Microsoft AZ-304 Flashcards

You need to ensure that sensitive data in Azure Blob Storage is automatically classified and protected. Which solution should be part of your design?

Answer: Azure Information Protection with Microsoft Purview

Microsoft Purview with Azure Information Protection automatically discovers, classifies, and applies protection labels to sensitive data in storage.

An architect must design a solution where Azure Functions can securely access Azure Key Vault secrets without storing credentials. Which approach should be used?

Answer: Enable system-assigned managed identity on the Function App and grant Key Vault access

System-assigned managed identity eliminates the need to manage credentials by automatically providing an Azure AD identity for the Function App.

A company needs a data warehouse that can scale compute and storage independently and pause compute during off-hours to save costs. Which service should you recommend?

Answer: Azure Synapse Analytics dedicated SQL pool

Azure Synapse Analytics dedicated SQL pool supports independent scaling of compute and storage, and compute can be paused when not in use.

You need to implement a hub-and-spoke network topology in Azure where all traffic between spokes is inspected by a central firewall. What should you deploy in the hub?

Answer: Azure Firewall with user-defined routes in spoke VNets

Azure Firewall in the hub VNet with UDRs configured in spoke VNets forces all inter-spoke traffic through the central firewall for inspection.

An application uses Azure Cosmos DB and requires guaranteed single-digit millisecond reads globally. Which consistency level should you choose?

Answer: Eventual consistency

Eventual consistency offers the lowest latency and highest throughput globally, appropriate when the application tolerates temporarily stale reads.

You are designing a solution that requires running batch processing jobs at scale without managing any underlying infrastructure. Which Azure service should you use?

Answer: Azure Batch

Azure Batch enables large-scale parallel and HPC batch processing jobs, automatically managing compute node pools without infrastructure overhead.

A company needs to provide secure remote access to Azure VMs without exposing RDP/SSH ports to the public internet. Which service should you implement?

Answer: Azure Bastion

Azure Bastion provides browser-based RDP/SSH connectivity to VMs directly through the Azure portal without exposing management ports publicly.