AZ-305 Practice Test 19 — 15 Questions

Question 1

Your company plans to store sensitive customer data in Azure Blob Storage. The data must be encrypted at rest and in transit. Additionally, access must be audited and restricted based on user identity. Which configuration meets these requirements?

Accepted Answer

Use Azure RBAC for access and Azure Monitor logs for auditing.. Option C is correct because Azure Storage provides encryption at rest (SSE) by default, HTTPS ensures encryption in transit, and Azure RBAC with Azure Monitor logs provides identity-based access and auditing. Option A is wrong because SAS tokens do not use user identity. Option B is wrong because customer-managed keys are optional and not required for encryption at rest. Option D is wrong because firewall rules do not provide identity-based access control.

Answer

Use shared access signatures (SAS) for access control.

Answer

Configure network firewalls and use private endpoints.

Answer

Enable customer-managed keys (CMK) and use SAS.

Question 2

You are designing a data lake for advanced analytics in Azure. The data includes structured, semi-structured, and unstructured data. The solution must support schema-on-read and have the ability to query using SQL. Which Azure service should you choose?

Accepted Answer

Azure Data Lake Storage Gen2.. Option D is correct because Azure Data Lake Storage Gen2 provides a hierarchical namespace for storing all data types and integrates with query engines like Azure Synapse SQL for schema-on-read. Option A is wrong because Azure SQL Database is for structured data only. Option B is wrong because Azure Cosmos DB is for transactional workloads, not data lake. Option C is wrong because Azure Blob Storage lacks the hierarchical namespace needed for a data lake.

Answer

Azure Blob Storage.

Answer

Azure SQL Database.

Answer

Azure Cosmos DB.

Question 3

Your company needs to store configuration data (key-value pairs) for applications in a highly scalable and low-latency manner. The data is accessed frequently. Which Azure service should you choose?

Accepted Answer

Azure Cache for Redis.. Option C is correct because Azure Cache for Redis provides in-memory key-value storage with low latency and high scalability. Option A is wrong because Azure Table Storage is slower. Option B is wrong because Azure Cosmos DB is overkill for simple key-value. Option D is wrong because Azure SQL Database is relational and has higher latency.

Answer

Azure Cosmos DB.

Answer

Azure SQL Database.

Answer

Azure Table Storage.

Question 4

Your company has a large number of unstructured files (images, videos) that need to be stored cost-effectively in Azure. The data is accessed infrequently but must be available within minutes when needed. Which storage tier should you recommend?

Accepted Answer

Cool tier.. Option B is correct because the Cool tier is for infrequently accessed data with immediate availability and lower cost than Hot. Option A is wrong because Hot tier is for frequently accessed data and costs more. Option C is wrong because Archive tier has a retrieval time of hours. Option D is wrong because Premium tier is for low-latency, high-performance scenarios.

Answer

Premium tier.

Answer

Archive tier.

Answer

Hot tier.

Question 5

Which TWO Azure services can be used to implement a globally distributed database that supports multi-region writes and provides low-latency access to users worldwide? (Choose two.)

Accepted Answer

Azure Cosmos DB with multi-master enabled.. Option A and D are correct. Azure Cosmos DB with multi-master supports multi-region writes. Azure SQL Database active geo-replication supports readable secondaries but not multi-region writes; however, with failover groups it can support writes only in one region at a time. Option B is wrong because Azure Database for PostgreSQL does not natively support multi-region writes. Option C is wrong because Azure Cache for Redis is a cache, not a database. Option E is wrong because Azure Storage is not a database.

Answer

Azure Storage with geo-redundant storage (GRS).

Answer

Azure Cache for Redis with geo-replication.

Answer

Azure Database for PostgreSQL with geo-replication.

Question 6

You are designing a storage solution for a global e-commerce platform that must serve users from multiple regions with low latency. The data includes product catalog (read-heavy, rarely updated) and user session state (write-heavy, short-lived). Which combination of Azure services meets the requirements?

Accepted Answer

Azure Cosmos DB for session state and Azure Front Door with Azure CDN for catalog.. Option A is correct because Azure Cosmos DB provides multi-region writes for low-latency session state, and Azure Front Door with Azure CDN can cache static catalog data globally. Option B is wrong because Azure SQL Database with geo-replication is not ideal for session state due to cost and performance. Option C is wrong because Azure Table Storage does not support multi-region writes natively. Option D is wrong because Azure Cache for Redis is not suitable as the primary persistent store for session state.

Answer

Azure Cache for Redis for session state and Azure Front Door for catalog.

Answer

Azure Table Storage for session state and Azure Front Door for catalog.

Answer

Azure SQL Database with geo-replication for both.

Question 7

Your organization needs to share large files (up to 100 GB) with external partners securely. The solution must allow partners to access files for a limited time and track who accessed which file. Which Azure solution should you use?

Accepted Answer

Azure Blob Storage with shared access signatures (SAS).. Option B is correct because Azure Storage shared access signatures (SAS) with expiration and access logging provide time-limited access and tracking. Option A is wrong because Azure Files with SMB requires domain join. Option C is wrong because Azure Data Box is for physical data transfer. Option D is wrong because Azure Blob Storage with public access does not provide time-limited control.

Answer

Azure Data Box.

Answer

Azure Files with SMB protocol.

Answer

Azure Blob Storage with public access.

Question 8

Which TWO Azure services provide native support for Azure Active Directory (now Entra ID) authentication for accessing data? (Choose two.)

Accepted Answer

Azure Blob Storage.. Options A and C are correct. Azure SQL Database supports Microsoft Entra ID authentication. Azure Storage supports Microsoft Entra ID authentication for blobs and queues. Option B is wrong because Azure Cosmos DB uses keys or tokens, not native Entra ID. Option D is wrong because Azure Cache for Redis uses access keys. Option E is wrong because Azure Files supports Entra ID for SMB but not for REST; however, the question likely expects storage and SQL. Azure Files does support Entra ID for SMB, so it could be considered, but it's less common. The best answers are SQL and Storage.

Answer

Azure Files (SMB).

Answer

Azure Cache for Redis.

Answer

Azure Cosmos DB.

Question 9

A company plans to migrate its on-premises Oracle database to Azure. The database is currently 2 TB and experiences high write throughput. The solution must support: - ACID transactions - Automatic failover to a secondary region - Minimal downtime during maintenance. Which three Azure services should the company include in the solution? (Choose three.)

Accepted Answer

Azure SQL Database Managed Instance. Option A is correct because Azure SQL Database Managed Instance supports native Oracle migration and ACID transactions. Option B is correct because active geo-replication provides automatic failover to a secondary region. Option D is correct because Azure SQL Database zone-redundant configuration ensures high availability within a region. Option C is wrong because Azure Cosmos DB is NoSQL and not ACID for multi-document transactions. Option E is wrong because Azure Database for PostgreSQL is not optimized for Oracle migration.

Answer

Azure Cosmos DB with SQL API

Answer

Azure Database for PostgreSQL - Hyperscale (Citus)

Question 10

Refer to the exhibit. An Azure Policy is assigned to a subscription. A user tries to create a blob container via the Azure portal and receives a deny error. What is the most likely reason?

Accepted Answer

The policy denies creation of blob containers. Option A is correct because the policy denies the 'Microsoft.Storage/storageAccounts/blobServices/containers/write' action when the request action is 'Microsoft.Storage/storageAccounts/blobServices/containers/put', which is the create container operation. Option B is wrong because the policy does not check encryption. Option C is wrong because the policy does not check public access. Option D is wrong because the policy does not check blob immutability.

Answer

The blob container requires immutable storage

Answer

The user is trying to enable public access on the container

Answer

The storage account does not have encryption enabled

Question 11

Which TWO Azure storage replication options provide durability for data in the event of a regional disaster? (Select two.)

Accepted Answer

Geo-zone-redundant storage (GZRS). Options B and D are correct. Geo-redundant storage (GRS) replicates data to a secondary region. Geo-zone-redundant storage (GZRS) combines zone-redundancy with geo-redundancy. Option A is wrong because LRS only protects within a single datacenter. Option C is wrong because ZRS protects within a region only. Option E is wrong because RA-GRS provides read access but same durability as GRS.

Answer

Read-access geo-redundant storage (RA-GRS)

Answer

Zone-redundant storage (ZRS)

Answer

Locally redundant storage (LRS)

Question 12

You need to design a disaster recovery strategy for an Azure SQL Database that supports a critical financial application. The recovery point objective (RPO) is 5 seconds and recovery time objective (RTO) is 30 seconds. Which option should you choose?

Accepted Answer

Configure active geo-replication with auto-failover groups.. Option C is correct because Azure SQL Database active geo-replication provides continuous data synchronization with an RPO of 5 seconds and automatic failover with an RTO of 30 seconds when configured with failover groups. Option A is wrong because geo-restore has an RPO of 1 hour. Option B is wrong because long-term retention does not provide near-real-time RPO. Option D is wrong because auto-failover groups with manual failover have higher RTO.

Answer

Use failover groups with manual failover.

Answer

Use long-term retention (LTR) backups.

Answer

Enable geo-restore (geo-redundant backup).

Question 13

A small business is migrating its on-premises file server to Azure. The file server contains 2 TB of data that is accessed infrequently. The business wants to minimize costs and only pay for storage used. The solution must support SMB protocol and allow for on-premises caching to reduce latency. Which Azure storage solution should the business recommend?

Accepted Answer

Azure Files Standard tier with Azure File Sync. Option B is correct because Azure Files with Azure File Sync provides cloud storage with SMB access and on-premises caching via sync. Option A is wrong because Azure Blob Storage does not support SMB. Option C is wrong because Azure NetApp Files is more expensive. Option D is wrong because Azure Disk Storage is not a file sharing solution.

Answer

Azure Disk Storage Standard HDD with shared disks

Answer

Azure NetApp Files Standard tier with cross-region replication

Answer

Azure Blob Storage Cool tier with Azure Storage Explorer

Question 14

You are designing a backup strategy for Azure Files shares that contain critical data. The backup must support snapshot-based backups and allow restoration to a specific point in time. The solution must also protect against accidental deletion. What should you use?

Accepted Answer

Use Azure Backup for Azure Files with soft delete enabled.. Azure Backup for Azure Files provides snapshot-based backups with point-in-time restore and soft delete protection. Option A is incorrect because Storage Accounts replication does not provide point-in-time restore. Option C is incorrect because file sync does not provide backup. Option D is incorrect because it lacks soft delete.

Answer

Use Azure File Sync with cloud tiering.

Answer

Use Azure Storage account geo-redundant storage (GRS) with versioning.

Answer

Use Azure Backup for Azure Files without soft delete.

Question 15

A company has a disaster recovery plan that requires testing failover of Azure VMs regularly without impacting the production environment. Which feature of Azure Site Recovery should they use?

Accepted Answer

Test failover. Test failover (also known as drill) allows you to validate your disaster recovery plan without affecting production. Option A is incorrect because planned failover is for actual migration. Option C is incorrect because unplanned failover is for actual disasters. Option D is incorrect because failback is for returning to primary after failover.

Answer

Planned failover

Answer

Unplanned failover

Answer

Failback