AZ-305 Practice Test 2

A retailer runs a promotions platform made of a virtual machine scale set that autoscales between 20 and 200 instances during sales events, plus 12 Azure Function apps. Every instance and every function reads the same two secrets from one key vault and writes to the same storage account. The platform team sets these requirements:

- No credential may be stored in code, configuration, or a deployment pipeline variable. - Role assignments on the key vault and the storage account must exist before any compute instance is created, because the deployment pipeline account is not allowed to create role assignments. - Scaling out by 180 instances in a few minutes must not fail because of Microsoft Entra object creation limits. - Adding a third target resource later should require as few new role assignments as possible.

What should you include in the design?