Easily To Pass New Microsoft AZ-304 Dumps with 288 Questions [Q138-Q160]

Rate this post

Easily To Pass New Microsoft AZ-304 Dumps with 288 Questions

Latest AZ-304 Study Guides 2024 – With Test Engine PDF

Microsoft AZ-304 certification exam is a valuable credential for IT professionals who want to validate their skills and knowledge in designing and implementing solutions on Microsoft Azure. Microsoft Azure Architect Design certification exam is part of the Azure Solutions Architect Expert certification path and covers various topics related to designing and implementing Azure solutions. Passing AZ-304 exam demonstrates that candidates have the skills and knowledge required to design and implement solutions that meet the business requirements of organizations.

Topics of AZ-304: Microsoft Azure Architect Design Exam

Candidates should apprehend the examination topics before they begin of preparation.
because it’ll extremely facilitate them in touch the core. Our AZ-304 exam dumps will include the following topics:

1. Design Monitoring (10-15%)

Design for cost optimization

  • Recommend a solution for cost management and cost reporting
  • Recommend solutions to minimize costs

Design a solution for logging and monitoring

  • Determine levels and storage locations for logs
  • Recommend appropriate monitoring tool(s) for a solution
  • Recommend a logging solution for compliance requirements
  • Plan for integration with monitoring tools including Azure Monitor and Azure Sentinel
  • Choose a mechanism for event routing and escalation

2. Design Identity and Security (25-30%)

Design authentication

  • Recommend a solution for a hybrid identity including Azure AD Connect and Azure AD
  • Recommend a solution for network access authentication
  • Recommend a solution for single-sign on
  • Recommend a solution for authentication
  • Recommend a solution for Conditional Access, including multi-factor authentication

Connect Health

  • Recommend a solution for user self-service
  • Recommend and implement a solution for B2B integration

Design authorization

  • Choose an authorization approach
  • Recommend an access management solution including RBAC policies, access reviews, role assignments, physical access, Privileged Identity Management (PIM), Azure AD Identity Protection, Just In Time (JIT) access
  • Recommend a hierarchical structure that includes management groups, subscriptions and resource groups

Design governance

  • Recommend a solution for using Azure Policy
  • Recommend a solution for using Azure Blueprint
  • Recommend a strategy for tagging

Design security for applications

  • Recommend a solution for integrating applications into Azure AD
  • Recommend a solution that includes Azure AD Managed Identities
  • Recommend a solution that includes KeyVault

3. Design Data Storage (15-20%)

Design a solution for databases

  • Recommend database service tier sizing
  • Recommend a solution for database scalability
  • Recommend a solution for encrypting data at rest, data in transmission, and data in use
  • Select an appropriate data platform based on requirements

Design data integration

  • Recommend a solution for data integration, including Azure Data Factory, Azure Data Bricks, Azure Data Lake, Azure Synapse Analytics
  • Recommend a data flow to meet business requirements

Select an appropriate storage account

  • Recommend a storage access solution
  • Recommend storage management tools
  • Choose between storage tiers

4. Design Business Continuity (10-15%)

Design a solution for backup and recovery

  • Recommend a solution for Azure Backup management
  • Recommend a solution for recovery in different regions
  • Design and Azure Site Recovery solution
  • Recommend a recovery solution for Azure hybrid and on-premises workloads that meets recovery objectives (RTO, RLO, RPO)
  • Design a solution for data archiving and retention

Design for high availability

  • Recommend a solution for autoscaling
  • Recommend a solution for geo-redundancy of workloads
  • Recommend a solution for application and workload redundancy, including compute, database, and storage
  • Identify storage types for high availability
  • Identify resources that require high availability

5. Design Infrastructure (25-30%)

Design a compute solution

  • Recommend a solution for compute provisioning
  • Recommend a solution for containers (AKS versus ACI and the configuration of each one)
  • Determine appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, and containers
  • Recommend a solution for automating compute management

Design a network solution

  • Recommend a solution for network addressing and name resolution
  • Recommend a solution for automating network management
  • Recommend a solution for network provisioning

Design an application architecture

  • Recommend a solution for API integration
  • Recommend a microservices architecture including Event Grid, Event Hubs, Service Bus, Storage Queues, Logic Apps, Azure Functions, and webhooks
  • Recommend an orchestration solution for deployment of applications including ARM templates, Logic Apps, or Azure Functions

Design migrations

  • Recommend a solution for migrating applications and VMs
  • Assess and interpret on-premises servers, data, and applications for migration
  • Recommend a solution for migration of databases

To become a certified Azure Solutions Architect Expert, candidates must pass both the AZ-303 (Microsoft Azure Architect Technologies) and AZ-304 exams. The AZ-304 exam is intended for candidates who have already passed the AZ-303 exam or have equivalent knowledge and experience in Azure technologies. AZ-304 exam consists of multiple-choice questions and is delivered in a proctored environment.

 

QUESTION 138
You have five .NET Core applications that run on 10 Azure virtual machines in the same subscription.
You need to recommend a solution to ensure that the applications can authenticate by using the same Azure Active Directory (Azure AD) identity. The solution must meet the following requirements:
Ensure that the applications can authenticate only when running on the 10 virtual machines.
Minimize administrative effort.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 139
You have an Azure subscription that contains a Windows Virtual Desktop tenant.
You need to recommend a solution to meet the following requirements:
* Start and stop Windows Virtual Desktop session hosts based on business hours.
* Scale out Windows Virtual Desktop session hosts when required.
* Minimize compute costs.
What should you include in the recommendation?

 
 
 
 

QUESTION 140
You need to recommend a solution to deploy containers that run an application. The application has two tiers. Each tier is implemented as a separate Docker Linux-based image. The solution must meet the following requirements:
* The front-end tier must be accessible by using a public IP address on port 80.
* The backend tier must be accessible by using port 8080 from the front-end tier only.
* Both containers must be able to access the same Azure file share.
* If a container fails, the application must restart automatically.
* Costs must be minimized.
What should you recommend using to host the application?

 
 
 

QUESTION 141
You have an Azure subscription that contains the resources shown in the following table.

You create an Azure SQL database named DB1 that is hosted in the East US region.
To DB1, you add a diagnostic setting named Settings1. Settings1 archives SQLInsights to storage1 and sends SQLInsights to Workspace1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selections is worth one point.

QUESTION 142
You are designing an order processing system in Azure that will contain the Azure resources shown in the following table.

The order processing system will have the following transaction flow:
* A customer will place an order by using App1.
* When the order is received, App1 will generate a message to check for product availability at vendor 1 and vendor 2.
* An integration component will process the message, and then trigger either Function1 or Function2 depending on the type of order.
* Once a vendor confirms the product availability, a status message for App1 will be generated by Function1 or Function2.
* All the steps of the transaction will be logged to storage1.
Which type of resource should you recommend for the integration component?
D18912E1457D5D1DDCBD40AB3BF70D5D
Which type of resource should you recommend for the integration component?

 
 
 
 

QUESTION 143
You need to design a solution for securing access to the historical transaction data.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 144
You plan to archive 10 TB of on-premises data files to Azure.
You need to recommend a data archival solution. The solution must minimize the cost of storing the data files.
Which Azure Storage account type should you include in the recommendation?

 
 
 
 

QUESTION 145
You have an Azure subscription named Subscription1 that is linked to a hybrid Azure Active Directory (Azure AD) tenant.
You have an on-premises datacenter that does NOT have a VPN connection to Subscription1. The datacenter contains a computer named Server1 that has Microsoft SQL Server 2016 installed. Server1 is prevented from accessing the internet An Azure logic app named LogicApp1 requires write access to a database on Server1.
You need to recommend a solution to provide LogicApp1 with the ability to access Server1.
What should you recommend deploying on-premises and in Azure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 146
You have an on-premises Hyper-V cluster that hosts 20 virtual machines. Some virtual machines run Windows Sever 2016 and some run Linux.
You plan to mitigate the virtual machines to an Azure subscription.
You need to recommend a solution to replicate the disks of the virtual machines to Azure. The solution must ensure that the virtual machines remain available during the migration of the disks.
Solution: You recommend implement an Azure Storage account, and then using Azure Migrate.

 
 

QUESTION 147
You are designing a storage solution that will use Azure Blob storage. The data will be stored in a cool access tier or an archive access tier based on the access patterns of the data.
You identify the following types of infrequently accessed data:
Telemetry data: Deleted after two years
D18912E1457D5D1DDCBD40AB3BF70D5D
* Promotional material: Deleted after 14 days
* Virtual machine audit data: Deleted after 200 days
* A colleague recommends using the archive access tier to store the data.
Which statement accurately describes the recommendation?

 
 
 
 

QUESTION 148
You plan to deploy a network-intensive application to several Azure virtual machines.
You need to recommend a solution that meets the following requirements:
Minimizes the use of the virtual machine processors to transfer data
Minimizes network latency
Which virtual machine size and feature should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 149
Your on-premises network contains a file server named Server1 that stores 500 GB of data.
You need to use Azure Data Factory to copy the data from Server1 to Azure Storage.
You add a new data factory.
What should you do next? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 150
You plan to create an Azure environment that will have a root management group and five child management groups. Each child management group will contain five Azure subscriptions. You plan to have between 10 and 30 resource groups in each subscription.
You need to design a solution for the planned environment. The solution must meet the following requirements:
Prevent users who are assigned the Owner role for the subscriptions from deleting the resource groups from their respective subscription.
Ensure that you can update RBAC role assignments across all the subscriptions and resource groups.
Minimize administrative effort.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 151
You need to design an Azure policy that will implement the following functionality:
* For new resources, assign tags and values that match the tags and values of the resource group to which the resources are deployed.
* For existing resources, identify whether the tags and values match the tags and values of the resource group that contains the resources.
* For any non-compliant resources, trigger auto-generated remediation tasks to create missing tags and values.
The solution must use the principle of least privilege.
What should you include in the design? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 152
You have a virtual machine scale set named SS1.
You configure autoscaling as shown in the following exhibit.

You configure the scale out and scale in rules to have a duration of 10 minutes and a cool down time of 10 minutes.
Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

QUESTION 153
You are reviewing an Azure architecture as shown in the Architecture exhibit (Click the Architecture tab.)

The estimated monthly costs for the architecture are shown in the Costs exhibit. (Click the Costs tab.)

The log files are generated by user activity to Apache web servers. The log files are in a consistent format.
Approximately 1 GB of logs are generated per day. Microsoft Power Bl is used to display weekly reports of the user activity.
You need to recommend a solution to minimize costs while maintaining the functionality of the architecture.
What should you recommend?

 
 
 
 

QUESTION 154
You manage a network that includes an on-premises Active Directory Domain Services domain and an Azure Active Directory (Azure AD).
Employees are requires to use different accounts when using on-premises or cloud resources. You must recommend a solution that lets employees sign in to all company resources by using a single account. The solution must implement an identity provider.
You need provide guidance on the different identity providers.
How should you describe each identity provider? To answer, select the appropriate description from each list in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 155
You are designing a solution for a stateless front-end application named Application1. Application1 will be hosted on two Azure virtual machines named VM1 and VM2.
You plan to load balance connections to VM1 and VM2 from the Internet by using one Azure load balancer.
You need to recommend the minimum number of required public IP addresses.
How many public IP addresses should you recommend using for each resource? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 156
DRAG DROP
A company has an existing web application that runs on virtual machines (VMs) in Azure.
You need to ensure that the application is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruption to the code for the existing web application.
What should you recommend? To answer, drag the appropriate values to the correct items. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

QUESTION 157
You have 200 resource groups across 20 Azure subscriptions.
Your company’s security policy states that the security administrator must verify all assignments of the Owner role for the subscriptions and resource groups once a month. All assignments that are not approved by the security administrator must be removed automatically. The security administrator must be prompted every month to perform the verification.
What should you use to implement the security policy?

 
 
 
 

QUESTION 158
What should you include in the identity management strategy to support the planned changes?

 
 
 
 

QUESTION 159
You manage a network that includes an on-premises Active Directory Domain Services domain and an Azure Active Directory (Azure AD).
Employees are requires to use different accounts when using on-premises or cloud resources. You must recommend a solution that lets employees sign in to all company resources by using a single account. The solution must implement an identity provider.
You need provide guidance on the different identity providers.
How should you describe each identity provider? To answer, select the appropriate description from each list in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 160
You have the resources shown in the following table.

CDB1 hosts a container that stores continuously updated operational data You are designing a solution that will use AS1 to analyze the operational data dairy.
You need to recommend a solution to analyze the data without affecting the performance of the operational data store.
What should you include in the recommendation?

 
 
 

AZ-304 Dumps and Exam Test Engine: https://www.test4engine.com/AZ-304_exam-latest-braindumps.html

         

Related Links: www.stes.tyc.edu.tw www.stes.tyc.edu.tw www.stes.tyc.edu.tw www.stes.tyc.edu.tw www.stes.tyc.edu.tw www.stes.tyc.edu.tw

Leave a Reply

Your email address will not be published. Required fields are marked *

Enter the text from the image below