Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 161:

  HOTSPOT

  You have an on-premises datacenter and an Azure subscription. The environment contains 100 databases of various types, including Azure SQL Database, Azure SQL Managed Instance, Azure Cosmos DB, Microsoft SQL Server, MySQL, and Oracle. Multiple apps access the databases.

  You need to recommend a data solution. The solution must meet the following requirements:

  Provide a single searchable catalog of the data in all the databases. The catalog must contain metadata of the data. The solution must minimize storage requirements.

  Provide a central data lake that contains specific data from multiple databases. The solution must include a big data engine that can create machine learning models.

  

  

• Question 162:

  You architect a solution that calculates 3D geometry from height-map data.

  You have the following requirements: Perform calculations in Azure.

  Each node must communicate data to every other node.

  Maximize the number of nodes to calculate multiple scenes as fast as possible.

  Require the least amount of effort to implement.

  You need to recommend a solution.

  Which two actions should you recommend? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Create a render farm that uses Azure Batch.
  B. Enable parallel file systems on Azure.
  C. Enable parallel task execution on compute nodes.
  D. Create a render farm that uses virtual machine (VM) scale sets.
  E. Create a render farm that uses virtual machines (VMs).
  A. Create a render farm that uses Azure Batch.
  C. Enable parallel task execution on compute nodes.

• Question 163:

  You plan to deploy an application that will run at a Linux-based Docker container You need to recommend a solution to host the application in Azure. The solution must meet the following requirements:

  1. Support a custom domain name and an associated SSL certificate.

  2. Scale-out automatically based on demand

  3. Minimize administrative effort and costs.

  What should you Include in the recommendation?

  A. Azure Container instances
  B. Azure Kubemetes Service (AKS)
  C. Azure App Service
  D. an Azure virtual machine
  C. Azure App Service

  ---

  Explanation

  App Service not only adds the power of Microsoft Azure to your application, such as security, load balancing, autoscaling, and automated management. You can also take advantage of its DevOps capabilities, such as continuous deployment from Azure DevOps, GitHub, Docker Hub, and other sources, package management, staging environments, custom domain, and TLS/SSL certificates.

  Key features of App Service include:

  1. Containerization and Docker - Dockerize your app and host a custom Windows or Linux container in App Service.

  2. Scale up or out manually or automatically. Host your apps anywhere in Microsoft's global datacenter infrastructure, and the App Service SLA promises high availability. App Service can also host web apps natively on Linux for supported application stacks. It can also run custom Linux containers (also known as Web App for Containers).

  References:

  https://docs.microsoft.com/en-us/azure/app-service/overview

• Question 164:

  HOTSPOT

  You plan to use Azure SQL as a database platform.

  You need to recommend an Azure SQL product and service tier that meets the following requirements:

  1. Automatically scales compute resources based on the workload demand

  2. Provides per second billing

  What should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: A single Azure SQL Database Azure SQL product

  Serverless is a compute tier for single databases in Azure SQL Database that automatically scales compute based on workload demand and bills for the amount of compute used per second.

  The serverless compute tier for single databases in Azure SQL Database is parameterized by a compute autoscaling range and an auto-pause delay.

  Box 2: General Purpose

  Service tier

  The serverless compute tier is available in the General Purpose service tier and currently in preview in the Hyperscale service tier.

  References:

  https://learn.microsoft.com/en-us/azure/azure-sql/database/serverless-tier-overview

• Question 165:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are designing an Azure solution for a company that has four departments. Each department will deploy several Azure app services and Azure SQL databases.

  You need to recommend a solution to report the costs for each department to deploy the app services and the databases. The solution must provide a consolidated view for cost reporting that displays cost broken down by department.

  Solution: Create a separate resource group for each department. Place the resources for each department in its respective resource group.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead create a resources group for each resource type. Assign tags to each resource group.

  Note: Tags enable you to retrieve related resources from different resource groups. This approach is helpful when you need to organize resources for billing or management.

  References:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

• Question 166:

  HOTSPOT

  You have an Azure subscription. The subscription contains 100 virtual machine that am Windows Server.

  You need to recommend a solution that will provide monitoring and an audit trail of the following modifications:

  1. Changes to the Windows registry on the virtual machines

  2. Changes to the DNS settings of the virtual machines

  The solution must minimize administrative effort.

  What should you recommend using for each change? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 167:

  Your company has offices in the United States, Europe, Asia, and Australia.

  You have an on-premises app named App1 that uses Azure Table storage. Each office hosts a local instance of App1.

  You need to upgrade the storage for App1. The solution must meet the following requirements:

  1. Enable simultaneous write operations in multiple Azure regions.

  2. Ensure that write latency is less than 10 ms.

  3. Support indexing on all columns.

  4. Minimize development effort.

  Which data platform should you use?

  A. Azure SQL Database
  B. Azure SQL Managed Instance
  C. Azure Cosmos DB
  D. Table storage that uses geo-zone-redundant storage (GZRS) replication
  C. Azure Cosmos DB

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/cosmos-db/table-support

• Question 168:

  DRAG DROP

  You plan to use Azure Storage to store data assets.

  You need to identify the procedure to fail over a general-purpose v2 account as part of a disaster recovery plan. The solution must meet the following requirements:

  1. Apps must be able to access the storage account after a failover.

  2. You must be able to fail back the storage account to the original location.

  3. Downtime must be minimized.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 169:

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned membership. Group1 has 50 members, including 20 guest users.

  You need to recommend a solution for evaluating the member ship of Group1. The solution must meet the following requirements:

  1. The evaluation must be repeated automatically every three months

  2. Every member must be able to report whether they need to be in Group1

  3. Users who report that they do not need to be in Group 1 must be removed from Group1 automatically

  4. Users who do not report whether they need to be in Group1 must be removed from

  Group1 automatically.

  What should you include in me recommendation?

  A. implement Azure AU Identity Protection.
  B. Change the Membership type of Group1 to Dynamic User.
  C. Implement Azure AD Privileged Identity Management.
  D. Create an access review.
  D. Create an access review.

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#learn-about-access-reviewsHavereviewsrecurperiodically:Youcansetuprecurringaccessreviewsofusersatsetfrequenciessuchasweekly,monthly,quarterlyorannually,andthereviewerswillbenotifiedatthestartofeachreview.Reviewerscanapproveordenyaccesswithafriendlyinterfaceandwiththehelpofsmartrecommendations.

  An administrator creates an access review of Group C with 50 member users and 25 guest users. Makes it a self-review. 50 licenses for each user as self-reviewers.*

  https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#example-license-scenarios

  There are 4 requirements and every single one is only met by access reviews.

  https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#when-should-you-use-access-reviews

  Dynamic User is needed if a user must be automatically granted access on base of its attributes (department, jobtitle, location, etc.)

  https://techcommunity.microsoft.com/t5/itops-talk-blog/dynamic-groups-in-azure-ad-and-microsoft-365/ba-p/2267494

  Implementing Azure AD PIM is no solution and absolutely not necessary for access reviews.

  https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#where-do-you-create-reviews

• Question 170:

  HOTSPOT

  You need to design an authentication solution that will integrate on-premises Active Directory and Azure Active Directory (Azure AD). The solution must meet the following requirements:

  1. Active Directory users must not be able to sign in to Azure AD-integrated apps outside of the sign-in hours configured in the Active Directory user accounts.

  2. Active Directory users must authenticate by using multi-factor authentication (MFA) when they sign in to Azure AD-integrated apps.

  3. Administrators must be able to obtain Azure AD-generated reports that list the Active Directory users who have leaked credentials.

  4. The infrastructure required to implement and maintain the solution must be minimized.

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Pass-through Authentication with Azure AD Seamless SSO Azure AD Seamless SSO versus Active Directory Federation Services Companies with a security requirement to immediately enforce on-premises user account states, password policies, and sign-in hours might use Azure AD Pass-through Authentication.

  You can combine Pass-through Authentication with the Seamless Single Sign-On feature.

  Note: Azure AD supports the following authentication methods for hybrid identity solutions.

  Azure AD password hash synchronization

  Azure AD Pass-through Authentication

  Box 2: Azure MFA

  One key benefit with Azure AD Pass-through Authentication is that it works seamlessly with Azure MFA.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn