Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 251:

  HOTSPOT

  You design a solution for the web tier of WebApp1 as shown in the exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select

  

  

  ---

  Box 1: Yes

  Any new deployments to Azure must be redundant in case an Azure region fails.

  Traffic Manager uses DNS to direct client requests to the most appropriate service endpoint based on a traffic-routing method and the health of the endpoints. An endpoint is any Internet-facing service hosted inside or outside of Azure. Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to failure, including the failure of an entire Azure region.

  Box 2: Yes

  Recent changes in Azure brought some significant changes in autoscaling options for Azure Web Apps (i.e. Azure App Service to be precise as scaling happens on App Service plan level and has effect on all Web Apps running in that App Service plan).

  Box 3: No

  Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to failure, including the failure of an entire Azure region.

• Question 252:

  What should you recommend to meet themonitoring requirements for App2?

  A. Microsoft Sentinel
  B. Azure Application Insights
  C. Container insights
  D. VM insights
  B. Azure Application Insights

• Question 253:

  HOTSPOT

  You have an Azure subscription that contains the virtual networks shown in the following table.

  

  You create an Azure Cosmos DB account as shown in the exhibit. (Click the Exhibit tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Connectivity Method: Private Network

  Box 2: Yes

  Private endpoint: Endpoint1 (Core (SQL)) (Vnet1) VM1 is in Vnet1.

  Box 3: No

  VM2 is not in Vnet1.

  References:

  https://docs.microsoft.com/en-us/azure/private-link/tutorial-private-endpoint-cosmosdb-portal

• Question 254:

  You have an Azure subscription that contains an Azure App Service app named App1 in a Standard App Service plan. App1 is accessed directly from the internet by using the following URL: https://app1.contoso.com.The Azure region that hosts App1 supports availability zones for App Service apps.

  You need to recommend a redundancy solution for App1. The solution must meet the following requirements:

  1. Ensure that App1 is available if two availability zones fail.

  2. Minimize administrative effort.

  3. Minimize costs.

  What should you recommend?

  A. Create an App Service Environment v3. Redeploy App1.
  B. Scale out the existing App1 App Service instance to three instances.
  C. Create a new Premium v3 App Service plan. Redeploy App1.
  D. Scale up the existing App Service plan for App1 to the Premium v3 tier.
  A. Create an App Service Environment v3. Redeploy App1.

• Question 255:

  DRAG DROP

  You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016 and Linux.

  You need to use Azure Monitor to design an alerting strategy for security-related events.

  Which Azure Monitor Logs tables should you query? To answer, drag the appropriate tables to the correct log types. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/log-analytics-agent

  Windows Event logs --> Information sent to the Windows event logging system. Syslog -->Information sent to the Linux event logging system.

• Question 256:

  You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain.

  You have an internal web app named WebApp1 that is hosted on-premises. WebApp1 uses Integrated Windows authentication.

  Some users work remotely and do NOT have VPN access to the on-premises network.

  You need to provide the remote users with single sign-on (SSO) access to WebApp1.

  Which two features should you include in the solution? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Azure AD Application Proxy
  B. Azure AD Privileged Identity Management (PIM)
  C. Conditional Access policies
  D. Azure Arc
  E. Azure AD enterprise applications
  F. Azure Application Gateway
  A. Azure AD Application Proxy
  C. Conditional Access policies

  ---

  Explanation

  A: Application Proxy is a feature of Azure AD that enables users to access on-premises web applications from a remote client. Application Proxy includes both the Application Proxy service which runs in the cloud, and the Application Proxy connector which runs on an on-premises server.

  You can configure single sign-on to an Application Proxy application.

  Option C: Microsoft recommends using Application Proxy with pre-authentication and Conditional Access policies for remote access from the internet. An approach to provide Conditional Access for intranet use is to modernize applications so they can directly authenticate with AAD.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-config-sso-how-tohttps://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-deployment-plan

• Question 257:

  You create an Azure Kubernetes Service (AKS) duster and an Azure Container Registry.

  You need to perform continuous deployments of a containerized application to the AKS cluster as soon as the image updates in the registry.

  What should you use to perform the deployments?

  A. an Azure Pipelines release pipeline
  B. an Azure Automation runbook
  C. an Azure Resource Manager template
  D. a kubectl script from a CRON job
  A. an Azure Pipelines release pipeline

  ---

  Explanation

  You can implement a Continuous Deployment pipeline.

  Example:

  

  What the pipeline accomplishes : Stage 1: The code gets pushed in the Github. The Jenkins job gets triggered automatically.

  The Dockerfile is checked out from Github.

  Stage 2: Docker builds an image from the Dockerfile and then the image is tagged with the build number. Additionally, the latest tag is also attached to the image for the containers to use. Stage 3: We have default deployment and service YAML files stored on the Jenkins server. Jenkins makes a copy of the default YAML files, make the necessary changes according to the build and put them in a separate folder.

  Stage 4: kubectl was initially configured at the time of setting up AKS on the Jenkins server. The YAML files are fed to the kubectl util which in turn creates pods and services.

  References:

  https://medium.com/velotio-perspectives/continuous-deployment-with-azure-kubernetes-service-azure-container-registry-jenkins-ca337940151b

• Question 258:

  HOTSPOT

  You have an Azure subscription that contains multiple storage accounts.

  You assign Azure Policy definitions to the storage accounts.

  You need to recommend a solution to meet the following requirements:

  1. Trigger on-demand Azure Policy compliance scans.

  2. Raise Azure Monitor non-compliance alerts by querying logs collected by Log Analytics.

  What should you recommend for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://learn.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data

• Question 259:

  You have the resources shown in the following table.

  

  CDB1 hosts a container that stores continuously updated operational data.

  You are designing a solution that will use AS1 to analyze the operational data daily.

  You need to recommend a solution to analyze the data without affecting the performance of the operational data store.

  What should you include in the recommendation?

  A. Azure Cosmos DB change feed
  B. Azure Data Factory with Azure Cosmos DB and Azure Synapse Analytics connectors
  C. Azure Synapse Analytics with PolyBase data loading
  D. Azure Synapse Link for Azure Cosmos DB
  D. Azure Synapse Link for Azure Cosmos DB

  ---

  Explanation

  Azure Synapse Link for Azure Cosmos DB creates a tight integration between Azure Cosmos DB and Azure Synapse Analytics. It enables customers to run near real-time analytics over their operational data with full performance isolation from their transactional workloads and without an ETL pipeline.

  References:

  https://docs.microsoft.com/en-us/azure/cosmos-db/synapse-link-frequently-asked-questions

• Question 260:

  HOTSPOT

  You have an Azure subscription that contains the resources shown in the following table:

  

  Log files from App1 are registered to App1Logs. An average of 120 GB of log data is ingested per day.

  You configure an Azure Monitor alert that will be triggered if the App1 logs contain error messages.

  You need to minimize the Log Analytics costs associated with App1. The solution must meet the following requirements: Ensure that all the log files from App1 are ingested to App1Logs.

  Minimize the impact on the Azure Monitor alert.

  Which resource should you modify, and which modification should you perform? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Workspace1

  Resource Box 2: Change to a commitment pricing tier Modification

  Commitment tiers

  In addition to the pay-as-you-go model, Log Analytics has commitment tiers, which can save you as much as 30 percent compared to the pay-as-you-go price. With commitment tier pricing, you can commit to buy data ingestion for a workspace, starting at 100 GB per day, at a lower price than pay-as-you-go pricing. Any usage above the commitment level (overage) is billed at that same price per GB as provided by the current commitment tier.

  Incorrect:

  Change to the Basic Logs data plan.

  Would not support alerts.

  Note: Azure Monitor Logs offers two log data plans that let you reduce log ingestion and retention costs and take advantage of Azure Monitor's advanced features and analytics capabilities based on your needs:

  The default Analytics log data plan provides full analysis capabilities and makes log data available for queries, Azure Monitor features, such as alerts, and use by other services.

  The Basic log data plan lets you save on the cost of ingesting and storing high-volume verbose logs in your Log Analytics workspace for debugging, troubleshooting, and auditing, but not for analytics and alerts.

  Set a daily cap

  A daily cap would not guarantee that all log files are ingested.

  Set daily cap on Log Analytics workspace

  A daily cap on a Log Analytics workspace allows you to avoid unexpected increases in charges for data ingestion by stopping collection of billable data for the rest of the day whenever a specified threshold is reached.

  References:

  https://learn.microsoft.com/en-us/azure/azure-monitor/logs/cost-logs#commitment-tiershttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/daily-caphttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/basic-logs-configure