Designing Microsoft Azure Infrastructure Solutions (AZ-305) Flashcards

A solution for the Azure IoT Hub that will contain 50,000 IoT devices is what you are designing. Temperature, device ID, and time data will all be streamed by each device. Every second, 50,000 records will be written on average. Near real-time visualization of the data will be used. You must suggest a service that can store and search the data. Which two services would you suggest?

Answer: Azure Time Series Insights

For streaming IoT data from 50,000 devices with high write volume and near real-time visualization, Azure Time Series Insights is ideal for storing, visualizing, and analyzing time-series data at scale. Azure Cosmos DB SQL API is also a strong choice due to its ability to handle high-volume, low-latency writes and reads, support for SQL queries, and global distribution capabilities, making it suitable for storing and searching the raw or processed IoT data.

To satisfy the security and compliance requirements after migrating App1 to Azure, you must enforce the data modification restrictions. What should you do?

Answer: Implement Azure resource locks

To enforce data modification restrictions and prevent accidental or unauthorized changes to resources, Azure resource locks are the most appropriate solution. These locks can be applied to subscriptions, resource groups, or individual resources, preventing users from deleting or modifying critical resources, even if they have appropriate Azure RBAC permissions. RBAC assignments control who can do what, but locks prevent specific actions regardless of permissions.

You must suggest a remedy that satisfies App1's data specifications. Which deployment strategy should you advise for each availability zone that houses an instance of App1?

Answer: An Azure Cosmos DB that uses multi-region writes

For an application requiring high availability across multiple availability zones and low-latency data access, especially with data modification restrictions and the need for a robust database, Azure Cosmos DB with multi-region writes is the optimal choice. It provides global distribution, automatic failover, and guarantees low-latency reads and writes across multiple regions/zones, ensuring data consistency and resilience. This capability is superior for distributed write scenarios compared to other options.

You are creating a program that will provide users with content aggregation. For the application, you must suggest a database solution. The answer must adhere to the following criteria: - Support SQL commands - Support multi-master writes ​- Guarantee low latency read operations What should you include in the recommendation?

Answer: Azure Cosmos DB SQL API

Azure Cosmos DB SQL API is the ideal solution for these requirements. It is a globally distributed, multi-model database service that natively supports SQL queries (SQL API). Crucially, it offers multi-master writes, allowing data to be written to multiple regions simultaneously for high availability and low-latency writes, and its design also guarantees low-latency read operations, making it perfect for content aggregation applications needing fast data access.

You intend to set up an HPC cluster in Azure that will make use of a third-party scheduler. You must suggest a method for setting up and controlling the HPC cluster node. What should the recommendation contain?

Answer: Azure Cyclecloud

Azure CycleCloud is specifically designed for creating, managing, operating, and optimizing HPC clusters in Azure. It provides a simple way to provision HPC environments, integrate with third-party schedulers (like Slurm, PBS Pro, LSF, Grid Engine), and manage cluster nodes. This makes it the perfect tool for setting up and controlling an HPC cluster node with a third-party scheduler.

You have an on-premises Active Directory domain that is synchronized with an Azure Active Directory (Azure AD) tenant. WebApp1 is an internal web application that is hosted on your premises. WebApp1 makes use of Windows Integrated authentication. Some users access the on-premises network via remote access but do not have VPN access. You must grant single sign-on (SSO) access to WebApp1 to the remote users. What two features ought to be incorporated into the solution?

Answer: Azure AD enterprise applications

Azure AD Application Proxy is essential for securely publishing on-premises web applications, like WebApp1, to external users without requiring VPN access. By integrating with Azure AD enterprise applications, it enables single sign-on (SSO) for these remote users, leveraging their Azure AD credentials to access the internal application that uses Windows Integrated Authentication. This combination allows seamless and secure access from outside the corporate network.

You are creating a sales application that will manage many transactional components and include several Azure cloud services. The processing of customer orders, billing, payments, inventory, and shipping will be handled by various cloud services. You must suggest a solution that will allow the cloud services to asynchronously exchange transactional data using XML messages. What should the recommendation contain?

Answer: Azure Service Bus

Azure Service Bus is a robust enterprise message broker designed for asynchronous communication between decoupled applications and services. It provides reliable message queuing and publish/subscribe capabilities, making it ideal for exchanging transactional data like XML messages between various cloud services. This ensures that customer orders, billing, and other components can communicate efficiently and reliably without direct dependencies, even during peak loads.