AZ-304 Microsoft AZ-304 3 — Questions and Answers
Question 1: An application needs to process messages in strict order and guarantee exactly-once delivery. Which Azure messaging service should you use?
- Azure Event Hubs
- Azure Service Bus with sessions enabled (Correct answer)
- Azure Queue Storage
- Azure Event Grid
Correct answer: Azure Service Bus with sessions enabled
Azure Service Bus with message sessions guarantees ordered delivery and supports duplicate detection for exactly-once processing.
Question 2: You need to design a multi-tenant SaaS application where each tenant's data must be logically isolated. Which Azure SQL Database model provides the best balance of isolation and cost?
- One database per tenant
- Elastic pools with row-level security (Correct answer)
- Managed Instance per tenant
- Single database with schema-based separation
Correct answer: Elastic pools with row-level security
Elastic pools with row-level security provide cost-efficient resource sharing while maintaining logical data isolation between tenants.
Question 3: A company requires all Azure VM disk encryption keys to be managed by the customer and stored in a dedicated HSM. Which solution should you implement?
- Azure Disk Encryption with Azure Key Vault
- Azure Disk Encryption with customer-managed keys in Azure Dedicated HSM (Correct answer)
- Storage Service Encryption with Microsoft-managed keys
- BitLocker with Azure Key Vault standard tier
Correct answer: Azure Disk Encryption with customer-managed keys in Azure Dedicated HSM
Azure Dedicated HSM with customer-managed keys gives full control over encryption keys in a dedicated hardware security module.
Question 4: You are designing a solution that requires near-real-time analytics on streaming IoT data. Which combination of Azure services is most appropriate?
- Azure IoT Hub → Azure Stream Analytics → Azure Synapse Analytics (Correct answer)
- Azure IoT Hub → Azure Queue Storage → Azure Functions
- Azure Event Grid → Azure Logic Apps → SQL Database
- Azure IoT Central → Azure Data Factory → Cosmos DB
Correct answer: Azure IoT Hub → Azure Stream Analytics → Azure Synapse Analytics
IoT Hub ingests device data, Stream Analytics processes it in real-time, and Synapse Analytics provides the analytical store for near-real-time insights.
Question 5: An organization needs to implement just-in-time VM access to reduce the attack surface of administrator ports. Which Azure service provides this capability?
- Azure Firewall with DNAT rules
- Microsoft Defender for Cloud JIT VM access (Correct answer)
- Azure Bastion with scheduled sessions
- Network Security Group time-based rules
Correct answer: Microsoft Defender for Cloud JIT VM access
Microsoft Defender for Cloud's JIT VM access locks down inbound traffic to management ports and opens them only when explicitly requested.
Question 6: You need to design a solution for running containerized microservices that auto-scales based on HTTP traffic without managing infrastructure. Which service is most suitable?
- Azure Kubernetes Service (AKS)
- Azure Container Apps (Correct answer)
- Azure Container Instances
- Azure App Service with Docker
Correct answer: Azure Container Apps
Azure Container Apps provides serverless containers with built-in KEDA-based autoscaling on HTTP traffic without infrastructure management.
Question 7: A global application must serve users with the lowest possible latency by routing traffic to the nearest healthy endpoint. Which Azure service should you use?
- Azure Load Balancer with geo-distribution
- Azure Traffic Manager with performance routing
- Azure Front Door with latency-based routing (Correct answer)
- Azure Application Gateway with multi-region backend
Correct answer: Azure Front Door with latency-based routing
Azure Front Door uses anycast routing and latency-based load balancing to direct users to the closest healthy backend with the lowest latency.
AZ-304 Microsoft AZ-304 3
An application needs to process messages in strict order and guarantee exactly-once delivery.
Which Azure messaging service should you use?