AZ-305 Practice Test 22 — 15 Questions

Question 1

Your company plans to migrate an on-premises application to Azure. The application requires low-latency access to a shared file system that supports SMB protocol. Which Azure storage solution should you recommend?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Files. Azure Files provides fully managed file shares in the cloud that support the SMB protocol, making it the ideal solution for migrating on-premises applications that require low-latency access to a shared file system. It allows you to lift and shift applications that rely on SMB file shares without code changes, and it can be accessed from Azure VMs or on-premises via SMB 3.0.

Answer

Azure Blob Storage

Answer

Azure Disk Storage

Answer

Azure Queue Storage

Question 2

Which TWO of the following are valid data storage solutions for an Azure-based microservices architecture that requires high throughput and low latency? (Choose two.)

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is a fully managed NoSQL database that provides single-digit millisecond read and write latencies at the 99th percentile, guaranteed by SLAs. It supports multiple APIs (SQL, MongoDB, Cassandra, Gremlin, Table) and can be configured for high throughput with automatic indexing, making it ideal for microservices that require fast, scalable data access.

Answer

Azure Table Storage

Answer

Azure Files

Answer

Azure SQL Database

Question 3

Your organization has multiple Azure subscriptions and uses Azure Blueprints to enforce governance. You need to design a blueprint that includes role assignments, policy assignments, and resource groups. Which THREE components can be included in an Azure Blueprint? (Choose three.)

Accepted Answer

Role assignments. Azure Blueprints allow you to define a repeatable set of Azure resources that adhere to your organization's standards, patterns, and requirements. Role assignments (B) are a core artifact that can be included to grant specific Azure RBAC roles at the blueprint scope, ensuring consistent access control. Policy assignments (C) are also a native blueprint artifact, enabling you to enforce compliance rules across the environment. ARM templates (E) can be included as an artifact to deploy infrastructure as code, making them a valid component of a blueprint definition.

Answer

Management group

Answer

Subscription

Question 4

Refer to the exhibit. You deploy this ARM template to create an Azure Monitor Workbook. The template deploys successfully. What will the workbook display?

Accepted Answer

CPU utilization averaged over 5-minute intervals.. The ARM template configures an Azure Monitor Workbook to query the `InsightsMetrics` table for the `cpu_usage_percentage` metric, which is collected by Azure Monitor Agent (AMA) at a default granularity of 1 minute. The workbook uses the `avg` aggregation and a time grain of `5m` (5 minutes) in the query, so it displays CPU utilization averaged over 5-minute intervals. The `summarize` operator with `bin(TimeGenerated, 5m)` explicitly groups data into 5-minute buckets, making option B correct.

Answer

CPU utilization averaged over 1-hour intervals.

Answer

Memory utilization over time.

Answer

Disk I/O utilization over time.

Question 5

Your company uses Microsoft Entra ID. You need to implement a governance strategy for guest users. Which TWO actions should you take? (Choose two.)

Accepted Answer

Create access reviews for guest users. Access reviews for guest users (Option A) are a core governance control in Microsoft Entra ID, allowing administrators to periodically review and confirm or revoke guest access. This ensures that guest accounts remain necessary and compliant with security policies, directly addressing the governance requirement.

Answer

Disable external identities

Answer

Block all guest user access

Answer

Enable self-service sign-up for guest users

Question 6

Which TWO Azure services provide native support for change data capture (CDC) to stream database changes to other systems?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB provides native change feed support, which is a persistent, ordered log of changes (inserts, updates, deletes) that can be streamed to downstream systems via the Change Feed processor or Azure Functions. This makes it a correct answer for change data capture (CDC) scenarios.

Answer

Azure Table Storage

Answer

Azure Cache for Redis

Answer

Azure Synapse Link for Azure Cosmos DB

Question 7

An application requires a highly available key-value store with sub-millisecond read and write latencies across multiple Azure regions. The data model is simple and does not require complex queries. Which Azure data store should they choose?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is the correct choice because it provides a globally distributed, multi-region key-value store with guaranteed sub-10-millisecond read and write latencies at the 99th percentile, and supports multiple consistency models including eventual consistency for even lower latency. Its turnkey global distribution enables active-active replication across Azure regions, meeting the high availability and sub-millisecond performance requirements without complex query support.

Answer

Azure SQL Database

Answer

Azure Table Storage

Answer

Azure Cache for Redis

Question 8

Which THREE capabilities are provided by Microsoft Entra ID Identity Governance? (Select THREE.)

Accepted Answer

Entitlement management. Microsoft Entra ID Identity Governance is a suite of capabilities designed to help organizations manage and govern access to resources. Entitlement management (A) enables the creation of access packages to automate access requests, approvals, and assignments. Access reviews (B) allow periodic recertification of group memberships and application access to ensure only the right users have access. Privileged Identity Management (C) provides just-in-time privileged access and role activation workflows for Microsoft Entra ID roles and Azure resources, directly supporting governance of elevated access.

Answer

Conditional Access

Answer

Identity Protection

Question 9

Match each Azure identity service to its description.

Accepted Answer

Azure AD: Cloud-based identity and access management service for Microsoft cloud resources.. Microsoft Entra ID is the core identity service for Microsoft cloud. Microsoft Entra B2B enables external collaboration, Azure AD B2C serves customer-facing apps, and Microsoft Entra Domain Services provides domain services for VMs. Common confusions include swapping B2C with Microsoft Entra ID or B2B with AD DS.

Answer

Azure AD: Identity service for customer-facing applications with customizable sign-up and sign-in.

Answer

Azure AD B2B: Provides domain services for Azure VMs.

Question 10

Match each Azure security service to its purpose.

Accepted Answer

Azure Sentinel: Provides intelligent security analytics and threat intelligence across the enterprise.. Correct matches: Azure Sentinel (intelligent security analytics), Azure Firewall (network firewall). Common confusions: Security Center with Key Vault (secret management), Key Vault with DDoS Protection, DDoS Protection with Security Center.

Answer

Azure Security Center: Manages secrets, keys, and certificates used by cloud applications.

Answer

Azure Key Vault: Protects against distributed denial-of-service (DDoS) attacks.

Answer

Azure DDoS Protection: Provides unified security management and threat protection for hybrid workloads.

Question 11

Your company is deploying a web application that experiences unpredictable traffic spikes. You need to ensure the application can handle sudden increases in load automatically without manual intervention and minimize costs during low traffic periods. Which Azure service should you use?

Accepted Answer

Virtual Machine Scale Set with autoscale. Virtual Machine Scale Sets with autoscale rules can automatically adjust the number of VM instances based on demand. Option A (Azure App Service with manual scaling) does not autoscale automatically. Option B (Azure Functions) is for event-driven workloads, not web apps. Option D (Azure Container Instances) does not autoscale natively.

Answer

Azure App Service with manual scale-out

Answer

Azure Functions with consumption plan

Answer

Azure Container Instances

Question 12

You need to provide a team of developers with access to create and manage Azure resources in a specific resource group. The developers should not be able to modify access policies for other users. Which built-in role should you assign?

Accepted Answer

Contributor. The Contributor role allows full management of resources but cannot manage access (role assignments). Owner can manage access. Reader is read-only. User Access Administrator only manages access, not resources.

Answer

Owner

Answer

Reader

Answer

User Access Administrator

Question 13

Match each Azure compute service to its characteristic.

Accepted Answer

Virtual Machines: Provides full control over the operating system and allows custom software installation.. Azure compute services range from IaaS (Virtual Machines) to PaaS (App Service) to serverless (Azure Functions) and container orchestration (AKS). Distractors confuse definitions of serverless and container orchestration, or PaaS and managed Kubernetes.

Answer

Azure Functions: Managed container orchestration service for deploying and managing containerized applications.

Answer

Azure Kubernetes Service: Managed platform for building, deploying, and scaling web apps and APIs.

Question 14

Your organization is designing a governance solution for multiple Azure subscriptions. You need to enforce that all resources are created in specific Azure regions (East US and West Europe only). Additionally, any resource group must have a cost center tag. Which THREE Azure components should you use? (Choose three.)

Accepted Answer

Azure Policy. Azure Policy is correct because it allows you to define and enforce rules for resource creation, such as restricting allowed locations to East US and West Europe. By assigning a built-in or custom policy definition to a management group or subscription, you can prevent any resource from being created outside the specified regions. This directly addresses the requirement to enforce regional compliance.

Answer

Azure Blueprints

Answer

Role-Based Access Control (RBAC)

Question 15

Match each Azure disaster recovery feature to its description.

Accepted Answer

Azure Site Recovery: Replicates workloads from primary site to secondary site, enabling automated failover and failback.. Azure disaster recovery features include Site Recovery for replication and failover, Backup for retention, Availability Zones for datacenter failure protection, and Paired Regions for region-level disaster recovery. Common confusions involve mixing the roles of Site Recovery and Backup.

Answer

Azure Site Recovery: Provides long-term retention of backups.

Answer

Azure Backup: Replicates VMs for failover.