Microsoft AZ-305 Exam Dumps

Designing Microsoft Azure Infrastructure Solutions

Microsoft AZ-305 Sample Questions

Question # 1

After you migrate App1 to Azure, you need to enforce the data modification requirements to meet the security and compliance requirements. What should you do? 

A. Create Azure RBAC assignments. 
B. Create an access policy for the blob service. 
C. Modify the access level of the blob service. 
D. Implement Azure resource locks. 

Answer: B

Show Answer

Question # 2

You have 12 on-premises data sources that contain customer information and consist of Microsoft SQL Server, MySQL, and Oracle databases. You have an Azure subscription. You plan to create an Azure Data Lake Storage account that will consolidate the customer information for analysis and reporting. You need to recommend a solution to automatically copy new information from the data sources to the Data Lake Storage account by using extract, transform and load (ETL). The solution must minimize administrative effort. What should you include in the recommendation? 

A. Azure Data Factory 
B. Azure Data Explorer 
C. Azure Data Share 
D. Azure Data Studio 

Answer: A

Show Answer

Question # 3

You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region. You are designing a disaster recovery plan for KeyVault1. You plan to back up the keys in KeyVault1. You need to identify to where you can restore the backup. What should you identify? 

A. KeyVault1 only 
B. the same region only 
C. the same geography only 
D. any region worldwide 

Answer: C

Show Answer

Question # 4

You have multiple on-premises networks You have multiple Azure subscriptions. Each subscription contains a virtual network that is assigned an IP address space of 172.16.0.0/16. Each virtual network is connected to the on premises networks by using ExpressRoute. You plan to deploy a container orchestration solution that will use multiple Azure Kubernetes Service (AKS) clusters. The clusters will be deployed to the existing virtual networks. You need to recommend a network configuration for the AKS dusters. The solution must meet the following requirements: • Minimize the number of IP addresses required on each virtual network. • Support outbound connectivity to on-premises datacenters. • Support Windows node pools Which AKS network model should you recommend?

A. Azure CNI Overlay 
B. kubenet 
C. Azure CNI 
D. Azure CNI Powered by Cilium 

Answer: A

Show Answer

Question # 5

You have an Azure subscription. The subscription has a blob container that contains multiple blobs. Ten users in the finance department of your company plan to access the blobs during the month of April. You need to recommend a solution to enable access to the blobs during the month of April only. The solution must minimize development effort. Which security solution should you include in the recommendation?

A. shared access signatures (SAS) 
B. certificates 
C. access keys 
D. Conditional Access policies 

Answer: A

Show Answer

Question # 6

You have an on-premises line-of-business (LOB) application that uses a Microsoft SQL Server instance as the backend. You plan to migrate the on-premises SQL Server instance to Azure virtual machines. You need to recommend a highly available SQL Server deployment that meets the following requirements: • Minimizes costs • Minimizes failover time if a single server fails What should you include in the recommendation?

A. an Always On availability group that has premium storage disks and a distributed network name (DNN) 
B. an Always On Failover Cluster Instance that has a virtual network name (VNN) and a premium file share 
C. an Always On Failover Cluster Instance that has a virtual network name (VNN) and a standard file share 
D. an Always On availability group that has premium storage disks and a virtual network name (VNN) 

Answer: A

Show Answer

Question # 7

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. Your company, named Contoso, Ltd., has a Microsoft Entra tenant named contoso.com that uses Privileged Identity Management (PIM) and is linked to an Azure subscription named Sub1. You use Azure Backup to back up all the resources in Sub1 to a Recovery Services vault named Vault! An external company named Fabrikam, Inc. provides security management services to Contoso. Fabrikam has a Microsoft Entra tenant named fabrikam.com and an Azure subscription. You need to prevent a compromised administrator account in contoso.com from modifying backup policies in and deleting backups from Sub1. Solution: You configure a PIM role assignment that requires approval for activation by an administrator in contoso.com. Does this meet the goal?  

A. Yes 
B. No 

Answer: B

Show Answer

Question # 8

You have an Azure subscription. You plan to deploy a monitoring solution that will include the following: • Azure Monitor Network Insights • Application Insights • Microsoft Sentinel • VM insights The monitoring solution will be managed by a single team. What is the minimum number of Azure Monitor workspaces required? 

A. 1 
B. 2 
C. 3 
D. 4 

Answer: A

Show Answer

Question # 9

You have an Azure subscription. You plan to deploy an app named App1 that will be hosted on multiple virtual machines. App1 requires a service-level agreement (SLA) of 99.99%. You need to recommend a high availability solution for the virtual machines. What should you include in the recommendation?

A. application groups 
B. availability zones 
C. availability sets 
D. Azure Site Recovery 

Answer: B

Show Answer

Question # 10

You are designing a data analytics solution in Azure. You need to recommend a solution that meets the following requirements: • Supports multiple analytic languages • Integrates with Microsoft Power Bl • Works with multiple data stores • Supports visualizations What should you include in the recommendation? 

A. Azure SQL Database 
B. Azure HDInsight 
C. Azure Data Lake Storage Gen2 
D. Azure Databricks 

Answer: D

Show Answer

Question # 11

You plan to use an Azure Storage account to store data assets. You need to recommend a solution that meets the following requirements: • Supports immutable storage • Disables anonymous access to the storage account • Supports access control list (ACL)-based Azure AD permissions What should you include in the recommendation?

A. Azure Blob Storage 
B. Azure Data Lake Storage 
C. Azure NetApp Files 
D. Azure Files 

Answer: B

Show Answer

Question # 12

You have an Azure subscription that contains an Azure Data Lake Storage Gen2 account named storage1 and an Azure Synapse Analytics workspace named Workspace1. Workspace! contains a serverless SQL pool and an Apache Spark pool. You need to recommend a disaster recovery solution for storage1. What should you include in the recommendation?

A. vaulted backup of Azure blobs 
B. operational backup of Azure blobs 
C. geo-backup in Azure Synapse Analytics
 D. asynchronous replication 

Answer: D

Show Answer

Question # 13

You have a landing zone that contains multiple Azure subscriptions. You need to automate the deployment of resources to the subscriptions. The solution must meet the following requirements: • Support parameters. • Support versioning and source control. Which two options can you use? Each correct answer presents a complete solution. NOTE Each correct selection is worth one point. 

A. Azure Resource Manager (ARM) templates 
B. Azure Policy 
C. Azure Automation 
D. Bleep files 
E. Azure Functions 

Answer: A,D

Show Answer

Question # 14

You have an on-premises datacenter named Site1 that contains multiple servers. You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains multiple virtual machines. VNet1 uses the default Azure DNS service. Site1 connects to VNet1 by using a Site-to-Site (S2S) VPN. You need to recommend a DNS solution that will forward DNS queries from the virtual machines that target the on-premises DNS namespace to the on-premises DNS servers. The solution must minimize administrative effort and costs. What should you include in the recommendation?

A. Private DNS zone 
B. Azure Firewall DNS Proxy 
C. an Azure virtual machine that runs the DNS service 
D. Private DNS resolver 

Answer: D

Show Answer

Question # 15

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. Your company, named Contoso, Ltd., has a Microsoft Entra tenant named contoso.com that uses Privileged Identity Management (PIM) and is linked to an Azure subscription named Sub1. You use Azure Backup to back up all the resources in Sub! to a Recovery Services vault named Vault1. An external company named Fabrikam, Inc. provides security management services to Contoso. Fabrikam has a Microsoft Entra tenant named fabrikam.com and an Azure subscription. You need to prevent a compromised administiator account in contoso.com from modifying backup policies in and deleting backups from Sub1. Solution: You configure Multi-user authorization (MUA) in Sub1 by using a Resource Guard from fabiikam.com. Does this meet the goal?

A. Yes 
B. No 

Answer: B

Show Answer

Question # 16

You have an Azure App Service web app named Appl. You need to recommend a monitoring solution for Appl. The solution must meet the following requirements: • Monitor the availability of Appl and send notifications if any availability issues are detected. • Monitor the usage of Azure Functions by Appl and send notifications if high usage is detected. • Analyze user behavior of Appl. What should you include in the recommendation?

A. Azure Monitor Application Insights 
B. Diagnostics logging in App Service 
C. Azure Data Explorer 
D. Log stream in App Service 
E. Log Analytics 

Answer: A

Show Answer

Question # 17

Your company has 50 business units across the globe. The business units operate from 08:00 AM to 06:00 PM from Monday to Friday in their local time zone. Transactions are only processed during business hours. You have an Azure subscription. You plan to deploy an app named App1 that will manage the transactions for the business units. App1 will use a separate Azure SQL database for each business unit. You need to recommend an Azure SQL Database configuration for App1. The solution must meet the following requirements: • Support Azure Hybrid Benefit licensing. • Minimize costs. What should you recommend? 

A. a vCore purchasing model and multiple single database instances 
B. a DTU purchasing model and multiple single database instances 
C. a vCore purchasing model and multiple database instances in an elastic pool 
D. a DTU purchasing model and multiple database instances in an elastic pool 

Answer: C

Show Answer

Question # 18

You need to recommend a data storage solution that meets the following requirements: • Ensures that applications can access the data by using a REST connection • Hosts 20 independent tables of varying sizes and usage patterns • Automatically replicates the data to a second Azure region • Minimizes costs What should you recommend?

A. an Azure SQL Database elastic pool that uses active geo-replication 
B. tables in an Azure Storage account that use read-access geo-redundant storage (RAGRS) 
C. an Azure SQL database that uses active geo-replication 
D. tables in an Azure Storage account that use geo-redundant storage (GRS) 

Answer: D

Show Answer

Question # 19

You have an Azure subscription You have a Microsoft Entra tenant. You need to recommend a Microsoft Entra Identity Governance solution to manage the user lifecycle. The solution must meet the following requirements: • Ensure that users have the correct permission for the correct resources and that the permissions are evaluated every quarter. • If a user is assigned a new role, ensure that the correct permissions are granted for the correct resources and regularly evaluated for the new role. • When a user leaves the company, ensure that the user's permissions are revoked What should you include in the recommendation?

A. Conditional Access 
B. Privileged Identity Management (PIM) 
C. Microsoft Entra ID Protection 
D. access reviews 

Answer: D

Show Answer