Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 61:

  You ate designing a SQL database solution. The solution will include 20 databases that will be 20 GB each and have varying usage patterns. You need to recommend a database platform to host the databases. The solution must meet the following requirements:

  1. The compute resources allocated to the databases must scale dynamically.

  2. The solution must meet an SLA of 99.99% uptime.

  3. The solution must have reserved capacity.

  4. Compute charges must be minimized.

  What should you include in the recommendation?

  A. 20 databases on a Microsoft SQL server that runs on an Azure virtual machine
  B. 20 instances of Azure SQL Database serverless
  C. 20 databases on a Microsoft SQL server that runs on an Azure virtual machine in an availability set
  D. an elastic pool that contains 20 Azure SQL databases
  D. an elastic pool that contains 20 Azure SQL databases

  ---

  Explanation

  Azure SQL Database elastic pools are a simple, cost-effective solution for managing and scaling multiple databases that have varying and unpredictable usage demands. The databases in an elastic pool are on a single server and share a set number of resources at a set price. Elastic pools in Azure SQL Database enable SaaS developers to optimize the price performance for a group of databases within a prescribed budget while delivering performance elasticity for each database.

  Guaranteed 99.995 percent uptime for SQL Database

  References:

  https://docs.microsoft.com/en-us/azure/azure-sql/database/elastic-pool-overviewhttps://azure.microsoft.com/en-us/pricing/details/sql-database/elastic/https://www.azure.cn/en-us/support/sla/virtual-machines/https://techcommunity.microsoft.com/t5/azure-sql/optimize-price-performance-with-compute-auto-scaling-in-azure/ba-p/966149

• Question 62:

  A company has an on-premises file server cbflserver that runs Windows Server 2019.

  Windows Admin Center manages this server. The company owns an Azure subscription.

  You need to provide an Azure solution to prevent data loss if the file server fails.

  Solution: You decide to register Windows Admin Center in Azure and then configure Azure Backup.

  Would this meet the requirement?

  A. Yes
  B. No
  A. Yes

• Question 63:

  HOTSPOT

  You plan to deploy the backup policy shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/en-us/azure/backup/backup-azure-vm-backup-faq#what-s-the-minimum-rpo-and-rto-for-vm-backups-in-azure-backup

• Question 64:

  You plan to migrate on-premises MySQL databases to Azure Database for MySQL Flexible Server.

  You need to recommend a solution for the Azure Database for MySQL Flexible Server configuration. The solution must meet the following requirements:

  1. The databases must be accessible if a datacenter fails.

  2. Costs must be minimized.

  Which compute tier should you recommend?

  A. Burstable
  B. General Purpose
  C. Memory Optimized
  B. General Purpose

  ---

  Explanation

  https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-high-availability#limitations

• Question 65:

  HOTSPOT

  You are building an Azure web app that will store the Personally Identifiable Information (PII) of employees.

  You need to recommend an Azure SQL. Database solution for the web app. The solution must meet the following requirements:

  Maintain availability in the event of a single datacenter outage.

  Support the encryption of specific columns that contain PII.

  Automatically scale up during payroll operations.

  Minimize costs.

  What should you include in the recommendations? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Business Critical service tier and Serverless computer tier.

  Business Critical OLTP applications with high transaction rate and low IO latency. Offers highest resilience to failures and fast failovers using multiple synchronously updated replicas.

  Availability: 3 replicas, 1 Read Scale-out, zone-redundant HA, full local storage

  Note: Azure SQL Database is based on SQL Server Database Engine architecture that is adjusted for the cloud environment to ensure high availability even in cases of infrastructure failures. There are three architectural models that are used in Azure SQL Database:

  General Purpose/Standard

  Business Critical/Premium

  Hyperscale Incorrect:

  General Purpose and Serverless computer tier Offers budget oriented balanced compute and storage options.

  No Read Scale-out.

  Hyperscale service tier and Provisioned compute tier Expensive.

  Most business workloads. Autoscaling storage size up to 100 TB, fast vertical and horizontal compute scaling, fast database restore.

  Box 2: Always Encrypted

  PII data needs to be tightly protected.

  In Azure, Most of the PaaS services already have a server-side encryption to protect data at rest like Transparent data encryption for Azure SQL Databases. For client side encryption, we can accomplish this natively with an encryption technology called Always encrypted for Azure SQL Database or any SQL Server datastore. There are several data tokenization solutions out in the marketplace which can tokenize this data as well but its only effective for small strings and integers. However, if your data contains large text columns which has PII information then these tokenization solutions are not so effective and can become a bottleneck.

  Example: Call center voice transcripts which may have sensitive information like a SSN or a Creditcard number etc. That's where Always encrypted can handle this effectively out of the box.

  References:

  https://learn.microsoft.com/en-us/azure/azure-sql/database/service-tier-hyperscalehttps://medium.com/@raghavender7/protecting-sensitive-pii-data-in-azure-sql-databases-5c83bca473fc

• Question 66:

  You are designing an Azure solution.

  The network traffic for the solution must be securely distributed by providing the following features:

  1. HTTPS protocol

  2. Round robin routing

  3. SSL offloading

  4. You need to recommend a load balancing option.

  What should you recommend?

  A. Azure Load Balancer
  B. Azure Traffic Manager
  C. Azure Internal Load Balancer (ILB)
  D. Azure Application Gateway
  D. Azure Application Gateway

  ---

  Explanation

  If you are looking for Transport Layer Security (TLS) protocol termination ("SSL offload") or per-HTTP/ HTTPS request, application-layer processing, review Application Gateway. Application Gateway is a layer 7 load balancer, which means it works only with web traffic (HTTP, HTTPS, WebSocket, and HTTP/2). It supports capabilities such as SSL termination, cookie-based session affinity, and round robin for load-balancing traffic. Load Balancer load-balances traffic at layer 4 (TCP or UDP).

  References:

  https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq

• Question 67:

  HOTSPOT

  You need to design an Azure policy that will implement the following functionality:

  1. For new resources, assign tags and values that match the tags and values of the resource group to which the resources are deployed.

  2. For existing resources, identify whether the tags and values match the tags and values of the resource group that contains the resources.

  3. For any non-compliant resources, trigger auto-generated remediation tasks to create missing tags and values.

  The solution must use the principle of least privilege.

  What should you include in the design? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Modify

  Modify is used to add, update, or remove properties or tags on a resource during creation or update. A common example is updating tags on resources such as costCenter. Existing non-compliant resources can be remediated with a remediation task. A single Modify rule can have any number of operations.

  Box 2: A managed identity with the Contributor role Managed identity

  How remediation security works: When Azure Policy runs the template in the deployIfNotExists policy definition, it does so using a managed identity. Azure Policy creates a managed identity for each assignment, but must have details about what roles to grant the managed identity.

• Question 68:

  You plan to migrate App1 to Azure. The solution must meet the authentication and authorization requirements.

  Which type of endpoint should App1 use to obtain an access token?

  A. Azure Instance Metadata Service (IMDS)
  B. Azure AD
  C. Azure Service Management
  D. Microsoft identity platform
  D. Microsoft identity platform

  ---

  Explanation

  Scenario: To access the resources in Azure, App1 must use the managed identity of the virtual machines that will host the app.

  Managed identities provide an identity for applications to use when connecting to resources that support Azure Active Directory (Azure AD) authentication. Applications may use the managed identity to obtain Azure AD tokens.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azureresources/overview

• Question 69:

  DRAG DROP

  You have an Azure subscription that contains the resources shown in the following table.

  

  In RG2, you need to create a new virtual machine named VM2 that will connect to VNET1. VM2 will use a network interface named VM2_Interface.

  In which region should you create VM2 and VM2_Interface? To answer, drag the appropriate regions to the correct targets. Each region may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  VM2: West US

  In RG2, which is in West US, you need to create a new virtual machine named VM2.

  VM2_interface: East US

  VM2 will use a network interface named VM2_Interface to connect to VNET1, which is in East US.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-network/associate-public-ip-address-vm

• Question 70:

  You plan to deploy an application named App1 that will run in containers on Azure Kubernetes Service (AKS) clusters.

  The AKS clusters will be distributed across four Azure regions.

  You need to recommend a storage solution to ensure that updated container images are replicated automatically to all the Azure regions hosting the AKS clusters.

  Which storage solution should you recommend?

  A. Azure Cache for Redis
  B. Premium SKU Azure Container Registry
  C. Azure Content Delivery Network (CON)
  D. geo-redundant storage (GRS) accounts
  B. Premium SKU Azure Container Registry