[Jan 11, 2022] AZ-304 Test Engine files, AZ-304 Dumps PDF
Latest Microsoft AZ-304 PDF and Dumps (2022) Free Exam Questions Answers
NEW QUESTION 146
You have an Azure subscription that contains the resources shown in the following table.
You create an Azure SQL database named DB1 that is hosted in the East US region.
To DB1, you add a diagnostic setting named Settings1. Settings1 archives SQLInsights to storage1 and sends SQLInsights to Workspace1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selections is worth one point.
Answer:
Explanation:
For more information on Azure SQL diagnostics , you can visit the below link https://docs.microsoft.com/en-us/azure/azure-sql/database/metrics-diagnostic-telemetry-logging-streaming-export-configure
NEW QUESTION 147
You need to design a solution for securing access to the historical transaction data.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 148
You need to recommend a solution to deploy containers that run an application. The application has two tiers.
Each tier is implemented as a separate Docker Linux-based image. The solution must meet the following requirements:
* The front-end tier must be accessible by using a public IP address on port 80.
* The backend tier must be accessible by using port 8080 from the front-end tier only.
* Both containers must be able to access the same Azure file share.
* If a container fails, the application must restart automatically.
* Costs must be minimized.
What should you recommend using to host the application?
- A. Azure Kubernetes Service (AKS)
- B. Azure Container instances
- C. Azure Service Fabric
Answer: B
Explanation:
Explanation
Azure Container Instances enables a layered approach to orchestration, providing all of the scheduling and management capabilities required to run a single container, while allowing orchestrator platforms to manage multi-container tasks on top of it.
Because the underlying infrastructure for container instances is managed by Azure, an orchestrator platform does not need to concern itself with finding an appropriate host machine on which to run a single container.
Azure Container Instances can schedule both Windows and Linux containers with the same API.
Orchestration of container instances exclusively
Because they start quickly and bill by the second, an environment based exclusively on Azure Container Instances offers the fastest way to get started and to deal with highly variable workloads.
Reference:
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-overview
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-orchestrator-relationship
NEW QUESTION 149
Your company identifies the following business continuity and disaster recovery objectives for virtual machines that host sales, finance, and reporting application in the company's on-premises data center.
* The finance application requires that data be retained for seven years. In the event of a disaster, the application must be able to run from Azure. The recovery in objective (RTO) is 10 minutes,
* The reporting application must be able to recover point in-time data al a daily granularity. The RTO is eight hours.
* The sales application must be able to fail over to second on-premises data center.
You need to recommend which Azure services meet the business community and disaster recovery objectives. The solution must minimize costs.
What should you recommend for each application? To answer, drag the appropriate services to the correct application. Each service may be used owe. More than once not at an You may need to drag the spin bar between panes or scroll 10 view content.
Answer:
Explanation:
NEW QUESTION 150
You configure the Diagnostics settings for an Azure SQL database as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 151
Your on-premises network contains a server named Server1 that runs an ASP.NET application named App1.
You have a hybrid deployment of Azure Active Directory (Azure AD).
You need to recommend a solution to ensure that users sign in by using their Azure AD account and Azure Multi-Factor Authentication (MFA) when they connect to App1 from the internet.
Which three Azure services should you recommend be deployed and configured in sequence? To answer, move the appropriate services from the list of services to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION 152
You plan to create a storage account and to save the files as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers#archive-access-tier-preview
NEW QUESTION 153
You need to design an architecture to capture the creation of users and the assignment of roles. The captured data must be stored in Azure Cosmos DB.
Which Azure services should you include in the design? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 154
You have an Azure Active Directory (Azure AD) tenant named Contoso.com. The tenant contains a group named Group1. Group1 contains all the administrator user accounts.
You discover several login attempts to the Azure portal from countries administrator users do NOT work.
You need to ensure that all login attempts to the portal from those countries require Azure Multi-Factor Authentication (MFA).
Solution: Implement Azure AD identity Protection for Group1.
Does this meet the goal?
- A. Yes
- B. No
Answer: A
Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-policies
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-conditio
NEW QUESTION 155
You configure the Diagnostics settings for an Azure SQL database as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 156
You need to recommend a solution to meet the database retention requirement. What should you recommend?
- A. Configure geo replication of the database.
- B. Configure Azure Site Recovery.
- C. Configure a long-term retention policy for the database.
- D. Use automatic Azure SQL Database backups.
Answer: C
NEW QUESTION 157
You have an Azure subscription named Subscription1 that is linked to a hybrid Azure Active Directory (Azure AD) tenant.
You have an on-premises datacenter that does NOT have a VPN connection to Subscription1. The datacenter contains a computer named Server1 that has Microsoft SQL Server 2016 installed. Server1 is prevented from accessing the internet An Azure logic app named LogicApp1 requires write access to a database on Server1.
You need to recommend a solution to provide LogicApp1 with the ability to access Server1.
What should you recommend deploying on-premises and in Azure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 158
You plan to migrate App1 to Azure.
You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 data. The solution must meet the security and compliance requirements.
What should you include in the recommendation?
- A. Microsoft peering for an ExpressRoute circuit
- B. a service endpoint that has a service endpoint policy
- C. Azure public peering for an ExpressRoute circuit
- D. a private endpoint
Answer: A
Explanation:
Explanation
By default, Azure service resources secured to virtual networks aren't reachable from on-premises networks. If you want to allow traffic from on-premises, you must also allow public (typically, NAT) IP addresses from your on-premises or ExpressRoute. You can add these IP addresses through the IP firewall configuration for Azure service resources.
You can use ExpressRoute for public peering and Microsoft peering.
Scenario:
* On-premises users and services must be able to access the Azure Storage account that will host the data in App1.
* Access to the public endpoint of the Azure Storage account that will host the App1 data must be prevented.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-circuit-peerings
NEW QUESTION 159
You design a solution for the web tier of WebApp1 as shown in the exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Answer:
Explanation:
Explanation:
Box 1: Yes
Any new deployments to Azure must be redundant in case an Azure region fails.
Traffic Manager uses DNS to direct client requests to the most appropriate service endpoint based on a traffic-routing method and the health of the endpoints. An endpoint is any Internet-facing service hosted inside or outside of Azure. Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to failure, including the failure of an entire Azure region.
Box 2: Yes
Recent changes in Azure brought some significant changes in autoscaling options for Azure Web Apps (i.e. Azure App Service to be precise as scaling happens on App Service plan level and has effect on all Web Apps running in that App Service plan).
Box 3: No
Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to failure, including the failure of an entire Azure region.
Reference:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview
https://blogs.msdn.microsoft.com/hsirtl/2017/07/03/autoscaling-azure-web-apps/
NEW QUESTION 160
You are designing an order processing system in Azure that will contain the Azure resources shown in the following table.
The order processing system will have the following transaction flow:
* A customer will place an order by using App1.
* When the order is received, App1 will generate a message to check for product availability at vendor 1 and vendor 2.
* An integration component will process the message, and then trigger either Function1 or Function2 depending on the type of order.
* Once a vendor confirms the product availability, a status message for App1 will be generated by Function1 or Function2.
* All the steps of the transaction will be logged to storage1.
Which type of resource should you recommend for the integration component?
- A. an Azure Data Factory pipeline
- B. an Azure Service Bus queue
- C. an Azure Event Hubs capture
- D. an Azure Event Grid domain
Answer: A
Explanation:
A data factory can have one or more pipelines. A pipeline is a logical grouping of activities that together perform a task.
The activities in a pipeline define actions to perform on your data.
Data Factory has three groupings of activities: data movement activities, data transformation activities, and control activities.
Azure Functions is now integrated with Azure Data Factory, allowing you to run an Azure function as a step in your data factory pipelines.
Reference:
https://docs.microsoft.com/en-us/azure/data-factory/concepts-pipelines-activities
NEW QUESTION 161
You need to recommend a disaster recovery solution for the back-end tier of the payment processing system.
What should you include in the recommendation?
- A. an auto-failover group
- B. Always On Failover Cluster Instances
- C. Azure Site Recovery
- D. active geo-replication
Answer: A
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-auto-failover-group Scenario:
* The back-end data store is implemented as a Microsoft SQL Server 2014 database.
* If a data center fails, ensure that the payment processing system remains available without any administrative intervention.
Note: Auto-failover groups is a SQL Database feature that allows you to manage replication and failover of a group of databases on a SQL Database server or all databases in a managed instance to another region. It is a declarative abstraction on top of the existing active geo-replication feature, designed to simplify deployment and management of geo-replicated databases at scale.
Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-auto-failover-group
NEW QUESTION 162
You have an existing implementation of Microsoft SQL Server Integration Services (SSIS) packages stored in an SSISDB catalog on your on-premises network. The on-premises network does not have hybrid connectivity to Azure by using Site-to-Site VPN or ExpressRoute.
You want to migrate the packages to Azure Data Factory.
You need to recommend a solution that facilitates the migration while minimizing changes to the existing packages. The solution must minimize costs.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/data-factory/create-azure-integration-runtime
https://docs.microsoft.com/en-us/sql/integration-services/lift-shift/ssis-azure-connect-to-catalog-database
NEW QUESTION 163
......
Topics of AZ-304: Microsoft Azure Architect Design Exam
Candidates should apprehend the examination topics before they begin of preparation. because it’ll extremely facilitate them in touch the core. Our AZ-304 dumps will include the following topics:
1. Design Monitoring (10-15%)
Design for cost optimization
- Recommend solutions to minimize costs
- Recommend a solution for cost management and cost reporting
Design a solution for logging and monitoring
- Plan for integration with monitoring tools including Azure Monitor and Azure Sentinel
- Determine levels and storage locations for logs
- Recommend a logging solution for compliance requirements
- Recommend appropriate monitoring tool(s) for a solution
- Choose a mechanism for event routing and escalation
2. Design Identity and Security (25-30%)
Design authentication
- Recommend a solution for authentication
- Recommend a solution for a hybrid identity including Azure AD Connect and Azure AD
- Recommend a solution for Conditional Access, including multi-factor authentication
- Recommend a solution for single-sign on
- Recommend a solution for network access authentication
Connect Health
- Recommend and implement a solution for B2B integration
- Recommend a solution for user self-service
Design authorization
- Recommend a hierarchical structure that includes management groups, subscriptions and resource groups
- Recommend an access management solution including RBAC policies, access reviews, role assignments, physical access, Privileged Identity Management (PIM), Azure AD Identity Protection, Just In Time (JIT) access
- Choose an authorization approach
Design governance
- Recommend a strategy for tagging
- Recommend a solution for using Azure Blueprint
- Recommend a solution for using Azure Policy
Design security for applications
- Recommend a solution that includes Azure AD Managed Identities
- Recommend a solution that includes KeyVault
- Recommend a solution for integrating applications into Azure AD
3. Design Data Storage (15-20%)
Design a solution for databases
- Recommend a solution for encrypting data at rest, data in transmission, and data in use
- Select an appropriate data platform based on requirements
- Recommend a solution for database scalability
- Recommend database service tier sizing
Design data integration
- Recommend a solution for data integration, including Azure Data Factory, Azure Data Bricks, Azure Data Lake, Azure Synapse Analytics
- Recommend a data flow to meet business requirements
Select an appropriate storage account
- Recommend storage management tools
- Recommend a storage access solution
- Choose between storage tiers
4. Design Business Continuity (10-15%)
Design a solution for backup and recovery
- Design and Azure Site Recovery solution
- Recommend a recovery solution for Azure hybrid and on-premises workloads that meets recovery objectives (RTO, RLO, RPO)
- Design a solution for data archiving and retention
- Recommend a solution for recovery in different regions
- Recommend a solution for Azure Backup management
Design for high availability
- Identify resources that require high availability
- Identify storage types for high availability
- Recommend a solution for autoscaling
- Recommend a solution for geo-redundancy of workloads
- Recommend a solution for application and workload redundancy, including compute, database, and storage
5. Design Infrastructure (25-30%)
Design a compute solution
- Recommend a solution for automating compute management
- Determine appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, and containers
- Recommend a solution for containers (AKS versus ACI and the configuration of each one)
- Recommend a solution for compute provisioning
Design a network solution
- Recommend a solution for network provisioning
- Recommend a solution for network addressing and name resolution
- Recommend a solution for network security- Private endpoints, firewalls, gateways.
Design an application architecture
- Recommend an orchestration solution for deployment of applications including ARM templates, Logic Apps, or Azure Functions
- Recommend a microservices architecture including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks
- Recommend a solution for API integration
Design migrations
- Recommend a solution for migrating applications and VMs
- Assess and interpret on-premises servers, data, and applications for migration
- Recommend a solution for migration of databases
Pass Your Azure Solutions Architect Expert AZ-304 Exam on Jan 11, 2022 with 273 Questions: https://www.pass4leader.com/Microsoft/AZ-304-exam.html
AZ-304 Free Exam Study Guide! (Updated 273 Questions): https://drive.google.com/open?id=1MxIPASfTJL-CPvQ_TtxnfNEvB6ZbKBMb