Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 21:

  HOTSPOT

  You have an on-premises Microsoft SQL Server database named DB1. You have an Azure subscription.

  You need to migrate DB1 to an Azure SQL Managed Instance. The solution must meet the following requirements:

  Support offloading read-only workloads to secondary replicas.

  Provide resiliency in the event of an Azure region outage.

  Support up to 16 TB of storage.

  Minimize costs.

  Which service tier and feature should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 22:

  You plan to migrate App1 to Azure.

  You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 data. The solution must meet the security and compliance requirements.

  What should you include in the recommendation?

  A. Microsoft peering for an ExpressRoute circuit
  B. Azure public peering for an ExpressRoute circuit
  C. a service endpoint that has a service endpoint policy
  D. a private endpoint
  D. a private endpoint

  ---

  Explanation

  Private Endpoint securely connect to storage accounts from on-premises networks that connect to the VNet using VPN or ExpressRoutes with private-peering.

  Private Endpoint also secure your storage account by configuring the storage firewall to block all connections on the public endpoint for the storage service.

  Incorrect Answers:

  Option A: Microsoft peering provides access to Azure public services via public endpoints with public IP addresses, which should not be allowed.

  Option B: Azure public peering has been deprecated.

  Option C: By default, Service Endpoints are enabled on subnets configured in Azure virtual networks. Endpoints can't be used for traffic from your premises to Azure services.

  References:

  https://docs.microsoft.com/en-us/azure/expressroute/expressroute-circuit-peerings

• Question 23:

  HOTSPOT

  You have a Microsoft Entra tenant named contoso.com that contains multiple enterprise apps.

  Your company has a business partner that has a Microsoft Entra tenant named fabrikam.com.

  You need to recommend an identity governance solution that will provide users in fabrikam.com with access to the enterprise apps in contoso.com. The solution must meet the following requirements:

  1. Ensure that administrators in fabrikam.com can provide the fabrikam.com users with access to the contoso.com enterprise apps.

  2. Automatically provision identities for the fabrikam.com users to enable access to the contoso.com enterprise apps.

  3. Provide policy-based management of access assignments, approvals, and expirations.

  4. Minimize administrative effort.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct collection is worth one point.

  

  

• Question 24:

  You have 100 devices that write performance data to Azure Blob Storage.

  You plan to store and analyze the performance data in an Azure SQL database.

  You need to recommend a solution to continually copy the performance data to the Azure SQL database.

  What should you include in the recommendation?

  A. Azure Data Factory
  B. Data Migration Assistant (DMA)
  C. Azure Data Box
  D. Azure Database Migration Service
  A. Azure Data Factory

• Question 25:

  You have an Azure subscription. The subscription contains an app that is hosted in the East US, Central Europe, and East Asia regions.

  You need to recommend a data-tier solution for the app.

  The solution must meet the following requirements:

  1. Support multiple consistency levels.

  2. Be able to store at least 1 TB of data.

  3. Be able to perform read and write operations in the Azure region that is local to the app instance.

  What should you include in the recommendation?

  A. an Azure Cosmos DB database
  B. a Microsoft SQL Server Always On availability group on Azure virtual machines
  C. an Azure SQL database in an elastic pool
  D. Azure Table storage that uses geo-redundant storage (GRS) replication
  A. an Azure Cosmos DB database

  ---

  Explanation

  Azure Cosmos DB approaches data consistency as a spectrum of choices. This approach includes more options than the two extremes of strong and eventual consistency. You can choose from five well-defined levels on the consistency spectrum. With Cosmos DB any write into any region must be replicated and committed to all configured regions within the account.

  References:

  https://docs.microsoft.com/en-us/azure/cosmos-db/consistency-levels-tradeoffs

• Question 26:

  HOTSPOT

  You are designing a storage solution that will ingest, store, and analyze petabytes (PBs) of structured, semi-structured, and unstructured text data. The analyzed data will be offloaded to Azure Data Lake Storage Gen2 for long-term retention.

  You need to recommend a storage and analytics solution that meets the following requirements:

  1. Stores the processed data

  2. Provides interactive analytics

  3. Supports manual scaling, built-in autoscaling, and custom autoscaling

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Azure Data Lake Analytics Stores the processed data Provides interactive analytics

  Azure Data Lake Analytics is an on-demand analytics job service that simplifies big data. Instead of deploying, configuring, and tuning hardware, you write queries to transform your data and extract valuable insights. The analytics service can handle jobs of any scale instantly by setting the dial for how much power you need. You only pay for your job when it's running, making it cost-effective.

  U-SQL: simple and familiar, powerful, and extensible Data Lake Analytics includes U-SQL, a query language that extends the familiar, simple, declarative nature of SQL with the expressive power of C#. The U-SQL language uses the same distributed runtime that powers Microsoft's internal exabyte-scale data lake. SQL and .NET developers can now process and analyze their data with the skills they already have.

  Box 2: U-SQL

  Get started with U-SQL in Azure Data Lake Analytics U-SQL is a language that combines declarative SQL with imperative C# to let you process data at any scale. Through the scalable, distributed-query capability of U-SQL, you can efficiently analyze data across relational stores such as Azure SQL Database. With U-SQL, you can process unstructured data by applying schema on read and inserting custom logic and UDFs. Additionally, U-SQL includes extensibility that gives you fine-grained control over how to execute at scale.

  References:

  https://learn.microsoft.com/en-us/azure/data-lake-analytics/data-lake-analytics-u-sql-get-started

• Question 27:

  You have multiple on-premises networks.

  You have multiple Azure subscriptions. Each subscription contains a virtual network that is assigned an IP address space of 172.16.0.0/16. Each virtual network is connected to the on-premises networks by using ExpressRoute. You plan to deploy a container orchestration solution that will use multiple Azure Kubernetes Service (AKS) clusters. The clusters will be deployed to the existing virtual networks.

  You need to recommend a network configuration for the AKS clusters. The solution must meet the following requirements:

  Minimize the number of IP addresses required on each virtual network.

  Support outbound connectivity to on-premises datacenters.

  Support Windows node pools.

  Which AKS network model should you recommend?

  A. Azure CNI Overlay
  B. kubenet
  C. Azure CNI
  D. Azure CNI Powered by Cilium
  A. Azure CNI Overlay

• Question 28:

  HOTSPOT

  You have an Azure Load Balancer named LB1 that balances requests to five Azure virtual machines.

  You need to develop a monitoring solution for LB1. The solution must generate an alert when any of the following conditions are met:

  1. A virtual machine is unavailable.

  2. Connection attempts exceed 50,000 per minute.

  Which signal should you include in the solution for each condition? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Data path availability

  Standard Load Balancer continuously exercises the data path from within a region to the load balancer front end, all the way to the SDN stack that supports your VM. As long as healthy instances remain, the measurement follows the same path as your application's load-balanced traffic. The data path that your customers use is also validated. The measurement is invisible to your application and does not interfere with other operations.

  Note: Load balancer distributes inbound flows that arrive at the load balancer's front end to backend pool instances. These flows are according to configured load-balancing rules and health probes. The backend pool instances can be Azure Virtual Machines or instances in a virtual machine scale set.

  Box 2: SYN count

  SYN (synchronize) count: Standard Load Balancer does not terminate Transmission Control Protocol (TCP) connections or interact with TCP or UDP packet flows. Flows and their handshakes are always between the source and the VM instance. To better troubleshoot your TCP protocol scenarios, you can make use of SYN packets counters to understand how many TCP connection attempts are made. The metric reports the number of TCP SYN packets that were received.

  Incorrect Answers:

  Health probe status: Standard Load Balancer uses a distributed health-probing service that monitors your application endpoint's health according to your configuration settings. This metric provides an aggregate or per-endpoint filtered view of each instance endpoint in the load balancer pool. You can see how Load Balancer views the health of your application, as indicated by your health probe configuration.

  Packet count: Standard Load Balancer reports the packets processed per front end.

  Byte Count: Standard Load Balancer reports the data processed per front end. You may notice that the bytes are not distributed equally across the backend instances. This is expected as Azure's Load Balancer algorithm is based on flows

  References:

  https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-standard-diagnostics

• Question 29:

  You need to recommend an Azure Storage solution that meets the following requirements:

  1. The storage must support 1 PB of data.

  2. The data must be stored in blob storage.

  3. The storage must support three levels of subfolders.

  4. The storage must support access control lists (ACLs).

  What should you include in the recommendation?

  A. a premium storage account that is configured for block blobs
  B. a general purpose v2 storage account that has hierarchical namespace enabled
  C. a premium storage account that is configured for page blobs
  D. a premium storage account that is configured for files shares and supports large file shares
  B. a general purpose v2 storage account that has hierarchical namespace enabled

  ---

  Explanation

  Microsoft recommends that you use a GPv2 storage account for most scenarios. It supports up to 5 PB, and blob storage including Data Lake storage.

  Note: A key mechanism that allows Azure Data Lake Storage Gen2 to provide file system performance at object storage scale and prices is the addition of a hierarchical namespace. This allows the collection of objects/files within an account to be organized into a hierarchy of directories and nested subdirectories in the same way that the file system on your computer is organized. With a hierarchical namespace enabled, a storage account becomes capable of providing the scalability and cost-effectiveness of object storage, with file system semantics that are familiar to analytics engines and frameworks.

  References:

  https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overviewhttps://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-namespace

• Question 30:

  HOTSPOT

  You have 100 Azure Storage accounts.

  Access to the accounts is restricted by using Azure role-based access control (Azure RBAC) assignments.

  You need to recommend a solution that uses role assignment conditions based on the tags assigned to individual resources within the storage accounts.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.