AZ-301 Microsoft Azure Architect Design - Practice Questions

Question 7 (Mixed Questions)

You have an on-premises network to which you deploy a virtual appliance.

You plan to deploy several Azure virtual machines and connect the on-premises network to Azure by using a Site-to-Site connection.

All network traffic that will be directed from the Azure virtual machines to a specific subnet must flow through the virtual appliance.

You need to recommend solutions to manage network traffic.

Which two options should you recommend? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Select all that apply, then click Submit answer.

○
Configure Azure Traffic Manager
○
Implement an Azure virtual network
○
Configure a routing table with forced tunneling
○
Implement Azure ExpressRoute

Reference / correct answer:

Configure a routing table with forced tunneling

Implement Azure ExpressRoute

C: Forced tunneling lets you redirect or "force" all Internet-bound traffic back to your on-premises location via a Site-to-Site VPN tunnel for inspection and auditing. This is a critical security requirement for most enterprise IT policies. Without forced tunneling, Internet-bound traffic from your VMs in Azure always traverses from Azure network infrastructure directly out to the Internet, without the option to allow you to inspect or audit the traffic.

Forced tunneling in Azure is configured via virtual network user-defined routes.

D: ExpressRoute lets you extend your on-premises networks into the Microsoft cloud over a private connection facilitated by a connectivity provider. With ExpressRoute, you can establish connections to Microsoft cloud services, such as Microsoft Azure, Office 365, and Dynamics 365.

Connectivity can be from an any-to-any (IP VPN) network, a point-to-point Ethernet network, or a virtual cross-connection through a connectivity provider at a co-location facility. ExpressRoute connections do not go over the public Internet. This allows ExpressRoute connections to offer more reliability, faster speeds, lower latencies, and higher security than typical connections over the Internet.

Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-forced-tunneling-rm https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction

Question 8 (Mixed Questions)

Your company plans to migrate its on-premises data to Azure.

You need to recommend which Azure services can be used to store the data. The solution must meet the following requirements:

Encrypt all data while at rest.

Encrypt data only by using a key generated by the company.

Which two possible services can you recommend? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Select all that apply, then click Submit answer.

○
Azure Table storage
○
Azure Backup
○
Azure Blob storage
○
Azure Queue storage
○
Azure Files

Question 9 (Mixed Questions)

You have a web app named App1 that is hosted on-premises and on four Azure virtual machines. Each virtual machine is in a different region.

You need to recommend a solution to ensure that users will always connect to the closest instance of App1. The solution must prevent the users from attempting to connect to a failed instance of App1.

Which two possible recommendations achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Select all that apply, then click Submit answer.

○
Azure Front Door Service
○
Azure Load Balancer
○
round-robin DNS
○
Azure Traffic Manager
○
Azure Application Gateway

AZ-301 – Microsoft Azure Architect Design