Exam AZ-302: Microsoft Azure Solutions Architect Certification Transition Practice Test
Exam AZ-302: Microsoft Azure Solutions Architect Certification Transition covers Azure architecture and implementation decisions across governance, identity and access, networking, compute, storage, data services, security, and recovery. The available practice bank uses scenario-based questions about selecting Azure capabilities for defined operational needs, such as limiting resource permissions, connecting private DNS, deploying repeatable infrastructure, and protecting workloads.
Exam overview
About the Exam AZ-302: Microsoft Azure Solutions Architect Certification Tra… Exam
Architect-level work requires matching service behavior to workload constraints. Practice scenarios call for distinguishing Azure Policy from role-based access control, applying permissions at the narrowest suitable scope, and connecting networks to shared private DNS. They also address infrastructure as code, including repeatable deployments from declarative templates, and compute resilience through automatic instance replacement. Other decisions involve selecting managed backup and recovery capabilities, creating disk snapshots before risky changes, and distributing TCP traffic without terminating connections. Data and security scenarios include choosing a globally distributed JSON document database with configurable consistency and centralizing events from cloud and on-premises systems for analysis. For each scenario, identify the requirement that drives the choice—such as scope, protocol, recovery objective, or consistency—then compare the relevant service capabilities rather than selecting by product name alone.
Sample Practice Questions
Review a selection from this exam's published US Practice Tests practice bank.
An organization wants to ensure that newly created resources in a subscription use an approved set of Azure regions. Which governance capability should it use?
Show answer
Correct answer: AAzure Policy can audit or deny resource creation outside a configured set of allowed locations. Monitoring alerts, network rules, and Advisor recommendations do not enforce the location requirement during deployment.
A service hosted in an Azure virtual network must resolve private DNS names for resources in another virtual network. Which configuration enables the virtual networks to use the same Azure Private DNS zone?
Show answer
Correct answer: BAn Azure Private DNS zone can be linked to multiple virtual networks, allowing resources in those networks to resolve its records. A private endpoint or route does not link a DNS zone to a virtual network.
An organization wants to grant a user permission to manage virtual machines in one resource group without granting that permission across the subscription. Which approach follows Azure's standard access model?
Show answer
Correct answer: AAzure role-based access control allows roles to be assigned at scopes such as a resource group. Assigning only the required role at that scope limits access more narrowly than subscription-wide ownership.
A company needs to recover Azure virtual machines after data loss or a regional outage, using managed backup policies and recovery points. Which service should it consider?
Show answer
Correct answer: AAzure Backup provides managed backup and recovery capabilities for supported Azure workloads, including virtual machines. The other options address load testing, container image storage, and application traffic routing.
A team needs to make a point-in-time copy of an Azure managed disk before performing a risky operating system change. Which Azure resource should it create?
Show answer
Correct answer: AA managed disk snapshot captures a point-in-time copy of a disk that can be used for recovery or to create another disk. Network security groups, public IP addresses, and route tables do not preserve disk contents.
A team wants to deploy the same set of Azure resources repeatedly from a declarative template and keep the deployment configuration in source control. Which approach is best suited to this goal?
Show answer
Correct answer: AAzure Resource Manager templates describe infrastructure declaratively and can be version-controlled and redeployed consistently. Other infrastructure-as-code tools are also available, but a template directly matches the stated need.
A team needs to ensure that an Azure virtual machine can be replaced automatically if its host experiences a failure, while maintaining a configured minimum number of instances. Which capability is designed for this pattern?
Show answer
Correct answer: AVirtual Machine Scale Sets manage groups of virtual machines and can use automatic instance repairs to replace unhealthy instances, subject to supported configuration and health monitoring. Backups help recover data or machines but do not provide this automatic fleet-repair behavior.
How to use this practice test
The free US Practice Tests bank contains 50 questions for AZ-302. A practice session presents up to 20 randomly selected questions and shows results afterward. Use each result to identify decision points that need more work, such as access scope, network name resolution, deployment repeatability, workload recovery, or service selection for TCP traffic and JSON data.
Preparation tips
- For governance scenarios, distinguish policy enforcement—such as restricting allowed regions—from RBAC permissions, and trace how role assignments inherit across management scopes.
- Sketch virtual network and Private DNS zone relationships; verify where links are needed for name resolution across networks.
- Compare Azure Load Balancer with services that terminate or proxy connections, focusing on the required protocol and whether TCP sessions must remain end to end.
- For protection scenarios, separate managed backup and recovery workflows from a point-in-time managed disk snapshot, and identify the failure or change each addresses.
- Practice mapping workload requirements to declarative deployment, automatic instance replacement, centralized security-event analysis, and globally distributed document data services.