Microsoft Federal Cloud Solution
Architect – Azure Interview Prep
with Answer key
Which Microsoft framework provides guidance for planning migrating
governing and managing a cloud environment? A) Cloud Adoption Framework
B) Enterprise Agreement Framework C) Well-Architected Framework D) Zero
Trust Framework
✔✔ A
Which is the correct order of CAF methodologies? A) Strategy Ready Plan
Adopt Govern Manage Secure B) Strategy Plan Ready Adopt Govern Manage
Secure C) Ready Strategy Plan Adopt Secure Govern Manage D) Plan Strategy
Ready Adopt Manage Govern Secure
✔✔ B
The CAF Adopt methodology contains which two paths? A) Rehost and
Refactor B) Assess and Deploy C) Migrate and Innovate D) Build and Buy
✔✔ C
How many pillars does the Azure Well-Architected Framework have? A) Four
B) Six C) Three D) Five
✔✔ D
Which is NOT a Well-Architected Framework pillar? A) Compliance B)
Reliability C) Cost Optimization D) Operational Excellence
✔✔ A
What is an Azure landing zone? A) A staging subscription used only for
testing migrations B) A pre-configured environment of subscriptions
networking identity and governance that serves as the foundation for
,workloads C) A region designated for disaster recovery failover D) The default
resource group created with every subscription
✔✔ B
The CAF landing zone design separates management groups into which two
top-level branches? A) Hub and Spoke B) Shared Services and Workloads C)
Platform and Application landing zones D) Production and Non-Production
✔✔ C
What is the correct Azure hierarchy from top to bottom? A) Tenant
Management Groups Resource Groups Subscriptions Resources B) Tenant
Subscriptions Management Groups Resource Groups Resources C)
Management Groups Tenant Subscriptions Resource Groups Resources D)
Tenant Management Groups Subscriptions Resource Groups Resources
✔✔ D
Which service evaluates resources against rules and can audit deny or
remediate non-compliant configurations? A) Azure Policy B) Azure Blueprints
C) Azure Advisor D) Azure Monitor
✔✔ A
Which mechanism assigns permissions to users groups and identities at a
given scope? A) Azure Policy B) Role-based access control (RBAC) C)
Network Security Groups D) Conditional Access
✔✔ B
Which is NOT one of Microsoft's three Zero Trust principles? A) Use least
privilege access B) Verify explicitly C) Trust the internal network D) Assume
breach
✔✔ C
What is the current name of the identity service formerly called Azure Active
Directory? A) Azure AD Premium B) Azure Identity Manager C) Microsoft
Defender for Identity D) Microsoft Entra ID
✔✔ D
Which Entra feature enforces sign-in requirements such as MFA device
compliance or location? A) Conditional Access B) Access Reviews C)
Privileged Identity Management D) Identity Protection
, ✔✔ A
Which Entra feature provides just-in-time time-bound elevation to privileged
roles? A) Entitlement Management B) Privileged Identity Management C)
Conditional Access D) Managed Identities
✔✔ B
What lets an Azure resource authenticate to other Azure services without
storing credentials in code? A) A shared access signature B) An API key in
Key Vault C) A managed identity D) A service principal secret stored in app
settings
✔✔ C
Which service stores secrets keys and certificates? A) Microsoft Purview B)
Azure Secrets Manager C) Azure Certificate Store D) Azure Key Vault
✔✔ D
Which service is Azure's cloud-native SIEM and SOAR platform? A) Microsoft
Sentinel B) Microsoft Purview C) Azure Monitor D) Defender for Cloud
✔✔ A
Which service provides cloud security posture management and workload
protection across Azure AWS and GCP? A) Azure Arc B) Microsoft Defender
for Cloud C) Microsoft Sentinel D) Azure Security Center Legacy
✔✔ B
Which service provides data governance classification and compliance across
Microsoft 365 and Azure data estates? A) Microsoft Sentinel B) Azure Data
Catalog C) Microsoft Purview D) Microsoft Fabric
✔✔ C
What query language is used in Azure Monitor Log Analytics and Sentinel? A)
SPL B) SQL C) PowerShell D) Kusto Query Language (KQL)
✔✔ D
Which service collects metrics and logs and provides alerts and dashboards
for Azure resources? A) Azure Monitor B) Azure Advisor C) Azure Service
Health D) Azure Insights Hub
Architect – Azure Interview Prep
with Answer key
Which Microsoft framework provides guidance for planning migrating
governing and managing a cloud environment? A) Cloud Adoption Framework
B) Enterprise Agreement Framework C) Well-Architected Framework D) Zero
Trust Framework
✔✔ A
Which is the correct order of CAF methodologies? A) Strategy Ready Plan
Adopt Govern Manage Secure B) Strategy Plan Ready Adopt Govern Manage
Secure C) Ready Strategy Plan Adopt Secure Govern Manage D) Plan Strategy
Ready Adopt Manage Govern Secure
✔✔ B
The CAF Adopt methodology contains which two paths? A) Rehost and
Refactor B) Assess and Deploy C) Migrate and Innovate D) Build and Buy
✔✔ C
How many pillars does the Azure Well-Architected Framework have? A) Four
B) Six C) Three D) Five
✔✔ D
Which is NOT a Well-Architected Framework pillar? A) Compliance B)
Reliability C) Cost Optimization D) Operational Excellence
✔✔ A
What is an Azure landing zone? A) A staging subscription used only for
testing migrations B) A pre-configured environment of subscriptions
networking identity and governance that serves as the foundation for
,workloads C) A region designated for disaster recovery failover D) The default
resource group created with every subscription
✔✔ B
The CAF landing zone design separates management groups into which two
top-level branches? A) Hub and Spoke B) Shared Services and Workloads C)
Platform and Application landing zones D) Production and Non-Production
✔✔ C
What is the correct Azure hierarchy from top to bottom? A) Tenant
Management Groups Resource Groups Subscriptions Resources B) Tenant
Subscriptions Management Groups Resource Groups Resources C)
Management Groups Tenant Subscriptions Resource Groups Resources D)
Tenant Management Groups Subscriptions Resource Groups Resources
✔✔ D
Which service evaluates resources against rules and can audit deny or
remediate non-compliant configurations? A) Azure Policy B) Azure Blueprints
C) Azure Advisor D) Azure Monitor
✔✔ A
Which mechanism assigns permissions to users groups and identities at a
given scope? A) Azure Policy B) Role-based access control (RBAC) C)
Network Security Groups D) Conditional Access
✔✔ B
Which is NOT one of Microsoft's three Zero Trust principles? A) Use least
privilege access B) Verify explicitly C) Trust the internal network D) Assume
breach
✔✔ C
What is the current name of the identity service formerly called Azure Active
Directory? A) Azure AD Premium B) Azure Identity Manager C) Microsoft
Defender for Identity D) Microsoft Entra ID
✔✔ D
Which Entra feature enforces sign-in requirements such as MFA device
compliance or location? A) Conditional Access B) Access Reviews C)
Privileged Identity Management D) Identity Protection
, ✔✔ A
Which Entra feature provides just-in-time time-bound elevation to privileged
roles? A) Entitlement Management B) Privileged Identity Management C)
Conditional Access D) Managed Identities
✔✔ B
What lets an Azure resource authenticate to other Azure services without
storing credentials in code? A) A shared access signature B) An API key in
Key Vault C) A managed identity D) A service principal secret stored in app
settings
✔✔ C
Which service stores secrets keys and certificates? A) Microsoft Purview B)
Azure Secrets Manager C) Azure Certificate Store D) Azure Key Vault
✔✔ D
Which service is Azure's cloud-native SIEM and SOAR platform? A) Microsoft
Sentinel B) Microsoft Purview C) Azure Monitor D) Defender for Cloud
✔✔ A
Which service provides cloud security posture management and workload
protection across Azure AWS and GCP? A) Azure Arc B) Microsoft Defender
for Cloud C) Microsoft Sentinel D) Azure Security Center Legacy
✔✔ B
Which service provides data governance classification and compliance across
Microsoft 365 and Azure data estates? A) Microsoft Sentinel B) Azure Data
Catalog C) Microsoft Purview D) Microsoft Fabric
✔✔ C
What query language is used in Azure Monitor Log Analytics and Sentinel? A)
SPL B) SQL C) PowerShell D) Kusto Query Language (KQL)
✔✔ D
Which service collects metrics and logs and provides alerts and dashboards
for Azure resources? A) Azure Monitor B) Azure Advisor C) Azure Service
Health D) Azure Insights Hub
