Design infrastructure solutions
Free Microsoft Certified: Azure Solutions Architect Expert practice — 6 questions on Design infrastructure solutions, with explanations. No sign-up. Full 12-question mixed test →
A global retailer's web application requires: SSL offload, a Web Application Firewall (WAF), path-based routing across three Azure regions, and automatic failover if a regional backend becomes unhealthy. Which single service BEST meets ALL these requirements?
Front Door Premium operates at Layer 7, provides global anycast entry, integrated WAF, path-based/URL routing, SSL offload, and automatic health-probe-based failover across regions from a single global service.
A company has an ExpressRoute circuit as primary connectivity and a Site-to-Site VPN Gateway configured in coexistence mode as backup, both connected to the same virtual network. During a planned ExpressRoute maintenance window, traffic did not fail over to the VPN Gateway as expected until the circuit was fully down. What is the MOST likely cause?
Azure's route selection always prioritizes ExpressRoute over VPN Gateway paths as a platform behavior, independent of any BGP AS-path prepending on the VPN side — failover only occurs once the ExpressRoute path is genuinely down, which explains the observed behavior during maintenance (brief BGP convergence delay is expected, not a misconfiguration).
A financial services company wants to deploy AKS such that the Kubernetes API server has NO public IP address and is reachable only from their on-premises network over an existing ExpressRoute private peering connection. Which design satisfies this requirement?
A private AKS cluster provisions the API server with only a private IP in the cluster's VNet. Because the API server FQDN resolves via a private DNS zone, on-premises clients need DNS resolution forwarded to Azure (via Private DNS Resolver or a forwarder VM) over ExpressRoute private peering to reach it — satisfying the 'no public IP' requirement.
A company must migrate a 5TB on-premises SQL Server database to Azure with the LEAST possible downtime during cutover, while allowing the source database to remain online and serving production traffic during the majority of the migration window. Which approach BEST meets this requirement?
Azure Database Migration Service's online migration mode performs an initial full backup/restore followed by continuous transaction log replication, keeping the source database live and in sync until a brief final cutover — minimizing downtime to just the final switchover.
An IoT platform ingests millions of telemetry events per second, needs events partitioned and processed in the exact order they arrived per device, and requires the ability to reprocess the last 5 days of events for reprocessing/debugging by resetting a stream offset. Which service BEST fits this requirement?
Event Hubs is built for high-throughput event streaming, partitions events by a partition key (here, device ID) to preserve per-partition order, and supports configurable retention (up to 7 days, longer with Premium/Dedicated) that allows consumers to reset their offset and replay historical events — exactly matching the reprocessing requirement.
A development team wants to deploy several containerized microservices that must scale to zero instances when idle, scale out automatically based on custom event metrics (such as queue length) using KEDA, and require NO Kubernetes cluster management overhead. Which compute service BEST meets these requirements?
Azure Container Apps is a fully managed serverless container platform built on Kubernetes and KEDA under the hood, supporting scale-to-zero and event-driven autoscaling (including custom KEDA scalers like queue length) without exposing any Kubernetes cluster management to the user.
Ready for the real thing?
The full course: two full-length practice tests, video lessons for every exam domain, hands-on labs and detailed explanations.
undefined $34.99 with code 00651DDA8F57721374B8 — valid through Sep 23.
Get my $34.99 deal →