[March-2021]Braindump2go AZ-304 VCE AZ-304 398 Free Offered[Q381-Q398] March 19, 2021 greatexam March/2021 Latest Braindump2go AZ-304 Exam Dumps with PDF and VCE Free Updated Today! Following are some new AZ-304 Real Exam Questions! QUESTION 381You are developing a sales application that will contain several Azure cloud services and will handle different components of a transaction Different cloud services will process customer orders, billing.payment inventory, and shipping.You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using REST messages.What should you include in the recommendation? A. Azure Service FabricB. Azure Data LakeC. Azure Notification HubsD. Azure Queue storage Answer: A QUESTION 382You have 100 Microsoft SQL Server integration Services (SSIS) packages that are configured to use 10 on-premises SQL Server databases as their destinations.You plan to migrate the 10 on-premises databases to Azure SQL Database.You need to recommend a solution to host the SSlS packages in Azure. The solution must ensure that the packages can target the SQL Database instances as their destinations.What should you include in the recommendation? A. SQL Server Migration Assistant (SSMA)B. Azure Data CatalogC. Data Migration AssistantD. Azure Data Factory Answer: D QUESTION 383You have an Azure subscription that contains an Azure Blob storage account named store1.You have an on-premises file server named Setver1 that runs Windows Sewer 2016.Server1 stores 500 GB of company files.You need to store a copy of the company files from Server 1 in store1.Which two possible Azure services achieve this goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point A. an Azure Batch accountB. an integration accountC. an On-premises data gatewayD. an Azure Import/Export jobE. Azure Data factory Answer: DE QUESTION 384You plan to deploy an application that will run at a Linux-based Docker container.You need to recommend a solution to host the application in Azure.The solution must meet the following requirements:– Support a custom domain name and an associated SSL certificate.– Scale-out automatically based on demand– Minimize administrative effort and costs.What should you Include in the recommendation? A. Azure Container instancesB. Azure Kubemetes Service (AKS)C. Azure App ServiceD. an Azure virtual machine Answer: B QUESTION 385You have an Azure subscription. The subscription contains an app that is hosted in the East US, Central Europe, ant) East Asia regions.You need to recommend a data-tier solution for the app.The solution must meet the following requirements:– Support multiple consistency levels.– Be able to store at least 1 TB of data.– Be able to perform read and write operations in the Azure region that is local to the app instanceWhat should you Include In the recommendation? A. a Microsoft SQL Server Always On availability group on Azure virtual machinesB. an Azure Cosmos OB databaseC. an Azure SQL database in an elastic poolD. Azure Table storage that uses geo-redundant storage (GRS1 replication Answer: B QUESTION 386You manage an application instance.The application consumes data from multiple databases. Application code references database tables using a combination of the server, database, and table name.You need to migrate the application data to Azure.To which two Azure services cook) you migrate the application to achieve the goal? Each correct answer presents a complete solution.NOTE Each correct selection is worth one point A. SQL Server Stretch DatabaseB. Azure SQL DatabaseC. SQL Server in an Azure virtual machineD. SQL Managed instance Answer: AD QUESTION 387You plan to deploy 10 applications to Azure. The applications will be deployed to two Azure Kubermetes Service (AKS) clusters. Each cluster win be deployed to a separate Azure region. The application deployment must meet the following requirements:– Ensure that the applications remain available it a single AKS cluster fails.– Ensure That the connection traffic over the internet is encrypted by using SSL without having to configure SSL on each container.Which Azure service should you include in the recommendation? A. Azure Traffic ManagerB. Azure Front DoorC. Azure Load BalancerD. AKS ingress controller Answer: A QUESTION 388The accounting department at your company migrates to a new financial accounting software. The accounting department must keep file-based database backups lot seven years lot compliance purposes, it is unlikely that the backups will be used to recover data.You need to move the backups to Azure. The solution must minimize costs.Where should you store the backups? A. a Recovery Services vaultB. Azure Blob storage that uses the Cool tierC. Azure SOL DatabaseD. Azure Blob storage that uses the Archive tier Answer: B QUESTION 389You have multiple Anne deployments.You plan to implement Azure Blueprints.Which artifact types can be added to a blueprint? A. Policy assignment Resource group, Role assignment virtual machines, and virtual networks onlyB. Subscriptions. tenants. Resource group, and Key vault onlyC. Subscriptions. tenants. Resource group, and Azure Active Directory onlyD. Azure Resource Manager template (Subscription). Policy assignment Resource group, and Role assignment only Answer: D QUESTION 390You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains several administrative user accounts.You need to recommend a solution to identify which administrative user accounts have NOT signed in during the previous 30 days.Which service should you include in the recommendation? A. Azure AD Identity ProtectionB. Azure AD Privileged identity Management (PIM)C. Azure AdvisorD. Azure Activity og Answer: BExplanation:https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-use-audit-log?tabs=new QUESTION 391A company deploys Azure Active Directory (Azure AD) Connect to synchronize identity information from their on-premises Active Directory Domain Services (AD DS) directory to their Azure AD tenant The identity information that is synchronized includes user accounts, credential hashes for authentication (password sync), and group memberships. The company plans to deploy several Windows and Linux virtual machines (VMs) to support their applications.The VMs have the following requirements:– Support domain join. LDAP read. LDAP rand. NTLM and Kerberos authentication and Group Policy.– Allow users to sign in to the domain using their corporate credential and connect remotely to the VM by using Remote Desktop.You need to support the VM deploymentWhich service should you use? A. Active Directory Federation Services (AD FS)B. Azure AD privileged identify ManagementC. Azure AD Domain ServicesD. Azure Managed identity Answer: CExplanation:https://docs.microsoft.com/en-us/azure/active-directory-domain-services/compare-identity-solutions QUESTION 392You ate designing an Azure governance solution.All Azure resources must be easily identifiable based on the following operational information environment, owner, department and cost centerYou need 10 ensure that you can use the operation information when you generate reports for the Azure resources.What should you include in the solution? A. Azure Active Directory (Azure AD) administrative unitsB. an Azure data catalog that uses the Azure REST API as a data sourceC. an Azure policy that enforces tagging rulesD. an Azure management group that uses parent groups to create a hierarchy Answer: C QUESTION 393You have a hybrid deployment of Azure Active Directory (Azure AD).You need to recommend a solution to ensure that the Azure AD tenant can be managed only from the computers on your on-premises network.What should you include in the recommendation? A. Azure AD roles and administratorsB. Azure AD Privileged identity ManagementC. A conditional access policyD. Azure AD Application Proxy Answer: C QUESTION 394You are designing a solution that will host 20 different web application.You need to recommend a solution to secure the web applications with a firewall that protects against common web-based attacks including SQL injection, cross-site attacks, and session hijacks.The solution must minimize costs.Which Azure feature should you recommend? A. Azure Application GatewayB. Azure FirewallC. Azure AD Application ProxyD. Azure Bastion Answer: A QUESTION 395Hotspot QuestionYou are planning an Azure Storage solution for sensitive datas.The data will be accessed daily. The data set is less than 10 GB.You need to recommend a storage solution that meets the following requirements:– All the data written to storage must be retained for five years.– Once the data is written, the data can only be read. Modifications and deletion must be prevented.– After five years, the data can be deleted, but never modified.– Data access charges must be minimizedWhat should you recommend? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Answer: QUESTION 396Hotspot QuestionYou are designing a software as a service (SaaS) application that will enable Azure Active Directory (Azure AD) users to create and publish surveys. The SaaS application will have a front-end web app and a back-end web API. The web app will rely on the web API to handle updates to customer surveys.You need to design an authorization flow for the SaaS application. The solution must meet the following requirements:To access the back-end web API, the web app must authenticate by using OAuth 2 bearer tokens. The web app must authenticate by using the identities of individual users.What should you include in the solution? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Answer: Explanation:https://docs.microsoft.com/lb-lu/azure/architecture/multitenant-identity/web-apihttps://docs.microsoft.com/en-us/azure/active directory/develop/quickstart-v1-dotnet-webapi QUESTION 397Hotspot QuestionYou are designing an access policy for the sales department at your company.Occasionally, the developers at the company must stop, start, and restart Azure virtual machines. The development team changes often.You need to recommend a solution to provide the developers with the required access to the virtual machines. The solution must meet the following requirements:– Provide permissions only when needed.– Use the principle of least privilege.– Minimize costs.What should you include in the recommendation? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Answer: QUESTION 398You have 500 Azure web apps in the same Azure region.The apps use a premium Azure Key vault for authentication. A developer reports that some authentication requests are being throttled.You need 10 recommend a solution to increase the available throughput of the key vault the solution must minimize costs.What should you recommend? A. Increase me number of key vaults in the subscriptionB. Configure geo-replication.C. Change the pacing tier.D. Configure load balancing for the apps. Answer: C Resources From: 1.2021 Latest Braindump2go AZ-304 Exam Dumps (PDF & VCE) Free Share:https://www.braindump2go.com/az-304.html 2.2021 Latest Braindump2go AZ-304 PDF and AZ-304 VCE Dumps Free Share:https://drive.google.com/drive/folders/1uaSIPxmcHkdYozBoAS9DD53SRhiqALx5?usp=sharing 3.2021 Free Braindump2go AZ-304 Exam Questions Download:https://www.braindump2go.com/free-online-pdf/AZ-304-PDF-Dumps(381-398).pdf Free Resources from Braindump2go,We Devoted to Helping You 100% Pass All Exams!