AZ-304 Microsoft Azure Architect Design 5

Question 1

A company needs to migrate an on-premises SQL Server 2019 database to Azure with minimal changes, full PaaS management, and support for Always On availability groups. Which Azure service is the best fit?

Accepted Answer

Azure SQL Managed Instance

Answer

Azure SQL Managed Instance provides near 100% compatibility with SQL Server including support for SQL Agent, linked servers, and Always On AG in a fully managed PaaS deployment.

Question 2

An architect needs to design cost optimization for Azure VMs running predictable 24/7 production workloads that will be needed for at least 3 years. Which pricing model minimizes cost?

Accepted Answer

Reserved Virtual Machine Instances (3-year term)

Answer

3-year Reserved Instances provide up to 72% savings compared to pay-as-you-go pricing and are ideal for predictable, long-running production workloads.

Question 3

A solution must process large-scale batch analytics on structured data stored in Azure Data Lake Storage Gen2. The processing requires SQL-based transformations. Which Azure service should be used?

Accepted Answer

Azure Synapse Analytics with serverless SQL pool

Answer

Azure Synapse Analytics serverless SQL pool enables T-SQL queries directly against ADLS Gen2 files with no infrastructure to manage, optimized for large-scale ad-hoc and batch analytics.

Question 4

An architect must ensure that a new Azure resource group deployment complies with corporate standards including specific VM SKUs, allowed regions, and required tags. Which Azure service enforces these standards at deployment time?

Accepted Answer

Azure Policy with 'deny' and 'append' effects

Answer

Azure Policy with 'deny' effects blocks non-compliant SKUs and regions, while 'append' effects automatically add required tags, enforcing all three standards at deployment time.

Question 5

A company stores sensitive customer data in Azure Blob Storage. The security team requires that all data be encrypted with keys the company controls and that key access be logged and auditable. Which approach should the architect implement?

Accepted Answer

Customer-managed keys (CMK) stored in Azure Key Vault with audit logging enabled

Answer

Customer-managed keys in Azure Key Vault give the company full control over encryption keys, and enabling Key Vault diagnostic logs provides a complete audit trail of every key access operation.

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 Microsoft Azure Architect Design 5