ExamGecko
Home Home / Microsoft / AZ-305

Microsoft AZ-305 Practice Test - Questions Answers, Page 3

Question list
Search
Search

List of questions

Search

Related questions











You plan to move a web application named App1 from an on-premises data center to Azure.

App1 depends on a custom COM component that is installed on the host server.

You need to recommend a solution to host App1 in Azure. The solution must meet the following requirements:

App1 must be available to users if an Azure data center becomes unavailable.

Costs must be minimized.

What should you include in the recommendation?

A.
In two Azure regions, deploy a load balancer and a virtual machine scale set.
A.
In two Azure regions, deploy a load balancer and a virtual machine scale set.
Answers
B.
In two Azure regions, deploy a Traffic Manager profile and a web app.
B.
In two Azure regions, deploy a Traffic Manager profile and a web app.
Answers
C.
In two Azure regions, deploy a load balancer and a web app.
C.
In two Azure regions, deploy a load balancer and a web app.
Answers
D.
Deploy a load balancer and a virtual machine scale set across two availability zones.
D.
Deploy a load balancer and a virtual machine scale set across two availability zones.
Answers
Suggested answer: D

Explanation:

(https://docs.microsoft.com/en-us/dotnet/azure/migration/app-service#com-and-com-components)Azure App Service does not allow the registration of COM components on the platform. If your appmakes use of any COM components, these need to be rewritten in managed code and deployed withthe site or application. https://docs.microsoft.com/en-us/dotnet/azure/migration/app-service"Azure App Service with Windows Containers If your app cannot be migrated directly to App Service,consider App Service using Windows Containers, which enables usage of the GAC, COM components,MSIs, full access to .NET FX APIs, DirectX, and more."

You have an Azure subscription that contains a Basic Azure virtual WAN named Virtual/WAN1 and the virtual hubs shown in the following table.

You have an ExpressRoute circuit in the US East region.

You need to create an ExpressRoute association to VirtualWAN1.

What should you do first?

A.
Upgrade VirtualWAN1 to Standard.
A.
Upgrade VirtualWAN1 to Standard.
Answers
B.
Create a gateway on Hub1.
B.
Create a gateway on Hub1.
Answers
C.
Create a hub virtual network in US East.
C.
Create a hub virtual network in US East.
Answers
D.
Enable the ExpressRoute premium add-on.
D.
Enable the ExpressRoute premium add-on.
Answers
Suggested answer: A

Explanation:

US East and US West are in the same geopolitical region so there is no need for enabling ExpressRoute premium add-on https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wanabout# basicstandard The current config of virtual WAN is only Basic as given, so it can connect to only site to site VPN, to connect to express route it needs to be upgraded from basic to standard. https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about

https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about

You have an Azure subscription that contains a storage account.

An application sometimes writes duplicate files to the storage account.

You have a PowerShell script that identifies and deletes duplicate files in the storage account.

Currently, the script is run manually after approval from the operations manager.

You need to recommend a serverless solution that performs the following actions:

Runs the script once an hour to identify whether duplicate files exist Sends an email notification to the operations manager requesting approval to delete the duplicate files Processes an email response from the operations manager specifying whether the deletion was approved Runs the script if the deletion was approved What should you include in the recommendation?

A.
Azure Logic Apps and Azure Functions
A.
Azure Logic Apps and Azure Functions
Answers
B.
Azure Pipelines and Azure Service Fabric
B.
Azure Pipelines and Azure Service Fabric
Answers
C.
Azure Logic Apps and Azure Event Grid
C.
Azure Logic Apps and Azure Event Grid
Answers
D.
Azure Functions and Azure Batch
D.
Azure Functions and Azure Batch
Answers
Suggested answer: A

Explanation:

You can schedule a powershell script with Azure Logic Apps.

When you want to run code that performs a specific job in your logic apps, you can create your own function by using Azure Functions. This service helps you create Node.js, C#, and F# functions so you don't have to build a complete app or infrastructure to run code. You can also call logic apps from inside Azure functions. Azure Functions provides serverless computing in the cloud and is useful for performing tasks such as these examples:

Reference:

https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-azure-functions

Your company has the infrastructure shown in the following table.

The on-premises Active Directory domain syncs to Azure Active Directory (Azure AD).

Server1 runs an application named Appl that uses LDAP queries to verify user identities in the onpremises Active Directory domain. You plan to migrate Server1 to a virtual machine in Subscription1.

A company security policy states that the virtual machines and services deployed to Subscription1 must be prevented from accessing the on-premises network. You need to recommend a solution to ensure that Appl continues to function after the migration. The solution must meet the security policy. What should you include in the recommendation?

A.
Azure AD Domain Services (Azure AD DS)
A.
Azure AD Domain Services (Azure AD DS)
Answers
B.
an Azure VPN gateway
B.
an Azure VPN gateway
Answers
C.
the Active Directory Domain Services role on a virtual machine
C.
the Active Directory Domain Services role on a virtual machine
Answers
D.
Azure AD Application Proxy
D.
Azure AD Application Proxy
Answers
Suggested answer: A

Explanation:

https://docs.microsoft.com/en-us/azure/active-directory-domain-services/overviewAzure Active Directory Domain Services (Azure AD DS) provides managed domain services such asdomain join, group policy, lightweight directory access protocol (LDAP), and Kerberos/NTLMauthenticationAzure AD Domain Services (Azure AD DS) - This one could work since AAD DS will bring in the existingaccounts from Azure AD which in turn are synchronised from on-premise AD over AD connect.

However, you would probably need to reconfigure the app and update the LDAP connection Azure Active Directory (Azure AD) supports LDAP Authentication via Azure AD Domain Services (AD DS). https://docs.microsoft.com/en-us/azure/ active-directory/fundamentals/auth-ldap

https://docs.microsoft.com/en-us/azure/active-directory-domain-services/synchronization

You need to design a solution that will execute custom C# code in response to an event routed to Azure Event Grid. The solution must meet the following requirements:

The executed code must be able to access the private IP address of a Microsoft SQL Server instance that runs on an Azure virtual machine. Costs must be minimized.

What should you include in the solution?

A.
Azure Logic Apps in the integrated service environment
A.
Azure Logic Apps in the integrated service environment
Answers
B.
Azure Functions in the Dedicated plan and the Basic Azure App Service plan
B.
Azure Functions in the Dedicated plan and the Basic Azure App Service plan
Answers
C.
Azure Logic Apps in the Consumption plan
C.
Azure Logic Apps in the Consumption plan
Answers
D.
Azure Functions in the Consumption plan
D.
Azure Functions in the Consumption plan
Answers
Suggested answer: D

Explanation:

When you create a function app in Azure, you must choose a hosting plan for your app. There are three basic hosting plans available for Azure Functions: Consumption plan, Premium plan, and Dedicated (App Service) plan. For the Consumption plan, you don't have to pay for idle VMs or reserve capacity in advance.

Connect to private endpoints with Azure Functions

As enterprises continue to adopt serverless (and Platform-as-a-Service, or PaaS) solutions, they often need a way to integrate with existing resources on a virtual network. These existing resources could be databases, file storage, message queues or event streams, or REST APIs.

Reference:

https://docs.microsoft.com/en-us/azure/azure-functions/functions-scale

https://techcommunity.microsoft.com/t5/azure-functions/connect-to-private-endpoints-with-azurefunctions/ba-p/1426615

Reference:

https://docs.microsoft.com/en-us/azure/azure-functions/functions-scale#hosting-plans-comparison

You have an on-premises network and an Azure subscription. The on-premises network has several branch offices. A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server.

Users access the shared files on VM1 from all the offices.

You need to recommend a solution to ensure that the users can access the shares files as quickly as possible if the Toronto branch office is inaccessible. What should you include in the recommendation?

A.
a Recovery Services vault and Azure Backup
A.
a Recovery Services vault and Azure Backup
Answers
B.
an Azure file share and Azure File Sync
B.
an Azure file share and Azure File Sync
Answers
C.
Azure blob containers and Azure File Sync
C.
Azure blob containers and Azure File Sync
Answers
D.
a Recovery Services vault and Windows Server Backup
D.
a Recovery Services vault and Windows Server Backup
Answers
Suggested answer: B

Explanation:

Use Azure File Sync to centralize your organization's file shares in Azure Files, while keeping the flexibility, performance, and compatibility of an on-premises file server. Azure File Sync transforms Windows Server into a quick cache of your Azure file share.

You need an Azure file share in the same region that you want to deploy Azure File Sync.

Reference:

https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide

You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service

(AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines. The virtual machines and the AKS cluster will reside on the same virtual network. You need to design a solution to expose the microservices to the consumer apps. The solution must meet the following requirements:

• Ingress access to the microservices must be restricted to a single private IP address and protected by using mutual TLS authentication.

• The number of incoming microservice calls must be rate-limited.

• Costs must be minimized.

What should you include in the solution?

A.
Azure API Management Premium tier with virtual network connection
A.
Azure API Management Premium tier with virtual network connection
Answers
B.
Azure Front Door with Azure Web Application Firewall (WAF)
B.
Azure Front Door with Azure Web Application Firewall (WAF)
Answers
C.
Azure API Management Standard tier with a service endpoint
C.
Azure API Management Standard tier with a service endpoint
Answers
D.
Azure App Gateway with Azure Web Application Firewall (WAF)
D.
Azure App Gateway with Azure Web Application Firewall (WAF)
Answers
Suggested answer: A

Explanation:

One option is to deploy APIM (API Management) inside the cluster VNet.

The AKS cluster and the applications that consume the microservices might reside within the same VNet, hence there is no reason to expose the cluster publicly as all API traffic will remain within the VNet. For these scenarios, you can deploy API Management into the cluster VNet. API Management Premium tier supports VNet deployment.

Reference:

https://docs.microsoft.com/en-us/azure/api-management/api-management-kubernetes

You have .NeT web service named service1 that has the following requirements.

Must read and write to the local file system.

Must write to the Windows Application event log.

You need to recommend a solution to host Service1 in Azure . The solution must meet the following requirements:

Minimize maintenance overhead.

Minimize costs.

What should you include in the recommendation?

A.
an Azure App Service web app
A.
an Azure App Service web app
Answers
B.
an Azure virtual machine scale set
B.
an Azure virtual machine scale set
Answers
C.
an App Service Environment (ASE)
C.
an App Service Environment (ASE)
Answers
D.
an Azure Functions app
D.
an Azure Functions app
Answers
Suggested answer: A

Explanation:

https://social.msdn.microsoft.com/Forums/vstudio/en-US/294b9e3e-e89c-4095-b8d0-ee1646e77268/writing-to-local-file-system-from-web-app-inazure?forum=windowsazurewebsitespreview

You have the Azure resources shown in the following table.

You need to deploy a new Azure Firewall policy that will contain mandatory rules for all Azure Firewall deployments. The new policy will be configured as a parent policy for the existing policies. What is the minimum number of additional Azure Firewall policies you should create?

A.
0
A.
0
Answers
B.
1
B.
1
Answers
C.
2
C.
2
Answers
D.
3
D.
3
Answers
Suggested answer: B

Explanation:

Firewall policies work across regions and subscriptions.

Place all your global configurations in the parent policy.

Note: Policies can be created in a hierarchy. You can create a parent/global policy that will contain configurations and rules that will apply to all/a number of firewall instances. Then you create a child policy that inherits from the parent; note that rules changes in the parent instantly appear in the child. The child is associated with a firewall and applies configurations/rules from the parent policy and the child policy instantly to the firewall.

Reference:

https://aidanfinn.com/?p=22006

Your company has an app named App1 that uses data from the on-premises Microsoft SQL Server databases shown in the following table.

App1 and the data are used on the first day of the month only. The data is not expected to grow more than 3% each year. The company is rewriting App1 as an Azure web app and plans to migrate all the data to Azure.

You need to migrate the data to Azure SQL Database. The solution must minimize costs.

Which service tier should you use?

A.
vCore-based Business Critical
A.
vCore-based Business Critical
Answers
B.
vCore-based General Purpose
B.
vCore-based General Purpose
Answers
C.
DTU-based Standard
C.
DTU-based Standard
Answers
D.
DTU-based Basic
D.
DTU-based Basic
Answers
Suggested answer: B

Explanation:

DTU-based Standard supports databases up to 1 TB in size.

Reference:

https://docs.microsoft.com/en-us/azure/azure-sql/database/service-tiers-dtu

Total 299 questions
Go to page: of 30