AZ-304 Microsoft AZ-304 4

Question 1

You need to ensure that sensitive data in Azure Blob Storage is automatically classified and protected. Which solution should be part of your design?

Accepted Answer

Azure Information Protection with Microsoft Purview

Answer

Microsoft Purview with Azure Information Protection automatically discovers, classifies, and applies protection labels to sensitive data in storage.

Question 2

An architect must design a solution where Azure Functions can securely access Azure Key Vault secrets without storing credentials. Which approach should be used?

Accepted Answer

Enable system-assigned managed identity on the Function App and grant Key Vault access

Answer

System-assigned managed identity eliminates the need to manage credentials by automatically providing an Azure AD identity for the Function App.

Question 3

A company needs a data warehouse that can scale compute and storage independently and pause compute during off-hours to save costs. Which service should you recommend?

Accepted Answer

Azure Synapse Analytics dedicated SQL pool

Answer

Azure Synapse Analytics dedicated SQL pool supports independent scaling of compute and storage, and compute can be paused when not in use.

Question 4

You need to implement a hub-and-spoke network topology in Azure where all traffic between spokes is inspected by a central firewall. What should you deploy in the hub?

Accepted Answer

Azure Firewall with user-defined routes in spoke VNets

Answer

Azure Firewall in the hub VNet with UDRs configured in spoke VNets forces all inter-spoke traffic through the central firewall for inspection.

Question 5

An application uses Azure Cosmos DB and requires guaranteed single-digit millisecond reads globally. Which consistency level should you choose?

Accepted Answer

Eventual consistency

Answer

Eventual consistency offers the lowest latency and highest throughput globally, appropriate when the application tolerates temporarily stale reads.

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 Microsoft AZ-304 4