Microsoft AZ-304 Flashcards

A company needs to implement a disaster recovery solution for an Azure SQL Database with an RPO of 1 hour and RTO of 30 minutes. Which solution best meets these requirements?

Answer: Active geo-replication with auto-failover groups

Active geo-replication with auto-failover groups provides near-zero RPO and automatic failover meeting the 30-minute RTO requirement.

You need to design a solution that allows Azure Virtual Machines in different virtual networks to communicate privately without traversing the internet. Which feature should you use?

Answer: VNet peering

VNet peering allows VMs in different virtual networks to communicate using private IP addresses without internet traversal.

An architect needs to ensure that Azure resources can only be deployed to specific regions due to data sovereignty requirements. What should be implemented?

Answer: Azure Policy with 'allowed locations' rule

Azure Policy with an 'allowed locations' built-in policy definition enforces data sovereignty by restricting resource deployment to approved regions.

A solution requires caching frequently accessed data to reduce database load. The cache must support complex data structures and persistence. Which Azure service should you choose?

Answer: Azure Cache for Redis

Azure Cache for Redis supports complex data structures, data persistence, and pub/sub messaging, making it ideal for this use case.

You need to design authentication for an external-facing web application that supports social identity providers like Google and Facebook. Which Azure service is most appropriate?

Answer: Azure Active Directory B2C

Azure AD B2C is designed for customer-facing applications and supports social identity providers such as Google and Facebook.

A company wants to move on-premises virtual machines to Azure with minimal downtime. Which Azure service provides agentless discovery and replication for this migration?

Answer: Azure Migrate with Azure Site Recovery

Azure Migrate with Azure Site Recovery enables agentless replication of on-premises VMs to Azure, minimizing downtime during cutover.

When designing an Azure solution, you need to ensure that a resource group and all its resources cannot be accidentally deleted. What should you apply?

Answer: CanNotDelete resource lock

A CanNotDelete resource lock prevents deletion of resources while still allowing modifications, protecting against accidental removal.