Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 221:

  You create an Azure Kubernetes Service (AKS) cluster configured as shown in the exhibit. (Click the Exhibit tab.)

  

  You deploy a containerized application named App1 to the agentPool node pool.

  You need to create a containerized application named App2 that runs on four nodes of size DS3 v2.

  What should you do first?

  A. Create a new node pool.

  B. modify the autoscaling settings for the agentPool node.

  C. Enable virtual nodes for the AKS cluster.

  D. Upgrade the AKS cluster.

  Correct Answer: A

  Changing the agent size is not allowed. In the future Microsft plans to support multiple node pools wherein you can create different pools with different VM sizes.

  Reference: https://github.com/Azure/AKS/issues/132

• Question 222:

  You have an Azure web app that runs in a Premium App Service plan.

  Developers plan to update the app weekly.

  You need to ensure that the app can be twitched from the current version to the new version. The solution must meet the following requirements

  1.

  Provide the developers with the ability to test the app m Azure prior to switching versions Testing must use the same app instance

  2.

  Ensure that the app version can be rolled back.

  3.

  Minimize downtime. What should you do?

  A. Create a deployment slot.

  B. Add an instance of the app to the scale set

  C. Copy the App Service plan.

  D. Create an Azure Active Directory (Azure AD) enterprise application

  Correct Answer: A

  Azure Functions deployment slots allow your function app to run different instances called "slots". Slots are different environments exposed via a publicly available endpoint. One app instance is always mapped to the production slot, and you

  can swap instances assigned to a slot on demand.

  There are a number of advantages to using deployment slots. The following scenarios describe common uses for slots:

  Different environments for different purposes: Using different slots gives you the opportunity to differentiate app instances before swapping to production or a staging slot. Easy fallbacks: After a swap with production, the slot with a previously

  staged app now has the previous production app. If the changes swapped into the production slot aren't as you expect, you can immediately reverse the swap to get your "last known good instance" back.

  Prewarming

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-deployment-slots

• Question 223:

  You create an Azure Kubernetes Service (AKS) duster and an Azure Container Registry.

  You need to perform continuous deployments of a containerized application to the AKS cluster as soon as the image updates in the registry.

  What should you use to perform the deployments?

  A. an Azure Pipelines release pipeline

  B. an Azure Automation runbook

  C. an Azure Resource Manager template

  D. a kubectl script from a CRON job

  Correct Answer: A

  You can implement a Continuous Deployment pipeline. Example:

  

  What the pipeline accomplishes :

  Stage 1: The code gets pushed in the Github. The Jenkins job gets triggered automatically.

  The Dockerfile is checked out from Github.

  Stage 2: Docker builds an image from the Dockerfile and then the image is tagged with the build number. Additionally, the latest tag is also attached to the image for the containers to use. Stage 3: We have default deployment and service

  YAML files stored on the Jenkins server. Jenkins makes a copy of the default YAML files, make the necessary changes according to the build and put them in a separate folder.

  Stage 4: kubectl was initially configured at the time of setting up AKS on the Jenkins server. The YAML files are fed to the kubectl util which in turn creates pods and services.

  Reference:

  https://medium.com/velotio-perspectives/continuous-deployment-with-azure-kubernetes-service-azure-container-registry-jenkins-ca337940151b

• Question 224:

  You have an Azure SQL database named DB1.

  You plan to create the following four tables in DB1 by using the following code:

  

  A. Table 1

  B. Table 2

  C. Table 3

  D. Table 4

  Correct Answer: B

• Question 225:

  You have an Azure subscription named Subscription1.

  You deploy a Linux virtual machine named VM1 to Subscription1.

  You need to monitor the metrics and the logs of VM1.

  What should you use?

  A. the Azure PerformanceDiagnostics extension

  B. Azure Analytic Services

  C. Linux Diagnostic Extension (LAD) 10

  D. Azure HDinsight

  Correct Answer: A

  You can use extensions to configure diagnostics on your VMs to collect additional metric data.

  The basic host metrics are available, but to see more granular and VM-specific metrics, you need to install the Azure diagnostics extension on the VM. The Azure diagnostics extension allows additional monitoring and diagnostics data to be

  retrieved from the VM.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-monitoring

• Question 226:

  You Wave an Acme Directory forest named contoso.com. You install and configure Azure AD Connect to use password hath synchronization as the single sign- on (SSO) method Staging mode is enabled.

  You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs.

  You need to ensure that the synchronization completes successfully.

  What should you do?

  A. From Synchronization Service Manager, run a full import

  B. From Azure PowerShell, run Start-AdSyncCycle -PolicyType initial.

  C. Run Azure AD Connect and set the SSO method to Pass-through Authentication

  D. Run Azure AD Connect and disable staging mode._

  Correct Answer: D

• Question 227:

  Your on-premises network contains 100 virtual machines that run Windows Server 2019.

  You have an Azure subscription that contains an Azure Log Analytics workspace named Workspace1.

  You need to collect errors from the Windows event logs on the virtual machines.

  Which two actions should you perform' Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Configure the Data Collection settings for Workspace1.

  B. Deploy the Microsoft Monitoring Agent

  C. Create an Azure Event Grid domain

  D. Create an Azure Sentinel workspace.

  E. Configure Windows Event Forwarding on the virtual machines

  Correct Answer: AB

  The Azure Log Analytics agent collects telemetry from Windows and Linux virtual machines in any cloud, on-premises machines, and those monitored by System Center Operations Manager and sends it collected data to your Log Analytics workspace in Azure Monitor.

  Note: You may also see the Log Analytics agent referred to as the Microsoft Monitoring Agent (MMA) or OMS Linux agent.

  Data is collected using the Log Analytics agent, which reads various security-related configurations and event logs from the machine and copies the data to your workspace for analysis.

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/log-analytics-agent https://docs.microsoft.com/en-us/azure/security-center/security-center-enable-data-collection

• Question 228:

  You are developing an application that will enable users to download content from an Azure Storage account.

  The users must only be able to download the content for a period of seven days.

  You need to recommend an authentication solution to access the storage account.

  What should you include in the recommendation?

  A. shared access signature (SAS) tokens

  B. identity-based authentication that uses Active Directory Domain Services (AD DS)

  C. storage access key

  D. identity-based authentication that uses Azure Active Directory (Azure AD)

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

• Question 229:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You are making use of Azure technologies to design a workflow solution.

  You need to make sure that Visual Studio can be used to debug the solution.

  Solution: You should make use of Logic Apps.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 230:

  You have an application that is hosted across multiple Azure regions.

  You need to ensure that users connect automatically to their nearest application host based on network latency.

  What should you implement?

  A. Azure Application Gateway

  B. Azure Load Balancer

  C. Azure Traffic Manager

  D. Azure Bastion

  Correct Answer: C

  Azure Traffic Manager is a DNS-based traffic load balancer. This service allows you to distribute traffic to your public facing applications across the global Azure regions. Traffic Manager also provides your public endpoints with high availability and quick responsiveness.

  Incorrect Answers:

  A: Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications.

  B: An Azure load balancer is a Layer-4 (TCP, UDP) load balancer that provides high availability by distributing incoming traffic among healthy VMs.

  D: Azure Bastion is a fully managed PaaS service that provides secure and seamless RDP and SSH access to your virtual machines directly through the Azure Portal.

  Reference: https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview