Microsoft

AZ-305 Free Practice Questions — Page 11

Question 107

HOTSPOT - You are building an Azure web app that will store the Personally Identifiable Information (PII) of employees. You need to recommend an Azure SQL. Database solution for the web app. The solution must meet the following requirements: • Maintain availability in the event of a single datacenter outage. • Support the encryption of specific columns that contain PII. • Automatically scale up during payroll operations. • Minimize costs. What should you include in the recommendations? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-305 question 107
Show Answer
Correct Answer: General Purpose service tier and Serverless compute tier Always Encrypted
Explanation:
Serverless automatically scales compute and helps minimize cost. General Purpose supports zone-redundant deployment for datacenter resilience. Always Encrypted provides column-level encryption for sensitive PII, unlike TDE which encrypts the database at rest.

Question 108

HOTSPOT - You need to deploy an instance of SQL Server on Azure Virtual Machines. The solution must meet the following requirements: • Support 15,000 disk IOPS. • Support SR-IOV. • Minimize costs. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-305 question 108
Show Answer
Correct Answer: Virtual machine series: DS Disk type: Premium SSD
Explanation:
DS-series VMs support SR-IOV and are appropriate for SQL Server workloads. To meet 15,000 IOPS while minimizing cost, Premium SSD is sufficient; Ultra Disk would provide higher performance but at higher cost.

Question 109

You have an Azure AD tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned memberships. Group1 has 50 members, including 20 guest users. You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements: • The evaluation must be repeated automatically every three months. • Every member must be able to report whether they need to be in Group1. • Users who report that they do not need to be in Group1 must be removed from Group1 automatically. • Users who do not report whether they need to be in Group1 must be removed from Group1 automatically. What should you include in the recommendation?

A. Implement Azure AD Identity Protection.
B. Change the Membership type of Group1 to Dynamic User.
C. Create an access review.
D. Implement Azure AD Privileged Identity Management (PIM).
Show Answer
Correct Answer: C
Explanation:
Access Reviews in Microsoft Entra ID Governance are designed to periodically review group membership, can be scheduled to recur every three months, allow members to self-attest whether they still need access, and can automatically remove users who deny needing access or fail to respond at the end of the review.

Question 110

HOTSPOT - You have two on-premises Microsoft SQL Server 2017 instances that host an Always On availability group named AG1. AG1 contains a single database named DB1. You have an Azure subscription that contains a virtual machine named VM1. VM1 runs Linux and contains a SQL Server 2019 instance. You need to migrate DB1 to VM1. The solution must minimize downtime on DB1. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-305 question 110
Show Answer
Correct Answer: Prepare: Adding a secondary replica to AG1 Migrate: A distributed availability group
Explanation:
To minimize downtime, first extend the existing availability group by adding VM1 as a secondary replica (cross-platform support exists). Then use a distributed availability group for near-zero-downtime migration and controlled failover to the new environment.

Question 111

HOTSPOT - You have an on-premises Microsoft SQL Server database named SQL1. You plan to migrate SQL1 to Azure. You need to recommend a hosting solution for SQL1. The solution must meet the following requirements: • Support the deployment of multiple secondary, read-only replicas. • Support automatic replication between primary and secondary replicas. • Support failover between primary and secondary replicas within a 15-minute recovery time objective (RTO). What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-305 question 111
Show Answer
Correct Answer: Azure SQL Database Active geo-replication
Explanation:
Active geo-replication for Azure SQL Database supports multiple readable secondary replicas with automatic asynchronous replication and manual failover well within a 15-minute RTO. SQL Managed Instance does not support active geo-replication, and standard geo-replication supports only one secondary.

Question 113

You are designing a point of sale (POS) solution that will be deployed across multiple locations and will use an Azure Databricks workspace in the Standard tier. The solution will include multiple apps deployed to the on-premises network of each location. You need to configure the authentication method that will be used by the app to access the workspace. The solution must minimize the administrative effort associated with staff turnover and credential management. What should you configure?

A. a managed identity
B. a service principal
C. a personal access token
Show Answer
Correct Answer: B
Explanation:
Because the applications are deployed on-premises, they cannot use Azure managed identities, which are only available to Azure-hosted resources. A service principal provides a non-user identity for applications to authenticate to Azure Databricks, minimizing administrative effort related to employee turnover. A personal access token is tied to users or requires credential management and is less suitable for enterprise application authentication.

Question 114

You need to design a highly available Azure SQL database that meets the following requirements: • Failover between replicas of the database must occur without any data loss. • The database must remain available in the event of a zone outage. • Costs must be minimized. Which deployment option should you use?

A. Azure SQL Database Business Critical
B. Azure SQL Managed Instance Business Critical
C. Azure SQL Database Standard
D. Azure SQL Managed Instance General Purpose
Show Answer
Correct Answer: A
Explanation:
Azure SQL Database Business Critical supports synchronous replicas with automatic failover, providing zero data loss (RPO=0). It also supports zone-redundant high availability to remain available during an Availability Zone outage. Azure SQL Database Standard (DTU) does not support zone redundancy, Managed Instance General Purpose does not meet the zero-data-loss HA requirement, and Managed Instance Business Critical is generally more expensive than Azure SQL Database Business Critical for this requirement.

Question 115

Your company has offices in North America and Europe. You plan to migrate to Azure. You need to recommend a networking solution for the new Azure infrastructure. The solution must meet the following requirements: • The Point-to-Site (P2S) VPN connections of mobile users must connect automatically to the closest Azure region. • The offices in each region must connect to their local Azure region by using an ExpressRoute circuit. • Transitive routing between virtual networks and on-premises networks must be supported. • The network traffic between virtual networks must be filtered by using FQDNs. What should you include in the recommendation?

A. Azure Virtual WAN with a secured virtual hub
B. virtual network peering and application security groups
C. virtual network gateways and network security groups (NSGs)
D. Azure Route Server and Azure Network Function Manager
Show Answer
Correct Answer: A
Explanation:
Azure Virtual WAN with a secured virtual hub satisfies all listed requirements: P2S users can connect to the nearest Azure region, ExpressRoute can terminate in regional Virtual WAN hubs, Virtual WAN provides transitive routing across VNets and on-premises connectivity, and a secured virtual hub uses Azure Firewall to provide FQDN-based traffic filtering. The other options lack one or more key capabilities, particularly transitive routing, automatic regional P2S connectivity, or FQDN filtering.

Question 116

You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages. What should you include in the recommendation?

A. Azure Service Fabric
B. Azure Data Lake
C. Azure Service Bus
D. Azure Application Gateway
Show Answer
Correct Answer: C
Explanation:
Azure Service Bus is the Azure messaging service designed for reliable asynchronous communication between distributed applications and services. It supports queues and topics for decoupling components and can carry XML messages as message payloads. Azure Service Fabric is for microservices hosting, Azure Data Lake is for analytics storage, and Azure Application Gateway is a web traffic load balancer.

Question 117

You have an Azure subscription. You need to deploy an Azure Kubernetes Service (AKS) solution that will use Windows Server 2019 nodes. The solution must meet the following requirements: • Minimize the time it takes to provision compute resources during scale-out operations. • Support autoscaling of Windows Server containers. Which scaling option should you recommend?

A. horizontal pod autoscaler
B. Virtual nodes
C. Kubernetes version 1.20.2 or newer
D. cluster autoscaler
Show Answer
Correct Answer: D
Explanation:
Cluster autoscaler is the appropriate choice for AKS with Windows Server 2019 node pools. It automatically adds or removes VM nodes to support pending Windows pods, enabling autoscaling of Windows containers. Virtual nodes are intended for Azure Container Instances and historically support Linux workloads rather than Windows node pools. Horizontal Pod Autoscaler scales pod replicas but does not provision compute resources. A specific Kubernetes version alone is not a scaling option.

$19

Get all 271 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.