AZ-305 Practice Test 16 — 15 Questions

Question 1

Refer to the exhibit. You need to enable public access to the storage account for a specific IP address while keeping the default action as Deny. What should you do?

Accepted Answer

Add an IP rule with the specific IP address to the ipRules array.. Option C is correct because the Azure Storage account firewall allows you to create IP rules that grant access to specific public IP addresses or ranges while keeping the default action as Deny. By adding an IP rule with the specific IP address to the `ipRules` array, you explicitly allow that IP through the firewall, and all other traffic is denied by the default rule. This is the standard method to enable selective public access without changing the default deny behavior.

Answer

Set the bypass to None to allow all traffic.

Answer

Set the networkAcls to an empty list to remove restrictions.

Answer

Change the defaultAction to Allow and remove the Deny rule.

Question 2

Your company uses Azure SQL Database and needs to retain backups for 7 years for compliance. Which backup retention policy should you configure?

Accepted Answer

Configure long-term retention (LTR) backup policy.. Azure SQL Database's automated backup retention is limited to a maximum of 35 days, which is insufficient for a 7-year compliance requirement. Long-term retention (LTR) allows you to retain full database backups for up to 10 years by storing them in separate Azure Blob Storage containers. Therefore, configuring an LTR backup policy is the correct solution for meeting a 7-year retention mandate.

Answer

Increase automated backup retention to 7 years.

Answer

Configure point-in-time restore backup retention for 7 years.

Answer

Enable geo-redundant backups.

Question 3

Your company uses Azure Cosmos DB for a globally distributed application. You need to ensure that writes in one region are not lost if that region fails. Which consistency level should you use to guarantee that writes are durable?

Accepted Answer

Bounded staleness consistency. Bounded staleness consistency guarantees that writes are durable across regions by ensuring that replicas lag behind the primary by at most K versions or a time interval T. This means that even if a region fails, all acknowledged writes are preserved and will be replicated to other regions within the configured staleness window, preventing data loss.

Answer

Eventual consistency

Answer

Strong consistency

Answer

Consistent prefix consistency

Question 4

Refer to the exhibit. An organization deployed this ARM template to create a storage account. After deployment, they try to enable geo-redundant storage (GRS) but receive an error. What is the most likely reason?

Accepted Answer

The storage account uses Standard_LRS, which does not support GRS.. Option D is correct because Standard_LRS (Locally Redundant Storage) does not support upgrading to GRS (Geo-Redundant Storage) directly. To enable GRS, the storage account must be created with a redundancy tier that supports geo-replication, such as Standard_GRS or Standard_RAGRS. The error occurs because the ARM template specifies Standard_LRS, which only replicates data within a single datacenter and cannot be converted to a geo-redundant tier after deployment.

Answer

The supportsHttpsTrafficOnly property must be set to false.

Answer

The storage account name is not globally unique.

Answer

The minimumTlsVersion property prevents geo-replication.

Question 5

A gaming company stores player session data in Azure Cosmos DB. They need to handle sudden spikes in write traffic without throttling and ensure low-latency reads globally. Which configuration should they use?

Accepted Answer

Autoscale provisioned throughput. Autoscale provisioned throughput (A) is correct because it allows Cosmos DB to automatically scale up to the maximum throughput (up to 10x the base RU/s) during sudden write spikes, preventing throttling (HTTP 429 errors). Combined with multi-region writes (which is a separate configuration), it ensures low-latency global reads by enabling writes to be accepted in any region and replicated asynchronously. This meets both the spike-handling and global read latency requirements.

Answer

Serverless capacity mode

Answer

Multi-region writes

Answer

Manual provisioned throughput

Question 6

Refer to the exhibit. You deploy this Bicep template. Which region is the primary write region?

Accepted Answer

East US. Option A is correct because the location with failoverPriority 0 is the primary write region. Option B is wrong because failoverPriority 1 is secondary. Option C is wrong because the template does not specify a primary region explicitly; the priority determines it. Option D is wrong because the location is set to the resource group's location, but the primary write region is defined by failoverPriority.

Answer

West US

Answer

The resource group's location

Answer

Both regions are primary

Question 7

A financial services company is migrating its on-premises SAP HANA database to Azure. The database requires high IOPS and low latency with a capacity of 4 TB. They need to choose a storage solution that supports SAP HANA certified configurations. Which Azure storage solution should they use?

Accepted Answer

Azure Ultra Disk Storage. Azure Ultra Disk Storage is the correct choice because it is the only Azure managed disk that is SAP HANA certified for high IOPS and sub-millisecond latency, which is critical for SAP HANA workloads. It supports up to 300,000 IOPS and 2,000 MB/s throughput per disk, and can be provisioned with up to 64 TB capacity, easily covering the 4 TB requirement. Premium SSD v2 is not SAP HANA certified for production databases, and Azure NetApp Files, while offering high performance, is not a managed disk and requires specific NFS configurations that may not meet SAP HANA's strict certification requirements for block storage.

Answer

Azure Premium SSD v2

Answer

Azure Standard HDD

Answer

Azure NetApp Files

Question 8

Refer to the exhibit. A custom Azure RBAC role is defined as shown. A user assigned this role is unable to delete blobs in a container. What is the most likely reason?

Accepted Answer

The role does not include delete permission on blobs. Option D is correct because the custom RBAC role definition shown in the exhibit includes 'Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete' under the 'Actions' section, but this permission is a control plane action, not a data plane action. To delete blobs, the role must include the corresponding data action 'Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete/action' under 'DataActions'. Without it, the user lacks the necessary data plane permission to perform blob deletion, even though the control plane permission is present.

Answer

The role is scoped to the storage account but not to the container

Answer

The role does not include read permission on blobs

Answer

The role does not include any dataActions

Question 9

You need to design a storage solution for an Azure virtual machine that runs a mission-critical application. The solution must provide the highest availability SLA and support up to 80,000 IOPS. Which type of Azure managed disk should you use?

Accepted Answer

Premium SSD v2. Premium SSD v2 is correct because it offers the highest availability SLA (99.9% for single-instance VMs) and supports up to 80,000 IOPS per disk, meeting the mission-critical requirements. Unlike Ultra Disk, Premium SSD v2 does not require a dedicated capacity reservation, making it more cost-effective while still delivering high performance.

Answer

Ultra Disk

Answer

Standard SSD

Answer

Premium SSD (non-v2)

Question 10

Refer to the exhibit. You are reviewing the configuration of an Azure Blob Storage container used for storing financial audit records. The exhibit shows the container's immutability policy and legal hold settings. You need to ensure that the audit records cannot be deleted or modified for at least 7 years. What should you do?

Accepted Answer

Delete the container, create a new container, and set the immutability policy to 2555 days before locking.. Option B is correct because the immutability policy is locked at 365 days (1 year) and cannot be increased after locking; you must delete the container, create a new one, and set the immutability period to 2555 days (7 years) before locking. Option A is wrong because you cannot modify a locked policy. Option C is wrong because legal hold does not enforce a time-based retention. Option D is wrong because you cannot add more time to a locked policy.

Answer

Increase the immutability period to 2555 days by updating the policy.

Answer

Modify the immutability period to 2555 days.

Answer

Add additional legal hold tags for each year.

Question 11

You are deploying an Azure SQL Database using the ARM template snippet above. Which of the following describes the resulting database configuration?

Accepted Answer

Standard tier with 100 DTUs. The ARM template snippet specifies `requestedServiceObjectiveName: "S0"`, which maps to the Standard service tier with 100 DTUs. The S0 performance level in Azure SQL Database provides 100 DTUs and a maximum database size of 250 GB, making option A correct.

Answer

Zone-redundant deployment

Answer

Maximum size of 10 GB

Answer

Premium tier with 100 DTUs

Question 12

Which TWO of the following Azure services support storing JSON documents without requiring a predefined schema? (Select two.)

Accepted Answer

Azure Blob Storage. Azure Blob Storage is correct because it can store JSON documents as blobs (block blobs) without requiring a predefined schema. The service treats the JSON as opaque binary data, allowing you to upload, download, and manage JSON files with no schema enforcement, making it suitable for schema-less document storage.

Answer

Azure Purview

Answer

Azure Analysis Services

Answer

Azure SQL Database

Question 13

Which TWO of the following are benefits of using Azure Cosmos DB for a globally distributed application?

Accepted Answer

Multiple consistency models to choose from. Azure Cosmos DB offers multiple well-defined consistency models (strong, bounded staleness, session, consistent prefix, and eventual) that allow developers to balance consistency, availability, and latency according to application needs. This is a key benefit for globally distributed applications because it enables tuning data guarantees across regions without sacrificing performance.

Answer

Support for foreign key constraints across containers

Answer

Built-in support for transactional replication

Answer

Native support for SQL Server stored procedures

Question 14

Your company stores sensitive customer data in Azure Blob Storage. You must ensure that data is encrypted at rest using customer-managed keys (CMK) and that key rotation is automated. You also need to prevent data from being accessed by any Microsoft administrator. Which solution should you implement?

Accepted Answer

Use Azure Key Vault Managed HSM with customer-managed keys and enable double encryption with infrastructure encryption.. Option C is correct because Azure Key Vault Managed HSM provides FIPS 140-2 Level 3 validated hardware security modules (HSMs) for storing customer-managed keys (CMK), supports automated key rotation, and enables double encryption via infrastructure encryption. This ensures that data is encrypted at rest with a customer-controlled key, and the use of Managed HSM prevents Microsoft administrators from accessing the key material, as the HSM is isolated and Microsoft has no export or visibility permissions.

Answer

Use Azure Key Vault (Standard) to store customer-managed keys and enable automatic key rotation.

Answer

Use Azure Disk Encryption with customer-managed keys stored in Azure Key Vault.

Answer

Enable Azure Storage Service Encryption with platform-managed keys.

Question 15

A financial services company needs to store sensitive transaction records in Azure for 7 years to meet regulatory compliance. The data must be immutable and cannot be deleted or modified during the retention period. Which Azure storage feature should you enable?

Accepted Answer

Immutable blob with time-based retention policy. Option C is correct because immutable blob storage with a time-based retention policy enforces WORM (Write Once, Read Many) compliance, ensuring that data cannot be deleted or modified for a specified retention period. This meets the 7-year regulatory requirement for sensitive transaction records, as the policy locks the data at the blob level and prevents any overwrite or deletion, even by administrators with elevated permissions.

Answer

Blob versioning with lifecycle management

Answer

Soft delete for blob storage

Answer

Legal hold on the storage container

AZ-305 Practice Test 16 — 15 Questions

Exhibit

AZ-305 Practice Test 16 — 15 Questions

Exhibit