Microsoft

AZ-305 Free Practice Questions — Page 5

Question 42

You have an Azure subscription that contains 10 web apps. The apps are integrated with Azure AD and are accessed by users on different project teams. The users frequently move between projects. You need to recommend an access management solution for the web apps. The solution must meet the following requirements: • The users must only have access to the app of the project to which they are assigned currently. • Project managers must verify which users have access to their project’s app and remove users that are no longer assigned to their project. • Once every 30 days, the project managers must be prompted automatically to verify which users are assigned to their projects. What should you include in the recommendation?

A. Azure AD Identity Protection
B. Microsoft Defender for Identity
C. Microsoft Entra Permissions Management
D. Azure AD Identity Governance
Show Answer
Correct Answer: D
Explanation:
The requirements describe periodic verification and lifecycle management of user access to applications. Azure AD Identity Governance (now Microsoft Entra ID Governance) provides access reviews that can be delegated to project managers, ensures users only retain access while assigned to a project, and supports automatic recurring reviews (for example, every 30 days). The other options focus on threat detection or cross‑cloud permissions and do not meet these governance and review requirements.

Question 43

HOTSPOT - You have an Azure subscription. The subscription contains an Azure SQL managed instance that stores employee details, including social security numbers and phone numbers. You need to configure the managed instance to meet the following requirements: • The helpdesk team must see only the last four digits of an employee’s phone number. • Cloud administrators must be prevented from seeing the employee’s social security numbers. What should you enable for each column in the managed instance? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-305 question 43
Show Answer
Correct Answer: Phone numbers: Dynamic data masking Social security numbers: Always Encrypted
Explanation:
Dynamic Data Masking can partially mask data in query results, allowing the helpdesk to see only the last four digits of phone numbers. Always Encrypted ensures social security numbers remain encrypted at rest and in use, preventing even cloud administrators from viewing the plaintext values.

Question 44

HOTSPOT - You plan to use Azure SQL as a database platform. You need to recommend an Azure SQL product and service tier that meets the following requirements: • Automatically scales compute resources based on the workload demand • Provides per second billing What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-305 question 44
Show Answer
Correct Answer: Azure SQL product: A single Azure SQL database Service tier: General Purpose
Explanation:
Automatic compute scaling with per‑second billing is provided by the serverless compute tier. Serverless is supported only for a single Azure SQL database and is available in the General Purpose service tier. Elastic pools and Managed Instance do not support serverless auto-scaling, and other tiers are provisioned-only.

Question 46

You plan to use an Azure Storage account to store data assets. You need to recommend a solution that meets the following requirements: • Supports immutable storage • Disables anonymous access to the storage account • Supports access control list (ACL)-based Azure AD permissions What should you include in the recommendation?

A. Azure Files
B. Azure Data Lake Storage
C. Azure NetApp Files
D. Azure Blob Storage
Show Answer
Correct Answer: B
Explanation:
The requirements include immutable storage, disabling anonymous access, and support for ACL-based Azure AD permissions. Azure Data Lake Storage Gen2 supports immutable storage policies, allows anonymous access to be disabled at the account level, and uniquely provides POSIX-like access control lists (ACLs) integrated with Azure AD at the file and directory level. Azure Blob Storage supports immutability and Azure AD authorization, but it does not provide POSIX-style ACLs; it relies on RBAC/ABAC instead. Therefore, Azure Data Lake Storage is the only option that meets all requirements.

Question 47

You need to design a highly available Azure SQL database that meets the following requirements: • Failover between replicas of the database must occur without any data loss. • The database must remain available in the event of a zone outage. • Costs must be minimized. Which deployment option should you use?

A. Azure SQL Managed Instance Business Critical
B. Azure SQL Managed Instance General Purpose
C. Azure SQL Database Standard
D. Azure SQL Database Premium
Show Answer
Correct Answer: D
Explanation:
The requirements call for zero data loss failover (synchronous replication), availability during an Availability Zone outage, and minimal cost. Azure SQL Database Premium uses an Always On–based architecture with multiple replicas and synchronous replication, providing automatic failover with no data loss and zone redundancy. General Purpose relies on remote storage and does not guarantee zero data loss, Standard does not meet the high availability requirements, and Managed Instance Business Critical is more expensive than needed. Therefore, Azure SQL Database Premium is the best fit.

Question 48

You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages. What should you include in the recommendation?

A. Azure Application Gateway
B. Azure Data Lake
C. Azure Queue Storage
D. Azure Blob Storage
Show Answer
Correct Answer: C
Explanation:
Azure Queue Storage enables reliable, asynchronous messaging between distributed cloud services. It is designed to decouple components, supports simple XML message payloads, and ensures that order, billing, payment, inventory, and shipping services can communicate asynchronously. The other options do not provide message-based asynchronous communication.

Question 49

You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages. What should you include in the recommendation?

A. Azure Service Bus
B. Azure Data Lake
C. Azure Traffic Manager
D. Azure Notification Hubs
Show Answer
Correct Answer: A
Explanation:
Azure Service Bus is designed for asynchronous messaging between distributed cloud services. It supports reliable message queues and topics/subscriptions, works well with XML messages, and decouples services such as order processing, billing, inventory, and shipping. The other options do not provide asynchronous message-based communication between services.

Question 50

You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages. What should you include in the recommendation?

A. Azure Service Bus
B. Azure Data Lake
C. Azure Application Gateway
D. Azure Notification Hubs
Show Answer
Correct Answer: A
Explanation:
Azure Service Bus provides asynchronous messaging between distributed cloud services using queues and topics. It is designed for decoupling components of a transaction (orders, billing, payment, inventory, shipping) and supports reliable message delivery with structured payloads such as XML. The other options do not provide asynchronous inter-service messaging.

Question 51

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription. What should you include in the recommendation?

A. Application Insights
B. Azure Analysis Services
C. Azure Advisor
D. Azure Activity Log
Show Answer
Correct Answer: D
Explanation:
Azure Activity Log records all subscription-level events, including Azure Resource Manager (ARM) operations such as resource deployments, creations, updates, and deletions. By querying or exporting the Activity Log, you can generate a monthly report of new ARM resource deployments. The other options do not provide a comprehensive log of ARM deployment events.

Question 52

You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages. What should you include in the recommendation?

A. Azure Service Bus
B. Azure Blob Storage
C. Azure Notification Hubs
D. Azure Application Gateway
Show Answer
Correct Answer: A
Explanation:
Azure Service Bus is designed for reliable, asynchronous messaging between distributed cloud services. It supports message queues and topics/subscriptions, enabling decoupled components to exchange XML messages for workflows such as orders, billing, payment, inventory, and shipping. The other options do not provide asynchronous inter-service messaging capabilities.

$19

Get all 273 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.