Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 301:

  HOTSPOT

  You have five .NET Core applications that run on 10 Azure virtual machines in the same subscription.

  You need to recommend a solution to ensure that the applications can authenticate by using the same Azure Active Directory (Azure AD) identity. The solution must meet the following requirements:

  1. Ensure that the applications can authenticate only when running on the 10 virtual machines.

  2. Minimize administrative effort.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Create a system-assigned Managed Identities for Azure resource

  The managed identities for Azure resources feature in Azure Active Directory (Azure AD) feature provides Azure services with an automatically managed identity in Azure AD. You can use the identity to authenticate to any service that supports Azure AD authentication, including Key Vault, without any credentials in your code.

  A system-assigned managed identity is enabled directly on an Azure service instance. When the identity is enabled, Azure creates an identity for the instance in the Azure AD tenant that's trusted by the subscription of the instance. After the identity is created, the credentials are provisioned onto the instance.

  Box 2: An Azure Instance Metadata Service Identity

  See step 3 and 5 below.

  How a system-assigned managed identity works with an Azure VM 1. Azure Resource Manager receives a request to enable the system-assigned managed identity on a VM.

  2. Azure Resource Manager creates a service principal in Azure AD for the identity of the VM. The service principal is created in the Azure AD tenant that's trusted by the subscription.

  3. Azure Resource Manager configures the identity on the VM by updating the Azure Instance Metadata Service identity endpoint with the service principal client ID and certificate.

  4. After the VM has an identity, use the service principal information to grant the VM access to Azure resources. To call Azure Resource Manager, use role-based access control (RBAC) in Azure AD to assign the appropriate role to the VM service principal. To call Key Vault, grant your code access to the specific secret or key in Key Vault.

  5. Your code that's running on the VM can request a token from the Azure Instance Metadata service endpoint, accessible only from within the VM

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

• Question 302:

  You need to recommend a solution that meets the application development requirements.

  What should you include in the recommendation?

  A. an Azure Container Registry instance
  B. deployment slots
  C. Continuous Integration/Continuous Deployment (CI/CD) sources
  D. the Azure App Configuration service
  B. deployment slots

• Question 303:

  You have an Azure subscription that contains two applications named App1 and App2.

  App1 is a sales processing application.

  When a transaction in App1 requires shipping, a message is added to an Azure Storage account queue, and then App2 listens to the queue (or relevant transactions.

  In the future, additional applications will be added that will process some of the shipping requests based on the specific details of the transactions.

  You need to recommend a replacement for the storage account queue to ensure that each additional application will be able to read the relevant transactions.

  What should you recommend?

  A. one Azure Service Bus queue
  B. one Azure Service Bus topic
  C. one Azure Data Factory pipeline
  D. multiple storage account queues
  B. one Azure Service Bus topic

  ---

  Explanation

  A queue allows processing of a message by a single consumer. In contrast to queues, topics and subscriptions provide a one-to-many form of communication in a publish and subscribe pattern. It's useful for scaling to large numbers of recipients. Each published message is made available to each subscription registered with the topic. Publisher sends a message to a topic and one or more subscribers receive a copy of the message, depending on filter rules set on these subscriptions.

  References:

  https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-queues-topics-subscriptions

• Question 304:

  DRAG DROP

  You have an Azure Active Directory (Azure AD) tenant. All user accounts are synchronized from an on-premises Active Directory domain and are configured for federated authentication. Active Directory Federation Services (AD FS) servers are published for external connections by using a farm of Web Application Proxy servers.

  You need to recommend a solution to monitor the servers that integrate with Azure AD. The solution must meet the following requirements:

  1. Identify any AD FS issues and their potential resolutions.

  2. Identify any directory synchronization configuration issues and their potential resolutions

  3. Notify administrators when there are any issues affecting directory synchronization or AD FS operations.

  Which monitoring solution should you recommend for each server type?

  To answer, drag the appropriate monitoring solutions to the correct server types. Each monitoring solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 305:

  You plan to deploy an Azure Database for MySQL flexible server named Server1 to the East US Azure region.

  You need to implement a business continuity solution for Server1. The solution must minimize downtime in the event of a failover to a paired region.

  What should you do?

  A. Create a read replica.
  B. Store the database files in Azure premium file shares.
  C. Implement Geo-redundant backup.
  D. Configure native MySQL replication.
  C. Implement Geo-redundant backup.

  ---

  Explanation

  The table below illustrates the features that the Azure Database for MySQL - Flexible Server service offers.

  Geo-redundant backup - Available in all Azure paired regions.The service backups can be configured as geo-redundant at create time. Enabling Geo-redundancy replicates the server backup data files in the primary region's paired region to provide regional resiliency. Geo-redundant backup storage provides at least 99.99999999999999% (16 nines) durability of objects over a given year.

  References:

  https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-business-continuity

• Question 306:

  HOTSPOT

  You have an on-premises app named App1 that supports REST calls and webhooks.

  You have an Azure subscription.

  You plan to develop a new app named App2 that will send a Microsoft Teams message when a new record is added to App1.

  You need to recommend a service to host App2 and the type of trigger to use to call App2. The solution must minimize development effort.

  What should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 307:

  You have 100 servers that run Windows Server 2012 R2 and host Microsoft SQL Server 2012 R2 instances. The instances host databases that have the following characteristics:

  1. The largest database is currently 3 TB.

  2. None of the databases will ever exceed 4 TB.

  3. Stored procedures are implemented by using CLR.

  You plan to move all the data from SQL Server to Azure.

  You need to recommend an Azure service to host the databases. The solution must meet the following requirements:

  Whenever possible, minimize management overhead for the migrated databases. Minimize the number of database changes required to facilitate the migration. Ensure that users can authenticate by using their Active Directory credentials.

  What should you include in the recommendation?

  A. Azure SQL Database single databases
  B. Azure SQL Database Managed Instance
  C. Azure SQL Database elastic pools
  D. SQL Server 2016 on Azure virtual machines
  B. Azure SQL Database Managed Instance

  ---

  Explanation

  SQL Managed Instance allows existing SQL Server customers to lift and shift their on-premises applications to the cloud with minimal application and database changes. At the same time, SQL Managed Instance preserves all PaaS capabilities (automatic patching and version updates, automated backups, high availability) that drastically reduce management overhead and TCO.

  References:

  https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instancehttps://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/transact-sql-tsql-differences-sql-server#clrhttps://docs.microsoft.com/en-gb/azure/azure-sql/database/transact-sql-tsql-differences-sql-server#transact-sql-syntax-not-supported-in-azure-sql-database

• Question 308:

  HOTSPOT

  You plan to deploy Azure Databricks to support a machine learning application. Data engineers will mount an Azure Data Lake Storage account to the Databricks file system. Permissions to folders are granted directly to the data engineers.

  You need to recommend a design for the planned Databrick deployment. The solution must meet the following requirements:

  1. Ensure that the data engineers can only access folders to which they have permissions.

  2. Minimize development effort.

  3. Minimize costs.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Standard

  Choose Standard to minimize costs.

  Box 2: Credential passthrough

  Athenticate automatically to Azure Data Lake Storage Gen1 (ADLS Gen1) and Azure Data Lake Storage Gen2 (ADLS Gen2) from Azure Databricks clusters using the same Azure Active Directory (Azure AD) identity that you use to log into Azure Databricks. When you enable Azure Data Lake Storage credential passthrough for your cluster, commands that you run on that cluster can read and write data in Azure Data Lake Storage without requiring you to configure service principal credentials for access to storage.

  References:

  https://docs.microsoft.com/en-us/azure/databricks/security/credential-passthrough/adls-passthrough

• Question 309:

  You have Azure virtual machines that run a custom Iine-business web application. You plan to use a third-party solution to parse event logs from the virtual machine stored in an Azure storage account.

  You need to recommend a so to save the event logs from the virtual.

  What should you include in recommendation?

  A. Azure VM Diagnostics Extension
  B. Azure Monitor
  C. Azure log Analytics
  D. event log subscriptions
  A. Azure VM Diagnostics Extension

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/extensions-diagnostics

• Question 310:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.

  The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.

  You need to recommend a solution to meet the regulatory requirement.

  Solution: You recommend using an Azure policy initiative to enforce the location.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  Azure Resource Policy Definitions can be used which can be applied to a specific Resource Group with the App Service instances.

  References:

  https://docs.microsoft.com/en-us/azure/governance/policy/overview