AZ-305 Practice Test 15 — 15 Questions

Question 1

Your organization has a complex Azure environment with multiple subscriptions. You need to design a governance strategy that ensures: 1) All resources must have specific tags (CostCenter, Environment, Owner). 2) Any resource without required tags must be reported to the compliance team weekly. 3) Virtual machines must not be deployed in certain regions due to data sovereignty. 4) The solution must be automated and use native Azure services. You already have an Azure Log Analytics workspace and a central automation account. What should you include in the design?

Accepted Answer

Use Azure Policy with 'audit' effect for missing tags and region restriction; use Azure Logic Apps triggered by a schedule to query Azure Resource Graph and email the compliance report.. Option D is correct because it uses Azure Policy with 'audit' effect to detect missing tags and region violations without blocking deployment, which satisfies the reporting requirement. Azure Logic Apps, triggered on a schedule, queries Azure Resource Graph to identify non-compliant resources and sends an email report to the compliance team weekly, fulfilling the automation and native service criteria without manual intervention.

Answer

Use Azure Resource Graph queries to find untagged resources and export to CSV manually each week.

Answer

Use Azure Blueprints to define tags and region restrictions; use Azure Monitor alerts to report non-compliance.

Answer

Use Azure Policy with 'deny' effect for missing tags and an Azure Automation runbook to add tags weekly.

Question 2

A company needs to store immutable audit logs for regulatory compliance. The logs must be stored in a write-once, read-many (WORM) state for 7 years. Which Azure storage feature should be used?

Accepted Answer

Azure Blob Storage immutable storage with time-based retention. Azure Blob Storage immutable storage with time-based retention enforces a WORM (Write Once, Read Many) state, preventing logs from being modified or deleted for a specified retention period. This directly meets the regulatory requirement to store audit logs immutably for 7 years, as the policy locks the data at the container or blob level and cannot be removed until the retention interval expires.

Answer

Azure SQL Database temporal tables

Answer

Azure Blob Storage change feed

Answer

Azure Blob Storage soft delete

Question 3

A healthcare organization needs to store patient records that must be immutable and auditable for compliance purposes. The records should be stored in a cost-effective manner with the ability to set retention policies. Which Azure storage solution should they implement?

Accepted Answer

Azure Blob Storage with immutable storage. Azure Blob Storage with immutable storage (WORM policy) is the correct solution because it provides time-based retention policies and legal hold capabilities that make data non-erasable and non-modifiable, meeting compliance requirements for patient records. It is cost-effective for large volumes of data and integrates with Azure Policy for audit logging, making it ideal for healthcare compliance scenarios like HIPAA.

Answer

Azure NetApp Files

Answer

Azure SQL Database

Answer

Azure Files

Question 4

Contoso, Ltd. is migrating a legacy on-premises application to Azure. The application uses a SQL Server database with complex queries and requires read-heavy workloads with sub-10-millisecond latency. The solution must support geo-replication for disaster recovery. Which Azure data service should you recommend?

Accepted Answer

Azure SQL Database Business Critical. Azure SQL Database Business Critical is correct because it uses SQL Server database engine with full T-SQL support for complex queries, provides read-heavy workloads with sub-10-millisecond latency via in-memory OLTP and local SSD storage, and supports active geo-replication for disaster recovery. This tier offers a readable secondary replica in a different Azure region, meeting both latency and geo-replication requirements.

Answer

Azure Cosmos DB for NoSQL

Answer

Azure SQL Database Hyperscale

Answer

Azure SQL Managed Instance Business Critical

Question 5

Which THREE of the following are best practices for designing a data storage solution using Azure Cosmos DB?

Accepted Answer

Use the appropriate consistency level based on application requirements. Option B is correct because Azure Cosmos DB offers five well-defined consistency levels (strong, bounded staleness, session, consistent prefix, and eventual). Choosing the appropriate level based on application requirements is a best practice, as it balances data consistency guarantees against latency and throughput. For example, session consistency is ideal for multi-user applications where each user reads their own writes, while strong consistency ensures linearizability but reduces availability and increases latency.

Answer

Store large binary data (e.g., images) directly as documents

Answer

Use manual provisioned throughput for all containers to control costs

Question 6

Refer to the exhibit. A company is analyzing Azure Storage diagnostic logs using this KQL query. They notice a high number of GetBlob operations on BlockBlobs. The storage account is used for a web application that serves static content. What should they recommend to reduce the number of GetBlob operations?

Accepted Answer

Enable Azure CDN or Azure Front Door to cache content.. Option C is correct because enabling Azure CDN or Azure Front Door caches static content at edge locations, reducing the number of direct GetBlob operations against the storage account. This offloads repeated requests from the origin storage, lowering both operational costs and latency for the web application.

Answer

Implement Azure Blob Storage life cycle management to move data to the archive tier.

Answer

Use Azure File Sync to cache files on-premises.

Answer

Enable Azure Storage Analytics logging to track operations.

Question 7

A company needs to store large amounts of unstructured data such as images and videos for a content management system. The data must be accessible via HTTPS and support tiered storage for cost optimization. Which Azure service should they use?

Accepted Answer

Azure Blob Storage. Azure Blob Storage is the correct choice because it is designed for storing large amounts of unstructured data (such as images and videos) and provides HTTPS access. It also offers tiered storage (hot, cool, cold, and archive tiers) to optimize costs based on data access patterns, making it ideal for a content management system.

Answer

Azure Cosmos DB

Answer

Azure Data Lake Storage

Answer

Azure Files

Question 8

Your company runs a critical database on Azure SQL Managed Instance. You need to ensure zero data loss and automatic failover to a secondary region in the event of a regional outage. What should you configure?

Accepted Answer

Failover groups with manual failover policy and automatic data synchronization. Option D is correct because it describes a failover group configured with manual failover policy and automatic data synchronization, which ensures zero data loss by synchronously replicating data to the secondary region and allows you to control when failover occurs, meeting the requirement for automatic failover in a regional outage scenario. For Azure SQL Managed Instance, failover groups with manual failover policy are the only way to achieve zero data loss (RPO=0) across regions, as automatic failover policy would allow asynchronous replication and potential data loss.

Answer

Auto-failover groups for the Azure SQL Managed Instance

Answer

A single Azure SQL Managed Instance with zone-redundant configuration

Answer

Active geo-replication for the database

Question 9

You need to provide temporary shared access to a specific blob in Azure Storage for a contractor. The access must expire after 24 hours. Which feature should you use?

Accepted Answer

Shared access signature (SAS). A shared access signature (SAS) provides delegated, time-limited access to a specific Azure Storage resource, such as a blob, without exposing the storage account key. By configuring the SAS with an expiration time of 24 hours, you grant the contractor temporary access that automatically revokes after that period, meeting the requirement precisely.

Answer

Managed identity

Answer

Azure role-based access control (RBAC)

Answer

Storage account access key

Question 10

An organization is migrating on-premises Oracle databases to Azure. They require minimal code changes and support for Oracle PL/SQL stored procedures. Which Azure data service best meets these requirements?

Accepted Answer

Azure Database for PostgreSQL with Oracle compatibility. Azure Database for PostgreSQL with the Oracle compatibility extension (e.g., orafce) provides support for Oracle PL/SQL stored procedures and syntax, minimizing code changes during migration. This service is designed to handle Oracle workloads with minimal re-engineering, unlike other Azure database options that lack native Oracle compatibility.

Answer

Azure Database for MySQL

Answer

Azure SQL Database

Answer

Azure Cosmos DB

Question 11

A company wants to automatically tier data between hot, cool, and archive access tiers based on last access time to optimize costs. Which Azure feature should they implement?

Accepted Answer

Azure Blob Storage lifecycle management. Azure Blob Storage lifecycle management allows you to define policies that automatically move blobs between hot, cool, and archive access tiers based on conditions such as last access time or age. This directly addresses the requirement to optimize costs by tiering data according to access patterns without manual intervention.

Answer

Azure Data Box

Answer

Azure Backup

Answer

Azure File Sync

Question 12

Refer to the exhibit. An organization deploys this ARM template to create a storage account. They need to ensure that data is replicated synchronously across two Azure regions. Does this template meet the requirement?

Accepted Answer

No, GRS provides asynchronous replication. The template uses GRS (Geo-Redundant Storage), which replicates data asynchronously from the primary region to the secondary region. Because the replication is asynchronous, there is a potential for data loss if a regional disaster occurs before the secondary region is fully updated. The requirement specifies synchronous replication across two Azure regions, which is only provided by Azure Storage’s geo-zone-redundant storage (GZRS) with read-access (RA-GZRS) or by using Azure Files with synchronous replication via Azure File Sync or a third-party solution. Therefore, GRS does not meet the synchronous requirement.

Answer

No, the template uses RA-GRS

Answer

Yes, GRS provides synchronous replication

Answer

No, the template uses LRS

Question 13

A company needs to store millions of small JSON files (average 10 KB each) for a serverless application. The data must be accessed via HTTPS and support high read throughput. Which Azure storage solution is most cost-effective?

Accepted Answer

Azure Blob Storage (general-purpose v2, hot tier). Azure Blob Storage (general-purpose v2, hot tier) is the most cost-effective solution because it provides native HTTPS access, high throughput for read-heavy workloads, and low-cost storage for small objects like JSON files. The hot tier optimizes for frequent access, and GPv2 accounts support the high request rates needed for millions of small files without premium pricing.

Answer

Azure Files (standard)

Answer

Azure Cosmos DB

Answer

Azure Table Storage

Question 14

You need to design a data storage solution for a mobile app that requires low-latency reads and writes globally. The data is JSON documents with varying schemas. Which Azure service should you choose?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is the correct choice because it provides native global distribution with multi-region writes and single-digit-millisecond latency at the 99th percentile, making it ideal for a mobile app requiring low-latency reads and writes worldwide. It natively supports JSON documents with varying schemas through its document model and offers multiple consistency levels to balance performance and data integrity.

Answer

Azure Cache for Redis

Answer

Azure SQL Database

Answer

Azure Table Storage

Question 15

An application requires a highly available key-value store with sub-millisecond read and write latencies across multiple Azure regions. The data model is simple and does not require complex queries. Which Azure data store should they choose?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is the correct choice because it provides a globally distributed, multi-region key-value store with guaranteed sub-10-millisecond read and write latencies at the 99th percentile, and supports multiple consistency models including eventual consistency for even lower latency. Its turnkey global distribution enables active-active replication across Azure regions, meeting the high availability and sub-millisecond performance requirements without complex query support.

Answer

Azure SQL Database

Answer

Azure Table Storage

Answer

Azure Cache for Redis