AZ-304 Microsoft AZ-304 5 — Questions and Answers
Question 1: You need to design a solution to automatically remediate non-compliant Azure resources without manual intervention. Which feature should you enable?
- Azure Policy remediation tasks with DeployIfNotExists effect (Correct answer)
- Azure Automation runbooks triggered by alerts
- Azure Blueprints with locked assignments
- Azure Resource Manager templates with conditional deployment
Correct answer: Azure Policy remediation tasks with DeployIfNotExists effect
Azure Policy with DeployIfNotExists effect and remediation tasks automatically brings non-compliant resources into compliance.
Question 2: An architect needs to design a serverless event-driven architecture where an image uploaded to Blob Storage triggers downstream processing. Which service combination is most appropriate?
- Azure Blob Storage → Azure Event Grid → Azure Functions (Correct answer)
- Azure Blob Storage → Azure Service Bus → Azure Logic Apps
- Azure Blob Storage → Azure Queue Storage → Azure WebJobs
- Azure Blob Storage → Azure Event Hubs → Azure Stream Analytics
Correct answer: Azure Blob Storage → Azure Event Grid → Azure Functions
Event Grid reacts to Blob Storage events near-instantly and triggers Azure Functions, providing the ideal serverless event-driven pattern.
Question 3: You need to design a solution that aggregates security logs from multiple Azure subscriptions into a central workspace for analysis. Which service should you use?
- Azure Monitor with cross-subscription alerts
- Microsoft Sentinel with multi-workspace configuration (Correct answer)
- Azure Security Center with policy initiatives
- Azure Log Analytics workspace with resource-level RBAC
Correct answer: Microsoft Sentinel with multi-workspace configuration
Microsoft Sentinel's multi-workspace architecture enables centralized security log collection and SIEM/SOAR capabilities across multiple subscriptions.
Question 4: A solution requires that API calls from external clients are throttled, authenticated, and cached before reaching backend services. Which Azure service addresses all three requirements?
- Azure Application Gateway with WAF
- Azure API Management (Correct answer)
- Azure Front Door with rules engine
- Azure Load Balancer with session persistence
Correct answer: Azure API Management
Azure API Management provides built-in policies for rate limiting/throttling, OAuth/subscription key authentication, and response caching.
Question 5: You must design storage for an application that reads and writes petabytes of unstructured data with frequent access and requires millisecond response times. Which tier should you use?
- Azure Blob Storage Cool tier
- Azure Blob Storage Hot tier (Correct answer)
- Azure Blob Storage Archive tier
- Azure File Storage with NFS protocol
Correct answer: Azure Blob Storage Hot tier
Blob Storage Hot tier is optimized for data that is accessed frequently, offering the lowest access latency and highest transaction performance.
Question 6: An organization needs to enforce a tagging policy that automatically adds a cost-center tag to all new Azure resources if the tag is missing. Which policy effect should be used?
- Deny
- Audit
- Modify (Correct answer)
- Append
Correct answer: Modify
The Modify policy effect automatically adds or updates tags on existing and new resources, making it ideal for enforcing tagging standards.
Question 7: You need to migrate a large on-premises SQL Server database (10 TB) to Azure SQL Managed Instance with minimal downtime. Which migration method should you use?
- Azure Database Migration Service online migration with log replay (Correct answer)
- Backup to Azure Blob Storage and restore on Managed Instance
- Transactional replication from on-premises to Managed Instance
- Azure Data Factory with SQL connector bulk copy
Correct answer: Azure Database Migration Service online migration with log replay
Azure Database Migration Service online migration uses log replay to continuously apply changes, enabling cutover with near-zero downtime.
AZ-304 Microsoft AZ-304 5
You need to design a solution to automatically remediate non-compliant Azure resources without manual intervention.
Which feature should you enable?