Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 11:

  You have an application that is used by 6,000 users to validate their vacation requests. The application manages its own credential

  Users must enter a username and password to access the application. The application does NOT support identity providers.

  You plan to upgrade the application to use single sign-on (SSO) authentication by using an Azure Active Directory (Azure AD) application registration.

  Which SSO method should you use?

  A. password-based
  B. OpenID Connect
  C. header-based
  D. SAML
  A. password-based

• Question 12:

  HOTSPOT

  You have an app that generates 50,000 events daily.

  You plan to Stream the events to an Azure event hub and use Event Hubs Capture to implement cold path processing Of the events Output Of Event Hubs Capture will be consumed by a reporting system.

  You reed to identify which type of Azure storage must be provisioned to support Event Hubs Capture, and which inbound data format the reporting system must support.

  What should you identity? To answer. select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  1. Storage Type: Azure Data Lake Storage Gen2

  Azure Event Hubs Capture allows captured data to be written either to Azure Blob Storage or Azure Data Lake Storage Gen2. Given the nature of the data and its use in reporting and analysis, Azure Data Lake Storage Gen2 is the more appropriate choice because it is designed for big data analytics.

  2. Data format: Avro

  Event Hubs Capture uses Avro format for the data it captures. Avro is a row-oriented format that is suitable for various data types, it's compact, fast, binary, and enables efficient and fast serialization of data. This makes it a good choice for Event Hubs Capture.

• Question 13:

  You have an Azure Cosmos DB account named Account1. Account1 includes a database named DB1 that contains a container named Container1. The partition key for Container1 is set to /city.

  You plan to change the partition key for Container1.

  What should you do first?

  A. Delete Container1.
  B. Create a new Azure Cosmos DB account.
  C. Implement the Azure Cosmos DB.NET.SDK.
  D. Regenerate the keys for Account1.
  B. Create a new Azure Cosmos DB account.

  ---

  Explanation

  The Change Feed Processor and Bulk Executor Library, in Azure Cosmos DB can be leveraged to achieve a live migration of your data from one container to another. This allows you to re-distribute your data to match the desired new partition key scheme, and make the relevant application changes afterwards, thus achieving the effect of "updating your partition key".

  References:

  https://devblogs.microsoft.com/cosmosdb/how-to-change-your-partition-key/

• Question 14:

  HOTSPOT

  You have an on-premises database that you plan to migrate to Azure.

  You need to design the database architecture to meet the following requirements:

  1. Support scaling up and down.

  2. Support geo-redundant backups.

  3. Support a database of up to 75 TB.

  4. Be optimized for online transaction processing (OLTP).

  What should you include in the design? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Azure SQL Database

  Azure SQL Database:

  Database size always depends on the underlying service tiers (e.g. Basic, Business Critical, Hyperscale).

  It supports databases of up to 100 TB with Hyperscale service tier model.

  Active geo-replication is a feature that lets you to create a continuously synchronized readable secondary database for a primary database. The readable secondary database may be in the same Azure region as the primary, or, more commonly, in a different region. This kind of readable secondary databases are also known as geo-secondaries, or geo-replicas.

  Azure SQL Database and SQL Managed Instance enable you to dynamically add more resources to your database with minimal downtime.

  Box 2: Hyperscale

  Incorrect Answers:

  SQL Server on Azure VM: geo-replication not supported.

  Azure Synapse Analytics is not optimized for online transaction processing (OLTP).

  Azure SQL Managed Instance max database size is up to currently available instance size (depending on the number of vCores).

  Max instance storage size (reserved) - 2 TB for 4 vCores

  - 8 TB for 8 vCores

  - 16 TB for other sizes

  References:

  https://docs.microsoft.com/en-us/azure/azure-sql/database/active-geo-replication-overviewhttps://medium.com/awesome-azure/azure-difference-between-azure-sql-database-and-sql-server-on-vm-comparison-azure-sql-vs-sql-server-vm-cf02578a1188

• Question 15:

  You have an Azure subscription that contains a Basic Azure virtual WAN named VirtualWAN1 and the virtual hubs shown in the following table.

  

  You have an ExpressRoute circuit in the US East region.

  You need to create an ExpressRoute association to VirtualWAN1.

  What should you do first?

  A. Upgrade VirtualWAN1 to Standard.
  B. Create a gateway on Hub1.
  C. Create a hub virtual network in US East.
  D. Enable the ExpressRoute premium add-on.
  A. Upgrade VirtualWAN1 to Standard.

  ---

  Explanation

  To create an ExpressRoute association with VirtualWAN1, you need to upgrade VirtualWAN1 from the Basic tier to the Standard tier. ExpressRoute connectivity to a virtual WAN is only supported in the Standard tier of Azure Virtual WAN.

  Once you have upgraded VirtualWAN1 to the Standard tier, you can proceed with setting up the ExpressRoute association.

• Question 16:

  You plan to deploy an Azure App Service web app that will have multiple instances across multiple Azure regions.

  You need to recommend a load balancing service for the planned deployment. The solution must meet the following requirements:

  1. Maintain access to the app in the event of a regional outage.

  2. Support Azure Web Application Firewall (WAF).

  3. Support cookie-based affinity.

  4. Support URL routing.

  What should you include in the recommendation?

  A. Azure Front Door
  B. Azure Load Balancer
  C. Azure Traffic Manager
  D. Azure Application Gateway
  A. Azure Front Door

  ---

  Explanation

  Azure Front Door works across regions and support URL routing (HTTP(S)).

  Note: HTTP(S) load-balancing services are Layer 7 load balancers that only accept HTTP(S) traffic. They are intended for web applications or other HTTP(S) endpoints. They include features such as SSL offload, web application firewall, path-based load balancing, and session affinity.

  

  References:

  https://docs.microsoft.com/en-us/azure/application-gateway/features

• Question 17:

  HOTSPOT

  You have the Free edition of a hybrid Azure Active Directory (Azure AD) tenant. The tenant uses password hash synchronization.

  You need to recommend a solution to meet the following requirements:

  1. Prevent Active Directory domain user accounts from being locked out as the result of brute force attacks targeting Azure AD user accounts.

  2. Block legacy authentication attempts to Azure AD integrated apps.

  3. Minimize costs.

  What should you recommend for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Smart lockout

  Smart lockout helps lock out bad actors that try to guess your users' passwords or use brute-force methods to get in. Smart lockout can recognize sign-ins that come from valid users and treat them differently than ones of attackers and other unknown sources. Attackers get locked out, while your users continue to access their accounts and be productive.

  Box 2: Conditional access policies

  If your environment is ready to block legacy authentication to improve your tenant's protection, you can accomplish this goal with Conditional Access.

  How can you prevent apps using legacy authentication from accessing your tenant's resources? The recommendation is to just block them with a Conditional Access policy. If necessary, you allow only certain users and specific network locations to use apps that are based on legacy authentication.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-smart-lockouthttps://docs.microsoft.com/en-us/azure/active-directory/conditional-access/block-legacy-authentication

• Question 18:

  You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:

  1. Provide access to the full .NET framework.

  2. Provide redundancy if an Azure region fails.

  3. Grant administrators access to the operating system to install custom application dependencies.

  Solution: You deploy a web app in an Isolated App Service plan.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead, you should deploy an Azure virtual machine to two Azure regions, and you create a Traffic Manager profile.

• Question 19:

  DRAG DROP

  You have an Azure subscription.

  You are designing a deployment solution for the Azure App Service web apps shown in the following table.

  

  You need to recommend a compute solution for the apps.

  What should you include in the recommendation for each app? To answer, drag the appropriate recommendations to the correct apps. Each recommendation may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 20:

  You need to recommend a notification solution for the IT Support distribution group.

  What should you include in the recommendation?

  A. Azure Network Watcher
  B. an action group
  C. a SendGrid account with advanced reporting
  D. Azure AD Connect Health
  D. Azure AD Connect Health

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-healthoperations