AZ305 Designing Microsoft Azure Infrastructure Solutions Free Practice Test — 30 Questions

Question 1

A global conglomerate, \"Stellaris Corp,\" has been utilizing Azure Site Recovery for disaster recovery of its mission-critical financial services platform. Despite configuring low replication intervals, simulated failover tests consistently fail to meet the demanding Recovery Time Objectives (RTO) of 15 minutes and Recovery Point Objectives (RPO) of 5 minutes. Post-incident reviews reveal that the substantial time required to bring the secondary Azure region environment to a fully operational state, coupled with the need for manual data reconciliation, is the primary cause for these failures. The current architecture employs a passive failover strategy. Which strategic architectural modification would most effectively address Stellaris Corp\'s persistent disaster recovery challenges and align with industry best practices for high-availability financial systems?

Accepted Answer

Transitioning to an active-active deployment model across geographically dispersed Azure regions, leveraging native Azure data synchronization services for near real-time data consistency.

Question 2

A multinational financial services firm, adhering to strict data sovereignty regulations that mandate all sensitive customer data processed within the European Union must reside exclusively within EU member states, is implementing a new Azure-centric strategy. They require a robust mechanism to automatically enforce this data residency requirement for all new Azure Storage account deployments. Furthermore, they need a method to address any existing storage accounts that might inadvertently be deployed outside the designated EU regions, ensuring a consistent state of compliance. Which Azure Policy assignment configuration, coupled with its associated remediation capability, would best achieve this objective?

Accepted Answer

Assign a policy definition with the `DeployIfNotExists` effect, targeting storage account deployments and specifying the allowed EU regions via parameters, and then create a remediation task to audit and correct non-compliant existing resources.

Question 3

A global enterprise, \"Innovate Solutions,\" is migrating its critical customer relationship management (CRM) system to Azure. A significant portion of their customer base resides within the European Union, necessitating strict adherence to GDPR data residency requirements. Innovate Solutions plans to maintain its primary on-premises data center in North America but requires that all customer data originating from EU citizens be exclusively processed and stored within Azure regions located in the European Union. How should the network and service deployment strategy be architected to ensure continuous compliance with GDPR data residency while enabling seamless integration with the North American on-premises infrastructure?

Accepted Answer

Deploy Azure Virtual Machines and Azure SQL Database instances exclusively within EU Azure regions for all CRM workloads, establishing Azure ExpressRoute circuits that terminate directly into these EU regions, and configuring network security groups to strictly control inbound and outbound traffic, preventing any data transit outside the EU.

Question 4

A financial services organization is migrating a critical, monolithic legacy application to Azure. This application processes sensitive customer financial data and is subject to stringent data residency regulations requiring all data to remain within the European Union. The organization\'s primary business objectives for this migration are to enhance application scalability and significantly reduce operational overhead, while also ensuring a high level of availability and robust disaster recovery capabilities. The application currently relies on synchronous communication between its components and uses a relational database. Given these requirements and objectives, what Azure infrastructure design strategy best addresses the immediate needs for compliance, availability, and the foundation for future scalability?

Accepted Answer

Deploying the application and its associated data stores across multiple Azure regions located within the European Union, utilizing Azure Traffic Manager for global load balancing and health-based failover, and implementing Azure SQL Database Active Geo-Replication to ensure data residency and high availability.

Question 5

FinSecure Corp, a financial services organization operating under strict data privacy regulations like GDPR and CCPA, requires the rapid deployment of a new microservice for customer onboarding. This service will process sensitive Personally Identifiable Information (PII) and must adhere to rigorous industry compliance standards. The company aims to accelerate its time-to-market without compromising its legal obligations or security posture. Which architectural approach and Azure service integration best facilitates the automated enforcement of compliance policies and the creation of auditable, repeatable, and secure deployment pipelines for this critical new service?

Accepted Answer

Integrate Azure Policy and Azure Blueprints into the CI/CD pipeline to define and enforce compliance rules and create standardized deployment artifacts.

Question 6

A global financial services firm is migrating its core trading platform to Azure. The platform is mission-critical and must remain accessible 24/7, with absolutely no interruption of service during planned maintenance windows or unexpected infrastructure failures within a single Azure region. The current on-premises deployment relies on redundant servers behind a hardware load balancer. The firm’s architects are evaluating Azure services to replicate this resilience and are concerned about maintaining uptime during Azure host maintenance events. Which combination of Azure services would best address the requirement for continuous availability and zero downtime during planned maintenance for the trading platform hosted on Azure Virtual Machines?

Accepted Answer

Azure Availability Set and Azure Load Balancer

Question 7

Aetherial Dynamics, a multinational corporation, is undergoing a significant digital transformation and must ensure strict adherence to the General Data Protection Regulation (GDPR) concerning the storage and processing of European customer data. A key requirement is to ensure that all new virtual machines provisioned within their Azure environment are exclusively deployed within the \"East US\" and \"West US\" geographical regions to maintain data sovereignty and comply with internal data handling protocols. Which Azure Policy strategy would most effectively enforce this geographical deployment restriction for all new virtual machine creations?

Accepted Answer

Create a custom Azure Policy definition that audits or denies the creation of virtual machines in any location other than 'East US' and 'West US'

Question 8

A multinational corporation is architecting a new customer analytics platform on Azure. The platform must ingest real-time data from customer interactions across North America, Europe, and Asia. It needs to provide low-latency access to this data for personalized customer experiences, ensuring a minimum of 99.99% availability and supporting disaster recovery capabilities across multiple geographic regions. Crucially, due to stringent data privacy laws in several key markets, all customer data must reside within specific sovereign cloud regions in Europe and North America, and access to this data must be strictly controlled based on user location and role. Which Azure data service best supports these complex requirements for global distribution, high availability, and strict data residency enforcement?

Accepted Answer

Azure Cosmos DB

Question 9

An international financial services firm is establishing a new hybrid identity infrastructure, integrating its on-premises Active Directory Domain Services with Azure Active Directory to support a significant migration of customer-facing applications to Microsoft Azure. A primary design constraint is strict adherence to the General Data Protection Regulation (GDPR) for all synchronized user and customer identity data. The firm’s legal and compliance teams have emphasized the need for data minimization and purpose limitation in the identity synchronization process. Which combination of Azure AD Connect configuration and related Azure AD features best addresses these GDPR requirements for the identity synchronization?

Accepted Answer

Configure Azure AD Connect with attribute filtering to synchronize only essential user attributes, and implement Azure AD Conditional Access policies to enforce granular access controls based on user context and resource sensitivity.

Question 10

A global financial institution is migrating its legacy on-premises data center workloads to a hybrid cloud model, leveraging Azure Arc to manage its Kubernetes clusters running in various international locations. The company\'s internal compliance team has mandated that all containerized applications deployed on these clusters must strictly adhere to a set of security benchmarks, including the prohibition of containers running with elevated privileges and the mandatory inclusion of specific metadata labels for cost allocation tracking on every deployed resource. The architecture team needs to implement a solution that centrally enforces these organizational standards across all managed Kubernetes clusters, providing auditable evidence of compliance and the ability to remediate non-compliant deployments. Which Azure service is most appropriate for directly enforcing these custom security benchmarks and metadata requirements on the Azure Arc-enabled Kubernetes clusters?

Accepted Answer

Azure Policy

Question 11

A global financial services organization is migrating its core trading platform to Azure. The platform consists of multiple Azure virtual machines running Windows Server, an Azure SQL Database for transaction processing, and Azure Files shares for storing trade execution logs and client documentation. The organization operates under strict regulatory requirements, including those mandated by FINRA and GDPR, which necessitate a Recovery Time Objective (RTO) of no more than 15 minutes and a Recovery Point Objective (RPO) of no more than 5 minutes for all critical data and services. The disaster recovery strategy must ensure minimal disruption to trading operations and protect sensitive client information. Which combination of Azure services and configurations best addresses these stringent RTO and RPO requirements across all application tiers?

Accepted Answer

Azure Site Recovery for VM replication, Azure SQL Database active geo-replication, and Azure NetApp Files with cross-region replication for file shares.

Question 12

A global financial services organization is migrating its critical customer data processing workloads to Azure. Adherence to the General Data Protection Regulation (GDPR) is paramount, specifically regarding data residency within the European Union. Furthermore, the organization mandates that all new project environments must be provisioned with a pre-defined set of network configurations, security controls, and role-based access permissions to ensure consistency and compliance from inception. They require a solution that facilitates the repeatable deployment of these compliant environments across numerous Azure subscriptions, allowing for centralized management and updates to the baseline configuration as regulatory requirements evolve. Which Azure service best addresses these combined requirements for establishing and maintaining a compliant and standardized infrastructure baseline for new deployments?

Accepted Answer

Azure Blueprints

Question 13

A critical multi-region Azure infrastructure supporting sensitive financial data experiences a cascading failure across its primary region due to an unexpected network backbone disruption. Customer-facing applications are inaccessible, and internal data processing systems are offline. The lead architect, responsible for the Azure infrastructure, must orchestrate a recovery plan that minimizes data loss and ensures compliance with stringent financial regulations, including those pertaining to data residency and transaction integrity. The architect needs to rapidly re-establish services in a secondary region, coordinating with various engineering teams and communicating the evolving situation to executive leadership and affected clients. Which behavioral competency is most critically demonstrated by the architect\'s actions in this high-pressure, ambiguous situation?

Accepted Answer

Crisis Management

Question 14

A financial services organization is migrating its on-premises, mission-critical, multi-tier trading platform to Azure. The platform consists of a web tier, an application tier, and a database tier, all running on separate virtual machines. Due to regulatory requirements and business continuity mandates, they require a disaster recovery solution that ensures a maximum data loss of 15 minutes (Recovery Point Objective - RPO) and a maximum downtime of 1 hour (Recovery Time Objective - RTO) in the event of a primary site failure. The solution must also facilitate an orchestrated failover of the entire application stack in the correct startup sequence. Which Azure service is the most appropriate for implementing this disaster recovery strategy?

Accepted Answer

Azure Site Recovery

Question 15

A global financial services organization is planning to migrate its mission-critical SAP S/4HANA environment from an on-premises data center to Microsoft Azure. The organization operates in multiple jurisdictions with varying data residency laws, including strict adherence to GDPR for customer data processed by SAP. A key objective is to achieve minimal downtime during the migration, ideally less than four hours, and ensure the replicated data remains compliant with data sovereignty regulations throughout the process. The organization has a mature internal IT team with strong SAP administration skills but limited direct experience with large-scale Azure migrations. Which migration strategy best addresses these requirements, prioritizing business continuity and regulatory adherence?

Accepted Answer

Implement a phased migration using Azure Migrate for discovery and assessment, followed by a re-platforming approach leveraging Azure Virtual Machines for SAP HANA, Azure NetApp Files for storage, and Azure Database Migration Service for data replication, with a final cutover after extensive validation and testing of replicated data and application functionality.

Question 16

A global financial services firm is undertaking a significant migration of its core trading platform to Microsoft Azure. This platform is characterized by extremely low latency requirements for inter-service communication, as even microsecond delays can impact trading outcomes. The firm operates multiple data centers across North America and Europe and needs to ensure seamless, high-performance connectivity between these on-premises locations and their Azure deployments. Regulatory compliance, including data residency and low-latency reporting mandates similar to those found in financial markets, is a critical consideration. Which Azure networking solution best addresses the combined needs for consistent, ultra-low latency, private connectivity, and adherence to strict regulatory data locality requirements for this high-frequency trading application?

Accepted Answer

Azure ExpressRoute with private peering, terminating in the same Azure regions where the trading application components are deployed, coupled with Azure Proximity Placement Groups for compute resources.

Question 17

A multinational corporation is designing its Azure infrastructure to comply with stringent data protection regulations, including GDPR. The company has established a governance framework that mandates all storage accounts within the \'Finance\' and \'HR\' management groups must be configured to disallow public network access. Furthermore, any existing storage accounts that violate this rule must be identified and flagged for remediation. Which Azure governance solution would be most effective in automatically enforcing this configuration and auditing non-compliance across all subscriptions within these management groups?

Accepted Answer

Create a custom Azure Policy definition targeting storage accounts with the `publicNetworkAccess` property set to `Disabled` or `NotAllowed` and assign it with a `Deny` effect to the 'Finance' and 'HR' management groups.

Question 18

A global enterprise operates across multiple geographical regions, each with its own IT department managing its Azure environment. The company must adhere to stringent data privacy regulations, such as the General Data Protection Regulation (GDPR), which mandates specific data residency and processing controls. The organization aims to implement a unified governance framework that enforces compliance policies, standardizes resource deployments, and allows for delegated management while ensuring regional autonomy within regulatory boundaries. Which combination of Azure services is most suitable for establishing and enforcing this comprehensive governance model?

Accepted Answer

Azure Policy and Azure Blueprints

Question 19

A global financial institution operates a critical customer-facing application on Azure, spanning multiple regions for high availability. Due to stringent regulatory mandates, including GDPR and specific data sovereignty laws for financial transactions, data integrity and minimal downtime are paramount. A sudden, widespread network disruption severely impacts the primary Azure region where the application\'s primary instance resides. The secondary region, while less affected, experiences intermittent network instability. The institution must devise a strategy to maintain service availability and regulatory compliance during this event, ensuring that data loss is minimized and that all recovered data adheres to sovereignty requirements.

Which of the following architectural approaches best addresses these critical requirements by ensuring a coordinated and compliant recovery process during a regional network failure?

Accepted Answer

Implement Azure Site Recovery to orchestrate the failover of the entire application stack, including compute and storage, to the secondary region, and use Azure Traffic Manager to redirect user traffic to the healthy secondary region.

Question 20

A financial services organization is undertaking a significant modernization initiative, migrating a critical legacy application to Azure. The application processes sensitive customer financial data and must adhere to strict data residency requirements mandated by GDPR, as well as the security controls outlined by PCI DSS. The architecture team proposes utilizing Azure Kubernetes Service (AKS) for application deployment and Azure SQL Database for data persistence. To effectively govern and enforce the necessary compliance controls across these services, what combination of Azure services and configurations represents the most robust strategy for ensuring adherence to both GDPR data residency and PCI DSS security standards?

Accepted Answer

Implement Azure Policy to enforce data residency and encryption standards, utilize Azure Key Vault for managing secrets and certificates, and configure granular Role-Based Access Control (RBAC) for all Azure resources.

Question 21

A global financial services firm is migrating its customer relationship management (CRM) system to Azure. The firm operates under strict financial regulations, including those mandated by the European Union\'s General Data Protection Regulation (GDPR), which dictates that all personally identifiable information (PII) of EU citizens must reside within data centers located within the EU. The architecture design must proactively prevent the deployment of any Azure resources that could potentially store or process this sensitive data outside of the approved EU regions. Which Azure mechanism should be the primary tool for enforcing this data residency requirement at the resource deployment level?

Accepted Answer

Implementing Azure Policy with a `Deny` effect for resource deployments outside of specified EU regions.

Question 22

A global enterprise is planning a significant migration of its on-premises SAP HANA environment to Azure. The primary drivers for this migration are to leverage Azure\'s scalability and resilience. The SAP HANA instances support critical business operations, necessitating a robust high availability (HA) and disaster recovery (DR) strategy with stringent Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO). The organization has designated a secondary Azure region for DR purposes and requires a solution that can ensure near-synchronous data replication and automated failover to minimize downtime in the event of a regional outage. Which Azure service best addresses the disaster recovery requirements for this SAP HANA deployment, ensuring transactional consistency and automated failover capabilities?

Accepted Answer

Azure Site Recovery

Question 23

A multinational corporation is designing a new cloud-native application that must adhere to stringent data residency regulations, including GDPR, for its European and North American customer bases. The application requires a highly available, scalable, and secure infrastructure. Key functional requirements include a web application front-end, a set of stateless microservices, and a stateful data service. The architecture must ensure that data processed for European customers remains exclusively within European Azure regions, and data for North American customers remains exclusively within North American Azure regions, without any cross-border data flow for sensitive information. Which Azure deployment strategy best addresses these multifaceted requirements while optimizing for resilience and performance?

Accepted Answer

Deploying distinct, isolated Azure Kubernetes Service (AKS) clusters in separate European and North American regions, each with its own Azure Application Gateway for regional ingress, SSL termination, and WAF, all orchestrated by Azure Traffic Manager for global DNS-based routing to the appropriate regional gateway.

Question 24

A global financial services firm is designing a robust disaster recovery strategy for its mission-critical Azure Virtual Machines hosted in the East US region. The organization operates under stringent regulatory requirements, including those mandated by the Securities and Exchange Commission (SEC) and the Financial Industry Regulatory Authority (FINRA), which necessitate minimal data loss and rapid service restoration in the event of a regional outage. Specifically, the business has defined a Recovery Point Objective (RPO) of less than 15 minutes and a Recovery Time Objective (RTO) of less than 2 hours for these workloads. The firm intends to implement a multi-region disaster recovery solution, leveraging Azure\'s capabilities to ensure business continuity. Which of the following Azure Site Recovery configurations would best satisfy these stringent RPO and RTO requirements for the Azure Virtual Machines?

Accepted Answer

Implementing Azure Site Recovery with continuous replication enabled and a comprehensive recovery plan to orchestrate the failover process.

Question 25

A global enterprise has architected its Azure environment using a multi-region hub-spoke topology to satisfy stringent data residency regulations. They are implementing Azure Firewall Premium in the hub VNet to centralize security controls for all spoke VNets. A key requirement is to leverage the firewall\'s threat intelligence-based filtering to block traffic to known malicious IP addresses and domains. However, the organization has encountered a critical compliance challenge: the specific threat intelligence feeds they intend to utilize have their origins and processing centers located in regions that do not align with their mandated data residency policies. The Private DNS Zones used for internal resolution are correctly configured to be regional. Network Security Groups are in place to manage traffic flow at the subnet level. Given these constraints, what action is most critical to ensure adherence to the data residency regulations concerning the threat intelligence feature?

Accepted Answer

Disable the threat intelligence-based filtering feature within Azure Firewall Premium.

Question 26

A multinational financial services company, headquartered in Germany, is migrating its on-premises infrastructure to Microsoft Azure. A critical requirement is to ensure that all customer data, particularly personally identifiable information (PII) and transaction records, remains within the European Union\'s geographical boundaries due to stringent regulatory compliance and data sovereignty mandates like GDPR. The company anticipates a significant volume of unstructured data for analytics and document storage, as well as shared file access for internal departments. The proposed Azure architecture must balance cost-effectiveness with high availability and data protection. Which combination of Azure storage services, deployed exclusively in EU regions, best addresses these multifaceted requirements?

Accepted Answer

Azure Blob Storage and Azure Files, deployed in an EU-based Azure region.

Question 27

A multinational corporation, operating under strict data residency regulations akin to the General Data Protection Regulation (GDPR), is planning a significant expansion of its Azure footprint. The compliance team has mandated that all Azure resources processing personally identifiable information (PII) must reside exclusively within European Union geographical regions. The infrastructure design team is responsible for implementing this directive. They are considering an Azure Policy assignment to enforce this data residency requirement. Which approach would most effectively ensure that no resources processing PII are inadvertently deployed in non-EU regions across multiple subscriptions managed by the company?

Accepted Answer

Assign an Azure Policy definition that denies resource creation in non-EU regions at the management group level that contains all relevant subscriptions.

Question 28

Aether Dynamics, a global technology firm, is experiencing significant operational challenges in its Azure environment. The company\'s rapid expansion into new markets and the concurrent adoption of diverse cloud-native services have outpaced its existing governance and compliance frameworks. Specifically, the finance department has raised concerns regarding the lack of consistent application of cost allocation tags across all projects, a critical requirement for their internal financial auditing and adherence to specific R&D funding regulations. Simultaneously, the IT security team faces difficulties in ensuring that all new resource deployments, particularly those handling sensitive customer data, strictly adhere to data residency mandates for European operations, a key component of GDPR compliance. Given these issues, which Azure governance strategy would most effectively address both the financial reporting requirements and the data residency compliance mandates across Aether Dynamics\' distributed infrastructure?

Accepted Answer

Implement Azure Policy with custom and built-in policies to enforce mandatory tagging for cost allocation and restrict resource deployment locations to compliant regions.

Question 29

A financial services organization operating under strict German data protection regulations (e.g., GDPR) and facing increasing threats from sophisticated ransomware attacks needs to design a highly resilient disaster recovery solution in Azure. Their primary objective is to minimize data loss for critical customer transaction data and ensure rapid recovery of virtualized workloads with a Recovery Point Objective (RPO) of no more than 15 minutes. The organization also requires a strategy to protect against data corruption or deletion due to ransomware. Which Azure Site Recovery replication configuration and underlying storage choice best addresses these requirements for the core application servers and databases?

Accepted Answer

Replicate virtual machines to a secondary Azure region using Azure Premium SSD managed disks, complemented by Azure Backup with immutability policies for critical data stores.

Question 30

Globex Innovations, a global financial services firm, is undertaking a strategic initiative to modernize its infrastructure by adopting a hybrid cloud model. A significant portion of their sensitive financial transaction data must adhere to the stringent \"Global Financial Data Sovereignty Act (GFDSA),\" which mandates specific data residency and granular access controls. The company requires a solution that provides a dedicated, private connection between its on-premises data centers and its Azure virtual network to ensure compliance and high performance for its core financial applications. Additionally, a secure and reliable method is needed for its geographically dispersed workforce and external auditors to access specific Azure resources and, in some cases, on-premises systems. Which combination of Azure services best addresses these requirements for secure hybrid connectivity and compliant remote access?

Accepted Answer

Azure ExpressRoute for private connectivity and Azure VPN Gateway (Point-to-Site) with Azure AD integration for remote access.

AZ305 Designing Microsoft Azure Infrastructure Solutions Free Practice Test — 30 Questions

A lot more is already mapped out

About the AZ305 Designing Microsoft Azure Infrastructure Solutions Certification