Free Microsoft AZ-305 Practice Test & Real Exam Questions
Hotspot Question
You are planning an Azure Storage solution for sensitive data. The data will be accessed daily.
The data set is less than 10 GB.
You need to recommend a storage solution that meets the following requirements:
- All the data written to storage must be retained for five years.
- Once the data is written, the data can only be read. Modifications
and deletion must be prevented.
- After five years, the data can be deleted, but never modified.
- Data access charges must be minimized
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You are planning an Azure Storage solution for sensitive data. The data will be accessed daily.
The data set is less than 10 GB.
You need to recommend a storage solution that meets the following requirements:
- All the data written to storage must be retained for five years.
- Once the data is written, the data can only be read. Modifications
and deletion must be prevented.
- After five years, the data can be deleted, but never modified.
- Data access charges must be minimized
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
Box 1: General purpose v2 with Hot access tier for blobs
Immutable storage for Azure Blob Storage enables users to store business-critical data in a WORM (Write Once, Read Many) state. While in a WORM state, data cannot be modified or deleted for a user-specified interval. By configuring immutability policies for blob data, you can protect your data from overwrites and deletes. Immutability policies include time-based retention policies and legal holds.
Box 2: Container access policy
Container access policy to configure a time-based retention policy for immutable storage.
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/immutable-policy-configure-container-scope?tabs=azure-portal
https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-storage-overview
Drag and Drop Question
A company has an existing web application that runs on virtual machines (VMs) in Azure.
You need to ensure that the application is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruption to the code for the existing web application.
What should you recommend? To answer, drag the appropriate values to the correct items. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
A company has an existing web application that runs on virtual machines (VMs) in Azure.
You need to ensure that the application is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruption to the code for the existing web application.
What should you recommend? To answer, drag the appropriate values to the correct items. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
Box 1: Azure Application Gateway
Azure Application Gateway provides an application delivery controller (ADC) as a service. It offers various layer 7 load-balancing capabilities for your applications.
Box 2: Web Application Firwewall (WAF)
Application Gateway web application firewall (WAF) protects web applications from common vulnerabilities and exploits.
This is done through rules that are defined based on the OWASP core rule sets 3.0 or 2.2.9.
There are rules that detects SQL injection attacks.
Reference:
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq
https://docs.microsoft.com/en-us/azure/application-gateway/waf-overview
You have an on-premises datacenter named Site1 that contains multiple servers.
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains multiple virtual machines. VNet1 uses the default Azure DNS service. Site1 connects to VNet1 by using a Site-to-Site (S2S) VPN.
You need to recommend a DNS solution that will forward DNS queries from the virtual machines that target the on-premises DNS namespace to the on-premises DNS servers. The solution must minimize administrative effort and costs.
What should you include in the recommendation?
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains multiple virtual machines. VNet1 uses the default Azure DNS service. Site1 connects to VNet1 by using a Site-to-Site (S2S) VPN.
You need to recommend a DNS solution that will forward DNS queries from the virtual machines that target the on-premises DNS namespace to the on-premises DNS servers. The solution must minimize administrative effort and costs.
What should you include in the recommendation?
Correct Answer: C
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.
What should you include in the recommendation?
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.
What should you include in the recommendation?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
You have multiple on-premises networks.
You have multiple Azure subscriptions. Each subscription contains a virtual network that is assigned an IP address space of 172.16.0.0/16. Each virtual network is connected to the on- premises networks by using ExpressRoute.
You plan to deploy a container orchestration solution that will use multiple Azure Kubernetes Service (AKS) clusters. The clusters will be deployed to the existing virtual networks.
You need to recommend a network configuration for the AKS clusters. The solution must meet the following requirements:
- Minimize the number of IP addresses required on each virtual network.
- Support outbound connectivity to on-premises datacenters.
- Support Windows node pools.
Which AKS network model should you recommend?
You have multiple Azure subscriptions. Each subscription contains a virtual network that is assigned an IP address space of 172.16.0.0/16. Each virtual network is connected to the on- premises networks by using ExpressRoute.
You plan to deploy a container orchestration solution that will use multiple Azure Kubernetes Service (AKS) clusters. The clusters will be deployed to the existing virtual networks.
You need to recommend a network configuration for the AKS clusters. The solution must meet the following requirements:
- Minimize the number of IP addresses required on each virtual network.
- Support outbound connectivity to on-premises datacenters.
- Support Windows node pools.
Which AKS network model should you recommend?
Correct Answer: C
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
You have an on-premises network and an Azure subscription. The on-premises network has several branch offices.
A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server.
Users access the shared files on VM1 from all the offices.
You need to recommend a solution to ensure that the users can access the shares files as quickly as possible if the Toronto branch office is inaccessible.
What should you include in the recommendation?
A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server.
Users access the shared files on VM1 from all the offices.
You need to recommend a solution to ensure that the users can access the shares files as quickly as possible if the Toronto branch office is inaccessible.
What should you include in the recommendation?
Correct Answer: D
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
A company is planning on deploying an application onto Azure. The application will be based on the .Net core programming language. The application would be hosted using Azure Web apps.
Below is part of the various requirements for the application:
- Gives the ability for the testing team to view the different
components of an application and see the calls being made between the
different application components
- Helps business analyse how many users actually return to the
application
- Ensuring IT administrators get alerts based on critical conditions
being met in the application
Which of the following service would be best suited for fulfilling the requirement of Ensuring IT administrators get alerts based on critical conditions being met in the application?
Below is part of the various requirements for the application:
- Gives the ability for the testing team to view the different
components of an application and see the calls being made between the
different application components
- Helps business analyse how many users actually return to the
application
- Ensuring IT administrators get alerts based on critical conditions
being met in the application
Which of the following service would be best suited for fulfilling the requirement of Ensuring IT administrators get alerts based on critical conditions being met in the application?
Correct Answer: D
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Hotspot Questiom
Your company wants to maintain Activity log and resource log information for auditing and static analysis. The data must remain available for up to six months.
You need to identify an appropriate storage and maintenance solution.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Your company wants to maintain Activity log and resource log information for auditing and static analysis. The data must remain available for up to six months.
You need to identify an appropriate storage and maintenance solution.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Correct Answer:
Explanation:
You can use the Azure Monitor menu in Azure portal to configure archive storage. It is necessary to configure an Azure storage account for archive storage because Activity log entries are only maintained for 90 days by Azure. You should create a storage account separate from other types of data so you can better control access to the data.
You can create an Azure storage account for log storage in the same subscription or a different subscription as the resource sending the logs. The user who configures the storage must have appropriate RBAC access to both subscriptions.
You can configure Blob storage policies to require time-based retention. This gives you a way to prevent the data from being deleted or modified during the retention period.
