Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 271:

  HOTSPOT

  You have the Azure management groups shown in the following table.

  

  You have the Azure subscriptions shown in the following table.

  

  You have the virtual machines shown in the following table.

  

  You have the resource groups shown in the following table.

  

  You have the Azure policies shown in the following table.

  You perform the following actions:

  1. Assign PA1 to MG1.

  2. Modify PA2 and configure the resource selector to include only Microsoft.Compute/virtualMachines in the East US Azure region.

  3. Modify PA3 and add an exclusion for Sub1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 272:

  Your company has IT, security, and finance departments.

  You need to implement a new Azure deployment that will include multiple Azure subscriptions and management groups. The solution must meet the following requirements:

  1. Ensure that all policies are assigned at the management group level.

  2. Ensure that all the finance department resources have specific encryption policies applied.

  3. Ensure that only users in the IT department can create virtual machines in any Azure region.

  4. Ensure that users in the finance department can create virtual machines in only the East US Azure region.

  What is the minimum number of management groups you can create for the planned deployment?

  A. 1
  B. 2
  C. 3
  D. 4
  B. 2

• Question 273:

  You need to recommend a solution to deploy containers that run an application. The application has two tiers.

  Each tier is implemented as a separate Docker Linux-based image.

  The solution must meet the following requirements:

  1. The front-end tier must be accessible by using a public IP address on port 80.

  2. The backend tier must be accessible by using port 8080 from the front-end tier only.

  3. Both containers must be able to access the same Azure file share.

  4. If a container fails, the application must restart automatically.

  5. Costs must be minimized.

  What should you recommend using to host the application?

  A. Azure Kubernetes Service (AKS)
  B. Azure Service Fabric
  C. Azure Container instances
  D. Azure Container registries
  C. Azure Container instances

  ---

  Explanation

  Azure Container Instances enables a layered approach to orchestration, providing all of the scheduling and management capabilities required to run a single container, while allowing orchestrator platforms to manage multi-container tasks on top of it.

  Because the underlying infrastructure for container instances is managed by Azure, an orchestrator platform does not need to concern itself with finding an appropriate host machine on which to run a single container.

  Azure Container Instances can schedule both Windows and Linux containers with the same API.

  Orchestration of container instances exclusively Because they start quickly and bill by the second, an environment based exclusively on Azure Container Instances offers the fastest way to get started and to deal with highly variable workloads.

  References:

  https://docs.microsoft.com/en-us/azure/container-instances/container-instances-overviewhttps://docs.microsoft.com/en-us/azure/container-instances/container-instances-orchestrator-relationship

• Question 274:

  HOTSPOT

  You have an Azure subscription. You plan to deploy two 100-virtual machine deployments as shown in the following table.

  

  You need to recommend a virtual machine grouping solution for the deployments.

  What should you include in the recommendation for each deployment? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 275:

  You have the Azure resources shown in the following table.

  

  You need to deploy a new Azure Firewall policy that will contain mandatory rules for all Azure Firewall deployments. The new policy will be configured as a parent policy for the existing policies.

  What is the minimum number of additional Azure Firewall policies you should create?

  B. 1
  C. 2
  D. 3
  B. 1

  ---

  Explanation

  Firewall policies work across regions and subscriptions. Place all your global configurations in the parent policy.

  Note: Policies can be created in a hierarchy. You can create a parent/global policy that will contain configurations and rules that will apply to all/a number of firewall instances. Then you create a child policy that inherits from the parent; note that rules changes in the parent instantly appear in the child. The child is associated with a firewall and applies configurations/rules from the parent policy and the child policy instantly to the firewall.

  References:

  https://aidanfinn.com/?p=22006

• Question 276:

  HOTSPOT

  You have an Azure subscription that contains 300 Azure virtual machines that run Windows Server 2016.

  You need to centrally monitor all warning events in the System logs of the virtual machines.

  What should you include in the solutions? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-windows-eventshttps://docs.microsoft.com/en-us/azure/azure-monitor/platform/agent-windows

• Question 277:

  You have an Azure Data Lake Storage account that contains 1,000 10-MB CSV files and an Azure Synapse Analytics dedicated SQL pool named sql1. You need to load the files to sql1.

  The solution must meet the following requirements:

  1. Maximize data load performance.

  2. Eliminate the need to define external tables before the data loads.

  What should you use?

  A. the copy statement
  B. PolyBase
  C. BCP
  D. the sqlBulkcopy object
  B. PolyBase

• Question 278:

  DRAG DROP

  You plan to deploy an infrastructure solution that will contain the following configurations:

  1. External users will access the infrastructure by using Azure Front Door.

  2. External user access to the backend APIs hosted in Azure Kubernetes Service (AKS) will be controlled by using Azure API Management.

  3. External users will be authenticated by an Azure AD B2C tenant that uses OpenID Connect-based federation with a third-party identity provider.

  Which function does each service provide? To answer, drag the appropriate functions to the correct services. Each function may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: Validation of Azure AD B2C JSON web Tokens (JWTs) Front Door

  Protect backend APIs by using Azure API Management and Azure AD B2C

  Architecture

  Dataflow 1. To gain access to an application, an API client authenticates by providing credentials such as username and password. The IdP is Azure AD B2C in this solution, but you can use a different one.

  2. The authentication request goes via Azure Front Door to Azure AD B2C, which is configured with a custom domain for sign-in. Azure AD B2C authenticates the user and returns a JSON Web Token (JWT) bearer token back to the user.

  3. The client triggers an event that accesses a backend API. This event could be a click of a button on a web application or on a mobile device, or a direct call to the endpoint of the backend API.

  4. The request goes through Azure Front Door, whose back end is mapped to the public endpoint of API Management. API Management intercepts the request and validates the bearer token against Azure AD B2C by using its validate-jwt policy. If the token isn't valid, API Management rejects the request by responding with a 401 code.

  5. If the token is valid, API Management forwards the request to the appropriate backend API.

  The diagram shows backend APIs running in three environments:

  App Service Environment

  Function Apps

  Azure Kubernetes Services (AKS)

  APIs running in on-premises and hybrid cloud environments can also be integrated with API Management if network connectivity is established between the APIs and API Management.

  Box 2: IP filtering on a per-API level Api Management

  Api Management keeps all your APIs behind a single static IP or domain, and help protect them with keys, tokens, and IP filtering.

  Note: Azure Application Gateway is a Layer 7 load balancer that manages traffic to web applications.

  API Management is a turnkey solution for publishing APIs to external and internal clients. It provides features that are useful for managing a public-facing API, including rate limiting, IP restrictions, and authentication that uses Azure AD or another IdP. API Management doesn't perform any load balancing, so you should use it with a load balancer such as Application Gateway or a reverse proxy.

  References:

  https://learn.microsoft.com/en-us/azure/architecture/solution-ideas/articles/protect-backend-apis-azure-managementhttps://azure.microsoft.com/en-us/products/api-management/

• Question 279:

  What should you recommend lo meet the monitoring requirements for App2?

  A. Azure Application Insights
  B. Container insights
  C. Microsoft Sentinel
  D. VM insights
  A. Azure Application Insights

• Question 280:

  You have an Azure subscription.

  Your on-premises network contains a file server named Server1. Server 1 stores 5 TB of company files that are accessed rarely.

  You plan to copy the files to Azure Storage.

  You need to implement a storage solution for the files that meets the following requirements:

  1. The files must be available within 24 hours of being requested.

  2. Storage costs must be minimized.

  Which two possible storage solutions achieve this goal?

  Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. Create a general-purpose v1 storage account. Create a blob container and copy the files to the blob container.
  B. Create a general-purpose v2 storage account that is configured for the Hot default access tier. Create a blob container, copy the files to the blob container, and set each file to the Archive access tier.
  C. Create a general-purpose v1 storage account. Create a file share in the storage account and copy the files to the file share.
  D. Create a general-purpose v2 storage account that is configured for the Cool default access tier. Create a file share in the storage account and copy the files to the file share.
  E. Create an Azure Blob storage account that is configured for the Cool default access tier. Create a blob container, copy the files to the blob container, and set each file to the Archive access tier.
  B. Create a general-purpose v2 storage account that is configured for the Hot default access tier. Create a blob container, copy the files to the blob container, and set each file to the Archive access tier.
  E. Create an Azure Blob storage account that is configured for the Cool default access tier. Create a blob container, copy the files to the blob container, and set each file to the Archive access tier.

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/storage/blobs/manage-access-tier?tabs=portal