Designing Microsoft Azure Infrastructure Solutions practice questions

1. Question 1 of 25

   DRAG DROP - You need to design an architecture to capture the creation of users and the assignment of roles. The captured data must be stored in Azure Cosmos DB. Which services should you include in the design? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer

   Explanation

   Box 1: Azure Event Hubs - You can route Azure Active Directory (Azure AD) activity logs to several endpoints for long term retention and data insights. The Event Hub is used for streaming. Box 2: Azure Function - Use an Azure Function along with a cosmos DB change feed, and store the data in Cosmos DB. Reference: https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-activity-logs-azure-monitor

   Adapted from community discussion by santi1975 · 2022-08-31 · 59 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Answer figure

   

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

   1. S

      santi1975

      2022-08-31

      59 upvotes

      Although may seem a bit surprising, seems correct: 1. Event Hub: You can export AD logs to an Azure Event Hub (even you can cherry picking which ones) https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/tutorial-azure-monitor-stream-logs-to-event-hub 2. Azure Function: You easily create a serverless function to read events from the Event Hub and store them in a CosmosDB. https://docs.microsoft.com/en-us/azure/azure-functions/functions-event-hub-cosmos-db?tabs=bash

   2. N

      nkccorp

      2022-12-29

      17 upvotes

      While Azure Event Hubs can be used to capture and process events, it is generally not the best choice for capturing events related to user creation and role assignment. This is because Azure Event Hubs is primarily designed for large-scale, real-time data streaming, and is not well-suited for capturing individual events or triggering downstream actions.

   3. T

      Thanveer

      2024-10-23

      7 upvotes

      Azure Event Grid -> Azure Functions -> Cosmos DB. Azure event grid push the data Azure event hub pull the data these are the difference and key words

   4. S

      Spikeone

      2024-03-26

      5 upvotes

      I'd sadly agree with event hubs - the link often posted here: https://learn.microsoft.com/en-us/entra/identity/monitoring-health/howto-stream-logs-to-event-hub?tabs=splunk If you follow the steps under Stream logs to an event hub: Browse to Identity > Monitoring & health > Diagnostic settings. You can also select Export Settings from either the Audit Logs or Sign-ins page. There are only 4 options as follows: * Send to Log Analytics workspace * Archive to a storage account * Stream to an event hub * Send to partner solution So, no grid I guess.

2. Question 2 of 25

   Select 2

   You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain. You have an internal web app named WebApp1 that is hosted on-premises. WebApp1 uses Integrated Windows authentication. Some users work remotely and do NOT have VPN access to the on-premises network. You need to provide the remote users with single sign-on (SSO) access to WebApp1. Which two features should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AAzure AD Application Proxy
   • BAzure AD Privileged Identity Management (PIM)
   • CConditional Access policies
   • DAzure Arc
   • EAzure AD enterprise applications
   • FAzure Application Gateway

   Show answer

   Correct answer: A, E

   How others answered

   • AE98%

   Explanation

   It's required to download connector under (Application Proxy) and create a new application under (Enterprise Application), however for (Pre Authentication) option, you can choose "Passthrough" or "Azure Active Directory", and both will work, but it's recommended to use "Azure Active Directory" so you can take advantage of using conditional access and MFA. Answer is (A) & (E) as they're both required as part of the solution to work, where as (C) is just an optional feature. Reference: https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application

   Adapted from community discussion by itmaster · 2024-09-19 · 33 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

   1. T

      trap84

      2021-12-10

      70 upvotes

      A&E is the correct answer. Azure App proxy for connecting without vpn and Enterprise App for SSO

   2. I

      itmaster

      2024-09-19

      33 upvotes

      It's required to download connector under (Application Proxy) and create a new application under (Enterprise Application), however for (Pre Authentication) option, you can choose "Passthrough" or "Azure Active Directory", and both will work, but it's recommended to use "Azure Active Directory" so you can take advantage of using conditional access and MFA. Answer is (A) & (E) as they're both required as part of the solution to work, where as (C) is just an optional feature. Reference: https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application

   3. N

      NotMeAnyWay

      2024-09-21

      Selected A, E6 upvotes

      To provide remote SSO access to an on-premises web app named WebApp1 with Integrated Windows authentication: - Use Azure AD Application Proxy to securely publish on-premises web apps to the internet without the need for a VPN. - Add WebApp1 as an Azure AD enterprise application to enable Azure AD to provide authentication and authorization for the app. - Conditional Access policies, Azure AD PIM, Azure Arc, and Azure Application Gateway are not suitable for this task. - Conditional Access policies allow defining conditions for access to Azure AD-connected apps, but do not provide a solution for remote SSO access to an on-premises web app. - Azure AD PIM is used for managing access to Azure resources, but not for remote SSO access to an on-premises web app. - Azure Arc is a hybrid cloud management solution, and Azure Application Gateway is a web traffic load balancer, neither are relevant to providing remote SSO access to an on-premises web app.

   4. S

      stonwall12

      2024-09-21

      5 upvotes

      Correct Answer - A: Azure AD Application Proxy Azure AD Application Proxy provides remote access and single sign-on (SSO) capabilities to on-premises web applications. The internal web app can be published to Azure AD, and users can access the app outside the company network. https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy Correct Answer - E: Azure AD enterprise applications Azure AD enterprise applications are essentially app registrations in Azure AD for cloud-based and on-premises applications. This is where we can manage authentication requirements and assign user access. https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/add-application-portal Just to clarify, the 'Application Proxy' handles the connection to the on-premises network, and the' Enterprise Applications' manages the authentication and authorization for the app.

3. Question 3 of 25

   A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that is integrated with Microsoft 365 and an Azure subscription. Contoso has an on-premises identity infrastructure. The infrastructure includes servers that run Active Directory Domain Services (AD DS) and Azure AD Connect. Contoso has a partnership with a company named Fabrikam. Inc. Fabrikam has an Active Directory forest and a Microsoft 365 tenant. Fabrikam has the same on- premises identity infrastructure components as Contoso. A team of 10 developers from Fabrikam will work on an Azure solution that will be hosted in the Azure subscription of Contoso. The developers must be added to the Contributor role for a resource group in the Contoso subscription. You need to recommend a solution to ensure that Contoso can assign the role to the 10 Fabrikam developers. The solution must ensure that the Fabrikam developers use their existing credentials to access resources What should you recommend?

   • AIn the Azure AD tenant of Contoso. create cloud-only user accounts for the Fabrikam developers.
   • BConfigure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.
   • CConfigure an organization relationship between the Microsoft 365 tenants of Fabrikam and Contoso.
   • DIn the Azure AD tenant of Contoso, create guest accounts for the Fabnkam developers.

   Show answer

   Correct answer: D

   How others answered

   • D95%

   Explanation

   Answer is correct: https://docs.microsoft.com/en-us/azure/active-directory/external-identities/what-is-b2b Collaborate with any partner using their identities With Azure AD B2B, the partner uses their own identity management solution, so there is no external administrative overhead for your organization. Guest users sign in to your apps and services with their own work, school, or social identities. The partner uses their own identities and credentials, whether or not they have an Azure AD account. You don't need to manage external accounts or passwords. You don't need to sync accounts or manage account lifecycles.

   Adapted from community discussion by Gowind · 2022-09-02 · 32 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

   1. G

      Gowind

      2022-09-02

      Selected D32 upvotes

      Answer is correct: https://docs.microsoft.com/en-us/azure/active-directory/external-identities/what-is-b2b Collaborate with any partner using their identities With Azure AD B2B, the partner uses their own identity management solution, so there is no external administrative overhead for your organization. Guest users sign in to your apps and services with their own work, school, or social identities. The partner uses their own identities and credentials, whether or not they have an Azure AD account. You don't need to manage external accounts or passwords. You don't need to sync accounts or manage account lifecycles.

   2. Z

      zellck

      2023-02-26

      Selected D4 upvotes

      D is the answer. https://learn.microsoft.com/en-us/azure/active-directory/external-identities/what-is-b2b Azure Active Directory (Azure AD) B2B collaboration is a feature within External Identities that lets you invite guest users to collaborate with your organization. With B2B collaboration, you can securely share your company's applications and services with external users, while maintaining control over your own corporate data. Work safely and securely with external partners, large or small, even if they don't have Azure AD or an IT department.

   3. M

      MeisAdriano

      2024-10-27

      3 upvotes

      Why the other options aren't suitable: A. Create cloud-only user accounts: This would require the Fabrikam developers to manage separate sets of credentials, which is not ideal as it does not meet the requirement of using their existing credentials. B. Configure a forest trust: While this might be a viable solution for on-premises resources, it complicates the cloud environment and doesn’t directly address the requirement of integrating with Azure AD and Microsoft 365. C. Configure an organization relationship between the Microsoft 365 tenants: This can facilitate collaboration features but doesn't grant the granular access control needed to assign specific Azure roles like Contributor. Using guest accounts simplifies access management and ensures that the Fabrikam developers can use their existing credentials securely and efficiently.

   4. T

      Thanveer

      2024-12-01

      Selected D2 upvotes

      To ensure that the Fabrikam developers can use their existing credentials to access resources in the Contoso subscription and be assigned the Contributor role, you should create guest accounts for the Fabrikam developers in the Azure AD tenant of Contoso. So, the correct answer is D. In the Azure AD tenant of Contoso, create guest accounts for the Fabrikam developers. This approach leverages Azure AD B2B (Business-to-Business) collaboration, allowing external users to access resources in your Azure AD tenant using their existing credentials. This way, the Fabrikam developers can use their existing credentials to access the resources in the Contoso subscription.

4. Question 4 of 25

   Your company has the divisions shown in the following table.

   

   Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

   • AConfigure the Azure AD provisioning service.
   • BEnable Azure AD pass-through authentication and update the sign-in endpoint.
   • CUse Azure AD entitlement management to govern external users.
   • DConfigure Azure AD join.

   Show answer

   Correct answer: C

   How others answered

   • C100%

   Explanation

   Answer is C The app is single tenant authentication so users must be present in contoso directory. https://docs.microsoft.com/en-us/azure/active-directory/develop/single-and-multi-tenant-apps With Azure AD B2B, external users authenticate to their home directory, but have a representation in your directory. https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-external-users A is wrong because its to automate provisioning to third party SaaS app. https://docs.microsoft.com/en-us/azure/active-directory/app-provisioning/how-provisioning-works?source=recommendations B. is wrong because the application would need to switch to multi tenant.. https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-convert-app-to-be-multi-tenant

   Adapted from community discussion by Gowind · 2022-09-02 · 69 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

   1. G

      Gowind

      2022-09-02

      Selected C69 upvotes

      Answer is C The app is single tenant authentication so users must be present in contoso directory. https://docs.microsoft.com/en-us/azure/active-directory/develop/single-and-multi-tenant-apps With Azure AD B2B, external users authenticate to their home directory, but have a representation in your directory. https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-external-users A is wrong because its to automate provisioning to third party SaaS app. https://docs.microsoft.com/en-us/azure/active-directory/app-provisioning/how-provisioning-works?source=recommendations B. is wrong because the application would need to switch to multi tenant.. https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-convert-app-to-be-multi-tenant

   2. S

      Snownoodles

      2022-09-04

      Selected C14 upvotes

      C is correct https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-external-users IF App1 is multi-tenant application, A might be correct since you can provision users from other tenant to App1 and configure App1 to SSO with other tenants.

   3. Z

      zellck

      2023-02-16

      Selected C4 upvotes

      C is the answer. https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-overview#what-can-i-do-with-entitlement-management Here are some of capabilities of entitlement management: - Select connected organizations whose users can request access. When a user who isn't yet in your directory requests access, and is approved, they're automatically invited into your directory and assigned access. When their access expires, if they have no other access package assignments, their B2B account in your directory can be automatically removed.

   4. E

      Elton_Bicalho

      2022-09-17

      2 upvotes

      The Correct answer is C Entitlement management is an identity governance capability that enables organizations to manage identity and access lifecycle at scale by automating access request workflows, access assignments, reviews, and expiration. Entitlement management allows delegated non-admins to create access packages that external users from other organizations can request access to. One and multi-stage approval workflows can be configured to evaluate requests, and provision users for time-limited access with recurring reviews. Entitlement management enables policy-based provisioning and deprovisioning of external accounts. Note: Access Packages - An access package is the foundation of entitlement management. Access packages are groupings of policy-governed resources a user needs to collaborate on a project or do other tasks. For example, an access package might include: access to specific SharePoint sites. enterprise applications including your custom in-house and SaaS apps like Salesforce. Microsoft Teams. Microsoft 365 Groups. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/6-secure-access-entitlement-managment

5. Question 5 of 25

   You need to recommend a data storage strategy for WebApp1. What should you include in the recommendation?

   • Aan Azure virtual machine that runs SQL Server
   • Ba fixed-size DTU Azure SQL database
   • Can Azure SQL Database elastic pool
   • Da vCore-based Azure SQL database

   Show answer

   Correct answer: D

   How others answered

   • D83%

   Explanation

   vCore-based Azure SQL database -- because the case states they want to use Azure Hybrid Benefit licensing. You cannot utilize that with the DTU model.

   Adapted from community discussion by jellybiscuit · 2022-09-21 · 30 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

   1. J

      jellybiscuit

      2022-09-21

      30 upvotes

      vCore-based Azure SQL database -- because the case states they want to use Azure Hybrid Benefit licensing. You cannot utilize that with the DTU model.

   2. Z

      ziggy1117

      2023-12-11

      Selected D5 upvotes

      D. vCore-based SQL Requirement: Use existing on-premises licenses whenever possible You can only apply the Azure Hybrid licensing model when you choose a vCore-based purchasing model and the provisioned compute tier for your Azure SQL Database. Azure Hybrid Benefit isn't available for service tiers under the DTU-based purchasing model or for the serverless compute tier.

   3. K

      KarimaMaf

      2024-08-27

      6 upvotes

      First question of this test topics about if we need storage account everyone answer yes for azure sql MI migration now we're talking about azure sql DB

   4. J

      Jay_2pt0

      2022-11-05

      5 upvotes

      I certainly would agree with you if multiple databases, but I'm not seeing that reference.

6. Question 6 of 25

   You have 100 servers that run Windows Server 2012 R2 and host Microsoft SQL Server 2014 instances. The instances host databases that have the following characteristics: ✑ Stored procedures are implemented by using CLR. ✑ The largest database is currently 3 TB. None of the databases will ever exceed 4 TB. You plan to move all the data from SQL Server to Azure. You need to recommend a service to host the databases. The solution must meet the following requirements: ✑ Whenever possible, minimize management overhead for the migrated databases. ✑ Ensure that users can authenticate by using Azure Active Directory (Azure AD) credentials. ✑ Minimize the number of database changes required to facilitate the migration. What should you include in the recommendation?

   • AAzure SQL Database elastic pools
   • BAzure SQL Managed Instance
   • CAzure SQL Database single databases
   • DSQL Server 2016 on Azure virtual machines

   Show answer

   Correct answer: B

   How others answered

   • B100%

   Explanation

   Answer is B. Azure SQL Database (single or elastic) does not support CLR and we need to minimize management (managed vs no managed) https://docs.microsoft.com/en-us/azure/azure-sql/database/features-comparison?view=azuresql Both support 3gb size. https://docs.microsoft.com/en-us/azure/azure-sql/database/service-tier-general-purpose?view=azuresql

   Adapted from community discussion by Gowind · 2022-09-02 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

   1. R

      Redimido

      2022-02-11

      Selected B47 upvotes

      CLR is supported on SQL Managed instance and not on Azure SQL Database.

   2. S

      stonwall12

      2023-09-21

      8 upvotes

      Correct Answer - B: Azure SQL Managed Instance Given the requirements and the need for a seamless migration with reduced management overhead, Azure SQL Managed Instance is the most appropriate choice. Reduced Management Overhead - As a fully managed instance in Azure, it offloads many of the administrative tasks, such as backups, patching, and scaling. Azure AD Authentication - Natively supports Azure Active Directory (Azure AD) credentials, providing integrated and secure authentication. Minimal Database Changes - Offers broad compatibility with SQL Server features, ensuring a smooth transition from on-premises SQL Server 2014 environments. CLR Support - Supports Common Language Runtime (CLR) procedures, which is essential given that your stored procedures use CLR. Database Size - Capable of handling databases of significant size, ensuring it can accommodate databases that approach or exceed 3 TB.

   3. N

      NotMeAnyWay

      2023-03-21

      Selected B7 upvotes

      B. Azure SQL Managed Instance Azure SQL Managed Instance is a fully managed SQL Server instance hosted in Azure that supports most of the SQL Server features. It provides easier migration from on-premises SQL Server with minimal database changes, while also minimizing management overhead. Here's how Azure SQL Managed Instance meets your requirements: Minimizes management overhead: As a fully managed service, Azure SQL Managed Instance handles many administrative tasks like automatic backups, patching, and monitoring. Azure AD authentication: Azure SQL Managed Instance supports Azure Active Directory (Azure AD) authentication, which allows users to authenticate using their Azure AD credentials. Minimizes database changes: Since Azure SQL Managed Instance is highly compatible with SQL Server, migrating to it requires minimal changes to the databases. It supports features like CLR, which are not available in Azure SQL Database.

   4. G

      Gowind

      2022-09-02

      Selected B8 upvotes

      Answer is B. Azure SQL Database (single or elastic) does not support CLR and we need to minimize management (managed vs no managed) https://docs.microsoft.com/en-us/azure/azure-sql/database/features-comparison?view=azuresql Both support 3gb size. https://docs.microsoft.com/en-us/azure/azure-sql/database/service-tier-general-purpose?view=azuresql

7. Question 7 of 25

   You need to design a highly available Azure SQL database that meets the following requirements: ✑ Failover between replicas of the database must occur without any data loss. ✑ The database must remain available in the event of a zone outage. ✑ Costs must be minimized. Which deployment option should you use?

   • AAzure SQL Database Hyperscale
   • BAzure SQL Database Premium
   • CAzure SQL Database Basic
   • DAzure SQL Managed Instance General Purpose

   Show answer

   Correct answer: B

   How others answered

   • B100%

   Explanation

   Sept 25, 2023. There are 2 errors in jellybiscuit's comment: 1) the scenario calls for Zone redundancy (handle a zone outage). It does not require Geo redundancy 2) Managed Instances now allow Zone Redundant (ZRS), Geo Redundant (GRS), and Geo Zone Redundant (GZRS). It depends on the Region, but the scenario does not include a Region. https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/automated-backups-overview?view=azuresql So both MI & SQL DB Premium will work, but SQL DB premium is considerably less expensive. I tried both in the Azure Pricing Calculator (Zone redudant & different sizes). SQL DB Premium is always far cheaper than Managed Instance. Azure Pricing Calculator: https://azure.microsoft.com/en-us/pricing/calculator/

   Adapted from community discussion by AdventureChick · 2023-09-25 · 19 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

   1. J

      jellybiscuit

      2022-09-19

      Selected B21 upvotes

      I had a near-impossible time finding documentation for this, so I just went to my own portal and checked. SQL Database options that support Geo Redundancy vCore model - General Purpose (at additional cost) - Business Critical DTU model - Premium SQL MI does not support geo-redundancy at all.

   2. A

      AdventureChick

      2023-09-25

      19 upvotes

      Sept 25, 2023. There are 2 errors in jellybiscuit's comment: 1) the scenario calls for Zone redundancy (handle a zone outage). It does not require Geo redundancy 2) Managed Instances now allow Zone Redundant (ZRS), Geo Redundant (GRS), and Geo Zone Redundant (GZRS). It depends on the Region, but the scenario does not include a Region. https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/automated-backups-overview?view=azuresql So both MI & SQL DB Premium will work, but SQL DB premium is considerably less expensive. I tried both in the Azure Pricing Calculator (Zone redudant & different sizes). SQL DB Premium is always far cheaper than Managed Instance. Azure Pricing Calculator: https://azure.microsoft.com/en-us/pricing/calculator/

   3. G

      Gowind

      2022-09-02

      Selected B15 upvotes

      Answer is correct but explanation is wrong for C. You need General Purpose level as a minimum, not premium. https://docs.microsoft.com/en-us/azure/azure-sql/database/high-availability-sla?view=azuresql&tabs=azure-powershell NB: Zone-redundant configuration is not available in SQL Managed Instance. In SQL Database this feature is only available when the Gen5 hardware is selected.

   4. N

      NotMeAnyWay

      2023-03-22

      Selected B5 upvotes

      B. Azure SQL Database Premium To meet the requirements of a highly available Azure SQL database with no data loss during failover and availability during a zone outage, you should use Azure SQL Database Premium. The Premium tier provides built-in support for active geo-replication, which allows you to create readable secondary replicas in different regions, ensuring the database remains available in the event of a zone outage. Additionally, the Premium tier offers better performance and more resources compared to the Basic and General Purpose tiers, while Hyperscale, although highly scalable, can be more costly than the Premium tier.

8. Question 8 of 25

   You have an app named App1 that uses an on-premises Microsoft SQL Server database named DB1. You plan to migrate DB1 to an Azure SQL managed instance. You need to enable customer managed Transparent Data Encryption (TDE) for the instance. The solution must maximize encryption strength. Which type of encryption algorithm and key length should you use for the TDE protector?

   • ARSA 3072
   • BAES 256
   • CRSA 4096
   • DRSA 2048

   Show answer

   Correct answer: A

   How others answered

   • A90%

   Explanation

   A. RSA 3072 RSA 3072 provides a higher level of encryption strength compared to RSA 2048. While RSA 4096 offers even stronger encryption, it is not supported by Azure SQL Database and Azure SQL Managed Instance for TDE protectors. By choosing RSA 3072 for the TDE protector, you ensure strong encryption for your Azure SQL Managed Instance while complying with the platform's requirements. This will help protect sensitive data and maintain compliance with relevant security standards and regulations.

   Adapted from community discussion by NotMeAnyWay · 2023-03-22 · 27 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

   1. N

      NotMeAnyWay

      2023-03-22

      Selected A27 upvotes

      A. RSA 3072 RSA 3072 provides a higher level of encryption strength compared to RSA 2048. While RSA 4096 offers even stronger encryption, it is not supported by Azure SQL Database and Azure SQL Managed Instance for TDE protectors. By choosing RSA 3072 for the TDE protector, you ensure strong encryption for your Azure SQL Managed Instance while complying with the platform's requirements. This will help protect sensitive data and maintain compliance with relevant security standards and regulations.

   2. W

      wdjonz

      2023-05-12

      9 upvotes

      The Answer is A and here is why... Per https://learn.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-tde-overview?view=azuresql&tabs=azure-portal, if the TDE uses the system managed key, it uses a built in certificate for encryption, hence AES 256 if the TDE uses a customer managed key, then it uses an asymmetric RSA key at 2048 or 3072 And since the question says TDE is using the customer managed key... the answer is A Viola!

   3. S

      study_for_azure

      2023-02-07

      5 upvotes

      Per following contents in https://learn.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-byok-overview?view=azuresql#requirements-for-configuring-tde-protector To provide Azure SQL customers with two layers of encryption of data at rest, infrastructure encryption (using AES-256 encryption algorithm) with platform managed keys is being rolled out. This provides an addition layer of encryption at rest along with TDE with customer-managed keys, which is already available. ASE is platform managed key, this question is asking for customer managed keys, for now only RSA is qualified.

   4. Z

      zellck

      2023-02-19

      Selected A5 upvotes

      A is the answer. https://learn.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-byok-overview?view=azuresql#requirements-for-configuring-tde-protector TDE protector can only be an asymmetric, RSA, or RSA HSM key. The supported key lengths are 2048 bytes and 3072 bytes.

9. Question 9 of 25

   Select 2

   You have an Azure subscription that contains an Azure Blob Storage account named store1. You have an on-premises file server named Server1 that runs Windows Server 2016. Server1 stores 500 GB of company files. You need to store a copy of the company files from Server1 in store1. Which two possible Azure services achieve this goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • Aan Azure Logic Apps integration account
   • Ban Azure Import/Export job
   • CAzure Data Factory
   • Dan Azure Analysis services On-premises data gateway
   • Ean Azure Batch account

   Show answer

   Correct answer: B, C

   How others answered

   • BC98%

   Explanation

   A. an Azure Logic Apps integration account no, this is an integration service with visual flows with If-Then style logic. It does not support a way to import data from on-premise to blobstorage B. an Azure Import/Export job Agree, with other people here. C. Azure Data Factory Agree, is a way of importing data, but looking at 500GB it is a bit of overkill D. an Azure Analysis services On-premises data gateway not a data import option E. an Azure Batch account Is part of Azure Batch service and involve HPC job scheduling etc. but is not a way of importing or exporting data from on-premise to Azure Note: For 500GB we would probably use AzCopy instead. If it was a Typo and actually 500TB we would use Azure Data Box Heavy or maybe the Azure Import/Export Service if you provide your own drives.

   Adapted from community discussion by sw1000 · 2023-05-26 · 21 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

   1. S

      sw1000

      2023-05-26

      Selected B, C21 upvotes

      A. an Azure Logic Apps integration account no, this is an integration service with visual flows with If-Then style logic. It does not support a way to import data from on-premise to blobstorage B. an Azure Import/Export job Agree, with other people here. C. Azure Data Factory Agree, is a way of importing data, but looking at 500GB it is a bit of overkill D. an Azure Analysis services On-premises data gateway not a data import option E. an Azure Batch account Is part of Azure Batch service and involve HPC job scheduling etc. but is not a way of importing or exporting data from on-premise to Azure Note: For 500GB we would probably use AzCopy instead. If it was a Typo and actually 500TB we would use Azure Data Box Heavy or maybe the Azure Import/Export Service if you provide your own drives.

   2. B

      BalderkVeit

      2022-03-17

      18 upvotes

      lol, I thought ADF are your answers. Agree. Azure Data Factory(ADF) and Import Export - so BC

   3. E

      Eltooth

      2021-12-16

      13 upvotes

      https://docs.microsoft.com/en-gb/azure/storage/blobs/storage-blobs-introduction#move-data-to-blob-storage

   4. S

      Shadow983

      2021-12-14

      9 upvotes

      Correct. ADF can be used to copy data to blob storage: https://docs.microsoft.com/en-us/azure/data-factory/quickstart-create-data-factory-copy-data-tool

10. Question 10 of 25

    Select 2

    You are planning an Azure IoT Hub solution that will include 50,000 IoT devices. Each device will stream data, including temperature, device ID, and time data. Approximately 50,000 records will be written every second. The data will be visualized in near real time. You need to recommend a service to store and query the data. Which two services can you recommend? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

    • AAzure Table Storage
    • BAzure Event Grid
    • CAzure Cosmos DB for NoSQL
    • DAzure Time Series Insights

    Show answer

    Correct answer: C, D

    How others answered

    • CD100%

    Explanation

    A. Azure Table Storage -> Throughput: scalability limit of 20,000 operations/s. -> Not enough for this question B. Azure Event Grid -> It is only a broker, not a storage solution Therefore, C and D are right Refs: https://learn.microsoft.com/en-us/azure/cosmos-db/table/ https://learn.microsoft.com/en-us/azure/event-grid/overview

    Adapted from community discussion by rgargar78 · 2023-01-14 · 18 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. S

       Sammy1989

       2023-01-05

       20 upvotes

       Cleared the exam on 01/05/23 with 871 / 1000. Chose CD. There is a similar question on ET where the option was SQL DB API

    2. R

       rgargar78

       2023-01-14

       18 upvotes

       A. Azure Table Storage -> Throughput: scalability limit of 20,000 operations/s. -> Not enough for this question B. Azure Event Grid -> It is only a broker, not a storage solution Therefore, C and D are right Refs: https://learn.microsoft.com/en-us/azure/cosmos-db/table/ https://learn.microsoft.com/en-us/azure/event-grid/overview

    3. N

       NotMeAnyWay

       2023-03-22

       Selected C, D9 upvotes

       C. Azure Cosmos DB for NoSQL D. Azure Time Series Insights Both Azure Cosmos DB and Azure Time Series Insights are suitable services for storing and querying the data in this scenario. C. Azure Cosmos DB for NoSQL is a globally distributed, multi-model database service that can handle large amounts of data with low-latency and high throughput. Its support for various consistency levels and partitioning strategies makes it suitable for handling IoT data at scale. D. Azure Time Series Insights is a fully managed, real-time analytics service specifically designed for time-series data generated by IoT devices. It provides storage, visualization, and advanced querying capabilities for time-series data, making it an ideal choice for handling data from a large number of IoT devices and visualizing it in near real-time.

    4. Z

       zellck

       2023-02-22

       Selected C, D4 upvotes

       CD is the answer. https://learn.microsoft.com/en-us/azure/architecture/solution-ideas/articles/iot-using-cosmos-db Azure Cosmos DB is ideal for IoT workloads because it's capable of: - Ingesting device telemetry data at high rates, and return indexed queries with low latency and high availability. - Storing JSON format from different device vendors, which provides flexibility in payload schema. - By using wire protocol–compatible API endpoints for Cassandra, MongoDB, SQL, Gremlin, etcd, and table databases, and built-in support for Jupyter Notebook files.

11. Question 11 of 25

    You plan to use an Azure Storage account to store data assets. You need to recommend a solution that meets the following requirements: • Supports immutable storage • Disables anonymous access to the storage account • Supports access control list (ACL)-based Azure AD permissions What should you include in the recommendation?

    • AAzure Files
    • BAzure Data Lake Storage
    • CAzure NetApp Files
    • DAzure Blob Storage

    Show answer

    Correct answer: B

    How others answered

    • B72%
    • D28%

    Only 72% agreed on this answer — treat it as contested rather than settled.

    Explanation

    In terms of supporting immutable storage, both Azure Data Lake storage and Azure Blob storage are correct. But ACL is supported by Azure Data Lake storage, not supported by Azure Blob storage. See below link. https://learn.microsoft.com/en-us/azure/data-lake-store/data-lake-store-comparison-with-blob-storage So the correct answer is B.

    Adapted from community discussion by ntma3b · 2023-09-29 · 48 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • azure.microsoft.com documentation
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. N

       ntma3b

       2023-09-29

       48 upvotes

       In terms of supporting immutable storage, both Azure Data Lake storage and Azure Blob storage are correct. But ACL is supported by Azure Data Lake storage, not supported by Azure Blob storage. See below link. https://learn.microsoft.com/en-us/azure/data-lake-store/data-lake-store-comparison-with-blob-storage So the correct answer is B.

    2. M

       marcellov

       2023-09-22

       Selected B12 upvotes

       Azure Data Lake Storage. "Azure Data Lake Storage Gen2 implements an access control model that supports both Azure role-based access control (Azure RBAC) and POSIX-like access control lists (ACLs)." https://learn.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-access-control "Immutable storage for Azure Data Lake Storage is now generally available." https://azure.microsoft.com/en-us/updates/immutable-storage-for-azure-data-lake-storage-is-now-generally-available/

    3. A

       AdventureChick

       2023-09-24

       Selected B5 upvotes

       We have 3 requirements: 1) immutability 2) disabling anonymous access and 3) supports ACLs This is a single page with a table of features for Data Lake Gen 2 & Block Blob https://learn.microsoft.com/en-us/azure/storage/blobs/storage-feature-support-in-storage-accounts Other posters show references that show ACL works for both. Default security settings (new as of Aug 2023): “Azure Storage updating some default security settings on new accounts - Aug 2023” https://techcommunity.microsoft.com/t5/azure-storage-blog/azure-storage-updating-some-default-security-settings-on-new/ba-p/3819554 So (as of Sept 2023) if both Blob & Data Lake Gen2 work for the scenario (with the absence of details on the type of data assets being stored), I would pick Data Lake Gen2 because it gives you a true directory/file structure with associated RBAC granularity.

    4. M

       Markoduk

       2024-03-20

       Selected B3 upvotes

       For your Azure Storage account that needs to support immutable storage, disable anonymous access, and support ACL-based Azure AD permissions, I recommend using Azure Data Lake Storage Gen2. Here’s why: Immutable Storage: Azure Data Lake Storage Gen2 supports immutable storage, which is essential for scenarios requiring write-once-read-many (WORM) policies1. Disabling Anonymous Access: It allows you to disable anonymous access to the storage account, ensuring that data access is restricted to authenticated and authorized users only1. ACL-based Azure AD Permissions: Azure Data Lake Storage Gen2 implements an access control model that supports both Azure role-based access control (Azure RBAC) and POSIX-like access control lists (ACLs), which are crucial for fine-grained access control1. This solution aligns with your requirements and provides a robust and secure environment for storing your data assets. https://learn.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-access-control

12. Question 12 of 25

    You have SQL Server on an Azure virtual machine. The databases are written to nightly as part of a batch process. You need to recommend a disaster recovery solution for the data. The solution must meet the following requirements: ✑ Provide the ability to recover in the event of a regional outage. ✑ Support a recovery time objective (RTO) of 15 minutes. ✑ Support a recovery point objective (RPO) of 24 hours. ✑ Support automated recovery. ✑ Minimize costs. What should you include in the recommendation?

    • AAzure virtual machine availability sets
    • BAzure Disk Backup
    • Can Always On availability group
    • DAzure Site Recovery

    Show answer

    Correct answer: D

    How others answered

    • D84%
    • C16%

    Explanation

    Hi (a.k.a Gowind) correcting me, Answer is D. The requirement is to support an automated recovery. We can automate the recovery with Azure Automation: https://learn.microsoft.com/en-us/azure/site-recovery/site-recovery-runbook-automation https://learn.microsoft.com/en-us/azure/site-recovery/site-recovery-create-recovery-plans Runbooks in recovery plans You add an Azure Automation account and runbooks to a recovery plan. The runbook is invoked when the recovery plan runs.

    Adapted from community discussion by GarryK · 2023-02-05 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. V

       Vad133

       2023-01-10

       9 upvotes

       The requirements state "Support automated recovery", not "Automatic failover" thus we can automate the recovery process by a script and fulfil the requirement with low cost.

    2. F

       FrancisFerreira

       2022-03-27

       8 upvotes

       The reason they gave for discarding C as an option is flawed. Yes, replication is asynchronous and we would lose some data, but we are okay with an RPO of 24 hours, so that wouldn't actually be a problem.

    3. G

       GarryK

       2023-02-05

       5 upvotes

       Hi (a.k.a Gowind) correcting me, Answer is D. The requirement is to support an automated recovery. We can automate the recovery with Azure Automation: https://learn.microsoft.com/en-us/azure/site-recovery/site-recovery-runbook-automation https://learn.microsoft.com/en-us/azure/site-recovery/site-recovery-create-recovery-plans Runbooks in recovery plans You add an Azure Automation account and runbooks to a recovery plan. The runbook is invoked when the recovery plan runs.

    4. N

       NotMeAnyWay

       2023-03-23

       Selected D4 upvotes

       D. Azure Site Recovery Azure Site Recovery is a disaster recovery service that allows you to protect your Azure virtual machines by orchestrating replication, failover, and recovery. It helps you meet the RTO and RPO requirements, automates recovery, and provides protection against regional outages. While it may not be the lowest cost solution, it meets all the other requirements, including automated recovery and support for the specified RTO and RPO.

13. Question 13 of 25

    You plan to deploy an Azure Database for MySQL flexible server named Server1 to the East US Azure region. You need to implement a business continuity solution for Server1. The solution must minimize downtime in the event of a failover to a paired region. What should you do?

    • ACreate a read replica.
    • BStore the database files in Azure premium file shares.
    • CImplement Geo-redundant backup.
    • DConfigure native MySQL replication.

    Show answer

    Correct answer: C

    How others answered

    • C72%
    • A24%

    Only 72% agreed on this answer — treat it as contested rather than settled.

    Explanation

    It tend to differ.. Answer A seems to be possible as well. It is faster then a restore. https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-read-replicas#cross-region-replication-in-geo-paired-region You can create a read replica in a different region from your source server. Cross-region replication can be helpful for scenarios like disaster recovery planning or bringing data closer to your users. Azure database for MySQL Flexible Server allows you to provision read-replica in the Azure supported [geo-paired region]

    Adapted from community discussion by Dumber · 2023-06-21 · 22 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. D

       Dumber

       2023-06-21

       22 upvotes

       It tend to differ.. Answer A seems to be possible as well. It is faster then a restore. https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-read-replicas#cross-region-replication-in-geo-paired-region You can create a read replica in a different region from your source server. Cross-region replication can be helpful for scenarios like disaster recovery planning or bringing data closer to your users. Azure database for MySQL Flexible Server allows you to provision read-replica in the Azure supported [geo-paired region]

    2. N

       NotMeAnyWay

       2023-07-14

       Selected C17 upvotes

       C. Implement Geo-redundant backup. The Geo-redundant backup (GRB) feature in Azure Database for MySQL allows automatic backups to be stored in a different geographic region (geography). In the event of a region-wide service disruption, you can restore the database from the geo-redundant backup, which helps minimize downtime. Other options do not provide business continuity in case of regional failures. Option A, creating a read replica, primarily helps with read-heavy workloads and not for disaster recovery. Option B, storing the database files in Azure premium file shares, might improve performance but does not specifically provide a disaster recovery solution. Option D, configuring native MySQL replication, isn't supported directly within Azure Database for MySQL. Instead, you would use Azure's built-in business continuity features, such as Geo-redundant backup.

    3. N

       nchebbi

       2023-12-07

       9 upvotes

       The answer should be C: Geo-redundant backup: Read replica are not meant for business continuity, failing over is manual which doesn't meet the requirement of minimizing downtime. "There's no automated failover between source and replica servers. Read replicas is meant for scaling of read intensive workloads and isn't designed to meet high availability needs of a server. Stopping the replication on read replica to bring it online in read write mode is the means by which this manual failover is performed." https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-read-replicas#failover

    4. W

       wooyourdaddy

       2023-09-25

       6 upvotes

       This answer seems to be supported by this link as well: https://learn.microsoft.com/en-us/azure/mysql/single-server/concepts-read-replicas#paired-regions which states: If you're using cross-region replicas for disaster recovery planning, we recommend you create the replica in the paired region instead of one of the other regions. Paired regions avoid simultaneous updates and prioritize physical isolation and data residency.

14. Question 14 of 25

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements: ✑ Provide access to the full .NET framework. Provide redundancy if an Azure region fails.

    

    ✑ Grant administrators access to the operating system to install custom application dependencies. Solution: You deploy two Azure virtual machines to two Azure regions, and you create an Azure Traffic Manager profile. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    A. Yes. This solution meets the goal. By deploying two Azure virtual machines in two separate Azure regions, you provide redundancy if one of the regions fails. Azure Traffic Manager can be used to distribute traffic between the virtual machines in different regions, ensuring high availability. Additionally, deploying Azure virtual machines allows you to have access to the full .NET Framework and grants administrators the ability to access the operating system to install custom application dependencies.

    Adapted from community discussion by NotMeAnyWay · 2023-03-23 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. E

       Eltooth

       2021-12-13

       Selected A21 upvotes

       Correct answer - Traffic manager is global I.e. multi region - layer 7 traffic balancer option.

    2. S

       Shadow983

       2021-12-15

       11 upvotes

       Answer is A, but Traffic Manager is not layer 7 load balancer. https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview

    3. N

       NotMeAnyWay

       2023-03-23

       Selected A8 upvotes

       A. Yes. This solution meets the goal. By deploying two Azure virtual machines in two separate Azure regions, you provide redundancy if one of the regions fails. Azure Traffic Manager can be used to distribute traffic between the virtual machines in different regions, ensuring high availability. Additionally, deploying Azure virtual machines allows you to have access to the full .NET Framework and grants administrators the ability to access the operating system to install custom application dependencies.

    4. O

       OPT_001122

       2023-01-28

       Selected A6 upvotes

       You deploy two Azure virtual machines to two Azure regions, and you create an Azure Traffic Manager profile. Thanks to all who mentioned the exam dates because they came here to mention after their exam which is really incredible

15. Question 15 of 25

    You have an Azure subscription that contains an Azure Cosmos DB for NoSQL account named account1 and an Azure Synapse Analytics workspace named Workspace1. The account1 account contains a container named Contained that has the analytical store enabled. You need to recommend a solution that will process the data stored in Contained in near-real-time (NRT) and output the results to a data warehouse in Workspace1 by using a runtime engine in the workspace. The solution must minimize data movement. Which pool in Workspace1 should you use?

    • AApache Spark
    • Bserverless SQL
    • Cdedicated SQL
    • DData Explorer

    Show answer

    Correct answer: A

    How others answered

    • A84%

    Explanation

    Apache Spark: Spark pools in Azure Synapse Analytics provide a distributed data processing framework capable of processing large volumes of data in near-real-time. Spark is highly efficient in handling streaming data and can directly read from Azure Cosmos DB's analytical store with minimal data movement, making it an ideal choice for near-real-time processing. Serverless SQL and Dedicated SQL: While these can be used for querying and processing data, they are not as optimized for near-real-time processing as Apache Spark. Additionally, they typically involve more data movement compared to Spark's direct processing capabilities. Data Explorer: This is typically used for fast ad-hoc data exploration and querying, particularly for log and telemetry data, rather than for continuous near-real-time data processing and transformation.

    Adapted from community discussion by 23169fd · 2024-06-26 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • azure.microsoft.com documentation
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. 2

       23169fd

       2024-06-26

       Selected A8 upvotes

       Apache Spark: Spark pools in Azure Synapse Analytics provide a distributed data processing framework capable of processing large volumes of data in near-real-time. Spark is highly efficient in handling streaming data and can directly read from Azure Cosmos DB's analytical store with minimal data movement, making it an ideal choice for near-real-time processing. Serverless SQL and Dedicated SQL: While these can be used for querying and processing data, they are not as optimized for near-real-time processing as Apache Spark. Additionally, they typically involve more data movement compared to Spark's direct processing capabilities. Data Explorer: This is typically used for fast ad-hoc data exploration and querying, particularly for log and telemetry data, rather than for continuous near-real-time data processing and transformation.

    2. D

       deegadaze1

       2024-01-13

       7 upvotes

       NO! When to use Azure Synapse Data Explorer? Use Data Explorer as a data platform for building near real-time log analytics and IoT analytics solutions to: Consolidate and correlate your logs and events data across on-premises, cloud, and third-party data sources. Accelerate your AI Ops journey (pattern recognition, anomaly detection, forecasting, and more). Replace infrastructure-based log search solutions to save cost and increase productivity. Build IoT analytics solutions for your IoT data. Build analytics SaaS solutions to offer services to your internal and external customers. Azure Data Explorer is a fully managed, high-performance, big data analytics platform that makes it easy to analyze high volumes of data in near real time. The Azure Data Explorer toolbox gives you an end-to-end solution for data ingestion, query, visualization, and management.

    3. T

       TarasSheva

       2024-05-13

       Selected A4 upvotes

       A. Apache Spark Near-Real-Time (NRT) Processing: Apache Spark provides capabilities for real-time stream processing, which aligns with the requirement for near-real-time processing. Integration with Azure Cosmos DB: Apache Spark has built-in connectors and libraries for integrating with Azure Cosmos DB, allowing for seamless data ingestion and processing without significant data movement. Output to Data Warehouse: Apache Spark can easily output processed data to various destinations, including data warehouses like Azure Synapse Analytics. It can write directly into dedicated SQL pools or serverless SQL pools within the Synapse workspace. Minimizing Data Movement: Since Apache Spark can directly access data in Azure Cosmos DB and write results to the data warehouse within the same Azure environment, it minimizes data movement, thus optimizing performance and reducing costs.

    4. K

       KeyMan

       2024-01-06

       4 upvotes

       B. Serverless SQL pool Reasoning: Serverless SQL pool in Azure Synapse Analytics is designed to handle on-demand queries against large datasets, which is suitable for the NRT processing requirement stated. Minimal Data Movement: Using serverless SQL pool allows querying data in place without the need to move data into the pool, which aligns with the need to minimize data movement. It can directly query the Cosmos DB analytical store. Integration with Cosmos DB Analytical Store: Serverless SQL pool has built-in integration with Azure Cosmos DB's analytical store, allowing efficient and performant processing of the data. Apache Spark could also process the data, but it would involve more data movement compared to serverless SQL. Dedicated SQL pool requires pre-provisioned resources and wouldn't be as cost-effective for NRT scenarios. Data Explorer is not a compute pool within Azure Synapse Analytics.

16. Question 16 of 25

    You have an Azure subscription. You need to deploy an Azure Kubernetes Service (AKS) solution that will use Windows Server 2019 nodes. The solution must meet the following requirements: ✑ Minimize the time it takes to provision compute resources during scale-out operations. ✑ Support autoscaling of Windows Server containers. Which scaling option should you recommend?

    • AKubernetes version 1.20.2 or newer
    • BVirtual nodes with Virtual Kubelet ACI
    • Ccluster autoscaler
    • Dhorizontal pod autoscaler

    Show answer

    Correct answer: C

    How others answered

    • C83%

    Explanation

    Correct. Cluster autoscaler help provision new nodes (compute ressources) Cluster autoscaler works on top of horizontal pod autoscaler. Azure AKS support windows https://docs.microsoft.com/en-us/azure/aks/learn/quick-windows-container-deploy-cli

    Adapted from community discussion by GarryK · 2022-09-10 · 26 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. G

       GarryK

       2022-09-10

       Selected C26 upvotes

       Correct. Cluster autoscaler help provision new nodes (compute ressources) Cluster autoscaler works on top of horizontal pod autoscaler. Azure AKS support windows https://docs.microsoft.com/en-us/azure/aks/learn/quick-windows-container-deploy-cli

    2. G

       GarryK

       2023-02-06

       19 upvotes

       To those answering B. The solution must use Windows Server 2019 nodes. You need to deploy an Azure Kubernetes Service (AKS) solution that will use Windows Server 2019 nodes. Virtual nodes only support Linux nodes. https://learn.microsoft.com/en-us/azure/aks/virtual-nodes Virtual nodes are only supported with Linux pods and nodes. It can of course host linux or windows containers, but thats not the requirement.

    3. S

       Snownoodles

       2022-10-23

       Selected C12 upvotes

       The correct answer is C. AKS doesn't support Windows 2019 virtual node so far, you have to " manually install the open source Virtual Kubelet ACI provider to schedule Windows Server containers to ACI" Since the ask is " Minimize the time it takes to provision compute resources during scale-out operations", so the correct answer should be C

    4. A

       A_GEE

       2022-12-02

       Selected C7 upvotes

       This is Windows - using autoscaler For Linux - using virtual node

17. Question 17 of 25

    You are designing an order processing system in Azure that will contain the Azure resources shown in the following table.

    

    The order processing system will have the following transaction flow: ✑ A customer will place an order by using App1. ✑ When the order is received, App1 will generate a message to check for product availability at vendor 1 and vendor 2. ✑ An integration component will process the message, and then trigger either Function1 or Function2 depending on the type of order. ✑ Once a vendor confirms the product availability, a status message for App1 will be generated by Function1 or Function2. ✑ All the steps of the transaction will be logged to storage1. Which type of resource should you recommend for the integration component?

    • Aan Azure Service Bus queue
    • Ban Azure Data Factory pipeline
    • Can Azure Event Grid domain
    • Dan Azure Event Hubs capture

    Show answer

    Correct answer: B

    How others answered

    • B58%
    • A40%

    Only 58% agreed on this answer — treat it as contested rather than settled.

    Explanation

    The given answer is correct. ADF pipeline can process the message and trigger the appropriate condition. On ADF, you can add a diagnostic setting to send logs to a storage account. Other possible options would be Event grid subscription & Service bus topic. Service bus TOPIC can be used with filtering rules on each subscription but not queue. https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-queues-topics-subscriptions#rules-and-actions

    Adapted from community discussion by Samko635 · 2022-10-17 · 46 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. S

       Samko635

       2022-10-17

       Selected B46 upvotes

       The given answer is correct. ADF pipeline can process the message and trigger the appropriate condition. On ADF, you can add a diagnostic setting to send logs to a storage account. Other possible options would be Event grid subscription & Service bus topic. Service bus TOPIC can be used with filtering rules on each subscription but not queue. https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-queues-topics-subscriptions#rules-and-actions

    2. S

       Snownoodles

       2022-10-23

       47 upvotes

       Sorry, after reading the following link, I think the correct answer should be B Please note the question is asking to implement "An integration component will process the message". Service Bus definitely is unable to process the message, it's just a message queue. ADF has a "control activity" which is like IF---Then flow https://learn.microsoft.com/en-us/azure/data-factory/control-flow-if-condition-activity

    3. _

       _fvt

       2023-02-15

       4 upvotes

       As we are talking of messages, I would choose Azure Service Bus, the real world answer should be this, but ASB with queue which is specified only allows one consumer, we need use Azure Service Bus topics instead... so not sure it's the right choice (https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-queues-topics-subscriptions). Within event grid domain (answer C) we can define topic to trigger our functions but getting the event with the orderType content of the app service message is not easily feasible as event grid purpose is not to deal with messages data (same for Event hub, so discarding answer D also). https://learn.microsoft.com/en-us/azure/event-grid/includes/media/event-grid-domain-example-use-case/contoso-construction-example.png#lightbox https://learn.microsoft.com/en-us/azure/event-grid/event-domains So I don't have an answer for this question actually, but I would probably choose B, because it seems the only one where we are free to do a hack which could "work".

    4. S

       Snownoodles

       2022-10-23

       Selected B5 upvotes

       The correct answer should be B Please note the question is asking to implement "An integration component will process the message". Service Bus definitely is unable to process the message, it's just a message queue. ADF has a "control activity" which is like IF---Then flow: https://learn.microsoft.com/en-us/azure/data-factory/control-flow-if-condition-activity This should be the right choice of "integration component"

18. Question 18 of 25

    Select 2

    You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain. Your company has a line-of-business (LOB) application that was developed internally. You need to implement SAML single sign-on (SSO) and enforce multi-factor authentication (MFA) when users attempt to access the application from an unknown location. Which two features should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

    • AAzure AD Privileged Identity Management (PIM)
    • BAzure Application Gateway
    • CAzure AD enterprise applications
    • DAzure AD Identity Protection
    • EConditional Access policies

    Show answer

    Correct answer: C, E

    How others answered

    • CE100%

    Explanation

    Given answer is WRONG. Correct ist Azure AD enterprise applications and Conditional Access Enterprise App for SSO Conditional Access for MFA

    Adapted from community discussion by bootless · 2022-09-01 · 91 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. B

       bootless

       2022-09-01

       Selected C, E91 upvotes

       Given answer is WRONG. Correct ist Azure AD enterprise applications and Conditional Access Enterprise App for SSO Conditional Access for MFA

    2. D

       DeeSeeEss

       2023-02-12

       26 upvotes

       Moderator, it's been 5 months with the incorrect answer and reasoning posted. Can we please get this updated for ease of use? The correct answer is obviously C,E.

    3. N

       NotMeAnyWay

       2023-04-13

       Selected C, E5 upvotes

       C. Azure AD enterprise applications E. Conditional Access policies C. Azure AD enterprise applications: You need to configure the LOB application as an enterprise application in Azure AD. This will allow you to configure SAML-based SSO for the application, enabling users to sign in using their Azure AD credentials. E. Conditional Access policies: You can create a Conditional Access policy in Azure AD to enforce MFA when users attempt to access the application from an unknown location. Conditional Access policies allow you to set specific conditions, such as location or device state, and apply security requirements, like MFA, when those conditions are met.

    4. E

       Elton_Bicalho

       2022-09-18

       4 upvotes

       The answer is correct, since october 2022: Risk-based policies require access to Identity Protection, which is an Azure AD P2 feature. Check: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/overview

19. Question 19 of 25

    You are planning a storage solution. The solution must meet the following requirements: ✑ Support at least 500 requests per second. ✑ Support a large image, video, and audio streams. Which type of Azure Storage account should you provision?

    • Astandard general-purpose v2
    • Bpremium block blobs
    • Cpremium page blobs
    • Dpremium file shares

    Show answer

    Correct answer: B

    How others answered

    • B65%
    • A35%

    Only 65% agreed on this answer — treat it as contested rather than settled.

    Explanation

    premium block blobs is indeed correct - supports hundreds of thousands of requests per second - video "streaming" requires lots of small data packets to be sent in a short time interval (and thus requires high transaction rates & consistent low-latency)

    Adapted from community discussion by JaQua · 2022-10-06 · 79 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. J

       JaQua

       2022-10-06

       79 upvotes

       premium block blobs is indeed correct - supports hundreds of thousands of requests per second - video "streaming" requires lots of small data packets to be sent in a short time interval (and thus requires high transaction rates & consistent low-latency)

    2. K

       kenneth12

       2023-08-31

       Selected B9 upvotes

       Based on the requirements of supporting at least 500 requests per second and handling large image, video, and audio streams, the most suitable Azure Storage account type would be: B. premium block blobs Premium block blobs are designed to handle high-performance scenarios with high throughput and low latency. They are well-suited for scenarios that involve large files such as images, videos, and audio streams. The premium performance tier is optimized for workloads that require consistent and low-latency performance. Option A (standard general-purpose v2) and Option D (premium file shares) might not provide the necessary performance and throughput required for large image, video, and audio streams at 500 requests per second. Option C (premium page blobs) is designed for virtual machine disks and might not be the best fit for handling large multimedia files and the specified performance requirements. So, the correct answer is B. premium block blobs.

    3. Z

       zellck

       2023-02-26

       Selected B8 upvotes

       B is the answer. https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-block-blob-premium Premium block blob storage accounts make data available via high-performance hardware. Data is stored on solid-state drives (SSDs) which are optimized for low latency. SSDs provide higher throughput compared to traditional hard drives. File transfer is much faster because data is stored on instantly accessible memory chips. All parts of a drive accessible at once. By contrast, the performance of a hard disk drive (HDD) depends on the proximity of data to the read/write heads.

    4. S

       stanl2

       2023-08-08

       Selected B8 upvotes

       "A single blob supports up to 500 requests per second. If you have multiple clients that need to read the same blob and you might exceed this limit, *then consider using a block blob storage account*. A block blob storage account provides a higher request rate, or I/O operations per second (IOPS)." https://learn.microsoft.com/en-us/azure/storage/blobs/storage-performance-checklist#bandwidth-and-operations-per-blob

20. Question 20 of 25

    Select 2

    You have an on-premises application named App1 that uses an Oracle database. You plan to use Azure Databricks to transform and load data from App1 to an Azure Synapse Analytics instance. You need to ensure that the App1 data is available to Databricks. Which two Azure services should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

    • AAzure Data Box Gateway
    • BAzure Import/Export service
    • CAzure Data Lake Storage
    • DAzure Data Box Edge
    • EAzure Data Factory

    Show answer

    Correct answer: C, E

    How others answered

    • CE88%

    Explanation

    The correct answer should be C and E ADF moves data from on-prem Oracle to Data Lake storage, which makes data ready for DataBrick https://docs.microsoft.com/en-us/azure/data-factory/load-azure-data-lake-storage-gen2 DataBricks "ETL" data to Synapse: https://docs.microsoft.com/en-us/azure/databricks/scenarios/databricks-extract-load-sql-data-warehouse

    Adapted from community discussion by Snownoodles · 2022-09-10 · 39 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. S

       Snownoodles

       2022-09-10

       Selected C, E39 upvotes

       The correct answer should be C and E ADF moves data from on-prem Oracle to Data Lake storage, which makes data ready for DataBrick https://docs.microsoft.com/en-us/azure/data-factory/load-azure-data-lake-storage-gen2 DataBricks "ETL" data to Synapse: https://docs.microsoft.com/en-us/azure/databricks/scenarios/databricks-extract-load-sql-data-warehouse

    2. N

       NotMeAnyWay

       2023-07-15

       Selected C, E6 upvotes

       C. Azure Data Lake Storage E. Azure Data Factory Azure Data Lake Storage is a secure, scalable and reliable data lake that allows you to perform analytics on large amounts of data. It's a great choice for storing large volumes of data, like what App1 might produce. Azure Data Factory is a cloud-based data integration service that allows you to create data-driven workflows for moving and transforming data at scale. In this case, it can be used to create a pipeline to move the data from your on-premises Oracle database to Azure Data Lake Storage, making it available for further processing with Azure Databricks. Azure Data Factory has built-in support for a wide range of data sources, including Oracle. After the data is stored in Azure Data Lake Storage, you can use Azure Databricks to transform the data and load it into the Azure Synapse Analytics instance.

    3. Z

       zellck

       2023-02-19

       Selected C, E5 upvotes

       CE is the answer. https://learn.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-introduction#designed-for-enterprise-big-data-analytics Data Lake Storage Gen2 makes Azure Storage the foundation for building enterprise data lakes on Azure. Designed from the start to service multiple petabytes of information while sustaining hundreds of gigabits of throughput, Data Lake Storage Gen2 allows you to easily manage massive amounts of data. https://learn.microsoft.com/en-us/azure/data-factory/introduction Big data requires a service that can orchestrate and operationalize processes to refine these enormous stores of raw data into actionable business insights. Azure Data Factory is a managed cloud service that's built for these complex hybrid extract-transform-load (ETL), extract-load-transform (ELT), and data integration projects.

    4. Y

       yonie

       2023-04-27

       Selected C, E7 upvotes

       In AZ-304 it was ADL and ADF meaning CE https://www.examtopics.com/discussions/microsoft/view/51579-exam-az-304-topic-3-question-20-discussion/

21. Question 21 of 25

    Your company has offices in North America and Europe. You plan to migrate to Azure. You need to recommend a networking solution for the new Azure infrastructure. The solution must meet the following requirements: • The Point-to-Site (P2S) VPN connections of mobile users must connect automatically to the closest Azure region. • The offices in each region must connect to their local Azure region by using an ExpressRoute circuit. • Transitive routing between virtual networks and on-premises networks must be supported. • The network traffic between virtual networks must be filtered by using FQDNs. What should you include in the recommendation?

    • AAzure Virtual WAN with a secured virtual hub
    • Bvirtual network peering and application security groups
    • Cvirtual network gateways and network security groups (NSGs)
    • DAzure Route Server and Azure Network Function Manager

    Show answer

    Correct answer: A

    How others answered

    • A94%

    Explanation

    The Virtual WAN meets the first 3 requirements, and the secured virtual hub has the Azure Firewall Manager, which can do the FQDN filtering. https://learn.microsoft.com/en-us/azure/firewall-manager/secured-virtual-hub https://learn.microsoft.com/en-us/azure/firewall/fqdn-filtering-network-rules

    Adapted from community discussion by SilverFox22 · 2023-01-08 · 25 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. S

       SilverFox22

       2023-01-08

       Selected A25 upvotes

       The Virtual WAN meets the first 3 requirements, and the secured virtual hub has the Azure Firewall Manager, which can do the FQDN filtering. https://learn.microsoft.com/en-us/azure/firewall-manager/secured-virtual-hub https://learn.microsoft.com/en-us/azure/firewall/fqdn-filtering-network-rules

    2. L

       lombri

       2023-05-02

       Selected A12 upvotes

       Option A, Azure Virtual WAN with a secured virtual hub, is the best recommendation for this scenario as it allows for automatic connection of mobile users to the closest Azure region, connection of offices to their local Azure region via ExpressRoute circuits, support for transitive routing, and filtering of network traffic between virtual networks by using FQDNs. Option B, virtual network peering and application security groups, does not provide automatic connection of mobile users to the closest Azure region or support for transitive routing. Option C, virtual network gateways and network security groups (NSGs), does not provide automatic connection of mobile users to the closest Azure region or support for transitive routing, and filtering network traffic between virtual networks by using FQDNs is more challenging. Option D, Azure Route Server and Azure Network Function Manager, does not provide automatic connection of mobile users to the closest Azure region or support for filtering network traffic between virtual networks by using FQDNs.

    3. N

       NotMeAnyWay

       2023-07-15

       Selected A5 upvotes

       The recommendation that meets the requirements specified would be: A. Azure Virtual WAN with a secured virtual hub Azure Virtual WAN allows for transitive routing between virtual networks and on-premises networks, and the automatic connection to the closest Azure region for Point-to-Site (P2S) VPN connections. The offices in each region can connect to their local Azure region using ExpressRoute circuits that can be integrated into the Virtual WAN. A Secured Virtual Hub is an Azure Virtual WAN Hub with associated security and routing policies. It is a Microsoft-managed resource that lets you easily create hub-and-spoke architectures. When security and routing policies are associated with such a hub, it is referred to as a Secured Virtual Hub. The Secured Virtual Hub allows for Azure Firewall, which can filter the network traffic between virtual networks using Fully Qualified Domain Names (FQDNs).

    4. Z

       zellck

       2023-02-24

       Selected A4 upvotes

       A is the answer. https://learn.microsoft.com/en-us/azure/firewall-manager/secured-virtual-hub A secured virtual hub is an Azure Virtual WAN Hub with associated security and routing policies configured by Azure Firewall Manager. Use secured virtual hubs to easily create hub-and-spoke and transitive architectures with native security services for traffic governance and protection. You can use a secured virtual hub to filter traffic between virtual networks (V2V), virtual networks and branch offices (B2V) and traffic to the Internet (B2I/V2I).

22. Question 22 of 25

    You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service (AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines. The virtual machines and the AKS cluster will reside on the same virtual network. You need to design a solution to expose the microservices to the consumer apps. The solution must meet the following requirements: ✑ Ingress access to the microservices must be restricted to a single private IP address and protected by using mutual TLS authentication. ✑ The number of incoming microservice calls must be rate-limited. ✑ Costs must be minimized. What should you include in the solution?

    • AAzure App Gateway with Azure Web Application Firewall (WAF)
    • BAzure API Management Standard tier with a service endpoint
    • CAzure Front Door with Azure Web Application Firewall (WAF)
    • DAzure API Management Premium tier with virtual network connection

    Show answer

    Correct answer: D

    How others answered

    • D84%

    Explanation

    A: No rate limited B: Does not have Private Endpoint integration C: Does not make sense, and does not rate limited D: OK, rate limited + PE integration

    Adapted from community discussion by malcubierre · 2023-03-19 · 18 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. M

       malcubierre

       2023-03-19

       Selected D18 upvotes

       A: No rate limited B: Does not have Private Endpoint integration C: Does not make sense, and does not rate limited D: OK, rate limited + PE integration

    2. N

       NotMeAnyWay

       2023-04-02

       Selected D13 upvotes

       D. Azure API Management Premium tier with a virtual network connection Azure API Management Premium tier supports virtual network integration, which allows you to restrict ingress access to the microservices to a single private IP address within the virtual network. This tier also supports mutual TLS authentication, rate-limiting policies, and provides a solution for exposing the microservices to the consumer apps while minimizing costs.

    3. G

       GarryK

       2022-09-08

       Selected D9 upvotes

       https://docs.microsoft.com/en-us/azure/api-management/virtual-network-concepts?tabs=stv2 Vnet = Dev or Premium or Private Endpoint. Service Endpoint is not available

    4. T

       Tr619899

       2023-06-02

       6 upvotes

       The best option to meet the requirements you mentioned would be to use Azure API Management with a virtual network connection. This can be achieved with the Premium tier of Azure API Management. This will allow you to restrict ingress access to a single private IP address and protect it using mutual TLS authentication. Additionally, Azure API Management provides rate limiting capabilities and can be deployed within a virtual network to minimize costs. So, the correct answer is D. Azure API Management Premium tier with virtual network connection.

23. Question 23 of 25

    You have an on-premises Microsoft SQL Server 2008 instance that hosts a 50-GB database. You need to migrate the database to an Azure SQL managed instance. The solution must minimize downtime. What should you use?

    • AAzure Migrate
    • BAzure Data Studio
    • CWANdisco LiveData Platform for Azure
    • DSQL Server Management Studio (SSMS)

    Show answer

    Correct answer: B

    How others answered

    • B66%
    • A29%

    Only 66% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Migration guide: SQL Server to Azure SQL Managed Instance Prerequisites To migrate your SQL Server to Azure SQL Managed Instance, make sure you have: 1.Chosen a migration method and the corresponding tools for your method. 2.Install the Azure SQL migration extension for Azure Data Studio. 3.Created a target Azure SQL Managed Instance 4. Configured connectivity and proper permissions to access both source and target. 5. Reviewed the SQL Server database engine features available in Azure SQL Managed Instance. https://learn.microsoft.com/en-us/azure/azure-sql/migration-guides/managed-instance/sql-server-to-managed-instance-guide?view=azuresql

    Adapted from community discussion by psr83 · 2023-04-20 · 22 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. P

       psr83

       2023-04-20

       Selected B22 upvotes

       Migration guide: SQL Server to Azure SQL Managed Instance Prerequisites To migrate your SQL Server to Azure SQL Managed Instance, make sure you have: 1.Chosen a migration method and the corresponding tools for your method. 2.Install the Azure SQL migration extension for Azure Data Studio. 3.Created a target Azure SQL Managed Instance 4. Configured connectivity and proper permissions to access both source and target. 5. Reviewed the SQL Server database engine features available in Azure SQL Managed Instance. https://learn.microsoft.com/en-us/azure/azure-sql/migration-guides/managed-instance/sql-server-to-managed-instance-guide?view=azuresql

    2. L

       Lazylinux

       2024-04-23

       Selected B9 upvotes

       i'm at my wits end with Microsoft endlesssssss tools methods features!! How far is Venus!! I was so sure answer was A as MS seem to recommend this path for anything on-prem to Azure but after reading the link below i have sadly confusingly shockingly choose B as the answer it is applicable to both Azure SQL instance and MI as i read both, check the left side for both types https://learn.microsoft.com/en-us/azure/azure-sql/migration-guides/database/sql-server-to-sql-database-guide?view=azuresql

    3. S

       Sanaie

       2023-04-19

       4 upvotes

       A. Azure Migrate is the correct answer. Azure Migrate provides a streamlined, comprehensive portfolio of Microsoft and partner tools to migrate your datacenter infrastructure and applications to Azure. Azure Migrate can help you assess and migrate on-premises servers, infrastructure, applications, and data to Azure. With Azure Migrate, you can discover, assess, and migrate your on-premises applications, infrastructure, and data to Azure. Azure Migrate uses Azure Site Recovery to migrate on-premises SQL Server instances to Azure SQL Managed Instance. It provides a single integrated experience for assessment, migration, and monitoring.

    4. P

       Paul_white

       2023-11-30

       Selected B3 upvotes

       To migrate your SQL Server 2008 database to an Azure SQL managed instance with minimal downtime, you should use Azure Data Studio¹². Here are the steps you need to follow: 1. Choose a migration method and the corresponding tools for your method. 2. Install the Azure SQL migration extension for Azure Data Studio¹. 3. Create a target Azure SQL Managed Instance¹. 4. Configure connectivity and proper permissions to access both source and target¹. So, the correct answer is B. Azure Data Studio**. Please note that you should also review the SQL Server database engine features available in Azure SQL Managed Instance to validate the supportability of your migration target².

24. Question 24 of 25

    You need to recommend a solution for the App1 maintenance task. The solution must minimize costs. What should you include in the recommendation?

    • Aan Azure logic app
    • Ban Azure function
    • Can Azure virtual machine
    • Dan App Service WebJob

    Show answer

    Correct answer: B

    How others answered

    • B70%
    • A30%

    Only 70% agreed on this answer — treat it as contested rather than settled.

    Explanation

    I am confident it's B. Azure Function. I had this question on the exam today, and I got 979, in the Design Infrastrcture Solutions, I was 100% correct, and this quesiton belongs to this catagory.

    Adapted from community discussion by techrat · 2023-04-29 · 27 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. T

       techrat

       2023-04-29

       27 upvotes

       I am confident it's B. Azure Function. I had this question on the exam today, and I got 979, in the Design Infrastrcture Solutions, I was 100% correct, and this quesiton belongs to this catagory.

    2. J

       jellybiscuit

       2022-09-22

       Selected B8 upvotes

       functions are considered cheaper than logic apps by M$ Both would work, but I'm going with function based on price.

    3. P

       pkkalra

       2023-01-04

       8 upvotes

       Azure function as a resource is created in a region but it can access data store from a different region if access is provided. A single function from a region should be able to do the job. I have no reason to believe that a logic app can access data store from two regions but a function cannot. Answer is B.

    4. O

       OPT_001122

       2023-01-18

       7 upvotes

       topic 6: Contoso-Question #1-Page-43 topic 6: Contoso-Question #2-Page-43 topic 6: Contoso-Question #3-Page-43 topic 6: Contoso-Question #4-Page-43 topic 10: Contoso ltd-Question #1-Page-46 topic 10: Contoso ltd-Question #1-Page-46 topic 13: Contoso ltd-Question #1-Page-47 topic 13: Contoso ltd-Question #2-Page-47 topic 14: Contoso ltd-Question #1-Page-48 ==================================== Total = 9

25. Question 25 of 25

    You need to recommend a solution to meet the database retention requirements. What should you recommend?

    • AConfigure a long-term retention policy for the database.
    • BConfigure Azure Site Recovery.
    • CUse automatic Azure SQL Database backups.
    • DConfigure geo-replication of the database.

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    You can process by elemination: Site recovery and geo-replication are out of scope We can think that automatic backup can be sufficient but Microsoft recommendation for Long Term Retention is to use LTR feature: https://docs.microsoft.com/en-us/azure/azure-sql/database/automated-backups-overview?tabs=single-database Then A is correct

    Adapted from community discussion by wsrudmen · 2022-03-15 · 14 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-305 or CertExamHQ.

    1. W

       wsrudmen

       2022-03-15

       14 upvotes

       You can process by elemination: Site recovery and geo-replication are out of scope We can think that automatic backup can be sufficient but Microsoft recommendation for Long Term Retention is to use LTR feature: https://docs.microsoft.com/en-us/azure/azure-sql/database/automated-backups-overview?tabs=single-database Then A is correct

    2. J

       jkklim

       2022-02-12

       10 upvotes

       https://docs.microsoft.com/en-us/azure/azure-sql/database/long-term-retention-overview CORRECT - A

    3. Z

       zellck

       2023-02-25

       Selected A4 upvotes

       A is the answer. https://learn.microsoft.com/en-us/azure/azure-sql/database/long-term-retention-overview?view=azuresql Many applications have regulatory, compliance, or other business purposes that require you to retain database backups beyond the 7-35 days provided by Azure SQL Database and Azure SQL Managed Instance automatic backups. By using the long-term retention (LTR) feature, you can store specified SQL Database and SQL Managed Instance full backups in Azure Blob storage with configured redundancy for up to 10 years. LTR backups can then be restored as a new database.

    4. M

       Mr_wippy

       2022-05-01

       5 upvotes

       I'm not a DBA by any means. But as per the following article, you can use hybrid benefits for V-CORE based SQL databases ( and can be done without any downtime ) So, Answer A should be correct. https://docs.microsoft.com/en-us/azure/azure-sql/azure-hybrid-benefit?view=azuresql&tabs=azure-portal

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-305 practice, question 1 of 25