ExamGecko
Home Home / Microsoft / AZ-305

Microsoft AZ-305 Practice Test - Questions Answers, Page 8

Question list
Search
Search

List of questions

Search

Related questions











DRAG DROP

You plan to import data from your on-premises environment to Azure. The data Is shown in the following table.

What should you recommend using to migrate the data? To answer, drag the appropriate tools to the correct data sources-Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.


Question 71
Correct answer: Question 71

Explanation:

https://docs.microsoft.com/en-us/azure/dms/tutorial-sql-server-to-azure-sql

https://docs.microsoft.com/en-us/azure/cosmos-db/import-data

DRAG DROP

You have an on-premises network that uses an IP address space of 172.16.0.0/16. You plan to deploy 25 virtual machines to a new Azure subscription. You identify the following technical requirements:

• All Azure virtual machines must be placed on the same subnet named Subnet1.

• All the Azure virtual machines must be able to communicate with all on-premises servers.

• The servers must be able to communicate between the on-premises network and Azure by using a site-to-site VPN. You need to recommend a subnet design that meets the technical requirements.

What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnets. Each network address may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content

NOTE: Each correct selection is worth one point.


Question 72
Correct answer: Question 72

HOTSPOT

You have an Azure web app named App1 and an Azure key vault named KV1.

App1 stores database connection strings in KV1.

App1 performs the following types of requests to KV1:

Get

List

Wrap

Delete

Unwrap

Backup

Decrypt

Encrypt

You are evaluating the continuity of service for App1.

You need to identify the following if the Azure region that hosts KV1 becomes unavailable:

To where will KV1 fail over?

During the failover, which request type will be unavailable?

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 73
Correct answer: Question 73

Explanation:

Box 1: A server in the same paired region

The contents of your key vault are replicated within the region and to a secondary region at least 150 miles away, but within the same geography to maintain high durability of your keys and secrets. Box 2: Delete

During failover, your key vault is in read-only mode. Requests that are supported in this mode are:

List certificates

Get certificates

List secrets

Get secrets

List keys

Get (properties of) keys

Encrypt

Decrypt

Wrap

Unwrap

Verify

Sign

Backup

Reference:

https://docs.microsoft.com/en-us/azure/key-vault/general/disaster-recovery-guidance

HOTSPOT

You have an on-premises file server that stores 2 TB of data files.

You plan to move the data files to Azure Blob Storage In the West Europe Azure region, You need to recommend a storage account type to store the data files and a replication solution for the storage account. The solution must meet the following requirements:

• Be available if a single Azure datacenter fails.

• Support storage tiers.

• Minimize cost.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 74
Correct answer: Question 74

Explanation:

Account Type: StorageV2

Replication solution: Zone-redundant storage (ZRS)

https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy

https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy#supported-azurestorage-services https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview#types-ofstorage-accountsData must be available if a single Azure datacenter fails. It means the storage account must supportZRS replication. Also, solution should support storage tiers. Only General-purpose V2 supports ZRSand storage tiers.

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers

HOTSPOT

Your company has two on-premises sites in New York and Los Angeles and Azure virtual networks in the East US Azure region and the West US Azure region. Each on-premises site has Azure ExpressRoute circuits to both regions. You need to recommend a solution that meets the following requirements:

Outbound traffic to the Internet from workloads hosted on the virtual networks must be routed through the closest available on-premises site. If an on-premises site fails, traffic from the workloads on the virtual networks to the Internet must reroute automatically to the other site. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Question 75
Correct answer: Question 75

Explanation:

An on-premises network gateway can exchange routes with an Azure virtual network gateway using the border gateway protocol (BGP). Using BGP with an Azure virtual network gateway is dependent on the type you selected when you created the gateway. If the type you selected were: ExpressRoute:

You must use BGP to advertise on-premises routes to the Microsoft Edge router. You cannot create user-defined routes to force traffic to the ExpressRoute virtual network gateway if you deploy a virtual network gateway deployed as type:

ExpressRoute. You can use user-defined routes for forcing traffic from the Express Route to, for example, a Network Virtual Appliance. https://docs.microsoft.com/ja-jp/azure/expressroute/designing-for-disaster-recovery-withQuestions& Answers PDF P-91expressroute-privatepeering https://docs.microsoft.com/en-us/azure/expressroute/expressroute-optimize-routing#suboptimalrouting-from-customer-to-microsoft

HOTSPOT

You deploy several Azure SQL Database instances.

You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.


Question 76
Correct answer: Question 76

Explanation:

In the exhibit, the SQLInsights data is configured to be stored in Azure Log Analytics for 90 days. However, the question is asking for the "maximum" amount of time that the data can be stored which is 730 days.

HOTSPOT

You have an Azure App Service web app that uses a system-assigned managed identity.

You need to recommend a solution to store their settings of the web app as secrets in an Azure key vault The solution must meet the following requirements:

• Minimize changes to the app code,

• Use the principle of least privilege.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.


Question 77
Correct answer: Question 77

HOTSPOT

You need to design an Azure policy that will implement the following functionality:

• For new resources, assign tags and values that match the tags and values of the resource group to which the resources are deployed.

• For existing resources, identify whether the tags and values match the tags and values of the resource group that contains the resources.

• For any non-compliant resources, trigger auto-generated remediation tasks to create missing tags and values. The solution must use the principle of least privilege.

What should you include in the design? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Question 78
Correct answer: Question 78

Explanation:

Box 1: Modify

Modify is used to add, update, or remove properties or tags on a resource during creation or update. A common example is updating tags on resources such as costCenter. Existing non-compliant resources can be remediated with a remediation task. A single Modify rule can have any number of operations. Box 2: A managed identity with the Contributor role

Managed identity

How remediation security works: When Azure Policy runs the template in the deployIfNotExists policy definition, it does so using a managed identity. Azure Policy creates a managed identity for each assignment, but must have details about what roles to grant the managed identity.

Contributor role

The Contributor role grants the required access to apply tags to any entity.

Reference:

https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects

https://docs.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources

https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects#modify

HOTSPOT

You have an Azure subscription that contains the resources shown in the following table.

You create an Azure SQL database named DB1 that is hosted in the East US region.

To DB1, you add a diagnostic setting named Settings1. Settings1 archives SQLInsights to storage1 and sends SQLInsights to Workspace1. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selections is worth one point.


Question 79
Correct answer: Question 79

Explanation:

Box 1: Yes

Box 2: Yes

Box 3: Yes

For more information on Azure SQL diagnostics , you can visit the below link

https://docs.microsoft.com/en-us/azure/azure-sql/database/metrics-diagnostic-telemetry-loggingstreaming-export-configure

HOTSPOT

Your company has the divisions shown in the following table.

You plan to deploy a custom application to each subscription. The application will contain the following:

A resource group

An Azure web app

Custom role assignments

An Azure Cosmos DB account

You need to use Azure Blueprints to deploy the application to each subscription.

What is the minimum number of objects required to deploy the application? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Question 80
Correct answer: Question 80

Explanation:

Box 1: 2

One management group for East, and one for West.

When creating a blueprint definition, you'll define where the blueprint is saved. Blueprints can be saved to a management group or subscription that you have Contributor access to. If the location is a management group, the blueprint is available to assign to any child subscription of that management group.

Box 2: 2

Box 3: 4

One assignment for each subscription.

"Assigning a blueprint definition to a management group means the assignment object exists at the management group. The deployment of artifacts still targets a subscription. To perform a management group assignment, the Create Or Update REST API must be used and the request body must include a value for properties.scope to define the target subscription." https://docs.microsoft.com/en-us/azure/governance/blueprints/overview#blueprint-assignment

Total 299 questions
Go to page: of 30