Microsoft AZ-304 Flashcards

An application needs to process messages in strict order and guarantee exactly-once delivery. Which Azure messaging service should you use?

Answer: Azure Service Bus with sessions enabled

Azure Service Bus with message sessions guarantees ordered delivery and supports duplicate detection for exactly-once processing.

You need to design a multi-tenant SaaS application where each tenant's data must be logically isolated. Which Azure SQL Database model provides the best balance of isolation and cost?

Answer: Elastic pools with row-level security

Elastic pools with row-level security provide cost-efficient resource sharing while maintaining logical data isolation between tenants.

A company requires all Azure VM disk encryption keys to be managed by the customer and stored in a dedicated HSM. Which solution should you implement?

Answer: Azure Disk Encryption with customer-managed keys in Azure Dedicated HSM

Azure Dedicated HSM with customer-managed keys gives full control over encryption keys in a dedicated hardware security module.

You are designing a solution that requires near-real-time analytics on streaming IoT data. Which combination of Azure services is most appropriate?

Answer: Azure IoT Hub → Azure Stream Analytics → Azure Synapse Analytics

IoT Hub ingests device data, Stream Analytics processes it in real-time, and Synapse Analytics provides the analytical store for near-real-time insights.

An organization needs to implement just-in-time VM access to reduce the attack surface of administrator ports. Which Azure service provides this capability?

Answer: Microsoft Defender for Cloud JIT VM access

Microsoft Defender for Cloud's JIT VM access locks down inbound traffic to management ports and opens them only when explicitly requested.

You need to design a solution for running containerized microservices that auto-scales based on HTTP traffic without managing infrastructure. Which service is most suitable?

Answer: Azure Container Apps

Azure Container Apps provides serverless containers with built-in KEDA-based autoscaling on HTTP traffic without infrastructure management.

A global application must serve users with the lowest possible latency by routing traffic to the nearest healthy endpoint. Which Azure service should you use?

Answer: Azure Front Door with latency-based routing

Azure Front Door uses anycast routing and latency-based load balancing to direct users to the closest healthy backend with the lowest latency.