Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 231:

  You have an Azure subscription that contains an Azure Log Analytics workspace.

  You have a resource group that contains 100 virtual machines. The virtual machines run Linux.

  You need to collect events from the virtual machines to the Log Analytics workspace.

  Which type of data source should you configure in the workspace?

  A. Syslog

  B. Linux performance counters

  C. custom fields

  Correct Answer: A

  https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-collect-azurevm

  Syslog is an event logging protocol that is common to Linux. Applications will send messages that may be stored on the local machine or delivered to a Syslog collector. When the Log Analytics agent for Linux is installed, it configures the local Syslog daemon to forward messages to the agent. The agent then sends the message to Azure Monitor where a corresponding record is created.

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-custom-logs

• Question 232:

  You have an Active Directory forest named contoso.com.

  You install and configure AD Connect to use password hash synchronization as the single sign-on(SSO) method. Staging mode is enabled.

  You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs.

  You need to ensure that the synchronization completes successfully.

  What should you do?

  A. From Azure PowerShell, run Start-AdSyncSycnCycle olicyType Initial.

  B. Run Azure AD Connect and set the SSO method to Pass-through Authentication.

  C. From Synchronization Service Manager, run a full import.

  D. Run Azure AD Connect and disable staging mode.

  Correct Answer: D

  In staging mode, the server is active for import and synchronization, but it does not run any exports. A server in staging mode is not running password sync or password writeback, even if you selected these features during installation. When you disable staging mode, the server starts exporting, enables password sync, and enables password writeback.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-staging-server https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-operations

• Question 233:

  You plan to deploy an Azure SQL database that will store Personally Identifiable Information (Pll). You need to ensure that only privileged users can view the Pll. What should you include in the solution?

  A. Transparent Data Encryption (TDE)

  B. Data Discovery and Classification

  C. dynamic data masking

  D. role-based access control (RBAC)

  Correct Answer: C

  Dynamic data masking limits sensitive data exposure by masking it to non-privileged users.

  Dynamic data masking helps prevent unauthorized access to sensitive data by enabling customers to designate how much of the sensitive data to reveal with minimal impact on the application layer. It's a policy-based security feature that

  hides the sensitive data in the result set of a query over designated database fields, while the data in the database is not changed.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview

• Question 234:

  You plan to deploy 10 applications to Azure. The applications will be deployed to two Azure Kubernetes Service (AKS) clusters. Each cluster will be deployed to a separate Azure region. The application deployment must meet the following requirements:

  1.

  Ensure that the applications remain available if a single AKS cluster fails.

  2.

  Ensure that the connection traffic over the internet is encrypted by using SSL without having to configure SSL on each container. Which service should you include in the recommendation?

  A. AKS ingress controller

  B. Azure Traffic Manager

  C. Azure Front Door

  D. Azure Load Balancer

  Correct Answer: C

  "Azure Front Door, which focuses on global load-balancing and site acceleration, and Azure CDN Standard, which offers static content caching and acceleration. The new Azure Front Door brings together security with CDN technology for a cloud-based CDN with threat protection and additional capabilities. "

• Question 235:

  You store web access logs data in Azure Blob storage. You plan to generate monthly reports from the access logs.

  You need to recommend an automated process to upload the data to Azure SQL Database every month.

  What should you include in the recommendation?

  A. Azure Data Factory

  B. Data Migration Assistant

  C. Microsoft SQL Server Migration Assistant (SSMA)

  D. AzCopy

  Correct Answer: A

  Azure Data Factory is the platform that solves such data scenarios. It is the cloud-based ETL and data integration service that allows you to create data-driven workflows for orchestrating data movement and transforming data at scale. Using Azure Data Factory, you can create and schedule data-driven workflows (called pipelines) that can ingest data from disparate data stores. You can build complex ETL processes that transform data visually with data flows or by using compute services such as Azure HDInsight Hadoop, Azure Databricks, and Azure SQL Database.

  Reference: https://docs.microsoft.com/en-gb/azure/data-factory/introduction

• Question 236:

  You have data files in Azure Blob Storage.

  You plan to transform the files and move them to Azure Data Lake Storage.

  You need to transform the data by using mapping data flow.

  Which service should you use?

  A. Azure Data Box Gateway

  B. Azure Databricks

  C. Azure Data Factory

  D. Azure Storage Sync

  Correct Answer: C

  You can use Copy Activity in Azure Data Factory to copy data from and to Azure Data Lake Storage Gen2, and use Data Flow to transform data in Azure Data Lake Storage Gen2.

  Reference: https://docs.microsoft.com/en-us/azure/data-factory/connector-azure-data-lake-storage

• Question 237:

  You have an application that is used by 6,000 users to validate their vacation requests. The application manages its own credential

  Users must enter a username and password to access the application. The application does NOT support identity providers.

  You plan to upgrade the application to use single sign-on (SSO) authentication by using an Azure Active Directory (Azure AD) application registration.

  Which SSO method should you use?

  A. password-based

  B. OpenID Connect

  C. header-based

  D. SAML

  Correct Answer: A

• Question 238:

  You have an Azure subscription.

  You need to recommend a solution to provide developers with the ability to provision Azure virtual machines. The solution must meet the following requirements:

  1.

  Only allow the creation of the virtual machines in specific regions.

  2.

  Only allow the creation of specific sizes of virtual machines. What should you include in the recommendation?

  A. Conditional Access policies

  B. role-based access control (RBAC)

  C. Azure Resource Manager (ARM) templates

  D. Azure Policy

  Correct Answer: D

  https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/manage/azure-server-management/common-policies#restrict-resource-regions

  Regulatory and policy compliance often depends on control of the physical location where resources are deployed. You can use a built-in policy to allow users to create resources only in certain allowed Azure regions.

  https://learn.microsoft.com/en-us/azure/virtual-machines/policy-reference

  Allowed virtual machine size SKUs

  This policy enables you to specify a set of virtual machine size SKUs that your organization can deploy.

• Question 239:

  You have the resources shown in the following table.

  

  CDB1 hosts a container that stores continuously updated operational data.

  You are designing a solution that will use AS1 to analyze the operational data daily.

  You need to recommend a solution to analyze the data without affecting the performance of the operational data store.

  What should you include in the recommendation?

  A. Azure Cosmos DB change feed

  B. Azure Data Factory with Azure Cosmos DB and Azure Synapse Analytics connectors

  C. Azure Synapse Analytics with PolyBase data loading

  D. Azure Synapse Link for Azure Cosmos DB

  Correct Answer: D

  Azure Synapse Link for Azure Cosmos DB creates a tight integration between Azure Cosmos DB and Azure Synapse Analytics. It enables customers to run near real-time analytics over their operational data with full performance isolation

  from their transactional workloads and without an ETL pipeline.

  Reference:

  https://docs.microsoft.com/en-us/azure/cosmos-db/synapse-link-frequently-asked-questions

• Question 240:

  You plan to deploy an application named App1 that will run on five Azure virtual machines. Additional virtual machines will be deployed later to run App1. You need to recommend a solution to meet the following requirements for the virtual machines that will run App1:

  1.

  Ensure that the virtual machines can authenticate to Azure Active Directory (Azure AD) to gain access to an Azure key vault, Azure Logic Apps instances, and an Azure SQL database.

  2.

  Avoid assigning new roles and permissions for Azure services when you deploy additional virtual machines.

  3.

  Avoid storing secrets and certificates on the virtual machines. Which type of identity should you include in the recommendation?

  A. a service principal that is configured to use a certificate

  B. a system-assigned managed identity

  C. a service principal that is configured to use a client secret

  D. a user-assigned managed identity

  Correct Answer: D

  Managed identities for Azure resources is a feature of Azure Active Directory. User-assigned managed identity can be shared. The same user-assigned managed identity can be associated with more than one Azure resource.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview