AZ-304 Microsoft Azure Solutions Architect Expert 2

Question 1

A company needs to ensure that Azure VMs in a production subscription cannot be created without a specific tag. Which Azure feature enforces this?

Accepted Answer

Azure Policy with deny effect

Answer

Azure Policy with a 'deny' effect blocks resource creation that doesn't meet defined tag requirements.

Question 2

Which Azure storage redundancy option provides the highest availability by replicating data across two regions and three availability zones in the primary region?

Accepted Answer

Geo-zone-redundant storage (GZRS)

Answer

GZRS combines zone-redundant replication in the primary region with geo-replication to a secondary region for maximum durability.

Question 3

An architect must design a solution where Azure Functions can securely access Azure Key Vault without storing credentials in code. What is the recommended approach?

Accepted Answer

Use a system-assigned managed identity

Answer

A system-assigned managed identity allows Azure Functions to authenticate to Key Vault without any stored credentials.

Question 4

A solution requires a globally distributed NoSQL database with multi-region writes and automatic failover. Which Azure service best fits this requirement?

Accepted Answer

Azure Cosmos DB

Answer

Azure Cosmos DB supports multi-region writes with configurable consistency levels and automatic failover.

Question 5

When designing an Azure Virtual Network, which component is used to control inbound and outbound traffic at the subnet level?

Accepted Answer

Network Security Group (NSG)

Answer

Network Security Groups are applied at the subnet or NIC level to filter traffic using allow/deny rules.

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 Microsoft Azure Solutions Architect Expert 2