Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 161:

  You have an on-premises network to which you deploy a virtual appliance.

  You plan to deploy several Azure virtual machines and connect the on-premises network to Azure by using a Site-to-Site connection.

  All network traffic that will be directed from the Azure virtual machines to a specific subnet must flow through the virtual appliance.

  You need to recommend solutions to manage network traffic.

  Which two options should you recommend? Each correct answer presents a complete solution.

  A. Configure Azure Traffic Manager.

  B. Implement an Azure virtual network.

  C. Implement Azure ExpressRoute.

  D. Configure a routing table.

  Correct Answer: CD

  Connectivity can be from an any-to-any (IP VPN) network, a point-to-point Ethernet network, or a virtual cross-connection through a connectivity provider at a co-location facility. ExpressRoute connections do not go over the public Internet. This allows ExpressRoute connections to offer more reliability, faster speeds, lower latencies, and higher security than typical connections over the Internet.

  Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-forced-tunneling-rm https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction

• Question 162:

  You need to recommend a solution to deploy containers that run an application. The application has two tiers.

  Each tier is implemented as a separate Docker Linux-based image.

  The solution must meet the following requirements:

  1.

  The front-end tier must be accessible by using a public IP address on port 80.

  2.

  The backend tier must be accessible by using port 8080 from the front-end tier only.

  3.

  Both containers must be able to access the same Azure file share.

  4.

  If a container fails, the application must restart automatically.

  5.

  Costs must be minimized.

  What should you recommend using to host the application?

  A. Azure Kubernetes Service (AKS)

  B. Azure Service Fabric

  C. Azure Container instances

  D. Azure Container registries

  Correct Answer: C

  Azure Container Instances enables a layered approach to orchestration, providing all of the scheduling and management capabilities required to run a single container, while allowing orchestrator platforms to manage multi-container tasks on top of it.

  Because the underlying infrastructure for container instances is managed by Azure, an orchestrator platform does not need to concern itself with finding an appropriate host machine on which to run a single container.

  Azure Container Instances can schedule both Windows and Linux containers with the same API.

  Orchestration of container instances exclusively Because they start quickly and bill by the second, an environment based exclusively on Azure Container Instances offers the fastest way to get started and to deal with highly variable workloads.

  Reference: https://docs.microsoft.com/en-us/azure/container-instances/container-instances-overview https://docs.microsoft.com/en-us/azure/container-instances/container-instances-orchestrator-relationship

• Question 163:

  You plan to deploy an Azure Databricks Data Science and Engineering workspace and ingest data into the workspace. Where should you persist the ingested data?

  A. Azure Files

  B. Azure Data Lake

  C. Azure SQL Database

  D. Azure Cosmos DB

  Correct Answer: B

  The Azure Databricks Data Science and Engineering data lands in a data lake for long term persisted storage, in Azure Blob Storage or Azure Data Lake Storage.

  Reference: https://docs.microsoft.com/en-us/azure/databricks/scenarios/what-is-azure-databricks-ws

• Question 164:

  You plan to archive 10 TB of on-premises data files to Azure.

  You need to recommend a data archival solution. The solution must minimize the cost of storing the data files.

  Which Azure Storage account type should you include in the recommendation?

  A. Standard StorageV2 (general purpose v2)

  B. Standard Storage (general purpose v1)

  C. Premium StorageV2 (general purpose v2)

  D. Premium Storage (general purpose v1)

  Correct Answer: A

  Standard StorageV2 supports the Archive access tier, which would be the cheapest solution.

  Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction

• Question 165:

  You are designing an Azure Cosmos DB solution that will host multiple writable replicas in multiple Azure regions.

  You need to recommend the strongest database consistency level for the design.

  The solution must meet the following requirements:

  1.

  Provide a latency-based Service Level Agreement (SLA) for writes.

  2.

  Support multiple regions.

  Which consistency level should you recommend?

  A. bounded staleness

  B. strong

  C. session

  D. consistent prefix

  Correct Answer: A

  Reference:

  https://azure.microsoft.com/en-us/support/legal/sla/cosmos-db/v1_3/

  https://docs.microsoft.com/en-us/azure/cosmos-db/consistency-levels#consistency-levels- and-latency

• Question 166:

  You are designing a solution that will include containerized applications running in an Azure Kubernetes Service (AKS) cluster.

  You need to recommend a load balancing solution for HTTPS traffic.

  The solution must meet the following requirements:

  1.

  Automatically configure load balancing rules as the applications are deployed to the cluster.

  2.

  Support Azure Web Application Firewall (WAF).

  3.

  Support cookie-based affinity.

  4.

  Support URL routing.

  What should you include the recommendation?

  A. an NGINX ingress controller

  B. Application Gateway Ingress Controller (AGIC)

  C. an HTTP application routing ingress controller

  D. the Kubernetes load balancer service

  Correct Answer: B

  Much like the most popular Kubernetes Ingress Controllers, the Application Gateway Ingress Controller provides several features, leveraging Azure's native Application Gateway L7 load balancer. To name a few: URL routing Cookie-based affinity Secure Sockets Layer (SSL) termination End-to-end SSL Support for public, private, and hybrid web sites Integrated support of Azure web application firewall

  Application Gateway redirection support isn't limited to HTTP to HTTPS redirection alone. This is a generic redirection mechanism, so you can redirect from and to any port you define using rules. It also supports redirection to an external site as well.

  Reference: https://docs.microsoft.com/en-us/azure/application-gateway/features

• Question 167:

  A company needs a datastore created in Azure for an application. Below are the key requirements for the data store.

  1.

  Ability to store JSON based items

  2.

  Ability to use SQL like queries on the datastore

  3.

  Ability to provide low latency access to data items Which of the following would you consider as the data store?

  A. Azure BLOB storage

  B. Azure CosmosDB

  C. Azure HDInsight

  D. Azure Redis

  Correct Answer: B

• Question 168:

  Your network contains an on-premises Active Directory forest.

  You discover that when users change jobs within your company, the membership of the user groups are not being updated. As a result, the users can access resources that are no longer relevant to their job.

  You plan to integrate Active Directory and Azure Active Directory (Azure AD) by using Azure AD Connect. You need to recommend a solution to ensure that group owners are emailed monthly about the group memberships they manage.

  What should you include in the recommendation?

  A. conditional access policies

  B. Tenant Restrictions

  C. Azure AD access reviews

  D. Azure AD Identity Protection

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview

• Question 169:

  You have an Azure subscription that contains an Azure SQL database.

  You are evaluating whether to use Azure reservations on the Azure SQL database.

  Which tool should you use to estimate the potential savings?

  A. The Purchase reservations blade in the Azure portal

  B. The Advisor blade in the Azure portal

  C. The SQL database blade in the Azure portal

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/azure-sql/database/reserved-capacity-overview

• Question 170:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are designing an Azure solution for a company that has four departments. Each department will deploy several Azure app services and Azure SQL databases.

  You need to recommend a solution to report the costs for each department to deploy the app services and the databases. The solution must provide a consolidated view for cost reporting that displays cost broken down by department.

  Solution: Create a separate resource group for each department. Place the resources for each department in its respective resource group.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead create a resources group for each resource type. Assign tags to each resource group.

  Note: Tags enable you to retrieve related resources from different resource groups. This approach is helpful when you need to organize resources for billing or management.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using- tags