Printable & Easy to Use AZ-304 Dumps 100% Same Q&A In Your Real Exam [Q62-Q83]

Share

Printable & Easy to Use AZ-304 Dumps 100% Same Q&A In Your Real Exam

AZ-304 Practice Test Give You First Time Success with 100% Money Back Guarantee!


What are the main details of the Microsoft AZ-304 exam?

Microsoft AZ-304: Microsoft Azure Architect Design is a 150-minute test. The number of questions varies from one exam to another, but the students can expect between 40 and 60 items in their test. To take this certification exam, you must first register with Pearson VUE and pay the fee of $165. This amount is for a single delivery of the test, which means that if a candidate does not pass the exam at the first attempt, he or she will have to pay another fee to retake it. Microsoft AZ-304 is available in English, Korean, Simplified Chinese, and Japanese.


Who is the target audience for the Microsoft AZ-304 exam?

The applicants for this certification exam are the Azure Solution Architects with intermediate-level skills in the domain of Azure administration. These professionals have a good understanding of DevOps processes and Azure development. They are also responsible for translating the business needs into scalable, reliable, and secure Cloud solutions. Additionally, they can advise the stakeholders and collaborate with the Cloud DBAs and Cloud administrators to implement solutions.

 

NEW QUESTION 62
You are designing an order processing system in Azure that will contain the Azure resources shown in the following table.

The order processing system will have the following transaction flow:
* A customer will place an order by using App1.
* When the order is received, App1 will generate a message to check for product availability at vendor 1
* and vendor 2.
* An integration component will process the message, and then trigger either Function1 or Function2 depending on the type of order.
* Once a vendor confirms the product availability, a status message for App1 will be generated by Function1 or Function2.
* All the steps of the transaction will be logged to storage1.
Which type of resource should you recommend for the integration component?
D18912E1457D5D1DDCBD40AB3BF70D5D
Which type of resource should you recommend for the integration component?

  • A. an Azure Event Grid domain
  • B. an Azure Data Factory pipeline
  • C. an Azure Event Hubs capture
  • D. an Azure Service Bus queue

Answer: B

Explanation:
Explanation
A data factory can have one or more pipelines. A pipeline is a logical grouping of activities that together perform a task.
The activities in a pipeline define actions to perform on your data.
Data Factory has three groupings of activities: data movement activities, data transformation activities, and control activities.
Azure Functions is now integrated with Azure Data Factory, allowing you to run an Azure function as a step in your data factory pipelines.
Reference:
https://docs.microsoft.com/en-us/azure/data-factory/concepts-pipelines-activities

 

NEW QUESTION 63
Your organization has developed and deployed several Azure App Service Web and API applications. The applications use Azure Key Vault to store several authentication, storage account, and data encryption keys.
Several departments have the following requests to support the applications:

You need to recommend the appropriate Azure service for each department request.
What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

 

NEW QUESTION 64
You configure the Diagnostics settings for an Azure SQL database as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

 

NEW QUESTION 65
Your company uses Microsoft System Center Service Manager on its on-premises network.
You plan to deploy several services to Azure.
You need to recommend a solution to push Azure service hearth alerts to Service Manager. What should you include in the recommendation?

  • A. IT Service Management Connector (ITSM)
  • B. Azure Event Hubs
  • C. Azure Notification Hubs
  • D. Application Insights Connector

Answer: A

 

NEW QUESTION 66
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.
Several VMs are exhibiting network connectivity issues.
You need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.
Solution: Use the Azure Advisor to analyze the network traffic.
Does the solution meet the goal?

  • A. No
  • B. Yes

Answer: A

 

NEW QUESTION 67
To meet the authentication requirements of Fabrikam, what should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Topic 2, Contoso, Ltd
Information Security Requirement
The IT security team wants to ensure that identity management n performed by using Active Directory. Password hashes must be stored on premises only.
Access to all business-critical systems must rely on Active Directory credentials. Any suspicious authentication attempts must trigger multi-factor authentication prompt automatically Legitimate users must be able to authenticate successfully by using multi-factor authentication.
Planned Changes
Contoso plans to implement the following changes:
* Migrate the payment processing system to Azure.
* Migrate the historical transaction data to Azure Cosmos DB to address the performance issues.
Migration Requirements
Contoso identifies the following general migration requirements:
Infrastructure services must remain available if a region or a data center fails. Failover must occur without any administrative intervention
* Whenever possible. Azure managed serves must be used to management overhead
* Whenever possible, costs must be minimized.
Contoso identifies the following requirements for the payment processing system:
* If a data center fails, ensure that the payment processing system remains available without any administrative intervention. The middle-tier and the web front end must continue to operate without any additional configurations-
* If that the number of compute nodes of the from -end and the middle tiers of the payment processing system can increase or decrease automatically based on CPU utilization.
* Ensure that each tier of the payment processing system is subject to a Service level Agreement (SLA) of 9959 percent availability
* Minimize the effort required to modify the middle tier API and the back-end tier of the payment processing system.
* Generate alerts when unauthorized login attempts occur on the middle-tier virtual machines.
* Insure that the payment processing system preserves its current compliance status.
* Host the middle tier of the payment processing system on a virtual machine.
Contoso identifies the following requirements for the historical transaction query system:
* Minimize the use of on-premises infrastructure service.
* Minimize the effort required to modify the .NET web service querying Azure Cosmos DB.
* If a region fails, ensure that the historical transaction query system remains available without any administrative intervention.
Current Issue
The Contoso IT team discovers poor performance of the historical transaction query as the queries frequently cause table scans.
Information Security Requirements
The IT security team wants to ensure that identity management is performed by using Active Directory. Password hashes must be stored on-premises only.
Access to all business-critical systems must rely on Active Directory credentials. Any suspicious authentication attempts must trigger a multi-factor authentication prompt automatically. legitimate users must be able to authenticate successfully by using multi-factor authentication.

 

NEW QUESTION 68
You are designing a network connectivity strategy for a new Azure subscription. You identify the following requirements:
* The Azure virtual machines on a subnet named Subnet1 must be accessible only from the computers in your London office.
* Engineers require access to the Azure virtual machine on a subnet named Subnet2 over the Internet on a specific TCP/IP management port.
* The Azure virtual machines in the West Europe Azure region must be able to communicate on all ports to the Azure virtual machines in the North Europe Azure region.
You need to recommend which components must be used to meet the requirements. The solution must minimize costs and administrative effort whenever possible.
What should you include in the recommendation? To answer, drag the appropriate components to the correct requirements. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

 

NEW QUESTION 69
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an on-premises Active Directory Domain Services (AD DS) domain and an established Azure Active Directory (Azure AD) environment.
Your company would like users to be automatically signed in to cloud apps when they are on their corporate desktops that are connected to the corporate network.
You need to enable single sign-on (SSO) for company users.
Solution: Configure an AD DS server in an Azure virtual machine (VM). Configure bidirectional replication.
Does the solution meet the goal?

  • A. No
  • B. Yes

Answer: A

 

NEW QUESTION 70
You migrate App1 to Azure.
You need to ensure that the data storage for App1 meets the security and compliance requirement What should you do?

  • A. Modify the access level of the blob service.
  • B. Create an access policy for the blob
  • C. Implement Azure resource locks.
  • D. Create Azure RBAC assignments.

Answer: D

Explanation:
Explanation
Azure Active Directory (Azure AD) authorizes access rights to secured resources through Azure role-based access control (Azure RBAC). Azure Storage defines a set of Azure built-in roles that encompass common sets of permissions used to access blob data.
When an Azure role is assigned to an Azure AD security principal, Azure grants access to those resources for that security principal. An Azure AD security principal may be a user, a group, an application service principal, or a managed identity for Azure resources.
Scenario:
To access the resources in Azure, App1 must use the managed identity of the virtual machines that will host the app.
The Litware.com tenant contains a custom Azure role-based access control (Azure RBAC) role named Role1 that grants the DataActions read permission to the blobs and files in Azure Storage.
Litware identifies the following security and compliance requirements:
* On-premises users and services must be able to access the Azure Storage account that will host the data in App1.
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/assign-azure-role-data-access

 

NEW QUESTION 71
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Storage v2 account named Storage1.
You plan to archive data to Storage1.
You need to ensure that the archived data cannot be deleted for five years. The solution must prevent administrators from deleting the data.
Solution: You create a file share, and you configure an access policy.
Does this meet the goal?

  • A. No
  • B. Yes

Answer: A

Explanation:
Explanation
Instead of a file share, an immutable Blob storage is required.
Time-based retention policy support: Users can set policies to store data for a specified interval. When a time-based retention policy is set, blobs can be created and read, but not modified or deleted. After the retention period has expired, blobs can be deleted but not overwritten.
Note: Set retention policies and legal holds
1. Create a new container or select an existing container to store the blobs that need to be kept in the immutable state. The container must be in a general-purpose v2 or Blob storage account.
2. Select Access policy in the container settings. Then select Add policy under Immutable blob storage.
3. To enable time-based retention, select Time-based retention from the drop-down menu.
4. Enter the retention interval in days (acceptable values are 1 to 146000 days).
References:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutable-storage
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutability-policies-manage

 

NEW QUESTION 72
You manage a network that includes an on-premises Active Directory Domain Services domain and an Azure Active Directory (Azure AD).
Employees are requires to use different accounts when using on-premises or cloud resources. You must recommend a solution that lets employees sign in to all company resources by using a single account. The solution must implement an identity provider.
You need provide guidance on the different identity providers.
How should you describe each identity provider? To answer, select the appropriate description from each list in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Box1: User management occurs on-premises. Azure AD authenticates employees by using on-premises passwords.
Azure AD Domain Services for hybrid organizations
Organizations with a hybrid IT infrastructure consume a mix of cloud resources and on-premises resources.
Such organizations synchronize identity information from their on-premises directory to their Azure AD tenant. As hybrid organizations look to migrate more of their on-premises applications to the cloud, especially legacy directory-aware applications, Azure AD Domain Services can be useful to them.
Example: Litware Corporation has deployed Azure AD Connect, to synchronize identity information from their on-premises directory to their Azure AD tenant. The identity information that is synchronized includes user accounts, their credential hashes for authentication (password hash sync) and group memberships.

User accounts, group memberships, and credentials from Litware's on-premises directory are synchronized to Azure AD via Azure AD Connect. These user accounts, group memberships, and credentials are automatically available within the managed domain.
Box 2: User management occurs on-premises. The on-promises domain controller authenticates employee credentials.
You can federate your on-premises environment with Azure AD and use this federation for authentication and authorization. This sign-in method ensures that all user authentication occurs on-premises.

References:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-overview
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed

 

NEW QUESTION 73
You need to recommend a solution for protecting the content of the payment processing system.
What should you include in the recommendation?

  • A. Azure Storage Service Encryption
  • B. Always Encrypted with deterministic encryption
  • C. Transparent Data Encryption (TDE)
  • D. Always Encrypted with randomized encryption

Answer: B

Explanation:
Topic 1, Contoso, Ltd
Planned Changes
Contoso plans to implement the following changes:
* Migrate the payment processing system to Azure.
* Migrate the historical transaction data to Azure Cosmos DB to address the performance issues.
Migration Requirements
Contoso identifies the following general migration requirements:
Infrastructure services must remain available if a region or a data center fails. Failover must occur without any administrative intervention
* Whenever possible. Azure managed serves must be used to management overhead
* Whenever possible, costs must be minimized.
Contoso identifies the following requirements for the payment processing system:
* If a data center fails, ensure that the payment processing system remains available without any administrative intervention. The middle-tier and the web front end must continue to operate without any additional configurations-
* If that the number of compute nodes of the from -end and the middle tiers of the payment processing system can increase or decrease automatically based on CPU utilization.
* Ensure that each tier of the payment processing system is subject to a Service level Agreement (SLA) of 9959 percent availability
* Minimize the effort required to modify the middle tier API and the back-end tier of the payment processing system.
* Generate alerts when unauthorized login attempts occur on the middle-tier virtual machines.
* Insure that the payment processing system preserves its current compliance status.
* Host the middle tier of the payment processing system on a virtual machine.
Contoso identifies the following requirements for the historical transaction query system:
* Minimize the use of on-premises infrastructure service.
* Minimize the effort required to modify the .NET web service querying Azure Cosmos DB.
* If a region fails, ensure that the historical transaction query system remains available without any administrative intervention.
Current Issue
The Contoso IT team discovers poor performance of the historical transaction query as the queries frequently cause table scans.
Information Security Requirements
The IT security team wants to ensure that identity management is performed by using Active Directory. Password hashes must be stored on-premises only.
Access to all business-critical systems must rely on Active Directory credentials. Any suspicious authentication attempts must trigger a multi-factor authentication prompt automatically. legitimate users must be able to authenticate successfully by using multi-factor authentication.

 

NEW QUESTION 74
You need to recommend a backup solution for the data store of the payment processing system.
What should you include in the recommendation?

  • A. Microsoft System Center Data Protection Manager (DPM)
  • B. Azure SQL long-term backup retention
  • C. Azure Backup Server
  • D. Azure Managed Disks

Answer: B

 

NEW QUESTION 75
You plan to create an Azure environment that will have a root management group and five child and five child management groups. Each child management group will contains five Azure subscriptions. You plan to have between 10 and 30 resource group in each subscription.
Ensure that you can update RBAC role assignment all the subscription and resource groups.
Minimize administrative effort.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

 

NEW QUESTION 76
You are designing a cost-optimized solution that uses Azure Batch to run two types of jobs on Linux nodes.
The first job type will consist of short-running tasks for a development environment. The second jot type will consist of long-running Message Passing Interface (MPI) applications for a production environment that requires timely job completion.
You need to recommend the pool type and node type for each job type. The solution must minimize compute charges and leverage Azure Hybrid Benefit whenever possible.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Box 1: User subscription and low-priority virtual machines
Azure Batch offers low-priority virtual machines (VMs) to reduce the cost of Batch workloads. Low-priority VMs make new types of Batch workloads possible by enabling a large amount of compute power to be used for a very low cost.
Some examples of batch processing use cases well suited to use low-priority VMs are:
* Development and testing: In particular, if large-scale solutions are being developed, significant savings can be realized. All types of testing can benefit, but large-scale load testing and regression testing are great uses.
* Supplementing on-demand capacity.
* Flexible job execution time.
Box 2: Batch service and dedicate virtual machines
Reference:
https://docs.microsoft.com/en-us/azure/batch/batch-low-pri-vms

 

NEW QUESTION 77
You have the application architecture shown in the following exhibit.

Use the drop-down menus to select choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

References:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-monitoring

 

NEW QUESTION 78
You need to recommend a solution for configuring the Azure Multi-Factor Authentication (MFA) settings.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

References:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-mfa-policy

 

NEW QUESTION 79
A company has an existing web application that runs on virtual machines (VMs) in Azure.
You need to ensure that the application is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruption to the code for the existing web application.
What should you recommend? To answer, drag the appropriate values to the correct items. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Box 1: Azure Application Gateway
Azure Application Gateway provides an application delivery controller (ADC) as a service. It offers various layer 7 load-balancing capabilities for your applications.
Box 2: Web Application Firwewall (WAF)
Application Gateway web application firewall (WAF) protects web applications from common vulnerabilities and exploits.
This is done through rules that are defined based on the OWASP core rule sets 3.0 or 2.2.9.
There are rules that detects SQL injection attacks.
References:
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq
https://docs.microsoft.com/en-us/azure/application-gateway/waf-overview

 

NEW QUESTION 80
You are designing an Azure resource deployment that will use Azure Resource Manager templates. The deployment will use Azure Key Vault to store secrets.
You need to recommend a solution to meet the following requirements:
Prevent the IT staff that will perform the deployment from retrieving the secrets directly from Key Vault.
Use the principle of least privilege.
Which two actions should you recommend? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. Assign the Key Vault Contributor role to the IT staff.
  • B. Create a Key Vault access policy that allows all get key permissions, get secret permissions, and get certificate permissions.
  • C. Create a Key Vault access policy that allows all list key permissions, list secret permissions, and list certificate permissions.
  • D. Assign the IT staff a custom role that includes the Microsoft.KeyVault/Vaults/Deploy/Action permission.
  • E. From Access policies in Key Vault, enable access to the Azure Resource Manager for template deployment.

Answer: D,E

Explanation:
B: To access a key vault during template deployment, set enabledForTemplateDeployment on the key vault to true.
D: The user who deploys the template must have the Microsoft.KeyVault/vaults/deploy/action permission for the scope of the resource group and key vault.
Incorrect Answers:
E: To grant access to a user to manage key vaults, you assign a predefined key vault Contributor role to the user at a specific scope.
If a user has Contributor permissions to a key vault management plane, the user can grant themselves access to the data plane by setting a Key Vault access policy. You should tightly control who has Contributor role access to your key vaults. Ensure that only authorized persons can access and manage your key vaults, keys, secrets, and certificates.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/key-vault-parameter
https://docs.microsoft.com/en-us/azure/key-vault/general/overview-security

 

NEW QUESTION 81
Your company identifies the following business continuity and disaster recovery objectives for virtual machines that host sales, finance, and reporting application in the company's on-premises data center.
*The finance application requires that data be retained for seven years. In the event of a disaster, the application must be able to run from Azure. The recovery in objective (RTO) is 10 minutes,
* The reporting application must be able to recover point in-time data al a daily granularity. The RTO is eight hours.
*The sales application must be able to fail over to second on-premises data center.
You need to recommend which Azure services meet the business community and disaster recovery objectives.
The solution must minimize costs.
What should you recommend for each application? To answer, drag the appropriate services to the correct application. Each service may be used owe. More than once not at an You may need to drag the spin bar between panes or scroll 10 view content.

Answer:

Explanation:

Explanation
1) Sales: Azure Site Recovery only
2) Finance: Azure Site Recovery and Azure Backup
3) Reporting: Azure Backup only

 

NEW QUESTION 82
Your on-premises network contains a server named Server1 that runs an ASP.NET application named App1.
You have a hybrid deployment of Azure Active Directory (Azure AD).
You need to recommend a solution to ensure that users sign in by using their Azure AD account and Azure Multi-Factor Authentication (MFA) when they connect to App1 from the internet.
Which three Azure services should you recommend be deployed and configured in sequence? To answer, move the appropriate services from the list of services to the answer area and arrange them in the correct order.

Answer:

Explanation:

 

NEW QUESTION 83
......


Microsoft AZ-304 Exam Syllabus Topics:

TopicDetails

Design Monitoring (10-15%)

Design for cost optimization-recommend a solution for cost management and cost reporting
-recommend solutions to minimize costs
Design a solution for logging and monitoring-determine levels and storage locations for logs
-plan for integration with monitoring tools including Azure Monitor and Azure Sentinel
-recommend appropriate monitoring tool(s) for a solution
-choose a mechanism for event routing and escalation
-recommend a logging solution for compliance requirements

Design Identity and Security (25-30%)

Design authentication-recommend a solution for single-sign on
-recommend a solution for authentication
-recommend a solution for Conditional Access, including multi-factor authentication
-recommend a solution for network access authentication
-recommend a solution for a hybrid identity including Azure AD Connect, Azure ADConnect cloud sync and Azure AD Connect Health
-recommend a solution for user self-service
-recommend and implement a solution for B2B integration
- NOT: federation with ADFS or PingFederate
Design authorization-choose an authorization approach
-recommend a hierarchical structure that includes management groups, subscriptions and resource groups
- recommend an access management solution including RBAC policies, access reviews, role assignments, Privileged Identity Management (PIM), Azure AD Identity Protection, Just In Time (JIT) access
Design governance-recommend a strategy for tagging
-recommend a solution for using Azure Policy
-recommend a solution for using Azure Blueprints
- recommend a solution that leverages Azure Resource Graph
Design security for applications-recommend a solution that includes Key Vault
-recommend a solution that includes Managed Identities
-recommend a solution for integrating applications into Azure AD

Design Data Storage (15-20%)

Design a solution for databases-select an appropriate data platform based on requirements
-recommend database service tier sizing
-recommend a solution for database scalability
-recommend a solution for encrypting data at rest, data in transmission, and data in use
Design data integration-recommend a data flow to meet business requirements
- recommend a solution for data integration, including Azure Data Factory, Azure Data bricks, Azure Data Lake, Azure Synapse Analytics
Select an appropriate storage account-choose between storage tiers
-recommend a storage access solution
-recommend storage management tools

Design Business Continuity (10-15%)

Design a solution for backup and recovery- recommend a recovery solution for Azure hybrid and on-premises workloads that meets recovery objectives (RTO, RLO, RPO)
-design and Azure Site Recovery solution
-recommend a solution for recovery in different regions
- recommend a solution for geo-redundancy of workloads
-recommend a solution for Azure Backup management
-design a solution for data archiving and retention
Design for high availability- recommend a solution for application and workload redundancy, including compute, database, and storage
-recommend a solution for autoscaling
-identify resources that require high availability
-identify storage types for high availability

Design Infrastructure (25-30%)

Design a compute solution-recommend a solution for compute provisioning
- determine appropriate compute technologies, including virtual machines, App Services, Service Fabric, Azure Functions, Windows Virtual Desktop, Batch, HPC and containers
-recommend a solution for containers
-recommend a solution for automating compute management
Design a network solution- recommend a network architecture (hub and spoke, Virtual WAN)
-recommend a solution for network addressing and name resolution
-recommend a solution for network provisioning
-recommend a solution for network security including private Link, firewalls, gateways, network segmentation (perimeter networks/DMZs/NVAs)
- recommend a solution for network connectivity to the Internet, on-premises networks, and other Azure virtual networks
-recommend a solution for automating network management
-recommend a solution for load balancing and traffic routing

 

Fully Updated Free Actual Microsoft AZ-304 Exam Questions: https://www.pass4sures.top/Azure-Solutions-Architect-Expert/AZ-304-testking-braindumps.html