Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 341:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You manage an Active Directory domain named contoso.local.

  You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.

  You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.

  Solution: You use the Synchronization Service Manager to modify the Metaverse Designer tab.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead use Synchronization Rules Editor to create a synchronization rule.

  Note: Filtering what objects are synced to Azure AD is a common request and there are many instances where filtering by OU just doesn't cut it. One option is to filter users by their UPN suffix so that only users with the public FQDN as their UPN suffix are synced to Azure AD (e.g., [email protected] would be synced while [email protected] would not).

  Filtering can be configured using either the GUI (Synchronization Rules Editor) or PowerShell.

  References:

  https://www.sidekicktech.com/blog/field-notes/2019/upn-suffix-filtering-ad-connect/

• Question 342:

  You ate designing an Azure governance solution.

  All Azure resources must be easily identifiable based on the following operational information environment, owner, department and cost center

  You need 10 ensure that you can use the operational information when you generate reports for the Azure resources.

  What should you include in the solution?

  A. Azure Active Directory (Azure AD) administrative units
  B. an Azure data catalog that uses the Azure REST API as a data source
  C. an Azure policy that enforces tagging rules
  D. an Azure management group that uses parent groups to create a hierarchy
  C. an Azure policy that enforces tagging rules

  ---

  Explanation

  You use Azure Policy to enforce tagging rules and conventions. By creating a policy, you avoid the scenario of resources being deployed to your subscription that don't have the expected tags for your organization. Instead of manually applying tags or searching for resources that aren't compliant, you create a policy that automatically applies the needed tags during deployment.

  Note: Organizing cloud-based resources is a crucial task for IT, unless you only have simple deployments. Use naming and tagging standards to organize your resources for these reasons:

  Resource management: Your IT teams will need to quickly locate resources associated with specific workloads, environments, ownership groups, or other important information. Organizing resources is critical to assigning organizational roles and access permissions for resource management.

  References:

  https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/decision-guides/resource-tagging

• Question 343:

  HOTSPOT

  You need to recommend an Azure Storage Account configuration for two applications named Application1 and Applications. The configuration must meet the following requirements:

  1. Storage for Application1 must provide the highest possible transaction rates and the lowest possible latency.

  2. Storage for Application2 must provide the lowest possible storage costs per GB.

  3. Storage for both applications must be optimized for uploads and downloads.

  4. Storage for both applications must be available in an event of datacenter failure.

  What should you recommend ? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point

  

  

  ---

  Box 1: BloblBlobStorage with Premium performance and Zone-redundant storage (ZRS) replication.

  BlockBlobStorage accounts: Storage accounts with premium performance characteristics for block blobs and append blobs. Recommended for scenarios with high transactions rates, or scenarios that use smaller objects or require consistently low storage latency.

  Premium: optimized for high transaction rates and single-digit consistent storage latency.

  Box 2: General purpose v2 with Standard performance.. General-purpose v2 accounts: Basic storage account type for blobs, files, queues, and tables. Recommended for most scenarios using Azure Storage.

• Question 344:

  You are designing a microservices architecture that will support a web application.

  The solution must meet the following requirements:

  1. Allow independent upgrades to each microservice

  2. Deploy the solution on-premises and to Azure

  3. Set policies for performing automatic repairs to the microservices

  4. Support low-latency and hyper-scale operations

  You need to recommend a technology.

  What should you recommend?

  A. Azure Service Fabric
  B. Azure Container Service
  C. Azure Container Instance
  D. Azure Virtual Machine Scale Set
  A. Azure Service Fabric

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-overview

• Question 345:

  HOTSPOT

  You have two Azure AD tenants named contoso.com and fabrikam.com. Each tenant is linked to 50 Azure subscriptions. Contoso.com contains two users named User1 and User2.

  You need to meet the following requirements:

  Ensure that User1 can change the Azure AD tenant linked to specific Azure subscriptions.

  If an azure subscription is liked to a new Azure AD tenant, and no available Azure AD accounts have full subscription-level permissions to the subscription, elevate the access of User2 to the subscription.

  The solution must use the principle of least privilege.

  Which role should you assign to each user? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 346:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.

  Several VMs are exhibiting network connectivity issues.

  You need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.

  Solution: Use the Azure Traffic Analytics solution in Azure Log Analytics to analyze the network traffic.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead use Azure Network Watcher to run IP flow verify to analyze the network traffic.

  References:

  https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overviewhttps://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview

• Question 347:

  HOTSPOT

  You plan to deploy multiple containerized microservice-based apps to Azure Kubernetes Service (AKS).

  You need to recommend a solution that implements the following functions:

  1. State management

  2. Pub/sub messaging

  3. Traffic routing and splitting

  The solution must minimize administrative effort.

  What should you include in the recommendation for each function? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 348:

  You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager resource deployment in your subscription.

  What should you include in the recommendation?

  A. Azure Activity Log
  B. Azure Monitor action groups
  C. Azure Advisor
  D. Azure Monitor metrics
  A. Azure Activity Log

• Question 349:

  You Wave an Acme Directory forest named contoso.com. You install and configure Azure AD Connect to use password hath synchronization as the single sign-on (SSO) method Staging mode is enabled.

  You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs.

  You need to ensure that the synchronization completes successfully.

  What should you do?

  A. From Synchronization Service Manager, run a full import
  B. From Azure PowerShell, run Start-AdSyncCycle -PolicyType initial.
  C. Run Azure AD Connect and set the SSO method to Pass-through Authentication
  D. Run Azure AD Connect and disable staging mode._
  D. Run Azure AD Connect and disable staging mode._

• Question 350:

  HOTSPOT

  You plan to migrate App1 to Azure.

  You need to recommend a high-availability solution for App1. The solution must meet the resiliency requirements.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: 3

  Scenario: App1 must meet the following requirements:

  1. Be hosted in an Azure region that supports availability zones.

  2. Maintain availability if two availability zones in the local Azure region fail.

  A host group is a resource that represents a collection of dedicated hosts. You create a host group in a region and an availability zone, and add hosts to it.

  Use Availability Zones for fault isolation Availability zones are unique physical locations within an Azure region. Each zone is made up of one or more datacenters equipped with independent power, cooling, and networking.

  A host group is created in a single availability zone. Once created, all hosts will be placed within that zone. To achieve high availability across zones, you need to create multiple host groups (one per zone) and spread your hosts accordingly.

  Box 2: 1

  Scenario: App1 must meet the following requirements: Be hosted on Azure virtual machines that support automatic scaling.

  An Azure virtual machine scale set can automatically increase or decrease the number of VM instances that run your application. This automated and elastic behavior reduces the management overhead to monitor and optimize the performance of your application.