Free Microsoft Azure Architect Design Exam AZ-304 Exam Practice Test

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You plan to deploy multiple instances of an Azure web app across several Azure regions.You need to design an access solution for the app. The solution must meet the following replication requirements:Support rate limiting.Balance requests between all instances.Ensure that users can access the app in the event of a regional outage.Solution: You use Azure Front Door to provide access to the app.Does this meet the goal?

• Yes
  
• No
  

You have multiple Anne deployments.You plan to implement Azure Blueprints.Which artifact types can be added to a blueprint?

• Policy assignment Resource group, Role assignment virtual machines, and virtual networks only
  
• Subscriptions. tenants. Resource group, and Key vault only
  
• Subscriptions. tenants. Resource group, and Azure Active Directory only
  
• Azure Resource Manager template (Subscription). Policy assignment Resource group, and Role assignment only
  

You are designing an Azure solution.The network traffic for the solution must be securely distributed by providing the following features:HTTPS protocolRound robin routingSSL offloadingYou need to recommend a load balancing option.What should you recommend?

• Azure Load Balancer
  
• Azure Traffic Manager
  
• Azure Internal Load Balancer (ILB)
  
• Azure Application Gateway
  

You have an Azure Storage v2 account named storage1.You plan to archive data to storage1.You need to ensure that the archived data cannot be deleted for five years. The solution must prevent administrators from deleting the data.What should you do?

• You create an Azure Blob storage container, and you configure a legal hold access policy.
  
• You create a file share and snapshots.
  
• You create a file share, and you configure an access policy.
  
• You create an Azure Blob storage container, and you configure a time-based retention policy and lock the policy.
  

You have an Azure Active Directory (Azure AD) tenant named Contoso.com. The tenant contains a group named Group1. Group1 contains all the administrator user accounts.You discover several login attempts to the Azure portal from countries administrator users do NOT work.You need to ensure that all login attempts to the portal from those countries require Azure Multi-Factor Authentication (MFA).Solution: Implement Azure AD identity Protection for Group1.Does this meet the goal?

• Yes
  
• No
  

You plan to deploy an API by using Azure API ManagementYou need to recommend a solution to protect the API from a distributed denial of service (DDoS) attack.What should you recommend?

• Create network security groups (NSGs).
  
• Enable quotas.
  
• Strip the Powered-By response header.
  
• Enable rate limiting.
  

You have an Azure subscription that contains resources in three Azure regions.You need to implement Azure Key Vault to meet the following requirements:D18912E1457D5D1DDCBD40AB3BF70D5DIn the event of a regional outage, all keys must be readable.All the resources in the subscription must be able to access Key Vault.The number of Key Vault resources to be deployed and managed must be minimized.How many instances of Key Vault should you implement?

• 1
  
• 2
  
• 3
  
• 6
  

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company has an on-premises Active Directory Domain Services (AD DS) domain and an established Azure Active Directory (Azure AD) environment.Your company would like users to be automatically signed in to cloud apps when they are on their corporate desktops that are connected to the corporate network.You need to enable single sign-on (SSO) for company users.Solution: Install and configure an on-premises Active Directory Federation Services (AD FS) server with a trust established between the AD FS server and Azure AD.Does the solution meet the goal?

• Yes
  
• No
  

You ate designing an Azure governance solution.All Azure resources must be easily identifiable based on the following operational information environment, owner, department and cost centerYou need 10 ensure that you can use the operational information when you generate reports for the Azure resources.What should you include in the solution?

• Azure Active Directory (Azure AD) administrative units
  
• an Azure data catalog that uses the Azure REST API as a data source
  
• an Azure policy that enforces tagging rules
  
• an Azure management group that uses parent groups to create a hierarchy
  

You need to recommend a notification solution for the IT Support distribution group.What should you include in the recommendation?

• Azure Network Watcher
  
• an action group
  
• a SendGrid account with advanced reporting
  
• Azure AD Connect Health