Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 111:

  HOTSPOT

  You plan to develop a new app that will store business critical data. The app must meet the following requirements:

  1. Prevent new data from being modified for one year.

  2. Maximize data resiliency.

  3. Minimize read latency.

  What storage solution should you recommend for the app? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Storage Account Type: Premium Block Blobs provide high-performance, low-latency storage for unstructured data such as images, videos, and documents. However, it does not provide a built-in feature to prevent data modification. Standard General Purpose v1 or v2 can be used with the help of additional features such as Azure Blob Versioning to meet the requirement of preventing new data from being modified for one year. Since the requirement is to minimize read latency, I would recommend using the Standard General Purpose v2 storage account type which offers a higher level of performance and scalability.

  Redundancy: To maximize data resiliency, I would recommend using Zone-Redundant Storage (ZRS) replication. This replicates data across multiple zones within a single region, providing high availability and resiliency in case of a zone failure.

  Therefore, the recommended storage solution for the given scenario would be to use Standard General Purpose v2 storage account type with ZRS redundancy and additional features such as Azure Blob Versioning to prevent new data from being modified for one year while minimizing read latency.

• Question 112:

  You have an Azure subscription that contains an Azure Kubernetes Service (AKS) instance named AKS1. AKS1 hosts microservice-based APIs that are configured to listen on non-default HTTP ports.

  You plan to deploy a Standard tier Azure API Management instance named APIM1 that will make the APIs available to external users.

  You need to ensure that the AKS1 APIs are accessible to APIM1. The solution must meet the following requirements:

  Implement MTLS authentication between APIM1 and AKS1.

  Minimize development effort.

  Minimize costs.

  What should you do?

  A. Implement an external load balancer on AKS1.
  B. Redeploy APIM1 to the virtual network that contains AKS1.
  C. Implement an ExternalName service on AKS1.
  D. Deploy an ingress controller to AKS1.
  D. Deploy an ingress controller to AKS1.

  ---

  Explanation

  References:

  https://learn.microsoft.com/en-us/azure/api-management/api-management-kubernetes

• Question 113:

  HOTSPOT

  You have an Azure subscription that contains the storage accounts shown in the following table.

  

  You plan to implement two new apps that have the requirements shown in the following table.

  

  Which storage accounts should you recommend using for each app? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  In conclusion the correct answers are: Box1 --> Storage1 and Storage3 only

  Box2 --> Storage1 and Storage4 only

  https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview

  https://www.edureka.co/community/40011/different-storage-accounts-there-major-difference-between

  https://insidemstech.com/tag/general-purpose-v2/

  https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share?tabs=azure-portal#basics

• Question 114:

  You have an Azure subscription that contains a storage account.

  An application sometimes writes duplicate files to the storage account.

  You have a PowerShell script that identifies and deletes duplicate files in the storage account. Currently, the script is run manually after approval from the operations manager.

  You need to recommend a serverless solution that performs the following actions:

  1. Runs the script once an hour to identify whether duplicate files exist

  2. Sends an email notification to the operations manager requesting approval to delete the duplicate files

  3. Processes an email response from the operations manager specifying whether the deletion was approved

  4. Runs the script if the deletion was approved

  What should you include in the recommendation?

  A. Azure Logic Apps and Azure Functions
  B. Azure Pipelines and Azure Service Fabric
  C. Azure Logic Apps and Azure Event Grid
  D. Azure Functions and Azure Batch
  A. Azure Logic Apps and Azure Functions

  ---

  Explanation

  You can schedule a powershell script with Azure Logic Apps.

  When you want to run code that performs a specific job in your logic apps, you can create your own function by using Azure Functions. This service helps you create Node.js, C#, and F# functions so you don't have to build a complete app or infrastructure to run code. You can also call logic apps from inside Azure functions. Azure Functions provides serverless computing in the cloud and is useful for performing tasks such as these examples:

  References:

  https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-azure-functions

• Question 115:

  HOTSPOT

  You have 10 on-premises servers that run Windows Server.

  You need to perform daily backups of the servers to a Recovery Services vault. The solution must meet the following requirements:

  1. Back up all the files and folders on the servers.

  2. Maintain three copies of the backups in Azure.

  3. Minimize costs.

  What should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: The Microsoft Azure Recovery Services (MARS) agent

  You can use the Azure Backup service to back up on-premises machines and apps and to back up Azure virtual machines (VMs).

  The MARS agent

  Azure Backup uses the MARS agent to back up data from on-premises machines and Azure VMs to a backup Recovery Services vault in Azure. The MARS agent can:

  Run on on-premises Windows machines so that they can back up directly to a backup Recovery Services vault in Azure.

  Run on Windows VMs so that they can back up directly to a vault.

  Run on Microsoft Azure Backup Server (MABS) or a System Center Data Protection Manager (DPM) server. In this scenario, machines and workloads back up to MABS or to the DPM server. The MARS agent then backs up this server to a vault in Azure.

  Incorrect:

  The Azure Site Recovery Mobility service About the Mobility service for VMware VMs and physical servers.

  When you set up disaster recovery for VMware virtual machines (VM) and physical servers using Azure Site Recovery, you install the Site Recovery Mobility service on each on-premises VMware VM and physical server. The Mobility service captures data, writes on the machine, and forwards them to the Site Recovery process server.

  Volume Shadow Copy Service (VSS)

  The Volume Shadow Copy Service (VSS) captures and copies stable images for backup on running systems, particularly servers, without unduly degrading the performance and stability of the services they provide.

  Box 2: Locally Redundant Storage (LRS)

  Locally Redundant Storage (LRS) is the least expensive solution.

  How does Azure Backup follow the 3-2-1 rule? 3 -copies of your data are stored in the Azure region of your choosing. If you add your production data, you are superior to 3-2-1 rule. Within an Azure Region, Locally Redundant Storage (LRS) replicates your data three times. These three replicas each reside in separate fault and upgrade domains.

  References:

  https://www.cbfive.com/3-2-1-azure-backup/https://learn.microsoft.com/en-us/azure/backup/backup-support-matrix-mars-agenthttps://learn.microsoft.com/en-us/azure/site-recovery/vmware-physical-mobility-service-overview

• Question 116:

  You are designing a high-availability solution for a multi-tier containerized app that will be hosted in a multi-node Azure Kubernetes Service (AKS) cluster. The cluster nodes will be distributed across three availability zones. Each tier will contain three pods.

  You need to ensure that active pods of the app are distributed across all the availability zones.

  Which AKS feature should you use?

  A. Kubernetes controller type
  B. leader election
  C. startup probes
  D. scheduling anti-affinity
  D. scheduling anti-affinity

• Question 117:

  You are designing a solution that will include containerized applications running in an Azure Kubernetes Service (AKS) cluster.

  You need to recommend a load balancing solution for HTTPS traffic.

  The solution must meet the following requirements:

  1. Automatically configure load balancing rules as the applications are deployed to the cluster.

  2. Support Azure Web Application Firewall (WAF).

  3. Support cookie-based affinity.

  4. Support URL routing.

  What should you include the recommendation?

  A. an NGINX ingress controller
  B. Application Gateway Ingress Controller (AGIC)
  C. an HTTP application routing ingress controller
  D. the Kubernetes load balancer service
  B. Application Gateway Ingress Controller (AGIC)

  ---

  Explanation

  Much like the most popular Kubernetes Ingress Controllers, the Application Gateway Ingress Controller provides several features, leveraging Azure's native Application Gateway L7 load balancer. To name a few:

  URL routing

  Cookie-based affinity

  Secure Sockets Layer (SSL) termination

  End-to-end SSL Support for public, private, and hybrid web sites Integrated support of Azure web application firewall

  Application Gateway redirection support isn't limited to HTTP to HTTPS redirection alone. This is a generic redirection mechanism, so you can redirect from and to any port you define using rules. It also supports redirection to an external site as well.

  References:

  https://docs.microsoft.com/en-us/azure/application-gateway/features

• Question 118:

  DRAG DROP

  You need to design an architecture to capture the creation of users and the assignment of roles. The captured data must be stored in Azure Cosmos DB.

  Which Azure services should you include in the design? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  1. AAD audit log -> Event Hub (other two choices, LAW, storage, but not available in this question)

  https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/tutorial-azuremonitor-stream-logs-to-event-hub2.Azure

  function has the Event hub trigger and Cosmos output binding Event Hub trigger for function

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-event-hubstrigger?tabs=csharp

• Question 119:

  You have an app named App1 that uses an Azure Blob Storage container named app1data. App1 uploads a cumulative transaction log file named File1.txt to a block blob in app1data once every hour. File1.txt stores transaction data from the current day only.

  You need to ensure that you can restore a previous version of File1.txt from any point within the last 30 days after the file is overwritten. The solution must minimize storage space.

  What should you include in the solution?

  A. container soft delete
  B. blob snapshots
  C. blob soft delete
  D. blob versioning
  D. blob versioning

• Question 120:

  HOTSPOT

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1. Server1 contains an app named App1 that uses AD DS authentication. Remote users access App1 by using a VPN connection to the on-premises network.

  You have an Azure AD tenant that syncs with the AD DS domain by using Azure AD Connect.

  You need to ensure that the remote users can access App1 without using a VPN. The solution must meet the following requirements:

  Ensure that the users authenticate by using Azure Multi-Factor Authentication (MFA).

  Minimize administrative effort.

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-applicationhttps://learn.microsoft.com/en-us/azure/architecture/reference-architectures/identity/azure-ad