Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 111:

  Your company has offices in North America and Europe.

  You plan to migrate to Azure.

  You need to recommend a networking solution for the new Azure infrastructure. The solution must meet the following requirements:

  The Point-to-Site (P2S) VPN connections of mobile users must connect automatically to the closest Azure region.

  The offices in each region must connect to their local Azure region by using an ExpressRoute circuit.

  Transitive routing between virtual networks and on-premises networks must be supported.

  The network traffic between virtual networks must be filtered by using FQDNs.

  What should you include in the recommendation?

  A. Azure Virtual WAN with a secured virtual hub

  B. virtual network peering and application security groups

  C. virtual network gateways and network security groups (NSGs)

  D. Azure Route Server and Azure Network Function Manager

  Correct Answer: C

  Network security groups

  A fully qualified domain name (FQDN) represents a domain name of a host or IP address(es). You can use FQDNs in network rules based on DNS resolution in Azure Firewall and Firewall policy. This capability allows you to filter outbound

  traffic with any TCP/UDP protocol (including NTP, SSH, RDP, and more).

  Use FQDN filtering in network rules

  A fully qualified domain name (FQDN) represents a domain name of a host or IP address(es). You can use FQDNs in network rules based on DNS resolution in Azure Firewall and Firewall policy. This capability allows you to filter outbound

  traffic with any TCP/UDP protocol (including NTP, SSH, RDP, and more).

  Virtual network gateways

  VPN gateways. A VPN gateway is a specific type of virtual network gateway that is used to send traffic between an Azure virtual network and an on-premises location over the public internet. You can also use a VPN gateway to send traffic

  between Azure virtual networks. Each virtual network can have at most one VPN gateway.

  Virtual network gateways support Point-to-Site (P2S) VPN connections.

  Gateway transit

  Virtual network peering and VPN Gateways can also coexist via gateway transit

  Gateway transit enables you to use a peered virtual network's gateway for connecting to on-premises, instead of creating a new gateway for connectivity. As you increase your workloads in Azure, you need to scale your networks across

  regions and virtual networks to keep up with the growth. Gateway transit allows you to share an ExpressRoute or VPN gateway with all peered virtual networks and lets you manage the connectivity in one place. Sharing enables cost-savings

  and reduction in management overhead.

  Incorrect:

  Not D: Azure Route Server and Azure Network Function Manager do not support FQDNs filtering.

  Note:

  Azure Route Server

  Azure Route Server simplifies dynamic routing between your network virtual appliance (NVA) and your virtual network. It allows you to exchange routing information directly through Border Gateway Protocol (BGP) routing protocol between

  any NVA that supports the BGP routing protocol and the Azure Software Defined Network (SDN) in the Azure Virtual Network (VNet) without the need to manually configure or maintain route tables. Azure Route Server is a fully managed

  service and is configured with high availability.

  Note:

  Number of routes that Azure Route Server can advertise to ExpressRoute or VPN gateway: 200

  Azure Network Function Manager

  Azure Network Function Manager offers an Azure Marketplace experience for deploying network functions such as mobile packet core, SD-WAN edge, and VPN services to your Azure Stack Edge device running in your on-premises

  environment. You can now rapidly deploy a private mobile network service or SD-WAN solution on your edge device directly from the Azure management portal

  Reference: https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

  https://learn.microsoft.com/en-us/azure/firewall/fqdn-filtering-network-rules

  https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/vnet-peering

  https://learn.microsoft.com/en-us/azure/route-server/overview

  https://learn.microsoft.com/en-us/azure/network-function-manager/overview

• Question 112:

  You have an on-premises line-of-business (LOB) application that uses a Microsoft SQL Server instance as the backend.

  You plan to migrate the on-premises SQL Server instance to Azure virtual machines.

  You need to recommend a highly available SQL Server deployment that meets the following requirements:

  1.

  Minimizes costs

  2.

  Minimizes failover time if a single server fails What should you include in the recommendation?

  A. an Always On availability group that has premium storage disks and a virtual network name (VNN)

  B. an Always On Failover Cluster Instance that has a virtual network name (VNN) and a standard file share

  C. an Always On availability group that has premium storage disks and a distributed network name (DNN)

  D. an Always On Failover Cluster Instance that has a virtual network name (VNN) and a premium file share

  Correct Answer: C

  Always On availability groups on Azure Virtual Machines are similar to Always On availability groups on-premises, and rely on the underlying Windows Server Failover Cluster.

  If you deploy your SQL Server VMs to a single subnet, you can configure a virtual network name (VNN) and an Azure Load Balancer, or a distributed network name (DNN) to route traffic to your availability group listener.

  There are some behavior differences between the functionality of the VNN listener and DNN listener that are important to note:

  *

  Failover time: Failover time is faster when using a DNN listener since there is no need to wait for the network load balancer to detect the failure event and change its routing.

  *

  Etc.

  Incorrect:

  Not B, not D: Migrate to an Always On availability group, not an Always on Failover cluster Instance.

  Reference: https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/availability-group-overview

• Question 113:

  You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region.

  You are designing a disaster recovery plan for KeyVault1.

  You plan to back up the keys in KeyVault1.

  You need to identify to where you can restore the backup.

  What should you identify?

  A. any region worldwide

  B. the same region only

  C. KeyVault1 only

  D. the same geography only

  Correct Answer: D

  Using the backup and restore commands has two limitations:

  *

  You can't back up a key vault in one geography and restore it into another geography.

  *

  The backup command backs up all versions of each secret.

  Incorrect:

  Not A: Azure Key Vault does not allow you to move a key vault from one region to another. You can, however, create a key vault in the new region, manually copy each individual key, secret, or certificate from your existing key vault to the

  new key vault, and then remove the original key vault.

  Reference: https://docs.microsoft.com/en-us/azure/key-vault/general/move-region

• Question 114:

  You are planning a storage solution. The solution must meet the following requirements:

  Support at least 500 requests per second.

  Support a large image, video, and audio streams.

  Which type of Azure Storage account should you provision?

  A. standard general-purpose v2

  B. premium block blobs

  C. premium page blobs

  D. premium file shares

  Correct Answer: B

  Use Azure Blobs if you want your application to support streaming and random access scenarios.

  It's ideal for applications that require high transaction rates or consistent low-latency storage.

  Incorrect:

  Not A: Standard storage accounts has a default maximum request rate per storage account 20,000 requests per second1, but is not optimized for video and audio streams.

  Not C: Page blobs is best suited for random reads and random writes.

  Not D: FileStorage storage accounts (premium) has a maximum concurrent request rate of 100,000 IOPS.

  Maximum file size is 4 TB, but is not optimized for video and audio streams.

  Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction

  https://docs.microsoft.com/en-us/azure/storage/files/storage-files-scale-targets

• Question 115:

  You need to recommend a data storage solution that meets the following requirements:

  1.

  Ensures that applications can access the data by using a REST connection

  2.

  Hosts 20 independent tables of varying sizes and usage patterns

  3.

  Automatically replicates the data to a second Azure region Minimizes costs

  What should you recommend?

  A. an Azure SQL Database elastic pool that uses active geo-replication

  B. tables in an Azure Storage account that use geo-redundant storage (GRS)

  C. tables in an Azure Storage account that use read-access geo-redundant storage (RA-GRS)

  D. an Azure SQL database that uses active geo-replication

  Correct Answer: B

  The Table service offers structured storage in the form of tables. The Table service API is a REST API for working with tables and the data that they contain.

  Geo-redundant storage (GRS) has a lower cost than read-access geo-redundant storage (RA-GRS).

  Reference: https://docs.microsoft.com/en-us/rest/api/storageservices/table-service-rest-api

  https://docs.microsoft.com/en-us/azure/storage/common/geo-redundant-design

• Question 116:

  You are designing a solution that calculates 3D geometry from height-map data. You need to recommend a solution that meets the following requirements:

  1.

  Performs calculations in Azure.

  2.

  Ensures that each node can communicate data to every other node.

  3.

  Maximizes the number of nodes to calculate multiple scenes as fast as possible.

  4.

  Minimizes the amount of effort to implement the solution.

  Which two actions should you include in the recommendation? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Enable parallel file systems on Azure.

  B. Create a render farm that uses virtual machines.

  C. Create a render farm that uses virtual machine scale sets.

  D. Create a render farm that uses Azure Batch.

  E. Enable parallel task execution on compute nodes.

  Correct Answer: DE

  Multi-instance tasks allow you to run an Azure Batch task on multiple compute nodes simultaneously. These tasks enable high performance computing scenarios like Message Passing Interface (MPI) applications in Batch.

  You configure compute nodes for parallel task execution at the pool level.

  Azure Batch allows you to set task slots per node up to (4x) the number of node cores.

  Reference:

  https://docs.microsoft.com/en-us/azure/batch/batch-mpi

  https://docs.microsoft.com/en-us/azure/batch/batch-parallel-node-tasks#enable-parallel-task-execution

• Question 117:

  You plan to deploy multiple instances of an Azure web app across several Azure regions.

  You need to design an access solution for the app. The solution must meet the following replication requirements:

  1.

  Support rate limiting.

  2.

  Balance requests between all instances.

  3.

  Ensure that users can access the app in the event of a regional outage.

  Solution: You use Azure Front Door to provide access to the app.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Azure Front Door meets the requirements. The Azure Web Application Firewall (WAF) rate limit rule for Azure Front Door controls the number of requests allowed from clients during a one-minute duration.

  Reference:

  https://www.nginx.com/blog/nginx-plus-and-azure-load-balancers-on-microsoft-azure/

  https://docs.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-rate-limit-powershell

• Question 118:

  You have 100 devices that write performance data to Azure Blob Storage.

  You plan to store and analyze the performance data in an Azure SQL database.

  You need to recommend a solution to continually copy the performance data to the Azure SQL database.

  What should you include in the recommendation?

  A. Azure Data Factory

  B. Data Migration Assistant (DMA)

  C. Azure Data Box

  D. Azure Database Migration Service

  Correct Answer: A

• Question 119:

  You need to recommend a storage solution for the records of a mission critical application. The solution must provide a Service Level Agreement (SLA) for the latency of write operations and the throughput. What should you include in the recommendation?

  A. Azure Data Lake Storage Gen2

  B. Azure Blob Storage

  C. Azure SQL

  D. Azure Cosmos DB

  Correct Answer: D

  Azure Cosmos DB is Microsoft's fast NoSQL database with open APIs for any scale. It offers turnkey global distribution across any number of Azure regions by transparently scaling and replicating your data wherever your users are. The service offers comprehensive 99.99% SLAs which covers the guarantees for throughput, consistency, availability and latency for the Azure Cosmos DB Database Accounts scoped to a single Azure region configured with any of the five Consistency Levels or Database Accounts spanning multiple Azure regions, configured with any of the four relaxed Consistency Levels. Azure Cosmos DB allows configuring multiple Azure regions as writable endpoints for a Database Account. In this configuration, Azure Cosmos DB offers 99.999% SLA for both read and write availability.

  Reference: https://azure.microsoft.com/en-us/support/legal/sla/cosmos-db/v1_3/

• Question 120:

  You plan to deploy an Azure Database for MySQL flexible server named Server1 to the East US Azure region.

  You need to implement a business continuity solution for Server1. The solution must minimize downtime in the event of a failover to a paired region.

  What should you do?

  A. Create a read replica.

  B. Store the database files in Azure premium file shares.

  C. Implement Geo-redundant backup.

  D. Configure native MySQL replication.

  Correct Answer: C

  The table below illustrates the features that the Azure Database for MySQL - Flexible Server service offers.

  * Geo-redundant backup - Available in all Azure paired regions.

  The service backups can be configured as geo-redundant at create time. Enabling Geo-redundancy replicates the server backup data files in the primary region's paired region to provide regional resiliency. Geo-redundant backup storage

  provides at least 99.99999999999999% (16 nines) durability of objects over a given year.

  Reference: https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-business-continuity