Free AZ-305 Dump

Question #41Topic 4

You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.

You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.

What should you include in the recommendation?

• A. Azure Notification Hubs
• B. Azure Data Lake
• C. Azure Service Bus
• D. Azure Blob Storage

Correct Answer: C

Asynchronous messaging options.

There are different types of messages and the entities that participate in a messaging infrastructure. Based on the requirements of each message type, Microsoft recommends Azure messaging services. The options include Azure Service Bus, Event Grid, and Event Hubs.

Azure Service Bus queues are well suited for transferring commands from producers to consumers.

Data is transferred between different applications and services using messages. A message is a container decorated with metadata, and contains data. The data can be any kind of information, including structured data encoded with the common formats such as the following ones: JSON, XML, Apache Avro, Plain Text.

Reference:

https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/messaging https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-messaging-overview

Community vote distribution

C (100%)

Question #42Topic 4

You have 100 devices that write performance data to Azure Blob Storage.

You plan to store and analyze the performance data in an Azure SQL database.

You need to recommend a solution to continually copy the performance data to the Azure SQL database.

What should you include in the recommendation?

• A. Azure Data Factory
• B. Data Migration Assistant (DMA)
• C. Azure Data Box
• D. Azure Database Migration Service

Correct Answer: A

Community vote distribution

A (100%)

Question #43Topic 4

You need to recommend a storage solution for the records of a mission critical application. The solution must provide a Service Level Agreement (SLA) for the latency of write operations and the throughput.

What should you include in the recommendation?

• A. Azure Data Lake Storage Gen2
• B. Azure Blob Storage
• C. Azure SQL
• D. Azure Cosmos DB

Correct Answer: D

Azure Cosmos DB is Microsoft’s fast NoSQL database with open APIs for any scale. It offers turnkey global distribution across any number of Azure regions by transparently scaling and replicating your data wherever your users are. The service offers comprehensive 99.99% SLAs which covers the guarantees for throughput, consistency, availability and latency for the Azure Cosmos DB Database Accounts scoped to a single Azure region configured with any of the five

Consistency Levels or Database Accounts spanning multiple Azure regions, configured with any of the four relaxed Consistency Levels. Azure Cosmos DB allows configuring multiple Azure regions as writable endpoints for a Database Account. In this configuration, Azure Cosmos DB offers 99.999% SLA for both read and write availability.

Reference:

https://azure.microsoft.com/en-us/support/legal/sla/cosmos-db/v1_3/

Community vote distribution

D (100%)

Question #44Topic 4

You are planning a storage solution. The solution must meet the following requirements:

✑ Support at least 500 requests per second.

✑ Support a large image, video, and audio streams.

Which type of Azure Storage account should you provision?

• A. standard general-purpose v2
• B. premium block blobs
• C. premium page blobs
• D. premium file shares

Correct Answer: B

Use Azure Blobs if you want your application to support streaming and random access scenarios.

It’s ideal for applications that require high transaction rates or consistent low-latency storage.

Incorrect:

Not A: Standard storage accounts has a default maximum request rate per storage account 20,000 requests per second1, but is not optimized for video and audio streams.

Not C: Page blobs is best suited for random reads and random writes.

Not D: FileStorage storage accounts (premium) has a maximum concurrent request rate of 100,000 IOPS.

Maximum file size is 4 TB, but is not optimized for video and audio streams.

Reference:

https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction https://docs.microsoft.com/en-us/azure/storage/files/storage-files-scale-targets

Community vote distribution

B (59%)

A (41%)

Question #45Topic 4

You need to recommend a data storage solution that meets the following requirements:

✑ Ensures that applications can access the data by using a REST connection

✑ Hosts 20 independent tables of varying sizes and usage patterns

✑ Automatically replicates the data to a second Azure region

✑ Minimizes costs

What should you recommend?

• A. an Azure SQL Database elastic pool that uses active geo-replication
• B. tables in an Azure Storage account that use geo-redundant storage (GRS)
• C. tables in an Azure Storage account that use read-access geo-redundant storage (RA-GRS)
• D. an Azure SQL database that uses active geo-replication

Correct Answer: B

The Table service offers structured storage in the form of tables. The Table service API is a REST API for working with tables and the data that they contain.

Geo-redundant storage (GRS) has a lower cost than read-access geo-redundant storage (RA-GRS).

Reference:

https://docs.microsoft.com/en-us/rest/api/storageservices/table-service-rest-api https://docs.microsoft.com/en-us/azure/storage/common/geo-redundant-design

Community vote distribution

B (94%)

 

Question #46Topic 4

HOTSPOT –

You are designing a software as a service (SaaS) application that will enable Azure Active Directory (Azure AD) users to create and publish online surveys. The

SaaS application will have a front-end web app and a back-end web API. The web app will rely on the web API to handle updates to customer surveys.

You need to design an authorization flow for the SaaS application. The solution must meet the following requirements:

✑ To access the back-end web API, the web app must authenticate by using OAuth 2 bearer tokens.

✑ The web app must authenticate by using the identities of individual users.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer: 

Box 1: Azure AD –

The Azure AD server issues tokens (access & refresh token). See step 5 below in graphic.

OAuth 2.0 authentication with Azure Active Directory.

The OAuth 2.0 is the industry protocol for authorization. It allows a user to grant limited access to its protected resources. Designed to work specifically with

Hypertext Transfer Protocol (HTTP), OAuth separates the role of the client from the resource owner. The client requests access to the resources controlled by the resource owner and hosted by the resource server (here the Azure AD server). The resource server issues access tokens with the approval of the resource owner. The client uses the access tokens to access the protected resources hosted by the resource server.

Box 2: A web API –

Delegated access is used.

The bearer token sent to the web API contains the user identity.

The web API makes authorization decisions based on the user identity.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/auth-oauth2 https://docs.microsoft.com/lb-lu/azure/architecture/multitenant-identity/web-api

Question #47Topic 4

HOTSPOT –

You plan to create an Azure environment that will contain a root management group and 10 child management groups. Each child management group will contain five Azure subscriptions. You plan to have between 10 and 30 resource groups in each subscription.

You need to design an Azure governance solution. The solution must meet the following requirements:

✑ Use Azure Blueprints to control governance across all the subscriptions and resource groups.

✑ Ensure that Blueprints-based configurations are consistent across all the subscriptions and resource groups.

✑ Minimize the number of blueprint definitions and assignments.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer: 

Box 1. The root management group

When creating a blueprint definition, you’ll define where the blueprint is saved. Blueprints can be saved to a management group or subscription that you have

Contributor access to. If the location is a management group, the blueprint is available to assign to any child subscription of that management group.

The root management group is built into the hierarchy to have all management groups and subscriptions fold up to it. This root management group allows for global policies and Azure role assignments to be applied at the directory level.

Box 2. The root management group

Reference:

https://docs.microsoft.com/en-us/azure/governance/management-groups/overview https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

Question #48Topic 4

DRAG DROP –

You are designing a virtual machine that will run Microsoft SQL Server and contain two data disks. The first data disk will store log files, and the second data disk will store data. Both disks are P40 managed disks.

You need to recommend a host caching method for each disk. The method must provide the best overall performance for the virtual machine while preserving the integrity of the SQL data and logs.

Which host caching method should you recommend for each disk? To answer, drag the appropriate methods to the correct disks. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer: 

Box 1: None –

No data disk caching for the Log files.

Box 2: ReadOnly –

Guidelines to optimize performance for your SQL Server on Azure Virtual Machines (VMs) include:

Set host caching to read-only for data file disks.

Set host caching to none for log file disks.

Reference:

https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/performance-guidelines-best-practices-storage

Question #49Topic 4

You are designing a solution that calculates 3D geometry from height-map data.

You need to recommend a solution that meets the following requirements:

✑ Performs calculations in Azure.

✑ Ensures that each node can communicate data to every other node.

✑ Maximizes the number of nodes to calculate multiple scenes as fast as possible.

Minimizes the amount of effort to implement the solution.

Which two actions should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

• A. Enable parallel file systems on Azure.
• B. Create a render farm that uses virtual machines.
• C. Create a render farm that uses virtual machine scale sets.
• D. Create a render farm that uses Azure Batch.
• E. Enable parallel task execution on compute nodes.

Correct Answer: DE

Multi-instance tasks allow you to run an Azure Batch task on multiple compute nodes simultaneously. These tasks enable high performance computing scenarios like Message Passing Interface (MPI) applications in Batch.

You configure compute nodes for parallel task execution at the pool level.

Azure Batch allows you to set task slots per node up to (4x) the number of node cores.

Reference:

https://docs.microsoft.com/en-us/azure/batch/batch-mpi

https://docs.microsoft.com/en-us/azure/batch/batch-parallel-node-tasks#enable-parallel-task-execution

Community vote distribution

DE (98%)

 

Question #50Topic 4

You have an on-premises application that consumes data from multiple databases. The application code references database tables by using a combination of the server, database, and table name.

You need to migrate the application data to Azure.

To which two services can you migrate the application data to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

• A. SQL Server Stretch Database
• B. SQL Server on an Azure virtual machine
• C. Azure SQL Database
• D. Azure SQL Managed Instance

Correct Answer: BD

Cross-database queries are supported by SQL Server, for example on an Azure virtual machine, and also supported by an Azure SQL Managed Instance.

Reference:

https://techcommunity.microsoft.com/t5/azure-database-support-blog/cross-database-queries-between-azure-sql-database-and-managed/ba- p/2706670

Community vote distribution

BD (100%)

Question #51Topic 4

HOTSPOT –

You plan to migrate on-premises Microsoft SQL Server databases to Azure.

You need to recommend a deployment and resiliency solution that meets the following requirements:

✑ Supports user-initiated backups

✑ Supports multiple automatically replicated instances across Azure regions

✑ Minimizes administrative effort to implement and maintain business continuity

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer: 

Box 1: an Azure SQL database –

Incorrect answers:

User imitated backups are not supported by Azure SQL Managed instance.

Box 2: Active geo-replication –

Active geo-replication required to multiple automatically replicated instances across Azure regions.

You can manage Azure SQL Database security for geo-restore. SQL database cannot be used for geo-restore.

Incorrect:

Not SQL Server: Active geo-replication requires Azure SQL database.

Reference:

https://docs.microsoft.com/en-us/azure/azure-sql/database/active-geo-replication-overview

Question #52Topic 4

You need to design a highly available Azure SQL database that meets the following requirements:

✑ Failover between replicas of the database must occur without any data loss.

✑ The database must remain available in the event of a zone outage.

✑ Costs must be minimized.

Which deployment option should you use?

• A. Azure SQL Managed Instance Business Critical
• B. Azure SQL Managed Instance General Purpose
• C. Azure SQL Database Business Critical
• D. Azure SQL Database Serverless

Correct Answer: D

Azure SQL Database Serverless meets the requirements and is less expensive than Azure SQL Database Business Critical.

Note: General Purpose service tier zone redundant availability.

Zone-redundant configuration for the general purpose service tier is offered for both serverless and provisioned compute.

This configuration utilizes Azure Availability Zones ג€‰to replicate databases across multiple physical locations within an Azure region.ג€‰By selecting zone-redundancy, you can make yourג€‰new and existing serverless and provisioned generalג€‰purpose single databases and elastic pools resilient to a much larger set of failures, including catastrophic datacenter outages, without any changes of the application logic.

Incorrect:

Not A, not B: Zone-redundant configuration is not available in SQL Managed Instance.

Not C: Azure SQL Database Business Critical is more expensive than Azure SQL Database Serverless.

Note: Premium and Business Critical service tiers use the Premium availability model, which integrates compute resources (sqlservr.exe process) and storage

(locally attached SSD) on a single node. High availability is achieved by replicating both compute and storage to additional nodes creating a three to four-node cluster.

Reference:

https://docs.microsoft.com/en-us/azure/azure-sql/database/high-availability-sla

Community vote distribution

D (85%)

C (15%)

Question #53Topic 4

You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region.

You are designing a disaster recovery plan for KeyVault1.

You plan to back up the keys in KeyVault1.

You need to identify to where you can restore the backup.

What should you identify?

• A. any region worldwide
• B. the same region only
• C. KeyVault1 only
• D. the same geography only

Correct Answer: D

Using the backup and restore commands has two limitations:

* You can’t back up a key vault in one geography and restore it into another geography.

* The backup command backs up all versions of each secret.

Incorrect:

Not A: Azure Key Vault does not allow you to move a key vault from one region to another. You can, however, create a key vault in the new region, manually copy each individual key, secret, or certificate from your existing key vault to the new key vault, and then remove the original key vault.

Reference:

https://docs.microsoft.com/en-us/azure/key-vault/general/move-region

Community vote distribution

D (100%)

Question #54Topic 4

You have an on-premises line-of-business (LOB) application that uses a Microsoft SQL Server instance as the backend.

You plan to migrate the on-premises SQL Server instance to Azure virtual machines.

You need to recommend a highly available SQL Server deployment that meets the following requirements:

✑ Minimizes costs

Minimizes failover time if a single server fails

 

What should you include in the recommendation?

• A. an Always On availability group that has premium storage disks and a virtual network name (VNN)
• B. an Always On Failover Cluster Instance that has a virtual network name (VNN) and a standard file share
• C. an Always On availability group that has premium storage disks and a distributed network name (DNN)
• D. an Always On Failover Cluster Instance that has a virtual network name (VNN) and a premium file share

Correct Answer: C

Always On availability groups on Azure Virtual Machines are similar to Always On availability groups on-premises, and rely on the underlying Windows Server

Failover Cluster.

If you deploy your SQL Server VMs to a single subnet, you can configure a virtual network name (VNN) and an Azure Load Balancer, or a distributed network name (DNN) to route traffic to your availability group listener.

There are some behavior differences between the functionality of the VNN listener and DNN listener that are important to note:

* Failover time: Failover time is faster when using a DNN listener since there is no need to wait for the network load balancer to detect the failure event and change its routing.

* Etc.

Incorrect:

Not B, not D: Migrate to an Always On availability group, not an Always on Failover cluster Instance.

Reference:

https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/availability-group-overview

Community vote distribution

C (77%)

B (23%)

Question #55Topic 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.

The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.

You need to recommend a solution to meet the regulatory requirement.

Solution: You recommend creating resource groups based on locations and implementing resource locks on the resource groups.

Does this meet the goal?

• A. Yes
• B. No

Correct Answer: B

Instead; you should recommend using an Azure Policy initiative to enforce the location

Note: Azure Resource Policy Definitions can be used which can be applied to a specific Resource Group with the App Service instances.

In Azure Policy, we offer several built-in policies that are available by default. For example:

* Allowed Locations (Deny): Restricts the available locations for new resources. Its effect is used to enforce your geo-compliance requirements.

Reference:

https://docs.microsoft.com/en-us/azure/governance/policy/overview

Community vote distribution

B (100%)

Question #56Topic 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.

The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.

You need to recommend a solution to meet the regulatory requirement.

Solution: You recommend using the Regulatory compliance dashboard in Microsoft Defender for Cloud.

Does this meet the goal?

• A. Yes
• B. No

Correct Answer: B

Instead; you should recommend using an Azure Policy initiative to enforce the location

Note: Azure Resource Policy Definitions can be used which can be applied to a specific Resource Group with the App Service instances.

In Azure Policy, we offer several built-in policies that are available by default. For example:

* Allowed Locations (Deny): Restricts the available locations for new resources. Its effect is used to enforce your geo-compliance requirements.

Reference:

https://docs.microsoft.com/en-us/azure/governance/policy/overview

Community vote distribution

B (100%)

Question #57Topic 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.

The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.

You need to recommend a solution to meet the regulatory requirement.

Solution: You recommend using an Azure Policy initiative to enforce the location.

Does this meet the goal?

• A. Yes
• B. No

Correct Answer: A

Azure Resource Policy Definitions can be used which can be applied to a specific Resource Group with the App Service instances.

In Azure Policy, we offer several built-in policies that are available by default. For example:

* Allowed Locations (Deny): Restricts the available locations for new resources. Its effect is used to enforce your geo-compliance requirements.

Reference:

https://docs.microsoft.com/en-us/azure/governance/policy/overview

Community vote distribution

A (100%)

Question #58Topic 4

You plan to move a web app named App1 from an on-premises datacenter to Azure.

App1 depends on a custom COM component that is installed on the host server.

You need to recommend a solution to host App1 in Azure. The solution must meet the following requirements:

✑ App1 must be available to users if an Azure datacenter becomes unavailable.

✑ Costs must be minimized.

What should you include in the recommendation?

• A. In two Azure regions, deploy a load balancer and a web app.
• B. In two Azure regions, deploy a load balancer and a virtual machine scale set.
• C. Deploy a load balancer and a virtual machine scale set across two availability zones.
• D. In two Azure regions, deploy an Azure Traffic Manager profile and a web app.

Correct Answer: C

Need to use a virtual machine as Azure App service does not allow COM components.

Need two availability zones to protect against an Azure datacenter failure.

Incorrect:

Not A, Not D: Cannot use a web app.

Azure App Service does not allow the registration of COM components on the platform. If your app makes use of any COM components, these need to be rewritten in managed code and deployed with the site or application.

Reference:

https://docs.microsoft.com/en-us/dotnet/azure/migration/app-service#com-and-com-components

Community vote distribution

C (100%)

Question #59Topic 4

You plan to deploy an application named App1 that will run in containers on Azure Kubernetes Service (AKS) clusters. The AKS clusters will be distributed across four Azure regions.

You need to recommend a storage solution to ensure that updated container images are replicated automatically to all the Azure regions hosting the AKS clusters.

Which storage solution should you recommend?

• A. geo-redundant storage (GRS) accounts
• B. Premium SKU Azure Container Registry
• C. Azure Content Delivery Network (CDN)
• D. Azure Cache for Redis

Correct Answer: B

Enable geo-replication for container images.

Best practice: Store your container images in Azure Container Registry and geo-replicate the registry to each AKS region.

To deploy and run your applications in AKS, you need a way to store and pull the container images. Container Registry integrates with AKS, so it can securely store your container images or Helm charts. Container Registry supports multimaster geo-replication to automatically replicate your images to Azure regions around the world.

Geo-replication is a feature of Premium SKU container registries.

Note:

When you use Container Registry geo-replication to pull images from the same region, the results are:

Faster: You pull images from high-speed, low-latency network connections within the same Azure region.

More reliable: If a region is unavailable, your AKS cluster pulls the images from an available container registry.

Cheaper: There’s no network egress charge between datacenters.

Reference:

https://docs.microsoft.com/en-us/azure/aks/operator-best-practices-multi-region

Community vote distribution

B (100%)

Question #60Topic 4

You have an Azure Active Directory (Azure AD) tenant.

You plan to deploy Azure Cosmos DB databases that will use the SQL API.

You need to recommend a solution to provide specific Azure AD user accounts with read access to the Cosmos DB databases.

What should you include in the recommendation?

• A. shared access signatures (SAS) and Conditional Access policies
• B. certificates and Azure Key Vault
• C. master keys and Azure Information Protection policies
• D. a resource token and an Access control (IAM) role assignment

Correct Answer: D

The Access control (IAM) pane in the Azure portal is used to configure role-based access control on Azure Cosmos resources. The roles are applied to users, groups, service principals, and managed identities in Active Directory. You can use built-in roles or custom roles for individuals and groups. The following screenshot shows Active Directory integration (RBAC) using access control (IAM) in the Azure portal:

Note: To use the Azure Cosmos DB RBAC in your application, you have to update the way you initialize the Azure Cosmos DB SDK. Instead of passing your account’s primary key, you have to pass an instance of a TokenCredential class. This instance provides the Azure Cosmos DB SDK with the context required to fetch an Azure AD (AAD) token on behalf of the identity you wish to use.

Reference:

https://docs.microsoft.com/en-us/azure/cosmos-db/role-based-access-control https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac

Community vote distribution

D (100%)