March/2021 Latest Braindump2go AZ-304 Exam Dumps with PDF and VCE Free Updated Today! Following are some new AZ-304 Real Exam Questions!
QUESTION 381
You are developing a sales application that will contain several Azure cloud services and will handle different components of a transaction Different cloud services will process customer orders, billing.
payment inventory, and shipping.
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using REST messages.
What should you include in the recommendation?
A. Azure Service Fabric
B. Azure Data Lake
C. Azure Notification Hubs
D. Azure Queue storage
Answer: A
QUESTION 382
You have 100 Microsoft SQL Server integration Services (SSIS) packages that are configured to use 10 on-premises SQL Server databases as their destinations.
You plan to migrate the 10 on-premises databases to Azure SQL Database.
You need to recommend a solution to host the SSlS packages in Azure.
The solution must ensure that the packages can target the SQL Database instances as their destinations.
What should you include in the recommendation?
A. SQL Server Migration Assistant (SSMA)
B. Azure Data Catalog
C. Data Migration Assistant
D. Azure Data Factory
Answer: D
QUESTION 383
You have an Azure subscription that contains an Azure Blob storage account named store1.
You have an on-premises file server named Setver1 that runs Windows Sewer 2016.
Server1 stores 500 GB of company files.
You need to store a copy of the company files from Server 1 in store1.
Which two possible Azure services achieve this goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point
A. an Azure Batch account
B. an integration account
C. an On-premises data gateway
D. an Azure Import/Export job
E. Azure Data factory
Answer: DE
QUESTION 384
You plan to deploy an application that will run at a Linux-based Docker container.
You need to recommend a solution to host the application in Azure.
The solution must meet the following requirements:
– Support a custom domain name and an associated SSL certificate.
– Scale-out automatically based on demand
– Minimize administrative effort and costs.
What should you Include in the recommendation?
A. Azure Container instances
B. Azure Kubemetes Service (AKS)
C. Azure App Service
D. an Azure virtual machine
Answer: B
QUESTION 385
You have an Azure subscription. The subscription contains an app that is hosted in the East US, Central Europe, ant) East Asia regions.
You need to recommend a data-tier solution for the app.
The solution must meet the following requirements:
– Support multiple consistency levels.
– Be able to store at least 1 TB of data.
– Be able to perform read and write operations in the Azure region that is local to the app instance
What should you Include In the recommendation?
A. a Microsoft SQL Server Always On availability group on Azure virtual machines
B. an Azure Cosmos OB database
C. an Azure SQL database in an elastic pool
D. Azure Table storage that uses geo-redundant storage (GRS1 replication
Answer: B
QUESTION 386
You manage an application instance.
The application consumes data from multiple databases. Application code references database tables using a combination of the server, database, and table name.
You need to migrate the application data to Azure.
To which two Azure services cook) you migrate the application to achieve the goal? Each correct answer presents a complete solution.
NOTE Each correct selection is worth one point
A. SQL Server Stretch Database
B. Azure SQL Database
C. SQL Server in an Azure virtual machine
D. SQL Managed instance
Answer: AD
QUESTION 387
You plan to deploy 10 applications to Azure. The applications will be deployed to two Azure Kubermetes Service (AKS) clusters. Each cluster win be deployed to a separate Azure region. The application deployment must meet the following requirements:
– Ensure that the applications remain available it a single AKS cluster fails.
– Ensure That the connection traffic over the internet is encrypted by using SSL without having to configure SSL on each container.
Which Azure service should you include in the recommendation?
A. Azure Traffic Manager
B. Azure Front Door
C. Azure Load Balancer
D. AKS ingress controller
Answer: A
QUESTION 388
The accounting department at your company migrates to a new financial accounting software. The accounting department must keep file-based database backups lot seven years lot compliance purposes, it is unlikely that the backups will be used to recover data.
You need to move the backups to Azure. The solution must minimize costs.
Where should you store the backups?
A. a Recovery Services vault
B. Azure Blob storage that uses the Cool tier
C. Azure SOL Database
D. Azure Blob storage that uses the Archive tier
Answer: B
QUESTION 389
You have multiple Anne deployments.
You plan to implement Azure Blueprints.
Which artifact types can be added to a blueprint?
A. Policy assignment Resource group, Role assignment virtual machines, and virtual networks only
B. Subscriptions. tenants. Resource group, and Key vault only
C. Subscriptions. tenants. Resource group, and Azure Active Directory only
D. Azure Resource Manager template (Subscription). Policy assignment Resource group, and Role assignment only
Answer: D
QUESTION 390
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains several administrative user accounts.
You need to recommend a solution to identify which administrative user accounts have NOT signed in during the previous 30 days.
Which service should you include in the recommendation?
A. Azure AD Identity Protection
B. Azure AD Privileged identity Management (PIM)
C. Azure Advisor
D. Azure Activity og
Answer: B
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-use-audit-log?tabs=new
QUESTION 391
A company deploys Azure Active Directory (Azure AD) Connect to synchronize identity information from their on-premises Active Directory Domain Services (AD DS) directory to their Azure AD tenant The identity information that is synchronized includes user accounts, credential hashes for authentication (password sync), and group memberships. The company plans to deploy several Windows and Linux virtual machines (VMs) to support their applications.
The VMs have the following requirements:
– Support domain join. LDAP read. LDAP rand. NTLM and Kerberos authentication and Group Policy.
– Allow users to sign in to the domain using their corporate credential and connect remotely to the VM by using Remote Desktop.
You need to support the VM deployment
Which service should you use?
A. Active Directory Federation Services (AD FS)
B. Azure AD privileged identify Management
C. Azure AD Domain Services
D. Azure Managed identity
Answer: C
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/compare-identity-solutions
QUESTION 392
You ate designing an Azure governance solution.
All Azure resources must be easily identifiable based on the following operational information environment, owner, department and cost center
You need 10 ensure that you can use the operation information when you generate reports for the Azure resources.
What should you include in the solution?
A. Azure Active Directory (Azure AD) administrative units
B. an Azure data catalog that uses the Azure REST API as a data source
C. an Azure policy that enforces tagging rules
D. an Azure management group that uses parent groups to create a hierarchy
Answer: C
QUESTION 393
You have a hybrid deployment of Azure Active Directory (Azure AD).
You need to recommend a solution to ensure that the Azure AD tenant can be managed only from the computers on your on-premises network.
What should you include in the recommendation?
A. Azure AD roles and administrators
B. Azure AD Privileged identity Management
C. A conditional access policy
D. Azure AD Application Proxy
Answer: C
QUESTION 394
You are designing a solution that will host 20 different web application.
You need to recommend a solution to secure the web applications with a firewall that protects against common web-based attacks including SQL injection, cross-site attacks, and session hijacks.
The solution must minimize costs.
Which Azure feature should you recommend?
A. Azure Application Gateway
B. Azure Firewall
C. Azure AD Application Proxy
D. Azure Bastion
Answer: A
QUESTION 395
Hotspot Question
You are planning an Azure Storage solution for sensitive datas.
The data will be accessed daily. The data set is less than 10 GB.
You need to recommend a storage solution that meets the following requirements:
– All the data written to storage must be retained for five years.
– Once the data is written, the data can only be read. Modifications and deletion must be prevented.
– After five years, the data can be deleted, but never modified.
– Data access charges must be minimized
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
QUESTION 396
Hotspot Question
You are designing a software as a service (SaaS) application that will enable Azure Active Directory (Azure AD) users to create and publish surveys. The SaaS application will have a front-end web app and a back-end web API. The web app will rely on the web API to handle updates to customer surveys.
You need to design an authorization flow for the SaaS application. The solution must meet the following requirements:
To access the back-end web API, the web app must authenticate by using OAuth 2 bearer tokens. The web app must authenticate by using the identities of individual users.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
https://docs.microsoft.com/lb-lu/azure/architecture/multitenant-identity/web-api
https://docs.microsoft.com/en-us/azure/active directory/develop/quickstart-v1-dotnet-webapi
QUESTION 397
Hotspot Question
You are designing an access policy for the sales department at your company.
Occasionally, the developers at the company must stop, start, and restart Azure virtual machines. The development team changes often.
You need to recommend a solution to provide the developers with the required access to the virtual machines. The solution must meet the following requirements:
– Provide permissions only when needed.
– Use the principle of least privilege.
– Minimize costs.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
QUESTION 398
You have 500 Azure web apps in the same Azure region.
The apps use a premium Azure Key vault for authentication. A developer reports that some authentication requests are being throttled.
You need 10 recommend a solution to increase the available throughput of the key vault the solution must minimize costs.
What should you recommend?
A. Increase me number of key vaults in the subscription
B. Configure geo-replication.
C. Change the pacing tier.
D. Configure load balancing for the apps.
Answer: C
Resources From:
1.2021 Latest Braindump2go AZ-304 Exam Dumps (PDF & VCE) Free Share:
https://www.braindump2go.com/az-304.html
2.2021 Latest Braindump2go AZ-304 PDF and AZ-304 VCE Dumps Free Share:
https://drive.google.com/drive/folders/1uaSIPxmcHkdYozBoAS9DD53SRhiqALx5?usp=sharing
3.2021 Free Braindump2go AZ-304 Exam Questions Download:
https://www.braindump2go.com/free-online-pdf/AZ-304-PDF-Dumps(381-398).pdf
Free Resources from Braindump2go,We Devoted to Helping You 100% Pass All Exams!