Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 191:

  You have an Azure subscription.

  You need to deploy an Azure Kubernetes Service (AKS) solution that will use Linux nodes. The solution must meet the following requirements:

  1.

  Minimize the time it takes to provision compute resources during scale-out operations.

  2.

  Support autoscaling of Linux containers.

  3.

  Minimize administrative effort. Which scaling option should you recommend?

  A. Virtual Kubelet

  B. cluster autoscaler

  C. horizontal pod autoscaler

  D. AKS virtual nodes

  Correct Answer: D

  About the cluster autoscaler.

  AKS clusters can scale in one of two ways:

  1.

  The cluster autoscaler watches for pods that can't be scheduled on nodes because of resource constraints. The cluster then automatically increases the number of nodes.

  2.

  The horizontal pod autoscaler uses the Metrics Server in a Kubernetes cluster to monitor the resource demand of pods.

  Reference: https://docs.microsoft.com/en-us/azure/aks/cluster-autoscaler

• Question 192:

  You have to deploy an Azure SQL database named db1 for your company. The databases must meet the following security requirements.

  When IT help desk supervisors query a database table named customers, they must be able to see the full number of each credit card.

  When IT help desk operators query a database table named customers, they must only see the last four digits of each credit card number.

  A column named Credit Card rating in the customers table must never appear in plain text in the database system. Only client applications must be able to decrypt the information that is stored in this column

  Which of the following can be implemented for the Credit Card rating column security requirement?

  A. Always Encrypted

  B. Azure Advanced Threat Protection

  C. Transparent Data Encryption

  D. Dynamic Data Masking

  Correct Answer: A

  https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-database- engine?view=sql-server-ver15

• Question 193:

  You manage an application instance. The application consumes data from multiple databases. Application code references database tables using a combination of the server, database, and table name.

  You need to migrate the application data to Azure.

  To which two Azure services could you migrate the application to achieve the goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. SQL Managed Instance

  B. Azure SQL Database

  C. SQL Server in an Azure virtual machine

  D. SQL Server Stretch Database

  Correct Answer: AD

  A: The managed instance deployment model is designed for customers looking to migrate a large number of apps from on-premises or IaaS, self-built, or ISV provided environment to fully managed PaaS cloud environment, with as low migration effort as possible. Using the fully automated Data Migration Service (DMS) in Azure, customers can lift and shift their on-premises SQL Server to a managed instance that offers compatibility with SQL Server on-premises and complete isolation of customer instances with native VNet support.

  D: Access your SQL Server data seamlessly regardless of whether it's on-premises or stretched to the cloud. You set the policy that determines where data is stored, and SQL Server handles the data movement in the background. The entire table is always online and queryable. And, Stretch Database doesn't require any changes to existing queries or applications - the location of the data is completely transparent to the application.

  Reference: https://docs.microsoft.com/en-us/sql/sql-server/stretch-database/stretch-database

  https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instance

• Question 194:

  You have 500 Azure web apps in the same Azure region. The apps use a premium Azure key vault for authentication.

  A developer reports that some authentication requests are being throttled.

  You need to recommend a solution to increase the available throughput of the key vault. The solution must minimize costs.

  What should you recommend?

  A. Change the pricing tier.

  B. Configure geo-replication.

  C. Configure load balancing for the apps.

  D. Increase the number of key vaults in the subscription.

  Correct Answer: D

  To maximize your Key Vault through put rates, here are some recommended guidelines/best practices for maximizing your throughput:

  1.

  Ensure you have throttling in place. Client must honor exponential back-off policies for 429's and ensure you are doing retries as per the guidance below.

  2.

  Divide your Key Vault traffic amongst multiple vaults and different regions. Use a separate vault for each security/availability domain. If you have five apps, each in two regions, then we recommend 10 vaults each containing the secrets unique to app and region.

  Reference: https://docs.microsoft.com/en-us/azure/key-vault/general/overview-throttling

• Question 195:

  A company deploys Azure Active Directory (Azure AD) Connect to synchronize identity information from their on-premises Active Directory Domain Services (AD DS) directory to their Azure AD tenant. The identity information that is synchronized includes user accounts, credential hashes for authentication (password sync), and group memberships. The company plans to deploy several Windows and Linux virtual machines (VMs) to support their applications.

  The VMs have the following requirements:

  1.

  Support domain join, LDAP read, LDAP bind, NTLM and Kerberos authentication, and Group Policy.

  2.

  Allow users to sign in to the domain using their corporate credentials and connect remotely to the VM by using Remote Desktop.

  You need to support the VM deployment.

  Which service should you use?

  A. Active Directory Federation Services (AD FS)

  B. Azure AD Privileged Identity Management

  C. Azure Managed Identity

  D. Azure AD Domain Services

  Correct Answer: D

  Azure AD Domain Services provides managed domain services such as domain join, group policy, LDAP, Kerberos/NTLM authentication that are fully compatible with Windows Server Active Directory.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-overview

• Question 196:

  You plan to deploy an application that will run at a Linux-based Docker container You need to recommend a solution to host the application in Azure. The solution must meet the following requirements:

  1.

  Support a custom domain name and an associated SSL certificate.

  2.

  Scale-out automatically based on demand

  3.

  Minimize administrative effort and costs. What should you Include in the recommendation?

  A. Azure Container instances

  B. Azure Kubemetes Service (AKS)

  C. Azure App Service

  D. an Azure virtual machine

  Correct Answer: C

  App Service not only adds the power of Microsoft Azure to your application, such as security, load balancing, autoscaling, and automated management. You can also take advantage of its DevOps capabilities, such as continuous deployment from Azure DevOps, GitHub, Docker Hub, and other sources, package management, staging environments, custom domain, and TLS/SSL certificates.

  Key features of App Service include:

  1.

  Containerization and Docker - Dockerize your app and host a custom Windows or Linux container in App Service.

  2.

  Scale up or out manually or automatically. Host your apps anywhere in Microsoft's global datacenter infrastructure, and the App Service SLA promises high availability. App Service can also host web apps natively on Linux for supported application stacks. It can also run custom Linux containers (also known as Web App for Containers).

  Reference: https://docs.microsoft.com/en-us/azure/app-service/overview

• Question 197:

  You have an Azure subscription that contains a Basic Azure virtual WAN named VirtualWAN1 and the virtual hubs shown in the following table.

  

  You have an ExpressRoute circuit in the US East region.

  You need to create an ExpressRoute association to VirtualWAN1.

  What should you do first?

  A. Upgrade VirtualWAN1 to Standard.

  B. Create a gateway on Hub1.

  C. Create a hub virtual network in US East.

  D. Enable the ExpressRoute premium add-on.

  Correct Answer: A

  To create an ExpressRoute association with VirtualWAN1, you need to upgrade VirtualWAN1 from the Basic tier to the Standard tier. ExpressRoute connectivity to a virtual WAN is only supported in the Standard tier of Azure Virtual WAN. Once you have upgraded VirtualWAN1 to the Standard tier, you can proceed with setting up the ExpressRoute association.

• Question 198:

  You have an Azure subscription that contains an Azure SQL database.

  You plan to use Azure reservations on the Azure SQL database.

  To which resource type will the reservation discount be applied?

  A. vCore compute

  B. DTU compute

  C. Storage

  D. License

  Correct Answer: A

  Quantity: The amount of compute resources being purchased within the capacity reservation. The quantity is a number of vCores in the selected Azure region and Performance tier that are being reserved and will get the billing discount. For example, if you run or plan to run multiple databases with the total compute capacity of Gen5 16 vCores in the East US region, then you would specify the quantity as 16 to maximize the benefit for all the databases.

  Reference: https://docs.microsoft.com/en-us/azure/azure-sql/database/reserved-capacity-overview

• Question 199:

  Your company has offices in the United States, Europe, Asia, and Australia.

  You have an on-premises app named App1 that uses Azure Table storage. Each office hosts a local instance of App1.

  You need to upgrade the storage for App1. The solution must meet the following requirements:

  1.

  Enable simultaneous write operations in multiple Azure regions.

  2.

  Ensure that write latency is less than 10 ms.

  3.

  Support indexing on all columns.

  4.

  Minimize development effort. Which data platform should you use?

  A. Azure SQL Database

  B. Azure SQL Managed Instance

  C. Azure Cosmos DB

  D. Table storage that uses geo-zone-redundant storage (GZRS) replication

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/cosmos-db/table-support

• Question 200:

  The accounting department at your company migrates to a new financial accounting software.

  The accounting department must keep file-based database backups for seven years for compliance purposes. It is unlikely that the backups will be used to recover data.

  You need to move the backups to Azure. The solution must minimize costs.

  Where should you store the backups?

  A. Azure Blob storage that uses the Archive tier

  B. Azure SQL Database

  C. Azure Blob storage that uses the Cool tier

  D. a Recovery Services vault

  Correct Answer: A

  Azure Front Door enables you to define, manage, and monitor the global routing for your web traffic by optimizing for best performance and instant global failover for high availability. With Front Door, you can transform your global (multiregion) consumer and enterprise applications into robust, high-performance personalized modern applications, APIs, and content that reaches a global audience with Azure.

  Front Door works at Layer 7 or HTTP/HTTPS layer and uses anycast protocol with split TCP and Microsoft's global network for improving global connectivity.

  Incorrect Answers:

  B: Azure Traffic Manager uses DNS (layer 3) to shape traffic. SSL works at Layer 6.

  Azure Traffic Manager can direct customers to their closest AKS cluster and application instance. For the best performance and redundancy, direct all application traffic through Traffic Manager before it goes to your AKS cluster.

  Reference:

  https://docs.microsoft.com/en-us/azure/frontdoor/front-door-overview