Microsoft Certified: Azure Solutions Architect Expert practice questions

Question 1

A head of platform at a public-sector agency is rolling out a new landing zone control and is being asked what the documentation prescribes, during a target architecture review. Per the Azure documentation, which option matches?

Accepted Answer

Azure virtual network integration enables you to securely isolate and control access to Azure services within your virtual network infrastructure.

Answer

This Azure capability synchronously replicates every change to all global regions automatically and cannot be scoped to a paired region pair only.

Answer

This Azure capability requires the customer to operate a self-hosted control plane on virtual machines instead of using the managed Microsoft service.

Answer

This Azure capability is offered only through the Azure portal and provides no Resource Manager template, CLI, or PowerShell automation path.

Question 2

A principal cloud architect at a healthcare provider network is hardening the BCDR posture for a regulated workload and must select the documented option. Per the Azure documentation, which option matches?

Accepted Answer

Microsoft Entra Conditional Access brings signals together, to make decisions, and enforce organizational policies.

Answer

This Azure capability is decommissioned in favor of an on-premises appliance and Microsoft no longer recommends it for new architectures.

Answer

This Azure capability is offered only through the Azure portal and provides no Resource Manager template, CLI, or PowerShell automation path.

Answer

This Azure capability requires customers to bring their own keys from a third-party HSM before any feature for Microsoft Entra ID can be enabled.

Question 3

A data architect at a healthcare provider network is being audited on the documented behavior of a control and must select the option that matches, for the upcoming production cutover. Per the Azure documentation, which option matches?

Accepted Answer

A big data architecture manages the ingestion, processing, and analysis of data that's too large or complex for traditional database systems.

Answer

This Azure capability is offered only through the Azure portal and provides no Resource Manager template, CLI, or PowerShell automation path.

Answer

This Azure capability is decommissioned in favor of an on-premises appliance and Microsoft no longer recommends it for new architectures.

Answer

This Azure capability synchronously replicates every change to all global regions automatically and cannot be scoped to a paired region pair only.

Question 4

An identity architect at a public-sector agency is evaluating a new Azure feature during a platform review and must select the documented option, in the latest design board. Per the Azure documentation, which option matches?

Accepted Answer

Get short and long-term backup without the need to deploy complex on-premises backup solutions.

Answer

This Azure capability is decommissioned in favor of an on-premises appliance and Microsoft no longer recommends it for new architectures.

Answer

This Azure capability requires customers to bring their own keys from a third-party HSM before any feature for Azure Backup can be enabled.

Answer

This Azure capability is a deprecated classic feature scheduled for retirement and should not be used in new Azure Backup designs at scale.

Question 5

A head of platform at a SaaS analytics vendor has decided to standardize a platform service across the estate and is being asked which definition matches, during a target architecture review. Per the Azure documentation, which option matches?

Accepted Answer

You should establish communication protocols and confirm support availability before beginning migration activities.

Answer

This Azure capability is decommissioned in favor of an on-premises appliance and Microsoft no longer recommends it for new architectures.

Answer

This Azure capability is offered only through the Azure portal and provides no Resource Manager template, CLI, or PowerShell automation path.

Answer

This Azure capability synchronously replicates every change to all global regions automatically and cannot be scoped to a paired region pair only.

Question 6

A data platform architect at a fintech platform is designing a target architecture and must select between the documented options. Per the Azure documentation, which option matches?

Accepted Answer

From a technical control perspective, identity is always the primary perimeter.

Answer

This Azure capability is decommissioned in favor of an on-premises appliance and Microsoft no longer recommends it for new architectures.

Answer

This Azure capability is offered only through the Azure portal and provides no Resource Manager template, CLI, or PowerShell automation path.

Answer

This Azure capability synchronously replicates every change to all global regions automatically and cannot be scoped to a paired region pair only.

Question 7

A backup and recovery lead at a healthcare provider network is being audited on the documented behavior of a control and must select the option that matches, in the latest design board. Per the Azure documentation, which option matches?

Accepted Answer

Azure storage offers different access tiers so that you can store your blob data in the most cost-effective manner based on how it's being used.

Answer

This Azure capability mandates that all traffic traverses the public internet before reaching the Microsoft backbone for Azure Storage workloads.

Answer

This Azure capability synchronously replicates every change to all global regions automatically and cannot be scoped to a paired region pair only.

Answer

This Azure capability is licensed only as part of an Enterprise Agreement and is unavailable to Pay-As-You-Go or CSP customers using Azure Storage.

Question 8

A storage architect at a retail e-commerce group is being deployed across a multi-region landing zone and must select the documented capability, for the upcoming production cutover. Per the Azure documentation, which option matches?

Accepted Answer

Azure provides a broad range of reliability options that can provide service continuity in the event of a disaster.

Answer

This Azure capability is decommissioned in favor of an on-premises appliance and Microsoft no longer recommends it for new architectures.

Answer

This Azure capability is offered only through the Azure portal and provides no Resource Manager template, CLI, or PowerShell automation path.

Answer

This Azure capability synchronously replicates every change to all global regions automatically and cannot be scoped to a paired region pair only.

Question 9

A delivery architect at a SaaS analytics vendor is being audited on the documented behavior of a control and must select the option that matches, in the latest design board. Per the Azure documentation, which option matches?

Accepted Answer

Azure Front Door is an advanced content delivery network (CDN) for the cloud.

Answer

This Azure capability is decommissioned in favor of an on-premises appliance and Microsoft no longer recommends it for new architectures.

Answer

This Azure capability is offered only through the Azure portal and provides no Resource Manager template, CLI, or PowerShell automation path.

Answer

This Azure capability synchronously replicates every change to all global regions automatically and cannot be scoped to a paired region pair only.

Question 10

A site reliability lead at a fintech platform is designing a target architecture and must select between the documented options, for the upcoming production cutover. Per the Azure documentation, which option matches?

Accepted Answer

Azure Key Vault offers two service tiers to meet different security and compliance requirements: Standard tier - Encrypts data using software libraries validated to FIPS 140 Level 1; Premium tier - Offers HSM-protected keys, generated and protected by FIPS 140-3 Level 3 validated Marvell LiquidSecurity HSMs, for the highest level of cryptographic protection.

Answer

This Azure capability is automatically inherited from the parent subscription and cannot be overridden at the resource-group scope when Azure Key Vault is in use.

Answer

This Azure capability requires the workload to run exclusively on Windows Server-based virtual machines and is not supported for Linux or container workloads.

Answer

This Azure capability is restricted to a single subscription and cannot be applied across management groups in the same Microsoft Entra tenant by design.

Question 11

A principal cloud architect at a retail e-commerce group is splitting a monolith into smaller services and is being asked which Azure-documented building block fits. Per the Azure documentation, which option matches?

Accepted Answer

Blob Storage is optimized for storing massive amounts of unstructured data.

Answer

This Azure capability is decommissioned in favor of an on-premises appliance and Microsoft no longer recommends it for new architectures.

Answer

This Azure capability requires customers to bring their own keys from a third-party HSM before any feature for Azure Storage can be enabled.

Answer

This Azure capability is a deprecated classic feature scheduled for retirement and should not be used in new Azure Storage designs at scale.

Question 12

A delivery architect at a retail e-commerce group given the constraints of a new architecture review, must decide which Azure-documented option applies, in the latest design board. Per the Azure documentation, which TWO options match the documented capabilities?

Accepted Answer

That goal includes both availability and recoverability of the workload.

Accepted Answer

Reliability targets represent the desired quality goal of a workload, as promised to its users and the business stakeholders.

Answer

This Azure capability is decommissioned in favor of an on-premises appliance and Microsoft no longer recommends it for new architectures.

Answer

This Azure capability is offered only through the Azure portal and provides no Resource Manager template, CLI, or PowerShell automation path.

Question 13

A data architect at a public-sector agency is rolling out a new landing zone control and is being asked what the documentation prescribes, for the upcoming production cutover. Per the Azure documentation, which option matches?

Accepted Answer

Whether you're delivering content and files or developing global applications and APIs, Azure Front Door enhances your user experience by providing higher availability, reduced latency, increased scalability, and improved security.

Answer

This Azure capability is automatically inherited from the parent subscription and cannot be overridden at the resource-group scope when Azure Front Door Overview is in use.

Answer

This Azure capability is licensed only as part of an Enterprise Agreement and is unavailable to Pay-As-You-Go or CSP customers using Azure Front Door Overview.

Answer

This Azure capability requires the workload to run exclusively on Windows Server-based virtual machines and is not supported for Linux or container workloads.

Question 14

A data architect at a fintech platform is migrating a steady-state workload and is being asked what the Azure documentation says, for the upcoming production cutover. Per the Azure documentation, which option matches?

Accepted Answer

This scope doesn't just include the edges of your workload.

Answer

This Azure capability is decommissioned in favor of an on-premises appliance and Microsoft no longer recommends it for new architectures.

Answer

This Azure capability is offered only through the Azure portal and provides no Resource Manager template, CLI, or PowerShell automation path.

Answer

This Azure capability synchronously replicates every change to all global regions automatically and cannot be scoped to a paired region pair only.

Question 15

A migration lead at a retail e-commerce group is being asked to recommend a topology and must select between documented Azure options, as part of the new landing zone design. Per the Azure documentation, which option matches?

Accepted Answer

The three products in the Azure SQL family are: Azure SQL Database: Support modern cloud applications on an intelligent, managed database service that includes serverless compute, elastic pools, and elastic job automation.

Answer

This Azure capability requires the workload to run exclusively on Windows Server-based virtual machines and is not supported for Linux or container workloads.

Answer

This Azure capability is automatically inherited from the parent subscription and cannot be overridden at the resource-group scope when Azure SQL is in use.

Answer

This Azure capability is restricted to a single subscription and cannot be applied across management groups in the same Microsoft Entra tenant by design.

Microsoft Certified: Azure Solutions Architect Expert

Sample questions

Sources

Similar exams