Designing Microsoft Azure Infrastructure Solutions Free Sample Questions

A financial services company is designing a new three-tier application on Azure. The company has a strict security policy that requires all network traffic between the web, application, and data tiers to be inspected by a Network Virtual Appliance (NVA). The company also wants to centralize the management of this NVA and other shared services like DNS and Active Directory domain controllers. You need to design a network topology that meets these requirements.

Which network design should you recommend?

A retail company is migrating its e-commerce platform to Azure. The platform experiences massive, unpredictable traffic spikes during flash sales. The product catalog is stored in an Azure SQL Database. During sales, the database becomes a bottleneck due to an extremely high volume of read operations. The company needs a solution that can handle the read traffic without requiring a permanent, expensive scale-up of the primary database. The solution must minimize changes to the application's data access layer.

What is the most suitable solution to recommend?

An organization has deployed a critical application on a set of Azure Virtual Machines. The security team wants to ensure that administrative access (RDP and SSH) to these VMs is only possible from a secure, managed jump box and not directly from the internet. They also want to audit all administrative sessions. The solution should avoid exposing any public IP addresses on the VMs themselves.

Which Azure service should be recommended to meet these requirements?

A company has a hybrid cloud environment with resources both on-premises and in Azure. The governance team needs to enforce a consistent set of policies, such as requiring specific tags on resources and restricting deployments to certain regions, across both Azure and their on-premises servers. They want a single control plane to manage and audit compliance for all resources, regardless of their location.

What Azure service should be the cornerstone of this governance design?

You are designing a disaster recovery strategy for a stateful application running in Azure Kubernetes Service (AKS). The application uses Azure Disks for persistent storage via Persistent Volumes (PVs). The business requires a Recovery Point Objective (RPO) of 4 hours and a Recovery Time Objective (RTO) of 8 hours. The disaster recovery site will be in a paired Azure region.

You need to recommend a solution for backing up and restoring the application's state, including its Kubernetes objects and persistent data.

Which solution should you recommend?

A development team is building a new serverless application using Azure Functions. The application needs to store connection strings, API keys, and other secrets securely. The team wants to follow the principle of least privilege and avoid storing secrets in application settings or source code. The Azure Functions must be able to retrieve these secrets at runtime automatically using their identity.

What is the most secure and recommended approach for managing these secrets?

An enterprise is planning to deploy a large number of applications in Azure, organized into multiple subscriptions for different business units. The CIO wants to ensure that all deployed resources comply with corporate standards from the moment they are created. The standards include a mandatory cost center tag, deployment only in specific Azure regions, and the automatic deployment of the Log Analytics agent on all VMs. The solution must be repeatable and version-controlled.

Which Azure service is best suited for defining and assigning this comprehensive package of governance artifacts?

You are designing the storage for a new cloud-native application that will process large volumes of unstructured data, including images and videos. The application requires a hierarchical namespace to manage files in a directory-like structure for big data analytics workloads (e.g., Spark, Databricks). It also needs to be cost-effective and support fine-grained, POSIX-like access control lists (ACLs).

Which Azure Storage solution should you recommend?

A company is designing a global web application with users in North America, Europe, and Asia. The application consists of a web front-end and a set of backend APIs. The company has the following requirements:

• Provide a single, global endpoint for users (e.g., www.contoso.com).
• Route users to the closest Azure region hosting the application to minimize latency.
• Implement a Web Application Firewall (WAF) to protect against common web vulnerabilities.
• Terminate SSL at the edge and manage certificates centrally.

Which Azure service should be used to meet all these requirements?

A company has an Azure SQL Database with a service level objective of General Purpose, Gen5, 8 vCores. The database supports a critical business application. The company's business continuity plan requires a Recovery Point Objective (RPO) of less than 5 seconds and a Recovery Time Objective (RTO) of less than 30 seconds for regional outages. The plan also requires that the failover process be manageable through a single endpoint for both the primary and secondary databases.

Which feature should you configure to meet these requirements?