AZ-301 Professional Standards & Competencies 3 — Questions and Answers
Question 1: An architect is establishing naming conventions for Azure resources across a large enterprise. Which Azure feature helps enforce these conventions automatically?
- Azure Blueprints resource locks
- Azure Policy with naming pattern rules (Correct answer)
- Azure Resource Manager tags only
- Azure Cost Management budget alerts
Correct answer: Azure Policy with naming pattern rules
Azure Policy can enforce naming conventions using 'match' conditions that validate resource names against required patterns on creation.
Question 2: A client wants to ensure that production workloads are isolated from development workloads at the billing and access control level. What is the recommended structure?
- Use separate resource groups within one subscription
- Use separate Azure subscriptions per environment (Correct answer)
- Use RBAC role assignments to restrict access within one subscription
- Use separate VNets with peering between environments
Correct answer: Use separate Azure subscriptions per environment
Separate subscriptions provide billing isolation, RBAC boundaries, and policy scopes that cleanly separate production from development.
Question 3: During architecture documentation, a team asks how to record design decisions and their rationale over time. What is the recommended professional practice?
- Store decisions in Azure DevOps work items only
- Maintain Architecture Decision Records (ADRs) in the project repository (Correct answer)
- Document decisions in deployment pipeline comments
- Use Azure Monitor to track configuration changes
Correct answer: Maintain Architecture Decision Records (ADRs) in the project repository
Architecture Decision Records (ADRs) capture the context, decision, and consequences of architectural choices in a durable, version-controlled format.
Question 4: An architect must recommend a cost optimization strategy for a batch processing workload that runs 4 hours nightly. Which compute option provides the best cost efficiency?
- Reserved VM instances (1-year)
- Azure Spot VMs with eviction handling (Correct answer)
- Dedicated hosts with savings plan
- Standard pay-as-you-go VMs
Correct answer: Azure Spot VMs with eviction handling
Azure Spot VMs offer up to 90% savings for interruptible batch workloads, and a 4-hour nightly window can tolerate eviction with retry logic.
Question 5: A regulatory audit requires proof that access to sensitive Azure resources is reviewed regularly. Which Azure capability supports this?
- Azure Security Center recommendations
- Azure AD Access Reviews (Correct answer)
- Azure Policy compliance reports
- Azure Monitor activity logs
Correct answer: Azure AD Access Reviews
Azure AD Access Reviews enable periodic, automated reviews of user and group access to ensure least-privilege compliance for audit purposes.
Question 6: An architect is defining the observability strategy for a new Azure workload. Which three pillars should be included in the design?
- Logs, alerts, and dashboards
- Metrics, logs, and distributed traces (Correct answer)
- Application Insights, Log Analytics, and Azure Monitor
- Availability tests, alerts, and cost metrics
Correct answer: Metrics, logs, and distributed traces
The three pillars of observability are metrics, logs, and distributed traces, covering performance, events, and request flows respectively.
Question 7: A solutions architect is asked to ensure that a new Azure design follows the Well-Architected Framework. Which pillar specifically addresses protecting workloads from threats?
- Reliability
- Security (Correct answer)
- Operational Excellence
- Performance Efficiency
Correct answer: Security
The Security pillar of the Azure Well-Architected Framework covers protecting applications and data from threats through identity, data protection, and network controls.
An architect is establishing naming conventions for Azure resources across a large enterprise.
Which Azure feature helps enforce these conventions automatically?