Microsoft Azure Architect Design (AZ-301) — Questions and Answers

Question 1: An organization wants to minimize costs for their disaster recovery environment by keeping Azure resources in a minimal state and scaling up only during failover. Which DR strategy does this represent?

Cold standby
Active-Active
Pilot light (Correct answer)
Warm standby

Correct answer: Pilot light

The Pilot light strategy keeps a minimal core infrastructure running in the DR region (just enough to 'light the pilot') and scales up compute resources only when failover is triggered.

Question 2: An architect needs to design a data lake solution on Azure that supports structured, semi-structured, and unstructured data with hierarchical namespaces for efficient analytics. Which service should be used?

Azure Table Storage
Azure Data Lake Storage Gen2 (Correct answer)
Azure Files
Azure Blob Storage

Correct answer: Azure Data Lake Storage Gen2

Azure Data Lake Storage Gen2 combines Azure Blob Storage with hierarchical namespace support, optimized for big data analytics with POSIX-like permissions.

Question 3: Which Azure tool generates a risk assessment report tailored to your specific cloud environment, helping organizations understand their security posture relative to the Azure Security Benchmark?

Azure Service Health
Azure Advisor
Azure Monitor Workbooks
Microsoft Defender for Cloud (Regulatory Compliance dashboard) (Correct answer)

Correct answer: Microsoft Defender for Cloud (Regulatory Compliance dashboard)

Microsoft Defender for Cloud's Regulatory Compliance dashboard maps your environment against benchmarks like Azure Security Benchmark, generating risk assessment insights.

Question 4: A stakeholder escalates a complaint that the Azure architecture is too complex and difficult for their team to operate. How should the architect respond?

Blame the stakeholder's team for insufficient Azure skills
Defend the complexity as architecturally necessary without further discussion
Conduct a complexity review with the operations team to identify simplification opportunities and provide targeted Azure documentation and runbook support (Correct answer)
Reduce complexity by removing critical availability components

Correct answer: Conduct a complexity review with the operations team to identify simplification opportunities and provide targeted Azure documentation and runbook support

A collaborative review surfaces specific pain points and separates necessary complexity from accidental complexity, preserving reliability while improving operability.

Question 5: During a design review, two business units present conflicting requirements for an Azure shared services architecture. How should the architect facilitate resolution?

Choose the requirement from the higher-revenue business unit automatically
Defer the conflict to the next project phase
Facilitate a joint workshop with both units to identify shared goals and document agreed-upon requirements with sign-off from both parties (Correct answer)
Design separate independent architectures for each unit to avoid conflict

Correct answer: Facilitate a joint workshop with both units to identify shared goals and document agreed-upon requirements with sign-off from both parties

A joint workshop surfaces shared goals and produces mutually signed-off requirements, preventing future rework from unresolved conflicts.

Question 6: When designing a multi-model database solution that needs to store and query data as documents, graphs, key-value pairs, and wide-column tables in a single globally distributed service, which Azure service should be used?

Azure Cache for Redis
Azure Table Storage
Azure SQL Database
Azure Cosmos DB (Correct answer)

Correct answer: Azure Cosmos DB

Azure Cosmos DB is a globally distributed multi-model database supporting document, graph, key-value, table, and column-family APIs in a single service.

Question 7: An architect must produce evidence that an Azure Event Hub namespace can sustain 50,000 events per second before production deployment. Which approach provides the most valid load evidence?

Calculating theoretical throughput from Throughput Unit limits in documentation
Running a load test using Azure Load Testing targeting the Event Hub endpoint and measuring throughput and throttled request rates (Correct answer)
Checking the Event Hub namespace metric 'Incoming Requests' in the portal
Reviewing Azure Advisor Event Hub recommendations

Correct answer: Running a load test using Azure Load Testing targeting the Event Hub endpoint and measuring throughput and throttled request rates

Azure Load Testing produces measured throughput evidence under realistic concurrency, validating actual Event Hub behavior rather than relying on theoretical limits.

Question 8: A release manager wants to ensure only tested builds are promoted to production in Azure Pipelines. Which feature enforces human approval between stages?

Branch policies
Azure Policy DeployIfNotExists
Environment approvals and checks in Azure Pipelines (Correct answer)
Azure Monitor alerts

Correct answer: Environment approvals and checks in Azure Pipelines

Azure Pipelines environment approvals require designated reviewers to approve before a pipeline stage deploys to a protected environment.

Question 9: How does continuous improvement apply to AZ-301 quality management?

It means constant major changes
It applies only to products
It involves ongoing incremental enhancements to processes based on data and feedback (Correct answer)
It is a one-time initiative

Correct answer: It involves ongoing incremental enhancements to processes based on data and feedback

This is fundamental to AZ-301 - Microsoft Azure Solutions Architect Expert practice. It involves ongoing incremental enhancements to processes based on data and feedback represents the professional standard for quality in the AZ-301 certification framework.

Question 10: An architect needs to design a solution for managing database schemas across multiple Azure SQL databases that are part of an elastic pool, ensuring all databases run the same schema version. Which Azure service helps orchestrate this?

Azure SQL Elastic Jobs (Correct answer)
Azure Logic Apps
Azure Data Factory
Azure Automation

Correct answer: Azure SQL Elastic Jobs

Azure SQL Elastic Jobs is a database job service that runs T-SQL scripts across multiple databases in an elastic pool or custom groups for schema management.

Question 11: An architect is designing a globally distributed application that requires automatic failover and the ability to route traffic based on user proximity. Which Azure service provides DNS-based global traffic routing?

Azure Traffic Manager (Correct answer)
Azure Front Door
Azure Application Gateway
Azure Load Balancer

Correct answer: Azure Traffic Manager

Azure Traffic Manager uses DNS-based routing to direct traffic using policies like performance, priority, or geographic routing for global failover.

Question 12: A company needs to store petabytes of unstructured data (images, videos, backups) in Azure with the lowest possible storage cost for data accessed less than once per month. Which storage tier should be used?

Hot tier
Archive tier (Correct answer)
Cool tier
Premium tier

Correct answer: Archive tier

Azure Blob Storage Archive tier offers the lowest storage cost but with highest access latency and costs, designed for data rarely accessed over months or years.

Question 13: A governance team is researching which Azure resources lack required tags for chargeback evidence. Which approach efficiently identifies all non-compliant resources across subscriptions?

Azure Policy with a 'require tag' initiative assigned at management group scope, reviewed via the Compliance dashboard
Azure Advisor operational excellence recommendations
Manual Azure Portal resource group review
Azure Resource Graph Explorer with a tag-presence filter query (Correct answer)

Correct answer: Azure Resource Graph Explorer with a tag-presence filter query

Azure Resource Graph Explorer runs KQL queries across all subscriptions instantly, making it the fastest way to enumerate resources missing specific tags as compliance evidence.

Question 14: An architect needs to design a BCDR solution where the secondary site actively serves read traffic during normal operations. Which pattern best describes this?

Active-Active (multi-region) (Correct answer)
Active-Passive (warm standby)
Pilot light
Active-Passive (cold standby)

Correct answer: Active-Active (multi-region)

An Active-Active multi-region pattern means both regions simultaneously handle traffic, including reads, ensuring zero failover time and enabling true load distribution.

Question 15: When designing a hybrid connectivity solution, a company requires a dedicated private connection from their on-premises datacenter to Azure with guaranteed bandwidth and SLAs. Which service should be used?

Azure ExpressRoute (Correct answer)
Azure Virtual WAN
Azure VPN Gateway
Azure Bastion

Correct answer: Azure ExpressRoute

Azure ExpressRoute provides a dedicated private connection bypassing the public internet with guaranteed bandwidth and Microsoft SLAs.

Question 16: You have an Active Directory forest on-premises and a tenant on Azure Active Directory (Azure AD). A Premium P1 license is issued to all Azure AD users. <br> You set up Azure Active Directory Connect. <br> Which two elements are available in this environment that can help your company's help desk cut operational overhead? Each accurate response provides a comprehensive solution.

Azure AD Privileged Identity Management policies
password writeback (Correct answer)
self-service password reset (Correct answer)
access reviews

Correct answer: password writeback

Explanation: <br> self-service password reset - Any automated procedure or technology that allows users to reset their own password is referred to as self-service password reset (SSPR). Self-service password resets are meant to relieve IT and customer support professionals of some of their responsibilities. <br> Password writeback - is an Azure AD Connect feature that allows password changes in the cloud to be written back in real time to an existing on-premises directory.

Question 17: A SaaS company serves multiple enterprise customers and must ensure each customer's data is completely isolated at the database level while minimizing management overhead. Which Azure SQL approach is best?

A single Azure SQL Database with tenant_id column and application-level isolation
Azure SQL Managed Instance per tenant
Single Azure SQL Database per tenant with separate server per customer
Azure SQL Elastic Pool with one database per tenant and row-level security (Correct answer)

Correct answer: Azure SQL Elastic Pool with one database per tenant and row-level security

Elastic Pools share compute resources cost-effectively while providing database-level isolation per tenant, reducing management overhead versus per-tenant servers.

Question 18: An architect is designing disaster recovery for Azure SQL Database with an RPO of 1 hour and an RTO of 30 minutes. Which combination best meets these requirements?

Active Geo-Replication with auto-failover groups (Correct answer)
Database copy to secondary region
Automated backups with point-in-time restore
Long-term backup retention with manual restore

Correct answer: Active Geo-Replication with auto-failover groups

Auto-failover groups with Active Geo-Replication provide near-zero RPO through continuous replication and automated failover achieving RTO well under 30 minutes.

Question 19: What is the role of professional journals in AZ-301 - Microsoft Azure Solutions Architect Expert practice?

They are outdated by publication time
They are optional reading
They disseminate current research, best practices, and professional developments (Correct answer)
They only benefit academics

Correct answer: They disseminate current research, best practices, and professional developments

This is fundamental to AZ-301 - Microsoft Azure Solutions Architect Expert practice. They disseminate current research, best practices, and professional developments represents the professional standard for research in the AZ-301 certification framework.

Question 20: A company requires a managed relational database service on Azure with 99.99% SLA, built-in high availability across availability zones, and automatic backups without managing infrastructure. Which service is most appropriate?

SQL Server on Azure VMs
Azure SQL Database (General Purpose)
Azure SQL Database (Business Critical) (Correct answer)
Azure SQL Managed Instance

Correct answer: Azure SQL Database (Business Critical)

Azure SQL Database Business Critical tier provides 99.99% SLA with local SSD storage and automatic failover across availability zones for highest availability.

Question 21: A healthcare company must ensure patient data stored in Azure meets HIPAA requirements. Which Azure service provides built-in HIPAA compliance documentation and audit reports?

Microsoft Service Trust Portal (Correct answer)
Azure Compliance Manager
Azure Security Center
Azure Policy

Correct answer: Microsoft Service Trust Portal

The Microsoft Service Trust Portal provides HIPAA audit reports, compliance guides, and third-party assessments for regulated industries.

Question 22: Your QA process requires verifying that an Azure API responds correctly from multiple global locations every five minutes. Which Application Insights feature handles this?

Smart Detection
Dependency Tracking
Availability Tests (URL Ping or Multi-step Web Tests) (Correct answer)
Live Metrics

Correct answer: Availability Tests (URL Ping or Multi-step Web Tests)

Application Insights Availability Tests send synthetic requests from multiple global Points of Presence on a defined schedule to verify endpoint health.

Question 23: What is a risk mitigation strategy in AZ-301 - Microsoft Azure Solutions Architect Expert practice?

Transferring all responsibility
Ignoring low-probability risks
Only addressing risks after they occur
Implementing controls that reduce the likelihood or impact of identified risks (Correct answer)

Correct answer: Implementing controls that reduce the likelihood or impact of identified risks

This is fundamental to AZ-301 - Microsoft Azure Solutions Architect Expert practice. Implementing controls that reduce the likelihood or impact of identified risks represents the professional standard for risk management in the AZ-301 certification framework.

Question 24: An evidence-based capacity planning exercise requires forecasting Azure SQL Database storage growth over 6 months. Which Azure Monitor data source provides the historical storage consumption trend needed for this projection?

Azure Advisor SQL recommendations
Azure SQL Database 'storage_used' metric in Azure Monitor Metrics (Correct answer)
Azure SQL Intelligent Insights logs
Azure Cost Management reserved capacity utilization

Correct answer: Azure SQL Database 'storage_used' metric in Azure Monitor Metrics

The 'storage_used' metric in Azure Monitor Metrics for Azure SQL Database provides historical data points that can be trended for 6-month capacity forecasting.

Question 25: Why is evidence-based practice important in AZ-301 - Microsoft Azure Solutions Architect Expert?

It integrates best available evidence with professional expertise for optimal outcomes (Correct answer)
It is a theoretical concept only
It only applies to academic settings
It replaces experience

Correct answer: It integrates best available evidence with professional expertise for optimal outcomes

This is fundamental to AZ-301 - Microsoft Azure Solutions Architect Expert practice. It integrates best available evidence with professional expertise for optimal outcomes represents the professional standard for research in the AZ-301 certification framework.

Question 26: Your organization processes EU citizen data and must comply with GDPR's data transfer restrictions. Which mechanism allows lawful transfer of personal data from the EU to the US when using Azure?

Azure Geo-replication agreement
EU-US Blanket Transfer Policy
Standard Contractual Clauses (SCCs) included in Microsoft's DPA (Correct answer)
Azure Data Factory cross-region pipelines

Correct answer: Standard Contractual Clauses (SCCs) included in Microsoft's DPA

Microsoft's Data Processing Agreement includes Standard Contractual Clauses approved by EU authorities, enabling lawful cross-border data transfers.

Question 27: When architecting a solution using Azure Service Fabric, which programming model allows you to build stateful microservices that persist state within the service itself without an external database?

Reliable Actors
Reliable Services (Correct answer)
Containers
Guest Executables

Correct answer: Reliable Services

Reliable Services in Azure Service Fabric allows developers to build stateful services using Reliable Collections that persist state within the service.

Question 28: A solutions architect is presenting an Azure migration plan to a CFO who has no technical background. Which approach best communicates the business value of the proposed architecture?

Explain virtual network peering and subnet configurations in depth
Detail every Azure service's API capabilities
Present ARM templates and infrastructure-as-code scripts
Focus on cost savings, risk reduction, and business continuity metrics (Correct answer)

Correct answer: Focus on cost savings, risk reduction, and business continuity metrics

Non-technical executives need business outcomes like cost, risk, and continuity rather than technical implementation details.

Question 29: A quality gate in an Azure Pipelines CI build must validate that no critical vulnerabilities exist in container images before pushing to Azure Container Registry. Which integration achieves this?

Azure Monitor container insights alerts
Azure Blueprints artifact validation
Azure Policy deny effect on ACR
Microsoft Defender for Containers image scanning in the pipeline (Correct answer)

Correct answer: Microsoft Defender for Containers image scanning in the pipeline

Microsoft Defender for Containers can scan images during CI pipelines and fail the build if critical CVEs are detected before the image is pushed.

Microsoft Azure Architect Design (AZ-301)

AZ-301 measured candidates' ability to design Azure solutions covering identity and security, data platforms, business continuity, and infrastructure strategies. It was required alongside AZ-300 to earn the Microsoft Certified: Azure Solutions Architect Expert credential before being retired in June 2021.

Questions

150 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds