AZ-305 Practice Test 10 — 10 Questions

Question 1

You are designing a high-availability solution for a stateful application that uses Azure NetApp Files (ANF) for persistent storage. The application must withstand a zonal failure within a region. What should you do?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use Azure NetApp Files cross-zone replication to replicate data between availability zones.. Azure NetApp Files cross-zone replication asynchronously replicates volume data from a source zone to a destination zone within the same region, enabling failover if the primary zone fails. This meets the requirement for zonal failure tolerance while preserving the stateful application's persistent storage. Other options either lack native zone-redundant support for ANF or provide only backup, not continuous replication.

Answer

Use Azure Files with zone-redundant storage (ZRS) and SMB multi-channel.

Answer

Use Azure Backup for ANF with daily snapshots stored in a different zone.

Answer

Deploy the application in an Availability Set and use ANF volumes with zone-redundant storage (ZRS).

Question 2

A company runs a critical application on Azure VMs. They need to ensure that if an entire Azure region fails, the application can be recovered in another region with minimal data loss. They have a recovery point objective (RPO) of 1 hour and a recovery time objective (RTO) of 4 hours. What should they implement?

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) orchestrates replication, failover, and failback of Azure VMs to a secondary region, meeting the RPO of 1 hour (typically 30 seconds to 15 minutes for Azure-to-Azure replication) and RTO of 4 hours (failover can be completed in minutes to a few hours, depending on VM count and data size). It is the correct service for full disaster recovery with minimal data loss across regions.

Answer

Azure Traffic Manager

Answer

Azure Front Door

Answer

Azure Backup

Question 3

Refer to the exhibit. An administrator runs the PowerShell script to enable replication for a VM. The script fails with an error that the VM is not found. What is the most likely cause?

Accepted Answer

The Azure PowerShell context is not set to the subscription that contains the VM.. The PowerShell script uses `Get-AzRecoveryServicesBackupItem` and `Enable-AzRecoveryServicesBackupProtection` to enable replication for a VM. If the Azure PowerShell context (set via `Set-AzContext` or `Connect-AzAccount`) is not targeting the subscription containing the VM, the cmdlets will not find the VM resource, resulting in a 'VM not found' error. This is the most likely cause because the script otherwise references a valid vault, container, and policy.

Answer

The Recovery Services vault does not exist.

Answer

The protection container is not available.

Answer

The replication policy is not valid.

Question 4

Which TWO Azure services can be used to provide cross-region disaster recovery for Azure App Service web applications with a custom domain? (Select TWO.)

Accepted Answer

Azure Front Door. Azure Front Door (B) provides global load balancing and traffic routing based on latency or priority, enabling cross-region failover for App Service web applications. It supports custom domains with TLS termination and health probes to automatically redirect traffic to a secondary region during a disaster. Azure Traffic Manager (E) also offers DNS-based traffic routing with priority or performance profiles, allowing failover to a secondary App Service instance in another region, and works with custom domains via CNAME records.

Answer

Azure DNS

Answer

Azure CDN

Answer

Azure Application Gateway

Question 5

You are a solutions architect for a large healthcare organization that uses Microsoft 365 and Azure. The organization has a Microsoft Entra ID tenant with 15,000 users. The security team requires that all users use multi-factor authentication (MFA) when accessing cloud applications. Currently, only 60% of users have registered for MFA. The organization wants to enforce MFA registration for all users within 30 days. The solution must minimize user disruption and allow users to register their MFA methods during their normal work hours. The organization uses Microsoft Intune for mobile device management and has a conditional access policy that requires MFA for all cloud apps. You need to design a solution to enforce MFA registration. What should you do?

Accepted Answer

Configure a Microsoft Entra ID MFA registration campaign to target all users and require registration within 14 days.. A Microsoft Entra ID MFA registration campaign is specifically designed to nudge users to register for MFA with a configurable deadline (up to 14 days) without immediately blocking access. This minimizes disruption by allowing users to register during normal work hours, and it integrates with existing Conditional Access policies that require MFA for cloud apps.

Answer

Modify the existing conditional access policy to require MFA for all cloud apps and block access if MFA is not registered.

Answer

Deploy an Intune compliance policy that requires MFA enrollment on mobile devices.

Answer

Use Microsoft Entra ID password reset policy to force users to register MFA during password reset.

Question 6

Your company has multiple Azure subscriptions managed by different teams. You need to design a governance solution that ensures: 1) All subscriptions must have a consistent set of policies (e.g., allowed locations, allowed VM SKUs). 2) Compliance reports must be generated daily for each subscription. 3) Non-compliant resources must be automatically remediated where possible (e.g., add tags). 4) The solution must use a single management group hierarchy. What should you include in the design?

Accepted Answer

Create a management group hierarchy, assign Azure Policy at the root management group level with both 'audit' and 'deployIfNotExists' effects, and use a daily Logic App to query compliance via Azure Resource Graph and send reports.. Assigning Azure Policy at the root management group level ensures consistent policy enforcement across all subscriptions in the hierarchy. The 'deployIfNotExists' effect enables automatic remediation (e.g., adding missing tags), while a daily Logic App querying Azure Resource Graph can generate compliance reports without manual intervention. This design satisfies all requirements with a single management group hierarchy.

Answer

Create a management group hierarchy and use Azure Blueprints to assign policies and role assignments per subscription.

Answer

Use Azure DevOps to deploy a pipeline that runs PowerShell scripts to enforce policies and generate reports.

Answer

Create a custom Azure Policy initiative with all required policies and assign it to each subscription individually.

Question 7

Which TWO of the following are benefits of using Azure Files shares for lift-and-shift migrations of on-premises file servers?

Accepted Answer

Integration with Azure File Sync for hybrid scenarios. Azure Files shares provide fully managed SMB file shares in the cloud, which are directly compatible with on-premises file servers that use the SMB protocol. This makes them ideal for lift-and-shift migrations because applications can continue accessing files over SMB without code changes. Azure File Sync further extends this by enabling hybrid scenarios where on-premises servers can cache frequently accessed files while tiering to the cloud, simplifying the migration process.

Answer

Block-level deduplication

Answer

Support for iSCSI protocol

Answer

Automatic tiering of data to archive storage

Question 8

Which TWO of the following are requirements for using Azure Site Recovery to protect Azure VMs? (Choose two.)

Accepted Answer

VMs must be using managed disks. Azure Site Recovery for Azure VMs requires that the VMs use managed disks. Unmanaged disks are not supported because Site Recovery relies on the managed disk snapshot and replication capabilities to enable consistent, application-aware replication across regions. Managed disks also provide better performance, reliability, and integration with Azure's recovery services.

Answer

VMs must use unmanaged disks

Answer

VMs must be connected to a virtual network that has a VPN gateway to the target region

Answer

VMs must be at least Standard_D2s_v3 size

Question 9

You are designing a monitoring solution for a multi-region application deployed on Azure Virtual Machines and Azure SQL Database. The solution must provide a unified view of metrics and logs from all resources, detect anomalies using machine learning, and send alerts to the operations team. Which TWO capabilities should you include in the design?

Accepted Answer

Azure Application Insights. Azure Monitor is the core platform for collecting, analyzing, and acting on telemetry from Azure resources, including metrics and logs from VMs and SQL Database. Application Insights extends Azure Monitor with application performance management (APM) and built-in machine learning anomaly detection (e.g., Smart Detection) for proactive alerting. Together, they provide a unified monitoring view with ML-driven insights.

Answer

Azure Service Health

Answer

Azure Security Center

Answer

Azure Log Analytics

Question 10

You are designing a disaster recovery plan for an Azure virtual machine running a critical application. The solution must meet an RPO of 1 hour and an RTO of 4 hours. Which TWO actions should you take? (Choose TWO.)

Accepted Answer

Enable Azure Site Recovery for the VM with replication to a secondary region.. Azure Site Recovery (ASR) replicates VMs to a secondary region with configurable recovery point objectives (RPO) as low as 30 seconds, easily meeting the 1-hour RPO. Combined with a Recovery Services vault in the secondary region using geo-redundant storage (GRS), you ensure replicated data is stored durably and can be failed over within the 4-hour RTO, as ASR automates orchestration and failover.

Answer

Deploy the VM in an Availability Set and use premium storage.

Answer

Configure Azure Backup with daily snapshots stored in a Recovery Services vault.

Answer

Use Azure Front Door to distribute traffic between the primary and secondary regions.