Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 31:

  You need to recommend a solution that meets the data requirements for App1.

  What should you recommend deploying to each availability zone that contains an instance of App1?

  A. an Azure Cosmos DB that uses multi-region writes
  B. an Azure Data Lake store that uses geo-zone-redundant storage (GZRS)
  C. an Azure SQL database that uses active geo-replication
  D. an Azure Storage account that uses geo-zone-redundant storage (GZRS)
  A. an Azure Cosmos DB that uses multi-region writes

  ---

  Explanation

  Scenario: App1 has the following data requirements:

  1. Each instance will write data to a data store in the same availability zone as the instance.

  2. Data written by any App1 instance must be visible to all App1 instances.

  Azure Cosmos DB: Each partition across all the regions is replicated. Each region contains all the data partitions of an Azure Cosmos container and can serve reads as well as serve writes when multi-region writes is enabled.

  Incorrect Answers:

  Option B, Option D: GZRS protects against failures. Geo-redundant storage (with GRS or GZRS) replicates your data to another physical location in the secondary region to protect against regional outages. However, that data is available to be read only if the customer or Microsoft initiates a failover from the primary to secondary region.

  Option C: Active geo-replication is designed as a business continuity solution that lets you perform quick disaster recovery of individual databases in case of a regional disaster or a large scale outage. Once geo-replication is set up, you can initiate a geo-failover to a geo-secondary in a different Azure region. The geo-failover is initiated programmatically by the application or manually by the user.

  References:

  https://docs.microsoft.com/en-us/azure/cosmos-db/high-availability

• Question 32:

  You have an Azure subscription that contains a Windows Virtual Desktop tenant.

  You need to recommend a solution to meet the following requirements:

  1. Start and stop Windows Virtual Desktop session hosts based on business hours.

  2. Scale out Windows Virtual Desktop session hosts when required.

  3. Minimize compute costs.

  What should you include in the recommendation?

  A. Microsoft Intune
  B. a Windows Virtual Desktop automation task
  C. Azure Automation
  D. Azure Service Health
  C. Azure Automation

  ---

  Explanation

  References:

  https://www.ciraltos.com/automatically-start-and-stop-wvd-vms-with-azure-automation/https://wvdlogix.net/windows-virtual-desktop-host-pool-automation-2https://getnerdio.com/academy/how-to-optimize-windows-virtual-desktop-wvd-azure-costswith-event-based-autoscaling-and-azure-vm-scale-sets/

• Question 33:

  DRAG DROP

  You need to configure an Azure policy to ensure that the Azure SQL databases have TDE enabled. The solution must meet the security and compliance requirements.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Scenario: All Azure SQL databases in the production environment must have Transparent Data Encryption (TDE) enabled.

  Step 1: Create an Azure policy definition that uses the deployIfNotExists identity.

  The first step is to define the roles that deployIfNotExists and modify needs in the policy definition to successfully deploy the content of your included template.

  Step 2: Create an Azure policy assignment.

  When creating an assignment using the portal, Azure Policy both generates the managed identity and grants it the roles defined in roleDefinitionIds.

  Step 3: Invoke a remediation task Resources that are non-compliant to a deployIfNotExists or modify policy can be put into a compliant state through Remediation. Remediation is accomplished by instructing Azure Policy to run the deployIfNotExists effect or the modify operations of the assigned policy on your existing resources and subscriptions, whether that assignment is to a management group, a subscription, a resource group, or an individual resource.

  During evaluation, the policy assignment with deployIfNotExists or modify effects determines if there are non-compliant resources or subscriptions. When non-compliant resources or subscriptions are found, the details are provided on the Remediation page.

• Question 34:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:

  1. Provide access to the full .NET framework.

  2. Provide redundancy if an Azure region fails.

  3. Grant administrators access to the operating system to install custom application dependencies.

  Solution: You deploy two Azure virtual machines to two Azure regions, and you create a Traffic Manager profile.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  Azure Traffic Manager is a DNS-based traffic load balancer that enables you to distribute traffic optimally to services across global Azure regions, while providing high availability and responsiveness.

  https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview

• Question 35:

  HOTSPOT

  You plan to migrate App1 to Azure.

  You need to recommend a storage solution for App1 that meets the security and compliance requirements.

  Which type of storage should you recommend, and how should you recommend configuring the storage? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Standard general-purpose v2

  Standard general-purpose v2 supports Blob Storage.

  Azure Storage provides data protection for Blob Storage and Azure Data Lake Storage Gen2.

  Scenario:

  Litware identifies the following security and compliance requirements: Once App1 is migrated to Azure, you must ensure that new data can be written to the app, and the modification of new and existing data is prevented for a period of three years.

  On-premises users and services must be able to access the Azure Storage account that will host the data in App1.

  Access to the public endpoint of the Azure Storage account that will host the App1 data must be prevented.

  All Azure SQL databases in the production environment must have Transparent Data Encryption (TDE) enabled.

  App1 must NOT share physical hardware with other workloads.

  Box 2: NFSv3

  Scenario:

  Plan: Migrate App1 to Azure virtual machines.

  Blob storage now supports the Network File System (NFS) 3.0 protocol. This support provides Linux file system compatibility at object storage scale and prices and enables Linux clients to mount a container in Blob storage from an Azure Virtual Machine (VM) or a computer on-premises.

  References:

  https://docs.microsoft.com/en-us/azure/storage/blobs/data-protection-overview

• Question 36:

  You have an Azure subscription.

  You need to recommend an Azure Kubernetes service (AKS) solution that will use Linux nodes. The solution must meet the following requirements:

  1. Minimize the time it takes to provision compute resources during scale-out operations.

  2. Support autoscaling of Linux containers.

  3. Minimize administrative effort.

  Which scaling option should you recommend?

  A. Virtual Kubetet
  B. cluster autoscaler
  C. virtual nodes
  D. horizontal pod autoscaler
  C. virtual nodes

  ---

  Explanation

  To rapidly scale application workloads in an AKS cluster, you can use virtual nodes. With virtual nodes, you have quick provisioning of pods, and only pay per second for their execution time. You don't need to wait for Kubernetes cluster autoscaler to deploy VM compute nodes to run the additional pods. Virtual nodes are only supported with Linux pods and nodes.

  References:

  https://docs.microsoft.com/en-us/azure/aks/virtual-nodes

• Question 37:

  HOTSPOT

  To meet the authentication requirements of Fabrikam, what should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 38:

  You migrate App1 to Azure.

  You need to ensure that the data storage for App1 meets the security and compliance requirements.

  What should you do?

  A. Create Azure RBAC assignments.
  B. Create an access policy for the blob service.
  C. Modify the access level of the blob service.
  D. Implement Azure resource locks.
  B. Create an access policy for the blob service.

• Question 39:

  Your company has an on-premises Hyper-V cluster that contains 20 virtual machines. Some of the virtual machines are based on Windows and some in Linux. You have to migrate the virtual machines onto Azure.

  You have to recommend a solution that would be used to replicate the disks of the virtual machines to Azure. The solution needs to ensure that the virtual machines remain available when the migration of the disks is in progress.

  You decide to create an Azure storage account and then run AzCopy Would this fulfill the requirement?

  A. Yes
  B. No
  B. No

• Question 40:

  HOTSPOT

  You have an Azure subscription named Subscription1 that is linked to a hybrid Azure Active Directory (Azure AD) tenant.

  You have an on-premises datacenter that does NOT have a VPN connection to Subscription1. The datacenter contains a computer named Server1 that has Microsoft SQL Server 2016 installed. Server1 is prevented from accessing the internet.

  An Azure logic app named LogicApp1 requires write access to a database on Server1.

  You need to recommend a solution to provide LogicApp1 with the ability to access Server1.

  What should you recommend deploying on-premises and in Azure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: An on-premises data gateway

  For logic apps in global, multi-tenant Azure that connect to on-premises SQL Server, you need to have the on-premises data gateway installed on a local computer and a data gateway resource that's already created in Azure.

  Box 2: A connection gateway resource