Microsoft AZ-305 Online Practice Questions and Exam Preparation

Microsoft AZ-305 Online Questions & Answers

• Question 81:

  DRAG DROP

  You need to use an Azure logic app to receive a notification when an administrator modifies the settings of a virtual machine in a resource group named RG1.

  Which three components should you create next in the Logic Apps Designer? To answer, move the appropriate components from the list of components to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Step 1: an Azure Event Grid trigger First add an Event grid trigger that monitors the resource group for your virtual machine.

  Step 2: a conditional control

  To run your logic app workflow only when a specific event happens, add a condition that checks for virtual machine "write" operations.

  Step 3: an action

  Now add an action so that you get an email when the specified condition is true.

  References:

  https://docs.microsoft.com/en-us/azure/event-grid/monitor-virtual-machine-changes-event-grid-logic-app

• Question 82:

  You have an Azure subscription.

  You need to deploy an Azure Kubernetes Service (AKS) solution that will use Linux nodes. The solution must meet the following requirements:

  1. Minimize the time it takes to provision compute resources during scale-out operations.

  2. Support autoscaling of Linux containers.

  3. Minimize administrative effort.

  Which scaling option should you recommend?

  A. Virtual Kubelet
  B. cluster autoscaler
  C. horizontal pod autoscaler
  D. AKS virtual nodes
  D. AKS virtual nodes

  ---

  Explanation

  About the cluster autoscaler.

  AKS clusters can scale in one of two ways:

  1. The cluster autoscaler watches for pods that can't be scheduled on nodes because of resource constraints. The cluster then automatically increases the number of nodes.

  2. The horizontal pod autoscaler uses the Metrics Server in a Kubernetes cluster to monitor the resource demand of pods.

  References:

  https://docs.microsoft.com/en-us/azure/aks/cluster-autoscaler

• Question 83:

  HOTSPOT

  You have an Azure subscription.

  You plan to host three apps named App1, App2, and App3 by using Azure Container Apps. The apps have the following network requirements:

  Implement network security groups (NSGs) to allow external inbound connections to App1 and App2.

  Implement IP address restrictions for App3 to allow external inbound connections.

  Implement NSGs to allow connectivity between App1 and App2.

  Fully isolate App3 from App1 and App2.

  The apps have the following compute requirements:

  Implement dynamically allocated compute for App1.

  Implement up to 10 general-purpose Dedicated-D16 instances for App2.

  Implement up to 10 memory-optimized Dedicated-E16 instances for App3.

  You need to recommend the minimum number of Container Apps environments and workload profiles required.

  What should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 84:

  You plan to deploy an app that will use an Azure Storage account.

  You need to deploy the storage account. The solution must meet the following requirements:

  1. Store the data of multiple users.

  2. Encrypt each user's data by using a separate key.

  3. Encrypt all the data in the storage account by using Microsoft keys or customer-managed keys.

  What should you deploy?

  A. files in a general purpose v2 storage account.
  B. blobs in an Azure Data Lake Storage Gen2 account.
  C. files in a premium file share storage account.
  D. blobs in a general purpose v2 storage account
  B. blobs in an Azure Data Lake Storage Gen2 account.

• Question 85:

  HOTSPOT

  You have an on-premises file server that stores 2 TB of data files. You plan to move the data files to Azure Blob Storage in the Central Europe region.

  You need to recommend a storage account type to store the data files and a replication solution for the storage account. The solution must meet the following requirements:

  1. Be available if a single Azure datacenter fails.

  2. Support storage tiers.

  3. Minimize cost.

  What should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 86:

  Your on-premises network contains 100 virtual machines that run Windows Server 2019.

  You have an Azure subscription that contains an Azure Log Analytics workspace named Workspace1.

  You need to collect errors from the Windows event logs on the virtual machines.

  Which two actions should you perform' Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Configure the Data Collection settings for Workspace1.
  B. Deploy the Microsoft Monitoring Agent
  C. Create an Azure Event Grid domain
  D. Create an Azure Sentinel workspace.
  E. Configure Windows Event Forwarding on the virtual machines
  A. Configure the Data Collection settings for Workspace1.
  B. Deploy the Microsoft Monitoring Agent

  ---

  Explanation

  The Azure Log Analytics agent collects telemetry from Windows and Linux virtual machines in any cloud, on-premises machines, and those monitored by System Center Operations Manager and sends it collected data to your Log Analytics workspace in Azure Monitor.

  Note: You may also see the Log Analytics agent referred to as the Microsoft Monitoring Agent (MMA) or OMS Linux agent.

  Data is collected using the Log Analytics agent, which reads various security-related configurations and event logs from the machine and copies the data to your workspace for analysis.

  References:

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/log-analytics-agenthttps://docs.microsoft.com/en-us/azure/security-center/security-center-enable-data-collection

• Question 87:

  You have an on-premises application named App1 that uses an Oracle database.

  You plan to use Azure Databricks to transform and load data from App1 to an Azure Synapse Analytics instance.

  You need to ensure that the App1 data is available to Databricks.

  Which two Azure services should you include in the solution? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Azure Data Box Edge
  B. Azure Data Lake Storage
  C. Azure Data Factory
  D. Azure Data Box Gateway
  E. Azure Import/Export service
  C. Azure Data Factory
  E. Azure Import/Export service

• Question 88:

  HOTSPOT

  You have an on-premises network.

  You have an Azure subscription.

  You plan to centralize the collection and analytics of Azure and on-premises resources by using Log Analytics.

  You are evaluating the cost implications of using the Basic log data plan versus the Analytics log data plan.

  What will increase costs by using the Basic log data plan, and what will reduce costs by using the Basic log data plan? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 89:

  A company deploys Azure Active Directory (Azure AD) Connect to synchronize identity information from their on-premises Active Directory Domain Services (AD DS) directory to their Azure AD tenant. The identity information that is synchronized includes user accounts, credential hashes for authentication (password sync), and group memberships. The company plans to deploy several Windows and Linux virtual machines (VMs) to support their applications.

  The VMs have the following requirements:

  1. Support domain join, LDAP read, LDAP bind, NTLM and Kerberos authentication, and Group Policy.

  2. Allow users to sign in to the domain using their corporate credentials and connect remotely to the VM by using Remote Desktop.

  You need to support the VM deployment.

  Which service should you use?

  A. Active Directory Federation Services (AD FS)
  B. Azure AD Privileged Identity Management
  C. Azure Managed Identity
  D. Azure AD Domain Services
  D. Azure AD Domain Services

  ---

  Explanation

  Azure AD Domain Services provides managed domain services such as domain join, group policy, LDAP, Kerberos/NTLM authentication that are fully compatible with Windows Server Active Directory.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-overview

• Question 90:

  HOTSPOT

  You have an Azure subscription named Subscription1 that is linked to a hybrid Azure Active Directory (Azure AD) tenant.

  You have an on-premises datacenter that does NOT have a VPN connection to Subscription1. The datacenter contains a computer named Server1 that has Microsoft SQL Server 2016 installed. Server is prevented from accessing the internet.

  An Azure logic app resource named LogicApp1 requires write access to a database on Server1.

  You need to recommend a solution to provide LogicApp1 with the ability to access Server1.

  What should you recommend deploying on-premises and in Azure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: An on-premises data gateway

  For logic apps in global, multi-tenant Azure that connect to on-premises SQL Server, you need to have the on-premises data gateway installed on a local computer and a data gateway resource that's already created in Azure.

  Box 2: A connection gateway resource

  References:

  https://docs.microsoft.com/en-us/azure/connectors/connectors-create-api-sqlazure