Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 321:

  HOTSPOT

  You plan to migrate DB1 and DB2 to Azure.

  You need to ensure that the Azure database and the service tier meet the resiliency and business requirements.

  What should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: SQL Managed Instance

  Scenario: Once migrated to Azure, DB1 and DB2 must meet the following requirements:

  1.

  Maintain availability if two availability zones in the local Azure region fail.

  2.

  Fail over automatically.

  3.

  Minimize I/O latency.

  The auto-failover groups feature allows you to manage the replication and failover of a group of databases on a server or all databases in a managed instance to another region. It is a declarative abstraction on top of the existing active georeplication feature, designed to simplify deployment and management of geo-replicated databases at scale. You can initiate a geo-failover manually or you can delegate it to the Azure service based on a user-defined policy. The latter option

  allows you to automatically recover multiple related databases in a secondary region after a catastrophic failure or other unplanned event that results in full or partial loss of the SQL Database or SQL Managed Instance availability in the

  primary region.

  Box 2: Business critical

  SQL Managed Instance is available in two service tiers:

  General purpose: Designed for applications with typical performance and I/O latency requirements.

  Business critical: Designed for applications with low I/O latency requirements and minimal impact of underlying maintenance operations on the workload.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-sql/database/auto-failover-group-overview

  https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/sql-managed-instance-paas-overview

• Question 322:

  DRAG DROP

  Your company has an existing web app that runs on Azure virtual machines.

  You need to ensure that the app is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruptions to the code of the app.

  What should you recommend? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Azure Application Gateway

  The Azure Application Gateway Web Application Firewall (WAF) provides protection for web applications. These protections are provided by the Open Web Application Security Project (OWASP) Core Rule Set (CRS).

  Box 2: Web Application Firewall (WAF)

  Reference:

  https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-customize-waf-rules-portal

• Question 323:

  DRAG DROP

  Your on-premises network contains a server named Server1 that runs an ASP.NET application named App1.

  You have a hybrid deployment of Azure Active Directory (Azure AD).

  You need to recommend a solution to ensure that users sign in by using their Azure AD account and Azure Multi-Factor Authentication (MFA) when they connect to App1 from the internet.

  Which three features should you recommend be deployed and configured in sequence? To answer, move the appropriate features from the list of features to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  AD Application Proxy AD Enterprise Application AD Conditional access policy

  https://thesleepyadmins.com/2019/02/

• Question 324:

  DRAG DROP

  You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016 and Linux.

  You need to use Azure Monitor to design an alerting strategy for security-related events.

  Which Azure Monitor Logs tables should you query? To answer, drag the appropriate tables to the correct log types. Each table may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to

  view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-windows-events https://docs.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-syslog

• Question 325:

  DRAG DROP

  You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016 and Linux.

  You need to use Azure Log Analytics design an alerting strategy for security-related events.

  Which Log Analytics tables should you query? To answer, drag the appropriate tables to the correct log types. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Windows Event logs --> Information sent to the Windows event logging system. Syslog -->Information sent to the Linux event logging system.

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/log-analytics-agent

• Question 326:

  DRAG DROP

  A company has an existing web application that runs on virtual machines (VMs) in Azure.

  You need to ensure that the application is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruption to the code for the existing web application.

  What should you recommend? To answer, drag the appropriate values to the correct items. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Azure Application Gateway

  Azure Application Gateway provides an application delivery controller (ADC) as a service. It offers various layer 7 load-balancing capabilities for your applications.

  Box 2: Web Application Firwewall (WAF)

  Application Gateway web application firewall (WAF) protects web applications from common vulnerabilities and exploits.

  This is done through rules that are defined based on the OWASP core rule sets 3.0 or 2.2.9.

  There are rules that detects SQL injection attacks.

  References:

  https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq

  https://docs.microsoft.com/en-us/azure/application-gateway/waf-overview

• Question 327:

  DRAG DROP

  You plan to import data from your on-premises environment to Azure. The data Is shown in the following table.

  

  What should you recommend using to migrate the data? To answer, drag the appropriate tools to the correct data sources-Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  

  References: https://docs.microsoft.com/en-us/azure/dms/tutorial-sql-server-to-azure-sql https://docs.microsoft.com/en-us/azure/cosmos-db/import-data

• Question 328:

  DRAG DROP

  You need to design an architecture to capture the creation of users and the assignment of roles. The captured data must be stored in Azure Cosmos DB.

  Which Azure services should you include in the design? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or

  scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  1.

  AAD audit log -> Event Hub (other two choices, LAW, storage, but not available in this question) https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/tutorial-azuremonitor-stream-logs-to-event-hub

  2.

  Azure function has the Event hub trigger and Cosmos output binding Event Hub trigger for function https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-event-hubstrigger?tabs=csharp

• Question 329:

  DRAG DROP

  You have an on-premises network that uses an IP address space of 172.16.0.0/16. You plan to deploy 25 virtual machines to a new Azure subscription. You identify the following technical requirements:

  1.

  All Azure virtual machines must be placed on the same subnet named Subnet1.

  2.

  All the Azure virtual machines must be able to communicate with all on-premises servers.

  3.

  The servers must be able to communicate between the on-premises network and Azure by using a site-to-site VPN.

  You need to recommend a subnet design that meets the technical requirements.

  What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnets. Each network address may be used once, more than once, or not at all. You may need to drag the split bar

  between panes or scroll to view content

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

• Question 330:

  DRAG DROP

  You plan to deploy Azure virtual machines (VMs) that run a mission-critical application.

  You need to minimize the possibility that the application will experience down time.

  What should you recommend? To answer, drag the appropriate solutions to the correct scenarios. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Scale set

  A virtual machine scale set allows you to deploy and manage a set of identical, autoscaling virtual machines.

  Box 2: Availability Set

  An Availability Set is a logical grouping capability for isolating VM resources from each other when they're deployed. Azure makes sure that the VMs you place within an Availability Set run across multiple physical servers, compute racks,

  storage units, and network switches. If a hardware or software failure happens, only a subset of your VMs are impacted and your overall solution stays operational. Availability Sets are essential for building reliable cloud solutions.

  Incorrect Answers:

  An update domain is a group of VMs and underlying physical hardware that can be rebooted at the same time.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-create-vmss

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets