Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 301:

  HOTSPOT

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1. Server1 contains an app named App1 that uses AD DS authentication. Remote users access App1 by

  using a VPN connection to the on-premises network.

  You have an Azure AD tenant that syncs with the AD DS domain by using Azure AD Connect.

  You need to ensure that the remote users can access App1 without using a VPN. The solution must meet the following requirements:

  Ensure that the users authenticate by using Azure Multi-Factor Authentication (MFA).

  Minimize administrative effort.

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/identity/azure-ad

• Question 302:

  HOTSPOT

  You need to recommend a solution to integrate Azure Cosmos DB and Azure Synapse. The solution must meet the following requirements:

  Traffic from an Azure Synapse workspace to the Azure Cosmos DB account must be sent via the Microsoft backbone network.

  Traffic from the Azure Synapse workspace to the Azure Cosmos DB account must NOT be routed over the internet.

  Implementation effort must be minimized.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Configure a dedicated managed virtual network Azure Synapse workspace

  Managed private endpoints are only supported in Azure Synapse workspaces with a Managed workspace Virtual Network.

  Box 2: Managed private endpoints Azure Cosmos DB account

  Synapse Managed private endpoints Managed private endpoints Managed private endpoints are private endpoints created in a Managed Virtual Network associated with your Azure Synapse workspace. Managed private endpoints establish a private link to Azure resources. Azure Synapse manages these private endpoints on your behalf. You can create Managed private endpoints from your Azure Synapse workspace to access Azure services (such as Azure Storage or Azure Cosmos DB) and Azure hosted customer/partner services.

  When you use Managed private endpoints, traffic between your Azure Synapse workspace and other Azure resources traverse entirely over the Microsoft backbone network. Managed private endpoints protect against data exfiltration.

  Note: Configure and use Azure Synapse Link for Azure Cosmos DB Azure Synapse Link for Azure Cosmos DB is a cloud-native hybrid transactional and analytical processing (HTAP) capability that enables you to run near real-time analytics over operational data in Azure Cosmos DB. Synapse Link creates a tight seamless integration between Azure Cosmos DB and Azure Synapse Analytics.

  Reference: https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-managed-private-endpoints

• Question 303:

  HOTSPOT

  You have an Azure subscription.

  You need to deploy a relational database.

  The solution must meet the following requirements:

  1.

  Support multiple read-only replicas.

  2.

  Automatically load balance read-only requests across all the read-only replicas.

  3.

  Minimize administrative effort

  What should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 304:

  HOTSPOT

  You have five Azure subscriptions. Each subscription is linked to a separate Azure AD tenant and contains virtual machines that run Windows Server 2022.

  You plan to collect Windows security events from the virtual machines and send them to a single Log Analytics workspace.

  You need to recommend a solution that meets the following requirements:

  1.

  Collects event logs from multiple subscriptions

  2.

  Supports the use of data collection rules (DCRs) to define which events to collect

  What should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 305:

  HOTSPOT

  You have two on-premises Microsoft SQL Server 2017 instances that host an Always On availability group named AG1. AG1 contains a single database named DB1.

  You have an Azure subscription that contains a virtual machine named VM1VM1 runs Linux and contains a SQL Server 2019 instance.

  You need to migrate DB1 to VMI. The solution must minimize downtime on DBI. What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 306:

  HOTSPOT

  You have an Azure subscription.

  You are designing a solution for containerized apps. The solution must meet the following requirements:

  1.

  Automatically scale the apps by creating additional instances.

  2.

  Minimize administrative effort to maintain nodes and clusters.

  3.

  Ensure that containerized apps are highly available across multiple availability zones.

  4.

  Provide a central location for the lifecycle management and storage of container images. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 307:

  HOTSPOT

  You have an Azure subscription. The subscription contains 100 virtual machine that am Windows Server.

  You need to recommend a solution that will provide monitoring and an audit trail of the following modifications:

  1.

  Changes to the Windows registry on the virtual machines

  2.

  Changes to the DNS settings of the virtual machines

  The solution must minimize administrative effort.

  What should you recommend using for each change? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 308:

  HOTSPOT

  You have 100 Azure Storage accounts.

  Access to the accounts is restricted by using Azure role-based access control (Azure RBAC) assignments.

  You need to recommend a solution that uses role assignment conditions based on the tags assigned to individual resources within the storage accounts. What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  Correct Answer:

  

• Question 309:

  HOTSPOT

  You have an Azure subscription that contains the resources shown in the following table.

  

  VNet1, VNet2, and VNet3 each has multiple virtual machines connected. The virtual machines use the Azure DNS service for name resolution. You need to recommend an Azure Monitor log routing solution that meets the following requirements:

  1.

  Ensures that the logs collected from the virtual machines and sent to Workspace1 are routed over the Microsoft backbone network

  2.

  Minimizes administrative effort

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  Correct Answer:

  

• Question 310:

  HOTSPOT

  Your on-premises datacenter contains a server named Server1 that runs Microsoft SQL Server 2022. Server1 contains a 30-TB database named DB1 that stores customer data. Server1 runs a custom application named App1 that verifies the

  compliance of records in DB1. App1 must run on the same server as DB1.

  You have an Azure subscription.

  You need to migrate DB1 to Azure. The solution must minimize administrative effort.

  To which service should you migrate DB1, and what should you use to perform the migration? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: