Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 91:

  You need to implement the Azure RBAC role assignments for the Network Contributor role. The solution must meet the authentication and authorization requirements.

  What is the minimum number of assignments that you must use?

  A. 1
  B. 2
  C. 5
  D. 10
  E. 15
  A. 1

  ---

  Explanation

  Scenario: The Network Contributor built-in RBAC role must be used to grant permissions to the network administrators for all the virtual networks in all the Azure subscriptions.

  RBAC roles must be applied at the highest level possible.

• Question 92:

  HOTSPOT

  You have Azure subscription that contains a virtual network named VNet1. VNet1 includes a VPN gateway, uses an IP address space of 10.0.0.0/16 and contains the subnets in the following table.

  

  Subnet1 contains a virtual appliance named VM1 that operates as a router.

  You create a routing table named RT1.

  You need to route all inbound traffic from the VPN gateway to VNet1 through VM1.

  How should you configure RT1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 93:

  You are designing a large Azure environment that will contain many subscriptions.

  You plan to use Azure Policy as part of a governance solution.

  To which three scopes can you assign Azure Policy definitions? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. management groups
  B. subscriptions
  C. Azure Active Directory (Azure AD) tenants
  D. resource groups
  E. Azure Active Directory (Azure AD) administrative units
  F. compute resources
  A. management groups
  B. subscriptions
  D. resource groups

  ---

  Explanation

  Azure Policy evaluates resources in Azure by comparing the properties of those resources to business rules.

  Once your business rules have been formed, the policy definition or initiative is assigned to any scope of resources that Azure supports, such as management groups, subscriptions, resource groups, or individual resources.

  References:

  https://docs.microsoft.com/en-us/azure/governance/policy/overview

• Question 94:

  Your network contains an on-premises Active Directory forest.

  You discover that when users change jobs within your company, the membership of the user groups are not being updated. As a result, the users can access resources that are no longer relevant to their job.

  You plan to integrate Active Directory and Azure Active Directory (Azure AD) by using Azure AD Connect. You need to recommend a solution to ensure that group owners are emailed monthly about the group memberships they manage.

  What should you include in the recommendation?

  A. conditional access policies
  B. Tenant Restrictions
  C. Azure AD access reviews
  D. Azure AD Identity Protection
  C. Azure AD access reviews

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview

• Question 95:

  DRAG DROP

  You have 15 on-premises Hyper-V virtual machines.

  You have an Azure subscription that contains an Azure Migrate project named Project 1.

  You need to assess the virtual machines for migration to Azure by using Project 1.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 96:

  You need to recommend an App Service architecture that meets the requirements for App1.

  The solution must minimize costs.

  What should few recommend?

  A. one App Service Environment (ASE) per availability zone
  B. one App Service plan per availability zone
  C. one App Service plan per region
  D. one App Service Environment (ASE) per region
  C. one App Service plan per region

• Question 97:

  HOTSPOT

  You plan to create an Azure Storage account that will host file shares. The shares will be accessed from on-premises applications that are transaction-intensive.

  You need to recommend a solution to minimize latency when accessing the file shares. The solution must provide the highest-level of resiliency for the selected storage tier.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Premium

  Premium: Premium file shares are backed by solid-state drives (SSDs) and provide consistent high performance and low latency, within single-digit milliseconds for most IO operations, for IO-intensive workloads.

  Incorrect Answers:

  Hot: Hot file shares offer storage optimized for general purpose file sharing scenarios such as team shares. Hot file shares are offered on the standard storage hardware backed by HDDs.

  Transaction optimized: Transaction optimized file shares enable transaction heavy workloads that don't need the latency offered by premium file shares. Transaction optimized file shares are offered on the standard storage hardware backed by hard disk drives (HDDs). Transaction optimized has historically been called "standard", however this refers to the storage media type rather than the tier itself (the hot and cool are also "standard" tiers, because they are on standard storage hardware).

  Box 2: Zone-redundant storage (ZRS):

  Premium Azure file shares only support LRS and ZRS.

  Zone-redundant storage (ZRS): With ZRS, three copies of each file stored, however these copies are physically isolated in three distinct storage clusters in different Azure availability zones.

  References:

  https://docs.microsoft.com/en-us/azure/storage/files/storage-files-planning

• Question 98:

  You have an Azure subscription that contains an Azure key vault named KV1.

  You need to ensure that you can review how and when KV1 is accessed.

  The solution must minimize costs What should you use?

  A. the activity log of KV1
  B. Microsoft Sentinel
  C. Azure Monitor
  D. Microsoft Purview
  A. the activity log of KV1

• Question 99:

  HOTSPOT

  You have the resources shown in the following table.

  

  You create a new resource group in Azure named RG2.

  You need to move the virtual machines to RG2.

  What should you use to move each virtual machine? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Azure Resource Mover

  To move Azure VMs to another region, Microsoft now recommends using Azure Resource Mover.

  Incorrect:

  Not Azure Migrate: We are not migrating, only moving a VM between resource groups.

  Box 2: Azure Migrate

  Azure Migrate provides a centralized hub to assess and migrate on-premises servers, infrastructure, applications, and data to Azure.

  Azure migrate includes

  Azure Migrate Server Migration: Migrate VMware VMs, Hyper-V VMs, physical servers, other virtualized servers, and public cloud VMs to Azure.

  Incorrect:

  Not Arc: Azure Migrate is adequate. No need to use Azure Arc.

  Not Data Migration Assistant: Data Migration Assistant is a stand-alone tool to assess SQL Servers.

  It is used to assess SQL Server databases for migration to Azure SQL Database, Azure SQL Managed Instance, or Azure VMs running SQL Server.

  Not Lighthouse: Azure Lighthouse enables multi-tenant management with scalability, higher automation, and enhanced governance across resources.

  With Azure Lighthouse, service providers can deliver managed services using comprehensive and robust tooling built into the Azure platform. Customers maintain control over who has access to their tenant, which resources they can access, and what actions can be taken.

  References:

  https://docs.microsoft.com/en-us/azure/resource-mover/overviewhttps://docs.microsoft.com/en-us/azure/migrate/migrate-services-overviewhttps://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-tutorial-migrate

• Question 100:

  You are designing an app that will use Azure Cosmos DB to collate sales data from multiple countries.

  You need to recommend an API for the app. The solution must meet the following requirements:

  1. Support SQL queries.

  2. Support geo-replication.

  3. Store and access data relationally.

  Which API should you recommend?

  A. PostgreSQL
  B. NoSQL
  C. Apache Cassandra
  D. MongoDB
  A. PostgreSQL