Domain 4.1: Compute Solutions

You are designing a microservices architecture for a new cloud-native application. The application consists of 15 containerized microservices. The development team wants to use Kubernetes for orchestration, but the operations team has strictly mandated that they will NOT manage underlying virtual machine infrastructure, perform OS patching, or manage Kubernetes cluster upgrades. Which compute service should you recommend?

You are managing an Azure App Service hosting a mission-critical web application. The development team releases new code weekly. You need to implement a deployment strategy that allows you to: 1. Deploy the new code to a staging environment that mirrors production. 2. Route exactly 10% of live production traffic to the new code to test its stability. 3. Instantly swap the staging environment to production with zero downtime if the test is successful. Which TWO features of Azure App Service must you use? (Select TWO)

You are designing a compute architecture using Azure Virtual Machine Scale Sets (VMSS). The workload requires high availability across Availability Zones. You also need the ability to mix different VM sizes within the same scale set, and you want to manage the lifecycle of individual VMs within the scale set manually when necessary. Which orchestration mode should you configure for the VMSS?

You are designing a serverless architecture using Azure Functions. The function will be triggered by messages in an Azure Service Bus queue. The workload is highly unpredictable; it may process zero messages for days, and then suddenly need to process 10,000 messages in a few minutes. Cost optimization is a primary concern. You want to pay ONLY when the function is actively executing code. Which hosting plan should you choose?

**CASE STUDY: Contoso Manufacturing** **Overview:** Contoso Ltd is a global manufacturing company with 50,000 employees across 30 countries. They currently operate a mix of on-premises infrastructure (500 VMware VMs across 5 data centers) and Azure (20 subscriptions with 100+ VMs and various PaaS services). Their annual IT budget is $50 million, with plans to migrate 70% of workloads to Azure within 2 years. **Business Requirements:** The company needs to reduce IT costs by 30%, improve disaster recovery (current RTO: 24 hours -> target: 2 hours), enhance security posture to meet ISO 27001 and SOC 2 compliance, and enable remote work for 80% of employees. All solutions must support future growth of 20% annually. **Technical Constraints:** Some legacy applications cannot be modified and must run on Windows Server 2012 R2. Network connectivity requires 10 Gbps throughput to Azure with <20ms latency. GDPR compliance mandates that EU customer data must remain in European Azure regions. **Question:** Contoso is modernizing a subset of their applications using Azure Kubernetes Service (AKS). These new microservices must communicate directly with the legacy Windows Server 2012 R2 VMs residing in a peered Azure VNet. Which AKS networking plugin must you use to ensure the pods get IP addresses from the VNet, allowing direct routing to the legacy VMs?

A development team is deploying a microservices architecture to Azure Kubernetes Service (AKS). The cluster will scale dynamically and may run up to 5,000 pods simultaneously. The company's network team has allocated a very small /24 subnet (256 IP addresses) for the AKS cluster due to corporate IP address exhaustion. Which AKS network plugin must you use to accommodate this requirement?

A financial application is hosted on Azure App Service (Premium V3 plan). The architecture has the following strict security and operational requirements: 1. The App Service must securely access a backend Azure SQL Database over a private IP address. 2. The App Service itself must only be accessible from the corporate on-premises network (via ExpressRoute); all public internet access must be blocked. 3. Deployments of new application versions must result in zero downtime. Which THREE features must you configure to meet these requirements? (Select THREE)

You are designing a serverless architecture using Azure Functions. The function will be triggered by HTTP requests. The workload is highly variable, with long periods of inactivity followed by sudden, massive spikes in traffic. The application has a strict requirement: the response time for the very first request after a period of inactivity must be under 500 milliseconds. Furthermore, the function needs to securely access resources inside an Azure Virtual Network. Which Azure Functions hosting plan should you recommend?

A development team wants to deploy a set of three microservices packaged as Docker containers. Requirements: 1. The services must be able to communicate with each other internally without exposing endpoints to the public internet. 2. The architecture must automatically scale based on HTTP traffic, including scaling down to zero instances to save costs. 3. The team does not want to manage Kubernetes infrastructure or node pools. Which TWO Azure services could you recommend to meet these requirements? (Select TWO)

An enterprise is deploying Azure Virtual Desktop (AVD) for 5,000 concurrent users. Users will connect to pooled session hosts. To ensure a consistent user experience, user profiles must be stored externally using FSLogix profile containers. During the morning logon storm (8:00 AM - 9:00 AM), the storage solution must handle massive IOPS spikes as thousands of VHDX profile disks are mounted simultaneously. Latency must remain under 2 milliseconds to prevent logon timeouts. Which storage solution should you recommend for the FSLogix profiles?

Your company runs a nightly batch processing job that renders 3D video files. The job takes about 4 hours to complete. The workload is highly parallel and fault-tolerant; if a rendering task is interrupted, it can simply be restarted without data loss. The IT director wants to reduce the compute costs for this workload by at least 70%. Which Azure compute purchasing option should you recommend?

You are designing the network architecture for an Azure Kubernetes Service (AKS) cluster. The cluster will host hundreds of microservices and scale dynamically. The enterprise network team has strictly limited the number of IP addresses available in the Azure Virtual Network. They can only allocate a /24 subnet (256 IPs) for the AKS cluster. You need to ensure the cluster can scale to hundreds of pods without exhausting the VNet IP addresses. Pods must still be able to communicate with other Azure resources. Which AKS network plugin should you recommend?

You are designing a deployment strategy for a mission-critical web application hosted on Azure App Service. The development team requires a 'Blue/Green' deployment model. They must be able to deploy new code to a staging environment, run automated integration tests against it, and then swap it into production with zero downtime. If an issue is discovered in production, they must be able to instantly roll back to the previous version. Which TWO configurations are required to support this? (Select TWO)

You are designing a serverless architecture using Azure Functions. The function will process messages from an Azure Service Bus queue. The function must be able to securely access an on-premises database via an existing Azure ExpressRoute connection. The workload is highly variable, experiencing sudden spikes in traffic, and requires avoiding 'cold starts' to maintain performance. Which Azure Functions hosting plan should you recommend?

You are designing an Azure Virtual Desktop (AVD) environment for 500 remote employees. You plan to use Windows 10 Enterprise multi-session. Users need their application settings, browser history, and files to persist across sessions, regardless of which session host VM they connect to. You want a fully managed PaaS storage solution to store these user profiles. Which technology combination should you recommend?

You need to deploy a cluster of 100 Virtual Machines. The VMs will have different sizes and run different operating systems. You want to manage them as a single logical group, spread them across Availability Zones, and update them in batches. Which compute solution should you recommend?

You are designing an Azure Kubernetes Service (AKS) cluster. The security team requires that every pod receives an IP address from the Azure Virtual Network subnet. Additionally, you must be able to enforce network policies to restrict traffic between pods. Which TWO networking options must you configure? (Select TWO)

You have an Azure App Service hosting a production web application. You need to deploy a new version of the application without any downtime. You also need to test the new version with 10% of live user traffic before fully cutting over. What should you use?

You are designing a serverless architecture using Azure Functions. The function will process messages from an Azure Service Bus queue. The processing logic takes up to 30 minutes to execute per message. The function must also connect securely to an on-premises database via an Azure ExpressRoute connection. Which TWO hosting plans could you choose? (Select TWO)

You are designing an Azure Virtual Desktop (AVD) solution for 1,000 users. Users will connect to pooled session hosts. You need to ensure that user profiles load quickly regardless of which session host they connect to. The profile solution must be highly available. What should you recommend?

You are designing the network architecture for an Azure Kubernetes Service (AKS) cluster. Security requires that every pod receives an IP address from the Azure Virtual Network subnet, allowing on-premises firewalls to filter traffic per pod. Which network plugin must you use?

You are deploying a web app to Azure App Service. You need to ensure the app scales out automatically based on CPU usage, and you must be able to deploy new versions with zero downtime. Which TWO features should you configure? (Select TWO)

You are designing a serverless architecture using Azure Functions. The function must integrate with an Azure Virtual Network and avoid 'cold starts'. Which hosting plan should you choose?

You are designing an Azure Virtual Desktop (AVD) solution. Users will connect to a pooled host pool. You need to ensure user profiles persist across sessions regardless of which VM they connect to. What should you use?

You need to run a massive batch processing job that takes 4 hours. The job can be interrupted and resumed without data loss. Cost optimization is the absolute highest priority. Which compute option should you choose?