ExamGecko
Home Home / Microsoft / AZ-305

Microsoft AZ-305 Practice Test - Questions Answers, Page 27

Question list
Search
Search

List of questions

Search

Related questions











Your company has IT, security, and finance departments.

You need to implement a new Azure deployment that will include multiple Azure subscriptions and management groups. The solution must meet the following requirements:

* Ensure that all policies are assigned at the management group level.

* Ensure that all the finance department resources have specific encryption policies applied.

* Ensure that only users in the IT department can create virtual machines in any Azure region.

* Ensure that users in the finance department can create virtual machines in only the East US Azure region.

What is the minimum number of management groups you can create for the planned deployment?

A.

1

A.

1

Answers
B.

2

B.

2

Answers
C.

3

C.

3

Answers
D.

4

D.

4

Answers
Suggested answer: B

You have multiple on-premises locations. The locations host loT endpoints that generate real-time telemetry data.

You have an Azure subscription.

You need to process the telemetry data and provide real-time insights. The solution must minimize development effort.

What should you use?

A.

Azure Data Factory

A.

Azure Data Factory

Answers
B.

Azure Data Lake Analytics

B.

Azure Data Lake Analytics

Answers
C.

Log Analytics

C.

Log Analytics

Answers
D.

Azure Stream Analytics

D.

Azure Stream Analytics

Answers
Suggested answer: D

You have an Azure subscription.

You need to implement a policy to ensure that all new resource groups include a value for a tag named Department.

The solution must ensure that if a value is NOT entered for the Department tag, a resource group is created.

Which effect should you use?

A.

deny

A.

deny

Answers
B.

modify

B.

modify

Answers
C.

manual

C.

manual

Answers
D.

deploylfNotExists

D.

deploylfNotExists

Answers
Suggested answer: B

HOTSPOT

You have the Azure management groups shown in the following table.

You have the Azure subscriptions shown in the following table.

You have the virtual machines shown in the following table.

You have the resource groups shown in the following table.

You have the Azure policies shown in the following table.

You perform the following actions:

* Assign PA1 to MG1.

* Modify PA2 and configure the resource selector to include only Microsoft.Compute/virtualMachines in the East US Azure region.

* Modify PA3 and add an exclusion for Sub1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.


Question 264
Correct answer: Question 264

You plan to deploy an Azure BareMetal Infrastructure instance that will host the data tier of a business-critical workload. The application tier of the workload will be hosted on Azure virtual machines.

You need to configure the virtual machines to minimize network latency between the application tier and the data tier.

What should you use?

A.

an availability zone

A.

an availability zone

Answers
B.

ExpressRoute FastPath

B.

ExpressRoute FastPath

Answers
C.

an availability set

C.

an availability set

Answers
D.

a proximity placement group

D.

a proximity placement group

Answers
Suggested answer: D

HOTSPOT

You have the Azure resources shown in the following table.

You need to recommend a virtual network management solution that uses Azure Virtual Network Manager. The solution must meet the following requirements:

* Minimize the number of network managers.

* Minimize administrative effort when assigning the network group membership.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 266
Correct answer: Question 266

HOTSPOT

You need to recommend a solution to integrate Azure Cosmos DB and Azure Synapse. The solution must meet the following requirements:

* Traffic from an Azure Synapse workspace to the Azure Cosmos D8 account must be sent via the Microsoft backbone network.

* Traffic from the Azure Synapse workspace to the Azure Cosmos DB account must NOT be routed over the internet.

* Implementation effort must be minimized.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 267
Correct answer: Question 267

You plan to migrate App1 to Azure.

You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 dat a. The solution must meet the security and compliance requirements. What should you include in the recommendation?

A.
a private endpoint
A.
a private endpoint
Answers
B.
a service endpoint that has a service endpoint policy
B.
a service endpoint that has a service endpoint policy
Answers
C.
Azure public peering for an ExpressRoute circuit
C.
Azure public peering for an ExpressRoute circuit
Answers
D.
Microsoft peering for an ExpressRoute circuit
D.
Microsoft peering for an ExpressRoute circuit
Answers
Suggested answer: A

Explanation:

Private Endpoint securely connect to storage accounts from on-premises networks that connect to the VNet using VPN or ExpressRoutes with private-peering. Private Endpoint also secure your storage account by configuring the storage firewall to block all connections on the public endpoint for the storage service. https://docs.microsoft.com/en-us/azure/expressroute/expressroute-faqs#microsoft-peering

You plan to migrate App1 to Azure. The solution must meet the authentication and authorization requirements. Which type of endpoint should App1 use to obtain an access token?

A.
Azure Instance Metadata Service (IMDS)
A.
Azure Instance Metadata Service (IMDS)
Answers
B.
Azure AD
B.
Azure AD
Answers
C.
Azure Service Management
C.
Azure Service Management
Answers
D.
Microsoft identity platform
D.
Microsoft identity platform
Answers
Suggested answer: D

Explanation:

Scenario: To access the resources in Azure, App1 must use the managed identity of the virtual machines that will host the app. Managed identities provide an identity for applications to use when connecting to resources that support Azure Active Directory (Azure AD) authentication. Applications may use the managed identity to obtain Azure AD tokens.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azureresources/overview

You migrate App1 to Azure. You need to ensure that the data storage for App1 meets the security and compliance requirement What should you do?

A.
Create an access policy for the blob
A.
Create an access policy for the blob
Answers
B.
Modify the access level of the blob service.
B.
Modify the access level of the blob service.
Answers
C.
Implement Azure resource locks.
C.
Implement Azure resource locks.
Answers
D.
Create Azure RBAC assignments.
D.
Create Azure RBAC assignments.
Answers
Suggested answer: A

Explanation:

Scenario: Once App1 is migrated to Azure, you must ensure that new data can be written to the app, and the modification of new and existing data is prevented for a period of three years. As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have.

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

Total 299 questions
Go to page: of 30