AZ-301 Technology & Digital Applications 5 — Questions and Answers
Question 1: An enterprise needs to implement a service mesh for microservices running on AKS to handle mutual TLS, traffic management, and observability. Which open-source service mesh is natively supported with AKS add-ons?
- Linkerd
- Consul Connect
- Istio (via AKS OSM add-on/Istio add-on) (Correct answer)
- Envoy standalone
Correct answer: Istio (via AKS OSM add-on/Istio add-on)
AKS offers a managed Istio-based service mesh add-on that provides mTLS, traffic management, and observability without requiring manual installation and management.
Question 2: A company needs to implement event-driven communication between microservices without tight coupling, using a publish-subscribe pattern in Azure. Which service is best suited?
- Azure Service Bus queues
- Azure Event Grid (Correct answer)
- Azure Relay
- Azure Notification Hubs
Correct answer: Azure Event Grid
Azure Event Grid provides a fully managed event routing service supporting publish-subscribe patterns, enabling decoupled event-driven architectures between microservices.
Question 3: An organization requires that all Azure resource deployments comply with specific naming conventions and required tags. Which Azure service should enforce these policies at deployment time?
- Azure Blueprints
- Azure Policy with deny and append effects (Correct answer)
- Azure Resource Manager locks
- Azure Advisor
Correct answer: Azure Policy with deny and append effects
Azure Policy with deny effects blocks non-compliant deployments and append effects automatically add required tags, enforcing governance rules at resource creation time.
Question 4: A company needs to expose an on-premises WCF service to Azure-hosted applications without opening inbound firewall ports. Which Azure service facilitates this hybrid connectivity?
- Azure VPN Gateway
- Azure ExpressRoute
- Azure Relay (Correct answer)
- Azure Service Bus
Correct answer: Azure Relay
Azure Relay enables on-premises services to be exposed to cloud applications by creating an outbound connection through the relay service without requiring inbound firewall rules.
Question 5: An architect is designing disaster recovery for Azure SQL Database with an RPO of 1 hour and an RTO of 30 minutes. Which combination best meets these requirements?
- Automated backups with point-in-time restore
- Active Geo-Replication with auto-failover groups (Correct answer)
- Long-term backup retention with manual restore
- Database copy to secondary region
Correct answer: Active Geo-Replication with auto-failover groups
Auto-failover groups with Active Geo-Replication provide near-zero RPO through continuous replication and automated failover achieving RTO well under 30 minutes.
Question 6: A solution requires running containerized workloads on Azure without managing any infrastructure or orchestrator. Which Azure service provides the most minimal management overhead for single containers?
- Azure Kubernetes Service
- Azure App Service for Containers
- Azure Container Instances (Correct answer)
- Azure Service Fabric
Correct answer: Azure Container Instances
Azure Container Instances (ACI) lets you run containers directly on Azure without managing VMs or orchestrators, providing the simplest way to run isolated containers on demand.
Question 7: A company wants to implement Azure monitoring with automatic remediation when a VM's CPU exceeds 90% for 5 minutes. Which combination of Azure services achieves this?
- Azure Monitor alerts with Azure Automation runbooks (Correct answer)
- Azure Security Center with auto-response
- Azure Advisor with automatic fixes
- Log Analytics with scheduled queries
Correct answer: Azure Monitor alerts with Azure Automation runbooks
Azure Monitor metric alerts can trigger Azure Automation runbooks as action groups, enabling automatic remediation workflows when defined thresholds are breached.
AZ-301 Technology & Digital Applications 5
An enterprise needs to implement a service mesh for microservices running on AKS to handle mutual TLS, traffic management, and observability.
Which open-source service mesh is natively supported with AKS add-ons?