Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 41:

  HOTSPOT

  Your company has 20 web APIs that were developed in-house.

  The company is developing 10 web apps that will use the web APIs. The web apps and the APIs are registered in the company s Azure AD tenant. The web APIs are published by using Azure API Management.

  You need to recommend a solution to block unauthorized requests originating from the web apps from reaching the web APIs. The solution must meet the following requirements:

  1.

  Use Azure AD-generated claims.

  2.

  Minimize configuration and management effort

  What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 42:

  HOTSPOT

  You plan to deploy a custom database solution that will have multiple instances as shown in the following table.

  

  

  Client applications will access database servers by using db.contoso.com.

  You need to recommend load balancing services for the planned deployment. The solution must meet the following requirements:

  Access to at least one database server must be maintained in the event of a regional outage.

  The virtual machines must not connect to the internet directly.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Azure Traffic Manager Traffic Manager is a DNS-based traffic load balancer that enables you to distribute traffic optimally to services across global Azure regions, while providing high availability and responsiveness. Because Traffic Manager is a DNS-based load-balancing service, it load balances only at the domain level. For that reason, it can't fail over as quickly as Front Door, because of common challenges around DNS caching and systems not honoring DNS TTLs.

  

• Question 43:

  HOTSPOT

  You have the Azure resources shown in the following table.

  

  You need to design a solution that provides on-premises network connectivity to SQLDB1 through PE1. How should you configure name resolution? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  Correct Answer:

  

• Question 44:

  HOTSPOT

  You configure OAuth2 authorization in API Management as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Web applications

  The Authorization Code Grant Type is used by both web apps and native apps to get an access token after a user authorizes an app.

  Note: The Authorization Code grant type is used by confidential and public clients to exchange an authorization code for an access token.

  After the user returns to the client via the redirect URL, the application will get the authorization code from the URL and use it to request an access token.

• Question 45:

  HOTSPOT

  You manage a database environment for a Microsoft Volume Licensing customer named Contoso, Ltd. Contoso uses License Mobility through Software Assurance.

  You need to deploy 50 databases. The solution must meet the following requirements:

  Support automatic scaling.

  Minimize Microsoft SQL Server licensing costs.

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: vCore

  Virtual core (vCore)-based purchasing model (recommended). This purchasing model provides a choice between a provisioned compute tier and a serverless compute tier. With the provisioned compute tier, you choose the exact amount of

  compute resources that are always provisioned for your workload. With the serverless compute tier, you specify the autoscaling of the compute resources over a configurable compute range

  Box 2: An Azure SQL Database Elastic pool

  Azure SQL Database provides the following deployment options for a database:

  Single database represents a fully managed, isolated database. Elastic pool is a collection of single databases with a shared set of resources, such as CPU or memory. Single databases can be moved into and out of an elastic pool.

• Question 46:

  HOTSPOT

  You have an Azure subscription that is linked to an Azure Active Directory Premium Plan 2 tenant The tenant has multi-factor authentication (MFA) enabled for all users.

  You have the named locations shown in the following table.

  

  You have the users shown in the following table.

  

  You plan to deploy the Conditional Access policies shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 47:

  HOTSPOT

  You have a resource group named RG1 that contains the objects shown in the following table.

  

  You need to configure permissions so that App1 can copy all the secrets from KV1 to KV2. App1 currently has the Get permission for the secrets in KV1.

  Which additional permissions should you assign to App1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: List

  Get: Gets the specified Azure key vault.

  List: The List operation gets information about the vaults associated with the subscription.

  Box 2: Create

  Create Or Update: Create or update a key vault in the specified subscription.

• Question 48:

  HOTSPOT

  Your company deploys an Azure App Service Web App.

  During testing the application fails under load. The application cannot handle more than 100 concurrent user sessions. You enable the Always On feature. You also configure auto- scaling to increase counts from two to 10 based on HTTP

  queue length.

  You need to improve the performance of the application.

  Which solution should you use for each application scenario? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Content Delivery Network A content delivery network (CDN) is a distributed network of servers that can efficiently deliver web content to users. CDNs store cached content on edge servers in point-of- presence (POP) locations that are close to end users, to minimize latency.

  Azure Content Delivery Network (CDN) offers developers a global solution for rapidly delivering high-bandwidth content to users by caching their content at strategically placed physical nodes across the world. Azure CDN can also accelerate dynamic content, which cannot be cached, by leveraging various network optimizations using CDN POPs. For example, route optimization to bypass Border Gateway Protocol (BGP).

  Box 2: Azure Redis Cache Azure Cache for Redis is based on the popular software Redis. It is typically used as a cache to improve the performance and scalability of systems that rely heavily on backend data-stores. Performance is improved by temporarily copying frequently accessed data to fast storage located close to the application. With Azure Cache for Redis, this fast storage is located in-memory with Azure Cache for Redis instead of being loaded from disk by a database.

  References: https://docs.microsoft.com/en-us/azure/azure-cache-for-redis/cache-overview

• Question 49:

  HOTSPOT

  You plan to deploy a network-intensive application to several Azure virtual machines.

  You need to recommend a solution that meets the following requirements:

  Minimizes the use of the virtual machine processors to transfer data Minimizes network latency

  Which virtual machine size and feature should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes-hpc#h-series

• Question 50:

  HOTSPOT

  You plan to create an Azure environment that will contain a root management group and 10 child management groups. Each child management group will contain five Azure subscriptions. You plan to have between 10 and 30 resource groups

  in each subscription.

  You need to design an Azure governance solution. The solution must meet the following requirements:

  1.

  Use Azure Blueprints to control governance across all the subscriptions and resource groups.

  2.

  Ensure that Blueprints-based configurations are consistent across all the subscriptions and resource groups.

  3.

  Minimize the number of blueprint definitions and assignments.

  What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: