HOTSPOT
-
You have 100 Azure Storage accounts.
Access to the accounts is restricted by using Azure role-based access control (Azure RBAC) assignments.
You need to recommend a solution that uses role assignment conditions based on the tags assigned to individual resources within the storage accounts.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
Show Answer
Correct Answer: Attribute-based access control (ABAC)
Blobs
Explanation: Azure RBAC role assignment conditions that use resource tags are implemented with Azure ABAC. ABAC conditions for Azure Storage are supported for Blob Storage (including ADLS Gen2), not Azure Files or Tables.
Question 11
HOTSPOT -
You have an Azure subscription that contains the resources shown in the following table.
VNet1, VNet2, and VNet3 each has multiple virtual machines connected. The virtual machines use the Azure DNS service for name resolution.
You need to recommend an Azure Monitor log routing solution that meets the following requirements:
• Ensures that the logs collected from the virtual machines and sent to Workspace1 are routed over the Microsoft backbone network
• Minimizes administrative effort
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
Show Answer
Correct Answer: 1
2
Explanation: Use a single Azure Monitor Private Link Scope (AMPLS) for the single Log Analytics workspace to minimize administration. One private endpoint can serve the peered VNet1/VNet2, while isolated VNet3 requires its own private endpoint because it cannot reach the first over peering.
Question 12
HOTSPOT
-
You have an Azure subscription.
You need to deploy a relational database. The solution must meet the following requirements:
• Support multiple read-only replicas.
• Automatically load balance read-only requests across all the read-only replicas.
• Minimize administrative effort
What should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Service: A single Azure SQL database
Service tier: Hyperscale
Explanation: Hyperscale supports multiple accessible read-only replicas and automatically load balances read-only connections across them. A single Azure SQL Database is the simplest managed deployment, minimizing administrative effort.
Question 14
You have an Azure subscription that contains an Azure Cosmos DB for NoSQL account named account1 and an Azure Synapse Analytics workspace named Workspace1. The account1 account contains a container named Contained that has the analytical store enabled.
You need to recommend a solution that will process the data stored in Contained in near-real-time (NRT) and output the results to a data warehouse in Workspace1 by using a runtime engine in the workspace. The solution must minimize data movement.
Which pool in Workspace1 should you use?
A. Apache Spark
B. serverless SQL
C. dedicated SQL
D. Data Explorer
Show Answer
Correct Answer: A
Explanation: Apache Spark pools in Azure Synapse integrate with Azure Cosmos DB analytical store via Synapse Link, allowing direct processing of analytical store data with minimal data movement. Spark is the appropriate runtime engine for near-real-time data processing and can write transformed results into a Synapse data warehouse (dedicated SQL pool). Serverless SQL is primarily for interactive querying, dedicated SQL is the target warehouse rather than the processing engine, and Data Explorer is optimized for telemetry/log analytics rather than this Synapse Link processing pattern.
Question 15
HOTSPOT
-
You have an Azure subscription.
You are designing a solution for containerized apps. The solution must meet the following requirements:
• Automatically scale the apps by creating additional instances.
• Minimize administrative effort to maintain nodes and clusters.
• Ensure that containerized apps are highly available across multiple availability zones.
• Provide a central location for the lifecycle management and storage of container images.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: To run the containerized apps: Azure Container Apps
For the lifecycle management and storage of container images: Azure Container Registry
Explanation: Azure Container Apps provides managed container hosting with autoscaling and reduced operational overhead while supporting high availability. Azure Container Registry is the Azure service for storing and managing container images.
Question 16
You have an app named App1 that uses an Azure Blob Storage container named app1data.
App1 uploads a cumulative transaction log file named File1.txt to a block blob in app1data once every hour. File1.txt only stores transaction data from the current day.
You need to ensure that you can restore the last uploaded version of File1.txt from any day for up to 30 days after the file was overwritten. The solution must minimize storage space.
What should you include in the solution?
A. container soft delete
B. blob snapshots
C. blob soft delete
D. blob versioning
Show Answer
Correct Answer: D
Explanation: Blob versioning automatically creates a new version whenever a blob is overwritten, allowing restoration of previous versions for a configured retention period. Container soft delete and blob soft delete protect against deletion rather than preserving overwrite history, and snapshots would require explicit creation/scheduling. Versioning is the native feature intended for overwrite recovery and can be combined with lifecycle management to retain versions for 30 days.
Sources:
https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-delete
https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-version-level-worm-policies
Question 17
DRAG DROP
-
You plan to use Azure Storage to store data assets.
You need to identify the procedure to fail over a general-purpose v2 account as part of a disaster recovery plan. The solution must meet the following requirements:
• Apps must be able to access the storage account after a failover.
• You must be able to fail back the storage account to the original location.
• Downtime must be minimized.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Show Answer
Correct Answer: Before a failover, configure geo-redundant storage (GRS) replication for the storage account.
Initiate a failover.
After a failover, configure geo-redundant storage (GRS) replication for the storage account.
Explanation: Customer-initiated failover requires geo-redundant replication (GRS/RA-GRS/GZRS variants). After failover, the account becomes LRS in the new primary region, so re-enabling GRS restores geo-replication and allows future failback capability.
Question 18
DRAG DROP -
You have an on-premises datacenter named Site1. Site1 contains a VMware vSphere cluster named Cluster1 that hosts 100 virtual machines. Cluster1 is managed by using VMware vCenter.
You have an Azure subscription named Sub1.
You plan to migrate the virtual machines from Cluster1 to Sub1.
You need to identify which resources are required to run the virtual machines in Azure. The solution must minimize administrative effort.
What should you configure? To answer, drag the appropriate resources to the correct targets. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Sub1: An Azure Migrate project
Cluster1: An Azure Migrate appliance
Explanation: For migrating VMware VMs to Azure IaaS with minimal administrative effort, create an Azure Migrate project in the Azure subscription and deploy an Azure Migrate appliance in the on-premises VMware environment to discover, assess, and replicate VMs.
Question 19
You have 12 on-premises data sources that contain customer information and consist of Microsoft SQL Server, MySQL, and Oracle databases.
You have an Azure subscription.
You plan to create an Azure Data Lake Storage account that will consolidate the customer information for analysis and reporting.
You need to recommend a solution to automatically copy new information from the data sources to the Data Lake Storage account by using extract, transform and load (ETL). The solution must minimize administrative effort.
What should you include in the recommendation?
A. Azure Data Factory
B. Azure Data Explorer
C. Azure Data Share
D. Azure Data Studio
Show Answer
Correct Answer: A
Explanation: Azure Data Factory is the managed Azure service designed for building and orchestrating ETL/ELT pipelines. It supports hybrid data integration with built-in connectors for on-premises SQL Server, MySQL, and Oracle databases, and can automatically copy new data into Azure Data Lake Storage with minimal administrative effort.
Question 20
HOTSPOT
-
You have an Azure App Service web app named Webapp1 that connects to an Azure SQL database named DB1. Webapp1 and DB1 are deployed to the East US Azure region.
You need to ensure that all the traffic between Webapp1 and DB1 is sent via a private connection.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: 2 subnets
A private DNS zone
Explanation: App Service VNet Integration requires a delegated subnet, while the Azure SQL Private Endpoint cannot be placed in that delegated subnet, so at least two subnets are needed. A Private DNS zone ensures the SQL database name resolves to the private endpoint IP, keeping traffic on the private network.
$19
Get all 271 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.