Microsoft Certified: Azure Administrator Associate Intermediate Practice Exam: Medium Difficulty 2025

Your organization has multiple Azure subscriptions under a single Azure AD tenant. You need to ensure that all virtual machines created in the Production subscription must have specific tags applied (Environment, CostCenter, and Owner) before deployment. Non-compliant resources should be prevented from being created. What should you implement?

You manage an Azure storage account that stores sensitive financial data. The compliance team requires that all data must be encrypted at rest using customer-managed keys stored in Azure Key Vault, and the keys must be rotated every 90 days. Which two actions should you perform to meet these requirements?

Your company runs a web application on Azure VMs behind an Azure Load Balancer. The application experiences variable traffic with peak usage during business hours (9 AM - 5 PM). To optimize costs while maintaining performance, you need to automatically scale the VMs based on CPU usage. The solution should add instances when CPU exceeds 75% and remove instances when CPU drops below 25%. What should you configure?

You are configuring network security for an Azure Virtual Network that hosts a three-tier application: web tier (public), application tier (internal), and database tier (internal). The database tier must only accept traffic from the application tier on port 1433, and the application tier must only accept traffic from the web tier on port 8080. What is the most efficient way to implement this security requirement?

Your organization needs to provide developers in the Development resource group the ability to create and manage virtual machines, but they should not be able to modify networking components or delete any resources. Which Azure role-based access control (RBAC) approach should you implement?

You are managing an Azure Storage account that contains critical backup data. The data must be retained for 7 years to meet regulatory compliance, and it should not be modified or deleted during this period, even by administrators. The data is accessed infrequently after the first 90 days. Which solution should you implement to meet the compliance and cost optimization requirements?

Your company has deployed a multi-tier application across two Azure regions for disaster recovery. You need to configure Azure Monitor to alert the operations team when the average CPU usage of VMs in the primary region exceeds 85% for more than 10 minutes. The alert should trigger an Azure Automation runbook that begins failover procedures. What should you configure?

You need to deploy 50 identical Azure VMs running Windows Server for a new application. The VMs must be distributed across three availability zones in the East US region for high availability, and the deployment should be completed with minimal administrative effort. What deployment method should you use?

Your organization has an on-premises network connected to Azure via Site-to-Site VPN. You need to ensure that Azure VMs in the Virtual Network can resolve on-premises DNS names, and on-premises servers can resolve Azure VM DNS names. The solution must minimize administrative overhead. What should you configure?

You are troubleshooting performance issues with an Azure VM running a business-critical application. You need to collect detailed performance metrics including disk I/O, memory usage, and network statistics for analysis. The metrics should be stored for 90 days and visualized in custom dashboards. Which solution should you implement?