You are designing an order processing system in Azure that will contain the Azure resources shown in the following table.
The order processing system will have the following transaction flow:
✑ A customer will place an order by using App1.
✑ When the order is received, App1 will generate a message to check for product availability at vendor 1 and vendor 2.
✑ An integration component will process the message, and then trigger either Function1 or Function2 depending on the type of order.
✑ Once a vendor confirms the product availability, a status message for App1 will be generated by Function1 or Function2.
✑ All the steps of the transaction will be logged to storage1.
Which type of resource should you recommend for the integration component?
A. an Azure Service Bus queue
B. an Azure Data Factory pipeline
C. an Azure Event Grid domain
D. an Azure Event Hubs capture
Show Answer
Correct Answer: B
Explanation: An Azure Data Factory pipeline can evaluate the order type, conditionally invoke Function1 or Function2, and log pipeline activity to storage. A Service Bus queue can hold messages, but it cannot itself process them or choose which function to trigger.
Question 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.
Solution: Use Azure Traffic Analytics in Azure Network Watcher to analyze the network traffic.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: No. Traffic Analytics summarizes traffic patterns from flow logs, including allowed and denied flows, but it is not the tool for checking whether a specific packet to or from a VM is allowed or denied. Use Network Watcher IP flow verify for that check.
Question 16
You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam,
Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for the
Microsoft 365 E5 plan.
You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements:
✑ To the manager of the developers, send a monthly email message that lists the access permissions to Application1.
✑ If the manager does not verify an access permission, automatically revoke that permission.
✑ Minimize development effort.
What should you recommend?
A. In Azure Active Directory (Azure AD), create an access review of Application1.
B. Create an Azure Automation runbook that runs the Get-AzRoleAssignment cmdlet.
C. In Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role assignment for the Application1 resources.
D. Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet.
Show Answer
Correct Answer: A
Explanation: Create an Azure AD access review for Application1 and configure it to recur monthly, with the developers’ manager as the reviewer. The review can notify the manager of the access to review and automatically remove permissions that are denied or not reviewed. This is a built-in, low-development solution; the runbook options would require custom automation.
Question 16
You have an app named App1 that uses an Azure Blob Storage container named app1data.
App1 uploads a cumulative transaction log file named File1.txt to a block blob in app1data once every hour. File1.txt only stores transaction data from the current day.
You need to ensure that you can restore the last uploaded version of File1.txt from any day for up to 30 days after the file was overwritten. The solution must minimize storage space.
What should you include in the solution?
A. container soft delete
B. blob snapshots
C. blob soft delete
D. blob versioning
Show Answer
Correct Answer: D
Explanation: Blob versioning automatically creates a new version whenever a blob is overwritten, allowing restoration of previous versions for a configured retention period. Container soft delete and blob soft delete protect against deletion rather than preserving overwrite history, and snapshots would require explicit creation/scheduling. Versioning is the native feature intended for overwrite recovery and can be combined with lifecycle management to retain versions for 30 days.
Sources:
https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-delete
https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-version-level-worm-policies
Question 16
You have the resources shown in the following table:
CDB1 hosts a container that stores continuously updated operational data.
You are designing a solution that will use AS1 to analyze the operational data daily.
You need to recommend a solution to analyze the data without affecting the performance of the operational data store.
What should you include in the recommendation?
A. Azure Cosmos DB change feed
B. Azure Data Factory with Azure Cosmos DB and Azure Synapse Analytics connectors
C. Azure Synapse Link for Azure Cosmos DB
D. Azure Synapse Analytics with PolyBase data loading
Show Answer
Correct Answer: C
Explanation: Azure Synapse Link for Azure Cosmos DB enables analytics in Azure Synapse Analytics against the Cosmos DB analytical store, separating analytical queries from transactional workloads to avoid affecting the operational data store.
Question 17
DRAG DROP
-
You plan to use Azure Storage to store data assets.
You need to identify the procedure to fail over a general-purpose v2 account as part of a disaster recovery plan. The solution must meet the following requirements:
• Apps must be able to access the storage account after a failover.
• You must be able to fail back the storage account to the original location.
• Downtime must be minimized.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Show Answer
Correct Answer: Before a failover, configure geo-redundant storage (GRS) replication for the storage account.
Initiate a failover.
After a failover, configure geo-redundant storage (GRS) replication for the storage account.
Explanation: Customer-initiated failover requires geo-redundant replication (GRS/RA-GRS/GZRS variants). After failover, the account becomes LRS in the new primary region, so re-enabling GRS restores geo-replication and allows future failback capability.
Question 17
Your company has an app named App1 that uses data from the on-premises Microsoft SQL Server databases shown in the following table.
App1 and the data are used on the first day of the month only. The data is not expected to grow more than 3 percent each year.
The company is rewriting App1 as an Azure web app and plans to migrate all the data to Azure.
You need to migrate the data to Azure SQL Database and ensure that the database is only available on the first day of each month.
Which service tier should you use?
A. vCore-based General Purpose
B. DTU-based Standard
C. vCore-based Business Critical
D. DTU-based Basic
Show Answer
Correct Answer: A
Explanation: Use the vCore-based General Purpose tier with serverless compute. Its auto-pause capability reduces compute charges during the long periods when the databases are unused, while the data remains stored. DTU-based tiers do not support serverless auto-pause; Basic also cannot accommodate the larger databases.
Question 18
Your company has the divisions shown in the following table.
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend?
A. Configure the Azure AD provisioning service.
B. Enable Azure AD pass-through authentication and update the sign-in endpoint.
C. Use Azure AD entitlement management to govern external users.
D. Configure Azure AD join.
Show Answer
Correct Answer: C
Explanation: Use Azure AD entitlement management to onboard fabrikam.com users as B2B guests in the Contoso tenant and govern their access to App1. The single-tenant app can then authenticate those guest users through their representation in Contoso. The other options do not provide this external-user access flow.
Question 18
DRAG DROP -
You have an on-premises datacenter named Site1. Site1 contains a VMware vSphere cluster named Cluster1 that hosts 100 virtual machines. Cluster1 is managed by using VMware vCenter.
You have an Azure subscription named Sub1.
You plan to migrate the virtual machines from Cluster1 to Sub1.
You need to identify which resources are required to run the virtual machines in Azure. The solution must minimize administrative effort.
What should you configure? To answer, drag the appropriate resources to the correct targets. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Sub1: An Azure Migrate project
Cluster1: An Azure Migrate appliance
Explanation: For migrating VMware VMs to Azure IaaS with minimal administrative effort, create an Azure Migrate project in the Azure subscription and deploy an Azure Migrate appliance in the on-premises VMware environment to discover, assess, and replicate VMs.
Question 19
You are designing a SQL database solution. The solution will include 20 databases that will be 20 GB each and have varying usage patterns.
You need to recommend a database platform to host the databases. The solution must meet the following requirements:
✑ The solution must meet a Service Level Agreement (SLA) of 99.99% uptime.
✑ The compute resources allocated to the databases must scale dynamically.
✑ The solution must have reserved capacity.
Compute charges must be minimized.
What should you include in the recommendation?
A. an elastic pool that contains 20 Azure SQL databases
B. 20 databases on a Microsoft SQL server that runs on an Azure virtual machine in an availability set
C. 20 databases on a Microsoft SQL server that runs on an Azure virtual machine
D. 20 instances of Azure SQL Database serverless
Show Answer
Correct Answer: A
Explanation: An Azure SQL elastic pool lets the 20 databases share compute resources, which suits their varying usage patterns and helps minimize compute charges. Elastic pools support reserved capacity, and Azure SQL Database meets the 99.99% uptime SLA. Serverless can scale compute dynamically, but it does not meet the reserved-capacity requirement.
$19
Get all 272 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
