Home/Directory/azure

azure Practice Questions

Page 6 of 15 (1456 total questions)

You are developing a high-throughput shopping cart service using Azure Cosmos DB for NoSQL. The service needs to update a customer's shopping cart document by adding an item. To ensure high efficiency, minimize RU/s consumption, and prevent concurrent modification conflicts without loading the entire document first, which feature should you use?
View Question & Answer ➔
You need to grant temporary, time-limited access to specific files stored in a private Azure Blob Storage container to third-party clients. Security requirements dictate that you must be able to instantly revoke this access at any time before the expiration period if a client's subscription is canceled. What is the most secure and manageable way to implement this?
View Question & Answer ➔
You are hosting a REST API on Azure App Service. To comply with corporate security standards, the API must only accept requests from a single external partner company's static public IP address. The solution must run at the platform level to prevent invalid traffic from consuming compute resources in your App Service plan. How should you configure this?
View Question & Answer ➔
You are designing an Azure Function workflow that coordinates a complex, long-running order processing system. The workflow must execute three tasks in sequence (Validate Order, Charge Card, Ship Item). If the 'Charge Card' step fails, it must execute a compensating transaction to void the order. The orchestrator must be able to pause its execution without consuming billing resources while waiting for tasks to complete. Which feature should you use?
View Question & Answer ➔
Your backend services return responses in XML format, but your mobile application client requires JSON payloads. You need to perform this translation at the API gateway layer to avoid modifying the legacy backend service code. Which policy and policy section in Azure API Management (APIM) should you use?
View Question & Answer ➔
You are designing an IoT ingestion pipeline using Azure Event Hubs to process real-time telemetry from 50,000 devices. Downstream services need to process events in the order they were sent by each device. How should you ensure that all telemetry events from a specific device are sent to and processed in sequence from the same partition?
View Question & Answer ➔
Your web application uses Application Insights for monitoring. You want to enrich all collected telemetry (requests, exceptions, dependencies) with custom metadata, such as the current deployment slot name and the user's subscription tier, so that you can filter performance metrics in Log Analytics. Which Application Insights extensibility point should you implement?
View Question & Answer ➔
You are building a microservices architecture. You need a data sync solution where changes to documents in your primary Azure Cosmos DB database automatically trigger a downstream search index service to update its records in real-time. Which Cosmos DB feature allows you to listen for changes without polling the database?
View Question & Answer ➔
You are developing a secure multi-tier web application consisting of a front-end single-page application (SPA) and a backend web API. The SPA must acquire a secure token to call the backend web API on behalf of the signed-in user. Which OAuth 2.0 flow is recommended for the SPA to obtain this access token?
View Question & Answer ➔
You are building an IoT solution where 50,000 devices must send telemetry every 30 seconds. Your IoT Hub is receiving messages but you are hitting throttling errors. Which action should you take first?
View Question & Answer ➔
A field device needs to receive configuration updates from the cloud and report its current state back. The configuration properties are set by the backend and the device reports its actual state. Which IoT Hub feature is designed for this pattern?
View Question & Answer ➔
You need to invoke a firmware update on a specific device immediately and wait for a response to confirm it started. The operation must complete within 30 seconds or be considered failed. Which IoT Hub feature should you use?
View Question & Answer ➔
Your IoT solution requires sending a firmware binary to 10,000 devices simultaneously over the next 24 hours. Each device must receive the same file. Which IoT Hub capability is designed for this at-scale operation?
View Question & Answer ➔
You have an Azure IoT Edge device deployed at a factory. A custom module processes sensor data and should forward only anomaly alerts to IoT Hub to minimize bandwidth. Normal readings should be discarded at the edge. How do you configure this routing?
View Question & Answer ➔
An IoT Edge device in a remote oil field has intermittent internet connectivity. You need the device to continue collecting and processing sensor data during outages and sync to the cloud when connectivity is restored. Which IoT Edge capability enables this?
View Question & Answer ➔
You need to deploy a third-party machine learning model to IoT Edge devices for local inferencing. The model is packaged as a Docker container. Which component of IoT Edge is responsible for managing the lifecycle of this container on the device?
View Question & Answer ➔
You need legacy devices without native IoT SDK support to connect to IoT Hub through an IoT Edge device. Each legacy device should appear as a separate device identity in IoT Hub. Which IoT Edge gateway pattern should you implement?
View Question & Answer ➔
You are manufacturing IoT devices that will be shipped globally and deployed in customer environments. You do not know which IoT Hub the device should connect to at manufacture time. You need zero-touch provisioning at customer deployment. Which service enables this?
View Question & Answer ➔
You are using Azure DPS with X.509 certificate attestation. You need to provision all devices from the same manufacturer into a specific IoT Hub, while devices from a different manufacturer go to a different IoT Hub. How should you configure DPS?
View Question & Answer ➔
A device in your fleet was provisioned via DPS but needs to be moved to a different IoT Hub due to a regional migration. You want to reprovision the device without replacing its firmware. What is the correct DPS approach?
View Question & Answer ➔
You are building a smart building solution using Azure Digital Twins. You need to model the physical hierarchy: Building → Floor → Room → Sensor. Each room must know its current temperature from its sensors. Which Azure Digital Twins concept represents this hierarchy?
View Question & Answer ➔
Your Azure Digital Twins solution receives real-time temperature readings from IoT Hub. You need to update the temperature property of the corresponding Room twin automatically when a device sends telemetry. What is the recommended architecture?
View Question & Answer ➔
IoT sensor data arrives in Azure IoT Hub. You need to detect when the average temperature across all sensors exceeds 75°C for any 5-minute window, and send an alert immediately when that threshold is crossed. Which Azure service should you use?
View Question & Answer ➔
Your Stream Analytics job processes IoT Hub telemetry. You notice that out-of-order events are causing incorrect window calculations because some sensors report data with a delay of up to 10 seconds. How should you configure Stream Analytics to handle this?
View Question & Answer ➔
You are ingesting telemetry from 1 million IoT devices using Azure Event Hubs. You need to ensure that all telemetry from the same device is always processed by the same consumer in order. How should you configure Event Hubs?
View Question & Answer ➔
Your IoT solution uses Event Hubs to ingest device telemetry. A downstream processing service needs to re-read all telemetry from the past 3 days to replay a failed batch analytics job. Which Event Hubs feature supports this?
View Question & Answer ➔
You need to authenticate IoT devices to IoT Hub in a way that each device has a unique cryptographic credential and a compromised device credential can be revoked without affecting other devices. Which authentication method should you use?
View Question & Answer ➔
Microsoft Defender for IoT has flagged anomalous communication patterns from one of your IoT Hub-connected devices. You need to investigate the device without disrupting the rest of your fleet. What is the fastest action to isolate the device?
View Question & Answer ➔
You need to monitor the connection state of all devices in your IoT Hub fleet and receive an alert when a device that was previously connected goes offline unexpectedly. Which approach should you use?
View Question & Answer ➔
Your IoT Hub is dropping messages and you need to understand why. You enable resource logs and find messages with the 'DeviceNotFound' error. You also see 'MessageSizeExceeded' errors for some devices. What do these indicate?
View Question & Answer ➔
Your IoT devices need to upload 50 MB diagnostic log files to the cloud periodically. Using IoT Hub device-to-cloud messages is not suitable due to the 256 KB size limit. What is the correct IoT Hub capability for this?
View Question & Answer ➔
You are deploying an IoT Edge solution to 500 devices in a factory. You need to update the deployment manifest for all devices simultaneously whenever a new module version is released. Which approach scales for 500 devices without manual per-device updates?
View Question & Answer ➔
You are using DPS with TPM attestation. A device's TPM chip fails and must be replaced. The replacement TPM has a different endorsement key. You need to re-provision the device to the same IoT Hub and preserve its device ID and twin data. What steps are required?
View Question & Answer ➔
Your IoT Hub receives messages from both temperature sensors and pressure sensors. Temperature messages have a custom property 'sensorType=temperature'. You need to route temperature messages to Azure Blob Storage and pressure messages to a Service Bus Queue, without duplicating messages. How do you configure this?
View Question & Answer ➔
A developer is setting up an individual enrollment in Azure DPS using TPM attestation. What information must be obtained from the physical TPM chip on the device to register it?
View Question & Answer ➔
You need to deploy an IoT Edge custom module that requires access to a hardware device (e.g., /dev/ttyUSB0 for serial communication) on the host gateway. How should you configure this module in the deployment manifest?
View Question & Answer ➔
A fleet of IoT devices is deployed behind a strict corporate firewall that only allows outbound traffic on ports 80 and 443. Which protocol configuration should you use in the Device SDK?
View Question & Answer ➔
You need to implement a dynamic allocation policy in DPS to assign devices to the nearest geographical IoT Hub based on a real-time lookup in a custom database. Which allocation policy should you configure?
View Question & Answer ➔
You are configuring a nested IoT Edge device hierarchy for a factory (ISA-95 alignment). The lower-level Edge devices have no direct internet access and must route all traffic through a parent Edge device. How do you configure the child Edge device's connection?
View Question & Answer ➔
You want to automatically append metadata such as the device's physical location (stored in the Device Twin tags) to every telemetry message before it is routed to Azure Cosmos DB. Which feature should you configure?
View Question & Answer ➔
You are provisioning a large fleet of low-cost sensors using DPS symmetric key attestation. What is the security best practice for managing the symmetric keys in the device firmware?
View Question & Answer ➔
You are using Stream Analytics to calculate the average temperature of a sensor over a moving 10-minute window, where a calculation is triggered every time a new event arrives. Which window type should you use?
View Question & Answer ➔
You run iotedge check on an IoT Edge device and discover that the Edge Agent is unable to download a custom module image from your registry. Where must the container registry credentials be configured to resolve this?
View Question & Answer ➔
You have configured several message routes in IoT Hub to direct telemetry to Blob Storage and Event Hubs. However, you notice that messages not matching any route criteria are being dropped. How can you preserve these messages?
View Question & Answer ➔
You need to monitor the flow of individual telemetry messages through IoT Hub and downstream Azure resources to identify performance bottlenecks and track latency. Which feature should you use?
View Question & Answer ➔
You are decommissioning an IoT device. You want to ensure it can never reconnect to your IoT Hub or reprovision through DPS in the future. What is the correct sequence of actions?
View Question & Answer ➔
You need to query the Azure IoT Hub registry to find all devices tagged with department 'assembly' that have reported a status of 'offline' in their device twin. Which query syntax should you use?
View Question & Answer ➔
You need to update the IoT Edge runtime version (edgeAgent and edgeHub) across a fleet of production edge devices with the least manual intervention. How should you perform this update?
View Question & Answer ➔
A Stream Analytics job processing device telemetry is showing high latency and a large backlog. Which metric should you monitor, and what scaling action is appropriate?
View Question & Answer ➔
You are deploying security agents on Linux IoT devices to monitor process creations, active network connections, and login attempts for security auditing. Which Microsoft Defender for IoT component should you install?
View Question & Answer ➔
You need to trigger an emergency shutdown on a smart valve connected to IoT Hub. The operator requires immediate feedback confirming whether the valve has successfully shut down. Which communication pattern should you use?
View Question & Answer ➔
You are setting up a custom allocation policy for DPS. What must your custom allocation Webhook (Azure Function) return in its HTTP response payload to specify the target hub?
View Question & Answer ➔
You are deploying an IoT Edge transparent gateway. Downstream leaf devices must connect securely to this gateway. What must be installed on the downstream leaf devices to establish trust?
View Question & Answer ➔
You want to restrict access to your Azure IoT Hub so that only devices originating from a specific partner network IP range can connect, blocking all other public traffic. What should you configure?
View Question & Answer ➔
A Stream Analytics query needs to archive telemetry data to Azure Storage and send real-time alerts to a Service Bus Queue. How should you implement this in a single Stream Analytics job?
View Question & Answer ➔
You are designing a high-security IoT device and must ensure its private keys are never exposed in system memory or storage. Which hardware component should you integrate, and how does the Azure IoT SDK support it?
View Question & Answer ➔
You need to dynamically update the temperature warning threshold of a custom telemetry filter module on an IoT Edge device from the cloud without restarting the module. What should you use?
View Question & Answer ➔
You want to audit administrative activities on your Azure IoT Hub, such as who deleted a device or modified message routes. Which resource log categories should you monitor?
View Question & Answer ➔
A device using MQTT is subscribed to cloud-to-device (C2D) messages and goes offline. What happens to the C2D messages sent to this device while it is offline?
View Question & Answer ➔
You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?
View Question & Answer ➔
An enterprise wants to implement a centralized governance strategy for their 50+ Azure subscriptions. They want to ensure that every resource group is automatically tagged with a 'Department' name and that no one can create a G-series VM instance due to cost. Which Azure service should they use to enforce these rules?
View Question & Answer ➔
Scenario: To reduce the cost of an idle development environment, you want to automatically shut down all virtual machines at 6 PM and restart them at 8 AM. Which native Azure feature handles this?
View Question & Answer ➔
Your application requires a globally distributed database that supports multiple data models (Document, Key-Value, Graph) and provides 'Single-digit millisecond' latency for both reads and writes. Which service fits?
View Question & Answer ➔
Scenario: To minimize the risk of a single engineer making a catastrophic change, you want to ensure that any change to the production environment's 'Lock' settings requires an approval from a second administrator. Solution ?
View Question & Answer ➔
An organization wants to run their massive Big Data analytics workload using a managed Apache Spark and Hadoop service. They want a solution that integrates natively with Azure Data Lake Storage Gen2. Which service should they choose?
View Question & Answer ➔
Which Azure machine learning service provides a 'No-Code' experience for building, training, and deploying models using a drag-and-drop interface?
View Question & Answer ➔
An organization wants to move their legacy .NET applications to Azure with minimal code changes. They want a managed platform that handles OS patching, scaling, and provides easy integration with Azure AD. Which service should they use?
View Question & Answer ➔
How can you analyze why your Azure costs were higher than expected last month by identifying exactly which resource changed in configuration or usage?
View Question & Answer ➔
An organization wants to run their Docker-based microservices on Azure in a 'Serverless' way where they don't have to manage the underlying Kubernetes master or nodes. Which compute option should they choose?
View Question & Answer ➔
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
View Question & Answer ➔
You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?
View Question & Answer ➔
You are designing a data storage strategy for a massive data lake. You need a solution that supports hierarchical namespaces (directories) for high-performance analytics and integrates with Azure Active Directory for fine-grained access control. Which storage option fits?
View Question & Answer ➔
Which Azure storage feature allows you to automatically move older, infrequently accessed data from the 'Hot' tier to the 'Cool' or 'Archive' tiers based on its age to save costs?
View Question & Answer ➔
How can you securely provide access to an Azure storage account for a 3rd-party user for a specific period of time (e.g., 2 hours) without sharing the storage account key or creating an Azure AD account for them?
View Question & Answer ➔
Scenario: To minimize the risk of data loss due to a regional disaster, you want to ensure that all your Azure Blob storage data is replicated to a secondary region that is at least 300 miles away. Solution ?
View Question & Answer ➔
An organization is migrating their 1 PB file archive to Azure. They want a storage solution that is as cheap as possible and where data can be retrieved with a latency of several hours. Which storage tier should they choose?
View Question & Answer ➔
To improve the performance of an Azure Storage account for a globally distributed team that needs consistent, low-latency 'Read' access to a large library of CAD drawings, which feature should you enable?
View Question & Answer ➔
A media company is using Azure Blob storage to store high-value videos. They want to ensure that even if they accidentally delete a blob, they can recover it for up to 30 days. Which feature should they enable?
View Question & Answer ➔
Scenario: You are designing a data lake and want to ensure that all data is automatically encrypted with customer-managed keys (CMK), and you want an audit log that shows every time an analyst decrypts a specific file. Solution ?
View Question & Answer ➔
A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?
View Question & Answer ➔
An organization is using Azure SQL Database. They want to ensure that if the primary region experiences a major disaster, the database automatically fails over to a secondary region with an RPO of less than 30 seconds. Which feature should they use?
View Question & Answer ➔
Which Azure data service provides a managed, cloud-native SQL database with 'Hyperscale' capabilities that can automatically scale up to 100 TB per database and provides near-instant backups?
View Question & Answer ➔
To protect a mission-critical SQL database from being accidentally or maliciously deleted, you want to ensure that any deletion attempt requires a separate approval from a security manager and that the database can be recovered even if the primary admin account is compromised. Which feature provides this?
View Question & Answer ➔
You are designing a high-performance database for a legacy application that requires full compatibility with SQL Server Agent and Cross-database queries, but you want to move to a fully managed platform. Which service is best?
View Question & Answer ➔
To protect your Azure SQL Database from 'SQL Injection' and other unusual activity like 'Data Exfiltration', which security feature should you enable within Microsoft Defender for SQL?
View Question & Answer ➔
An organization wants to analyze the performance of their SQL queries across all their Azure SQL databases to identify the slowest queries and see execution plans. Which tool should they use?
View Question & Answer ➔
An organization is migrating their 100 on-premises SQL Server databases to Azure. They want to ensure they choose the right SQL Database SKU to maximize performance while minimizing cost. Which tool can provide right-sizing recommendations based on actual workload metrics?
View Question & Answer ➔
To ensure that your Azure SQL Database can survive a regional disaster with zero data loss (RPO = 0), you must ensure that your data is replicated to a secondary region synchronously. Which feature enables this high-level of protection?
View Question & Answer ➔
Scenario: To minimize the RTO of a mission-critical SQL database, you want a solution that provides a secondary, read-only copy of your database in a different region that can be failed over to automatically. Solution ?
View Question & Answer ➔
Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?
View Question & Answer ➔
Scenario: To minimize the latency for users in Europe accessing an application hosted in East US, you decide to deploy a second set of resources in West Europe. What is the most architectural way to route users to the closest healthy region?
View Question & Answer ➔
An organization is using Azure Cosmos DB for a global retail application. They want to ensure that users in any region always see the most recent data immediately after a write (zero lag), even if it means sacrificing some availability during regional partitioning. Which consistency level should they choose?
View Question & Answer ➔
You are designing a data integration pipeline that needs to ingest data from 50 different on-premises SQL Server databases and move it to Azure Synapse Analytics daily. Which service should you use to orchestrate this complex data movement and transformation?
View Question & Answer ➔
Your company has multiple Azure subscriptions and wants to analyze their total spend across all of them in a single dashboard. They want to create custom 'Cost Tags' to attribute costs to specific internal projects. Which tool provides this capability?
View Question & Answer ➔
An organization wants to run a serverless, event-driven function that triggers whenever a new file is uploaded to an Azure Blob storage container. Which service is best for this small, short-lived task?
View Question & Answer ➔
Scenario: To improve the resiliency of a mission-critical web application, you want to ensure that if an entire Azure region goes offline, your traffic is automatically failed over to a secondary region. Which global load balancing service should you use?
View Question & Answer ➔
An organization wants to migrate their on-premises VMWare environment to Azure without refactoring their applications or changing their operational processes. Which Azure service provides a dedicated VMWare environment in the cloud?
View Question & Answer ➔
Your organization wants to move their complex analytical workload from an on-premises Hadoop cluster to Azure. They want a service that integrates with Azure Data Lake Storage Gen2 and provides a unified interface for data exploration, data warehousing, and big data processing. Which service should they choose?
View Question & Answer ➔
To ensure that your web application provides the best possible performance for users in Asia, you want to route their traffic to the nearest Azure region. Which global routing service should you use?
View Question & Answer ➔
You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?
View Question & Answer ➔

← PreviousPage 6 of 15Next →

azure Practice Questions

You are building an IoT solution where 50,000 devices must send telemetry every 30 seconds. Your IoT Hub is receiving messages but you are hitting throttling errors. Which action should you take first?

A field device needs to receive configuration updates from the cloud and report its current state back. The configuration properties are set by the backend and the device reports its actual state. Which IoT Hub feature is designed for this pattern?

You need to invoke a firmware update on a specific device immediately and wait for a response to confirm it started. The operation must complete within 30 seconds or be considered failed. Which IoT Hub feature should you use?

Your IoT solution requires sending a firmware binary to 10,000 devices simultaneously over the next 24 hours. Each device must receive the same file. Which IoT Hub capability is designed for this at-scale operation?

You have an Azure IoT Edge device deployed at a factory. A custom module processes sensor data and should forward only anomaly alerts to IoT Hub to minimize bandwidth. Normal readings should be discarded at the edge. How do you configure this routing?

An IoT Edge device in a remote oil field has intermittent internet connectivity. You need the device to continue collecting and processing sensor data during outages and sync to the cloud when connectivity is restored. Which IoT Edge capability enables this?

You need to deploy a third-party machine learning model to IoT Edge devices for local inferencing. The model is packaged as a Docker container. Which component of IoT Edge is responsible for managing the lifecycle of this container on the device?

You need legacy devices without native IoT SDK support to connect to IoT Hub through an IoT Edge device. Each legacy device should appear as a separate device identity in IoT Hub. Which IoT Edge gateway pattern should you implement?

You are manufacturing IoT devices that will be shipped globally and deployed in customer environments. You do not know which IoT Hub the device should connect to at manufacture time. You need zero-touch provisioning at customer deployment. Which service enables this?

You are using Azure DPS with X.509 certificate attestation. You need to provision all devices from the same manufacturer into a specific IoT Hub, while devices from a different manufacturer go to a different IoT Hub. How should you configure DPS?

A device in your fleet was provisioned via DPS but needs to be moved to a different IoT Hub due to a regional migration. You want to reprovision the device without replacing its firmware. What is the correct DPS approach?

You are building a smart building solution using Azure Digital Twins. You need to model the physical hierarchy: Building → Floor → Room → Sensor. Each room must know its current temperature from its sensors. Which Azure Digital Twins concept represents this hierarchy?

Your Azure Digital Twins solution receives real-time temperature readings from IoT Hub. You need to update the temperature property of the corresponding Room twin automatically when a device sends telemetry. What is the recommended architecture?

IoT sensor data arrives in Azure IoT Hub. You need to detect when the average temperature across all sensors exceeds 75°C for any 5-minute window, and send an alert immediately when that threshold is crossed. Which Azure service should you use?

Your Stream Analytics job processes IoT Hub telemetry. You notice that out-of-order events are causing incorrect window calculations because some sensors report data with a delay of up to 10 seconds. How should you configure Stream Analytics to handle this?

You are ingesting telemetry from 1 million IoT devices using Azure Event Hubs. You need to ensure that all telemetry from the same device is always processed by the same consumer in order. How should you configure Event Hubs?

Your IoT solution uses Event Hubs to ingest device telemetry. A downstream processing service needs to re-read all telemetry from the past 3 days to replay a failed batch analytics job. Which Event Hubs feature supports this?

You need to authenticate IoT devices to IoT Hub in a way that each device has a unique cryptographic credential and a compromised device credential can be revoked without affecting other devices. Which authentication method should you use?

Microsoft Defender for IoT has flagged anomalous communication patterns from one of your IoT Hub-connected devices. You need to investigate the device without disrupting the rest of your fleet. What is the fastest action to isolate the device?

You need to monitor the connection state of all devices in your IoT Hub fleet and receive an alert when a device that was previously connected goes offline unexpectedly. Which approach should you use?

Your IoT Hub is dropping messages and you need to understand why. You enable resource logs and find messages with the 'DeviceNotFound' error. You also see 'MessageSizeExceeded' errors for some devices. What do these indicate?

Your IoT devices need to upload 50 MB diagnostic log files to the cloud periodically. Using IoT Hub device-to-cloud messages is not suitable due to the 256 KB size limit. What is the correct IoT Hub capability for this?

You are deploying an IoT Edge solution to 500 devices in a factory. You need to update the deployment manifest for all devices simultaneously whenever a new module version is released. Which approach scales for 500 devices without manual per-device updates?

You are using DPS with TPM attestation. A device's TPM chip fails and must be replaced. The replacement TPM has a different endorsement key. You need to re-provision the device to the same IoT Hub and preserve its device ID and twin data. What steps are required?

A developer is setting up an individual enrollment in Azure DPS using TPM attestation. What information must be obtained from the physical TPM chip on the device to register it?

You need to deploy an IoT Edge custom module that requires access to a hardware device (e.g., /dev/ttyUSB0 for serial communication) on the host gateway. How should you configure this module in the deployment manifest?

A fleet of IoT devices is deployed behind a strict corporate firewall that only allows outbound traffic on ports 80 and 443. Which protocol configuration should you use in the Device SDK?

You need to implement a dynamic allocation policy in DPS to assign devices to the nearest geographical IoT Hub based on a real-time lookup in a custom database. Which allocation policy should you configure?

You are configuring a nested IoT Edge device hierarchy for a factory (ISA-95 alignment). The lower-level Edge devices have no direct internet access and must route all traffic through a parent Edge device. How do you configure the child Edge device's connection?

You want to automatically append metadata such as the device's physical location (stored in the Device Twin tags) to every telemetry message before it is routed to Azure Cosmos DB. Which feature should you configure?

You are provisioning a large fleet of low-cost sensors using DPS symmetric key attestation. What is the security best practice for managing the symmetric keys in the device firmware?

You are using Stream Analytics to calculate the average temperature of a sensor over a moving 10-minute window, where a calculation is triggered every time a new event arrives. Which window type should you use?

You run iotedge check on an IoT Edge device and discover that the Edge Agent is unable to download a custom module image from your registry. Where must the container registry credentials be configured to resolve this?

You have configured several message routes in IoT Hub to direct telemetry to Blob Storage and Event Hubs. However, you notice that messages not matching any route criteria are being dropped. How can you preserve these messages?

You need to monitor the flow of individual telemetry messages through IoT Hub and downstream Azure resources to identify performance bottlenecks and track latency. Which feature should you use?

You are decommissioning an IoT device. You want to ensure it can never reconnect to your IoT Hub or reprovision through DPS in the future. What is the correct sequence of actions?

You need to query the Azure IoT Hub registry to find all devices tagged with department 'assembly' that have reported a status of 'offline' in their device twin. Which query syntax should you use?

You need to update the IoT Edge runtime version (edgeAgent and edgeHub) across a fleet of production edge devices with the least manual intervention. How should you perform this update?

A Stream Analytics job processing device telemetry is showing high latency and a large backlog. Which metric should you monitor, and what scaling action is appropriate?

You are deploying security agents on Linux IoT devices to monitor process creations, active network connections, and login attempts for security auditing. Which Microsoft Defender for IoT component should you install?

You need to trigger an emergency shutdown on a smart valve connected to IoT Hub. The operator requires immediate feedback confirming whether the valve has successfully shut down. Which communication pattern should you use?

You are setting up a custom allocation policy for DPS. What must your custom allocation Webhook (Azure Function) return in its HTTP response payload to specify the target hub?

You are deploying an IoT Edge transparent gateway. Downstream leaf devices must connect securely to this gateway. What must be installed on the downstream leaf devices to establish trust?

You want to restrict access to your Azure IoT Hub so that only devices originating from a specific partner network IP range can connect, blocking all other public traffic. What should you configure?

A Stream Analytics query needs to archive telemetry data to Azure Storage and send real-time alerts to a Service Bus Queue. How should you implement this in a single Stream Analytics job?

You are designing a high-security IoT device and must ensure its private keys are never exposed in system memory or storage. Which hardware component should you integrate, and how does the Azure IoT SDK support it?

You need to dynamically update the temperature warning threshold of a custom telemetry filter module on an IoT Edge device from the cloud without restarting the module. What should you use?

You want to audit administrative activities on your Azure IoT Hub, such as who deleted a device or modified message routes. Which resource log categories should you monitor?

A device using MQTT is subscribed to cloud-to-device (C2D) messages and goes offline. What happens to the C2D messages sent to this device while it is offline?

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Scenario: To reduce the cost of an idle development environment, you want to automatically shut down all virtual machines at 6 PM and restart them at 8 AM. Which native Azure feature handles this?

Your application requires a globally distributed database that supports multiple data models (Document, Key-Value, Graph) and provides 'Single-digit millisecond' latency for both reads and writes. Which service fits?

Scenario: To minimize the risk of a single engineer making a catastrophic change, you want to ensure that any change to the production environment's 'Lock' settings requires an approval from a second administrator. Solution ?

An organization wants to run their massive Big Data analytics workload using a managed Apache Spark and Hadoop service. They want a solution that integrates natively with Azure Data Lake Storage Gen2. Which service should they choose?

Which Azure machine learning service provides a 'No-Code' experience for building, training, and deploying models using a drag-and-drop interface?

An organization wants to move their legacy .NET applications to Azure with minimal code changes. They want a managed platform that handles OS patching, scaling, and provides easy integration with Azure AD. Which service should they use?

How can you analyze why your Azure costs were higher than expected last month by identifying exactly which resource changed in configuration or usage?

An organization wants to run their Docker-based microservices on Azure in a 'Serverless' way where they don't have to manage the underlying Kubernetes master or nodes. Which compute option should they choose?

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

You are designing a data storage strategy for a massive data lake. You need a solution that supports hierarchical namespaces (directories) for high-performance analytics and integrates with Azure Active Directory for fine-grained access control. Which storage option fits?

Which Azure storage feature allows you to automatically move older, infrequently accessed data from the 'Hot' tier to the 'Cool' or 'Archive' tiers based on its age to save costs?

How can you securely provide access to an Azure storage account for a 3rd-party user for a specific period of time (e.g., 2 hours) without sharing the storage account key or creating an Azure AD account for them?

Scenario: To minimize the risk of data loss due to a regional disaster, you want to ensure that all your Azure Blob storage data is replicated to a secondary region that is at least 300 miles away. Solution ?

An organization is migrating their 1 PB file archive to Azure. They want a storage solution that is as cheap as possible and where data can be retrieved with a latency of several hours. Which storage tier should they choose?

To improve the performance of an Azure Storage account for a globally distributed team that needs consistent, low-latency 'Read' access to a large library of CAD drawings, which feature should you enable?

A media company is using Azure Blob storage to store high-value videos. They want to ensure that even if they accidentally delete a blob, they can recover it for up to 30 days. Which feature should they enable?

Scenario: You are designing a data lake and want to ensure that all data is automatically encrypted with customer-managed keys (CMK), and you want an audit log that shows every time an analyst decrypts a specific file. Solution ?

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

An organization is using Azure SQL Database. They want to ensure that if the primary region experiences a major disaster, the database automatically fails over to a secondary region with an RPO of less than 30 seconds. Which feature should they use?

Which Azure data service provides a managed, cloud-native SQL database with 'Hyperscale' capabilities that can automatically scale up to 100 TB per database and provides near-instant backups?

You are designing a high-performance database for a legacy application that requires full compatibility with SQL Server Agent and Cross-database queries, but you want to move to a fully managed platform. Which service is best?

To protect your Azure SQL Database from 'SQL Injection' and other unusual activity like 'Data Exfiltration', which security feature should you enable within Microsoft Defender for SQL?

An organization wants to analyze the performance of their SQL queries across all their Azure SQL databases to identify the slowest queries and see execution plans. Which tool should they use?

An organization is migrating their 100 on-premises SQL Server databases to Azure. They want to ensure they choose the right SQL Database SKU to maximize performance while minimizing cost. Which tool can provide right-sizing recommendations based on actual workload metrics?

To ensure that your Azure SQL Database can survive a regional disaster with zero data loss (RPO = 0), you must ensure that your data is replicated to a secondary region synchronously. Which feature enables this high-level of protection?

Scenario: To minimize the RTO of a mission-critical SQL database, you want a solution that provides a secondary, read-only copy of your database in a different region that can be failed over to automatically. Solution ?

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Scenario: To minimize the latency for users in Europe accessing an application hosted in East US, you decide to deploy a second set of resources in West Europe. What is the most architectural way to route users to the closest healthy region?