Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 131:

  You are designing an app that will use Azure Cosmos DB to collate sales data from multiple countries. You need to recommend an API for the app. The solution must meet the following requirements:

  1.

  Support SQL queries.

  2.

  Support geo-replication.

  3.

  Store and access data relationally. Which API should you recommend?

  A. PostgreSQL

  B. NoSQL

  C. Apache Cassandra

  D. MongoDB

  Correct Answer: A

• Question 132:

  Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.

  Several virtual machines exhibit network connectivity issues.

  You need to analyze the network traffic to identify whether packets are being allowed or denied from Azure to the virtual machines.

  Solution: Install and configure the Azure Monitoring agent and the Dependency Agent on all the virtual machines. Use VM insights in Azure Monitor to analyze the network traffic.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 133:

  What should you recommend to meet the monitoring requirements for App2?

  A. VM insights

  B. Azure Application Insights

  C. Microsoft Sentinel

  D. Container insights

  Correct Answer: B

  Scenario: You need to monitor App2 to analyze how long it takes to perform different transactions within the application. The solution must not require changes to the application code.

  Unified cross-component transaction diagnostics.

  The unified diagnostics experience automatically correlates server-side telemetry from across all your Application Insights monitored components into a single view. It doesn't matter if you have multiple resources. Application Insights detects

  the underlying relationship and allows you to easily diagnose the application component, dependency, or exception that caused a transaction slowdown or failure.

  Note: Components are independently deployable parts of your distributed/microservices application. Developers and operations teams have code-level visibility or access to telemetry generated by these application components.

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/app/transaction-diagnostics

• Question 134:

  Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.

  Several virtual machines exhibit network connectivity issues.

  You need to analyze the network traffic to identify whether packets are being allowed or denied from the Azure virtual machines to the on-premises virtual machines.

  Solution: Use Azure Advisor.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead use Azure Network Watcher IP Flow Verify, which allows you to detect traffic filtering issues at a VM level.

  Note: IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.

  Reference: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview

• Question 135:

  You are developing an app that will read activity logs for an Azure subscription by using Azure Functions.

  You need to recommend an authentication solution for Azure Functions. The solution must minimize administrative effort.

  What should you include in the recommendation?

  A. an enterprise application in Azure AD

  B. system-assigned managed identities

  C. shared access signatures (SAS)

  D. application registration in Azure AD

  Correct Answer: B

  Azure App Service provides built-in authentication and authorization capabilities (sometimes referred to as "Easy Auth"), so you can sign in users and access data by writing minimal or no code in your web app, RESTful API, and mobile back end, and also Azure Functions.

  Azure App Service provides built-in authentication and authorization capabilities (sometimes referred to as "Easy Auth"), so you can sign in users and access data by writing minimal or no code in your web app, RESTful API, and mobile back end, and also Azure Functions.

  *

  Microsoft Identity Platform

  *

  Facebook

  *

  Google

  *

  Twitter

  *

  Any OpenID Connect provider

  Note:

  A managed identity from Azure Active Directory (Azure AD) allows your app to easily access other Azure AD-protected resources such as Azure Key Vault. The identity is managed by the Azure platform and does not require you to provision

  or rotate any secrets. For more about managed identities in Azure AD, see Managed identities for Azure resources.

  Your application can be granted two types of identities:

  A system-assigned identity is tied to your application and is deleted if your app is deleted. An app can only have one system-assigned identity. A user-assigned identity is a standalone Azure resource that can be assigned to your app. An app

  can have multiple user-assigned identities.

  Reference: https://learn.microsoft.com/en-us/azure/app-service/overview-authentication-authorization https://learn.microsoft.com/en-us/azure/app-service/overview-managed-identity

• Question 136:

  You have an on-premises application named App1 that uses an Oracle database.

  You plan to use Azure Databricks to transform and load data from App1 to an Azure Synapse Analytics instance.

  You need to ensure that the App1 data is available to Databricks.

  Which two Azure services should you include in the solution? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Azure Data Box Edge

  B. Azure Data Lake Storage

  C. Azure Data Factory

  D. Azure Data Box Gateway

  E. Azure Import/Export service

  Correct Answer: CE

• Question 137:

  You have an Azure AD tenant.

  You plan to deploy Azure Cosmos DB databases that will use the SQL API.

  You need to recommend a solution to provide specific Azure AD user accounts with read access to the Cosmos DB databases.

  What should you include in the recommendation?

  A. a resource token and an Access control (1AM) role assignment

  B. certificates and Azure Key Vault

  C. master keys and Azure Information Protection policies

  D. shared access signatures (SAS) and Conditional Access policies

  Correct Answer: A

• Question 138:

  You plan to migrate on-premises MySQL databases to Azure Database for MySQL Flexible Server.

  You need to recommend a solution for the Azure Database for MySQL Flexible Server configuration. The solution must meet the following requirements:

  1.

  The databases must be accessible if a datacenter fails.

  2.

  Costs must be minimized. Which compute tier should you recommend?

  A. Burstable

  B. General Purpose

  C. Memory Optimized

  Correct Answer: B

  https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-high-availability#limitations

• Question 139:

  You have an Azure Functions microservice app named Appl that is hosted in the Consumption plan. App1 uses an Azure Queue Storage trigger.

  You plan to migrate App1 to an Azure Kubernetes Service (AKS) cluster.

  You need to prepare the AKS cluster to support Appl. The solution must meet the following requirements:

  1.

  Use the same scaling mechanism as the current deployment.

  2.

  Support kubenet and Azure Container Netwoking Interface (CNI) networking. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point.

  A. Configure the horizontal pod autoscaler.

  B. Install Virtual Kubelet.

  C. Configure the AKS cluster autoscaler.

  D. Configure the virtual node add-on.

  E. Install Kubemetes-based Event Driven Autoscaling (KEDA).

  Correct Answer: AE

  https://learn.microsoft.com/en-us/azure/aks/concepts-scale#horizontal-pod-autoscaler

  Kubernetes uses the horizontal pod autoscaler (HPA) to monitor the resource demand and automatically scale the number of replicas. By default, the horizontal pod autoscaler checks the Metrics API every 15 seconds for any required

  changes in replica count, but the Metrics API retrieves data from the Kubelet every 60 seconds. Effectively, the HPA is updated every 60 seconds. When changes are required, the number of replicas is increased or decreased accordingly.

  Horizontal pod autoscaler works with AKS clusters that have deployed the Metrics Server for Kubernetes 1.8+.

  https://learn.microsoft.com/en-us/azure/aks/keda-about

  Kubernetes Event-driven Autoscaling (KEDA) is a single-purpose and lightweight component that strives to make application autoscaling simple and is a CNCF Incubation project.

  It applies event-driven autoscaling to scale your application to meet demand in a sustainable and cost-efficient manner with scale-to-zero.

• Question 140:

  You have an app named App1 that uses an on-premises Microsoft SQL Server database named DB1.

  You plan to migrate DB1 to an Azure SQL managed instance.

  You need to enable customer-managed Transparent Data Encryption (TDE) for the instance. The solution must maximize encryption strength.

  Which type of encryption algorithm and key length should you use for the TDE protector?

  A. AES256

  B. RSA4096

  C. RSA2048

  D. RSA3072

  Correct Answer: D