Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 181:

  You need to design a highly available Azure SQL database that meets the following requirements:

  1. Failover between replicas of the database must occur without any data loss.

  2. The database must remain available in the event of a zone outage.

  3. Costs must be minimized.

  Which deployment option should you use?

  A. Azure SQL Database Serverless
  B. Azure SQL Database Business Critical
  C. Azure SQL Database Basic
  D. Azure SQL Database Standard
  B. Azure SQL Database Business Critical

• Question 182:

  HOTSPOT

  You have an Azure subscription that contains 50 Azure SQL databases.

  You create an Azure Resource Manager (ARM) template named Template1 that enables Transparent Data Encryption (TDE).

  You need to create an Azure Policy definition named Policy1 that will use Template1 to enable TDE for any noncompliant Azure SQL databases.

  How should you configure Policy1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: DeployIfNotExists

  DeployIfNotExists

  Similar to AuditIfNotExists, a DeployIfNotExists policy definition executes a template deployment when the condition is met.

  DeployIfNotExists evaluation

  DeployIfNotExists runs after a configurable delay when a Resource Provider handles a create or update subscription or resource request and has returned a success status code. A template deployment occurs if there are no related resources or if the resources defined by ExistenceCondition don't evaluate to true. The duration of the deployment depends on the complexity of resources included in the template.

  During an evaluation cycle, policy definitions with a DeployIfNotExists effect that match resources are marked as non-compliant, but no action is taken on that resource.

  Incorrect:

  EnforceRegoPolicy

  No such thing in this context.

  Modify

  Modify is used to add, update, or remove properties or tags on a subscription or resource during creation or update. A common example is updating tags on resources such as costCenter.

  Modify evaluation

  Modify evaluates before the request gets processed by a Resource Provider during the creation or updating of a resource. The Modify operations are applied to the request content when the if condition of the policy rule is met. Each Modify operation can specify a condition that determines when it's applied. Operations with false condition evaluations are skipped.

  Box 2: The identity required to perform the remediation task Policy assignments with effect set as DeployIfNotExists require a managed identity to do remediation.

  Note: Each policy definition in Azure Policy has a single effect. That effect determines what happens when the policy rule is evaluated to match. The effects behave differently if they are for a new resource, an updated resource, or an existing resource.

  These effects are currently supported in a policy definition:

  Append

  Audit

  AuditIfNotExists

  Deny

  DenyAction (preview)

  DeployIfNotExists

  Disabled

  Manual

  Modify References:

  https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effects

• Question 183:

  You plan to deploy 10 applications to Azure. The applications will be deployed to two Azure Kubernetes Service (AKS) clusters. Each cluster will be deployed to a separate Azure region.

  The application deployment must meet the following requirements:

  1. Ensure that the applications remain available if a single AKS cluster fails.

  2. Ensure that the connection traffic over the internet is encrypted by using SSL without having to configure SSL on each container.

  Which service should you include in the recommendation?

  A. AKS ingress controller
  B. Azure Traffic Manager
  C. Azure Front Door
  D. Azure Load Balancer
  C. Azure Front Door

  ---

  Explanation

  "Azure Front Door, which focuses on global load-balancing and site acceleration, and Azure CDN Standard, which offers static content caching and acceleration. The new Azure Front Door brings together security with CDN technology for a cloud-based CDN with threat protection and additional capabilities. "

• Question 184:

  HOTSPOT

  You need to recommend a solution to ensure that App1 can access the third-party credentials and access strings. The solution must meet the security requirements.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Scenario: Security Requirement

  All secrets used by Azure services must be stored in Azure Key Vault.

  Services that require credentials must have the credentials tied to the service instance. The credentials must NOT be shared between services.

  Box 1: A service principal

  A service principal is a type of security principal that identifies an application or service, which is to say, a piece of code rather than a user or group. A service principal's object ID is known as its client ID and acts like its username. The service principal's client secret acts like its password.

  Note: Authentication with Key Vault works in conjunction with Azure Active Directory (Azure AD), which is responsible for authenticating the identity of any given security principal.

  A security principal is an object that represents a user, group, service, or application that's requesting access to Azure resources. Azure assigns a unique object ID to every security principal.

  Box 2: A role assignment

  You can provide access to Key Vault keys, certificates, and secrets with an Azure role-based access control.

  References:

  https://docs.microsoft.com/en-us/azure/key-vault/general/authentication

• Question 185:

  You plan to deploy multiple instances of an Azure web app across several Azure regions.

  You need to design an access solution for the app. The solution must meet the following replication requirements:

  1. Support rate limiting.

  2. Balance requests between all instances.

  3. Ensure that users can access the app in the event of a regional outage.

  Solution: You use Azure Traffic Manager to provide access to the app.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/frontdoor/front-door-overviewhttps://docs.microsoft.com/en-us/azure/frontdoor/front-door-wafhttps://www.cloudmatter.io/post/azure-front-door-and-web-application-firewall-cheatsheet

• Question 186:

  You are building an app named App1 that will monitor thousands of sensors across multiple sites. The app will include the resources shown in the following table.

  

  You need to recommend a real lime analytics solution lot App1. The solution must meet the following requirements;

  Perform analytics on the sensor data in real time.

  Ensure that the solution scales dynamically.

  Minimize development effort.

  Minimize costs.

  What is the minimum number of Azure Stream Analytics jobs you should deploy?

  A. 1
  B. 2
  C. 3
  D. 6
  B. 2

• Question 187:

  HOTSPOT

  You have an Azure subscription that contains the SQL servers on Azure shown in the following table.

  

  The subscription contains the storage accounts shown in the following table.

  

  You create the Azure SQL databases shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  Be sure that the destination is in the same region as your database and server.

  Box 2: No

  Box 3: Yes

  https://docs.microsoft.com/en-us/azure/sql-database/sql-database-auditing

• Question 188:

  You have an Azure subscription that contains an Azure Blob storage account named store1.

  You have an on-premises file server named Setver1 that runs Windows Sewer 2016.Server1 stores 500 GB of company files.

  You need to store a copy of the company files from Server1 in store1.

  Which two possible Azure services achieve this goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point

  A. an Azure Batch account
  B. an integration account
  C. an On-premises data gateway
  D. an Azure Import/Export job
  E. Azure Data factory
  D. an Azure Import/Export job
  E. Azure Data factory

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs

  https://docs.microsoft.com/en-us/answers/questions/31113/fastest-method-to-copy-500gb-table-from-on-premise.html

• Question 189:

  HOTSPOT

  You have the Azure resources shown in the following table.

  

  You need to design a solution that provides on-premises network connectivity to SQLDB1 through PE1.

  How should you configure name resolution? To answer, select the appropriate options in the answer area.

  

  

• Question 190:

  You are developing an application that will enable users to download content from an Azure Storage account.

  The users must only be able to download the content for a period of seven days.

  You need to recommend an authentication solution to access the storage account.

  What should you include in the recommendation?

  A. shared access signature (SAS) tokens
  B. identity-based authentication that uses Active Directory Domain Services (AD DS)
  C. storage access key
  D. identity-based authentication that uses Azure Active Directory (Azure AD)
  A. shared access signature (SAS) tokens

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview