Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 71:

  You need to create an Azure Storage account that uses a custom encryption key.

  What do you need to implement the encryption?

  A. an Azure key vault in the tame Azure region as the storage account
  B. a managed identity that is configured to access the storage account
  C. a certificate issued by an integrated certification authority (CA) and stored in Azure Key Vault
  D. Azure Active Directory Premium subscription
  C. a certificate issued by an integrated certification authority (CA) and stored in Azure Key Vault

  ---

  Explanation

  You can use your own encryption key to protect the data in your storage account. When you specify a customer-managed key, that key is used to protect and control access to the key that encrypts your data.

  You must use either Azure Key Vault or Azure Key Vault Managed Hardware Security Model (HSM) (preview) to store your customer-managed keys.

• Question 72:

  HOTSPOT

  You are designing a cost-optimized solution that uses Azure Batch to run two types of jobs on Linux nodes. The first job type will consist of short-running tasks for a development environment. The second job type will consist of long-running Message Passing Interface (MPI) applications for a production environment that requires timely job completion.

  You need to recommend the pool type and node type for each job type. The solution must minimize compute charges and leverage Azure Hybrid Benefit whenever possible.

  What should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 73:

  Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.

  Several virtual machines exhibit network connectivity issues.

  You need to analyze the network traffic to identify whether packets are being allowed or denied from the Azure virtual machines to the on-premises virtual machines.

  Solution: Use Azure Advisor.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead use Azure Network Watcher IP Flow Verify, which allows you to detect traffic filtering issues at a VM level.

  Note: IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.

  References:

  https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview

• Question 74:

  HOTSPOT

  You have an Azure subscription that contains a virtual network named VNET1 and 10 virtual machines. The virtual machines are connected to VNET1.

  You need to design a solution to manage the virtual machines from the internet. The solution must meet the following requirements:

  1. Incoming connections to the virtual machines must be authenticated by using Azure Multi-Factor Authentication (MFA) before network connectivity is allowed.

  2. Incoming connections must use TLS and connect to TCP port 443.

  3. The solution must support RDP and SSH.

  What should you Include In the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 75:

  You have an on-premises storage solution.

  You need to migrate the solution to Azure. The solution must support Hadoop Distributed

  File System (HDFS).

  What should you use?

  A. Azure Data Lake Storage Gen2
  B. Azure NetApp Files
  C. Azure Data Share
  D. Azure Table storage
  A. Azure Data Lake Storage Gen2

• Question 76:

  HOTSPOT

  You need to design a storage solution for an app that will store large amounts of frequently used data. The solution must meet the following requirements:

  1. Maximize data throughput.

  2. Prevent the modification of data for one year.

  3. Minimize latency for read and write operations.

  Which Azure Storage account type and storage service should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: BlockBlobStorage

  Block Blob is a premium storage account type for block blobs and append blobs. Recommended for scenarios with high transactions rates, or scenarios that use smaller objects or require consistently low storage latency.

  Box 2: Blob

  The Archive tier is an offline tier for storing blob data that is rarely accessed. The Archive tier offers the lowest storage costs, but higher data retrieval costs and latency compared to the online tiers (Hot and Cool). Data must remain in the Archive tier for at least 180 days or be subject to an early deletion charge.

  References:

  https://docs.microsoft.com/en-us/azure/storage/blobs/archive-blob

• Question 77:

  You are designing an Azure governance solution.

  All Azure resources must be easily identifiable based on the following operational information: environment, owner, department, and cost center.

  You need to ensure that you can use the operational information when you generate reports for the Azure resources.

  What should you include in the solution?

  A. an Azure data catalog that uses the Azure REST API as a data source
  B. Azure Active Directory (Azure AD) administrative units
  C. an Azure management group that uses parent groups to create a hierarchy
  D. an Azure policy that enforces tagging rules
  D. an Azure policy that enforces tagging rules

  ---

  Explanation

  You use Azure Policy to enforce tagging rules and conventions. By creating a policy, you avoid the scenario of resources being deployed to your subscription that don't have the expected tags for your organization. Instead of manually applying tags or searching for resources that aren't compliant, you create a policy that automatically applies the needed tags during deployment.

  Note: Organizing cloud-based resources is a crucial task for IT, unless you only have simple deployments. Use naming and tagging standards to organize your resources for these reasons:

  Resource management: Your IT teams will need to quickly locate resources associated with specific workloads, environments, ownership groups, or other important information. Organizing resources is critical to assigning organizational roles and access permissions for resource management.

  References:

  https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/decision-guides/resource-tagginghttps://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-policies

• Question 78:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.

  Several VMs are exhibiting network connectivity issues.

  You need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.

  Solution: Use the Azure Advisor to analyze the network traffic.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead use Azure Network Watcher to run IP flow verify to analyze the network traffic.

  Note: Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. It analyzes your resource configuration and usage telemetry and then recommends solutions that can help you improve the cost effectiveness, performance, high availability, and security of your Azure resources.

  With Advisor, you can:

  Get proactive, actionable, and personalized best practices recommendations. Improve the performance, security, and high availability of your resources, as you identify opportunities to reduce your overall Azure spend. Get recommendations with proposed actions inline.

  References:

  https://docs.microsoft.com/en-us/azure/advisor/advisor-overview

• Question 79:

  HOTSPOT

  You have an Azure subscription that contains 20 virtual machines. The virtual machines run Windows Server 2019.

  You need to enable Update Management and deploy the required agents to the virtual machines.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/automation/update-management/enable-from-automation-account

• Question 80:

  You have an Azure subscription that contains an Azure Blob storage account named store1.

  You have an on-premises file server named Server1 that runs Windows Server 2016. Server1 stores 500 GB of company files.

  You need to store a copy of the company files from Server 1 in store1.

  Which two possible Azure services achieve this goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. an integration account
  B. an On-premises data gateway
  C. an Azure Batch account
  D. an Azure Import/Export job
  E. Azure Data Factory
  D. an Azure Import/Export job
  E. Azure Data Factory