Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 181:

  You have an app named App1 that uses two on-premises Microsoft SQL Server databases named DB1 and DB2.

  You plan to migrate DB1 and DB2 to Azure.

  You need to recommend an Azure solution to host DB1 and DB2.

  The solution must meet the following requirements:

  1.

  Support server-side transactions across DB1 and DB2.

  2.

  Minimize administrative effort to update the solution. What should you recommend?

  A. two SQL Server databases on an Azure virtual machine

  B. two Azure SQL databases on different Azure SQL Database servers

  C. two Azure SQL databases in an elastic pool

  D. two Azure SQL databases on the same Azure SQL Database managed instance

  Correct Answer: D

  An Azure SQL Managed Instance is a fully managed SQL Server Database Engine hosted in Azure that provides most of the SQL Server capabilities. It supports features like cross-database queries and transactions, which is crucial for your requirement of supporting server-side transactions across DB1 and DB2. Additionally, since it's a fully managed solution, it minimizes the administrative effort needed to update and maintain the system.

  Reference: https://docs.particular.net/nservicebus/azure/understanding-transactionality-in-azure

• Question 182:

  You need to design a highly available Azure SQL database that meets the following requirements:

  1.

  Failover between replicas of the database must occur without any data loss.

  2.

  The database must remain available in the event of a zone outage.

  3.

  Costs must be minimized. Which deployment option should you use?

  A. Azure SQL Managed Instance Business Critical

  B. Azure SQL Managed Instance General Purpose

  C. Azure SQL Database Business Critical

  D. Azure SQL Database Serverless

  Correct Answer: D

  Azure SQL Database Serverless meets the requirements and is less expensive than Azure SQL Database Business Critical.

  Note: General Purpose service tier zone redundant availability.

  Zone-redundant configuration for the general purpose service tier is offered for both serverless and provisioned compute.

  This configuration utilizes Azure Availability Zones ג€‰to replicate databases across multiple physical locations within an Azure region.ג€‰By selecting zone-redundancy, you can make yourג€‰new and existing serverless and provisioned

  generalג€‰purpose single databases and elastic pools resilient to a much larger set of failures, including catastrophic datacenter outages, without any changes of the application logic.

  Incorrect:

  Not A, not B: Zone-redundant configuration is not available in SQL Managed Instance.

  Not C: Azure SQL Database Business Critical is more expensive than Azure SQL Database Serverless.

  Note: Premium and Business Critical service tiers use the Premium availability model, which integrates compute resources (sqlservr.exe process) and storage

  (locally attached SSD) on a single node. High availability is achieved by replicating both compute and storage to additional nodes creating a three to four-node cluster.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-sql/database/high-availability-sla

• Question 183:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Storage account that contains two 1-GB data files named File1 and File2. The data files are set to use the archive access tier.

  You need to ensure that File1 is accessible immediately when a retrieval request is initiated.

  Solution: For File1, you set Access tier to Cool.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  The data in the cool tier is "considered / intended to be stored for 30 days". But this is not a must. You can store data indefinitely in the cool tier. The mentioned reference (see below) even gives an example of large scientific or otherwise large data which is stored for long duration in the cool tier. https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage- tiers?tabs=azure-portal

• Question 184:

  Your company has an Azure Web App that runs via the Premium App Service Plan. A development team will be using the Azure Web App. You have to configure the Azure Web app so that it can fulfil the below requirements. Provide the ability to switch the web app from the current version to a newer version Provide developers with the ability to test newer versions of the application before the switch to the newer version occurs Ensure that the application version can be rolled back Minimize downtime Which of the following can be used for this requirement?

  A. Create a new App Service Plan

  B. Make use of deployment slots

  C. Map a custom domain

  D. Backup the Azure Web App

  Correct Answer: B

• Question 185:

  You are designing a microservices architecture that will support a web application. The solution must meet the following requirements:

  1.

  Allow independent upgrades to each microservice

  2.

  Deploy the solution on-premises and to Azure Set policies for performing automatic repairs to the microservices Support low-latency and hyper-scale operations You need to recommend a technology. What should you recommend?

  A. Azure Service Fabric

  B. Azure Container Service

  C. Azure Container Instance

  D. Azure Virtual Machine Scale Set

  Correct Answer: A

  https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-overview

• Question 186:

  Your company develops Azure applications.

  You need to recommend a solution for the deployment of Azure subscriptions. The solution must meet the following requirements:

  What should you include in the recommendation?

  A. Provision resource groups.

  B. Support deployments across all Azure regions.

  C. Create custom role-based access control (RBAC) roles.

  D. Provide consistent virtual machine and virtual network configurations.

  Correct Answer: D

  Resource groups: You can scope your deployment to a resource group. You use an Azure Resource Manager template (ARM template) for the deployment. Regions: If you have a template spec in one region and want to move it to new

  region, you can export the template spec and redeploy it. RBAC: Azure role- based access control (Azure RBAC) is the authorization system you use to manage access to Azure resources. To grant access, you assign roles to users, groups,

  service principals, or managed identities at a particular scope. In addition to using Azure PowerShell or the Azure CLI, you can assign roles using Azure Resource Manager templates. Templates can be helpful if you need to deploy resources

  consistently and repeatedly.

  You can setup Virtual machines and virtual network configurations in an Azure Resource Manager template.

  Reference:

  https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/microsoft-resources-move-regions

  https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-template

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/template-description

• Question 187:

  You architect a solution that calculates 3D geometry from height-map data.

  You have the following requirements:

  Perform calculations in Azure.

  Each node must communicate data to every other node.

  Maximize the number of nodes to calculate multiple scenes as fast as possible.

  Require the least amount of effort to implement.

  You need to recommend a solution.

  Which two actions should you recommend? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Create a render farm that uses Azure Batch.

  B. Enable parallel file systems on Azure.

  C. Enable parallel task execution on compute nodes.

  D. Create a render farm that uses virtual machine (VM) scale sets.

  E. Create a render farm that uses virtual machines (VMs).

  Correct Answer: AC

• Question 188:

  Your company plans to publish APIs for its services by using Azure API Management.

  You discover that service responses include the AspNet-Version header.

  You need to recommend a solution to remove AspNet-Version from the response of the published APIs.

  What should you include in the recommendation?

  A. a new product

  B. a modification to the URL scheme

  C. a new policy

  D. a new revision

  Correct Answer: C

  https://docs.microsoft.com/en-us/azure/api-management/transform-api

• Question 189:

  You are designing an Azure solution.

  The network traffic for the solution must be securely distributed by providing the following features:

  1.

  HTTPS protocol

  2.

  Round robin routing

  3.

  SSL offloading

  4.

  You need to recommend a load balancing option. What should you recommend?

  A. Azure Load Balancer

  B. Azure Traffic Manager

  C. Azure Internal Load Balancer (ILB)

  D. Azure Application Gateway

  Correct Answer: D

  If you are looking for Transport Layer Security (TLS) protocol termination ("SSL offload") or per-HTTP/ HTTPS request, application-layer processing, review Application Gateway. Application Gateway is a layer 7 load balancer, which means it works only with web traffic (HTTP, HTTPS, WebSocket, and HTTP/2). It supports capabilities such as SSL termination, cookie-based session affinity, and round robin for load- balancing traffic. Load Balancer load-balances traffic at layer 4 (TCP or UDP).

  References: https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq

• Question 190:

  A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that is integrated with Microsoft Office 365 and an Azure subscription.

  Contoso has an on-premises identity infrastructure. The infrastructure includes servers that run Active Directory Domain Services (AD DS), and Azure AD Connect

  Contoso has a partnership with a company named Fabrikam, Inc. Fabrikam has an Active Directory forest and an Office 365 tenant. Fabrikam has the same on-premises identity infrastructure as Contoso.

  A team of 10 developers from Fabrikam will work on an Azure solution that will be hosted in the Azure subscription of Contoso. The developers must be added to the Contributor role for a resource in the Contoso subscription.

  You need to recommend a solution to ensure that Contoso can assign the role to the 10 Fabrikam developers. The solution must ensure that the Fabrikam developers use their existing credentials to access resources.

  What should you recommend?

  A. Configure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.

  B. Configure an organization relationship between the Office 365 tenants of Fabrikam and Contoso.

  C. In the Azure AD tenant of Contoso, use MIM to create guest accounts for the Fabrikam developers.

  D. Configure an AD FS relying party trust between the fabrikam and Contoso AD FS infrastructures.

  Correct Answer: A

  Trust configurations - Configure trust from managed forests(s) or domain(s) to the administrative forest. A one-way trust is required from production environment to the admin forest. Selective authentication should be used to restrict accounts in the admin forest to only logging on to the appropriate production hosts.

  References:

  https://docs.microsoft.com/en-us/windows-server/identity/securing-privileged-access/securing-privileged- access-reference-material