Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 201:

  You manage an on-premises network and Azure virtual networks.

  You need to create a secure connection over a private network between the on-premises network and the Azure virtual networks. The connection must offer a redundant pair of cross connections to provide high availability.

  What should you recommend?

  A. Azure Load Balancer

  B. VPN Gateway

  C. ExpressRoute

  D. virtual network peering

  Correct Answer: B

  Every Azure VPN gateway consists of two instances in an active-standby configuration. For any planned maintenance or unplanned disruption that happens to the active instance, the standby instance would take over (failover) automatically.

  Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable

• Question 202:

  You have an Azure subscription that contains an Azure Blob storage account named store1.

  You have an on-premises file server named Server1 that runs Windows Server 2016. Server1 stores 500 GB of company files.

  You need to store a copy of the company files from Server 1 in store1.

  Which two possible Azure services achieve this goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. an integration account

  B. an On-premises data gateway

  C. an Azure Batch account

  D. an Azure Import/Export job

  E. Azure Data Factory

  Correct Answer: DE

• Question 203:

  You plan to automate the deployment of resources to Azure subscriptions.

  What is a difference between using Azure Blueprints and Azure Resource Manager templates?

  A. Azure Resource Manager templates remain connected to the deployed resources.

  B. Only Azure Resource Manager templates can contain policy definitions.

  C. Azure Blueprints remain connected to the deployed resources.

  D. Only Azure Blueprints can contain policy definitions.

  Correct Answer: C

  With Azure Blueprints, the relationship between the blueprint definition (what should be deployed) and the blueprint assignment (what was deployed) is preserved. This connection supports improved tracking and auditing of deployments.

  Azure Blueprints can also upgrade several subscriptions at once that are governed by the same blueprint.

  Incorrect:

  Not A: Nearly everything that you want to include for deployment in Azure Blueprints can be accomplished with a Resource Manager template. However, a Resource Manager template is a document that doesn't exist natively in Azure ?each

  is stored either locally or in source control. The template gets used for deployments of one or more Azure resources, but once those resources deploy there's no active connection or relationship to the template.

  Reference:

  https://docs.microsoft.com/en-us/answers/questions/26851/how-is-azure-blue-prints-different-from-resource-m.html

• Question 204:

  You have a hybrid deployment of Azure Active Directory (Azure AD).

  You need to recommend a solution to ensure that the Azure AD tenant can be managed only from the computers on your on-premises network.

  What should you include in the recommendation?

  A. a conditional access policy

  B. Azure AD roles and administrators

  C. Azure AD Application Proxy

  D. Azure AD Privileged Identity Management

  Correct Answer: A

• Question 205:

  You have 100 Microsoft SQL Server Integration Services (SSIS) packages that are configured to use 10 on-premises SQL Server databases as their destinations.

  You plan to migrate the 10 on-premises databases to Azure SQL Database.

  You need to recommend a solution to host the SSIS packages in Azure. The solution must ensure that the packages can target the SQL Database instances as their destinations.

  What should you include in the recommendation?

  A. SQL Server Migration Assistant (SSMA)

  B. Data Migration Assistant

  C. Azure Data Catalog

  D. Azure Data Factory

  Correct Answer: D

  https://docs.microsoft.com/bs-cyrl-ba/azure/sql-database/sql-database-managed-instancemigrate

  Quote from that page "Azure SQL Database and SQL Server databases in an Azure Virtual Machine. DMS is the recommended method of migration for your enterprise workloads.

  If you use SQL Server Integration Services (SSIS) on your SQL Server on premises, DMS does not yet support migrating SSIS catalog (SSISDB) that stores SSIS packages, but you can provision Azure-SSIS Integration Runtime (IR) in Azure

  Data Factory (ADF) that will create a new SSISDB in a managed instance and then you can redeploy your packages to it, see Create Azure-SSIS IR in ADF.

  To learn more about this scenario and configuration steps for DMS, see Migrate your onpremises database to managed instance using DMS."

  https://docs.microsoft.com/en-us/azure/data-factory/how-to-migrate-ssis-job-ssms

• Question 206:

  You are designing an Azure governance solution.

  All Azure resources must be easily identifiable based on the following operational information:

  environment, owner, department, and cost center.

  You need to ensure that you can use the operational information when you generate reports for the Azure resources.

  What should you include in the solution?

  A. an Azure data catalog that uses the Azure REST API as a data source

  B. Azure Active Directory (Azure AD) administrative units

  C. an Azure management group that uses parent groups to create a hierarchy

  D. an Azure policy that enforces tagging rules

  Correct Answer: D

  You use Azure Policy to enforce tagging rules and conventions. By creating a policy, you avoid the scenario of resources being deployed to your subscription that don't have the expected tags for your organization. Instead of manually applying tags or searching for resources that aren't compliant, you create a policy that automatically applies the needed tags during deployment.

  Note: Organizing cloud-based resources is a crucial task for IT, unless you only have simple deployments. Use naming and tagging standards to organize your resources for these reasons:

  Resource management: Your IT teams will need to quickly locate resources associated with specific workloads, environments, ownership groups, or other important information. Organizing resources is critical to assigning organizational roles

  and access permissions for resource management.

  Reference:

  https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/decision-guides/resource-tagging

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-policies

• Question 207:

  You plan to deploy an Azure App Service web app that will have multiple instances across multiple Azure regions.

  You need to recommend a load balancing service for the planned deployment. The solution must meet the following requirements:

  1.

  Maintain access to the app in the event of a regional outage.

  2.

  Support Azure Web Application Firewall (WAF).

  3.

  Support cookie-based affinity.

  4.

  Support URL routing.

  What should you include in the recommendation?

  A. Azure Front Door

  B. Azure Load Balancer

  C. Azure Traffic Manager

  D. Azure Application Gateway

  Correct Answer: A

  Azure Front Door works across regions and support URL routing (HTTP(S)).

  Note: HTTP(S) load-balancing services are Layer 7 load balancers that only accept HTTP(S) traffic. They are intended for web applications or other HTTP(S) endpoints. They include features such as SSL offload, web application firewall,

  path-based load balancing, and session affinity.

  

  Reference: https://docs.microsoft.com/en-us/azure/application-gateway/features

• Question 208:

  You have an Azure subscription that contains the resources shown in the following table.

  

  You need to archive the diagnostic data for VNET1 for 365 days. The solution must minimize costs. Where should you archive the data?

  A. Workspace1

  B. storage1

  C. storage2

  D. VNET1

  Correct Answer: B

  Incorrect Answers:

  A: When you create a new workspace, it automatically creates several Azure resources that are used by the workspace: Azure Storage account: Is used as the default datastore for the workspace.

  Note: The workspace is the top-level resource for Azure Machine Learning, providing a centralized place to work with all the artifacts you create when you use Azure Machine Learning.

  Reference: https://docs.microsoft.com/en-us/azure/machine-learning/concept-workspace

• Question 209:

  You ate designing an Azure governance solution.

  All Azure resources must be easily identifiable based on the following operational information environment, owner, department and cost center

  You need 10 ensure that you can use the operational information when you generate reports for the Azure resources.

  What should you include in the solution?

  A. Azure Active Directory (Azure AD) administrative units

  B. an Azure data catalog that uses the Azure REST API as a data source

  C. an Azure policy that enforces tagging rules

  D. an Azure management group that uses parent groups to create a hierarchy

  Correct Answer: C

  You use Azure Policy to enforce tagging rules and conventions. By creating a policy, you avoid the scenario of resources being deployed to your subscription that don't have the expected tags for your organization. Instead of manually

  applying tags or searching for resources that aren't compliant, you create a policy that automatically applies the needed tags during deployment.

  Note: Organizing cloud-based resources is a crucial task for IT, unless you only have simple deployments. Use naming and tagging standards to organize your resources for these reasons:

  Resource management: Your IT teams will need to quickly locate resources associated with specific workloads, environments, ownership groups, or other important information. Organizing resources is critical to assigning organizational roles

  and access permissions for resource management.

  Reference:

  https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/decision- guides/resource-tagging

• Question 210:

  You need to create an Azure Storage account that uses a custom encryption key. What do you need to implement the encryption?

  A. an Azure key vault in the tame Azure region as the storage account

  B. a managed identity that is configured to access the storage account

  C. a certificate issued by an integrated certification authority (CA) and stored in Azure Key Vault

  D. Azure Active Directory Premium subscription

  Correct Answer: C

  You can use your own encryption key to protect the data in your storage account. When you specify a customer-managed key, that key is used to protect and control access to the key that encrypts your data. You must use either Azure Key Vault or Azure Key Vault Managed Hardware Security Model (HSM) (preview) to store your customer-managed keys.