Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 241:

  You have an Azure subscription.

  You need to recommend an Azure Kubernetes service (AKS) solution that will use Linux nodes. The solution must meet the following requirements:

  1.

  Minimize the time it takes to provision compute resources during scale-out operations.

  2.

  Support autoscaling of Linux containers.

  3.

  Minimize administrative effort. Which scaling option should you recommend?

  A. Virtual Kubetet

  B. cluster autoscaler

  C. virtual nodes

  D. horizontal pod autoscaler

  Correct Answer: C

  To rapidly scale application workloads in an AKS cluster, you can use virtual nodes. With virtual nodes, you have quick provisioning of pods, and only pay per second for their execution time. You don't need to wait for Kubernetes cluster autoscaler to deploy VM compute nodes to run the additional pods. Virtual nodes are only supported with Linux pods and nodes.

  Reference: https://docs.microsoft.com/en-us/azure/aks/virtual-nodes

• Question 242:

  You plan to deploy an app that will use an Azure Storage account.

  You need to deploy the storage account. The solution must meet the following requirements:

  1.

  Store the data of multiple users.

  2.

  Encrypt each user's data by using a separate key.

  3.

  Encrypt all the data in the storage account by using Microsoft keys or customer-managed keys. What should you deploy?

  A. files in a general purpose v2 storage account.

  B. blobs in an Azure Data Lake Storage Gen2 account.

  C. files in a premium file share storage account.

  D. blobs in a general purpose v2 storage account

  Correct Answer: B

• Question 243:

  Your company, named Contoso, Ltd., implements several Azure logic apps that have HTTP triggers. The logic apps provide access to an on-premises web service.

  Contoso establishes a partnership with another company named Fabrikam. IncL

  Fabrikam does not have an existing Azure Active Directory (Azure AD) tenant and uses third-party OAuth 2.0 identity management to authenticate its users.

  I Developers at Fabrikam plan to use a subset of the logic apps to build applications that will integrate with the on-premises web service of Contoso.

  You need to design a solution to provide the Fabrikam developers with access to the logic apps. The solution must meet the following requirements:

  1.

  Requests to the logic apps from the developers must be limited to lower rates than the requests from the users at Contoso.

  2.

  The developers must be able to rely on their existing OAuth 2.0 provider to gain access to the logic apps.

  3.

  The solution must NOT require changes to the logic apps.

  4.

  The solution must NOT use Azure AD guest accounts. What should you include in the solution?

  A. Azure AD business-to-business (B2B)

  B. Azure AD Application Proxy

  C. Azure Front Door

  D. Azure API Management

  Correct Answer: D

  API Management helps organizations publish APIs to external, partner, and internal developers to unlock the potential of their data and services. You can secure API Management using the OAuth 2.0 client credentials flow.

  Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-key-concepts https://docs.microsoft.com/en-us/azure/api-management/api-management-features https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-protect-backend-with-aad#enable-oauth-20-user-authorization-in-the-developer-console

• Question 244:

  You are designing an order processing system in Azure that will contain the Azure resources shown in the following table.

  

  The order processing system will have the following transaction flow:

  1.

  A customer will place an order by using App1.

  2.

  When the order is received, App1 will generate a message to check for product availability at vendor 1 and vendor 2.

  3.

  An integration component will process the message, and then trigger either Function1 or Function2 depending on the type of order. Once a vendor confirms the product availability, a status message for App1 will be generated by Function1 or Function2.

  4.

  All the steps of the transaction will be logged to storage1.

  Which type of resource should you recommend for the integration component? Which type of resource should you recommend for the integration component?

  A. an Azure Data Factory pipeline

  B. an Azure Service Bus queue

  C. an Azure Event Grid domain

  D. an Azure Event Hubs capture

  Correct Answer: A

  A data factory can have one or more pipelines. A pipeline is a logical grouping of activities that together perform a task.

  The activities in a pipeline define actions to perform on your data.

  Data Factory has three groupings of activities: data movement activities, data transformation activities, and control activities. Azure Functions is now integrated with Azure Data Factory, allowing you to run an Azure function as a step in your

  data factory pipelines.

  Reference: https://docs.microsoft.com/en-us/azure/data-factory/concepts-pipelines-activities

• Question 245:

  You are developing a sales application that will contain several Azure cloud services and will handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.

  You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using REST messages.

  What should you include in the recommendation?

  A. Azure Service Bus

  B. Azure Blob storage

  C. Azure Notification Hubs

  D. Azure Application Gateway

  Correct Answer: A

  Service Bus is a transactional message broker and ensures transactional integrity for all internal operations against its message stores. All transfers of messages inside of Service Bus, such as moving messages to a dead-letter queue or automatic forwarding of messages between entities, are transactional.

  Reference: https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-transactions https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-messaging-overview

  " Service Bus offers a reliable and secure platform for asynchronous transfer of data and state." ... "Service Bus supports standard AMQP 1.0 and HTTP/REST protocols."

• Question 246:

  You have an Azure subscription that contains a custom application named Application was developed by an external company named fabric, Ltd. Developers at Fabrikam were assigned role-based access control (RBAV) permissions to the Application components. All users are licensed for the Microsoft 365 E5 plan.

  You need to recommends a solution to verify whether the Faricak developers still require permissions to Application1. The solution must the following requirements.

  1.

  To the manager of the developers, send a monthly email message that lists the access permissions to Application1.

  2.

  If the manager does not verify access permission, automatically revoke that permission.

  3.

  Minimize development effort. What should you recommend?

  A. In Azure Active Directory (AD) Privileged Identity Management, create a custom role assignment for the Application1 resources

  B. Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet

  C. Create an Azure Automation runbook that runs the Get-AzureRmRoleAssignment cmdlet

  D. In Azure Active Directory (Azure AD), create an access review of Application1

  Correct Answer: D

  Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User's access can be reviewed on a regular basis to make sure only

  the right people have continued access. Have reviews recur periodically: You can set up recurring access reviews of users at set frequencies such as weekly, monthly, quarterly or annually, and the reviewers will be notified at the start of each

  review. Reviewers can approve or deny access with a friendly interface and with the help of smart recommendations.

  Why are access reviews important?

  "Azure AD enables you to collaborate with users from inside your organization and with external users. Users can join groups, invite guests, connect to cloud apps, and work remotely from their work or personal devices. The convenience of

  using self-service has led to a need for better access management capabilities."

  https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-user-access-with-access-reviews

• Question 247:

  You have .NeT web service named service1 that has the following requirements:

  1.

  Must read and write to the local file system.

  2.

  Must write to the Windows Application event log.

  You need to recommend a solution to host Service1 in Azure .

  The solution must meet the following requirements:

  1.

  Minimize maintenance overhead.

  2.

  Minimize costs.

  What should you include in the recommendation?

  A. an Azure App Service web app

  B. an Azure virtual machine scale set

  C. an App Service Environment (ASE)

  D. an Azure Functions app

  Correct Answer: A

  https://social.msdn.microsoft.com/Forums/vstudio/en-US/294b9e3e-e89c-4095-b8d0-ee1646e77268/writing-to-local-file-system-from-web-app-in-azure?forum=windowsazurewebsitespreview

• Question 248:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.

  The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.

  You need to recommend a solution to meet the regulatory requirement.

  Solution: You recommend using an Azure policy to enforce the resource group location. Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Azure Resource Policy Definitions can be used which can be applied to a specific Resource Group with the App Service instances.

  Reference: https://docs.microsoft.com/en-us/azure/governance/policy/overview

• Question 249:

  You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:

  1.

  Provide access to the full .NET framework.

  2.

  Provide redundancy if an Azure region fails.

  3.

  Grant administrators access to the operating system to install custom application dependencies.

  Solution: You deploy a web app in an Isolated App Service plan.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead, you should deploy an Azure virtual machine to two Azure regions, and you create a Traffic Manager profile.

• Question 250:

  You need to design a solution that will execute custom C# code in response to an event routed to Azure Event Grid. The solution must meet the following requirements:

  1.

  The executed code must be able to access the private IP address of a Microsoft SQL Server instance that runs on an Azure virtual machine.

  2.

  Costs must be minimized. What should you include in the solution?

  A. Azure Logic Apps in the integrated service environment

  B. Azure Functions in the Dedicated plan and the Basic Azure App Service plan

  C. Azure Logic Apps in the Consumption plan

  D. Azure Functions in the Consumption plan

  Correct Answer: D

  When you create a function app in Azure, you must choose a hosting plan for your app. There are three basic hosting plans available for Azure Functions: Consumption plan, Premium plan, and Dedicated (App Service) plan. For the Consumption plan, you don't have to pay for idle VMs or reserve capacity in advance.

  Connect to private endpoints with Azure Functions As enterprises continue to adopt serverless (and Platform-as-a-Service, or PaaS) solutions, they often need a way to integrate with existing resources on a virtual network. These existing resources could be databases, file storage, message queues or event streams, or REST APIs.

  Reference: https://docs.microsoft.com/en-us/azure/azure-functions/functions-scale https://techcommunity.microsoft.com/t5/azure-functions/connect-to-private-endpoints-with-azure-functions/ba-p/1426615 https://docs.microsoft.com/en-us/azure/azure-functions/functions-scale#hosting-plans-comparison