Designing Microsoft Azure Infrastructure Solutions

• #101

  Azure Policy effect to use:

  • AAppend.
  • BEnforceOPAConstraint.
  • CEnforceRegoPolicy.
  • DModify.
  Show answer
• #102

  Your company has an existing web app that runs on Azure virtual machines. You need to ensure that the app is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruptions to the code of the app. What should you recommend?

  • AAzure service: Azure Application Gateway. Feature: SSL offloading.
  • BAzure service: Azure Traffic Manager. Feature: Web Application Firewall (WAF).
  • CAzure service: Azure Application Gateway. Feature: Web Application Firewall (WAF).
  • DAzure service: Azure Load Balancer. Feature: URL-based content routing.
  Show answer
• #103

  Quality Assurance:

  • AAzure AD privileged Identitu Management.
  • BAzure Managed Identity.
  • CAzure Ad Connect.
  • DAzure Ad identity Pprotection.
  Show answer
• #104

  You have an Azure subscription that contains the SQL servers on Azure shown in the following table. The subscription contains the storage accounts shown in the following table. You create the Azure SQL databases shown in the following table. Question 1: When you enable auditing for SQLdb1, you can store the audit information to storage1.

  • AYes.
  • BNo.
  Show answer
• #105

  Modification [...]:

  • AChange to a commitment pricing tier.
  • BChange to the Basic Logs data plan.
  • CSet a daily cap.
  Show answer
• #106

  You have an Azure subscription. The subscription contains a tiered app named App1 that is distributed across multiple containers hosted in Azure Container Instances. You need to deploy an Azure Monitor monitoring solution for App. The solution must meet the following requirements: Support using synthetic transaction monitoring to monitor traffic between the App1 components. Minimize development effort. What should you include in the solution?

  • ANetwork insights.
  • BApplication Insights.
  • CContainer insights.
  • DLog Analytics Workspace insights.
  Show answer
• #107

  Your company develops a web service that is deployed to an Azure virtual machine named VM1. The web service allows an API to access real-time data from VM1. The current virtual machine deployment is shown in the Deployment exhibit. The chief technology officer (CTO) sends you the following email message: 'Our developers have deployed the web service to a virtual machine named VM1. Testing has shown that the API is accessible from VM1 and VM2. Our partners must be able to connect to the API over the Internet. Partners will use this data in applications that they develop.' You deploy an Azure API Management (APIM) service. The relevant API Management configuration is shown in the API exhibit. Question 1: The API is available to partners over the internet.

  • AYes.
  • BNo.
  Show answer
• #108

  The amount of time that SQLInsight data will be stored in blob storage in [...].

  • A30 days.
  • B90 days.
  • C730 days.
  • Dindefinite.
  Show answer
• #109

  You have SQL Server on an Azure virtual machine. The databases are written to nightly as part of a batch process. You need to recommend a disaster recovery solution for the data. The solution must meet the following requirements: Provide the ability to recover in the event of a regional outage. Support a recovery time objective (RTO) of 15 minutes. Support a recovery point objective (RPO) of 24 hours. Support automated recovery. Minimize costs. What should you include in the recommendation?

  • AAzure virtual machine availability sets.
  • BAzure Disk Backup.
  • CAn Always On availability group.
  • DAzure Site Recovery.
  Show answer
• #110

  Your company develops a web service that is deployed to an Azure virtual machine named VM1. The web service allows an API to access real-time data from VM1. The current virtual machine deployment is shown in the Deployment exhibit. The chief technology officer (CTO) sends you the following email message: 'Our developers have deployed the web service to a virtual machine named VM1. Testing has shown that the API is accessible from VM1 and VM2. Our partners must be able to connect to the API over the Internet. Partners will use this data in applications that they develop.' You deploy an Azure API Management (APIM) service. The relevant API Management configuration is shown in the API exhibit. Question 3: A VPN gateway is required for partner access.

  • AYes.
  • BNo.
  Show answer
• #111

  You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam, Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for the Microsoft 365 E5 plan. You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements: To the manager of the developers, send a monthly email message that lists the access permissions to Application1. If the manager does not verify an access permission, automatically revoke that permission. Minimize development effort. What should you recommend?

  • AIn Azure Active Directory (Azure AD), create an access review of Application1.
  • BCreate an Azure Automation runbook that runs the Get-AzRoleAssignment cmdlet.
  • CIn Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role assignment for the Application1 resources.
  • DCreate an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet.
  Show answer
• #112

  Resource to create in Azure:

  • AAn event hub.
  • BA Log Analytics workspace.
  • CA search service.
  • DA storage account.
  Show answer
• #113

  You have an on-premises network and an Azure subscription. The on-premises network has several branch offices. A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server. Users access the shared files on VM1 from all the offices. You need to recommend a solution to ensure that the users can access the shared files as quickly as possible if the Toronto branch office is inaccessible. What should you include in the recommendation?

  • AA Recovery Services vault and Windows Server Backup.
  • BAzure blob containers and Azure File Sync.
  • CA Recovery Services vault and Azure Backup.
  • DAn Azure file share and Azure File Sync.
  Show answer
• #114

  Your company develops a web service that is deployed to an Azure virtual machine named VM1. The web service allows an API to access real-time data from VM1. The current virtual machine deployment is shown in the Deployment exhibit. The chief technology officer (CTO) sends you the following email message: 'Our developers have deployed the web service to a virtual machine named VM1. Testing has shown that the API is accessible from VM1 and VM2. Our partners must be able to connect to the API over the Internet. Partners will use this data in applications that they develop.' You deploy an Azure API Management (APIM) service. The relevant API Management configuration is shown in the API exhibit. Question 2: The APIM instance can access real-time data from VM1.

  • AYes.
  • BNo.
  Show answer
• #115

  To trigger the compliance scans, use [...]:

  • AAn Azure template.
  • BThe Azure Command-Line Interface (CLI).
  • CThe Azure portal.
  Show answer
• #116

  You have an application that is used by 6,000 users to validate their vacation requests. The application manages its own credential store. Users must enter a username and password to access the application. The application does NOT support identity providers. You plan to upgrade the application to use single sign-on (SSO) authentication by using an Azure Active Directory (Azure AD) application registration. Which SSO method should you use?

  • Aheader-based.
  • BSAML.
  • Cpassword-based.
  • DOpenID Connect.
  Show answer
• #117

  You have a .NET web service named Service1 that has the following requirements: Must read and write temporary files to the local file system. Must write to the Application event log. You need to recommend a solution to host Service1 in Azure. The solution must meet the following requirements: Minimize maintenance overhead. Minimize costs. What should you include in the recommendation?

  • AAn Azure App Service web app.
  • BAn Azure virtual machine scale set.
  • CAn App Service Environment (ASE).
  • DAn Azure Functions app.
  Show answer
• #118

  You are evaluating whether to use Azure Traffic Manager and Azure Application Gateway to meet the connection requirements for App1. What is the minimum numbers of instances required for each service?

  • AAzure Traffic Manager: 1. Azure Application Gateway: 2.
  • BAzure Traffic Manager: 3. Azure Application Gateway: 1.
  • CAzure Traffic Manager: 6. Azure Application Gateway: 3.
  • DAzure Traffic Manager: 1. Azure Application Gateway: 6.
  Show answer
• #119

  You are designing an application that will aggregate content for users. You need to recommend a database solution for the application. The solution must meet the following requirements: Support SQL commands. Support multi-master writes. Guarantee low latency read operations. What should you include in the recommendation?

  • AAzure Cosmos DB SQL API.
  • BAzure SQL Database that uses active geo-replication.
  • CAzure SQL Database Hyperscale.
  • DAzure Database for PostgreSQL.
  Show answer
• #120

  You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service (AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines. The virtual machines and the AKS cluster will reside on the same virtual network. You need to design a solution to expose the microservices to the consumer apps. The solution must meet the following requirements: Ingress access to the microservices must be restricted to a single private IP address and protected by using mutual TLS authentication. The number of incoming microservice calls must be rate-limited. Costs must be minimized. What should you include in the solution?

  • AAzure App Gateway with Azure Web Application Firewall (WAF).
  • BAzure API Management Standard tier with a service endpoint.
  • CAzure Front Door with Azure Web Application Firewall (WAF).
  • DAzure API Management Premium tier with virtual network connection.
  Show answer

Want to track your score, take timed mock exams and get AI explanations? Create a free account