AZ-301 Professional Standards & Competencies 5 — Questions and Answers
Question 1: An architect must communicate that a proposed Azure solution will cost approximately $50,000/month. Which approach best supports this estimate in a design document?
- Provide a verbal estimate based on experience
- Include an Azure Pricing Calculator export with itemized service costs (Correct answer)
- List the number of resources without pricing details
- Reference a previous project's invoice as a baseline
Correct answer: Include an Azure Pricing Calculator export with itemized service costs
An Azure Pricing Calculator export provides transparent, itemized, and reproducible cost estimates tied to specific service SKUs and configurations.
Question 2: A design review identifies that a monolithic application cannot scale its database tier independently of the application tier. Which architectural pattern resolves this?
- Sharding the monolith database horizontally
- Decomposing to microservices with dedicated data stores per service (Correct answer)
- Adding read replicas to the existing monolith database
- Moving the monolith to a larger VM SKU
Correct answer: Decomposing to microservices with dedicated data stores per service
Microservices with dedicated data stores allow each service's persistence layer to scale independently based on its specific workload demands.
Question 3: An architect is defining the recovery strategy for a Tier-1 workload with an RTO of 1 hour. Which strategy is most appropriate?
- Backup and restore from cold storage
- Pilot light with pre-deployed minimal infrastructure
- Warm standby with automated failover (Correct answer)
- Active-active multi-region with load balancing
Correct answer: Warm standby with automated failover
A warm standby with automated failover can restore service within minutes to under an hour, meeting a 1-hour RTO without the cost of full active-active.
Question 4: A project team is debating whether to use IaaS or PaaS for a new web application. Which professional consideration should drive the recommendation toward PaaS?
- PaaS always costs less than IaaS
- PaaS reduces operational overhead by abstracting OS and middleware management (Correct answer)
- PaaS provides more control over the underlying infrastructure
- PaaS is required for all Azure compliance certifications
Correct answer: PaaS reduces operational overhead by abstracting OS and middleware management
PaaS abstracts OS patching, middleware updates, and infrastructure management, reducing operational burden and allowing teams to focus on application code.
Question 5: An architect needs to ensure a design review covers security, reliability, cost, and operational excellence systematically. Which framework provides this structure?
- TOGAF Enterprise Architecture Framework
- Azure Well-Architected Framework (Correct answer)
- ITIL Service Management Framework
- NIST Cybersecurity Framework
Correct answer: Azure Well-Architected Framework
The Azure Well-Architected Framework organizes design reviews across five pillars: Reliability, Security, Cost Optimization, Operational Excellence, and Performance Efficiency.
Question 6: During a stakeholder review, a business owner asks why the architect recommends Azure Front Door instead of a simple load balancer for a global web app. What is the most accurate justification?
- Front Door is cheaper than Azure Load Balancer for all scenarios
- Front Door provides global HTTP load balancing, WAF, SSL offload, and intelligent routing across regions (Correct answer)
- Front Door supports more protocols than Load Balancer
- Front Door replaces the need for CDN in all cases
Correct answer: Front Door provides global HTTP load balancing, WAF, SSL offload, and intelligent routing across regions
Azure Front Door combines global HTTP(S) load balancing, WAF, SSL termination, and latency-based routing in a single service optimized for web applications.
Question 7: An architect recommends using managed identities instead of service principals with secrets for Azure resource authentication. What is the primary professional rationale?
- Managed identities are free while service principals cost money
- Managed identities eliminate the need to store and rotate credentials, reducing secret sprawl risk (Correct answer)
- Managed identities provide higher RBAC permissions than service principals
- Managed identities work across all cloud providers
Correct answer: Managed identities eliminate the need to store and rotate credentials, reducing secret sprawl risk
Managed identities are automatically managed by Azure AD and require no credential storage or rotation, eliminating a major class of credential-leakage vulnerabilities.
An architect must communicate that a proposed Azure solution will cost approximately $50,000/month.
Which approach best supports this estimate in a design document?