You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain. You have an internal web app named WebApp1 that is hosted on-premises. WebApp1 uses Integrated Windows authentication. Some users work remotely and do NOT have VPN access to the on-premises network.You need to provide the remote users with single sign-on (SSO) access to WebApp1.Which two features should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Azure AD Privileged Identity Management (PIM)

Azure AD enterprise applications

You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group'. Group i is configured Tor assigned membership. Group I has 50 members. including 20 guest users. You need To recommend a solution for evaluating the member ship of Group1. The solution must meet the following requirements:• The evaluation must be repeated automatically every three months• Every member must be able to report whether they need to be in Group1• Users who report that they do not need to be in Group 1 must be removed from Group1 automatically• Users who do not report whether they need to be m Group1 must be removed from Group1 automatically.What should you include in me recommendation?

implement Azure AU Identity Protection.

Change the Membership type of Group1 to Dynamic User.

Implement Azure AD Privileged Identity Management.

You are designing a large Azure environment that will contain many subscriptions.You plan to use Azure Policy as part of a governance solution.To which three scopes can you assign Azure Policy definitions? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Azure Active Directory (Azure AD) administrative units

Azure Active Directory (Azure AD) tenants

Azure Active Directory (Azure AD) administrative units

You have 100 servers that run Windows Server 2012 R2 and host Microsoft SQL Server 2012 R2 instances. The instances host databases that have the following characteristics:The largest database is currently 3 TB. None of the databases will ever exceed 4 TB.Stored procedures are implemented by using CLR.You plan to move all the data from SQL Server to Azure.You need to recommend an Azure service to host the databases. The solution must meet the following requirements:Whenever possible, minimize management overhead for the migrated databases.Minimize the number of database changes required to facilitate the migration.Ensure that users can authenticate by using their Active Directory credentials.What should you include in the recommendation?

Azure SQL Database Managed Instance

Azure SQL Database single databases

Azure SQL Database Managed Instance

Azure SQL Database elastic pools

SQL Server 2016 on Azure virtual machines

You have an Azure subscription that contains two applications named App1 and App2. App1 is a sales processing application. When a transaction in App1 requires shipping, a message is added to an Azure Storage account queue, and then App2 listens to the queue for relevant transactions.In the future, additional applications will be added that will process some of the shipping requests based on the specific details of the transactions. You need to recommend a replacement for the storage account queue to ensure that each additional application will be able to read the relevant transactions. What should you recommend?

one Azure Data Factory pipeline

multiple storage account queues

You ate designing a SQL database solution. The solution will include 20 databases that will be 20 GB each and have varying usage patterns. You need to recommend a database platform to host the databases. The solution must meet the following requirements:• The compute resources allocated to the databases must scale dynamically.• The solution must meet an SLA of 99.99% uptime.• The solution must have reserved capacity.• Compute charges must be minimized.What should you include in the recommendation?

an elastic pool that contains 20 Azure SQL databases

20 databases on a Microsoft SQL server that runs on an Azure virtual machine

20 instances of Azure SQL Database serverless

20 databases on a Microsoft SQL server that runs on an Azure virtual machine in an availability set

an elastic pool that contains 20 Azure SQL databases

You are designing an application that will aggregate content for users.You need to recommend a database solution for the application. The solution must meet the following requirements:Support SQL commands.Support multi-master writes.Guarantee low latency read operations.What should you include in the recommendation?

Azure SQL Database that uses active geo-replication

You have SQL Server on an Azure virtual machine. The databases are written to nightly as part of a batch process. You need to recommend a disaster recovery solution for the dat a. The solution must meet the following requirements:Provide the ability to recover in the event of a regional outage.Support a recovery time objective (RTO) of 15 minutes.Support a recovery point objective (RPO) of 24 hours.Support automated recovery.Minimize costs.What should you include in the recommendation?

Azure virtual machine availability sets

an Always On availability group

You plan to move a web application named App1 from an on-premises data center to Azure.App1 depends on a custom COM component that is installed on the host server.You need to recommend a solution to host App1 in Azure. The solution must meet the following requirements:App1 must be available to users if an Azure data center becomes unavailable.Costs must be minimized.What should you include in the recommendation?

Deploy a load balancer and a virtual machine scale set across two availability zones.

In two Azure regions, deploy a load balancer and a virtual machine scale set.

In two Azure regions, deploy a Traffic Manager profile and a web app.

In two Azure regions, deploy a load balancer and a web app.

Deploy a load balancer and a virtual machine scale set across two availability zones.

You have an Azure subscription that contains a Basic Azure virtual WAN named Virtual/WAN1 and the virtual hubs shown in the following table. You have an ExpressRoute circuit in the US East region.You need to create an ExpressRoute association to VirtualWAN1.What should you do first?

Upgrade VirtualWAN1 to Standard.

Create a hub virtual network in US East.

Enable the ExpressRoute premium add-on.

You have an Azure subscription that contains a storage account.An application sometimes writes duplicate files to the storage account.You have a PowerShell script that identifies and deletes duplicate files in the storage account.Currently, the script is run manually after approval from the operations manager.You need to recommend a serverless solution that performs the following actions:Runs the script once an hour to identify whether duplicate files exist Sends an email notification to the operations manager requesting approval to delete the duplicate files Processes an email response from the operations manager specifying whether the deletion was approved Runs the script if the deletion was approved What should you include in the recommendation?

Azure Logic Apps and Azure Functions

Azure Pipelines and Azure Service Fabric

Azure Logic Apps and Azure Event Grid

Azure Functions and Azure Batch

Your company has the infrastructure shown in the following table. The on-premises Active Directory domain syncs to Azure Active Directory (Azure AD).Server1 runs an application named Appl that uses LDAP queries to verify user identities in the onpremises Active Directory domain. You plan to migrate Server1 to a virtual machine in Subscription1.A company security policy states that the virtual machines and services deployed to Subscription1 must be prevented from accessing the on-premises network. You need to recommend a solution to ensure that Appl continues to function after the migration. The solution must meet the security policy. What should you include in the recommendation?

Azure AD Domain Services (Azure AD DS)

the Active Directory Domain Services role on a virtual machine

You need to design a solution that will execute custom C# code in response to an event routed to Azure Event Grid. The solution must meet the following requirements:The executed code must be able to access the private IP address of a Microsoft SQL Server instance that runs on an Azure virtual machine. Costs must be minimized.What should you include in the solution?

Azure Functions in the Consumption plan

Azure Logic Apps in the integrated service environment

Azure Functions in the Dedicated plan and the Basic Azure App Service plan

Azure Logic Apps in the Consumption plan

Azure Functions in the Consumption plan

You have an on-premises network and an Azure subscription. The on-premises network has several branch offices. A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server.Users access the shared files on VM1 from all the offices.You need to recommend a solution to ensure that the users can access the shares files as quickly as possible if the Toronto branch office is inaccessible. What should you include in the recommendation?

an Azure file share and Azure File Sync

a Recovery Services vault and Azure Backup

an Azure file share and Azure File Sync

Azure blob containers and Azure File Sync

a Recovery Services vault and Windows Server Backup

You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service(AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines. The virtual machines and the AKS cluster will reside on the same virtual network. You need to design a solution to expose the microservices to the consumer apps. The solution must meet the following requirements:• Ingress access to the microservices must be restricted to a single private IP address and protected by using mutual TLS authentication.• The number of incoming microservice calls must be rate-limited.• Costs must be minimized.What should you include in the solution?

Azure API Management Premium tier with virtual network connection

Azure Front Door with Azure Web Application Firewall (WAF)

Azure API Management Standard tier with a service endpoint

Azure App Gateway with Azure Web Application Firewall (WAF)

You have .NeT web service named service1 that has the following requirements.Must read and write to the local file system.Must write to the Windows Application event log.You need to recommend a solution to host Service1 in Azure . The solution must meet the following requirements:Minimize maintenance overhead.Minimize costs.What should you include in the recommendation?

an Azure virtual machine scale set

an App Service Environment (ASE)

Microsoft AZ-305 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

You have an Azure subscription that contains a custom application named Application was developed by an external company named fabric, Ltd. Developers at Fabrikam were assigned role-based access control (RBAV) permissions to the Application components. All users are licensed for the Microsoft 365 E5 plan.

You need to recommends a solution to verify whether the Faricak developers still require permissions to Application1. The solution must the following requirements. * To the manager of the developers, send a monthly email message that lists the access permissions to Application1. * If the manager does not verify access permission, automatically revoke that permission.

* Minimize development effort.

What should you recommend?

In Azure Active Directory (AD) Privileged Identity Management, create a custom role assignment for the Application1 resources

Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet

Create an Azure Automation runbook that runs the Get-AzureRmRoleAssignment cmdlet

In Azure Active Directory (Azure AD), create an access review of Application1

Comment (0)

Microsoft AZ-305 Practice Test 1

Question

Microsoft AZ-305 Practice Tests

Practice Tests