Free Microsoft AZ-305 Practice Test & Real Exam Questions
Hotspot Question
You have a Microsoft Entra tenant named contoso.com that contains multiple enterprise apps.
Your company has a business partner that has a Microsoft Entra tenant named fabrikam.com.
You need to recommend an identity governance solution that will provide users in fabrikam.com with access to the enterprise apps in contoso.com. The solution must meet the following requirements:
- Ensure that administrators in fabrikam.com can provide the
fabrikam.com users with access to the contoso.com enterprise apps.
- Automatically provision identities for the fabrikam.com users to
enable access to the contoso.com enterprise apps.
- Provide policy-based management of access assignments, approvals, and expirations.
- Minimize administrative effort.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a Microsoft Entra tenant named contoso.com that contains multiple enterprise apps.
Your company has a business partner that has a Microsoft Entra tenant named fabrikam.com.
You need to recommend an identity governance solution that will provide users in fabrikam.com with access to the enterprise apps in contoso.com. The solution must meet the following requirements:
- Ensure that administrators in fabrikam.com can provide the
fabrikam.com users with access to the contoso.com enterprise apps.
- Automatically provision identities for the fabrikam.com users to
enable access to the contoso.com enterprise apps.
- Provide policy-based management of access assignments, approvals, and expirations.
- Minimize administrative effort.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
Box 1: Cross-tenant synchronization
Cross-tenant synchronization automates creating, updating, and deleting Microsoft Entra B2B collaboration users across tenants in an organization. It enables users to access applications and collaborate across tenants, while still allowing the organization to evolve.
Here are the primary goals of cross-tenant synchronization:
Seamless collaboration for a multitenant organization
Automate lifecycle management of B2B collaboration users in a multitenant organization Automatically remove B2B accounts when a user leaves the organization Box 2: Entitlement management Provide policy-based management of access assignments, approvals, and expirations.
The best solution for policy-based management of access assignments, approvals, and expiration in Azure is Microsoft Entra ID Governance Entitlement Management (formerly Azure AD Entitlement Management).
Entitlement Management enables organizations to manage the lifecycle of access to groups, applications, and SharePoint sites for both internal and external users through a centralized, policy-driven approach.
Entitlement management provides the most comprehensive, end-to-end automation for the specific requirements of policy-driven access assignments, approvals, and expiration.
Why Entitlement Management is Best:
Policy-Based Access: You can define policies that determine who can request access (e.g., all employees, specific external partners), the requestor information required, and approval workflows.
Approvals: It supports multi-stage approval workflows, allowing designated sponsors or managers to approve access requests.
Expiration: You can set access assignments to expire automatically on a specific date, after a set number of days, or never, forcing users to renew access if needed.
Lifecycle Management: It automates access requests, assignments, and reviews (recertification).
Access Packages: By grouping resources into "Access Packages," you can apply a single policy to govern the entire access lifecycle for that package.
Reference:
https://learn.microsoft.com/en-us/entra/identity/multi-tenant-organizations/cross-tenant-synchronization-overview
https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-overview
You are designing an application that will be hosted in Azure.
The application will host video files that range from 50 MB to 12 GB. The application will use certificate-based authentication and will be available to users on the internet.
You need to recommend a storage option for the video files. The solution must provide the fastest read performance and must minimize storage costs.
What should you recommend?
The application will host video files that range from 50 MB to 12 GB. The application will use certificate-based authentication and will be available to users on the internet.
You need to recommend a storage option for the video files. The solution must provide the fastest read performance and must minimize storage costs.
What should you recommend?
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Hotspot Question
You have the Azure subscriptions shown in the following table.
Contoso.onmicrosft.com contains a user named User1.
You need to deploy a solution to protect against ransomware attacks. The solution must meet the following requirements:
- Ensure that all the resources in Sub1 are backed up by using Azure
Backup.
- Require that User1 first be assigned a role for Sub2 before the user
can make major changes to the backup configuration.
What should you create in each subscription? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have the Azure subscriptions shown in the following table.
Contoso.onmicrosft.com contains a user named User1.
You need to deploy a solution to protect against ransomware attacks. The solution must meet the following requirements:
- Ensure that all the resources in Sub1 are backed up by using Azure
Backup.
- Require that User1 first be assigned a role for Sub2 before the user
can make major changes to the backup configuration.
What should you create in each subscription? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
https://learn.microsoft.com/en-us/azure/backup/multi-user-authorization
Hotspot Question
Your company deploys several Linux and Windows virtual machines (VMs) to Azure. The VMs are deployed with the Microsoft Dependency Agent and the Microsoft Monitoring Agent installed by using Azure VM extensions. On-premises connectivity has been enabled by using Azure ExpressRoute.
You need to design a solution to monitor the VMs.
Which Azure monitoring services should you use? To answer, select the appropriate Azure monitoring services in the answer area.
NOTE: Each correct selection is worth one point.
Your company deploys several Linux and Windows virtual machines (VMs) to Azure. The VMs are deployed with the Microsoft Dependency Agent and the Microsoft Monitoring Agent installed by using Azure VM extensions. On-premises connectivity has been enabled by using Azure ExpressRoute.
You need to design a solution to monitor the VMs.
Which Azure monitoring services should you use? To answer, select the appropriate Azure monitoring services in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
Box 1: Azure Network Watcher
Traffic Analytics is a cloud-based solution that provides visibility into user and application activity in cloud networks. Traffic analytics analyzes Network Watcher network security group (NSG) flow logs to provide insights into traffic flow in your Azure cloud. With traffic analytics, you can:
Identify security threats to, and secure your network, with information such as open-ports, applications attempting internet access, and virtual machines (VM) connecting to rogue networks.
Visualize network activity across your Azure subscriptions and identify hot spots. Understand traffic flow patterns across Azure regions and the internet to optimize your network deployment for performance and capacity.
Pinpoint network misconfigurations leading to failed connections in your network.
Box 2: Azure Service Map
Service Map automatically discovers application components on Windows and Linux systems and maps the communication between services. With Service Map, you can view your servers in the way that you think of them: as interconnected systems that deliver critical services. Service Map shows connections between servers, processes, inbound and outbound connection latency, and ports across any TCP-connected architecture, with no configuration required other than the installation of an agent.
Reference:
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics
https://docs.microsoft.com/en-us/azure/azure-monitor/insights/service-map
You have five datacenters across North America and Europe.
You have an Azure subscription.
You need to recommend a solution to provide connectivity between the datacenters and Azure.
The solution must meet the following requirements:
- Ensure that apps hosted in a datacenter can access the resources
hosted in Azure and the other datacenters.
- Ensure that apps hosted in Azure can access the resources hosted in
the datacenters.
- Support the central management of network routes.
- Support the central management of firewall rules.
- Minimize administrative effort.
What should you include in the recommendation?
You have an Azure subscription.
You need to recommend a solution to provide connectivity between the datacenters and Azure.
The solution must meet the following requirements:
- Ensure that apps hosted in a datacenter can access the resources
hosted in Azure and the other datacenters.
- Ensure that apps hosted in Azure can access the resources hosted in
the datacenters.
- Support the central management of network routes.
- Support the central management of firewall rules.
- Minimize administrative effort.
What should you include in the recommendation?
Correct Answer: C
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
You need to design a solution that will execute custom C# code in response to an event routed to Azure Event Grid. The solution must meet the following requirements:
- The executed code must be able to access the private IP address of a
Microsoft SQL Server instance that runs on an Azure virtual machine.
- Costs must be minimized.
What should you include in the solution?
- The executed code must be able to access the private IP address of a
Microsoft SQL Server instance that runs on an Azure virtual machine.
- Costs must be minimized.
What should you include in the solution?
Correct Answer: C
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
You plan to deploy an Azure Database for MySQL flexible server named Server1 to the East US Azure region.
You need to implement a business continuity solution for Server1. The solution must minimize downtime in the event of a failover to a paired region.
What should you do?
You need to implement a business continuity solution for Server1. The solution must minimize downtime in the event of a failover to a paired region.
What should you do?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Hotspot Question
You plan to deploy an Azure web app named App1 that will use Azure Active Directory (Azure AD) authentication.
App1 will be accessed from the internet by the users at your company. All the users have computers that run Windows 10 and are joined to Azure AD.
You need to recommend a solution to ensure that the users can connect to App1 without being prompted for authentication and can access App1 only from company-owned computers.
What should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You plan to deploy an Azure web app named App1 that will use Azure Active Directory (Azure AD) authentication.
App1 will be accessed from the internet by the users at your company. All the users have computers that run Windows 10 and are joined to Azure AD.
You need to recommend a solution to ensure that the users can connect to App1 without being prompted for authentication and can access App1 only from company-owned computers.
What should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
Box 1: An Azure AD app registration
Azure active directory (AD) provides cloud based directory and identity management services.You can use azure AD to manage users of your application and authenticate access to your applications using azure active directory.
You register your application with Azure active directory tenant.
Box 2: A conditional access policy
Conditional Access policies at their simplest are if-then statements, if a user wants to access a resource, then they must complete an action.
By using Conditional Access policies, you can apply the right access controls when needed to keep your organization secure and stay out of your user's way when not needed.
Reference:
https://codingcanvas.com/using-azure-active-directory-authentication-in-your-web-application/
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
