Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 101:

  HOTSPOT

  You plan to create an Azure Storage account that will host file shares. The shares will be accessed from on-premises applications that are transaction-intensive.

  You need to recommend a solution to minimize latency when accessing the file shares. The solution must provide the highest-level of resiliency for the selected storage tier.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Premium

  Premium: Premium file shares are backed by solid-state drives (SSDs) and provide consistent high performance and low latency, within single-digit milliseconds for most IO operations, for IO-intensive workloads.

  Incorrect Answers:

  Hot: Hot file shares offer storage optimized for general purpose file sharing scenarios such as team shares. Hot file shares are offered on the standard storage hardware backed by HDDs.

  Transaction optimized: Transaction optimized file shares enable transaction heavy workloads that don't need the latency offered by premium file shares. Transaction optimized file shares are offered on the standard storage hardware backed

  by hard disk drives (HDDs). Transaction optimized has historically been called "standard", however this refers to the storage media type rather than the tier itself (the hot and cool are also "standard" tiers, because they are on standard storage

  hardware).

  Box 2: Zone-redundant storage (ZRS):

  Premium Azure file shares only support LRS and ZRS.

  Zone-redundant storage (ZRS): With ZRS, three copies of each file stored, however these copies are physically isolated in three distinct storage clusters in different Azure availability zones.

  Reference:

  https://docs.microsoft.com/en-us/azure/storage/files/storage-files-planning

• Question 102:

  HOTSPOT

  You have an Azure subscription that contains the storage accounts shown in the following table.

  

  You plan to implement two new apps that have the requirements shown in the following table.

  

  Which storage accounts should you recommend using for each app? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  In conclusion the correct answers are: Box1 --> Storage1 and Storage3 only Box2 --> Storage1 and Storage4 only

  https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview https://www.edureka.co/community/40011/different-storage-accounts-there-major-difference-between https://insidemstech.com/tag/general-purpose-v2/ https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file- share?tabs=azure-portal#basics

• Question 103:

  HOTSPOT

  You plan to deploy Azure Databricks to support a machine learning application. Data engineers will mount an Azure Data Lake Storage account to the Databricks file system. Permissions to folders are granted directly to the data engineers.

  You need to recommend a design for the planned Databrick deployment. The solution must meet the following requirements:

  1.

  Ensure that the data engineers can only access folders to which they have permissions.

  2.

  Minimize development effort.

  3.

  Minimize costs.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Standard

  Choose Standard to minimize costs.

  Box 2: Credential passthrough

  Athenticate automatically to Azure Data Lake Storage Gen1 (ADLS Gen1) and Azure Data Lake Storage Gen2 (ADLS Gen2) from Azure Databricks clusters using the same Azure Active Directory (Azure AD) identity that you use to log into

  Azure Databricks. When you enable Azure Data Lake Storage credential passthrough for your cluster, commands that you run on that cluster can read and write data in Azure Data Lake Storage without requiring you to configure service

  principal credentials for access to storage.

  Reference:

  https://docs.microsoft.com/en-us/azure/databricks/security/credential-passthrough/adls-passthrough

• Question 104:

  HOTSPOT

  You have an on-premises database that you plan to migrate to Azure.

  You need to design the database architecture to meet the following requirements:

  1.

  Support scaling up and down.

  2.

  Support geo-redundant backups.

  3.

  Support a database of up to 75 TB.

  4.

  Be optimized for online transaction processing (OLTP).

  What should you include in the design? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Azure SQL Database

  Azure SQL Database:

  Database size always depends on the underlying service tiers (e.g. Basic, Business Critical, Hyperscale).

  It supports databases of up to 100 TB with Hyperscale service tier model.

  Active geo-replication is a feature that lets you to create a continuously synchronized readable secondary database for a primary database. The readable secondary database may be in the same Azure region as the primary, or, more

  commonly, in a different region. This kind of readable secondary databases are also known as geo-secondaries, or geo-replicas.

  Azure SQL Database and SQL Managed Instance enable you to dynamically add more resources to your database with minimal downtime.

  Box 2: Hyperscale

  Incorrect Answers:

  SQL Server on Azure VM: geo-replication not supported.

  Azure Synapse Analytics is not optimized for online transaction processing (OLTP).

  Azure SQL Managed Instance max database size is up to currently available instance size (depending on the number of vCores).

  Max instance storage size (reserved) - 2 TB for 4 vCores

  -8 TB for 8 vCores

  -16 TB for other sizes

  Reference: https://docs.microsoft.com/en-us/azure/azure-sql/database/active-geo-replication-overview https://medium.com/awesome-azure/azure-difference-between-azure-sql-database-and-sql-server-on-vm-comparison-azure-sql-vs-sql-server-vm-cf02578a1188

• Question 105:

  HOTSPOT

  You need to design a storage solution for an app that will store large amounts of frequently used data. The solution must meet the following requirements:

  1.

  Maximize data throughput.

  2.

  Prevent the modification of data for one year.

  3.

  Minimize latency for read and write operations.

  Which Azure Storage account type and storage service should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: BlockBlobStorage

  Block Blob is a premium storage account type for block blobs and append blobs. Recommended for scenarios with high transactions rates, or scenarios that use smaller objects or require consistently low storage latency.

  Box 2: Blob

  The Archive tier is an offline tier for storing blob data that is rarely accessed. The Archive tier offers the lowest storage costs, but higher data retrieval costs and latency compared to the online tiers (Hot and Cool). Data must remain in the

  Archive tier for at least 180 days or be subject to an early deletion charge.

  Reference: https://docs.microsoft.com/en-us/azure/storage/blobs/archive-blob

• Question 106:

  HOTSPOT

  You plan to deploy an Azure web app named App1 that will use Azure Active Directory (Azure AD) authentication.

  App1 will be accessed from the internet by the users at your company. All the users have computers that run Windows 10 and are joined to Azure AD.

  You need to recommend a solution to ensure that the users can connect to App1 without being prompted for authentication and can access App1 only from company-owned computers.

  What should you recommend for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: An Azure AD app registration

  Azure active directory (AD) provides cloud based directory and identity management services.You can use azure AD to manage users of your application and authenticate access to your applications using azure active directory. You register

  your application with Azure active directory tenant.

  Box 2: A conditional access policy

  Conditional Access policies at their simplest are if-then statements, if a user wants to access a resource, then they must complete an action.

  By using Conditional Access policies, you can apply the right access controls when needed to keep your organization secure and stay out of your user's way when not needed.

  

• Question 107:

  You are designing a point of sale (POS) solution that will be deployed across multiple locations and will use an Azure Databricks workspace in the Standard tier. The solution will include multiple apps deployed to the on-premises network of each location.

  You need to configure the authentication method that will be used by the app to access the workspace. The solution must minimize the administrative effort associated with staff turnover and credential management.

  What should you configure?

  A. a managed identity

  B. a service principal

  C. a personal access token

  Correct Answer: B

• Question 108:

  You have an Azure subscription that contains the resources shown in the following table.

  

  You create peering between VNet1 and VNet2 and between VNet1 and VNet3.

  The virtual machines host an HTTPS-based client/server application and are accessible only via the private IP address of each virtual machine.

  You need to implement a load balancing solution for VM2 and VM3. The solution must ensure that if VM2 fails, requests will be routed automatically to VM3, and if VM3 fails, requests will be routed automatically to VM2.

  What should you include in the solution?

  A. Azure Firewall Premium

  B. Azure Application Gateway v2

  C. a cross-region load balancer

  D. Azure Front Door Premium

  Correct Answer: D

  Reference: https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview

• Question 109:

  You have an on-premises Microsoft SQL Server 2008 instance that hosts a 50-GB database.

  You need to migrate the database to an Azure SQL managed instance. The solution must minimize downtime.

  What should you use?

  A. Azure Migrate

  B. Azure Data Studio

  C. WANdisco LiveData Platform for Azure

  D. SQL Server Management Studio (SSMS)

  Correct Answer: B

  Migrate using the Azure SQL migration extension for Azure Data Studio (minimal downtime) To perform a minimal downtime migration using Azure Data Studio.

  Reference: https://learn.microsoft.com/en-us/azure/azure-sql/migration-guides/managed-instance/sql-server-to-managed-instance-guide

• Question 110:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.

  The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.

  You need to recommend a solution to meet the regulatory requirement.

  Solution: You recommend using an Azure Policy initiative to enforce the location of resource groups.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  A security initiative is a collection of Azure Policy definitions, or rules, are grouped together towards a specific goal or purpose. Security initiatives simplify management of your policies by grouping a set of policies together, logically, as a

  single item.

  As an example, you could define a policy initiative definition to limit the locations of resources in the various included policy definitions. A parameter for that policy initiative definition could be allowedLocations. The parameter is then available

  to each included policy definition and defined during assignment of the policy initiative.

  Note:

  Azure Policy initiative definition structure

  Initiatives enable you to group several related policy definitions to simplify assignments and management because you work with a group as a single item. For example, you can group related tagging policy definitions into a single initiative.

  Rather than assigning each policy individually, you apply the initiative.

  You use JSON to create a policy initiative definition. The policy initiative definition contains elements for:

  display name

  description

  metadata

  parameters

  policy definitions

  policy groups

  Reference:

  https://learn.microsoft.com/en-us/azure/governance/policy/concepts/initiative-definition-structure