You need to design a highly available Azure SQL database that meets the following requirements:
• Failover between replicas of the database must occur without any data loss.
• The database must remain available in the event of a zone outage.
• Costs must be minimized.
Which deployment option should you use?
A. Azure SQL Database Business Critical
B. Azure SQL Managed Instance Business Critical
C. Azure SQL Database Standard
D. Azure SQL Managed Instance General Purpose
Show Answer
Correct Answer: A
Explanation: The requirements are zero data loss (synchronous replication with automatic failover), availability during an Availability Zone outage (zone-redundant architecture), and minimized cost. Azure SQL Database Business Critical provides built-in synchronous replicas with zero RPO and supports zone-redundant availability, ensuring automatic failover across zones. Azure SQL Database Standard (DTU-based) does not support zone redundancy, and Managed Instance options are either more expensive or limited in zone-redundant availability. Therefore, Business Critical is the correct and safest choice.
Question 115
Your company has offices in North America and Europe.
You plan to migrate to Azure.
You need to recommend a networking solution for the new Azure infrastructure. The solution must meet the following requirements:
• The Point-to-Site (P2S) VPN connections of mobile users must connect automatically to the closest Azure region.
• The offices in each region must connect to their local Azure region by using an ExpressRoute circuit.
• Transitive routing between virtual networks and on-premises networks must be supported.
• The network traffic between virtual networks must be filtered by using FQDNs.
What should you include in the recommendation?
A. Azure Virtual WAN with a secured virtual hub
B. virtual network peering and application security groups
C. virtual network gateways and network security groups (NSGs)
D. Azure Route Server and Azure Network Function Manager
Show Answer
Correct Answer: A
Explanation: Azure Virtual WAN with a secured virtual hub meets all requirements: P2S VPN users automatically connect to the closest Azure region, ExpressRoute circuits can connect each office to its local regional hub, Virtual WAN provides built-in transitive routing between VNets and on-premises networks, and a secured virtual hub integrates Azure Firewall, which supports FQDN-based traffic filtering. The other options lack automatic regional P2S connectivity, transitive routing, or FQDN filtering capabilities.
Question 116
You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.
What should you include in the recommendation?
A. Azure Service Fabric
B. Azure Data Lake
C. Azure Service Bus
D. Azure Application Gateway
Show Answer
Correct Answer: C
Explanation: The requirement is for asynchronous communication between multiple cloud services using XML messages. Azure Service Bus provides reliable, asynchronous messaging with queues and topics, supports XML and other message formats, and is designed for decoupling distributed application components. The other options do not provide asynchronous messaging between services.
Question 117
You have an Azure subscription.
You need to deploy an Azure Kubernetes Service (AKS) solution that will use Windows Server 2019 nodes. The solution must meet the following requirements:
• Minimize the time it takes to provision compute resources during scale-out operations.
• Support autoscaling of Windows Server containers.
Which scaling option should you recommend?
A. horizontal pod autoscaler
B. Virtual nodes
C. Kubernetes version 1.20.2 or newer
D. cluster autoscaler
Show Answer
Correct Answer: D
Explanation: AKS Windows Server containers require scaling at the node level. The cluster autoscaler automatically adds or removes Windows node pool VMs based on pending pods, supporting autoscaling and minimizing manual intervention. Virtual nodes (ACI) are Linux-only, the horizontal pod autoscaler scales pods but not compute capacity, and Kubernetes version alone is not a scaling option.
Question 118
You need to design a highly available Azure SQL database that meets the following requirements:
• Failover between replicas of the database must occur without any data loss.
• The database must remain available in the event of a zone outage.
• Costs must be minimized.
Which deployment option should you use?
A. Azure SQL Database Basic
B. Azure SQL Managed Instance General Purpose
C. Azure SQL Database Business Critical
D. Azure SQL Managed Instance Business Critical
Show Answer
Correct Answer: C
Explanation: The requirements are zero data loss failover, availability during an availability zone outage, and minimal cost. Azure SQL Database Business Critical uses multiple synchronous replicas with automatic failover, ensuring no data loss. It supports zone-redundant configurations, keeping the database available during a zone outage. Azure SQL Database Basic does not support zone redundancy or zero data loss. Azure SQL Managed Instance General Purpose does not generally support zone redundancy and relies on remote storage, which does not meet the zone outage requirement. Azure SQL Managed Instance Business Critical does meet the technical requirements but is typically more expensive than Azure SQL Database Business Critical, so it does not satisfy the cost minimization requirement.
Question 119
You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.
What should you include in the recommendation?
A. Azure Service Bus
B. Azure Data Lake
C. Azure Traffic Manager
D. Azure Blob Storage
Show Answer
Correct Answer: A
Explanation: The requirement is asynchronous communication between multiple cloud services using XML messages. Azure Service Bus is a managed messaging service designed for decoupled, asynchronous communication between application components. It supports queues and topics/subscriptions, reliable message delivery, and structured message payloads such as XML. The other options do not provide messaging capabilities for service-to-service communication.
Question 120
You need to design a highly available Azure SQL database that meets the following requirements:
• Failover between replicas of the database must occur without any data loss.
• The database must remain available in the event of a zone outage.
• Costs must be minimized.
Which deployment option should you use?
A. Azure SQL Database Hyperscale
B. Azure SQL Database Premium
C. Azure SQL Database Basic
D. Azure SQL Database Standard
Show Answer
Correct Answer: B
Explanation: The requirements imply zero data loss (RPO = 0), automatic failover, and availability during an Availability Zone outage. This requires synchronous replicas with zone redundancy. Azure SQL Database Premium supports zone-redundant databases using Always On technology with multiple synchronous replicas across zones, providing automatic failover without data loss. Basic and Standard tiers do not support zone redundancy, and Hyperscale is more expensive and not required when cost minimization is a goal. Therefore, Premium is the correct and most cost-appropriate option that meets all requirements.
Question 121
Your company has the divisions shown in the following table.
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend?
A. Configure a Conditional Access policy.
B. Use Azure AD entitlement management to govern external users.
C. Configure the Azure AD provisioning service.
D. Configure Azure AD Identity Protection.
Show Answer
Correct Answer: B
Explanation: App1 is a single-tenant Azure AD application. To allow users from another tenant (fabrikam.com) to authenticate, they must be invited as external (B2B) users into the contoso tenant. Azure AD entitlement management uses Entra ID B2B to manage external user access via access packages, enabling fabrikam users to authenticate to App1. Conditional Access, provisioning, and Identity Protection do not enable cross-tenant authentication.
Question 123
You are developing an app that will read activity logs for an Azure subscription by using Azure Functions.
You need to recommend an authentication solution for Azure Functions. The solution must minimize administrative effort.
What should you include in the recommendation?
A. an enterprise application in Azure AD
B. system-assigned managed identities
C. shared access signatures (SAS)
D. application registration in Azure AD
Show Answer
Correct Answer: B
Explanation: System-assigned managed identities are the recommended authentication solution for Azure Functions when minimizing administrative effort. They are automatically created and managed by Azure, require no secrets or credentials to store or rotate, and integrate seamlessly with Azure services such as Activity Logs. Other options involve manual app registrations, secret management, or key handling, which increase administrative overhead.
Question 124
Your company has the divisions shown in the following table.
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend?
A. Configure Azure AD join.
B. Configure Azure AD Identity Protection.
C. Use Azure AD entitlement management to govern external users.
D. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
Show Answer
Correct Answer: C
Explanation: App1 is a single-tenant Azure AD application that currently allows only users from the contoso.com tenant. To allow users from the fabrikam.com tenant to authenticate, they must be invited as external (B2B) users into the contoso tenant and granted access to the app. Azure AD entitlement management is specifically designed to govern access for external users by automating invitations, access packages, and assignments to applications. The other options do not enable cross-tenant user access to a single-tenant app.
$19
Get all 273 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.