AZ-304 Microsoft AZ-304 2 — Questions and Answers
Question 1: A company needs to implement a disaster recovery solution for an Azure SQL Database with an RPO of 1 hour and RTO of 30 minutes. Which solution best meets these requirements?
- Active geo-replication with auto-failover groups (Correct answer)
- Azure SQL Database long-term backup retention
- Point-in-time restore within the same region
- Azure Site Recovery with SQL Server on IaaS
Correct answer: Active geo-replication with auto-failover groups
Active geo-replication with auto-failover groups provides near-zero RPO and automatic failover meeting the 30-minute RTO requirement.
Question 2: You need to design a solution that allows Azure Virtual Machines in different virtual networks to communicate privately without traversing the internet. Which feature should you use?
- VPN Gateway with site-to-site connection
- VNet peering (Correct answer)
- Azure ExpressRoute
- Azure Bastion
Correct answer: VNet peering
VNet peering allows VMs in different virtual networks to communicate using private IP addresses without internet traversal.
Question 3: An architect needs to ensure that Azure resources can only be deployed to specific regions due to data sovereignty requirements. What should be implemented?
- Azure Resource Locks
- Azure Policy with 'allowed locations' rule (Correct answer)
- Management Group RBAC assignments
- Azure Blueprints without policy
Correct answer: Azure Policy with 'allowed locations' rule
Azure Policy with an 'allowed locations' built-in policy definition enforces data sovereignty by restricting resource deployment to approved regions.
Question 4: A solution requires caching frequently accessed data to reduce database load. The cache must support complex data structures and persistence. Which Azure service should you choose?
- Azure Cache for Redis (Correct answer)
- Azure CDN
- Azure Table Storage
- Azure Memcached
Correct answer: Azure Cache for Redis
Azure Cache for Redis supports complex data structures, data persistence, and pub/sub messaging, making it ideal for this use case.
Question 5: You need to design authentication for an external-facing web application that supports social identity providers like Google and Facebook. Which Azure service is most appropriate?
- Azure Active Directory B2B
- Azure Active Directory B2C (Correct answer)
- Azure Active Directory Domain Services
- Azure AD Connect
Correct answer: Azure Active Directory B2C
Azure AD B2C is designed for customer-facing applications and supports social identity providers such as Google and Facebook.
Question 6: A company wants to move on-premises virtual machines to Azure with minimal downtime. Which Azure service provides agentless discovery and replication for this migration?
- Azure Data Box
- Azure Migrate with Azure Site Recovery (Correct answer)
- Azure Database Migration Service
- Azure Import/Export service
Correct answer: Azure Migrate with Azure Site Recovery
Azure Migrate with Azure Site Recovery enables agentless replication of on-premises VMs to Azure, minimizing downtime during cutover.
Question 7: When designing an Azure solution, you need to ensure that a resource group and all its resources cannot be accidentally deleted. What should you apply?
- Azure Policy deny assignment
- CanNotDelete resource lock (Correct answer)
- ReadOnly resource lock
- Azure Blueprints assignment lock
Correct answer: CanNotDelete resource lock
A CanNotDelete resource lock prevents deletion of resources while still allowing modifications, protecting against accidental removal.
AZ-304 Microsoft AZ-304 2
A company needs to implement a disaster recovery solution for an Azure SQL Database with an RPO of 1 hour and RTO of 30 minutes.
Which solution best meets these requirements?