AZ304 Microsoft Azure Architect Design Free Practice Test — 30 Questions

Question 1

A multinational corporation, \"Aethelred Innovations,\" is expanding its cloud footprint in Azure. They are subject to a stringent regional data sovereignty law that dictates all customer data must reside within specific, approved Azure geographies. The architecture must dynamically adapt to potential shifts in these approved geographies due to evolving regulatory landscapes, while ensuring new resource deployments are automatically compliant. Which Azure service, when configured with appropriate policy definitions, provides the most effective and scalable mechanism for enforcing these data residency mandates across the entire Azure estate, and for automatically preventing non-compliant resource deployments?

Accepted Answer

Azure Policy

Question 2

An organization relies on a bespoke customer relationship management (CRM) application hosted on-premises. This application is mission-critical, processing sensitive client data and experiencing significant, unpredictable traffic surges during peak sales periods. The executive team has mandated a move to Azure with stringent requirements for near-zero downtime (RTO < 5 minutes) and minimal data loss (RPO < 1 minute). The existing database is a SQL Server instance. The architectural team must select the most appropriate Azure database service to meet these demanding availability and performance objectives while also considering long-term operational efficiency.

Accepted Answer

Migrate the application to Azure SQL Database configured with the Business Critical service tier.

Question 3

An international e-commerce enterprise is experiencing unprecedented growth, leading to highly variable and unpredictable peak loads on its primary web application. The architecture must be designed to scale seamlessly, maintain sub-second response times globally, and withstand potential regional service disruptions without impacting user experience. The development team prioritizes agile deployment practices and requires a robust security posture, including protection against common web vulnerabilities. Which combination of Azure services best addresses these multifaceted requirements for a resilient and high-performance global deployment?

Accepted Answer

Azure App Service deployed across multiple regions with Azure Traffic Manager for global load balancing, Azure Cosmos DB for data storage, and Azure Application Gateway with WAF for security.

Question 4

A global e-commerce platform, currently running a monolithic architecture on-premises, is planning a significant migration to Microsoft Azure to address persistent issues with performance degradation during peak sales events and a lack of agility in deploying new features. The core business requirement is to architect a solution that offers superior resilience against component failures, allows for granular scaling of individual functionalities, and supports independent deployment cycles for different business units. The company also needs to comply with data residency regulations, necessitating careful consideration of regional deployment strategies.

Which architectural approach would best meet these multifaceted requirements for improved resilience, scalability, and agility in Azure?

Accepted Answer

Implement Azure Kubernetes Service (AKS) with a microservices-based decomposition of the monolithic application, leveraging containerization for independent scaling and fault tolerance.

Question 5

An organization is deploying a new globally available Azure service that leverages Azure Kubernetes Service (AKS) clusters in multiple regions. Shortly after launch, users in the Asia Pacific region report sporadic and severe performance degradation, with intermittent connectivity failures to the service. Initial monitoring shows no obvious resource exhaustion on the AKS nodes or within the application pods themselves. The architecture team suspects a deeper network-related issue impacting the service\'s availability in this specific geographic area. What is the most appropriate strategic approach for the Azure architect to diagnose and resolve this complex problem, considering the potential for subtle network interactions and dependencies?

Accepted Answer

Conduct a comprehensive analysis of Azure's global network fabric, focusing on traffic flow patterns, peering points, and regional network configurations within the affected Asia Pacific regions to identify potential bottlenecks or misconfigurations impacting the AKS service.

Question 6

A cloud architect is tasked with a strategic review of an organization\'s Azure footprint, with the explicit mandate to significantly reduce operational expenditure while ensuring that the existing security posture is not degraded. The architect needs to identify which category of Azure Advisor recommendations would yield the most immediate and impactful results aligned with these primary objectives.

Accepted Answer

Recommendations focused on optimizing resource utilization and leveraging cost-saving purchase options.

Question 7

A global e-commerce platform architecting its Azure presence must design a robust disaster recovery strategy. The solution must guarantee that in the event of a complete Azure region failure, customer-facing applications and their associated data remain accessible with minimal downtime, adhering to a Recovery Time Objective (RTO) of under 15 minutes and a Recovery Point Objective (RPO) of less than 5 minutes. The existing architecture is deployed across multiple virtual machines within a single Azure region. Given the stringent RTO and RPO requirements, which Azure service is the most suitable for orchestrating the failover and ensuring business continuity during a catastrophic regional outage?

Accepted Answer

Azure Site Recovery

Question 8

A financial services firm is undertaking a significant cloud adoption initiative, aiming to migrate a critical, long-standing monolithic application to Microsoft Azure. This application, responsible for real-time transaction processing, exhibits high coupling between its presentation, business logic, and data access tiers. Performance is heavily dependent on an intricate, in-house developed in-memory caching system. The firm\'s strategic objectives include achieving elastic scalability to handle fluctuating market demands, enhancing application resilience against component failures, and optimizing operational costs. They are seeking an architectural approach that supports these objectives without necessitating a complete rewrite of the application\'s core logic in the initial phase, while also preparing for future evolutionary enhancements.

Which Azure architectural strategy best aligns with these objectives and constraints?

Accepted Answer

Decompose the monolith into microservices hosted on Azure Kubernetes Service (AKS), utilizing Azure Cache for Redis for the caching layer, and manage external access through Azure API Management.

Question 9

A financial services firm is undertaking a critical migration of its on-premises SAP HANA environment to Azure. The migration plan prioritizes minimizing downtime and ensuring the highest level of business continuity for its transaction processing systems. To validate the proposed Azure architecture against best practices and identify any potential risks that could impact the SAP workload\'s performance and availability during and after the migration, which Azure resource is most instrumental in providing proactive, workload-specific recommendations?

Accepted Answer

Azure Advisor for SAP solutions

Question 10

An architect is designing a solution for a financial services firm that handles highly sensitive customer financial data. The solution involves a custom .NET application running on Azure Functions that processes and stores data in Azure Blob Storage. Strict regulatory compliance, including GDPR and local financial data privacy laws, mandates that all customer data must be encrypted both at rest and in transit, with the organization maintaining full control over the encryption keys. The architect needs to implement a robust security posture that minimizes the risk of data exfiltration and unauthorized access.

Which combination of Azure services and configurations best meets these stringent requirements for data protection?

Accepted Answer

Configure Azure Blob Storage to use customer-managed keys stored in Azure Key Vault for encryption at rest, and ensure the custom application exclusively uses HTTPS endpoints for all interactions with Blob Storage.

Question 11

A global financial services organization is migrating its core customer transaction database to Azure. A primary architectural concern is ensuring business continuity and adhering to strict data residency regulations, particularly those pertaining to the General Data Protection Regulation (GDPR), which mandates that PII must be stored within specific geographical boundaries. The current on-premises solution employs database replication to a geographically separate disaster recovery site. The proposed Azure architecture must provide a highly available and resilient database solution that can automatically failover to a secondary region if the primary region becomes unavailable, while simultaneously guaranteeing that customer PII is always resident within designated European Union (EU) territories.

Which Azure data service and feature combination best addresses these stringent requirements?

Accepted Answer

Azure SQL Database configured with Active Geo-Replication to a secondary Azure region within the EU, ensuring data residency and high availability.

Question 12

Nova Financials, a global financial institution, is mandated by stringent regional data sovereignty laws to keep a significant portion of its sensitive customer transaction data within its physical datacenter. Concurrently, their on-premises trading platforms require extremely low latency for real-time operations. To meet these requirements while also leveraging Azure\'s scalability for new AI-driven analytics services and unified management capabilities, what foundational on-premises infrastructure solution, when integrated with Azure services, best addresses these multifaceted needs?

Accepted Answer

Azure Stack HCI

Question 13

A financial services firm is planning to migrate a mission-critical, custom-built trading application from their on-premises data center to Microsoft Azure. The application relies on a proprietary version of a relational database that has limited forward compatibility with modern database platforms. The firm\'s architects have identified that direct migration to Azure SQL Database managed instance presents compatibility challenges due to the specific database version and its unique transactional behaviors. The primary business objective is to achieve a near-zero downtime migration with guaranteed data consistency, while avoiding extensive application code refactoring. The firm has also expressed concerns about the regulatory compliance requirements for financial data, necessitating robust security features and auditing capabilities.

Which Azure migration strategy and target service combination best addresses these complex requirements, prioritizing minimal downtime and application compatibility without significant code modification?

Accepted Answer

Utilize Azure Database Migration Service (DMS) for an online migration to Azure SQL Managed Instance, carefully validating compatibility for the specific database version and its transactional nuances, and leveraging Azure Purview for data governance and compliance auditing.

Question 14

A financial services organization is migrating a mission-critical customer onboarding portal to Azure. The portal relies on Azure SQL Database for its data persistence. Current business requirements dictate a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 5 minutes. However, a recent compliance audit has imposed new regulations that mandate a near-zero RTO and RPO for all systems handling customer PII (Personally Identifiable Information), effective immediately. The existing architecture currently leverages standard SQL Server backups to Azure Blob Storage in a secondary region for disaster recovery purposes. Given these new stringent requirements, which Azure data resiliency strategy should the solutions architect prioritize for the Azure SQL Database to meet the near-zero RTO/RPO mandate and ensure regulatory compliance?

Accepted Answer

Implement Active Geo-Replication for the Azure SQL Database, configuring multiple readable secondary replicas in different Azure regions.

Question 15

A global enterprise, committed to stringent regulatory compliance and operational efficiency, is standardizing its cloud adoption strategy. They require a repeatable method to ensure that all newly provisioned Azure subscriptions automatically adhere to specific security configurations, including mandatory network security group (NSG) rules that restrict inbound traffic to only approved ports, and the inclusion of specific resource tags for cost allocation and governance. The architecture team needs a solution that simplifies the deployment of these governance standards across multiple teams and projects, minimizing manual intervention and reducing the risk of misconfigurations.

Which Azure service or combination of services is most appropriate for achieving this objective by packaging policy assignments and other governance artifacts into a standardized deployment?

Accepted Answer

Azure Blueprints, incorporating Azure Policy definitions for NSG rules and mandatory tagging.

Question 16

A financial services firm is migrating a mission-critical, real-time fraud detection system to Azure. The system comprises a web front-end tier and a data processing back-end tier, both deployed within the same Azure region. The application\'s functionality is highly sensitive to network latency, requiring a consistent round-trip time (RTT) of no more than 15 milliseconds between the front-end and back-end tiers to ensure timely transaction analysis and response. The current implementation on the public internet exhibits unpredictable latency fluctuations, impacting user experience and system efficacy. As the lead Azure architect, you need to design a solution that guarantees this stringent latency requirement for inter-tier communication.

Which Azure networking service should be prioritized to establish this predictable, low-latency connectivity between the web and data processing tiers?

Accepted Answer

Azure Private Link

Question 17

Innovate Solutions is architecting a hybrid identity strategy for its global workforce. The organization intends to migrate a significant portion of its user base and applications to Microsoft Azure. A key requirement is that users must authenticate directly against Azure Active Directory (Azure AD) for all cloud-based services, ensuring a streamlined experience and resilience against on-premises infrastructure disruptions. While cloud authentication is prioritized, users must also retain the ability to authenticate to select legacy on-premises applications that are not yet migrated. The IT leadership has expressed a strong preference to avoid complex federation infrastructures, such as Active Directory Federation Services (AD FS), due to management overhead and potential single points of failure.

Which identity synchronization and authentication method best aligns with Innovate Solutions\' requirements for direct Azure AD authentication for cloud services, while accommodating on-premises legacy application access and minimizing infrastructure complexity?

Accepted Answer

Password Hash Synchronization (PHS)

Question 18

A global SaaS provider is undertaking a phased upgrade of its underlying Azure network infrastructure. The upgrade aims to improve network performance and reduce latency for its international customer base. The company has strict Service Level Agreements (SLAs) that mandate near-zero downtime and a maximum latency of 100 milliseconds for 95% of user requests. The architectural team needs to select an Azure service that can intelligently direct user traffic to the most performant and available endpoints across different Azure regions as the upgrade progresses, ensuring a seamless experience for all users throughout the transition.

Which Azure service, when configured with an appropriate routing method, best addresses this requirement for global traffic management during the network infrastructure upgrade?

Accepted Answer

Azure Traffic Manager with Performance routing

Question 19

A multinational financial services firm is designing an Azure solution to host highly sensitive customer financial data. Strict adherence to regulations such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) is paramount, mandating robust data protection, encryption, and granular access controls. The architecture must ensure that all data at rest is encrypted using customer-managed keys, that access to this data is logged comprehensively, and that only explicitly authorized personnel, operating under the principle of least privilege, can interact with the data. Furthermore, the solution must proactively enforce policies to prevent the creation or modification of resources that could inadvertently expose or mishandle this sensitive information. Which combination of Azure services and features best addresses these multifaceted compliance and security requirements?

Accepted Answer

Azure Key Vault for managing encryption keys, Azure Role-Based Access Control (RBAC) for resource authorization, and Azure Policy for enforcing encryption, access logging, and data handling compliance.

Question 20

A multinational financial services organization is designing a new cloud-native application on Azure. The application will process sensitive customer financial data and must comply with the General Data Protection Regulation (GDPR) and a hypothetical but stringent \"Global Financial Data Protection Act\" (GFDPA), both of which mandate that all customer data, including backups and disaster recovery copies, must reside within the European Union. The organization requires a robust disaster recovery strategy that guarantees a Recovery Point Objective (RPO) of no more than 15 minutes and a Recovery Time Objective (RTO) of under 2 hours. Which Azure strategy best addresses these requirements while ensuring strict data residency compliance?

Accepted Answer

Implement Azure Site Recovery to replicate virtual machines and data to a secondary Azure region located within the European Union, ensuring that the target region also adheres to GDPR and GFDPA data residency mandates.

Question 21

A global financial institution is mandated by regulatory bodies to retain terabytes of historical transaction data for a minimum of seven years. This data is accessed very rarely, perhaps only once or twice a year for auditing purposes, but its availability and durability are paramount to meet compliance obligations. The institution requires a cost-effective solution that can scale to accommodate future data growth and ensure data integrity over the extended retention period, with acceptable retrieval times measured in hours rather than minutes. Which Azure storage strategy best satisfies these requirements?

Accepted Answer

Azure Blob Storage configured with the Archive tier and Geo-Zone-Redundant Storage (GZRS)

Question 22

A multinational financial services firm is planning to migrate a critical, high-traffic, legacy on-premises application to Azure. The application processes sensitive customer financial data and must maintain an uptime of 99.99%. It is designed to handle a peak load of 10,000 concurrent users, with a requirement to scale dynamically. A key compliance mandate dictates that all sensitive customer data must reside within a single designated Azure region. The firm wants to leverage managed services to reduce operational overhead and ensure high availability. Which combination of Azure services would best address these requirements for the application\'s data storage and compute orchestration?

Accepted Answer

Azure Kubernetes Service (AKS) for compute orchestration, Azure SQL Database for core transactional data, and Azure Cosmos DB (single-region write) for sensitive data.

Question 23

A multinational organization is migrating a legacy, monolithic customer relationship management (CRM) system to Azure. The system handles sensitive personal data of European Union citizens. Regulatory compliance mandates that this data must not be transferred outside of the European Union without explicit safeguards. The existing on-premises infrastructure is experiencing performance degradation due to its inability to scale effectively, and the organization aims to improve both the application\'s resilience and its ability to handle peak loads. The architecture must also support disaster recovery capabilities. Which Azure architectural approach best addresses these requirements while ensuring strict adherence to data residency regulations?

Accepted Answer

Deploy the modernized application using Azure Kubernetes Service (AKS) across multiple Azure regions located exclusively within the European Union, utilizing Azure Front Door for global traffic management and failover.

Question 24

An organization is migrating a mission-critical, real-time analytics application to Azure. This application processes sensitive customer data and must adhere to strict data residency regulations (e.g., GDPR Article 5 principles) and maintain near-continuous availability with an RTO of under 5 minutes and an RPO of near-zero. The solution must also support unpredictable, extreme load variations. Which Azure global traffic management and data replication strategy best satisfies these stringent requirements?

Accepted Answer

Azure Traffic Manager using Priority routing with Azure SQL Database active geo-replication.

Question 25

A financial services firm is modernizing a critical, high-transaction volume trading platform by migrating it from an on-premises data center to Microsoft Azure. The existing application architecture relies on a shared network file system for real-time data exchange between multiple application tiers and for storing transaction logs. The primary objectives for the Azure deployment are to ensure uninterrupted service availability with minimal downtime during the transition, achieve elastic scalability to accommodate fluctuating market demands, and optimize operational costs. The firm has indicated that significant refactoring of the application to adopt cloud-native storage APIs is not feasible in the initial migration phase. Considering these constraints and objectives, which Azure storage solution would best serve as the foundational shared file system for the trading platform\'s inter-process communication and log storage?

Accepted Answer

Azure Files Premium

Question 26

A multinational financial services firm is designing a new Azure-based trading platform. The platform must ensure near-continuous availability, withstand sophisticated cyber threats, and strictly adhere to data residency regulations that mandate all sensitive customer data processed within the EU to remain within the EU. Additionally, the firm requires robust protection against application-layer attacks and the ability to monitor and log all network traffic for audit purposes. Which combination of Azure services would best satisfy these stringent requirements for the core trading infrastructure?

Accepted Answer

Azure Firewall Premium and Azure Private Link

Question 27

A multinational e-commerce platform, operating across multiple Azure regions, needs a robust solution to manage user session states for its global customer base. The application experiences significant traffic spikes during promotional events and requires low-latency access to session data to maintain a seamless user experience. The solution must be highly available, scalable to accommodate millions of concurrent users, and support data persistence to prevent session loss in the event of service disruptions. Which Azure service best fulfills these requirements for persistent, highly available, and scalable session state management?

Accepted Answer

Azure Cache for Redis

Question 28

A multinational financial services firm is mandated by the newly enacted \"Global Data Protection Mandate (GDPM)\" to ensure all sensitive customer data processed within its Azure environment adheres to strict data residency and privacy protocols by the end of the fiscal quarter. Concurrently, the firm is experiencing an increase in sophisticated cyberattacks targeting financial institutions, necessitating a robust and adaptable security posture. The project team must architect a solution that allows for rapid deployment of a new customer-facing application that utilizes this sensitive data, while maintaining continuous compliance and mitigating emerging threats, all within an environment where the precise technical interpretation of certain GDPM clauses is still being clarified by regulatory bodies. Which architectural approach best balances the urgent deployment needs with the imperative for security and regulatory adherence in this ambiguous environment?

Accepted Answer

Implement a phased rollout using infrastructure-as-code (IaC) for initial service provisioning, coupled with continuous integration/continuous deployment (CI/CD) pipelines that incorporate automated security hardening and compliance validation checks, leveraging Azure Policy for real-time governance and Azure Sentinel for comprehensive threat detection and response.

Question 29

A financial services organization is undertaking a significant digital transformation initiative, migrating a critical, stateful monolithic application from an on-premises environment to Azure. The primary objectives are to achieve a zero-downtime migration, guarantee data consistency throughout the process, and establish a foundation for future scalability and enhanced resilience. The chosen container orchestration platform is Azure Kubernetes Service (AKS). The application relies on a PostgreSQL database that stores sensitive financial transaction data. The architecture must accommodate the stateful nature of the application during the migration and in the target Azure environment. Which architectural approach best addresses these requirements for managing the application\'s state while leveraging AKS for compute?

Accepted Answer

Containerize the monolithic application and deploy it onto AKS, with the application pods connecting directly to an Azure Database for PostgreSQL - Flexible Server instance for state persistence and management.

Question 30

A global financial services firm is undertaking a critical migration of its legacy, monolithic trading platform to Microsoft Azure. The existing system is highly complex, with tightly coupled components and a database that experiences millions of transactions daily. The business mandate dictates a maximum downtime of 15 minutes during the cutover period, and any data loss is strictly prohibited due to regulatory compliance (e.g., MiFID II, GDPR for data privacy). The target architecture aims for high availability and disaster recovery. What strategic approach should the architectural team prioritize for the migration to effectively manage the inherent risks and constraints?

Accepted Answer

Implement a phased migration leveraging parallel run capabilities and robust data synchronization tools, followed by a carefully orchestrated cutover with automated rollback mechanisms.

AZ304 Microsoft Azure Architect Design Free Practice Test — 30 Questions

A lot more is already mapped out

About the AZ304 Microsoft Azure Architect Design Certification