You have a multi-tier app named App1 and an Azure SQL database named SQL1. The backend service of App1 writes data to SQL1. Users use the App1 client to read the data from SQL1.
During periods of high utilization, the users experience delays retrieving the data.
You need to minimize how long it takes for data requests.
What should you include in the solution?
A. Azure Cache for Redis
B. Azure Content Delivery Network (CDN)
C. Azure Data Factory
D. Azure Synapse Analytics
Show Answer
Correct Answer: A
Explanation: User read latency during high utilization indicates the database is a bottleneck. Adding an in-memory caching layer reduces round trips to Azure SQL and serves frequent reads with sub-millisecond latency. Azure Cache for Redis is designed for this purpose. CDN serves static content, Data Factory is for ETL/orchestration, and Synapse is for analytics, not low-latency reads.
Question 104
You have an on-premises storage solution.
You need to migrate the solution to Azure. The solution must support Hadoop Distributed File System (HDFS).
What should you use?
A. Azure Data Lake Storage Gen2
B. Azure NetApp Files
C. Azure Data Share
D. Azure Table storage
Show Answer
Correct Answer: A
Explanation: Azure Data Lake Storage Gen2 natively supports HDFS-compatible access. It provides a hierarchical namespace, scalability, and integration with Hadoop-based analytics services such as HDInsight and Databricks, making it the correct choice for migrating an on-premises HDFS-based storage solution to Azure. The other options do not provide HDFS compatibility.
Question 105
Your company has the divisions shown in the following table.
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend?
A. Configure Azure AD join.
B. Configure Azure AD Identity Protection.
C. Configure a Conditional Access policy.
D. Configure Supported account types in the application registration and update the sign-in endpoint.
Show Answer
Correct Answer: D
Explanation: App1 is currently configured as a single-tenant Azure AD application, which only allows users from the contoso.com tenant to sign in. To enable users from the fabrikam.com tenant to authenticate, the application must be made multi-tenant. This is done by updating the application registration’s Supported account types to allow accounts from any Azure AD directory, and by using the appropriate multi-tenant sign-in endpoint. The other options (Azure AD join, Identity Protection, or Conditional Access) do not enable cross-tenant authentication.
Question 106
HOTSPOT
-
You have an Azure subscription named Sub1 that is linked to an Azure AD tenant named contoso.com.
You plan to implement two ASP.NET Core apps named App1 and App2 that will be deployed to 100 virtual machines in Sub1. Users will sign in to App1 and App2 by using their contoso.com credentials.
App1 requires read permissions to access the calendar of the signed-in user. App2 requires write permissions to access the calendar of the signed-in user.
You need to recommend an authentication and authorization solution for the apps. The solution must meet the following requirements:
• Use the principle of least privilege.
• Minimize administrative effort.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Authentication:
Application registration in Azure AD
Authorization:
Delegated permissions
Explanation: Users must sign in with Azure AD and the apps must access Microsoft Graph on behalf of the signed-in user. Separate app registrations allow each app to request only the required scope (read vs write calendar), satisfying least privilege. Delegated permissions are required for user-specific calendar access and avoid over-privileged app or managed identities.
Question 107
HOTSPOT -
You are building an Azure web app that will store the Personally Identifiable Information (PII) of employees.
You need to recommend an Azure SQL. Database solution for the web app. The solution must meet the following requirements:
• Maintain availability in the event of a single datacenter outage.
• Support the encryption of specific columns that contain PII.
• Automatically scale up during payroll operations.
• Minimize costs.
What should you include in the recommendations? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: General Purpose service tier and Serverless compute tier
Always Encrypted
Explanation: General Purpose with serverless supports zone-redundant availability, automatic scaling during peak workloads, and lower cost through auto-pause and scale, meeting availability and cost requirements. Always Encrypted provides column-level encryption required to protect specific PII fields, unlike TDE which encrypts the database as a whole.
Question 108
HOTSPOT
-
You need to deploy an instance of SQL Server on Azure Virtual Machines. The solution must meet the following requirements:
• Support 15,000 disk IOPS.
• Support SR-IOV.
• Minimize costs.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Virtual machine series:
DS
Disk type:
Premium SSD
Explanation: DS-series VMs support high storage throughput and SR-IOV and are optimized for enterprise workloads like SQL Server while avoiding unnecessary GPU costs. To reach 15,000 IOPS at the lowest cost, Premium SSDs are sufficient; Standard SSDs cannot meet the IOPS requirement, and Ultra Disks would increase cost unnecessarily.
Question 109
You have an Azure AD tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned memberships. Group1 has 50 members, including 20 guest users.
You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:
• The evaluation must be repeated automatically every three months.
• Every member must be able to report whether they need to be in Group1.
• Users who report that they do not need to be in Group1 must be removed from Group1 automatically.
• Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.
What should you include in the recommendation?
A. Implement Azure AD Identity Protection.
B. Change the Membership type of Group1 to Dynamic User.
C. Create an access review.
D. Implement Azure AD Privileged Identity Management (PIM).
Show Answer
Correct Answer: C
Explanation: Azure AD Access Reviews are designed to periodically evaluate group memberships. They can be scheduled to run automatically (for example, every three months), allow each member to self-attest whether they still need access, and can be configured to automatically remove users who say they do not need access or who fail to respond. None of the other options provide this combination of recurring evaluation, self-review, and automatic enforcement.
Question 110
HOTSPOT
-
You have two on-premises Microsoft SQL Server 2017 instances that host an Always On availability group named AG1. AG1 contains a single database named DB1.
You have an Azure subscription that contains a virtual machine named VM1. VM1 runs Linux and contains a SQL Server 2019 instance.
You need to migrate DB1 to VM1. The solution must minimize downtime on DB1.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Creating an Always On availability group on VM1
A distributed availability group
Explanation: To minimize downtime, the target Linux SQL Server must first host its own availability group. A distributed availability group can then link the on-premises AG1 with the new AG on VM1, enabling near-zero-downtime data synchronization and a controlled failover to Azure.
Question 111
HOTSPOT
-
You have an on-premises Microsoft SQL Server database named SQL1.
You plan to migrate SQL1 to Azure.
You need to recommend a hosting solution for SQL1. The solution must meet the following requirements:
• Support the deployment of multiple secondary, read-only replicas.
• Support automatic replication between primary and secondary replicas.
• Support failover between primary and secondary replicas within a 15-minute recovery time objective (RTO).
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Azure service or service tier:
The Hyperscale service tier
Replication mechanism:
Active geo-replication
Explanation: The Hyperscale tier supports multiple read-only secondary replicas and built-in automatic replication. Active geo-replication allows multiple readable secondaries and supports failover with an RTO well within 15 minutes. Standard geo-replication supports only one secondary, and auto-failover groups don’t provide multiple readable replicas.
Question 113
You are designing a point of sale (POS) solution that will be deployed across multiple locations and will use an Azure Databricks workspace in the Standard tier. The solution will include multiple apps deployed to the on-premises network of each location.
You need to configure the authentication method that will be used by the app to access the workspace. The solution must minimize the administrative effort associated with staff turnover and credential management.
What should you configure?
A. a managed identity
B. a service principal
C. a personal access token
Show Answer
Correct Answer: B
Explanation: The applications run on-premises and need to authenticate to an Azure Databricks workspace. Managed identities only work for Azure-hosted resources and cannot be used by on‑premises apps. Personal access tokens require manual rotation and user management. A service principal provides an application identity that works from on‑premises, supports role-based access, and minimizes administrative overhead from staff turnover and credential management.
$19
Get all 273 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.