AZ-305 Free Practice Questions — Page 6

Question 19

You have 12 on-premises data sources that contain customer information and consist of Microsoft SQL Server, MySQL, and Oracle databases. You have an Azure subscription. You plan to create an Azure Data Lake Storage account that will consolidate the customer information for analysis and reporting. You need to recommend a solution to automatically copy new information from the data sources to the Data Lake Storage account by using extract, transform and load (ETL). The solution must minimize administrative effort. What should you include in the recommendation?

Question 20

You have the Azure resources shown in the following table. You need to deploy a new Azure Firewall policy that will contain mandatory rules for all Azure Firewall deployments. The new policy will be configured as a parent policy for the existing policies. What is the minimum number of additional Azure Firewall policies you should create?

Question 20

HOTSPOT - You have an Azure App Service web app named Webapp1 that connects to an Azure SQL database named DB1. Webapp1 and DB1 are deployed to the East US Azure region. You need to ensure that all the traffic between Webapp1 and DB1 is sent via a private connection. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 21

You have an Azure subscription that contains a Basic Azure virtual WAN named VirtualWAN1 and the virtual hubs shown in the following table. You have an ExpressRoute circuit in the US East Azure region. You need to create an ExpressRoute association to VirtualWAN1. What should you do first?

Question 21

HOTSPOT - Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1. Server1 contains an app named App1 that uses AD DS authentication. Remote users access App1 by using a VPN connection to the on-premises network. You have an Azure AD tenant that syncs with the AD DS domain by using Azure AD Connect. You need to ensure that the remote users can access App1 without using a VPN. The solution must meet the following requirements: • Ensure that the users authenticate by using Azure Multi-Factor Authentication (MFA). • Minimize administrative effort. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 22

HOTSPOT - You need to recommend a solution to integrate Azure Cosmos DB and Azure Synapse. The solution must meet the following requirements: • Traffic from an Azure Synapse workspace to the Azure Cosmos DB account must be sent via the Microsoft backbone network. • Traffic from the Azure Synapse workspace to the Azure Cosmos DB account must NOT be routed over the internet. • Implementation effort must be minimized. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 22

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements: ✑ Provide access to the full .NET framework. Provide redundancy if an Azure region fails. ✑ Grant administrators access to the operating system to install custom application dependencies. Solution: You deploy two Azure virtual machines to two Azure regions, and you create an Azure Traffic Manager profile. Does this meet the goal?

Question 23

You have an Azure subscription that contains an Azure Kubernetes Service (AKS) instance named AKS1. AKS1 hosts microservice-based APIs that are configured to listen on non-default HTTP ports. You plan to deploy a Standard tier Azure API Management instance named APIM1 that will make the APIs available to external users. You need to ensure that the AKS1 APIs are accessible to APIM1. The solution must meet the following requirements: • Implement MTLS authentication between APIM1 and AKS1. • Minimize development effort. • Minimize costs. What should you do?

Question 23

Your company has the infrastructure shown in the following table. The on-premises Active Directory domain syncs with Azure Active Directory (Azure AD). Server1 runs an application named App1 that uses LDAP queries to verify user identities in the on-premises Active Directory domain. You plan to migrate Server1 to a virtual machine in Subscription1. A company security policy states that the virtual machines and services deployed to Subscription1 must be prevented from accessing the on-premises network. You need to recommend a solution to ensure that App1 continues to function after the migration. The solution must meet the security policy. What should you include in the recommendation?

Question 25

HOTSPOT - You have 10 on-premises servers that run Windows Server. You need to perform daily backups of the servers to a Recovery Services vault. The solution must meet the following requirements: • Back up all the files and folders on the servers. • Maintain three copies of the backups in Azure. • Minimize costs. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.