AZ-303 Sample Questions & Answers
Free Microsoft Azure Architect Technologies practice questions with worked answers and explanations. See how the ExamJungle simulator prepares you — then jump into the full test.
Launch the full AZ-303 simulator →Showing 10 of 20 free samples.
- Question 1
- Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end ofthis case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answerthe questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.Overview
XYZ is an online trainingON-Premise Environment
Currently XYZ has a set of applications running on their on-premise environment. The applications are hosted on Virtual machines hosted on a VMware environment managed by vCenter server 6.5.
• The Virtual Machines are all part of an Active Directory forest named XYZ.com.
• All of the virtual machines run Windows Server 2016.
• The Mumbai office has a virtual_ machine named demo-virtual that has the vSphere console installed.
The company currently has the following offices with their associated IP address spaces:
• The offices are connected by using a VPN connection.
• Each office also has one Azure Expressroute circuit. This provides access to Azure services and Microsoft Online Services.- Azure Environment
The following resources have been setup in Azure:
• XYZ-gateway1 has 2 backend pools named Pool A and Pool B
• XYZ-gateway2 has 2 backend pools named Pool C and Pool.- Planned Changes
• Virtual Machines from the Mumbai office need to be migrated to the East US Azure region using Site Recovery
• An Azure Web app named XYZ-app needs to be deployed
• Capacity planning needs to be carried out for the Virtual Machines that UICI be migrated from on premise to Azure
• The Application gateway XYZ-gateway must balance incoming traffic as shown belowhttp://XYZ.com/videoP will be load balanced across Pool Ahttp://XYZ.com/images will be Load balanced across Pool B
• The Application gateway XYZ-gateway2 must balance incoming traffic as shown below
Show answer & explanation
Correct answer: B
B
- Question 2
*Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end ofthis case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case studyTo display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answerthe questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
XYZ is an online training provider.Current System
- Training SiteThe system consists of 3 tiers:
•Front end Web App
•Middle tierAPI
•Back end data storeThe backend is running on Microsoft SQL server 2016.
All servers are running on Windows.
The Front and Middle tiers are written in C# and hosted on Internet Information Services.
The system currently has the following requirements:
•The front and middle tier components currently make use of encryption keys to access the data store.
•Backups are maintained in 2 separate locations that are 80 miles apart.
•The backups need to be stored for up to 5 years.
•Traffic to the servers needs to be controlled via source IP address and port no.
•Access to the system should only be via the internal network ofXYZ.Current System - Processing systemXYZ also has an internal processing system. This is a C# Windows based service that gets invoked based on requests from the main training system. Each invocation ofthis service lasts for a maximum of2 minutes.
Planned ChangesXYZ wants to migrate all systems to Azure.
Key requirements
•Infrastructure services must remain available if a region or a data center fails.
•Failover must occurwithout any administrative intervention.
•Wherever possible. Azure managed serves must be used to management overhead.
•Whenever possible, costs must be minimized.
•An SLA of 99.95% must be guaranteed on the Infrastructure for the front and middle tier systems.
You need to comply with the below requirement:
“Traffic to the servers needs to be controlled via source IP address and port no. You decide to implement custom route tables for the subnets hosting the Virtual Machines.
Does this fulfil the requirement?
Show answer & explanation
Correct answer: B
B
- Training SiteThe system consists of 3 tiers:
- Question 3
A company is planning on deploying a web application onto Azure. The web application will be deployed onto the Azure Web App service. The company has the following requirements:
- Provide support for efficient processing of SSL encryption and decryption to support high traffic loads on the web application.
- Provide support to protect the web application against web vulnerabilities and attacks without modifying the backend code.
- Be able to optimize web application responsiveness and reliability by routing HTTP requests and responses to the endpoint with the lowest network latency for the client.
Which of the following can be used forthe following requirement?
Provide support for efficient processing of SSL encryption and decryption to support high traffic loads on the web application.
Show answer & explanation
Correct answer: A
Explanation: The Azure Application Gateway service has the ability to provide SSL offloading. This helps in the SSL encryption and decryption. The Microsoft documentation mentions the following:Overview ofTLS termination and end to end TLS with Application GatewayTransport Layer Security (TLS), previously known as Secure Sockets Layer (SSL), is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and encrypted. Application gateway supports both TLS termination at the gateway as well as end to end TLS encryption.
Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect -- Reference: https://docs.microsoft.com/en-us/azure/application-gateway/ssl-overview - Question 4
Your company has an Azure Web app hosted using the Standard App Service Plan. The application currently runs on three instances. The Autoscale condition set of the Web App has the following conditions:
• The minimum number of instances is set to one
• The maximum number of instances is set to fiveThe following rules are set:
• Decrease the instance count by one when the CPU percentage is less than 30%
• Decrease the instance count by one when the Memory percentage is less than 50%
• Increase the instance count by one when the CPU percentage is greater than 80%
• Increase the instance count by one when the Memory percentage is greater than 75%The following table depicts the expected application utilization:
What is the maximum number of instances that would be running on Monday to Friday from 08:00 to 23:59?
Show answer & explanation
Correct answer: D
Explanation: Here the scale out condition of “Increase the instance count by one when the CPU percentage is greater than 80% will be met. Hence the number of instances will keep on increasing till the maximum limit. The scale in condition of'Decrease the instance count by one when the Memory percentage is less than 50% will be ignored because you need to have both of the scale in conditions that need to be met. This logic of multiple scale in and scale out conditions is also given in the Microsoft documentation:Considerations for scaling when multiple rules are configured in a profileThere are cases where you may have to set multiple rules in a profile. The following autoscale rules are used by the autoscale engine when multiple rules are set. On scale-out, autoscale runs ifany rule is met. On scale-in, autoscale require all rules to be met.
To illustrate, assume that you have the following four autoscale rules:lfCPU(30%,scale-in by1•
If Memory ( 50%, scale-in by 1lfCPU)75%,scale-out by1•
If Memory ) 75%, scale-out by 1Then the follow occurs:•
If CPU is 76% and Memory is 50%, we scale out.•
If CPU is 50% and Memory is 76%, we scale out.
On the other hand, ifCPU is 25% and memory is 51% autoscale does not scale-in. In orderto scale-in, CPU must be 29% and Memory 49%.Since this is clear from the reasoning, all other options are incorrect -- Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-best-practices - Question 5
Your company has an Azure subscription. They have an on-premises file server named XYZ-server that runs Windows Server 2019. This server is managed by using Windows Admin Center. You have to ensure that ifthe server fails, you can recover the server files from Azure. You decide to create a Recovery Services vault and then configure a backup by using Windows Server Backup.
Would this meet the requirement?Show answer & explanation
Correct answer: A
Explanation: Yes, you can achieve this by using Windows Server Backup. All of the backup data will be stored in the Azure Recovery Services vault. -- Reference: httDs://docs.microsoft.com/en-us/azure/backup/backu p-azure-microsoft-azure-backu pIt
- Question 6
A development team has developed a Docker based application. This application needs to be deployed to an Azure Kubernetes cluster.
The cluster has the following requirements:- The initial node count of the cluster should be 2
- Monitoring needs to be enabled for the cluster
You have to complete the following Azure CLI script for the deployment of the cluster
Whichof the following should go into Slot3?
Show answer & explanation
Correct answer: A
Explanation: Since we need to have monitoring as perthe case study, we need to enable this option. An example ofthis is given in the Microsoft documentation:Create AKS clusterUse the az aks create command to create an AKS cluster. The following example creates a cluster named myAKSCIuster with one node. Azure Monitor for containers is also enabled using the --enable-addons monitoring parameter.
Azure CLIR5c0py0Try Itaz aks create --resource-group myResourceGroup --name myAKSCIuster --node-count 1 [--enable-addons monitoring |'--generate-ssh-keysSince this is clearly given in the Microsoft documentation, all other options are incorrect -- Reference: https://docs.microsoft.com/en-us/azure/aks/ku brn etes-wa I kth ro u g h - Question 7
A company has a Virtual Machine deployed to Azure. The following rules are in place in the Network Security Group attached to the only network interface for the Virtual Machine. They are no Network Security Groups defined for the subnet:
You need to block outgoing requests from the Virtual Machine to the Internet on port 80.
Which of the following needs to be put in place in orderto fulfil this requirement?
Show answer & explanation
Correct answer: C
Explanation: Here we need to add an outbound rule as shown below Click on Add outbound port rule:Inbound port rulesOutbound port rules ; Application security groupsLoad balancing0 Network security group demovm-nsg (attached to network interface: demovm995) Impacts 0 subnets, 1 network interfacesAdd outbourxl port rutePRIORITYNAMEPROTOCOLSOURCEDESTINATIONACTION65000AllowVnetOutBoundVirtualNetworkVirtualNetwork© Allow65001AllowlnternetOutBoundInternet© Allow65500DenyAIIOutBoundO Deny* Source eI Any* Source port ranges 6* DestinationI Service TagDestination service tagInternet* Destination port ranges e80* Protocol
- Question 8
A company has defined an alert in Azure Monitor. An action group has been defined as shown below which has been attached to the alert.:
Based on the alerts and action group how many times would an SMS be sent in an hour?
Show answer & explanation
Correct answer: A
Explanation: The Microsoft documentation mentions the following limits when it comes to alerts:Rate limiting forVoice, SMS, emails. Azure App push notifications and webhook postsRate limiting is a suspension of notifications that occurs when too many are sent to a particular phone number, email address or device. Rate limiting ensures that alerts are manageable and actionable.
The rate limit thresholds are:•
SMS: No more than 1 SMS every 5 minutes.•
Voice: No more than 1 Voice call every 5 minutes.•
Email: No more than 100 emails in an hour.
Other actions are not rate limited.
Based on this, only 12 SMS would be sent in an hour -- Reference: https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-alerts-rate-limiting - Question 9
A company has an Azure Subscription. They have the following Networks defined:
The following Virtual Machines are defined:
The following Peering Connections are defined:From the above configuration, is peering successful between XYZvmB and XYZvmC?
Show answer & explanation
Correct answer: A
Explanation: Below is the infrastructure diagram representing the infrastructure in the question. An important point to remember is that for a peering connection to be active between 2 virtual networks, a peering connection needs to be created from both directions.
XYZ-net110.1.0.0/16XYZ-net210.10.0.0/16SubnetAXYZvmASubnetBXYZvmBPeering Connections1\ \ \XYZ-net3\ \\\\172.16.0.0/16SubnetCXYZvmC/ / / / / // / - Question 10Select 2
Your company has an Azure subscription that contains the following resource groups. The company also has the following storage accounts:
An Azure key vault has been created in the West US location as part of the resource group XYZ-rg1.
Which of the following storage accounts can be used for diagnostic logs of the key vault?
Show answer & explanation
Correct answers: D, E
Explanation: The storage accounts and the key vaults need to be in the same region. The storage accounts can be General Purpose v1, General Purpose v2 or BlobStorage storage accounts. -- Reference: https://docs.microsoft.com/en-us/azure/key-va u lt/gnral/logg i n g
Explanation: The storage accounts and the key vaults need to be in the same region. The storage accounts can be General Purpose v1, General Purpose v2 or BlobStorage storage accounts. -- Reference: https://docs.microsoft.com/en-us/azure/key-va u lt/gnral/logg i n g
Ready for the real thing?
The full AZ-303 simulator has every exam-style question, timed mode, and instant scoring.