Exam AZ-300: Microsoft Azure Architect Technologies Practice Test
AZ-300 practice concerns implementing Azure technologies for architected solutions. The available question bank uses scenarios about selecting compute for workload migration, protecting storage data, monitoring resources, connecting networks, publishing APIs, and managing identity. These decisions involve matching Azure services and configuration features to application, connectivity, and operational needs.
Exam overview
About the Exam AZ-300: Microsoft Azure Architect Technologies Exam
Architect-level work represented in these scenarios includes choosing between Azure virtual machines and other hosting approaches when an application must retain operating-system access, and selecting storage protections that support recovery from accidental deletion. Monitoring tasks involve bringing platform metrics and application logs together and setting threshold-based alerts. Network decisions distinguish encrypted site-to-site connectivity over the internet from a private dedicated connection, and include controlling outbound access from private subnets. Other examples address API Management policies for versioning and traffic control, migration assessment and VM sizing, HTTPS access to unstructured files, and Microsoft Entra ID authentication using OAuth 2.0 tokens. Practicing these situations helps build service-selection judgment: identify the stated constraint, map it to an Azure capability, and distinguish closely related options by their networking, security, or operational behavior.
Sample Practice Questions
Review a selection from this exam's published US Practice Tests practice bank.
An application currently runs on a local Windows server and must be moved to Azure with minimal changes, while retaining access to the operating system and installed software. Which compute option is most appropriate?
Show answer
Correct answer: AAzure Virtual Machines provide control over the guest operating system and installed software, making them suitable for lift-and-shift migrations that require minimal application changes. The other services are for workflow automation, static web hosting, or event routing.
A company wants to preserve data in an Azure Storage account against accidental deletion by enabling recovery of deleted blobs for a limited period. Which feature should it configure?
Show answer
Correct answer: ABlob soft delete retains deleted blobs for a configured period so they can be recovered. Firewall rules control network access, static website hosting serves site content, and lifecycle management automates data tiering or deletion policies.
A team needs to collect platform metrics and application logs from Azure resources in one place and create alerts when a metric crosses a threshold. Which service should it use?
Show answer
Correct answer: AAzure Monitor collects and analyzes telemetry, including metrics and logs, and supports alert rules based on monitoring data. The other services address remote access, governance, or global traffic delivery.
A company must connect its on-premises network to an Azure virtual network over an encrypted connection using the public internet. Which Azure component should it configure?
Show answer
Correct answer: AA VPN Gateway can establish an encrypted site-to-site VPN connection between an on-premises network and an Azure virtual network over the internet. The other services provide application delivery or DNS capabilities, not this network connection.
An application needs to publish and consume versioned APIs and apply policies such as rate limits and request transformations at a centralized gateway. Which Azure service is the best fit?
Show answer
Correct answer: AAzure API Management provides an API gateway and management plane for publishing APIs, applying policies, and managing API versions and access. The other services address networking, backup, and batch computing.
A company wants to evaluate whether an existing application can be moved to Azure and estimate the virtual machine sizes it may need. Which Azure service is designed to help assess on-premises environments for migration?
Show answer
Correct answer: AAzure Migrate provides tools to discover and assess on-premises servers and other workloads, including readiness and sizing estimates, as part of migration planning.
A solution must maintain a private, dedicated network connection between an organization's on-premises network and Azure, rather than sending traffic over the public internet. Which service should the organization use?
Show answer
Correct answer: AExpressRoute provides private connectivity between an organization's network and Microsoft cloud services through a connectivity provider. VPN Gateway establishes encrypted tunnels over the public internet, while the other services address application delivery or VM access.
How to use this practice test
The free US Practice Tests practice bank contains 50 published questions. A session presents up to 20 randomly selected questions, then shows results after you finish. Use each scenario to check whether you can connect requirements—such as private connectivity, recoverable storage, or token-based access—to an appropriate Azure service or feature.
Preparation tips
- Compare Azure VPN Gateway and ExpressRoute by connection path, encryption, and whether traffic uses the public internet.
- For storage-recovery scenarios, distinguish blob soft delete from other protections and identify what deletion events each feature can help recover.
- Practice mapping workload constraints to compute choices, especially when migration requires retaining operating-system access and installed software.
- Review how Azure Monitor uses metrics, logs, and alert rules, and identify which signal a threshold-based alert evaluates.
- Trace an API request through Azure API Management and note how versioning, rate limits, and request transformations affect the gateway.