Microsoft Microsoft Certifications AZ-305 Questions & Answers

• Question 81:

  HOTSPOT

  You have an on-premises file server that stores 2 TB of data files.

  You plan to move the data files to Azure Blob Storage In the West Europe Azure region,

  You need to recommend a storage account type to store the data files and a replication solution for the storage account. The solution must meet the following requirements:

  1.

  Be available if a single Azure datacenter fails.

  2.

  Support storage tiers.

  3.

  Minimize cost.

  What should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Account Type: StorageV2 Replication solution: Zone-redundant storage (ZRS) https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy#supported-azure-storage-services

  https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview#types-of-storage-accounts Data must be available if a single Azure datacenter fails. It means the storage account must support ZRS replication. Also, solution should support storage tiers. Only General- purpose V2 supports ZRS and storage tiers. https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers

• Question 82:

  HOTSPOT

  You deploy several Azure SQL Database instances.

  You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  In the exhibit, the SQLInsights data is configured to be stored in Azure Log Analytics for 90 days. However, the question is asking for the "maximum" amount of time that the data can be stored which is 730 days.

• Question 83:

  HOTSPOT

  You are designing an application that will use Azure Linux virtual machines to analyze video files. The files will be uploaded from corporate offices that connect to Azure by using ExpressRoute.

  You plan to provision an Azure Storage account to host the files.

  You need to ensure that the storage account meets the following requirements:

  1.

  Supports video files of up to 7 TB

  2.

  Provides the highest availability possible

  3.

  Ensures that storage is optimized for the large video files

  4.

  Ensures that files from the on-premises network are uploaded by using ExpressRoute

  How should you configure the storage account? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 84:

  HOTSPOT

  A company plans to implement an HTTP-based API to support a web app. The web app allows customers to check the status of their orders.

  The API must meet the following requirements:

  1.

  Implement Azure Functions

  2.

  Provide public read-only operations

  3.

  Do not allow write operations

  4.

  You need to recommend configuration options.

  What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Allowed authentication methods: GET only

  Authorization level: Anonymous The option is Allow Anonymous requests. This option turns on authentication and authorization in App Service, but defers authorization decisions to your application code. For authenticated requests, App Service also passes along authentication information in the HTTP headers.

  This option provides more flexibility in handling anonymous requests.

  References: https://docs.microsoft.com/en-us/azure/app-service/overview-authentication-authorization

• Question 85:

  HOTSPOT

  You have an Azure subscription that contains a virtual network named VNET1 and 10 virtual machines. The virtual machines are connected to VNET1.

  You need to design a solution to manage the virtual machines from the internet. The solution must meet the following requirements:

  1.

  Incoming connections to the virtual machines must be authenticated by using Azure Multi- Factor Authentication (MFA) before network connectivity is allowed.

  2.

  Incoming connections must use TLS and connect to TCP port 443.

  3.

  The solution must support RDP and SSH.

  What should you Include In the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 86:

  HOTSPOT

  Your company has two on-premises sites in New York and Los Angeles and Azure virtual networks in the East US Azure region and the West US Azure region. Each on-premises site has Azure ExpressRoute circuits to both regions.

  You need to recommend a solution that meets the following requirements:

  1.

  Outbound traffic to the Internet from workloads hosted on the virtual networks must be routed through the closest available on-premises site.

  2.

  If an on-premises site fails, traffic from the workloads on the virtual networks to the Internet must reroute automatically to the other site.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  An on-premises network gateway can exchange routes with an Azure virtual network gateway using the border gateway protocol (BGP). Using BGP with an Azure virtual network gateway is dependent on the type you selected when you created the gateway. If the type you selected were: ExpressRoute: You must use BGP to advertise on-premises routes to the Microsoft Edge router. You cannot create user-defined routes to force traffic to the ExpressRoute virtual network gateway if you deploy a virtual network gateway deployed as type: ExpressRoute. You can use user-defined routes for forcing traffic from the Express Route to, for example, a Network Virtual Appliance.

  https://docs.microsoft.com/ja-jp/azure/expressroute/designing-for-disaster-recovery-with-expressroute-privatepeering https://docs.microsoft.com/en-us/azure/expressroute/expressroute-optimize-routing#suboptimal-routing-from-customer-to-microsoft

• Question 87:

  HOTSPOT

  You plan to develop a new app that will store business critical data. The app must meet the following requirements:

  1.

  Prevent new data from being modified for one year.

  2.

  Maximize data resiliency.

  3.

  Minimize read latency.

  What storage solution should you recommend for the app? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Storage Account Type: Premium Block Blobs provide high-performance, low-latency storage for unstructured data such as images, videos, and documents. However, it does not provide a built-in feature to prevent data modification. Standard General Purpose v1 or v2 can be used with the help of additional features such as Azure Blob Versioning to meet the requirement of preventing new data from being modified for one year. Since the requirement is to minimize read latency, I would recommend using the Standard General Purpose v2 storage account type which offers a higher level of performance and scalability.

  Redundancy: To maximize data resiliency, I would recommend using Zone-Redundant Storage (ZRS) replication. This replicates data across multiple zones within a single region, providing high availability and resiliency in case of a zone failure.

  Therefore, the recommended storage solution for the given scenario would be to use Standard General Purpose v2 storage account type with ZRS redundancy and additional features such as Azure Blob Versioning to prevent new data from being modified for one year while minimizing read latency.

• Question 88:

  HOTSPOT

  You have an Azure web app named App1 and an Azure key vault named KV1.

  App1 stores database connection strings in KV1.

  App1 performs the following types of requests to KV1:

  1.

  Get

  2.

  List

  3.

  Wrap

  4.

  Delete

  5.

  Unwrap

  6.

  Backup

  7.

  Decrypt

  8.

  Encrypt

  You are evaluating the continuity of service for App1.

  You need to identify the following if the Azure region that hosts KV1 becomes unavailable:

  1.

  To where will KV1 fail over?

  2.

  During the failover, which request type will be unavailable?

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: A server in the same paired region

  The contents of your key vault are replicated within the region and to a secondary region at least 150 miles away, but within the same geography to maintain high durability of your keys and secrets.

  Box 2: Delete

  During failover, your key vault is in read-only mode. Requests that are supported in this mode are:

  1.

  List certificates

  2.

  Get certificates

  3.

  List secrets

  4.

  Get secrets

  5.

  List keys

  6.

  Get (properties of) keys

  7.

  Encrypt

  8.

  Decrypt

  9.

  Wrap 10.Unwrap 11.Verify 12.Sign 13.Backup

• Question 89:

  HOTSPOT

  You have an Azure subscription that contains the resources shown in the following table.

  

  You create an Azure SQL database named DB1 that is hosted in the East US region.

  To DB1, you add a diagnostic setting named Settings1. Settings1 archives SQLInsights to storage1 and sends SQLInsights to Workspace1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selections is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes Box 2: Yes Box 3: Yes

  For more information on Azure SQL diagnostics , you can visit the below link https://docs.microsoft.com/en-us/azure/azure-sql/database/metrics-diagnostic-telemetry-logging-streaming-export-configure

• Question 90:

  HOTSPOT

  Your on-premises network contains a file server named Server1 that stores 500 GB of data.

  You need to use Azure Data Factory to copy the data from Server1 to Azure Storage.

  You add a new data factory.

  What should you do next? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Install a self-hosted integration runtime The Integration Runtime is a customer-managed data integration infrastructure used by Azure Data Factory to provide data integration capabilities across different network environments.

  Box 2: Create a pipeline With ADF, existing data processing services can be composed into data pipelines that are highly available and managed in the cloud. These data pipelines can be scheduled to ingest, prepare, transform, analyze, and publish data, and ADF manages and orchestrates the complex data and processing dependencies

  References: https://docs.microsoft.com/en-us/azure/machine-learning/team-data-science-process/move-sql-azure-adf https://docs.microsoft.com/pl-pl/azure/data-factory/tutorial-hybrid-copy-data-tool https://docs.microsoft.com/en-us/azure/data-factory/create-self-hosted-integration-runtime?tabs=data-factory

  "A self-hosted integration runtime can run copy activities between a cloud data store and a data store in a private network"

  https://docs.microsoft.com/en-us/azure/data-factory/introduction

  "With Data Factory, you can use the Copy Activity in a data pipeline to move data from both on-premises and cloud source data stores to a centralization data store in the cloud for further analysis"