AZ-305 Azure Compute Solutions Design 3

Question 1

You need to design an auto-scaling solution for Azure VMs that scales out based on custom application metrics from Azure Monitor. Which service enables this?

Accepted Answer

Virtual Machine Scale Sets with Azure Monitor autoscale rules

Answer

Azure Load Balancer health probes

Answer

Azure Automation runbooks on a schedule

Answer

Azure App Service autoscale

Question 2

Your team needs to ensure that new VMs deployed in production always use a hardened OS image with the latest security patches applied. Which approach enforces this?

Accepted Answer

Use Azure Shared Image Gallery with versioned, patched custom images and Azure Policy

Answer

Manually patch VMs after deployment using Update Management

Answer

Enable Microsoft Defender for Cloud recommendations

Answer

Use Azure Automation DSC

Question 3

You need to deploy an application to Azure that requires low-latency GPU processing for AI inference workloads. Which VM series should you select?

Accepted Answer

NCv3 or NDv2-series (GPU compute)

Answer

Dv5-series (general purpose)

Answer

Lsv3-series (storage optimized)

Answer

Mv2-series (memory optimized)

Question 4

An application deployed on AKS needs to scale the number of pods based on the depth of an Azure Service Bus queue. Which AKS feature enables this?

Accepted Answer

KEDA (Kubernetes Event-Driven Autoscaling) with Service Bus scaler

Answer

Kubernetes Horizontal Pod Autoscaler (HPA) on CPU metrics

Answer

Azure Monitor alert-based pod scaling

Answer

AKS Cluster Autoscaler on node count

Question 5

You need Azure App Service to access a backend Azure SQL Database in a private VNet without exposing the database publicly. Which App Service feature enables private VNet connectivity?

Accepted Answer

App Service VNet Integration (Regional)

Answer

App Service Hybrid Connections

Answer

App Service Private Endpoint

Answer

App Service Environment (ASE)

Question 6

You are designing a microservices application on AKS and need to ensure that a pod's identity is used to authenticate to Azure Key Vault without managing credentials. Which feature should you enable on the AKS cluster?

Accepted Answer

Azure AD Workload Identity with federated credentials

Answer

Kubernetes service account tokens mounted as volumes

Answer

Azure AD Pod Identity (legacy)

Answer

Managed Identity assigned to the AKS node pool