AZ-304 Microsoft Azure Solutions Architect Expert 5 — Questions and Answers
Question 1: A company needs to ensure high availability for an Azure Application Gateway across multiple availability zones. What must the architect configure?
- Deploy two Application Gateways in active-passive mode
- Use Application Gateway v2 SKU with zone redundancy enabled (Correct answer)
- Place Application Gateway behind Azure Traffic Manager
- Configure Application Gateway with multiple backend pools
Correct answer: Use Application Gateway v2 SKU with zone redundancy enabled
Application Gateway v2 supports zone redundancy by distributing instances across availability zones within a region.
Question 2: Which Azure Cosmos DB consistency level provides the lowest read latency but may return stale data from any replica?
- Strong
- Bounded Staleness
- Session
- Eventual (Correct answer)
Correct answer: Eventual
Eventual consistency offers the lowest latency and highest throughput but provides no ordering guarantees and may return stale reads.
Question 3: An architect must design a solution to distribute incoming HTTPS traffic across multiple Azure regions, routing users to the nearest healthy endpoint. Which service is most appropriate?
- Azure Load Balancer Standard
- Azure Application Gateway
- Azure Front Door (Correct answer)
- Azure Traffic Manager
Correct answer: Azure Front Door
Azure Front Door provides global Layer 7 load balancing with anycast routing, SSL offload, and health-based failover across regions.
Question 4: A company must retain Azure Activity Log data for compliance purposes for 2 years. What is the recommended approach?
- Increase the Activity Log retention setting to 730 days in Azure Monitor
- Export the Activity Log to a Log Analytics workspace and configure a data retention policy (Correct answer)
- Download Activity Logs manually each month to blob storage
- Use Azure Policy to enforce log retention
Correct answer: Export the Activity Log to a Log Analytics workspace and configure a data retention policy
Exporting Activity Logs to a Log Analytics workspace allows configuring retention up to 730 days (or archiving to storage for longer periods).
Question 5: When designing an Azure landing zone, which construct provides the highest level of scope for applying governance policies that affect all subscriptions in an organization?
- Resource Group
- Subscription
- Management Group (Root) (Correct answer)
- Azure Policy Initiative
Correct answer: Management Group (Root)
The Root Management Group sits at the top of the hierarchy and any policy assigned there inherits down to all management groups and subscriptions.
Question 6: An application must process messages in strict order with exactly-once delivery guarantees. Which Azure messaging service supports this requirement?
- Azure Event Grid
- Azure Event Hubs
- Azure Service Bus with sessions enabled (Correct answer)
- Azure Queue Storage
Correct answer: Azure Service Bus with sessions enabled
Azure Service Bus with sessions provides ordered, exactly-once processing for related message groups using session IDs.
Question 7: A company wants to monitor security across all Azure subscriptions and receive prioritized security recommendations from a single dashboard. Which Azure service provides this?
- Azure Monitor Workbooks
- Microsoft Defender for Cloud (formerly Azure Security Center) (Correct answer)
- Azure Sentinel (Microsoft Sentinel)
- Azure Advisor
Correct answer: Microsoft Defender for Cloud (formerly Azure Security Center)
Microsoft Defender for Cloud provides a unified security posture view, Secure Score, and prioritized recommendations across all subscriptions.
AZ-304 Microsoft Azure Solutions Architect Expert 5
A company needs to ensure high availability for an Azure Application Gateway across multiple availability zones.
What must the architect configure?