AZ-301 Case Studies & Practical Application 4

Question 1

A SaaS company serves multiple enterprise customers and must ensure each customer's data is completely isolated at the database level while minimizing management overhead. Which Azure SQL approach is best?

Accepted Answer

Azure SQL Elastic Pool with one database per tenant and row-level security

Answer

Elastic Pools share compute resources cost-effectively while providing database-level isolation per tenant, reducing management overhead versus per-tenant servers.

Question 2

An architect is designing a solution where Azure Functions must access a SQL database without storing connection strings in application settings or code. What is the recommended approach?

Accepted Answer

Store the connection string in Azure Key Vault and reference it via Key Vault references in App Settings

Answer

Key Vault references in App Settings allow Azure Functions to retrieve secrets from Key Vault at runtime without exposing them in configuration files.

Question 3

A gaming company needs a globally distributed, low-latency data store for player session state. Reads must return data within 10ms from any region, and writes must be accepted in multiple regions simultaneously. Which Azure service is appropriate?

Accepted Answer

Azure Cosmos DB with multi-region writes enabled

Answer

Cosmos DB with multi-region writes (multi-master) allows writes and reads in any configured region with single-digit millisecond latency guarantees.

Question 4

A company's architecture review identifies that their Azure Kubernetes Service cluster nodes are running at 90% CPU during peak hours, causing pod evictions. What is the correct remediation at the infrastructure level?

Accepted Answer

Enable cluster auto-scaler to add nodes when resource pressure is detected

Answer

The cluster auto-scaler monitors for unschedulable pods or resource pressure and automatically provisions additional nodes to accommodate load.

Question 5

An insurance company must ensure all data in transit between Azure services within their VNet is encrypted and that API endpoints are never exposed to the public internet. Which design pattern achieves this?

Accepted Answer

Use Azure Private Endpoints for all PaaS services and deploy within a VNet, disabling public access

Answer

Private Endpoints bring PaaS services into the VNet with a private IP, eliminating public internet exposure, while disabling public access ensures no alternative path exists.

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 Case Studies & Practical Application 4