Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 321:

  You have an on-premises network to which you deploy a virtual appliance.

  You plan to deploy several Azure virtual machines and connect the on-premises network to Azure by using a Site-to-Site connection.

  All network traffic that will be directed from the Azure virtual machines to a specific subnet must flow through the virtual appliance.

  You need to recommend solutions to manage network traffic.

  Which two options should you recommend? Each correct answer presents a complete solution.

  A. Configure Azure Traffic Manager.
  B. Implement an Azure virtual network.
  C. Implement Azure ExpressRoute.
  D. Configure a routing table.
  C. Implement Azure ExpressRoute.
  D. Configure a routing table.

  ---

  Explanation

  Connectivity can be from an any-to-any (IP VPN) network, a point-to-point Ethernet network, or a virtual cross-connection through a connectivity provider at a co-location facility. ExpressRoute connections do not go over the public Internet.

  This allows ExpressRoute connections to offer more reliability, faster speeds, lower latencies, and higher security than typical connections over the Internet.

  References:

  https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-forced-tunneling-rmhttps://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction

• Question 322:

  HOTSPOT

  You have an Azure App Service web app named Webapp1 that connects to an Azure SQL database named DB1. Webapp1 and DB1 are deployed to the East US Azure region.

  You need to ensure that all the traffic between Webapp1 and DB1 is sent via a private connection.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://learn.microsoft.com/en-us/azure/private-link/create-private-endpoint-portalhttps://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dnshttps://learn.microsoft.com/en-us/azure/dns/dns-private-resolver-overview

• Question 323:

  After you migrate App1 to Azure, you need to enforce the data modification requirements to meet the security and compliance requirements.

  What should you do?

  A. Create an access policy for the blob service.
  B. Implement Azure resource locks.
  C. Create Azure RBAC assignments.
  D. Modify the access level of the blob service.
  A. Create an access policy for the blob service.

  ---

  Explanation

  Scenario: Once App1 is migrated to Azure, you must ensure that new data can be written to the app, and the modification of new and existing data is prevented for a period of three years.

  As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have.

  References:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

• Question 324:

  HOTSPOT

  You have an Azure subscription. The subscription contains virtual machines that run Windows Server.

  You are designing a disaster recovery solution that will immediately deploy a new virtual machine when an existing virtual machine fails. The solution must meet the following requirements:

  New virtual machines must be deployed with all the required configurations in place.

  Virtual machine deployments must use an infrastructure as code (IaC) methodology.

  New virtual machines must be created by using standard Microsoft disk images.

  New virtual machines must be authorized by virtual machine administrators.

  Virtual machine deployments must be managed by using CI/CD pipelines.

  You need to recommend which service to use to manage the virtual machine deployment process and which artifact to use to create each virtual machine.

  What should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 325:

  A company has an on-premises file server cbflserver that runs Windows Server 2019.

  Windows Admin Center manages this server. The company owns an Azure subscription.

  You need to provide an Azure solution to prevent data loss if the file server fails.

  Solution: You decide to create an Azure Recovery Services vault. You then decide to install the Azure Backup agent and then schedule the backup.

  Would this meet the requirement?

  A. Yes
  B. No
  A. Yes

• Question 326:

  You have an Azure subscription.

  You need to recommend a solution to provide developers with the ability to provision Azure virtual machines. The solution must meet the following requirements:

  1. Only allow the creation of the virtual machines in specific regions.

  2. Only allow the creation of specific sizes of virtual machines.

  What should you include in the recommendation?

  A. Conditional Access policies
  B. role-based access control (RBAC)
  C. Azure Resource Manager (ARM) templates
  D. Azure Policy
  D. Azure Policy

  ---

  Explanation

  https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/manage/azure-server-management/common-policies#restrict-resource-regions

  Regulatory and policy compliance often depends on control of the physical location where resources are deployed. You can use a built-in policy to allow users to create resources only in certain allowed Azure regions.

  https://learn.microsoft.com/en-us/azure/virtual-machines/policy-reference

  Allowed virtual machine size SKUs

  This policy enables you to specify a set of virtual machine size SKUs that your organization can deploy.

• Question 327:

  HOTSPOT

  You are evaluating the components of the migration to Azure that require you to provision an Azure Storage account. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 328:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is being deployed and configured for on-premises to Azure connectivity.

  Several virtual machines exhibit network connectivity issues.

  You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.

  Solution: Use Azure Traffic Analytics in Azure Network Watcher to analyze the network traffic.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead use Azure Network Watcher IP Flow Verify, which allows you to detect traffic filtering issues at a VM level.

  Note: IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.

  References:

  https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overviewhttps://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics

• Question 329:

  DRAG DROP

  You are designing a virtual machine that will run Microsoft SQL Server and will contain two data disks. The first data disk will store log files, and the second data disk will store data.

  Both disks are P40 managed disks.

  You need to recommend a caching policy for each disk. The policy must provide the best overall performance for the virtual machine.

  Which caching policy should you recommend for each disk? To answer, drag the appropriate policies to the correct disks. Each policy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sql/virtual-machines-windows-sql-performance

• Question 330:

  You create an Azure Kubernetes Service (AKS) cluster configured as shown in the exhibit.

  (Click the Exhibit tab.)

  

  You deploy a containerized application named App1 to the agentPool node pool.

  You need to create a containerized application named App2 that runs on four nodes of size DS3 v2.

  What should you do first?

  A. Create a new node pool.
  B. modify the autoscaling settings for the agentPool node.
  C. Enable virtual nodes for the AKS cluster.
  D. Upgrade the AKS cluster.
  A. Create a new node pool.

  ---

  Explanation

  Changing the agent size is not allowed. In the future Microsft plans to support multiple node pools wherein you can create different pools with different VM sizes.

  References:

  https://github.com/Azure/AKS/issues/132