Microsoft AZ-304 Flashcards

You need to design a solution to automatically remediate non-compliant Azure resources without manual intervention. Which feature should you enable?

Answer: Azure Policy remediation tasks with DeployIfNotExists effect

Azure Policy with DeployIfNotExists effect and remediation tasks automatically brings non-compliant resources into compliance.

An architect needs to design a serverless event-driven architecture where an image uploaded to Blob Storage triggers downstream processing. Which service combination is most appropriate?

Answer: Azure Blob Storage → Azure Event Grid → Azure Functions

Event Grid reacts to Blob Storage events near-instantly and triggers Azure Functions, providing the ideal serverless event-driven pattern.

You need to design a solution that aggregates security logs from multiple Azure subscriptions into a central workspace for analysis. Which service should you use?

Answer: Microsoft Sentinel with multi-workspace configuration

Microsoft Sentinel's multi-workspace architecture enables centralized security log collection and SIEM/SOAR capabilities across multiple subscriptions.

A solution requires that API calls from external clients are throttled, authenticated, and cached before reaching backend services. Which Azure service addresses all three requirements?

Answer: Azure API Management

Azure API Management provides built-in policies for rate limiting/throttling, OAuth/subscription key authentication, and response caching.

You must design storage for an application that reads and writes petabytes of unstructured data with frequent access and requires millisecond response times. Which tier should you use?

Answer: Azure Blob Storage Hot tier

Blob Storage Hot tier is optimized for data that is accessed frequently, offering the lowest access latency and highest transaction performance.

An organization needs to enforce a tagging policy that automatically adds a cost-center tag to all new Azure resources if the tag is missing. Which policy effect should be used?

Answer: Modify

The Modify policy effect automatically adds or updates tags on existing and new resources, making it ideal for enforcing tagging standards.

You need to migrate a large on-premises SQL Server database (10 TB) to Azure SQL Managed Instance with minimal downtime. Which migration method should you use?

Answer: Azure Database Migration Service online migration with log replay

Azure Database Migration Service online migration uses log replay to continuously apply changes, enabling cutover with near-zero downtime.