AZ-301 Technology & Digital Applications 3 — Questions and Answers
Question 1: A company is migrating an on-premises application to Azure and needs to ensure that secrets, keys, and certificates are managed securely with auditable access. Which Azure service should be used?
- Azure Storage encrypted containers
- Azure Key Vault (Correct answer)
- Azure Information Protection
- Azure Defender
Correct answer: Azure Key Vault
Azure Key Vault provides centralized, hardware-backed storage for secrets, keys, and certificates with comprehensive access policies and audit logging.
Question 2: An architect needs to design a serverless API that scales automatically and supports OpenAPI specifications. Which Azure service provides this capability with minimal management overhead?
- Azure App Service
- Azure API Management (Correct answer)
- Azure Functions with HTTP triggers
- Azure Logic Apps
Correct answer: Azure API Management
Azure API Management provides a fully managed API gateway that supports OpenAPI import, automatic scaling, and acts as a facade for backend services.
Question 3: A solution architect needs to replicate an Azure SQL Database to a secondary region with automatic failover and minimal data loss. Which feature should be configured?
- Database backup and restore
- Active Geo-Replication (Correct answer)
- Azure Site Recovery
- Database mirroring
Correct answer: Active Geo-Replication
Active Geo-Replication continuously replicates an Azure SQL Database to a readable secondary in another region and supports automatic or manual failover.
Question 4: A company needs to implement a CI/CD pipeline for deploying containerized applications to AKS. Which Azure native service provides end-to-end DevOps pipeline capabilities?
- Azure Monitor
- Azure DevOps Pipelines (Correct answer)
- Azure Resource Manager
- Azure Automation
Correct answer: Azure DevOps Pipelines
Azure DevOps Pipelines provides CI/CD automation for building, testing, and deploying containerized applications to AKS and other Azure services.
Question 5: An application needs to process messages in a guaranteed order and ensure each message is processed exactly once. Which Azure messaging service best meets these requirements?
- Azure Event Hubs
- Azure Service Bus with sessions (Correct answer)
- Azure Queue Storage
- Azure Relay
Correct answer: Azure Service Bus with sessions
Azure Service Bus with message sessions supports ordered processing and duplicate detection, guaranteeing FIFO delivery and exactly-once processing semantics.
Question 6: A company wants to implement zero-trust network security for Azure-hosted applications. Which approach enforces identity verification for every access request regardless of network location?
- VPN Gateway with split tunneling
- Azure AD Conditional Access with MFA (Correct answer)
- Network Security Groups on all subnets
- Azure DDoS Protection Standard
Correct answer: Azure AD Conditional Access with MFA
Azure AD Conditional Access with MFA enforces identity verification and policy-based access controls for every request, implementing zero-trust principles regardless of network location.
Question 7: When designing an Azure solution, a company needs to run background jobs that process items from a queue triggered by queue depth. Which Azure compute option is most appropriate?
- Azure App Service WebJobs
- Azure Batch
- Azure Functions with Queue trigger (Correct answer)
- Azure Container Instances
Correct answer: Azure Functions with Queue trigger
Azure Functions with a Queue Storage or Service Bus trigger automatically scales and invokes functions in response to queue messages, ideal for event-driven background processing.
AZ-301 Technology & Digital Applications 3
A company is migrating an on-premises application to Azure and needs to ensure that secrets, keys, and certificates are managed securely with auditable access.
Which Azure service should be used?