Big Halloween Sale Limited Time Flat 70% Discount offer - Ends in 0d 00h 00m 00s - Coupon code: 70spcl

Microsoft AZ-305 Designing Microsoft Azure Infrastructure Solutions Exam Practice Test

Page: 1 / 34
Total 341 questions

Designing Microsoft Azure Infrastructure Solutions Questions and Answers

Question 1

What should you include in the identity management strategy to support the planned changes?

Options:

A.

Move all the domain controllers from corp.fabrikam.com to virtual networks in Azure.

B.

Deploy domain controllers for corp.fabrikam.com to virtual networks in Azure.

C.

Deploy a new Azure AD tenant for the authentication of new R&D projects.

D.

Deploy domain controllers for the rd.fabrikam.com forest to virtual networks in Azure.

Question 2

To meet the authentication requirements of Fabrikam, what should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 2

Options:

Question 3

You are evaluating the components of the migration to Azure that require you to provision an Azure Storage account.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question # 3

Options:

Question 4

You need to recommend a data storage strategy for WebApp1.

What should you include in in the recommendation?

Options:

A.

an Azure SQL Database elastic pool

B.

a vCore-based Azure SQL database

C.

an Azure virtual machine that runs SQL Server

D.

a fixed-size DTU AzureSQL database.

Question 5

You need to recommend a strategy for the web tier of WebApp1. The solution must minimize What should you recommend?

Options:

A.

Create a runbook that resizes virtual machines automatically to a smaller size outside of business hours.

B.

Configure the Scale Up settings for a web app.

C.

Deploy a virtual machine scale set that scales out on a 75 percent CPU threshold.

D.

Configure the Scale Out settings for a web app.

Question 6

You need to recommend a strategy for migrating the database content of WebApp1 to Azure. What should you include in the recommendation?

Options:

A.

Use Azure Site Recovery to replicate the SQL servers to Azure.

B.

Use SQL Server transactional replication.

C.

Copy the BACPAC file that contains the Azure SQL database file to Azure Blob storage.

D.

Copy the VHD that contains the Azure SQL database files to Azure Blob storage

Question 7

You design a solution for the web tier of WebApp1 as shown in the exhibit.

Question # 7

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Question # 7

Options:

Question 8

You need to recommend a solution to meet the database retention requirement. What should you recommend?

Options:

A.

Configure a long-term retention policy for the database.

B.

Configure Azure Site Recovery.

C.

Configure geo replication of the database.

D.

Use automatic Azure SQL Database backups.

Question 9

You need to recommend a notification solution for the IT Support distribution group.

What should you include in the recommendation?

Options:

A.

Azure Network Watcher

B.

an action group

C.

a SendGrid account with advanced reporting

D.

Azure AD Connect Health

Question 10

You have .NeT web service named service1 that has the following requirements.

Must read and write to the local file system.

Must write to the Windows Application event log.

You need to recommend a solution to host Service1 in Azure . The solution must meet the following requirements:

Minimize maintenance overhead.

Minimize costs.

What should you include in the recommendation?

Options:

A.

an Azure App Service web app

B.

an Azure virtual machine scale set

C.

an App Service Environment (ASE)

D.

an Azure Functions app

Question 11

You have an Azure subscription named Subscription1 that is linked to a hybrid Azure Active Directory (Azure AD) tenant.

You have an on-premises datacenter that does NOT have a VPN connection to Subscription1. The datacenter contains a computer named Server1 that has Microsoft SQL Server 2016 installed. Server1 is prevented from accessing the internet.

An Azure logic app named LogicApp1 requires write access to a database on Server1.

You need to recommend a solution to provide LogicApp1 with the ability to access Server1.

What should you recommend deploying on-premises and in Azure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 11

Options:

Question 12

You are designing an order processing system in Azure that will contain the Azure resources shown in the following table.

Question # 12

The order processing system will have the following transaction flow:

A customer will place an order by using App1.

When the order is received, App1 will generate a message to check for product availability at vendor 1 and vendor 2.

An integration component will process the message, and then trigger either Function1 or Function2 depending on the type of order.

Once a vendor confirms the product availability, a status message for App1 will be generated by Function1 or Function2.

All the steps of the transaction will be logged to storage1.

Which type of resource should you recommend for the integration component?

D18912E1457D5D1DDCBD40AB3BF70D5D

Which type of resource should you recommend for the integration component?

Options:

A.

an Azure Data Factory pipeline

B.

an Azure Service Bus queue

C.

an Azure Event Grid domain

D.

an Azure Event Hubs capture

Question 13

You have an Azure subscription.

You plan to host three apps named App1, App2, and App3 by using Azure Container Apps. The apps have the following network requirements:

• Implement network security groups (NSGs) to allow external inbound connections to App1 and App2.

• Implement IP address restrictions for App3 to allow external inbound connections.

• Implement NSGs to allow connectivity between App1 and App2.

• Fully isolate App3 from App1 and App2.

The apps have the following compute requirements:

• Implement dynamically allocated compute for Appl.

• Implement up to 10 general purpose Dedicated-D16 instances for App2.

• Implement up to 10 memory optimized Dedicated-E16 instances for App3.

You need to recommend the minimum number of Container Apps environments and workload profiles required. What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 13

Options:

Question 14

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are designing an Azure solution for a company that has four departments. Each department will deploy several Azure app services and Azure SQL databases.

You need to recommend a solution to report the costs for each department to deploy the app services and the databases. The solution must provide a consolidated view for cost reporting that displays cost broken down by department.

Solution: Create a separate resource group for each department. Place the resources for each department in its respective resource group.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 15

You have 12 Azure subscriptions and three projects. Each project uses resources across multiple subscriptions.

You need to use Microsoft Cost Management to monitor costs on a per project basis. The solution must minimize administrate effort

Which two components should you include in the solution? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options:

A.

budgets

B.

resource tags

C.

custom role-based access control (RBAQ roles

D.

management groups

E.

Azure boards

Question 16

You are designing a data storage solution to support reporting.

The solution will ingest high volumes of data in the JSON format by using Azure Event Hubs. As the data arrives, Event Hubs will write the data to storage. The solution must meet the following requirements:

• Organize data in directories by date and time.

• Allow stored data to be queried directly, transformed into summarized tables, and then stored in a data warehouse.

• Ensure that the data warehouse can store 50 TB of relational data and support between 200 and 300 concurrent read operations.

Which service should you recommend for each type of data store? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 16

Options:

Question 17

Your network contains an on-premises Active Directory forest.

You discover that when users change jobs within your company, the membership of the user groups are not being updated. As a result, the users can access resources that are no longer relevant to their job.

You plan to integrate Active Directory and Azure Active Directory (Azure AD) by using Azure AD Connect.

You need to recommend a solution to ensure that group owners are emailed monthly about the group memberships they manage.

What should you include in the recommendation?

Options:

A.

conditional access policies

B.

Tenant Restrictions

C.

Azure AD access reviews

D.

Azure AD Identity Protection

Question 18

You have two app registrations named App1 and App2 in Azure AD. App1 supports role-based access control (RBAC) and includes a role named Writer.

You need to ensure that when App2 authenticates to access App1, the tokens issued by Azure AD include the Writer role claim.

Which blade should you use to modify each app registration? To answer, drag the appropriate blades to the correct app registrations. Each blade may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Question # 18

Options:

Question 19

Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL

databases.

The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.

You need to recommend a solution to meet the regulatory requirement.

Solution: You recommend using an Azure policy to enforce the location of resource groups.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 20

You plan to deploy an Azure App Service web app named App1 that will service users in a single geographical region. App1 will access a highly available database named DB1 that will be hosted on two Azure virtual machines named VM1 and VM2.

You need to recommend a solution that meets the following requirements:

• Uses Azure Web Application Firewall (WAF) to minimize the risk of a web-based attack against App1

• Ensures that administrators can access VM1 and VM2 securely from the internet

• Ensures that traffic from App1 to DB1 is NOT sent via the internet

• Minimizes costs

What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area.

Question # 20

Options:

Question 21

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.

Several VMs are exhibiting network connectivity issues.

You need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.

Solution: Use the Azure Advisor to analyze the network traffic.

Does the solution meet the goal?

Options:

A.

Yes

B.

No

Question 22

You need to recommend a solution that meets the file storage requirements for App2.

What should you deploy to the Azure subscription and the on-premises network? To answer, drag the appropriate services to the correct locations. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Question # 22

Options:

Question 23

You are evaluating whether to use Azure Traffic Manager and Azure Application Gateway to meet the connection requirements for App1.

What is the minimum numbers of instances required for each service? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 23

Options:

Question 24

What should you recommend lo meet the monitoring requirements for App2?

Options:

A.

Azure Application Insights

B.

Container insights

C.

Microsoft Sentinel

D.

VM insights

Question 25

You need to recommend a solution that meets the data requirements for App1.

What should you recommend deploying to each availability zone that contains an instance of App1?

Options:

A.

an Azure Cosmos DB that uses multi-region writes

B.

an Azure Data Lake store that uses geo-zone-redundant storage (GZRS)

C.

an Azure SQL database that uses active geo-replication

D.

an Azure Storage account that uses geo-zone-redundant storage (GZRS)

Question 26

What should you implement to meet the identity requirements? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 26

Options:

Question 27

You need to recommend an App Service architecture that meets the requirements for Appl. The solution must minimize costs.

What should few recommend?

Options:

A.

one App Service Environment (ASE) per availability zone

B.

one App Service plan per availability zone

C.

one App Service plan per region

D.

one App Service Environment (ASE) per region

Question 28

What should you recommend to meet the monitoring requirements for App2?

Options:

A.

Microsoft Sentinel

B.

Azure Application Insights

C.

Container insights

D.

VM insights

Question 29

You need to recommend a solution to ensure that App1 can access the third-party credentials and access strings. The solution must meet the security requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 29

Options:

Question 30

You need to configure an Azure policy to ensure that the Azure SQL databases have TDE enabled. The solution must meet the security and compliance requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question # 30

Options:

Question 31

After you migrate App1 to Azure, you need to enforce the data modification requirements to meet the security and compliance requirements.

What should you do?

Options:

A.

Create Azure RBAC assignments.

B.

Create an access policy for the blob service.

C.

Modify the access level of the blob service.

D.

Implement Azure resource locks.

Question 32

How should the migrated databases DB1 and DB2 be implemented in Azure?

Question # 32

Options:

Question 33

You plan to migrate App1 to Azure.

You need to recommend a high-availability solution for App1. The solution must meet the resiliency requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 33

Options:

Question 34

You migrate App1 to Azure. You need to ensure that the data storage for App1 meets the security and compliance requirement

What should you do?

Options:

A.

Create an access policy for the blob

B.

Modify the access level of the blob service.

C.

Implement Azure resource locks.

D.

Create Azure RBAC assignments.

Question 35

You plan to migrate DB1 and DB2 to Azure.

You need to ensure that the Azure database and the service tier meet the resiliency and business requirements.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 35

Options:

Question 36

You plan to migrate App1 to Azure.

You need to estimate the compute costs for App1 in Azure. The solution must meet the security and compliance requirements.

What should you use to estimate the costs, and what should you implement to minimize the costs? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 36

Options:

Question 37

You plan to migrate App1 to Azure.

You need to recommend a storage solution for App1 that meets the security and compliance requirements.

Which type of storage should you recommend, and how should you recommend configuring the storage? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 37

Options:

Question 38

You plan to migrate App1 to Azure. The solution must meet the authentication and authorization requirements.

Which type of endpoint should App1 use to obtain an access token?

Options:

A.

Azure Instance Metadata Service (IMDS)

B.

Azure AD

C.

Azure Service Management

D.

D. Microsoft identity platform

Question 39

You need to implement the Azure RBAC role assignments for the Network Contributor role. The solution must meet the authentication and authorization requirements.

What is the minimum number of assignments that you must use?

Options:

A.

1

B.

2

C.

5

D.

10

E.

15

Question 40

You need to ensure that users managing the production environment are registered for Azure MFA and must authenticate by using Azure MFA when they sign in to the Azure portal. The solution must meet the authentication and authorization requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 40

Options:

Question 41

You plan to migrate App1 to Azure.

You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 data. The solution must meet the security and compliance requirements.

What should you include in the recommendation?

Options:

A.

a private endpoint

B.

a service endpoint that has a service endpoint policy

C.

Azure public peering for an ExpressRoute circuit

D.

Microsoft peering for an ExpressRoute circuit

Question 42

A company has an on-premises file server cbflserver that runs Windows Server 2019. Windows Admin Center manages this server. The company owns an Azure subscription. You need to provide an Azure solution to prevent data loss if the file server fails.

Solution: You decide to register Windows Admin Center in Azure and then configure Azure Backup.

Would this meet the requirement?

Options:

A.

Yes

B.

No

Page: 1 / 34
Total 341 questions