Mixed Deck — All AZ-301 Topics Flashcards

How do AZ-301 professionals maintain digital competency?

Answer: Through ongoing training, practice with new tools, and staying current with technological advances

This is fundamental to AZ-301 - Microsoft Azure Solutions Architect Expert practice. Through ongoing training, practice with new tools, and staying current with technological advances represents the professional standard for technology in the AZ-301 certification framework.

A healthcare organization implements Azure for storing electronic health records (EHR). Which HIPAA safeguard category requires implementing access controls, audit controls, and transmission security?

Answer: Technical Safeguards

HIPAA Technical Safeguards require access controls, audit controls, integrity controls, and transmission security for electronic protected health information (ePHI).

A company's DR plan requires an RTO of 15 minutes and an RPO of 5 minutes for a critical Azure SQL Database workload. Which configuration achieves this?

Answer: Active geo-replication with auto-failover groups configured

Active geo-replication with auto-failover groups provides automatic failover meeting a 15-minute RTO with continuous log shipping achieving near-zero RPO.

What is the primary value of case study analysis in AZ-301 - Microsoft Azure Solutions Architect Expert training?

Answer: Developing critical thinking by applying theory to realistic professional scenarios

This is fundamental to AZ-301 - Microsoft Azure Solutions Architect Expert practice. Developing critical thinking by applying theory to realistic professional scenarios represents the professional standard for practical in the AZ-301 certification framework.

Which Azure Storage redundancy option replicates data synchronously across three availability zones within the same region?

Answer: Zone Redundant Storage (ZRS)

Zone Redundant Storage (ZRS) replicates data synchronously across three Azure availability zones in the same region, protecting against datacenter-level failures within that region.

A company wants to implement a serverless integration workflow that connects multiple SaaS services and on-premises systems without writing code. Which Azure service is best suited?

Answer: Azure Logic Apps

Azure Logic Apps provides a low-code/no-code workflow designer with 400+ connectors for integrating SaaS and on-premises systems.

What is the most effective communication approach for AZ-301 professionals?

Answer: Adapting communication style to the audience while maintaining accuracy and clarity

This is fundamental to AZ-301 - Microsoft Azure Solutions Architect Expert practice. Adapting communication style to the audience while maintaining accuracy and clarity represents the professional standard for communication in the AZ-301 certification framework.

An organization wants to minimize costs for their disaster recovery environment by keeping Azure resources in a minimal state and scaling up only during failover. Which DR strategy does this represent?

Answer: Pilot light

The Pilot light strategy keeps a minimal core infrastructure running in the DR region (just enough to 'light the pilot') and scales up compute resources only when failover is triggered.

When designing a hybrid connectivity solution, a company requires a dedicated private connection from their on-premises datacenter to Azure with guaranteed bandwidth and SLAs. Which service should be used?

Answer: Azure ExpressRoute

Azure ExpressRoute provides a dedicated private connection bypassing the public internet with guaranteed bandwidth and Microsoft SLAs.

A solution architect needs to replicate an Azure SQL Database to a secondary region with automatic failover and minimal data loss. Which feature should be configured?

Answer: Active Geo-Replication

Active Geo-Replication continuously replicates an Azure SQL Database to a readable secondary in another region and supports automatic or manual failover.

What is the importance of data security in AZ-301 digital applications?

Answer: Protecting sensitive information from unauthorized access, breaches, and loss is essential

This is fundamental to AZ-301 - Microsoft Azure Solutions Architect Expert practice. Protecting sensitive information from unauthorized access, breaches, and loss is essential represents the professional standard for technology in the AZ-301 certification framework.

A microservices application on Azure Kubernetes Service requires service-to-service communication with automatic retry, circuit breaking, and mutual TLS. Which pattern should the architect implement?

Answer: Service Mesh pattern

A Service Mesh like Istio or Open Service Mesh provides automatic retry, circuit breaking, and mTLS for service-to-service communication in AKS.

An enterprise application uses Azure Active Directory for authentication. Developers need to implement OAuth 2.0 authorization code flow. Which endpoint version should be used for the broadest compatibility with both personal and work accounts?

Answer: v2.0 endpoint

The Microsoft identity platform v2.0 endpoint supports both personal Microsoft accounts and Azure AD work/school accounts using a unified authentication flow.

How should AZ-301 professionals prioritize identified risks?

Answer: Based on likelihood of occurrence combined with severity of potential impact

This is fundamental to AZ-301 - Microsoft Azure Solutions Architect Expert practice. Based on likelihood of occurrence combined with severity of potential impact represents the professional standard for risk management in the AZ-301 certification framework.

A retail company's e-commerce platform experiences traffic spikes of 10x normal load during holiday sales. The solution must auto-scale and minimize cost during off-peak hours. Which architecture best addresses this?

Answer: Azure App Service with auto-scale rules tied to CPU and HTTP queue length

Azure App Service auto-scale rules based on CPU and HTTP queue metrics allow elastic scaling that matches demand and reduces costs when idle.

During a stakeholder review, a business owner asks why the architect recommends Azure Front Door instead of a simple load balancer for a global web app. What is the most accurate justification?

Answer: Front Door provides global HTTP load balancing, WAF, SSL offload, and intelligent routing across regions

Azure Front Door combines global HTTP(S) load balancing, WAF, SSL termination, and latency-based routing in a single service optimized for web applications.

A security architect must ensure that Azure AD sign-ins from risky locations or flagged users automatically require MFA or are blocked. Which Azure AD feature implements this risk-based policy?

Answer: Azure AD Identity Protection with Conditional Access

Azure AD Identity Protection detects sign-in risks and integrates with Conditional Access to automatically enforce MFA or block access based on risk level.

An Azure architect is onboarding a new technical stakeholder who missed the initial design sessions. Which artifact is most efficient for bringing them up to speed on key decisions?

Answer: A curated set of Architecture Decision Records (ADRs) and the current architecture diagram with annotations

ADRs paired with annotated architecture diagrams efficiently convey both what was built and why, enabling rapid onboarding of new technical stakeholders.

An organization needs to provide external partners with access to their Azure resources using the partners' own Azure AD credentials without creating guest accounts. Which Azure AD feature enables this?

Answer: Azure AD B2B Collaboration

Azure AD B2B Collaboration allows external partners to access your resources using their own organizational credentials via trust relationships.

A healthcare organization must perform a risk assessment before migrating to Azure. Which Azure document describes the shared responsibility model that defines Microsoft's vs. the customer's risk obligations?

Answer: Azure Trust Center / Service Trust Portal

The Azure Service Trust Portal (trust.microsoft.com) hosts compliance documentation including the shared responsibility model and audit reports.