttpContext.Items` data could be serialized and stored in a distributed cache like Azure Redis Cache to maintain context consistency across the distributed components, thereby supporting the service's scaling requirements.

Question 5

You must guarantee that the solution can scale to satisfy Policy Service's scaling requirements.
Which data model in Azure Application Insights should you use?

Accepted Answer

an Application Insights metric

Answer

To meet scaling requirements for a Policy Service, monitoring its performance and resource utilization is crucial. Azure Application Insights metrics are specifically designed for collecting numerical data points over time, such as request rates, response times, CPU usage, and custom performance counters. These metrics provide real-time insights into the service's health, bottlenecks, and load, enabling informed decisions for auto-scaling rules or manual scaling adjustments to handle varying demands effectively.

AZ-300 - Microsoft Azure Solutions Architect Practice Test

AZ-300 - Microsoft Azure Solutions Architect Practice Test

AZ-300 Test 1