Winter Sale - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

Free and Premium Microsoft AZ-305 Dumps Questions Answers

Page: 1 / 13
Total 341 questions

Designing Microsoft Azure Infrastructure Solutions Questions and Answers

Question 1

You have the Free edition of a hybrid Azure Active Directory (Azure AD) tenant. The tenant uses password hash synchronization.

You need to recommend a solution to meet the following requirements:

Prevent Active Directory domain user accounts from being locked out as the result of brute force attacks targeting Azure AD user accounts.

Block legacy authentication attempts to Azure AD integrated apps.

Minimize costs.

What should you recommend for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Buy Now
Question 2

You have an Azure subscription.

You need to deploy a solution that will provide point-in-time restore for blobs in storage accounts that have blob versioning and

blob soft delete enabled.

Which type of blob should you create, and what should you enable for the accounts? To answer, select the appropriate options in the answer area.

NOTE; Each correct selection is worth one point.

Options:

Question 3

You have an Azure subscription that contains a Basic Azure virtual WAN named Virtual/WAN1 and the virtual hubs shown in the following table.

You have an ExpressRoute circuit in the US East region.

You need to create an ExpressRoute association to VirtualWAN1.

What should you do first?

Options:

A.

Upgrade VirtualWAN1 to Standard.

B.

Create a gateway on Hub1.

C.

Create a hub virtual network in US East.

D.

Enable the ExpressRoute premium add-on.

Question 4

You need to deploy an instance of SQL Server on Azure Virtual Machines. The solution must meet the following requirements:

• Support 15.000 disk IOPS.

• Support SR-IOV.

• Minimize costs.

What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Options:

Question 5

Your company has 20 web APIs that were developed in-house.

The company is developing 10 web apps that will use the web APIs. The web apps and the APIs are registered in the company s Azure AD tenant. The web APIs are published by using Azure API Management.

You need to recommend a solution to block unauthorized requests originating from the web apps from reaching the web APIs. The solution must meet the following requirements:

• Use Azure AD-generated claims.

• Minimize configuration and management effort

What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

NOTE: Each correct selection is worth one point.

Options:

Question 6

You need to design an Azure policy that will implement the following functionality:

• For new resources, assign tags and values that match the tags and values of the resource group to which the resources are deployed.

• For existing resources, identify whether the tags and values match the tags and values of the resource group that contains the resources.

• For any non-compliant resources, trigger auto-generated remediation tasks to create missing tags and values.

The solution must use the principle of least privilege.

What should you include in the design? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 7

You plan to automate the deployment of resources to Azure subscriptions.

What is a difference between using Azure Blueprints and Azure Resource Manager templates?

Options:

A.

Azure Resource Manager templates remain connected to the deployed resources.

B.

Only Azure Resource Manager templates can contain policy definitions.

C.

Azure Blueprints remain connected to the deployed resources.

D.

Only Azure Blueprints can contain policy definitions.

Question 8

Your on-premises datacenter contains a server that runs Linux and hosts a Java app named Appl. App1 has the following characteristics:

• App1 is an interactive app that users access by using HTTPS connections.

• The number of connections to App1 changes significantly throughout the day.

• App1 runs multiple concurrent instances.

• App1 requires major changes to run in a container.

You plan to migrate App1 to Azure.

You need to recommend a compute solution for Appl. The solution must meet the following requirements:

• The solution must run multiple instances of Appl.

• The number of instances must be managed automatically depending on the load.

• Administrative effort must be minimized.

What should you include in the recommendation?

Options:

A.

Azure Batch

B.

Azure App Service

C.

Azure Kubernetes Service (AKS)

D.

Azure Virtual Machine Scale Sets

Question 9

You are designing a virtual machine that will run Microsoft SQL Server and will contain two data disks. The first data disk will store log files, and the second data disk will store data. Both disks are P40 managed disks.

You need to recommend a caching policy for each disk. The policy must provide the best overall performance for the virtual machine.

Which caching policy should you recommend for each disk? To answer, drag the appropriate policies to the correct disks. Each policy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Options:

Question 10

You have a Microsoft Entra tenant named contoso.com.

You have a partner organization that has a Microsoft Entra tenant named fabrikam.com.

You plan to provide the users in fabrikam.com with access to the resources in contoso.com by using access packages.

You need to ensure that contoso.com users assigned the Access package assignment manager role can only assign access packages to the fabrikam.com users.

What should you do first in the Microsoft Entra admin center?

Options:

A.

From the Entitlement management settings in Identity Governance, create a new connected organization.

B.

From the Cross-tenant access settings in External Identities, create a new organization.

C.

From the Cross-tenant synchronization settings, create a new configuration.

D.

From the All identity providers settings in External Identities, create a new SAML/WS Fed IdP identity provider.

Question 11

You are developing an app that will use Azure Functions to process Azure Event Hubs events. Request processing is estimated to take between five and 20 minutes. You need to recommend a hosting solution that meets the following requirements:

• Supports estimates of request processing runtimes

• Supports event-driven autoscaling for the app

Which hosting plan should you recommend?

Options:

A.

Consumption

B.

App Service

C.

Dedicated

D.

Premium

Question 12

You have an Azure subscription that contains the SQL servers shown in the following table.

The subscription contains the storage accounts shown in the following table.

You create the Azure SQL databases shown in the following table.

Options:

Question 13

You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2022 and Linux.

You need to use Azure Monitor to design an alerting strategy for security-related events.

Which Azure Monitor Logs tables should you query? To answer, drag the appropriate tables to the correct log types. Each table may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Options:

Question 14

Your on-premises network contains a server named Server1 that runs an ASP.NET application named App1.

You have a hybrid deployment of Azure Active Directory (Azure AD).

You need to recommend a solution to ensure that users sign in by using their Azure AD account and Azure Multi-Factor Authentication (MFA) when they connect to App1 from the internet.

Which three Azure services should you recommend be deployed and configured in sequence? To answer, move the appropriate services from the list of services to the answer area and arrange them in the correct order.

Options:

Question 15

You have an Azure subscription that contains multiple virtual machines that use managed disks.

You plan to use Azure Site Recovery to replicate the virtual machines across availability zones in the same Azure region.

You need to recommend a redundancy level for the managed disks. The solution must maximize the availability of the planned solution

What should you recommend?

Options:

A.

locally-redundant storage (LRS)

B.

geo-redundant storage (GRS)

C.

geo-zone-redundant storage (GZRSJ

D.

zone-redundant storage (ZRS)

Question 16

You have a mobile app that is deployed to 100,000 users. Each instance of the app collects usage data.

You have an Azure subscription.

You need to recommend a solution that meets the following requirements:

• Accepts the usage data from the app instances

• Calculates the average hourly CPU utilization of each app instance and writes the average to an Azure SQL database

• Minimizes costs and administrative effort

What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Options:

Question 17

You are designing a cost-optimized solution that uses Azure Batch to run two types of jobs on Linux nodes. The first job type will consist of short-running tasks for a development environment. The second job type will consist of long-running Message Passing Interface (MPI) applications for a production environment that requires timely job completion.

You need to recommend the pool type and node type for each job type. The solution must minimize compute charges and leverage Azure Hybrid Benefit whenever possible.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 18

You are designing an application that will use Azure Linux virtual machines to analyze video files. The files will be uploaded from corporate offices that connect to Azure by using ExpressRoute.

You plan to provision an Azure Storage account to host the files.

You need to ensure that the storage account meets the following requirements:

• Supports video files of up to 7 TB

• Provides the highest availability possible

• Ensures that storage is optimized for the large video files

• Ensures that files from the on-premises network are uploaded by using ExpressRoute

How should you configure the storage account? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 19

You have the Azure subscriptions shown in the following table.

Contoso.onmicrosft.com contains a user named User1.

You need to deploy a solution to protect against ransomware attacks. The solution must meet the following requirements:

• Ensure that all the resources in Sub1 are backed up by using Azure Backup.

• Require that User1 first be assigned a role for Sub2 before the user can make major changes to the backup configuration.

What should you create in each subscription? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Options:

Question 20

You plan to develop a new app that will store business critical data. The app must meet the following requirements:

Prevent new data from being modified for one year.

Minimize read latency.

Maximize data resiliency.

You need to recommend a storage solution for the app.

What should you recommend? To answer, select the appropriate options in the answer area.

Options:

Question 21

You have an Azure subscription that contains a Basic Azure virtual WAN named Virtual/WAN1 and the virtual hubs shown in the following table.

You have an ExpressRoute circuit in the US East region.

You need to create an ExpressRoute association to VirtualWAN1.

What should you do first?

Options:

A.

Upgrade VirtualWAN1 to Standard.

B.

Create a gateway on Hub1.

C.

Create a hub virtual network in US East.

D.

Enable the ExpressRoute premium add-on.

Question 22

You design a solution for the web tier of WebApp1 as shown in the exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Options:

Question 23

What should you include in the identity management strategy to support the planned changes?

Options:

A.

Move all the domain controllers from corp.fabrikam.com to virtual networks in Azure.

B.

Deploy domain controllers for corp.fabrikam.com to virtual networks in Azure.

C.

Deploy a new Azure AD tenant for the authentication of new R&D projects.

D.

Deploy domain controllers for the rd.fabrikam.com forest to virtual networks in Azure.

Question 24

You need to recommend a strategy for the web tier of WebApp1. The solution must minimize What should you recommend?

Options:

A.

Create a runbook that resizes virtual machines automatically to a smaller size outside of business hours.

B.

Configure the Scale Up settings for a web app.

C.

Deploy a virtual machine scale set that scales out on a 75 percent CPU threshold.

D.

Configure the Scale Out settings for a web app.

Question 25

You need to recommend a strategy for migrating the database content of WebApp1 to Azure. What should you include in the recommendation?

Options:

A.

Use Azure Site Recovery to replicate the SQL servers to Azure.

B.

Use SQL Server transactional replication.

C.

Copy the BACPAC file that contains the Azure SQL database file to Azure Blob storage.

D.

Copy the VHD that contains the Azure SQL database files to Azure Blob storage

Question 26

To meet the authentication requirements of Fabrikam, what should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 27

You need to recommend a data storage strategy for WebApp1.

What should you include in in the recommendation?

Options:

A.

an Azure SQL Database elastic pool

B.

a vCore-based Azure SQL database

C.

an Azure virtual machine that runs SQL Server

D.

a fixed-size DTU AzureSQL database.

Question 28

You are evaluating the components of the migration to Azure that require you to provision an Azure Storage account.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Question 29

You need to recommend a solution to meet the database retention requirement. What should you recommend?

Options:

A.

Configure a long-term retention policy for the database.

B.

Configure Azure Site Recovery.

C.

Configure geo replication of the database.

D.

Use automatic Azure SQL Database backups.

Question 30

You need to recommend a notification solution for the IT Support distribution group.

What should you include in the recommendation?

Options:

A.

Azure Network Watcher

B.

an action group

C.

a SendGrid account with advanced reporting

D.

Azure AD Connect Health

Question 31

You plan to migrate DB1 and DB2 to Azure.

You need to ensure that the Azure database and the service tier meet the resiliency and business requirements.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 32

You plan to migrate App1 to Azure.

You need to recommend a storage solution for App1 that meets the security and compliance requirements.

Which type of storage should you recommend, and how should you recommend configuring the storage? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 33

You plan to migrate App1 to Azure.

You need to recommend a high-availability solution for App1. The solution must meet the resiliency requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 34

You need to ensure that users managing the production environment are registered for Azure MFA and must authenticate by using Azure MFA when they sign in to the Azure portal. The solution must meet the authentication and authorization requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 35

You migrate App1 to Azure. You need to ensure that the data storage for App1 meets the security and compliance requirement

What should you do?

Options:

A.

Create an access policy for the blob

B.

Modify the access level of the blob service.

C.

Implement Azure resource locks.

D.

Create Azure RBAC assignments.

Question 36

You need to implement the Azure RBAC role assignments for the Network Contributor role. The solution must meet the authentication and authorization requirements.

What is the minimum number of assignments that you must use?

Options:

A.

1

B.

2

C.

5

D.

10

E.

15

Question 37

After you migrate App1 to Azure, you need to enforce the data modification requirements to meet the security and compliance requirements.

What should you do?

Options:

A.

Create Azure RBAC assignments.

B.

Create an access policy for the blob service.

C.

Modify the access level of the blob service.

D.

Implement Azure resource locks.

Question 38

You plan to migrate App1 to Azure.

You need to estimate the compute costs for App1 in Azure. The solution must meet the security and compliance requirements.

What should you use to estimate the costs, and what should you implement to minimize the costs? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 39

You plan to migrate App1 to Azure.

You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 data. The solution must meet the security and compliance requirements.

What should you include in the recommendation?

Options:

A.

a private endpoint

B.

a service endpoint that has a service endpoint policy

C.

Azure public peering for an ExpressRoute circuit

D.

Microsoft peering for an ExpressRoute circuit

Question 40

How should the migrated databases DB1 and DB2 be implemented in Azure?

Options:

Question 41

You plan to migrate App1 to Azure. The solution must meet the authentication and authorization requirements.

Which type of endpoint should App1 use to obtain an access token?

Options:

A.

Azure Instance Metadata Service (IMDS)

B.

Azure AD

C.

Azure Service Management

D.

D. Microsoft identity platform

Question 42

You need to configure an Azure policy to ensure that the Azure SQL databases have TDE enabled. The solution must meet the security and compliance requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Options:

Question 43

You need to recommend a solution that meets the file storage requirements for App2.

What should you deploy to the Azure subscription and the on-premises network? To answer, drag the appropriate services to the correct locations. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Options:

Question 44

What should you recommend to meet the monitoring requirements for App2?

Options:

A.

Microsoft Sentinel

B.

Azure Application Insights

C.

Container insights

D.

VM insights

Question 45

What should you recommend lo meet the monitoring requirements for App2?

Options:

A.

Azure Application Insights

B.

Container insights

C.

Microsoft Sentinel

D.

VM insights

Question 46

You need to recommend a solution to ensure that App1 can access the third-party credentials and access strings. The solution must meet the security requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 47

What should you implement to meet the identity requirements? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 48

You need to recommend an App Service architecture that meets the requirements for Appl. The solution must minimize costs.

What should few recommend?

Options:

A.

one App Service Environment (ASE) per availability zone

B.

one App Service plan per availability zone

C.

one App Service plan per region

D.

one App Service Environment (ASE) per region

Question 49

You need to recommend a solution that meets the data requirements for App1.

What should you recommend deploying to each availability zone that contains an instance of App1?

Options:

A.

an Azure Cosmos DB that uses multi-region writes

B.

an Azure Data Lake store that uses geo-zone-redundant storage (GZRS)

C.

an Azure SQL database that uses active geo-replication

D.

an Azure Storage account that uses geo-zone-redundant storage (GZRS)

Question 50

You are evaluating whether to use Azure Traffic Manager and Azure Application Gateway to meet the connection requirements for App1.

What is the minimum numbers of instances required for each service? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 51

A company has an on-premises file server cbflserver that runs Windows Server 2019. Windows Admin Center manages this server. The company owns an Azure subscription. You need to provide an Azure solution to prevent data loss if the file server fails.

Solution: You decide to register Windows Admin Center in Azure and then configure Azure Backup.

Would this meet the requirement?

Options:

A.

Yes

B.

No

Question 52

A company has an on-premises file server cbflserver that runs Windows Server 2019. Windows Admin Center manages this server. The company owns an Azure subscription. You need to provide an Azure solution to prevent data loss if the file server fails.

Solution: You decide to create an Azure Recovery Services vault. You then decide to install the Azure Backup agent and then schedule the backup. Would this meet the requirement?

Options:

A.

Yes

B.

No

Question 53

A company is planning on deploying an application onto Azure. The application will be based on the .Net core programming language. The application would be hosted using Azure Web apps. Below is part of the various requirements for the application

Give the ability to correlate Azure resource usage and the performance data with the actual application configuration and performance data

Give the ability to visualize the relationships between application components

Give the ability to track requests and exceptions to specific lines of code from within the application Give the ability to actually analyse how uses return to an application and see how often they only select a particular drop-down value

Which of the following service would be best suited for fulfilling the requirement of

“Give the ability to correlate Azure resource usage and the performance data with the actual application configuration and performance data”

Options:

A.

Azure Application Insights

B.

Azure Service Map

C.

Azure Log Analytics

D.

Azure Activity Log

Page: 1 / 13
Total 341 questions