Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 331:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant.

  You plan to use Azure Monitor to monitor user sign-ins and generate alerts based on specific user sign-in events.

  You need to recommend a solution to trigger the alerts based on the events.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: An Azure Log Analytics workspace

  To be able to create an alert we send the Azure AD logs to An Azure Log Analytics workspace.

  Note: You can forward your AAD logs and events to either an Azure Storage Account, an Azure Event Hub, Log Analytics, or a combination of all of these.

  Box 2: Log

  Ensure Resource Type is an analytics source like Log Analytics or Application Insights and signal type as Log.

• Question 332:

  You plan to move a web application named App1 from an on-premises data center to Azure.

  App1 depends on a custom COM component that is installed on the host server.

  You need to recommend a solution to host App1 in Azure.

  The solution must meet the following requirements:

  1. App1 must be available to users if an Azure data center becomes unavailable.

  2. Costs must be minimized.

  What should you include in the recommendation?

  A. In two Azure regions, deploy a load balancer and a virtual machine scale set.
  B. In two Azure regions, deploy a Traffic Manager profile and a web app.
  C. In two Azure regions, deploy a load balancer and a web app.
  D. Deploy a load balancer and a virtual machine scale set across two availability zones.
  D. Deploy a load balancer and a virtual machine scale set across two availability zones.

  ---

  Explanation

  (

  https://docs.microsoft.com/en-us/dotnet/azure/migration/app-service#com-and-com-components)AzureAppServicedoesnotallowtheregistrationofCOMcomponentsontheplatform.IfyourappmakesuseofanyCOMcomponents,theseneedtoberewritteninmanagedcodeanddeployedwiththesiteorapplication.

  https://docs.microsoft.com/en-us/dotnet/azure/migration/app-service

  "Azure App Service with Windows Containers If your app cannot be migrated directly to App Service, consider App Service using Windows Containers, which enables usage of the GAC, COM components, MSIs, full access to .NET FX APIs, DirectX, and more."

• Question 333:

  HOTSPOT

  Your on-premises datacenter contains a server named Server1 that runs Microsoft SQL Server 2022. Server1 contains a 30-TB database named DB1 that stores customer data. Server1 runs a custom application named App1 that verifies the compliance of records in DB1. App1 must run on the same server as DB1.

  You have an Azure subscription.

  You need to migrate DB1 to Azure. The solution must minimize administrative effort.

  To which service should you migrate DB1, and what should you use to perform the migration? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 334:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You are making use of Azure technologies to design a workflow solution.

  You need to make sure that Visual Studio can be used to debug the solution.

  Solution: You should make use of Logic Apps.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

• Question 335:

  You plan to use an Azure Storage account to store data assets.

  You need to recommend a solution that meets the following requirements:

  1. Supports immutable storage

  2. Disables anonymous access to the storage account

  3. Supports access control list (ACL)-based Azure AD permissions

  What should you include in the recommendation?

  A. Azure Files
  B. Azure Data Lake Storage
  C. Azure NetApp Files
  D. Azure Blob Storage
  C. Azure NetApp Files

  ---

  Explanation

  An invaluable feature of NetApp Snapshot copies is their innate immutability. They can't be changed. This is especially important because an increasing number of ransomware attacks involve attackers encrypting your data and holding the key hostage.

  docs.netapp.com. ONTAP, Configure access restrictions for anonymous users

  By default, an anonymous, unauthenticated user (also known as the null user) can access certain information on the network. You can use a SMB server option to configure access restrictions for the anonymous user.

  Azure NetApp Files supports access control lists (ACLs) on NFSv4.1 volumes. ACLs provide granular file security via NFSv4.1.

  ACLs contain access control entities (ACEs), which specify the permissions (read, write, etc.) of individual users or groups. When assigning user roles, provide the user email address if you're using a Linux VM joined to an Active Directory Domain. Otherwise, provide user IDs to set permissions.

  References:

  https://www.netapp.com/blog/protect-google-cloud-with-snapshothttps://docs.netapp.com/us-en/ontap/smb-admin/configure-access-restrictions-anonymous-users-task.htmlhttps://learn.microsoft.com/en-us/azure/azure-netapp-files/configure-access-control-lists

• Question 336:

  HOTSPOT

  Your company develops a web service that is deployed to an Azure virtual machine named VM1. The web service allows an API to access real-time data from VM1.

  The current virtual machine deployment is shown in the Deployment exhibit.

  

  The chief technology officer (CTO) sends you the following email message: "Our developers have deployed the web service to a virtual machine named VM1. Testing has shown that the API is accessible from VM1 and VM2. Our partners must be able to connect to the API over the Internet. Partners will use this data in applications that they develop."

  You deploy an Azure API Management (APIM) service. The relevant API Management configuration is shown in the API exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/api-management/api-management-using-with-vnet

• Question 337:

  The application will host video files that range from 50 MB to 12 GB. The application will use certificate-based authentication and will be available to users on the internet.

  You need to recommend a storage option for the video files. The solution must provide the fastest read performance and must minimize storage costs.

  What should you recommend?

  A. Azure Files
  B. Azure Data Lake Storage Gen2
  C. Azure Blob Storage
  D. Azure SQL Database
  C. Azure Blob Storage

  ---

  Explanation

  Blob Storage: Stores large amounts of unstructured data, such as text or binary data, that can be accessed from anywhere in the world via HTTP or HTTPS. You can use Blob storage to expose data publicly to the world, or to store application data privately.

  Max file in Blob Storage. 4.77 TB.

  References:

  https://docs.microsoft.com/en-us/azure/architecture/solution-ideas/articles/digital-media-video

• Question 338:

  HOTSPOT

  You are designing a data pipeline that will integrate large amounts of data from multiple on-premises Microsoft SQL Server databases into an analytics platform in Azure. The pipeline will include the following actions:

  1. Database updates will be exported periodically into a staging area in Azure Blob storage.

  2. Data from the blob storage will be cleansed and transformed by using a highly parallelized load process.

  3. The transformed data will be loaded to a data warehouse.

  4. Each batch of updates will be used to refresh an online analytical processing (OLAP) model in a managed serving layer.

  5. The managed serving layer will be used by thousands of end users.

  You need to implement the data warehouse and serving layers.

  What should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://learn.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-data-warehouse-overview-what-ishttps://learn.microsoft.com/en-us/azure/architecture/example-scenario/data/data-warehouse

• Question 339:

  You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain.

  Your company has a line-of-business (LOB) application that was developed internally.

  You need to implement. SAML single sign-on (SSO) and enforce multi-factor authentication (MFA) when users attempt to access the application from an unknown location.

  Which two features should you include in the solution? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Azure AD enterprise applications
  B. Azure AD Identity Protection
  C. Azure Application Gateway
  D. Conditional Access policies
  E. Azure AD Privileged Identity Management (PIM)
  A. Azure AD enterprise applications
  D. Conditional Access policies

• Question 340:

  DRAG DROP

  A company has an existing web application that runs on virtual machines (VMs) in Azure.

  You need to ensure that the application is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruption to the code for the existing web application.

  What should you recommend? To answer, drag the appropriate values to the correct items. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: Azure Application Gateway

  Azure Application Gateway provides an application delivery controller (ADC) as a service. It offers various layer 7 load-balancing capabilities for your applications.

  Box 2: Web Application Firwewall (WAF)

  Application Gateway web application firewall (WAF) protects web applications from common vulnerabilities and exploits.

  This is done through rules that are defined based on the OWASP core rule sets 3.0 or 2.2.9.

  There are rules that detects SQL injection attacks.

  References:

  https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faqhttps://docs.microsoft.com/en-us/azure/application-gateway/waf-overview