Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 91:

  HOTSPOT

  You have an Azure subscription named Subscription1 that is linked to a hybrid Azure Active Directory (Azure AD) tenant.

  You have an on-premises datacenter that does NOT have a VPN connection to Subscription1. The datacenter contains a computer named Server1 that has Microsoft SQL Server 2016 installed. Server1 is prevented from accessing the

  internet.

  An Azure logic app named LogicApp1 requires write access to a database on Server1.

  You need to recommend a solution to provide LogicApp1 with the ability to access Server1.

  What should you recommend deploying on-premises and in Azure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: An on-premises data gateway

  For logic apps in global, multi-tenant Azure that connect to on-premises SQL Server, you need to have the on-premises data gateway installed on a local computer and a data gateway resource that's already created in Azure.

  Box 2: A connection gateway resource

• Question 92:

  HOTSPOT

  Your organization has developed and deployed several Azure App Service Web and API applications. The applications use Azure Key Vault to store several authentication, storage account, and data encryption keys. Several departments have the following requests to support the applications:

  

  You need to recommend the appropriate Azure service for each department request.

  What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

• Question 93:

  HOTSPOT

  Your company has the divisions shown in the following table.

  

  You plan to deploy a custom application to each subscription. The application will contain the following:

  1.

  A resource group

  2.

  An Azure web app

  3.

  Custom role assignments

  4.

  An Azure Cosmos DB account

  You need to use Azure Blueprints to deploy the application to each subscription.

  What is the minimum number of objects required to deploy the application? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 2

  One management group for East, and one for West.

  When creating a blueprint definition, you'll define where the blueprint is saved. Blueprints can be saved to a management group or subscription that you have Contributor access to. If the location is a management group, the blueprint is

  available to assign to any child subscription of that management group.

  Box 2: 2

  Box 3: 4

  One assignment for each subscription.

  "Assigning a blueprint definition to a management group means the assignment object exists at the management group. The deployment of artifacts still targets a subscription. To perform a management group assignment, the Create Or

  Update REST API must be used and the request body must include a value for properties.scope to define the target subscription." https://docs.microsoft.com/en-us/azure/governance/blueprints/overview#blueprint-assignment

• Question 94:

  HOTSPOT

  You need to recommend an Azure Storage Account configuration for two applications named Application1 and Applications. The configuration must meet the following requirements:

  1.

  Storage for Application1 must provide the highest possible transaction rates and the lowest possible latency.

  2.

  Storage for Application2 must provide the lowest possible storage costs per GB.

  3.

  Storage for both applications must be optimized for uploads and downloads.

  4.

  Storage for both applications must be available in an event of datacenter failure.

  What should you recommend ? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

  Box 1: BloblBlobStorage with Premium performance and Zone-redundant storage (ZRS) replication.

  BlockBlobStorage accounts: Storage accounts with premium performance characteristics for block blobs and append blobs. Recommended for scenarios with high transactions rates, or scenarios that use smaller objects or require

  consistently low storage latency. Premium: optimized for high transaction rates and single-digit consistent storage latency.

  Box 2: General purpose v2 with Standard performance.. General-purpose v2 accounts: Basic storage account type for blobs, files, queues, and tables. Recommended for most scenarios using Azure Storage.

• Question 95:

  HOTSPOT

  You are planning an Azure Storage solution for sensitive data. The data will be accessed daily. The data set is less than 10 GB.

  You need to recommend a storage solution that meets the following requirements:

  1.

  All the data written to storage must be retained for five years.

  2.

  Once the data is written, the data can only be read. Modifications and deletion must be prevented.

  3.

  After five years, the data can be deleted, but never modified.

  4.

  Data access charges must be minimized

  What should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: General purpose v2 with Archive acce3ss tier for blobs Archive - Optimized for storing data that is rarely accessed and stored for at least 180 days with flexible latency requirements, on the order of hours. Cool - Optimized for storing

  data that is infrequently accessed and stored for at least 30 days.

  Hot - Optimized for storing data that is accessed frequently.

  Box 2: Storage account resource lock

  As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have.

  Note: You can set the lock level to CanNotDelete or ReadOnly. In the portal, the locks are called Delete and Read-only respectively.

  CanNotDelete means authorized users can still read and modify a resource, but they can't delete the resource.

  ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.

• Question 96:

  HOTSPOT

  Your company develops a web service that is deployed to an Azure virtual machine named VM1. The web service allows an API to access real-time data from VM1.

  The current virtual machine deployment is shown in the Deployment exhibit.

  

  The chief technology officer (CTO) sends you the following email message: "Our developers have deployed the web service to a virtual machine named VM1. Testing has shown that the API is accessible from VM1 and VM2. Our partners must be able to connect to the API over the Internet. Partners will use this data in applications that they develop."

  You deploy an Azure API Management (APIM) service. The relevant API Management configuration is shown in the API exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-using-with-vnet

• Question 97:

  HOTSPOT

  You are designing an Azure App Service web app.

  You plan to deploy the web app to the North Europe Azure region and the West Europe Azure region.

  You need to recommend a solution for the web app. The solution must meet the following requirements:

  1.

  Users must always access the web app from the North Europe region, unless the region fails.

  2.

  The web app must be available to users if an Azure region is unavailable.

  3.

  Deployment costs must be minimized.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods#priority-traffic-routing-method

• Question 98:

  HOTSPOT

  You have an Azure subscription named Subscription1 that is linked to a hybrid Azure Active Directory (Azure AD) tenant.

  You have an on-premises datacenter that does NOT have a VPN connection to Subscription1. The datacenter contains a computer named Server1 that has Microsoft SQL Server 2016 installed. Server is prevented from accessing the internet.

  An Azure logic app resource named LogicApp1 requires write access to a database on Server1.

  You need to recommend a solution to provide LogicApp1 with the ability to access Server1.

  What should you recommend deploying on-premises and in Azure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: An on-premises data gateway

  For logic apps in global, multi-tenant Azure that connect to on-premises SQL Server, you need to have the on-premises data gateway installed on a local computer and a data gateway resource that's already created in Azure.

  Box 2: A connection gateway resource

  Reference:

  https://docs.microsoft.com/en-us/azure/connectors/connectors-create-api-sqlazure

• Question 99:

  HOTSPOT

  You have an Azure subscription that contains the SQL servers on Azure shown in the following table.

  

  The subscription contains the storage accounts shown in the following table.

  

  You create the Azure SQL databases shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes Be sure that the destination is in the same region as your database and server. Box 2: No Box 3: Yes https://docs.microsoft.com/en-us/azure/sql-database/sql-database-auditing

• Question 100:

  HOTSPOT

  You plan to deploy the backup policy shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  https://docs.microsoft.com/en-us/azure/backup/backup-azure-vm-backup-faq#what-s-the-minimum-rpo-and-rto-for-vm-backups-in-azure-backup