Microsoft Microsoft Azure AZ-305 Questions & Answers

• Question 301:

  You need to recommend a strategy for migrating the database content of WebApp1 to Azure. What should you include in the recommendation?

  A. Use Azure Site Recovery to replicate the SQL servers to Azure.

  B. Use SQL Server transactional replication.

  C. Copy the BACPAC file that contains the Azure SQL database file to Azure Blob storage.

  D. Copy the VHD that contains the Azure SQL database files to Azure Blob storage

  Correct Answer: D

  Before you upload a Windows virtual machine (VM) from on-premises to Azure, you must prepare the virtual hard disk (VHD or VHDX).

  Scenario: WebApp1 has a web tier that uses Microsoft Internet Information Services (IIS) and a database tier that runs Microsoft SQL Server 2016. The web tier and the database tier are deployed to virtual machines that run on Hyper-V.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/prepare-for-upload-vhdimage

• Question 302:

  You need to recommend a strategy for the web tier of WebApp1. The solution must minimize What should you recommend?

  A. Create a runbook that resizes virtual machines automatically to a smaller size outside of business hours.

  B. Configure the Scale Up settings for a web app.

  C. Deploy a virtual machine scale set that scales out on a 75 percent CPU threshold.

  D. Configure the Scale Out settings for a web app.

  Correct Answer: A

• Question 303:

  You need to recommend a data storage strategy for WebApp1. What should you include in in the recommendation?

  A. an Azure SQL Database elastic pool

  B. a vCore-based Azure SQL database

  C. an Azure virtual machine that runs SQL Server

  D. a fixed-size DTU AzureSQL database.

  Correct Answer: B

• Question 304:

  You need to recommend a notification solution for the IT Support distribution group. What should you include in the recommendation?

  A. Azure Network Watcher

  B. an action group

  C. a SendGrid account with advanced reporting

  D. Azure AD Connect Health

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-healthoperations

• Question 305:

  After you migrate App1 to Azure, you need to enforce the data modification requirements to meet the security and compliance requirements. What should you do?

  A. Create an access policy for the blob service.

  B. Implement Azure resource locks.

  C. Create Azure RBAC assignments.

  D. Modify the access level of the blob service.

  Correct Answer: A

  Scenario: Once App1 is migrated to Azure, you must ensure that new data can be written to the app, and the modification of new and existing data is prevented for a period of three years.

  As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

• Question 306:

  You need to implement the Azure RBAC role assignments for the Network Contributor role. The solution must meet the authentication and authorization requirements. What is the minimum number of assignments that you must use?

  A. 1

  B. 2

  C. 5

  D. 10

  E. 15

  Correct Answer: A

  Scenario: The Network Contributor built-in RBAC role must be used to grant permissions to the network administrators for all the virtual networks in all the Azure subscriptions. RBAC roles must be applied at the highest level possible.

• Question 307:

  You plan to migrate App1 to Azure.

  You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 data. The solution must meet the security and compliance requirements.

  What should you include in the recommendation?

  A. Microsoft peering for an ExpressRoute circuit

  B. Azure public peering for an ExpressRoute circuit

  C. a service endpoint that has a service endpoint policy

  D. a private endpoint

  Correct Answer: D

  Private Endpoint securely connect to storage accounts from on-premises networks that connect to the VNet using VPN or ExpressRoutes with private-peering. Private Endpoint also secure your storage account by configuring the storage firewall to block all connections on the public endpoint for the storage service. Incorrect Answers:

  A: Microsoft peering provides access to Azure public services via public endpoints with public IP addresses, which should not be allowed.

  B: Azure public peering has been deprecated.

  C: By default, Service Endpoints are enabled on subnets configured in Azure virtual networks. Endpoints can't be used for traffic from your premises to Azure services.

  Reference: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-circuit-peerings

• Question 308:

  You plan to migrate App1 to Azure. The solution must meet the authentication and authorization requirements. Which type of endpoint should App1 use to obtain an access token?

  A. Azure Instance Metadata Service (IMDS)

  B. Azure AD

  C. Azure Service Management

  D. Microsoft identity platform

  Correct Answer: D

  Scenario: To access the resources in Azure, App1 must use the managed identity of the virtual machines that will host the app.

  Managed identities provide an identity for applications to use when connecting to resources that support Azure Active Directory (Azure AD) authentication. Applications may use the managed identity to obtain Azure AD tokens.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azureresources/overview

• Question 309:

  You migrate App1 to Azure.

  You need to ensure that the data storage for App1 meets the security and compliance requirement

  What should you do?

  A. Create an access policy for the blob

  B. Modify the access level of the blob service.

  C. Implement Azure resource locks.

  D. Create Azure RBAC assignments.

  Correct Answer: C

  Scenario: Once App1 is migrated to Azure, you must ensure that new data can be written to the app, and the modification of new and existing data is prevented for a period of three years.

  As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources.

  The lock overrides any permissions the user might have.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lockresources