Big October Special Limited Time 55% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 5763r953

Welcome To DumpsPedia

AZ-304 Sample Questions Answers

Questions 4

You plan to migrate App1 to Azure.

You need to recommend a storage solution for App1 that meets the security and compliance requirements.

Which type of storage should you recommend, and how should you recommend configuring the storage? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 5

You plan to migrate App1 to Azure. The solution must meet the authentication and authorization requirements.

Which type of endpoint should App1 use to obtain an access token?

Options:

A.

Azure Instance Metadata Service (IMDS)

B.

Azure AD

C.

Azure Service Management

D.

Microsoft identity platform

Buy Now
Questions 6

You need to configure an Azure policy to ensure that the Azure SQL databases have TDE enabled. The solution must meet the security and compliance requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Options:

Buy Now
Questions 7

You migrate App1 to Azure.

You need to ensure that the data storage for App1 meets the security and compliance requirement

What should you do?

Options:

A.

Create an access policy for the blob

B.

Modify the access level of the blob service.

C.

Implement Azure resource locks.

D.

Create Azure RBAC assignments.

Buy Now
Questions 8

You need to ensure that users managing the production environment are registered for Azure MFA and must authenticate by using Azure MFA when they sign in to the Azure portal. The solution must meet the authentication and authorization requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 9

What should you include in the identity management strategy to support the planned changes?

Options:

A.

Move all the domain controllers from corp.fabrikam.com to virtual networks in Azure.

B.

Deploy domain controllers for corp.fabrikam.com to virtual networks in Azure.

C.

Deploy a new Azure AD tenant for the authentication of new R&D projects.

D.

Deploy domain controllers for the rd.fabrikam.com forest to virtual networks in Azure.

Buy Now
Questions 10

You need to recommend a strategy for the web tier of WebApp1. The solution must minimize What should you recommend?

Options:

A.

Create a runbook that resizes virtual machines automatically to a smaller size outside of business hours.

B.

Configure the Scale Up settings for a web app.

C.

Deploy a virtual machine scale set that scales out on a 75 percent CPU threshold.

D.

Configure the Scale Out settings for a web app.

Buy Now
Questions 11

You need to design a solution for securing access to the historical transaction data.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 12

N NO: 3 HOTSPOT

You need to recommend a solution for the data store of the historical transaction query system.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 13

You need to recommend a backup solution for the data store of the payment processing system.

What should you include in the recommendation?

Options:

A.

Microsoft System Center Data Protection Manager (DPM)

B.

Azure Backup Server

C.

Azure SQL long-term backup retention

D.

Azure Managed Disks

Buy Now
Questions 14

You need to recommend a high-availability solution for the middle tier of the payment processing system. What should you include in the recommendation?

Options:

A.

availability zones

B.

an availability set

C.

the Premium App Service plan

D.

the Isolated App Server plan

Buy Now
Questions 15

You need to recommend a compute solution for the middle tier of the payment processing system.

What should you include in the recommendation?

Options:

A.

Azure Kubernetes Service (AKS)

B.

virtual machine scale sets

C.

availability sets

D.

App Service Environments (ASEs)

Buy Now
Questions 16

You need to recommend a solution for data of the historical transaction query system.

What should you include in the recommendation? To answer, Select the appropriate or options in the answer area.

NOTE: Each correct selection is worth one point

Options:

Buy Now
Questions 17

You need to recommend a solution for the users at Contoso to authenticate to the cloud-based services and the Azure AD-integrated applications.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 18

You need to recommend a solution for configuring the Azure Multi-Factor Authentication (MFA) settings.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Questions 19

You need to recommend a disaster recovery solution for the back-end tier of the payment processing system.

What should you include in the recommendation?

Options:

A.

Always On Failover Cluster Instances

B.

active geo-replication

C.

Azure Site Recovery

D.

an auto-failover group

Buy Now
Questions 20

You need to recommend a solution for protecting the content of the back-end tier of the payment processing system.

What should you include in the recommendations?

Options:

A.

Always Encrypted with deterministic encryption

B.

Transparent Date Encryption (TDE)

C.

Azure Storage Service Encryption

D.

Always Encrypted with randomized encryption

Buy Now
Questions 21

You manage an on-premises network and Azure virtual networks.

You need to create a secure connection over a private network between the on-premises network and the Azure virtual networks. The connection must offer a redundant pair of cross connections to provide high availability.

What should you recommend?

Options:

A.

Azure Load Balancer

B.

virtual network peering

C.

VPN Gateway

D.

ExpressRoute

Buy Now
Questions 22

You have 200 resource groups across 20 Azure subscriptions.

Your company's security policy states that the security administrator must verify all assignments of the Owner role for the subscriptions and resource groups once a month. All assignments that are not approved by the security administrator must be removed automatically. The security administrator must be prompted every month to perform the verification.

What should you use to implement the security policy?

Options:

A.

Access reviews in Identity Governance

B.

role assignments in Azure Active Directory (Azure AD) Privileged identity Management (PIM)

C.

Identity Secure Score in Azure Security Center

D.

the user risk policy W» Azure Active Directory (Azure AD) Identity Protection

Buy Now
Questions 23

You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group'. Group i is configured Tor assigned membership. Group I has 50 members. including 20 guest users.

You need To recommend a solution for evaluating the member ship of Group1. The solution must meet the following requirements:

• The evaluation must be repeated automatically every three months

• Every member must be able to report whether they need to be in Group1

• Users who report that they do not need to be in Group 1 must be removed from Group1 automatically

• Users who do not report whether they need to be m Group1 must be removed from Group1 automatically.

What should you include in me recommendation?

Options:

A.

implement Azure AU Identity Protection.

B.

Change the Membership type of Group1 to Dynamic User.

C.

Implement Azure AD Privileged Identity Management.

D.

Create an access review.

Buy Now
Questions 24

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are designing an Azure solution for a company that has four departments. Each department will deploy several Azure app services and Azure SQL databases.

You need to recommend a solution to report the costs for each department to deploy the app services and the databases. The solution must provide a consolidated view for cost reporting that displays cost broken down by department.

Solution: Place all resources in the same resource group. Assign tags to each resource.

Does the solution meet the goal?

Options:

A.

Yes

B.

No

Buy Now
Questions 25

You have an on-premises Active Directory forest and an Azure Active Directory (Azure AD) tenant. All Azure AD users are assigned an Azure AD Premium P1 license.

You deploy Azure AD Connect.

Which two features are available in this environment that can reduce operational overhead for your company's help desk? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options:

A.

self-service password reset

B.

Azure AD Privileged Identity Management policies

C.

access reviews

D.

Microsoft Cloud App Security Conditional Access App Control.

E.

password writeback

Buy Now
Questions 26

Your company has users who work remotely from laptops.

You plan to move some of the applications accessed by the remote users to Azure virtual machines. The users will access the applications in Azure by using a point-to-site VPN connection. You will use certificates generated from an on-premises-based certification authority (CA).

You need to recommend which certificates are required for the deployment.

What should you include in the recommendation? To answer, drag the appropriate certificates to the correct targets. Each certificate may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 27

You are designing a cost-optimized solution that uses Azure Batch to run two types of jobs on Linux nodes. The first job type will consist of short-running tasks for a development environment. The second jot type will consist of long-running Message Passing Interface (MPI) applications for a production environment that requires timely job completion.

You need to recommend the pool type and node type for each job type. The solution must minimize compute charges and leverage Azure Hybrid Benefit whenever possible.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Questions 28

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You plan to deploy multiple instances of an Azure web app across several Azure regions.

You need to design an access solution for the app. The solution must meet the following replication requirements:

  • Support rate limiting.
  • Balance requests between all instances.
  • Ensure that users can access the app in the event of a regional outage.

Solution: You use Azure Application Gateway to provide access to the app.

Does this meet the goal?

Options:

A.

Yes

B.

No

Buy Now
Questions 29

You have an Azure subscription.

You need to deploy an Azure Kubernetes Service (AKS) solution that will use Windows Server 2019 nodes.

The solution must meet the following requirements:

Minimize the time it takes to provision compute resources during scale-out operations.

Support autoscaling of Windows Server containers.

Which scaling option should you recommend?

Options:

A.

cluster autoscaler

B.

horizontal pod autoscaler

C.

Kubernetes version 1.20.2 or newer

D.

Virtual nodes with Virtual Kubelet ACI

Buy Now
Questions 30

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Storage account that contains two 1-GB data files named File1 and File2. The data files are set to use the archive access tier.

You need to ensure that File1 is accessible immediately when a retrieval request is initiated.

Solution: You add a new file share to the storage account.

Does this meet the goal?

Options:

A.

Yes

B.

No

Buy Now
Exam Code: AZ-304
Exam Name: Microsoft Azure Architect Design
Last Update: Oct 19, 2021
Questions: 270
$76.5  $169.99
$56.25  $124.99
$51.75  $114.99
buy now AZ-304