AZ-301 Technology & Digital Applications 4 — Questions and Answers
Question 1: An organization needs to analyze streaming IoT data in real time and store aggregated results in Azure Synapse Analytics. Which Azure service should sit between IoT Hub and Synapse?
- Azure Data Factory
- Azure Stream Analytics (Correct answer)
- Azure Databricks
- Azure Logic Apps
Correct answer: Azure Stream Analytics
Azure Stream Analytics processes real-time streaming data from IoT Hub using SQL-like queries and can output aggregated results directly to Azure Synapse Analytics.
Question 2: A company wants to enable single sign-on for SaaS applications from the Azure portal. Which Azure AD feature facilitates this?
- Azure AD B2C
- Azure AD Application Proxy
- Azure AD Enterprise Applications with SAML/OIDC SSO (Correct answer)
- Azure AD Domain Services
Correct answer: Azure AD Enterprise Applications with SAML/OIDC SSO
Azure AD Enterprise Applications supports SAML and OIDC-based SSO integration, allowing users to access SaaS applications with their Azure AD credentials from the My Apps portal.
Question 3: An architect needs to design an Azure solution that ensures compliance data never leaves a specific geographic region. Which feature of Azure Storage enforces this requirement?
- Storage firewall rules
- Geo-Redundant Storage (GRS)
- Data residency through region selection and no geo-replication (Correct answer)
- Azure Policy with deny effects
Correct answer: Data residency through region selection and no geo-replication
Selecting a specific Azure region and using Locally Redundant Storage (LRS) or Zone-Redundant Storage (ZRS) ensures data remains within the chosen region without cross-region replication.
Question 4: A development team needs to implement blue-green deployments for an Azure App Service application with instant traffic switching capability. Which App Service feature supports this?
- Deployment slots with slot swap (Correct answer)
- Azure Traffic Manager weighted routing
- Azure Application Gateway with URL routing
- WebJobs deployment triggers
Correct answer: Deployment slots with slot swap
Azure App Service deployment slots allow staging new versions and performing instant slot swaps, achieving zero-downtime blue-green deployments with easy rollback.
Question 5: A company needs to query data across Azure Blob Storage, Azure SQL Database, and Azure Cosmos DB using a single T-SQL interface. Which Azure service enables this?
- Azure Data Factory
- Azure Synapse Analytics Serverless SQL (Correct answer)
- Azure Databricks
- Azure Data Lake Analytics
Correct answer: Azure Synapse Analytics Serverless SQL
Azure Synapse Analytics Serverless SQL pool allows querying data across multiple sources including Blob Storage, Data Lake, and external tables using T-SQL without loading data.
Question 6: An architect needs to protect an Azure-hosted web application from SQL injection and cross-site scripting (XSS) attacks. Which Azure service provides this protection at the application layer?
- Azure DDoS Protection
- Azure Firewall
- Azure Web Application Firewall (WAF) (Correct answer)
- Azure Network Security Groups
Correct answer: Azure Web Application Firewall (WAF)
Azure WAF deployed on Application Gateway or Azure Front Door inspects HTTP traffic and blocks common web exploits like SQL injection and XSS at the application layer.
Question 7: A company's Azure Function app experiences cold start latency issues in production. Which hosting plan eliminates cold starts by keeping instances pre-warmed?
- Consumption plan
- Premium plan (Correct answer)
- Dedicated (App Service) plan
- Flex Consumption plan
Correct answer: Premium plan
The Azure Functions Premium plan keeps pre-warmed instances ready to handle requests, eliminating cold start delays while still providing dynamic scaling.
AZ-301 Technology & Digital Applications 4
An organization needs to analyze streaming IoT data in real time and store aggregated results in Azure Synapse Analytics.
Which Azure service should sit between IoT Hub and Synapse?