FREE Microsoft Azure Solutions Architect Expert Questions and Answers

Question 1

You have an on-premises Active Directory domain that is synchronized with an Azure Active Directory (Azure AD) tenant.
WebApp1 is an internal web application that is hosted on your premises. WebApp1 makes use of Windows Integrated authentication.
Some users access the on-premises network via remote access but do not have VPN access. You must grant single sign-on (SSO) access to WebApp1 to the remote users.

What two features need to be incorporated into the solution? Each right response offers a piece of the answer.

Accepted Answer

Azure AD Application Proxy

Answer

Azure Arc

Answer

Azure AD Privileged Identity Management (PIM)

Question 2

You have a security group called Group1 in your Azure Active Directory (Azure AD) tenant contoso.com. In Group1, assigned membership is configured. 50 people make up Group1, including 20 visitors.
You must offer a suggestion for how to assess Group1's membership. The answer must adhere to the following criteria:
‥ Every three months, the examination must be automatically redone.
‥ Each participant must be able to indicate whether they should belong in Group 1.
‥ Users who claim that Group1 is not something they should be in must be automatically removed from Group1.
‥ Users who fail to indicate whether they belong in Group 1 must be automatically removed from Group 1.

What should the recommendation contain?

Accepted Answer

Create an access review.

Answer

Implement Azure AD Privileged Identity Management (PIM).

Answer

Implement Azure AD Identity Protection.

Answer

Change the Membership type of Group1 to Dynamic User.

Question 3

You are creating a sizable Azure environment with numerous subscriptions.
As a component of a governance solution, you intend to employ Azure Policy.
Which three scopes are available for Azure Policy definitions assignment? Each accurate response offers an entire resolution.

Accepted Answer

subscriptions

Answer

compute resources

Question 4

You have a bespoke application called Application1 in your Azure subscription. Application1 was created by Fabrikam, a third-party company.
Ltd. Role-based access control (RBAC) permissions were given to Fabrikam developers for the Application1 components. All users are granted access to the E5 plan for Microsoft 365.

You must provide a remedy to determine whether the Fabrikam developers still need access to Application1. The answer must adhere to the following criteria:

‥ Every month, send an email to the manager of the developers listing the access permissions for Application1.
‥ Automatically revoke access authorization if the manager doesn't check it.
‥ Reduce development work.

What ought to you suggest?

Accepted Answer

In Azure Active Directory (Azure AD), create an access review of Application1.

Answer

Create an Azure Automation runbook that runs the Get-AzRoleAssignment cmdlet.

Answer

In Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role assignment for the Application1 resources.

Answer

Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet.

Question 5

To host a stateless web application under an Azure subscription, you must deploy resources. The answer must adhere to the following criteria:

‥ Make the entire.NET framework available.
‥ Offer redundancy in case an Azure region goes down.
‥ Permit administrators to install application dependencies on the operating system.

Solution: You put up an autoscaling Azure virtual machine scale set.
Is the objective being met?

Accepted Answer

No

Answer

Yes

Answer

Maybe

Question 6

You have a storage account in your Azure subscription.
Duplicate files can occasionally be written to the storage account by an application.
You have a PowerShell script that locates duplicate files in the storage account and removes them. The script is currently executed manually upon operations manager approval.
You must suggest a serverless solution that carries out the following tasks:

‥ Checks for duplicate files every hour by executing the script once.
‥ Notifies the operations manager through email and asks for permission to delete the duplicate files.
‥ Handles the Operations Manager's email answer, processing it to determine whether the deletion was authorized.
‥ If the deletion was authorized, runs the script.

What should the recommendation contain?

Accepted Answer

Azure Logic Apps and Azure Functions

Answer

Azure Functions and Azure Batch

Answer

Azure Logic Apps and Azure Event Grid

Answer

Azure Pipelines and Azure Service Fabric

Question 7

You are creating a program that will run on Azure.
The program will store video files with sizes varying from 50 MB to 12 GB. Users will be able to access the application online and it will employ certificate-based authentication.
You must suggest a location for the video files to be stored. The solution must minimize storage costs while offering the quickest read speed.

What should you suggest?

Accepted Answer

Azure Blob Storage

Answer

Azure SQL Database

Answer

Azure Files

Answer

Azure Data Lake Storage Gen2