New 2021 Latest Questions AZ-304 Dumps - Use Updated Microsoft Exam
Latest AZ-304 Exam Dumps Microsoft Exam from Training Expert TestkingPass
How much AZ-304: Microsoft Azure Architect Design Exam Cost
The price of the Microsoft Mobility and Devices Fundamentals exam is $99 USD, for more information related to exam price please visit to Microsoft Training website as prices of Microsoft exams fees get varied country wise.
NEW QUESTION 11
You have a virtual machine scale set named SS1.
You configure autoscaling as shown in the following exhibit.
You configure the scale out and scale in rules to have a duration of 10 minutes and a cool down time of 10 minutes.
Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 12
You are designing a virtual machine that will run Microsoft SQL Server and will contain two data disks. The first data disk will store log files, and the second data disk will store dat a. Both disks are P40 managed disks.
You need to recommend a caching policy for each disk. The policy must provide the best overall performance for the virtual machine.
Which caching policy should you recommend for each disk? To answer, drag the appropriate policies to the correct disks. Each policy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sql/virtual-machines-windows-sql-performance
NEW QUESTION 13
You plan to create an Azure environment that will have a root management group and five child management groups. Each child management group will contain five Azure subscriptions. You plan to have between 10 and 30 resource groups in each subscription.
You need to design a solution for the planned environment. The solution must meet the following requirements:
Prevent users who are assigned the Owner role for the subscriptions from deleting the resource groups from their respective subscription.
Ensure that you can update RBAC role assignments across all the subscriptions and resource groups.
Minimize administrative effort.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/governance/blueprints/overview
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources
NEW QUESTION 14
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are designing an Azure solution for a company that has four departments. Each department will deploy several Azure app services and Azure SQL databases.
You need to recommend a solution to report the costs for each department to deploy the app services and the databases. The solution must provide a consolidated view for cost reporting that displays cost broken down by department.
Solution: Create a resource group for each resource type. Assign tags to each resource group.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Explanation/Reference:
Explanation:
Tags enable you to retrieve related resources from different resource groups. This approach is helpful when you need to organize resources for billing or management.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags
NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.
Several VMs are exhibiting network connectivity issues.
You need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.
Solution: Use Azure Network Watcher to run IP flow verify to analyze the network traffic Does the solution meet the goal?
- A. No
- B. Yes
Answer: B
NEW QUESTION 16
You need to recommend a solution for the users at Contoso to authenticate to the cloud-based services and the Azure AD-integrated applications.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 17
You need to recommend a solution to deploy containers that run an application. The application has two tiers.
Each tier is implemented as a separate Docker Linux-based image. The solution must meet the following requirements:
* The front-end tier must be accessible by using a public IP address on port 80.
* The backend tier must be accessible by using port 8080 from the front-end tier only.
* Both containers must be able to access the same Azure file share.
* If a container fails, the application must restart automatically.
* Costs must be minimized.
What should you recommend using to host the application?
- A. Azure Container instances
- B. Azure Service Fabric
- C. Azure Kubernetes Service (AKS)
Answer: A
Explanation:
Explanation
Azure Container Instances enables a layered approach to orchestration, providing all of the scheduling and management capabilities required to run a single container, while allowing orchestrator platforms to manage multi-container tasks on top of it.
Because the underlying infrastructure for container instances is managed by Azure, an orchestrator platform does not need to concern itself with finding an appropriate host machine on which to run a single container.
Azure Container Instances can schedule both Windows and Linux containers with the same API.
Orchestration of container instances exclusively
Because they start quickly and bill by the second, an environment based exclusively on Azure Container Instances offers the fastest way to get started and to deal with highly variable workloads.
Reference:
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-overview
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-orchestrator-relationship
NEW QUESTION 18
You are designing an access policy for the sales department at your company.
Occasionally, the developers at the company must stop, start, and restart Azure virtual machines. The development team changes often.
You need to recommend a solution to provide the developers with the required access to the virtual machines. The solution must meet the following requirements:
Provide permissions only when needed.
Use the principle of least privilege.
Minimize costs.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 19
You have an existing implementation of Microsoft SQL Server Integration Services (SSIS) packages stored in an SSISDB catalog on your on-premises network. The on-premises network does not have hybrid connectivity to Azure by using Site-to-Site VPN or ExpressRoute.
You want to migrate the packages to Azure Data Factory.
You need to recommend a solution that facilitates the migration while minimizing changes to the existing packages. The solution must minimize costs.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: Azure SQL database
You can't create the SSISDB Catalog database on Azure SQL Database at this time independently of creating the Azure-SSIS Integration Runtime in Azure Data Factory. The Azure-SSIS IR is the runtime environment that runs SSIS packages on Azure.
Box 2: Azure-SQL Server Integration Service Integration Runtime and self-hosted integration runtime The Integration Runtime (IR) is the compute infrastructure used by Azure Data Factory to provide data integration capabilities across different network environments. Azure-SSIS Integration Runtime (IR) in Azure Data Factory (ADF) supports running SSIS packages.
Self-hosted integration runtime can be used for data movement in this scenario.
Reference:
https://docs.microsoft.com/en-us/azure/data-factory/create-azure-integration-runtime
https://docs.microsoft.com/en-us/sql/integration-services/lift-shift/ssis-azure-connect-to-catalog-database
NEW QUESTION 20
You need to recommend a data storage solution that meets the following requirements:
* Ensures that applications can access the data by using a REST connection
* Hosts 20 independent tables of varying sizes and usage patterns
* Automatically replicates the data to a second Azure region
* Minimizes costs
What should you recommend?
- A. tables in an Azure Storage account that use geo-redundant storage (GRS)
- B. tables in an Azure Storage account that use read-access geo-redundant storage (RA-GRS)
- C. an Azure SQL Database that uses active geo-replication
- D. an Azure SQL Database elastic database pool that uses active geo-replication
Answer: A
NEW QUESTION 21
You have an on-premises network that uses on IP address space of 172.16.0.0/16 You plan to deploy 25 virtual machines to a new azure subscription.
You identity the following technical requirements.
* All Azure virtual machines must be placed on the same subnet subnet1.
* All the Azure virtual machines must be able to communicate with all on premises severs.
* The servers must be able to communicate between the on-premises network and Azure by using a site to site VPN.
You need to recommend a subnet design that meets the technical requirements.
What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnet. Each network address may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 22
You need to recommend a data storage solution that meets the following requirements:
* Ensures that applications can access the data by using a REST connection
* Hosts 20 independent tables of varying sizes and usage patterns
* Automatically replicates the data to a second Azure region
* Minimizes costs
What should you recommend?
- A. tables in an Azure Storage account that use geo-redundant storage (GRS)
- B. an Azure SQL Database that uses active geo-replication
- C. an Azure SQL Database elastic database pool that uses active geo-replication
- D. tables in an Azure Storage account that use read-access geo-redundant storage (RA-GRS)
Answer: D
NEW QUESTION 23
You are evaluating the components of the migration to Azure that require you to provision an Azure Storage account.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 24
You have an Azure Active Directory (Azure AD) tenant and Windows 10 devices.
You configure a conditional access policy as shown in the exhibit. (Click the Exhibit tab.)
What is the result of the policy?
- A. All users will be able to sign in without using multi-factor authentication (MFA).
- B. Users will be prompted for multi-factor authentication (MFA) only when they sign in from devices that are joined to Azure AD.
- C. Users will be prompted for multi-factor authentication (MFA) only when they sign in from devices that are NOT joined to Azure AD.
- D. All users will always be prompted for multi-factor authentication (MFA).
Answer: C
Explanation:
Either the device should be joined to Azure AD or MFA must be used.
NEW QUESTION 25
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it As a result, these questions will not appear In the review screen.
You have an on-premises Hyper-V cluster that hosts 20 virtual machines. Some virtual machines run Windows Server 2016 and some run Linux.
You plan to migrate the virtual machines to an Azure subscription.
You need to recommend a solution to replicate the disks of the virtual machines to Azure. The solution must ensure that the virtual machines remain available during the migration of the disks.
Solution: You recommend implementing an Azure Storage account and then running AzCopy.
Does this meet the goal?
- A. NO
- B. Yes
Answer: A
Explanation:
AzCopy only copy files, not the disks.
Instead use Azure Site Recovery.
References:
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview
NEW QUESTION 26
You plan to migrate App1 to Azure.
You need to recommend a storage solution for App1 that meets the security and compliance requirements.
Which type of storage should you recommend, and how should you recommend configuring the storage? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 27
You are designing a microservices architecture that will support a web application.
The solution must meet the following requirements:
* Allow independent upgrades to each microservice
* Deploy the solution on-premises and to Azure
* Set policies for performing automatic repairs to the microservices
* Support low-latency and hyper-scale operations
You need to recommend a technology.
What should you recommend?
- A. Azure Service Fabric
- B. Azure Container Instance
- C. Azure Container Service
- D. Azure Virtual Machine Scale Set
Answer: A
Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-overview
NEW QUESTION 28
You are designing a virtual machine that will run Microsoft SQL Server and will contain two data disks. The first data disk will store log files, and the second data disk will store data. Both disks are P40 managed disks.
You need to recommend a caching policy for each disk. The policy must provide the best overall performance for the virtual machine.
Which caching policy should you recommend for each disk? To answer, drag the appropriate policies to the correct disks. Each policy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sql/virtual-machines-windows-sql-performanc
NEW QUESTION 29
Your company has the divisions shown in the following table.
You plan to deploy a custom application to each subscription. The application will contain the following:
A resource group
An Azure web app
Custom role assignments
An Azure Cosmos DB account
You need to use Azure Blueprints to deploy the application to each subscription.
What is the minimum number of objects required to deploy the application? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 30
You are designing an Azure solution.
The network traffic for the solution must be securely distributed by providing the following features:
* HTTPS protocol
* Round robin routing
* SSL offloading
You need to recommend a load balancing option.
What should you recommend?
- A. Azure Application Gateway
- B. Azure Internal Load Balancer (ILB)
- C. Azure Load Balancer
- D. Azure Traffic Manager
Answer: A
Explanation:
Explanation
If you are looking for Transport Layer Security (TLS) protocol termination ("SSL offload") or per-HTTP/HTTPS request, application-layer processing, review Application Gateway.
Application Gateway is a layer 7 load balancer, which means it works only with web traffic (HTTP, HTTPS, WebSocket, and HTTP/2). It supports capabilities such as SSL termination, cookie-based session affinity, and round robin for load-balancing traffic. Load Balancer load-balances traffic at layer 4 (TCP or UDP).
References:
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq
NEW QUESTION 31
HOTSPOT
You need to recommend a solution for the data store of the historical transaction query system.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Explanation/Reference:
Design Business Continuity
Question Set 1
NEW QUESTION 32
You design a solution for the web tier of WebApp1 as shown in the exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Answer:
Explanation:
Explanation:
Box 1: Yes
Any new deployments to Azure must be redundant in case an Azure region fails.
Traffic Manager uses DNS to direct client requests to the most appropriate service endpoint based on a traffic-routing method and the health of the endpoints. An endpoint is any Internet-facing service hosted inside or outside of Azure. Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to failure, including the failure of an entire Azure region.
Box 2: Yes
Recent changes in Azure brought some significant changes in autoscaling options for Azure Web Apps (i.e. Azure App Service to be precise as scaling happens on App Service plan level and has effect on all Web Apps running in that App Service plan).
Box 3: No
Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to failure, including the failure of an entire Azure region.
Reference:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview
https://blogs.msdn.microsoft.com/hsirtl/2017/07/03/autoscaling-azure-web-apps/
NEW QUESTION 33
......
Microsoft Azure Architect Design Exam Certification Details:
| Books / Training | AZ-304T00-A: Microsoft Azure Architect Design |
| Number of Questions | 40-60 |
| Exam Name | Microsoft Certified - Azure Solutions Architect Expert |
| Passing Score | 700 / 1000 |
| Exam Code | AZ-304 |
| Schedule Exam | Pearson VUE |
| Duration | 150 mins |
| Exam Price | $165 (USD) |
| Sample Questions | Microsoft Azure Architect Design Sample Questions |
What topics are covered in the Microsoft AZ-304 exam?
The Microsoft AZ-304 exam is developed to measure one’s ability to design monitoring, data storage, identity & security, business continuity, and infrastructure. Each topic has a specific percentage related to it, which indicates the weight of questions that may be expected from each of them. Below are the details of these objectives:
Design Monitoring: 10-15%
- Design for cost optimization: this requires that the examinees know how to recommend solutions for cost reporting and cost management as well as solutions to reduce costs.
- Design solutions for monitoring and logging: this covers one’s skills in determining storage locations and levels for logs; planning for integration with the monitoring tools, which include Azure Sentinel and Azure Monitor. It also comes with the relevant skills in selecting mechanisms for event escalation and routing, as well as recommending the logging solution for compliance prerequisites.
Updated Test Engine to Practice AZ-304 Dumps & Practice Exam: https://www.testkingpass.com/AZ-304-testking-dumps.html