HOTSPOT -
You are designing a data analytics solution that will use Azure Synapse and Azure Data Lake Storage Gen2.
You need to recommend Azure Synapse pools to meet the following requirements:
• Ingest data from Data Lake Storage into hash-distributed tables.
• Implement query, and update data in Delta Lake.
What should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Ingest data into hash-distributed tables: A dedicated SQL pool
Implement, query, and update data in Delta Lake: A serverless Apache Spark pool
Explanation: Hash-distributed tables are a feature of dedicated SQL pools. Delta Lake updates require Apache Spark; serverless SQL pool can query Delta Lake but does not support updating Delta Lake files.
Question 98
HOTSPOT -
You have an Azure subscription that contains an Azure key vault named KV1 and a virtual machine named VM1. VM1 runs Windows Server 2022: Azure Edition.
You plan to deploy an ASP.Net Core-based application named App1 to VM1.
You need to configure App1 to use a system-assigned managed identity to retrieve secrets from KV1. The solution must minimize development effort.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Client credentials grant flows
Azure Instance Metadata Service (IMDS) endpoint
Explanation: A system-assigned managed identity is a service identity, so it aligns with the OAuth 2.0 client credentials flow. On an Azure VM, applications obtain access tokens for the managed identity by calling the Azure Instance Metadata Service (IMDS) endpoint, which returns a token for accessing Azure Key Vault without managing credentials.
Question 99
HOTSPOT -
You are planning an Azure Storage solution for sensitive data. The data will be accessed daily. The dataset is less than 10 GB.
You need to recommend a storage solution that meets the following requirements:
• All the data written to storage must be retained for five years.
• Once the data is written, the data can only be read. Modifications and deletion must be prevented.
• After five years, the data can be deleted, but never modified.
• Data access charges must be minimized.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Storage account type: General purpose v2 with Hot access tier for blobs
Configuration to prevent modifications and deletions: Container access policy
Explanation: Daily access favors the Hot tier to minimize access charges. Enforce write-once-read-many (WORM) retention with an immutable blob policy at the container level, which prevents modification and deletion for five years and allows deletion after retention expires. A resource lock protects the resource, not blob immutability.
Question 100
You have an Azure subscription that contains the resources shown in the following table.
You create peering between VNet1 and VNet2 and between VNet1 and VNet3.
The virtual machines host an HTTPS-based client/server application and are accessible only via the private IP address of each virtual machine.
You need to implement a load balancing solution for VM2 and VM3. The solution must ensure that if VM2 fails, requests will be routed automatically to VM3, and if VM3 fails, requests will be routed automatically to VM2.
What should you include in the solution?
A. Azure Firewall Premium
B. Azure Application Gateway v2
C. a cross-region load balancer
D. Azure Front Door Premium
Show Answer
Correct Answer: B
Explanation: Azure Application Gateway v2 supports Layer 7 (HTTPS) load balancing with health probes and can use backend targets reachable by private IP over VNet peering. Since the VMs are only accessible via private IP addresses and the VNets are peered, Application Gateway can distribute traffic between VM2 and VM3 and automatically fail over if one becomes unhealthy. Cross-region Load Balancer is designed around regional load balancers with public frontends, Front Door is primarily a global edge service, and Azure Firewall is not a load balancer.
Question 101
You are developing an app that will use Azure Functions to process Azure Event Hubs events. Request processing is estimated to take between five and 20 minutes.
You need to recommend a hosting solution that meets the following requirements:
• Supports estimates of request processing runtimes
• Supports event-driven autoscaling for the app
Which hosting plan should you recommend?
A. Dedicated
B. Consumption
C. App Service
D. Premium
Show Answer
Correct Answer: D
Explanation: The Premium plan supports event-driven autoscaling for Event Hubs triggers and allows function execution durations that accommodate 5–20 minute processing (with configurable long/unlimited timeouts), unlike the Consumption plan which has execution time limits. Dedicated/App Service plans can support long-running executions but do not provide event-driven autoscaling.
Question 102
You are designing an app that will include two components. The components will communicate by sending messages via a queue.
You need to recommend a solution to process the messages by using a First in, First out (FIFO) pattern.
What should you include in the recommendation?
A. storage queues with a custom metadata setting
B. Azure Service Bus queues with partitioning enabled
C. Azure Service Bus queues with sessions enabled
D. storage queues with a stored access policy
Show Answer
Correct Answer: C
Explanation: Azure Service Bus queues support FIFO processing by using message sessions. Sessions preserve the ordered sequence of related messages and ensure they are processed in arrival order by a single receiver for that session. Azure Storage queues do not provide guaranteed FIFO, and Service Bus partitioning improves scalability rather than enforcing global FIFO.
Question 103
You have a multi-tier app named App1 and an Azure SQL database named SQL1. The backend service of App1 writes data to SQL1. Users use the App1 client to read the data from SQL1.
During periods of high utilization, the users experience delays retrieving the data.
You need to minimize how long it takes for data requests.
What should you include in the solution?
A. Azure Cache for Redis
B. Azure Content Delivery Network (CDN)
C. Azure Data Factory
D. Azure Synapse Analytics
Show Answer
Correct Answer: A
Explanation: Azure Cache for Redis is the appropriate solution because it caches frequently accessed data in memory, reducing read latency and offloading read requests from the Azure SQL database during periods of high utilization. Azure CDN is for static content delivery, Azure Data Factory is for data integration/orchestration, and Azure Synapse Analytics is for analytics and data warehousing rather than accelerating transactional application reads.
Question 104
You have an on-premises storage solution.
You need to migrate the solution to Azure. The solution must support Hadoop Distributed File System (HDFS).
What should you use?
A. Azure Data Lake Storage Gen2
B. Azure NetApp Files
C. Azure Data Share
D. Azure Table storage
Show Answer
Correct Answer: A
Explanation: Azure Data Lake Storage Gen2 is the Azure storage service designed for big data analytics and provides Hadoop-compatible access via the HDFS interface (ABFS driver). It supports hierarchical namespaces and is the appropriate choice for workloads requiring HDFS compatibility. Azure NetApp Files provides NFS/SMB file shares, Azure Data Share is for data sharing, and Table storage is a NoSQL key-value store.
Question 105
Your company has the divisions shown in the following table.
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend?
A. Configure Azure AD join.
B. Configure Azure AD Identity Protection.
C. Configure a Conditional Access policy.
D. Configure Supported account types in the application registration and update the sign-in endpoint.
Show Answer
Correct Answer: D
Explanation: To allow users from another Azure AD tenant (fabrikam.com) to sign in to an app that is currently configured for single-tenant authentication, the app registration must be changed to support multiple organizational directories (multitenant), and the app should use the appropriate multitenant/common or organizations sign-in endpoint. Azure AD Join, Identity Protection, and Conditional Access do not change the app's tenant scope for authentication.
Question 106
HOTSPOT
-
You have an Azure subscription named Sub1 that is linked to an Azure AD tenant named contoso.com.
You plan to implement two ASP.NET Core apps named App1 and App2 that will be deployed to 100 virtual machines in Sub1. Users will sign in to App1 and App2 by using their contoso.com credentials.
App1 requires read permissions to access the calendar of the signed-in user. App2 requires write permissions to access the calendar of the signed-in user.
You need to recommend an authentication and authorization solution for the apps. The solution must meet the following requirements:
• Use the principle of least privilege.
• Minimize administrative effort.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Authentication: Application registration in Azure AD
Authorization: Delegated permissions
Explanation: Users sign in with Azure AD and the apps access Microsoft Graph on behalf of the signed-in user. Separate app registrations allow each app to request only the delegated calendar permissions it needs (read for App1, write for App2), satisfying least privilege. Managed identities are for Azure resource authentication, not user sign-in to web apps.
$19
Get all 271 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.