Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 281:

  HOTSPOT

  You are planning an Azure Storage solution for sensitive data. The data will be accessed daily. The data set is less than 10 GB.

  You need to recommend a storage solution that meets the following requirements:

  1. All the data written to storage must be retained for five years.

  2. Once the data is written, the data can only be read. Modifications and deletion must be prevented.

  3. After five years, the data can be deleted, but never modified.

  4. Data access charges must be minimized

  What should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: General purpose v2 with Archive acce3ss tier for blobs Archive - Optimized for storing data that is rarely accessed and stored for at least 180 days with flexible latency requirements, on the order of hours. Cool - Optimized for storing data that is infrequently accessed and stored for at least 30 days.

  Hot - Optimized for storing data that is accessed frequently.

  Box 2: Storage account resource lock

  As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have.

  Note: You can set the lock level to CanNotDelete or ReadOnly. In the portal, the locks are called Delete and Read-only respectively.

  CanNotDelete means authorized users can still read and modify a resource, but they can't delete the resource.

  ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.

• Question 282:

  You are designing a point of sale (POS) solution that will be deployed across multiple locations and will use an Azure Databricks workspace in the Standard tier. The solution will include multiple apps deployed to the on-premises network of each location.

  You need to configure the authentication method that will be used by the app to access the workspace. The solution must minimize the administrative effort associated with staff turnover and credential management.

  What should you configure?

  A. a managed identity
  B. a service principal
  C. a personal access token
  B. a service principal

• Question 283:

  HOTSPOT

  You deploy several Azure SQL Database instances.

  You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  In the exhibit, the SQLInsights data is configured to be stored in Azure Log Analytics for 90 days. However, the question is asking for the "maximum" amount of time that the data can be stored which is 730 days.

• Question 284:

  You have 12 Azure subscriptions and three projects. Each project uses resources across multiple subscriptions.

  You need to use Microsoft Cost Management to monitor costs on a per project basis. The solution must minimize administrative effort.

  Which two components should you include in the solution? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. budgets
  B. resource tags
  C. custom role-based access control (RBAC) roles
  D. management groups
  E. Azure boards
  B. resource tags
  D. management groups

  ---

  Explanation

  Option B: Resource tags are the only way to add your own business context to cost details and are perhaps the most flexible way to map resources to applications, business units, environments, owners, etc.

  Option D: Management groups allow grouping subscriptions together.

  Note: Cost Management is available from within the Billing experience. It's also available from every subscription, resource group, and management group in the Azure portal. The availability is to ensure everyone has full visibility into the costs they're responsible for. And, so they can optimize their workloads to maximize efficiency. Cost Management is also available independently to streamline the process for managing cost across multiple billing accounts, subscriptions, resource groups, and management groups.

  References:

  https://learn.microsoft.com/en-us/azure/cost-management-billing/cost-management-billing-overview

• Question 285:

  HOTSPOT

  You need to ensure that users managing the production environment are registered for Azure MFA and must authenticate by using Azure MFA when they sign in to the Azure portal.

  The solution must meet the authentication and authorization requirements.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  1: Azure AD Identity Protection

  Litware.com has Conditional Access Policy. Don't enable or enforce per-user Azure AD Multi-Factor Authentication if you use Conditional Access policies.

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstatesThereforitshouldNOTbePeruserMFA2:Grantcontrolincapolicy1EnablingAzureADMulti-FactorAuthenticationusingConditionalAccesspoliciesistherecommendedapproachtoprotectusers.ConditionalAccessisanAzureADPremiumP1orP2featurethatletsyouapplyrulestorequireMFAasneededincertainscenarios.GrantControlisonestepinprocesstoenableMFAinConditionalAccessPolicy.

• Question 286:

  The developers at your company are building a containerized Python Django app.

  You need to recommend platform to host the app. The solution must meet the following requirements:

  1. Support autoscaling.

  2. Support continuous deployment from an Azure Container Registry.

  3. Provide built-in functionality to authenticate app users by using Azure Active Directory (Azure AD).

  Which platform should you include in the recommendation?

  A. Azure Container instances
  B. an Azure App Service instance that uses containers
  C. Azure Kubernetes Service (AKS)
  C. Azure Kubernetes Service (AKS)

  ---

  Explanation

  To keep up with application demands in Azure Kubernetes Service (AKS), you may need to adjust the number of nodes that run your workloads. The cluster autoscaler component can watch for pods in your cluster that can't be scheduled because of resource constraints. When issues are detected, the number of nodes in a node pool is increased to meet the application demand.

  Azure Container Registry is a private registry for hosting container images. It integrates well with orchestrators like Azure Container Service, including Docker Swarm, DC/OS, and the new Azure Kubernetes service. Moreover, ACR provides capabilities such as Azure Active Directory-based authentication, webhook support, and delete operations.

  References:

  https://docs.microsoft.com/en-us/azure/aks/cluster-autoscalerhttps://medium.com/velotio-perspectives/continuous-deployment-with-azure-kubernetes-service-azurecontainer-registry-jenkins-ca337940151b

• Question 287:

  You have an Azure subscription that contains two applications named App1 and App2. App1 is a sales processing application. When a transaction in App1 requires shipping, a message is added to an Azure Storage account queue, and then App2 listens to the queue for relevant transactions.

  In the future, additional applications will be added that will process some of the shipping requests based on the specific details of the transactions.

  You need to recommend a replacement for the storage account queue to ensure that each additional application will be able to read the relevant transactions

  What should you recommend?

  A. one Azure Service Bus queue
  B. one Azure Service Bus topic
  C. one Azure Data Factory pipeline
  D. multiple storage account queues
  B. one Azure Service Bus topic

  ---

  Explanation

  A queue allows processing of a message by a single consumer. In contrast to queues, topics and subscriptions provide a one-to-many form of communication in a publish and subscribe pattern. It's useful for scaling to large numbers of recipients. Each published message is made available to each subscription registered with the topic. Publisher sends a message to a topic and one or more subscribers receive a copy of the message, depending on filter rules set on these subscriptions.

  References:

  https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-queues-topics-subscriptions

• Question 288:

  HOTSPOT

  Your on-premises network contains a file server named Server1 that stores 500 GB of data.

  You need to use Azure Data Factory to copy the data from Server1 to Azure Storage.

  You add a new data factory.

  What should you do next? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Install a self-hosted integration runtime.

  The Integration Runtime is a customer-managed data integration infrastructure used by Azure Data Factory to provide data integration capabilities across different network environments.

  Box 2: Create a pipeline With ADF, existing data processing services can be composed into data pipelines that are highly available and managed in the cloud. These data pipelines can be scheduled to ingest, prepare, transform, analyze, and publish data, and ADF manages and orchestrates the complex data and processing dependencies

  References:

  https://docs.microsoft.com/en-us/azure/machine-learning/team-data-science-process/move-sql-azure-adfhttps://docs.microsoft.com/pl-pl/azure/data-factory/tutorial-hybrid-copy-data-toolhttps://docs.microsoft.com/en-us/azure/data-factory/create-self-hosted-integration-runtime?tabs=data-factory

  "A self-hosted integration runtime can run copy activities between a cloud data store and a data store in a private network" (https://docs.microsoft.com/en-us/azure/data-factory/introduction)

  "With Data Factory, you can use the Copy Activity in a data pipeline to move data from both on-premises and cloud source data stores to a centralization data store in the cloud for further analysis"

• Question 289:

  Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.

  The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions.The resources for the App Service instances must reside in the same region.

  You need to recommend a solution to meet the regulatory requirement.

  Solution: You recommend using an Azure policy to enforce the location of resource groups.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 290:

  HOTSPOT

  A company is implementing role-based access control (RBAC) for its Azure environment. The company has an Azure subscription with two resource groups: RG-Network-East RG-Network-West

  Two Microsoft Entra ID (Azure AD) security groups exist:

  Role1-East

  Role1-West

  You need to implement the Azure RBAC role assignments.

  The solution must meet the authentication and authorization requirements: Role1-East must manage only RG-Network-East Role1-West must manage only RG-Network-West Permissions must follow least privilege and be scoped at the resource group level

  How many assignments should you configure for each of the following? To answer, select appropriate in the answer area.