| Specify components of a compute solution based on workload requirements |
- Questions present a workload with specific runtime characteristics, such as writing temporary files to a local file system and writing to an application event log, and ask which Azure hosting option best meets both a minimum maintenance overhead and minimum cost requirement. You need to reason through which characteristics of the workload constrain the hosting option, such as whether the need for a local file system rules out certain execution models, and which remaining options meet both the operational and cost constraints.
- Questions present a case study requiring a multi-region App Service deployment and ask which architecture to recommend with minimum cost. You need to understand the cost difference between App Service Environments and App Service plans, and whether the stated requirements justify the significantly higher cost of an ASE over a standard App Service plan.
- Questions present an Azure Functions app that processes events from Azure Event Hubs where individual function executions are estimated to take between five and twenty minutes. The solution must support estimated execution durations and use event-driven autoscaling. You need to know which hosting plans impose a maximum execution timeout that would be exceeded by the stated duration, which plans support event-driven autoscaling, and which plan satisfies both constraints simultaneously.
- Questions present a SQL Server deployment on an Azure VM with requirements for a specific disk IOPS target and SR-IOV support, with cost minimization. The scenario is split into two questions: one asking which VM series to use and another asking which disk type to use. You need to know which VM series supports SR-IOV (Accelerated Networking) and is optimized for database workloads rather than GPU or visualization tasks, and which disk type must be selected to achieve IOPS in the range that exceeds Premium SSD limits.
- Questions present a multi-tier app deployed across two Azure regions with virtual machines distributed across four availability zones, where costs must be minimized by accumulating CPU credits during off-peak hours. The scenario is split into two questions: one asking for the minimum number of virtual networks to deploy, and another asking which VM size series to use. You need to know that VNets are regional resources and cannot span regions, determining the minimum count from the number of regions, and which VM series supports the CPU credit model that allows unused capacity to accumulate as credits redeemable during peak periods.
- Questions present an on-premises application that runs multiple concurrent instances, scales significantly throughout the day, and requires major changes to run in a container. The migration must support multiple instances, automatic instance scaling based on load, and minimized administrative effort. You need to know which Azure service supports load-based auto-scaling of web applications without requiring containerization or manual infrastructure management.
|
| Recommend a virtual machine-based solution |
- Questions present a series where a stateless web app must satisfy three requirements simultaneously. access to the full .NET framework, regional redundancy if an Azure region fails, and OS-level access for custom application dependencies. and each question proposes a different solution asking Yes or No. You need to evaluate each proposed solution against all three requirements, knowing which load balancers are regional versus global, which hosting models expose the underlying OS, and which solutions satisfy all three constraints versus only some.
- Questions present a case study where a migrated application requires a recommendation on the number of dedicated host groups and VM Scale Sets. You need to reason through how dedicated host groups provide host-level fault isolation and how the count maps to the stated resiliency level.
- Questions present a SQL Server VM with two managed disks, one for data and one for transaction logs, and ask separately which host caching method to recommend for each disk. You need to understand how the read and write patterns of data files and log files differ, how host caching interacts with those patterns in terms of performance and data integrity, and why the correct caching setting for one disk type differs from the other.
|
| Recommend a container-based solution |
- Questions present an AKS deployment spread across multiple Azure regions, and ask which Azure service to include to ensure that container images are automatically replicated to all regions hosting an AKS cluster. You need to know which Container Registry tier supports geo-replication of images across regions, and why storage accounts and CDN are not correct solutions for container image distribution to AKS.
- Questions present a multi-region AKS deployment and ask which load balancing service satisfies two requirements simultaneously: maintaining application availability if a single AKS cluster fails, and encrypting internet traffic using SSL without configuring SSL on each individual container. You need to know which service operates at the global level across regions, which can terminate SSL at the edge before traffic reaches the container, and why a per-container ingress controller or a regional load balancer does not satisfy both requirements at once.
- Questions present an Azure Functions microservice app hosted in the Consumption plan using a Queue Storage trigger that must be migrated to an AKS cluster, with requirements to use the same scaling mechanism as the current deployment and support both kubenet and CNI networking. The question asks which two actions to perform. You need to know which component replicates the event-driven queue-based autoscaling behavior of the Consumption plan within Kubernetes, and which component supports both kubenet and CNI networking modes in AKS, so you can select exactly the two required actions.
- Questions present an AKS scenario where the solution must minimize the time to provision compute resources during scale-out, support autoscaling of Linux containers, and minimize administrative effort. You need to know which scaling approach provisions new compute capacity in seconds by using serverless container infrastructure rather than provisioning new VM-based nodes, and why node-level scalers take longer due to VM boot time.
- Questions present a microservices architecture for a web application that must deploy both on-premises and to Azure, support low-latency and hyper-scale operations, allow independent upgrades to each microservice, and set policies for automatic repairs. You need to know which platform is purpose-built for stateful and stateless microservices with built-in upgrade and repair policy support across both on-premises and Azure deployments.
- Questions present a set of containerized microservice apps on AKS that require specific platform functions across three separate questions — state management, pub/sub messaging, and traffic routing and splitting. You need to know which open-source AKS add-on provides portable API abstractions for state stores and pub/sub that decouple microservices from specific infrastructure implementations, and which service mesh provides layer-7 traffic management including weighted routing and traffic splitting between service versions.
- Questions present a containerized application design with requirements to automatically scale by adding instances, minimize node and cluster management effort, ensure HA across availability zones, and provide centralized lifecycle management and storage of container images. The scenario asks separately which service runs the containerized apps and which service handles image lifecycle management. You need to know which container runtime service provides managed infrastructure and built-in autoscaling with minimal cluster operations overhead, and which service is dedicated to storing, versioning, and distributing container images.
|
| Recommend a serverless-based solution |
- Questions present a scenario where custom code must execute in response to an event, the code requires access to a resource on a private VNet, and costs must be minimized. You need to understand which hosting plan supports VNet integration, which plans do not have that capability, and how cost varies between plans so you can identify the lowest-cost option that still satisfies the VNet access requirement.
- Questions present a public HTTP-based Azure Functions API that must provide read-only operations and prevent write operations, and ask two separate questions: which HTTP method or set of methods should be allowed, and which authorization level should be configured. You need to know which HTTP method restricts the API to read-only operations, and which authorization level allows unauthenticated public access without requiring a function key.
- You need to understand the cost profile of each option: VMs have a continuous cost, logic apps and function apps can be serverless with consumption-based pricing, and WebJobs run within an existing App Service plan without additional compute cost. The correct recommendation depends on whether reusing an existing App Service plan is viable and which option minimises incremental cost.
|
| Recommend a compute solution for batch processing |
- Questions present an HPC cluster in Azure that will use a third-party scheduler, and ask which Azure service to recommend for provisioning and managing the cluster nodes. You need to identify which service is purpose-built for creating and managing HPC clusters in Azure and supports integration with third-party job schedulers.
- Questions present two Azure Batch job types with different characteristics. short-running development tasks and long-running MPI production jobs requiring timely completion. and ask separately for each job type which pool type and node type to recommend. Options combine Batch service pools or user subscription pools with dedicated or low-priority VMs. You need to understand the trade-offs: low-priority VMs minimise cost but can be preempted, dedicated VMs guarantee availability, user subscription pools allow use of Azure Hybrid Benefit and Reserved Instances, and Batch service pools are simpler to manage. You then match each job type's cost sensitivity and preemption tolerance to the correct combination.
- Questions present a scenario requiring 3D geometry calculations from height-map data in Azure, where each compute node must be able to communicate with every other node, the number of nodes must be maximized to compute multiple scenes simultaneously, and implementation effort must be minimized. The question asks which two actions to include. You need to know which service manages large-scale parallel compute node pools with built-in inter-node communication support and minimizes operational effort, and which configuration option within that service allows more than one task to run concurrently on a single node to maximize throughput.
|
| Recommend a messaging architecture |
- Questions present a multi-service application where several decoupled services need to asynchronously exchange structured messages. You need to identify which service is designed for reliable asynchronous message exchange between loosely coupled application components and eliminate options that serve a different purpose such as microservice hosting, push notifications, or traffic routing.
- Questions present a scenario where a producer application currently sends messages to a single-consumer queue, and future consumers will need to independently read the same messages. You need to recommend a replacement messaging architecture that supports multiple independent subscribers. You need to understand the difference between queue and topic models and which one allows multiple consumers to each receive a copy of the message.
- Questions present a two-component application that communicates via a queue and must process messages in strict First In, First Out order. You need to know which queue configuration guarantees FIFO message ordering for a single logical stream, and why partitioning and metadata settings do not enforce ordering.
|
| Recommend an event-driven architecture |
|
| Recommend a solution for API integration |
- Questions present a scenario where web apps must call web APIs through Azure API Management, with the requirement that unauthorized requests are blocked using Microsoft Entra-generated claims with minimal configuration. The scenario is split into two completion questions: one asking how permissions are granted to allow the web apps to access the web APIs, and another asking where a JWT validation policy should be configured. You need to understand the separation between granting application permissions in Microsoft Entra and enforcing token validation at the API gateway layer.
- Questions present a microservices architecture on AKS where consumer apps on VMs in the same VNet need access to the microservices, with the requirements that access is restricted to a single private IP address, protected by mutual TLS, and rate-limited. You need to know which API Management tier supports VNet injection enabling a private IP address within a VNet, which tier is limited to service endpoints without VNet-level isolation, and why a public-facing gateway such as Front Door or Application Gateway does not satisfy the private-IP-only requirement.
- Questions present a scenario where external partner developers with a third-party OAuth 2.0 identity provider need rate-limited access to a subset of internal logic apps, without using Entra guest accounts and without modifying the logic apps. You need to understand which service can sit in front of existing HTTP-triggered logic apps, apply rate limiting and caller-specific policies, and accept tokens from external OAuth providers without requiring Entra identity for the caller.
- Questions present a scenario where an Azure Logic App must write to a database on an on-premises server that has no VPN connection to Azure and no internet access. The scenario is split into two questions: one asking what to deploy on-premises and another asking what to deploy in Azure. You need to know which component installed on-premises establishes the outbound connection that allows Logic Apps to reach the local database, and which Azure resource acts as the cloud-side registration for that connection.
- Questions present an on-premises app that supports REST calls and webhooks, and a new Azure-hosted app that must send a Microsoft Teams message when a new record is added to the first app. The scenario is split into two questions: one asking which Azure service to use to host the new app to minimize development effort, and another asking which trigger type to use. You need to know which hosting service provides built-in connectors for both webhook ingestion and Microsoft Teams integration without writing custom integration code, and which trigger type is used when the invoking system supports outbound webhook calls.
- Questions present a multi-layer infrastructure design where Azure Front Door is used for global access, Azure API Management controls access to AKS-hosted APIs, and Entra B2C authenticates users via OpenID Connect federation with a third-party identity provider. The scenario is split into two questions, each asking which specific security function one of the two services provides. You need to know which function belongs to the WAF capability of the global edge layer versus which function is performed by the API gateway when evaluating caller tokens against the B2C issuer.
- Questions present a web service deployed to an Azure VM that is currently accessible from other VMs on the same network, with a requirement for external partner access over the internet via Azure API Management. The APIM configuration is shown in an exhibit. The scenario includes three Yes/No statements evaluated separately: whether the API is available to partners over the internet, whether the APIM instance can access real-time data from VM1, and whether a VPN gateway is required for partner access. You need to read the APIM configuration to determine whether internet exposure is enabled, whether the APIM instance is in the same network as VM1, and whether the architecture relies on VPN connectivity or uses APIM's native internet gateway capability.
- Questions present an AKS cluster hosting microservice APIs that must be exposed to external users via an API Management instance, with mTLS authentication between the two and a requirement to minimize development effort and cost. You need to know which Kubernetes component enables mTLS between API Management and the AKS backend services without requiring the APIM instance to be VNet-injected, and what the cost implication of VNet injection is for the relevant APIM tier.
|
| Recommend a caching solution for applications |
- Questions present a multi-tier application where read operations on an Azure SQL database are causing delays for users during high-utilization periods. You need to distinguish between a cache that accelerates repeated database read operations for application-tier consumers versus CDN acceleration for static assets, and eliminate options that serve data integration or analytics purposes rather than reducing database read latency for live application traffic.
|
| Recommend an application configuration management solution |
- Questions present a case study requirement for centralised management of application settings across a multi-instance App Service deployment, and ask which solution component to include. You need to know what Azure App Configuration provides as a dedicated service for externalising and managing application settings, feature flags, and connection strings separately from application code and infrastructure.
|
| Recommend an automated deployment solution for applications |
- Questions present a case study with application development requirements and ask which solution component to include in the recommendation. You need to understand what each component provides: CI/CD handles deployment automation, Azure App Configuration centralises application settings and feature flags separately from code, Container Registry stores container images, and deployment slots enable staged rollout and rollback. You then match the stated development requirement to the correct component.
- Questions present a scenario where multiple App Service instances hosting code-based web apps must have their configuration defined and version-controlled. You need to know which artifact type defines App Service infrastructure configuration rather than packaging application code or machine images, and which source control service stores that artifact with full version history.
|
| Evaluate a migration solution using the Microsoft Cloud Adoption Framework |
|
| Evaluate on-premises servers, data, and applications for migration |
- Questions present a VMware environment with hundreds of VMs of varying sizes and utilisation levels, and ask which tool to use to determine how many Azure VMs of what sizes are required to run the workloads after migration. You need to know which tool performs automated discovery and assessment of on-premises VMware workloads to produce right-sized Azure VM recommendations.
- Questions present a VMware vSphere cluster managed by vCenter that must be migrated to Azure. The requirement is to identify which resources must be configured in the Azure subscription and in the on-premises cluster to perform the assessment and migration with minimum administrative effort. The scenario asks separately about the Azure-side component and the on-premises component. You need to know which component lives in the Azure subscription as the central hub for discovery and migration tracking, and which lightweight component is deployed into the on-premises VMware environment to discover and replicate VM inventory.
- Questions present a table of Azure resources that includes both Azure-native VMs and VMs managed by a different service, then asks which tool to use to move each VM type to a new resource group. The scenario is split into two questions, one per VM. You need to know which tool is purpose-built for moving existing Azure resources between resource groups or subscriptions within Azure, versus which tools handle on-premises-to-Azure migration, multi-cloud management, or database schema assessment.
|
| Recommend a solution for migrating workloads to IaaS and PaaS |
- Questions present a case study where compute costs for a planned Azure migration must be estimated before the migration occurs, and ask which Azure tool to use. You need to distinguish between tools that estimate pre-migration costs by comparing on-premises and Azure infrastructure, tools that optimize existing Azure spend, and tools that are unrelated to cost estimation.
- Questions present a case study where a migrated application running on Azure VMs must have its compute costs minimized, and ask which technique to implement. You need to understand what each option offers in terms of cost reduction, which workloads each applies to, and which involves trade-offs such as eviction risk or commitment length.
|
| Recommend a solution for migrating databases |
- Questions present a table of on-premises data sources at different SQL Server versions, then ask separately which tool to use to migrate data from each version. You need to know which tool is designed for assessing and migrating SQL Server databases to Azure SQL targets, and which tools are designed for other data types or movement scenarios such as Cosmos DB or blob storage.
- Questions present an on-premises SQL Server Always On availability group containing a database that must be migrated to a SQL Server instance on an Azure Linux VM, with a requirement to minimize downtime. The scenario is split into two questions: one asking how to prepare for the migration and another asking how to perform it. You need to know which preparation step makes the Azure VM a replica participant capable of receiving synchronized data before cutover, and which migration technique connects two separate availability groups across different environments to enable near-zero-downtime database transfer.
- Questions present an on-premises SQL Server instance hosting multiple databases that must be migrated offline to an Azure SQL Managed Instance with minimum administrative effort. You need to know which service is purpose-built for migrating SQL Server workloads to Azure SQL Managed Instance at scale, handling the backup and restore process automatically, and how it differs from compatibility assessment tools and broad IaaS migration services.
- Questions present an on-premises SQL Server instance with a database that must be migrated to Azure SQL Managed Instance with minimized downtime. You need to know which tool provides a native guided migration experience for SQL Server to Azure SQL Managed Instance that supports online migration so the source database remains operational until cutover, and how it differs from general VM lift-and-shift services and SQL Server administration tools.
|
| Recommend a solution for migrating unstructured data |
- Questions present an on-premises file server with several hundred gigabytes of data that must be copied to an Azure Blob Storage account, and ask which two Azure services can achieve this goal. You need to know which two services can physically or logically transfer unstructured file data from an on-premises server to Azure Blob Storage, and eliminate options that serve unrelated purposes such as analytics gateways, compute orchestration, or integration workflows.
- Questions present a network-attached storage device hosting a large file share that must be migrated to an Azure Data Lake Storage Gen2 account. You need to know which tool can copy data directly from network file shares to an ADLS Gen2 target without requiring a persistent sync relationship, and why file synchronization services, on-premises copy utilities, and managed migration services are each less appropriate for this one-time transfer.
|
| Recommend network connectivity and security solutions (internet, on-premises, performance, security, load balancing) |
- Questions present a scenario with an existing Azure Virtual WAN and a requirement to associate an ExpressRoute circuit, then ask what must be done first. You need to understand the prerequisites for ExpressRoute connectivity within Azure Virtual WAN and the correct order of operations.
- Questions present a case study where a storage account must meet security and compliance requirements restricting it to private network access, and ask which network connectivity solution to recommend. You need to understand what each option achieves in terms of whether the storage account's public endpoint remains accessible, and match the stricter option to the compliance requirement.
- Questions present a hybrid network design where 30 VMs must communicate with all on-premises servers via a site-to-site VPN, and ask two separate questions: which address range to recommend for the VM subnet and which address range to recommend for the Gateway Subnet. You need to know that the VM subnet must not overlap with the on-premises address space and must be large enough for 30 hosts, and that the Gateway Subnet has specific naming and sizing requirements for VPN Gateway deployments.
- Questions present an existing web application running on Azure VMs that must be protected from SQL injection attacks and use a layer-7 load balancer with no code changes to the application. The question is split across two sub-questions: one asking which Azure service to recommend, and another asking which specific feature of that service provides the stated protection. You need to know which load balancing service operates at layer 7, which feature specifically detects and blocks SQL injection patterns, and how the service and feature relate to each other.
- Questions present a multi-region App Service deployment and ask which load balancing service to recommend given requirements for regional outage tolerance, WAF support, cookie-based affinity, and URL routing. You need to understand which services operate globally versus regionally, which support WAF integration, and which support session affinity and path-based routing simultaneously, then eliminate options that fail any of the stated requirements.
- Questions present an AKS deployment spread across multiple regions with internet traffic that must be SSL-encrypted without configuring SSL on individual containers. You need to identify which global load balancing service can terminate SSL at the edge for traffic destined for multiple AKS clusters across regions, and distinguish it from regional load balancers and cluster-level ingress controllers that cannot satisfy the cross-region requirement.
- Questions present a multi-region web app deployment and a series of proposed access solutions, each evaluated with a Yes/No question. The solutions proposed across the series include Azure Load Balancer, Azure Traffic Manager, and Azure Front Door. All three requirements must be met: rate limiting, request balancing across instances, and availability during a regional outage. You need to evaluate each proposed service against all three requirements, knowing which services operate globally versus regionally, and which support rate limiting as a native capability.
- Questions present a case study and ask for the minimum number of instances of Azure Traffic Manager and Azure Application Gateway required to meet stated connection requirements. You need to read the connection requirements from the case study. such as the number of regions, the need for global routing, and regional load balancing requirements. and reason through the minimum instance count that satisfies the topology.
- Questions present existing Azure Firewall deployments with associated policies, and a requirement to create a new parent policy that enforces mandatory rules across all deployments. You need to determine the minimum number of additional policies to create to satisfy the parent policy requirement, reading the existing policy structure from a table to identify how many policies need a parent assigned.
- Questions present a multi-office multi-region networking scenario with requirements including: connecting to ExpressRoute circuits in specific Azure regions, minimizing latency by supporting connection in only a subset of regions, supporting site-to-site VPN connections, and minimizing costs. The scenario is split into two questions: one asking for the minimum number of Azure Virtual WAN hubs required, and another asking which Virtual WAN SKU must be used. You need to know which Virtual WAN SKU supports ExpressRoute connectivity (as Basic only supports VPN) and how the latency requirement for a subset of regions determines the minimum hub count needed.
- Questions present a multi-region hybrid networking scenario requiring automatic P2S VPN connections from mobile users to the nearest Azure region, ExpressRoute connectivity from each office to its local region, transitive routing between VNets and on-premises, and FQDN-based traffic filtering between VNets. You need to know which service natively provides the combination of ExpressRoute, P2S VPN, transitive routing, and integrated Azure Firewall for FQDN-based filtering in a single managed hub topology.
- Questions present a scenario where VMs in peered VNets must be load balanced and failover automatically when one VM becomes unavailable, with access only via private IP address. You need to know which service balances traffic between backend instances within a private network and provides health-probe-based automatic failover, versus which services are designed for public internet traffic or global multi-region routing.
- Questions present a Private Endpoint DNS resolution scenario where on-premises clients must resolve the private IP of an Azure SQL database accessed through a private endpoint in a VNet. The scenario is split into two questions: one asking which Azure-side DNS configuration to choose and another asking which on-premises DNS configuration to choose. You need to understand the two-hop DNS forwarding chain required to resolve private endpoint addresses from on-premises: traffic must flow from the on-premises resolver to the Azure DNS forwarder VM, and that VM must be configured to forward to Azure-provided DNS so it can resolve private DNS zone records.
- Questions present a hybrid routing scenario where two on-premises sites each have ExpressRoute Global Reach circuits to two Azure regions, and outbound internet traffic from Azure workloads must be routed through the nearest on-premises site with automatic failover if a site goes down. The scenario is split into two questions: one asking which routing protocol must be used to configure routing from the virtual networks to the on-premises locations, and another asking how the automatic rerouting after a failover is handled. You need to know which routing protocol is native to ExpressRoute and Azure networking for dynamic route advertisement, and which protocol handles route convergence automatically when an upstream path fails.
- Questions present five AKS clusters in separate Azure regions that together host a containerized web app, and require internet access with routing to the lowest-latency cluster and fast failover on cluster outage. HTTPS traffic must also reach individual pods via an ingress controller. The scenario is split into two questions: one asking which service to use for global load balancing, and another asking which service to use as the ingress controller. You need to know which global service routes based on real-time latency and provides fast failover at the HTTP layer, and which service operates at layer 7 within a region to route HTTPS traffic to individual pods.
- Questions present an Azure App Service web app and an Azure SQL database that must communicate entirely over a private connection. The scenario is split into two questions: one asking how many subnets the virtual network must contain, and another asking which DNS configuration to use. You need to know how many subnets are required to support both the App Service VNet integration subnet and the private endpoint subnet for the SQL database, and which DNS mechanism resolves the SQL database's private endpoint hostname to its private IP address within the VNet.
- Questions present a VM Scale Set that must have incoming traffic distributed across Network Virtual Appliances before reaching the scale set instances, with minimum administrative effort. You need to know which load balancer service transparently chains NVAs into a traffic path without requiring application changes, and how it differs from global routing services and layer-7 gateways.
|
Flash sale is here! Get Extra 25% off on ALL COURSES! Use coupon code FLASH25. Ends today.
This website uses cookies for proper functioning. Learn More