Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 231:

  You plan provision a High Performance Computing (HPC) cluster in Azure that will use a third-party scheduler.

  You need to recommend a solution to provision and manage the HPC cluster node.

  What should you include in the recommendation?

  A. Azure Lighthouse
  B. Azure CycleCloud
  C. Azure Purview
  D. Azure Automation
  B. Azure CycleCloud

  ---

  Explanation

  You can dynamically provision Azure HPC clusters with Azure CycleCloud. Azure CycleCloud is the simplest way to manage HPC workloads.

  Note: Azure CycleCloud is an enterprise-friendly tool for orchestrating and managing High Performance Computing (HPC) environments on Azure. With CycleCloud, users can provision infrastructure for HPC systems, deploy familiar HPC schedulers, and automatically scale the infrastructure to run jobs efficiently at any scale. Through CycleCloud, users can create different types of file systems and mount them to the compute cluster nodes to support HPC workloads.

  References:

  https://docs.microsoft.com/en-us/azure/cyclecloud/overview

• Question 232:

  HOTSPOT

  You need to recommend a solution to integrate Azure Cosmos DB and Azure Synapse. The solution must meet the following requirements:

  Traffic from an Azure Synapse workspace to the Azure Cosmos DB account must be sent via the Microsoft backbone network.

  Traffic from the Azure Synapse workspace to the Azure Cosmos DB account must NOT be routed over the internet.

  Implementation effort must be minimized.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Configure a dedicated managed virtual network Azure Synapse workspace

  Managed private endpoints are only supported in Azure Synapse workspaces with a Managed workspace Virtual Network.

  Box 2: Managed private endpoints Azure Cosmos DB account

  Synapse Managed private endpoints

  Managed private endpoints

  Managed private endpoints are private endpoints created in a Managed Virtual Network associated with your Azure Synapse workspace. Managed private endpoints establish a private link to Azure resources. Azure Synapse manages these private endpoints on your behalf. You can create Managed private endpoints from your Azure Synapse workspace to access Azure services (such as Azure Storage or Azure Cosmos DB) and Azure hosted customer/partner services.

  When you use Managed private endpoints, traffic between your Azure Synapse workspace and other Azure resources traverse entirely over the Microsoft backbone network. Managed private endpoints protect against data exfiltration.

  Note: Configure and use Azure Synapse Link for Azure Cosmos DB

  Azure Synapse Link for Azure Cosmos DB is a cloud-native hybrid transactional and analytical processing (HTAP) capability that enables you to run near real-time analytics over operational data in Azure Cosmos DB. Synapse Link creates a tight seamless integration between Azure Cosmos DB and Azure Synapse Analytics.

  References:

  https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-managed-private-endpoints

• Question 233:

  You have 500 Azure web apps in the same Azure region. The apps use a premium Azure key vault for authentication.

  A developer reports that some authentication requests are being throttled.

  You need to recommend a solution to increase the available throughput of the key vault. The solution must minimize costs.

  What should you recommend?

  A. Change the pricing tier.
  B. Configure geo-replication.
  C. Configure load balancing for the apps.
  D. Increase the number of key vaults in the subscription.
  D. Increase the number of key vaults in the subscription.

  ---

  Explanation

  To maximize your Key Vault through put rates, here are some recommended guidelines/best practices for maximizing your throughput:

  1. Ensure you have throttling in place. Client must honor exponential back-off policies for 429's and ensure you are doing retries as per the guidance below.

  2. Divide your Key Vault traffic amongst multiple vaults and different regions. Use a separate vault for each security/availability domain. If you have five apps, each in two regions, then we recommend 10 vaults each containing the secrets unique to app and region.

  References:

  https://docs.microsoft.com/en-us/azure/key-vault/general/overview-throttling

• Question 234:

  You plan to deploy an Azure BareMetal Infrastructure instance that will host the data tier of a business-critical workload. The application tier of the workload will be hosted on Azure virtual machines.

  You need to configure the virtual machines to minimize network latency between the application tier and the data tier.

  What should you use?

  A. an availability zone
  B. ExpressRoute FastPath
  C. an availability set
  D. a proximity placement group
  D. a proximity placement group

• Question 235:

  HOTSPOT

  You have an on-premises Microsoft SQL Server database named SQL1.

  You plan to migrate SQL 1 to Azure.

  You need to recommend a hosting solution for SQL1. The solution must meet the following requirements:

  1. Support the deployment of multiple secondary, read-only replicas.

  2. Support automatic replication between primary and secondary replicas.

  3. Support failover between primary and secondary replicas within a 15-minute recovery time objective (RTO).

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 236:

  You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service (AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines. The virtual machines and the AKS cluster will reside on the same virtual network.

  You need to design a solution to expose the microservices to the consumer apps. The solution must meet the following requirements:

  1. Ingress access to the microservices must be restricted to a single private IP address and protected by using mutual TLS authentication.

  2. The number of incoming microservice calls must be rate-limited.

  3. Costs must be minimized.

  What should you include in the solution?

  A. Azure API Management Premium tier with virtual network connection
  B. Azure Front Door with Azure Web Application Firewall (WAF)
  C. Azure API Management Standard tier with a service endpoint
  D. Azure App Gateway with Azure Web Application Firewall (WAF)
  A. Azure API Management Premium tier with virtual network connection

  ---

  Explanation

  One option is to deploy APIM (API Management) inside the cluster VNet. The AKS cluster and the applications that consume the microservices might reside within the same VNet, hence there is no reason to expose the cluster publicly as all API traffic will remain within the VNet. For these scenarios, you can deploy API Management into the cluster VNet. API Management Premium tier supports VNet deployment.

  References:

  https://docs.microsoft.com/en-us/azure/api-management/api-management-kubernetes

• Question 237:

  HOTSPOT

  You have an Azure subscription that contains the resources shown in the following table.

  

  VNet1, VNet2, and VNet3 each has multiple virtual machines connected. The virtual machines use the Azure DNS service for name resolution.

  You need to recommend an Azure Monitor log routing solution that meets the following requirements:

  1. Ensures that the logs collected from the virtual machines and sent to Workspace1 are routed over the Microsoft backbone network

  2. Minimizes administrative effort

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  

  

• Question 238:

  You have an app named App1 that uses two on-premises Microsoft SQL Server databases named DB1 and DB2.

  You plan to migrate DB1 and DB2 to Azure.

  You need to recommend an Azure solution to host DB1 and DB2.

  The solution must meet the following requirements:

  1. Support server-side transactions across DB1 and DB2.

  2. Minimize administrative effort to update the solution.

  What should you recommend?

  A. two SQL Server databases on an Azure virtual machine
  B. two Azure SQL databases on different Azure SQL Database servers
  C. two Azure SQL databases in an elastic pool
  D. two Azure SQL databases on the same Azure SQL Database managed instance
  D. two Azure SQL databases on the same Azure SQL Database managed instance

  ---

  Explanation

  An Azure SQL Managed Instance is a fully managed SQL Server Database Engine hosted in Azure that provides most of the SQL Server capabilities. It supports features like cross-database queries and transactions, which is crucial for your requirement of supporting server-side transactions across DB1 and DB2. Additionally, since it's a fully managed solution, it minimizes the administrative effort needed to update and maintain the system.

  References:

  https://docs.particular.net/nservicebus/azure/understanding-transactionality-in-azure

• Question 239:

  HOTSPOT

  You have several Azure App Service web apps that use Azure Key Vault to store data encryption keys. Several departments have the following requests to support the web app:

  

  Which service should you recommend for each department's request? To answer, configure the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 240:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.

  The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.

  You need to recommend a solution to meet the regulatory requirement.

  Solution: You recommend using the Regulatory compliance dashboard in Azure Security Center.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  The Regulatory compliance dashboard in Azure Security Center is not used for regional compliance.

  Note: Instead Azure Resource Policy Definitions can be used which can be applied to a specific Resource Group with the App Service instances.

  Note 2: In the Azure Security Center regulatory compliance blade, you can get an overview of key portions of your compliance posture with respect to a set of supported standards. Currently supported standards are Azure CIS, PCI DSS 3.2, ISO 27001, and SOC TSP.

  References:

  https://docs.microsoft.com/en-us/azure/governance/policy/overviewhttps://azure.microsoft.com/en-us/blog/regulatory-compliance-dashboard-in-azure-security-center-now-available/