Free AZ-305 Dump

Question #21Topic 4

HOTSPOT –

You are designing an application that will use Azure Linux virtual machines to analyze video files. The files will be uploaded from corporate offices that connect to

Azure by using ExpressRoute.

You plan to provision an Azure Storage account to host the files.

You need to ensure that the storage account meets the following requirements:

✑ Supports video files of up to 7 TB

✑ Provides the highest availability possible

✑ Ensures that storage is optimized for the large video files

✑ Ensures that files from the on-premises network are uploaded by using ExpressRoute

How should you configure the storage account? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer: 

Box 1: Premium page blobs –

The maximum size for a page blob is 8 TiB.

Incorrect:

Not Premium file shares:

Max file size for Standard and Premium file shares are 4 TB.

Box 2: Geo-redundant storage (GRS)

GRS provides additional redundancy for data storage compared to LRS or ZRS.

Box 3: A private endpoint –

Azure Private Link allows you to securely link Azure PaaS services to your virtual network using private endpoints. For many services, you just set up an endpoint per resource. This means you can connect your on-premises or multi-cloud servers with Azure Arc and send all traffic over an Azure ExpressRoute or site-to-site

VPN connection instead of using public networks.

Reference:

https://docs.microsoft.com/en-us/rest/api/storageservices/understanding-block-blobs–append-blobs–and-page-blobs https://docs.microsoft.com/en-us/azure/storage/files/storage-files-scale-targets https://docs.microsoft.com/en-us/azure/azure-arc/servers/private-link-security

Question #22Topic 4

HOTSPOT –

A company plans to implement an HTTP-based API to support a web app. The web app allows customers to check the status of their orders.

The API must meet the following requirements:

✑ Implement Azure Functions.

✑ Provide public read-only operations.

✑ Prevent write operations.

You need to recommend which HTTP methods and authorization level to configure.

What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer: 

Box 1: GET only –

Get for read-only-

Box 2: Anonymous –

Anonymous for public operations.

Question #23Topic 4

You have an Azure subscription.

You need to recommend a solution to provide developers with the ability to provision Azure virtual machines. The solution must meet the following requirements:

✑ Only allow the creation of the virtual machines in specific regions.

✑ Only allow the creation of specific sizes of virtual machines.

What should you include in the recommendation?

• A. Azure Resource Manager (ARM) templates
• B. Azure Policy
• C. Conditional Access policies
• D. role-based access control (RBAC)

Correct Answer: B

Azure Policies allows you to specify allowed locations, and allowed VM SKUs.

Reference:

https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

Community vote distribution

B (100%)

Question #24Topic 4

DRAG DROP –

You have an on-premises network that uses an IP address space of 172.16.0.0/16.

You plan to deploy 30 virtual machines to a new Azure subscription.

You identify the following technical requirements:

✑ All Azure virtual machines must be placed on the same subnet named Subnet1.

✑ All the Azure virtual machines must be able to communicate with all on-premises servers.

✑ The servers must be able to communicate between the on-premises network and Azure by using a site-to-site VPN.

You need to recommend a subnet design that meets the technical requirements.

What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnets. Each network address may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer: 

Question #25Topic 4

You have data files in Azure Blob Storage.

You plan to transform the files and move them to Azure Data Lake Storage.

You need to transform the data by using mapping data flow.

Which service should you use?

• A. Azure Databricks
• B. Azure Storage Sync
• C. Azure Data Factory
• D. Azure Data Box Gateway

Correct Answer: C

You can copy and transform data in Azure Data Lake Storage Gen2 using Azure Data Factory or Azure Synapse Analytics.

Reference:

https://docs.microsoft.com/en-us/azure/data-factory/connector-azure-data-lake-storage

Community vote distribution

C (100%)

Question #26Topic 4

You have an Azure subscription.

You need to deploy an Azure Kubernetes Service (AKS) solution that will use Windows Server 2019 nodes. The solution must meet the following requirements:

✑ Minimize the time it takes to provision compute resources during scale-out operations.

✑ Support autoscaling of Windows Server containers.

Which scaling option should you recommend?

• A. Kubernetes version 1.20.2 or newer
• B. Virtual nodes with Virtual Kubelet ACI
• C. cluster autoscaler
• D. horizontal pod autoscaler

Correct Answer: C

Deployments can scale across AKS with no delay as cluster autoscaler deploys new nodes in your AKS cluster.

Note: AKS clusters can scale in one of two ways:

* The cluster autoscaler watches for pods that can’t be scheduled on nodes because of resource constraints. The cluster then automatically increases the number of nodes.

* The horizontal pod autoscaler uses the Metrics Server in a Kubernetes cluster to monitor the resource demand of pods. If an application needs more resources, the number of pods is automatically increased to meet the demand.

Incorrect:

Not D: If your application needs to rapidly scale, the horizontal pod autoscaler may schedule more pods than can be provided by the existing compute resources in the node pool. If configured, this scenario would then trigger the cluster autoscaler to deploy additional nodes in the node pool, but it may take a few minutes for those nodes to successfully provision and allow the Kubernetes scheduler to run pods on them.

Reference:

https://docs.microsoft.com/en-us/azure/aks/cluster-autoscaler

Community vote distribution

C (81%)

Other

Question #27Topic 4

HOTSPOT –

Your on-premises network contains a file server named Server1 that stores 500 GB of data.

You need to use Azure Data Factory to copy the data from Server1 to Azure Storage.

You add a new data factory.

What should you do next? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer: 

Box 1: Install a self-hosted integration runtime.

If your data store is located inside an on-premises network, an Azure virtual network, or Amazon Virtual Private Cloud, you need to configure a self-hosted integration runtime to connect to it.

The Integration Runtime to be used to connect to the data store. You can use Azure Integration Runtime or Self-hosted Integration Runtime (if your data store is located in private network). If not specified, it uses the default Azure Integration Runtime.

Box 2: Create a pipeline.

You perform the Copy activity with a pipeline.

Reference:

https://docs.microsoft.com/en-us/azure/data-factory/connector-file-system

Question #28Topic 4

You have an Azure subscription.

You need to recommend an Azure Kubernetes Service (AKS) solution that will use Linux nodes. The solution must meet the following requirements:

✑ Minimize the time it takes to provision compute resources during scale-out operations.

✑ Support autoscaling of Linux containers.

✑ Minimize administrative effort.

Which scaling option should you recommend?

• A. horizontal pod autoscaler
• B. cluster autoscaler
• C. virtual nodes
• D. Virtual Kubelet

Correct Answer: C

To rapidly scale application workloads in an AKS cluster, you can use virtual nodes. With virtual nodes, you have quick provisioning of pods, and only pay per second for their execution time. You don’t need to wait for Kubernetes cluster autoscaler to deploy VM compute nodes to run the additional pods. Virtual nodes are only supported with Linux pods and nodes.

Reference:

https://docs.microsoft.com/en-us/azure/aks/virtual-nodes

Community vote distribution

C (93%)

 

Question #29Topic 4

You are designing an order processing system in Azure that will contain the Azure resources shown in the following table.

The order processing system will have the following transaction flow:

✑ A customer will place an order by using App1.

✑ When the order is received, App1 will generate a message to check for product availability at vendor 1 and vendor 2.

✑ An integration component will process the message, and then trigger either Function1 or Function2 depending on the type of order.

✑ Once a vendor confirms the product availability, a status message for App1 will be generated by Function1 or Function2.

✑ All the steps of the transaction will be logged to storage1.

Which type of resource should you recommend for the integration component?

• A. an Azure Service Bus queue
• B. an Azure Data Factory pipeline
• C. an Azure Event Grid domain
• D. an Azure Event Hubs capture

Correct Answer: B

Azure Data Factory is the platform is the cloud-based ETL and data integration service that allows you to create data-driven workflows for orchestrating data movement and transforming data at scale. Using Azure Data Factory, you can create and schedule data-driven workflows (called pipelines) that can ingest data from disparate data stores.

Data Factory contains a series of interconnected systems that provide a complete end-to-end platform for data engineers.

Reference:

https://docs.microsoft.com/en-us/azure/data-factory/introduction

Community vote distribution

B (58%)

A (40%)

 

Question #30Topic 4

You have 100 Microsoft SQL Server Integration Services (SSIS) packages that are configured to use 10 on-premises SQL Server databases as their destinations.

You plan to migrate the 10 on-premises databases to Azure SQL Database.

You need to recommend a solution to create Azure-SQL Server Integration Services (SSIS) packages. The solution must ensure that the packages can target the

SQL Database instances as their destinations.

What should you include in the recommendation?

• A. Data Migration Assistant (DMA)
• B. Azure Data Factory
• C. Azure Data Catalog
• D. SQL Server Migration Assistant (SSMA)

Correct Answer: B

Migrate on-premises SSIS workloads to SSIS using ADF (Azure Data Factory).

When you migrate your database workloads from SQL Server on premises to Azure database services, namely Azure SQL Database or Azure SQL Managed

Instance, your ETL workloads on SQL Server Integration Services (SSIS) as one of the primary value-added services will need to be migrated as well.

Azure-SSIS Integration Runtime (IR) in Azure Data Factory (ADF) supports running SSIS packages. Once Azure-SSIS IR is provisioned, you can then use familiar tools, such as SQL Server Data Tools (SSDT)/SQL Server Management Studio (SSMS), and command-line utilities, such as dtinstall/dtutil/dtexec, to deploy and run your packages in Azure.

Reference:

https://docs.microsoft.com/en-us/azure/data-factory/scenario-ssis-migration-overview

Community vote distribution

B (100%)

Question #31Topic 4

You have an Azure virtual machine named VM1 that runs Windows Server 2019 and contains 500 GB of data files.

You are designing a solution that will use Azure Data Factory to transform the data files, and then load the files to Azure Data Lake Storage.

What should you deploy on VM1 to support the design?

• A. the On-premises data gateway
• B. the Azure Pipelines agent
• C. the self-hosted integration runtime
• D. the Azure File Sync agent

Correct Answer: C

The integration runtime (IR) is the compute infrastructure that Azure Data Factory and Synapse pipelines use to provide data-integration capabilities across different network environments.

A self-hosted integration runtime can run copy activities between a cloud data store and a data store in a private network. It also can dispatch transform activities against compute resources in an on-premises network or an Azure virtual network. The installation of a self-hosted integration runtime needs an on-premises machine or a virtual machine inside a private network.

Reference:

https://docs.microsoft.com/en-us/azure/data-factory/create-self-hosted-integration-runtime

Community vote distribution

C (100%)

Question #32Topic 4

You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain.

Your company has a line-of-business (LOB) application that was developed internally.

You need to implement SAML single sign-on (SSO) and enforce multi-factor authentication (MFA) when users attempt to access the application from an unknown location.

Which two features should you include in the solution? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

• A. Azure AD Privileged Identity Management (PIM)
• B. Azure Application Gateway
• C. Azure AD enterprise applications
• D. Azure AD Identity Protection
• E. Conditional Access policies

Correct Answer: DE

D: The signals generated by and fed to Identity Protection, can be further fed into tools like Conditional Access to make access decisions, or fed back to a security information and event management (SIEM) tool for further investigation based on your organization’s enforced policies.

Note: Identity Protection is a tool that allows organizations to accomplish three key tasks:

Automate the detection and remediation of identity-based risks.

Investigate risks using data in the portal.

Export risk detection data to your SIEM.

E: The location condition can be used in a Conditional Access policy.

Conditional Access policies are at their most basic an if-then statement combining signals, to make decisions, and enforce organization policies. One of those signals that can be incorporated into the decision-making process is location.

Organizations can use this location for common tasks like:

* Requiring multi-factor authentication for users accessing a service when they’re off the corporate network.

* Blocking access for users accessing a service from specific countries or regions.

The location is determined by the public IP address a client provides to Azure Active Directory or GPS coordinates provided by the Microsoft Authenticator app.

Conditional Access policies by default apply to all IPv4 and IPv6 addresses.

Incorrect:

Not A: Privileged Identity Management (PIM) is a service in Azure Active Directory (Azure AD) that enables you to manage, control, and monitor access to important resources in your organization. These resources include resources in Azure AD, Azure, and other Microsoft Online Services such as Microsoft 365 or

Microsoft Intune.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

Community vote distribution

CE (100%)

Question #33Topic 4

You plan to automata the deployment of resources to Azure subscriptions.

What is a difference between using Azure Blueprints and Azure Resource Manager (ARM) templates?

• A. ARM templates remain connected to the deployed resources.
• B. Only blueprints can contain policy definitions.
• C. Only ARM templates can contain policy definitions.
• D. Blueprints remain connected to the deployed resources.

Correct Answer: D

With Azure Blueprints, the relationship between the blueprint definition (what should be deployed) and the blueprint assignment (what was deployed) is preserved.

This connection supports improved tracking and auditing of deployments.

Incorrect:

Not A: An ARM template is a document that doesn’t exist natively in Azure – each is stored either locally or in source control or in Templates (preview). The template gets used for deployments of one or more Azure resources, but once those resources deploy there’s no active connection or relationship to the template.

Not C: Blueprints are a declarative way to orchestrate the deployment of various resource templates and other artifacts such as:

Role Assignments –

Policy Assignments –

Azure Resource Manager templates (ARM templates)

Resource Groups –

Reference:

https://docs.microsoft.com/en-us/azure/governance/blueprints/overview#how-its-different-from-resource-manager-templates

Community vote distribution

D (100%)

Question #34Topic 4

HOTSPOT –

You have the resources shown in the following table.

You create a new resource group in Azure named RG2.

You need to move the virtual machines to RG2.

What should you use to move each virtual machine? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer: 

Box 1: Azure Resource Mover –

To move Azure VMs to another region, Microsoft now recommends using Azure Resource Mover.

Incorrect:

Not Azure Migrate: We are not migrating, only moving a VM between resource groups.

Box 2: Azure Migrate –

Azure Migrate provides a centralized hub to assess and migrate on-premises servers, infrastructure, applications, and data to Azure.

Azure migrate includes Azure Migrate Server Migration: Migrate VMware VMs, Hyper-V VMs, physical servers, other virtualized servers, and public cloud VMs to

Azure.

Incorrect:

Not Arc: Azure Migrate is adequate. No need to use Azure Arc.

Not Data Migration Assistant: Data Migration Assistant is a stand-alone tool to assess SQL Servers.

It is used to assess SQL Server databases for migration to Azure SQL Database, Azure SQL Managed Instance, or Azure VMs running SQL Server.

Not Lighthouse: Azure Lighthouse enables multi-tenant management with scalability, higher automation, and enhanced governance across resources.

With Azure Lighthouse, service providers can deliver managed services using comprehensive and robust tooling built into the Azure platform. Customers maintain control over who has access to their tenant, which resources they can access, and what actions can be taken.

Reference:

https://docs.microsoft.com/en-us/azure/resource-mover/overview https://docs.microsoft.com/en-us/azure/migrate/migrate-services-overview https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-tutorial-migrate

Question #35Topic 4

You plan to deploy an Azure App Service web app that will have multiple instances across multiple Azure regions.

You need to recommend a load balancing service for the planned deployment The solution must meet the following requirements:

✑ Maintain access to the app in the event of a regional outage.

✑ Support Azure Web Application Firewall (WAF).

✑ Support cookie-based affinity.

✑ Support URL routing.

What should you include in the recommendation?

• A. Azure Front Door
• B. Azure Traffic Manager
• C. Azure Application Gateway
• D. Azure Load Balancer

Correct Answer: A

Azure Front Door works across regions and support URL routing (HTTP(S)).

Note: HTTP(S) load-balancing services are Layer 7 load balancers that only accept HTTP(S) traffic. They are intended for web applications or other HTTP(S) endpoints. They include features such as SSL offload, web application firewall, path-based load balancing, and session affinity.

Incorrect:

Application Gateway and Azure Load Balancer only work within one single region.

Reference:

https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview

Community vote distribution

A (94%)

6%

Question #36Topic 4

HOTSPOT –

You have the Azure resources shown in the following table.

You need to design a solution that provides on-premises network connectivity to SQLDB1 through PE1.

How should you configure name resolution? To answer select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer: 

Box 1:In VNET1, configure a custom DNS server set to the Azure provided DNS at 168.63.129.16

Virtual network workloads without custom DNS server.

This configuration is appropriate for virtual network workloads without a custom DNS server. In this scenario, the client queries for the private endpoint IP address to the Azure-provided DNS service 168.63.129.16. Azure DNS will be responsible for DNS resolution of the private DNS zones.

The following screenshot illustrates the DNS resolution sequence from virtual network workloads using the private DNS zone:

Box 2: Forward contoso.com to VM1

Forward to the DNS server VM1.

Note: You can use the following options to configure your DNS settings for private endpoints:

* Use the host file (only recommended for testing). You can use the host file on a virtual machine to override the DNS.

* Use a private DNS zone. You can use private DNS zones to override the DNS resolution for a private endpoint. A private DNS zone can be linked to your virtual network to resolve specific domains.

* Use your DNS forwarder (optional). You can use your DNS forwarder to override the DNS resolution for a private link resource. Create a DNS forwarding rule to use a private DNS zone on your DNS server hosted in a virtual network.

Reference:

https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-dns

Question #37Topic 4

You are designing a microservices architecture that will support a web application.

The solution must meet the following requirements:

✑ Deploy the solution on-premises and to Azure.

Support low-latency and hyper-scale operations.

 

✑ Allow independent upgrades to each microservice.

✑ Set policies for performing automatic repairs to the microservices.

You need to recommend a technology.

What should you recommend?

• A. Azure Container Instance
• B. Azure Logic App
• C. Azure Service Fabric
• D. Azure virtual machine scale set

Correct Answer: C

Azure Service Fabric enables you to create Service Fabric clusters on premises or in other clouds.

Azure Service Fabric is low-latency and scales up to thousands of machines.

Reference:

https://azure.microsoft.com/en-us/services/service-fabric/

Community vote distribution

C (100%)

Question #38Topic 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You plan to deploy multiple instances of an Azure web app across several Azure regions.

You need to design an access solution for the app. The solution must meet the following replication requirements:

✑ Support rate limiting.

✑ Balance requests between all instances.

✑ Ensure that users can access the app in the event of a regional outage.

Solution: You use Azure Front Door to provide access to the app.

Does this meet the goal?

• A. Yes
• B. No

Correct Answer: A

Azure Front Door meets the requirements. The Azure Web Application Firewall (WAF) rate limit rule for Azure Front Door controls the number of requests allowed from clients during a one-minute duration.

Reference:

https://www.nginx.com/blog/nginx-plus-and-azure-load-balancers-on-microsoft-azure/ https://docs.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-rate-limit-powershell

Community vote distribution

A (100%)

Question #39Topic 4

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.

What should you include in the recommendation?

• A. Azure Activity Log
• B. Azure Arc
• C. Azure Analysis Services
• D. Azure Monitor action groups

Correct Answer: A

Activity logs are kept for 90 days. You can query for any range of dates, as long as the starting date isn’t more than 90 days in the past.

Through activity logs, you can determine:

✑ what operations were taken on the resources in your subscription

✑ who started the operation

when the operation occurred

✑ the status of the operation

✑ the values of other properties that might help you research the operation

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/view-activity-logs

Community vote distribution

A (100%)

Question #40Topic 4

You have an Azure subscription.

You need to recommend a solution to provide developers with the ability to provision Azure virtual machines. The solution must meet the following requirements:

✑ Only allow the creation of the virtual machines in specific regions.

✑ Only allow the creation of specific sizes of virtual machines.

What should you include in the recommendation?

• A. Attribute-based access control (ABAC)
• B. Azure Policy
• C. Conditional Access policies
• D. role-based access control (RBAC)

Correct Answer: B

Azure Policies allows you to specify allowed locations, and allowed VM SKUs.

Reference:

https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

Community vote distribution

B (100%)