AZ-304: Microsoft Azure Architect Design

You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam,

Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for the

Microsoft 365 E5 plan.

You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1.

The solution must meet the following requirements:

To the manager of the developers, send a monthly email message that lists the access permissions to Application1.
If the manager does not verify an access permission, automatically revoke that permission.
Minimize development effort.

What should you recommend?

Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet.
Create an Azure Automation runbook that runs the Get-AzRoleAssignment cmdlet.
In Azure Active Directory (Azure AD), create an access review of Application1.
In Azure Active Directory (AD) Privileged Identity Management, create a custom role assignment for the Application1 resources.

Correct answer: C

Explanation:

C: 4 - Mosted

You have 100 servers that run Windows Server 2012 R2 and host Microsoft SQL Server 2014 instances. The instances host databases that have the following characteristics:

The largest database is currently 3 TB. None of the databases will ever exceed 4 TB.
Stored procedures are implemented by using CLR.

You plan to move all the data from SQL Server to Azure.

You need to recommend an Azure service to host the databases. The solution must meet the following requirements:

Whenever possible, minimize management overhead for the migrated databases.
Minimize the number of database changes required to facilitate the migration.
Ensure that users can authenticate by using their Active Directory credentials.

What should you include in the recommendation?

Azure SQL Database elastic pools
Azure SQL Database Managed Instance
Azure SQL Database single databases
SQL Server 2016 on Azure virtual machines

Correct answer: B

Explanation:

B: 8 - Mosted

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:

Provide access to the full .NET framework.
Provide redundancy if an Azure region fails.
Grant administrators access to the operating system to install custom application dependencies.

Solution: You deploy two Azure virtual machines to two Azure regions, and you deploy an Azure Application Gateway.

Does this meet the goal?

Yes
No

Correct answer: B

Explanation:

You need to deploy two Azure virtual machines to two Azure regions, but also create a Traffic Manager profile.

You need to design a solution that will execute custom C# code in response to an event routed to Azure Event Grid. The solution must meet the following requirements:

The executed code must be able to access the private IP address of a Microsoft SQL Server instance that runs on an Azure virtual machine.
Costs must be minimized.

What should you include in the solution?

Azure Logic Apps in the integrated service environment
Azure Functions in the Dedicated plan and the Basic Azure App Service plan
Azure Logic Apps in the Consumption plan
Azure Functions in the Consumption plan

Correct answer: D

Explanation:

A: 5B: 9D: 13 - Mosted

You have data files in Azure Blob storage.

You plan to transform the files and move them to Azure Data Lake Storage.

You need to transform the data by using mapping data flow.

Which Azure service should you use?

Azure Data Box Gateway
Azure Storage Sync
Azure Data Factory
Azure Databricks

Correct answer: C

Explanation:

C: 3 - Mosted

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Storage v2 account named storage1.

You plan to archive data to storage1.

You need to ensure that the archived data cannot be deleted for five years. The solution must prevent administrators from deleting the data.

Solution: You create an Azure Blob storage container, and you configure a legal hold access policy.

Does this meet the goal?

Yes
No

Correct answer: B

Explanation:

B: 1 - MostedUse an Azure Blob storage container, but use a time-based retention policy instead of a legal hold.Note:Immutable storage for Azure Blob storage enables users to store business-critical data objects in a WORM (Write Once, Read Many) state. This state makes the data non-erasable and non-modifiable for a user-specified interval. For the duration of the retention interval, blobs can be created and read, but cannot be modified or deleted. Immutable storage is available for general-purpose v2 and Blob storage accounts in all Azure regions.Note: Set retention policies and legal holdsCreate a new container or select an existing container to store the blobs that need to be kept in the immutable state. The container must be in a general- purpose v2 or Blob storage account.Select Access policy in the container settings. Then select Add policy under Immutable blob storage.EitherTo enable legal holds, select Add Policy. Select Legal hold from the drop-down menu, orTo enable time-based retention, select Time-based retention from the drop-down menu.Enter the retention interval in days (acceptable values are 1 to 146000 days).Reference:https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutable-storage https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutability-policies-manage

B: 1 - Mosted

Use an Azure Blob storage container, but use a time-based retention policy instead of a legal hold.

Note:

Immutable storage for Azure Blob storage enables users to store business-critical data objects in a WORM (Write Once, Read Many) state. This state makes the data non-erasable and non-modifiable for a user-specified interval. For the duration of the retention interval, blobs can be created and read, but cannot be modified or deleted. Immutable storage is available for general-purpose v2 and Blob storage accounts in all Azure regions.

Note: Set retention policies and legal holds

Create a new container or select an existing container to store the blobs that need to be kept in the immutable state. The container must be in a general- purpose v2 or Blob storage account.
Select Access policy in the container settings. Then select Add policy under Immutable blob storage.
Either
- To enable legal holds, select Add Policy. Select Legal hold from the drop-down menu, or
- To enable time-based retention, select Time-based retention from the drop-down menu.
Enter the retention interval in days (acceptable values are 1 to 146000 days).

Reference:

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutable-storage

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutability-policies-manage

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Storage v2 account named storage1.

You plan to archive data to storage1.

You need to ensure that the archived data cannot be deleted for five years. The solution must prevent administrators from deleting the data.

Solution: You create a file share and snapshots.

Does this meet the goal?

Yes
No

Correct answer: B

Explanation:

B: 1 - MostedInstead you could create an Azure Blob storage container, and you configure a legal hold access policy.Reference:https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutable-storage

B: 1 - Mosted

Instead you could create an Azure Blob storage container, and you configure a legal hold access policy.

Reference:

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutable-storage

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an on-premises Hyper-V cluster that hosts 20 virtual machines. Some virtual machines run Windows Server 2016 and some run Linux.

You plan to migrate the virtual machines to an Azure subscription.

You need to recommend a solution to replicate the disks of the virtual machines to Azure. The solution must ensure that the virtual machines remain available during the migration of the disks.

Solution: You recommend implementing an Azure Storage account, and then running AzCopy.

Does this meet the goal?

Yes
No

Correct answer: B

Explanation:

B: 3 - Mosted

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an on-premises Hyper-V cluster that hosts 20 virtual machines. Some virtual machines run Windows Server 2016 and some run Linux.

You plan to migrate the virtual machines to an Azure subscription.

You need to recommend a solution to replicate the disks of the virtual machines to Azure. The solution must ensure that the virtual machines remain available during the migration of the disks.

Solution: You recommend implementing an Azure Storage account that has a file service and a blob service, and then using the Data Migration Assistant.

Does this meet the goal?

Yes
No

Correct answer: B

Explanation:

B: 2 - MostedData Migration Assistant is used to migrate SQL databases.Instead use Azure Site Recovery.Reference:https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview

B: 2 - Mosted

Data Migration Assistant is used to migrate SQL databases.

Instead use Azure Site Recovery.

Reference:

https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview

You are planning to deploy an application named App1 that will run in containers on Azure Kubernetes Service (AKS) clusters. The AKS clusters will be distributed across four Azure regions.

You need to recommend a storage solution for App1. Updated container images must be replicated automatically to all the AKS clusters.

Which storage solution should you recommend?

Azure Cache for Redis
Azure Content Delivery Network (CDN)
Premium SKU Azure Container Registry
geo-redundant storage (GRS) accounts

Correct answer: C

Explanation:

C: 3 - Mosted

Vendor:	Microsoft
Exam Code:	AZ-304
Exam Name:	Microsoft Azure Architect Design
Date:	Jan 07, 2026
File Size:	9 MB

Download Microsoft Azure Architect Design.AZ-304.ExamTopics.2026-01-07.237q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown