Preguntas de práctica

Pregunta 1

Your company has the infrastructure shown in the following table.

The on-premises Active Directory domain syncs with Azure Active Directory (Azure AD). Server1 runs an application named App1 that uses LDAP queries to verify user identities in the on-premises Active Directory domain. You plan to migrate Server1 to a virtual machine in Subscription1. A company security policy states that the virtual machines and services deployed to Subscription1 must be prevented from accessing the on-premises network. You need to recommend a solution to ensure that App1 continues to function after the migration. The solution must meet the security policy. What should you include in the recommendation?

Parte 1:

Location: Azure - Resource: Azure subscription named Subscription1

Parte 2:

Location: Azure - Resource: 20 Azure web apps

Parte 3:

Location: On-premises datacenter - Resource: Active Directory domain

Parte 4:

Location: On-premises datacenter - Resource: Server running Azure AD Connect

Parte 5:

Location: On-premises datacenter - Resource: Linux computer named Server1

Pregunta 2

You have an on-premises network and an Azure subscription. The on-premises network has several branch offices. A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server. Users access the shared files on VM1 from all the offices. You need to recommend a solution to ensure that the users can access the shared files as quickly as possible if the Toronto branch office is inaccessible. What should you include in the recommendation?

Análisis de la pregunta

Core concept: This question tests designing a high-availability/DR approach for shared file access when a branch office (Toronto) becomes unavailable. The key is not just restoring data, but maintaining fast, continuous access for users across multiple offices. This aligns with Azure Well-Architected Framework reliability (resiliency, failover) and performance efficiency (low-latency access). Why the answer is correct: Using an Azure file share (Azure Files) with Azure File Sync provides a cloud-backed, multi-site-capable file solution. Azure File Sync can sync the Toronto file server (VM1) to an Azure file share, and you can deploy additional File Sync server endpoints (cache servers) in other offices. If Toronto is inaccessible, users can be redirected to another local server endpoint (or directly to Azure Files) that already has the namespace and cached data, enabling much faster access than a restore-based approach. The Azure file share becomes the central, highly available copy of the data in Azure. Key features and best practices: - Azure Files provides SMB-based shares accessible from multiple locations; it supports redundancy options (e.g., ZRS/GRS depending on region/account type) to improve durability. - Azure File Sync provides: - Cloud endpoint (Azure file share) + server endpoints (Windows Servers) for multi-site caching. - Cloud tiering to keep hot data local while offloading cold data to Azure. - Rapid recovery of access: other offices can continue serving files from their local cache even if the primary site is down. - For best performance, place the storage account in a region that minimizes latency for the majority of users, and use ExpressRoute/VPN for predictable connectivity. Common misconceptions: Backup solutions (Azure Backup/Windows Server Backup) protect data but do not provide immediate, low-latency access during an outage; they require restore operations and time to rehydrate data. Blob containers are object storage and don’t natively provide SMB file share semantics for typical Windows file server workloads. Exam tips: - If the requirement is “quickly access files during site outage,” prefer active/active or cloud-backed file services (Azure Files + Azure File Sync) over backup/restore. - Azure File Sync is the go-to when you want to keep Windows file server compatibility locally while centralizing data in Azure and enabling multi-branch caching. - Map requirements: “inaccessible site” + “fast access” => resiliency + caching, not just data protection.

Pregunta 3

HOTSPOT - You plan to deploy Azure Databricks to support a machine learning application. Data engineers will mount an Azure Data Lake Storage account to the Databricks file system. Permissions to folders are granted directly to the data engineers. You need to recommend a design for the planned Databrick deployment. The solution must meet the following requirements: ✑ Ensure that the data engineers can only access folders to which they have permissions. ✑ Minimize development effort. ✑ Minimize costs. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Parte 1:

Databricks SKU: ______

Parte 2:

Cluster configuration: ______

Pregunta 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity. Several virtual machines exhibit network connectivity issues. You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines. Solution: Use Azure Advisor to analyze the network traffic. Does this meet the goal?

Pregunta 5

You plan to move a web app named App1 from an on-premises datacenter to Azure. App1 depends on a custom COM component that is installed on the host server. You need to recommend a solution to host App1 in Azure. The solution must meet the following requirements: ✑ App1 must be available to users if an Azure datacenter becomes unavailable. ✑ Costs must be minimized. What should you include in the recommendation?

¿Quieres practicar todas las preguntas en cualquier lugar?

Descarga Cloud Pass gratis — incluye exámenes de práctica, seguimiento de progreso y más.

Pregunta 6

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements: ✑ Provide access to the full .NET framework. ✑ Provide redundancy if an Azure region fails. ✑ Grant administrators access to the operating system to install custom application dependencies. Solution: You deploy two Azure virtual machines to two Azure regions, and you deploy an Azure Application Gateway. Does this meet the goal?

Pregunta 7

You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service (AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines. The virtual machines and the AKS cluster will reside on the same virtual network. You need to design a solution to expose the microservices to the consumer apps. The solution must meet the following requirements: ✑ Ingress access to the microservices must be restricted to a single private IP address and protected by using mutual TLS authentication. ✑ The number of incoming microservice calls must be rate-limited. ✑ Costs must be minimized. What should you include in the solution?

Análisis de la pregunta

Core concept: This question tests how to securely expose AKS-hosted microservices privately to VM-based consumers on the same VNet, while enforcing mutual TLS (mTLS) and rate limiting at the ingress layer, with cost awareness. The key is choosing an ingress/gateway that can be privately reachable (single private IP) and can apply API-level policies such as rate limiting and client-certificate authentication. Why the answer is correct: Azure API Management (APIM) Premium tier with virtual network connection is the most appropriate because it can be deployed in (or connected to) a VNet to provide a private endpoint (single private IP via internal VNet mode) and supports policies for both client certificate authentication (mTLS) and rate limiting/throttling. With APIM in internal VNet mode, consumer VMs in the same VNet can call APIM over a private IP only, satisfying the “single private IP” ingress restriction. APIM can then route to AKS services (typically via an internal load balancer service, private ingress controller, or private DNS) without exposing public endpoints. Key features/configuration points: - Private ingress: APIM Premium supports VNet injection (internal mode) so the gateway is reachable only via a private IP in the VNet. - mTLS: Configure APIM to require client certificates and validate them (certificate authentication) and optionally validate against uploaded CA certificates. - Rate limiting: Use APIM policies such as rate-limit and quota to throttle calls per subscription/key, per IP, or per API. - Cost minimization nuance: Premium is expensive, but among the options it is the only one that meets all requirements simultaneously (private IP + mTLS + rate limiting). In exam terms, “must meet requirements” overrides “minimize cost.” Common misconceptions: - Application Gateway/WAF is often chosen for private ingress, but it does not provide APIM-style rate limiting policies and mTLS enforcement is not its primary API governance feature. - Front Door is a global public entry service and cannot provide a single private IP for VNet-only access. - APIM Standard does not support VNet injection; service endpoints don’t make APIM privately reachable in the required way. Exam tips: When you see “rate limit” and “mTLS/client cert auth” together, think APIM policies. When you also see “single private IP” and “same VNet,” you typically need APIM Premium (VNet injection/internal mode) or another private API gateway pattern. Always validate which tiers support VNet connectivity and which services are inherently public (e.g., Front Door).

Pregunta 8

(Selecciona 2)

You are planning an Azure IoT Hub solution that will include 50,000 IoT devices. Each device will stream data, including temperature, device ID, and time data. Approximately 50,000 records will be written every second. The data will be visualized in near real time. You need to recommend a service to store and query the data. Which two services can you recommend? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Análisis de la pregunta

Core concept: This question tests selecting a data store and query/analytics service for high-ingest IoT telemetry (50,000 events/sec) with near-real-time visualization. The key is choosing services that can handle very high write throughput, low-latency queries, and time-series patterns. Why the answers are correct: Azure Cosmos DB for NoSQL (C) is a globally distributed, horizontally scalable database designed for massive ingestion rates and low-latency reads/writes. With proper partitioning (for example, partition key by deviceId and possibly a synthetic key to avoid hot partitions), Cosmos DB can sustain very high RU/s and support real-time dashboards querying recent data. It also supports TTL for automatic data aging, which is common for telemetry. Azure Time Series Insights (D) is purpose-built for IoT time-series exploration and near-real-time visualization. It provides time-series modeling, fast ad-hoc queries over time windows, and built-in visualization experiences. It integrates with IoT Hub/Event Hubs for ingestion and is designed for scenarios exactly like temperature/device/time telemetry. Key features and best practices: - Cosmos DB: choose an appropriate partition key to distribute writes evenly; provision RU/s (or autoscale) based on 50k writes/sec; use TTL for retention; consider multi-region writes if required for resiliency and latency. This aligns with Azure Well-Architected Framework performance efficiency and reliability pillars. - Time Series Insights: use it for interactive analytics and visualization; model hierarchies (device/site) and measures (temperature); configure warm/cold retention depending on tier and retention needs. Common misconceptions: - Azure Table Storage (A) is inexpensive and scalable, but it’s not optimized for complex, near-real-time analytical queries at this scale, and query patterns are limited (primarily key-based). It can store telemetry, but it’s not a complete “store and query for near real-time visualization” solution compared to Cosmos DB/TSI. - Event Grid (B) is an event routing service, not a database or query engine. It helps react to events but does not store/query telemetry. Exam tips: For IoT telemetry at high velocity with near-real-time dashboards, look for “time-series” and “interactive exploration” cues (Time Series Insights) and for “massive ingestion + low-latency queries + global scale” cues (Cosmos DB). Also remember: routing services (Event Grid) are not storage, and simple key-value stores (Table Storage) often fall short for real-time analytics requirements at scale.

Pregunta 9

You plan to provision a High Performance Computing (HPC) cluster in Azure that will use a third-party scheduler. You need to recommend a solution to provision and manage the HPC cluster node. What should you include in the recommendation?

Pregunta 10

(Selecciona 2)

You have an Azure subscription. Your on-premises network contains a file server named Server1. Server1 stores 5 ׀¢׀’ of company files that are accessed rarely. You plan to copy the files to Azure Storage. You need to implement a storage solution for the files that meets the following requirements: ✑ The files must be available within 24 hours of being requested. ✑ Storage costs must be minimized. Which two possible storage solutions achieve this goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Practice Test #4

Respuestas y explicaciones verificadas por triple IA

Preguntas de práctica

Otros exámenes de práctica

Practice Test #1

Practice Test #2

Practice Test #3

Comienza a practicar ahora