AZ-305 Practice Test 5 — 25 Questions

Question 1

A company runs SQL Server on an Azure virtual machine. They need to automate database backups with application-consistency and retain backups for 10 years to meet compliance. They also want to restore to any point in time within the last 35 days. Which Azure Backup solution should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Backup for SQL Server in Azure VM. Azure Backup for SQL Server in Azure VM (Option A) is correct because it provides native application-consistent backups for SQL Server databases running on Azure VMs, supports long-term retention (LTR) up to 10 years using the backup vault's retention rules, and enables point-in-time restore (PITR) for the last 35 days by leveraging SQL Server transaction log backups. This solution is specifically designed for SQL Server workloads and meets both compliance and recovery requirements without additional infrastructure.

Answer

Azure Backup for Azure VM

Answer

Azure Site Recovery

Answer

SQL Server Always On Availability Groups

Question 2

Refer to the exhibit. You deploy this ARM template to a resource group in the East US region. You specify the parameter storageAccountType as 'Standard_GRS'. Which of the following is true about the deployed storage account?

Accepted Answer

The storage account is geo-redundant and replicates data to a paired region.. The parameter 'storageAccountType' is set to 'Standard_GRS', which specifies geo-redundant storage (GRS). GRS replicates your data synchronously three times within a single region using LRS, then asynchronously replicates to a paired secondary region, ensuring durability even during a regional outage.

Answer

The storage account name will be 'storage' followed by a random string.

Answer

The storage account will be deployed in the same region as specified by the parameter.

Answer

The storage account is zone-redundant and replicates data across availability zones.

Question 3

Your organization uses Microsoft Sentinel for security information and event management (SIEM). You need to collect logs from on-premises firewalls and send them to Sentinel. Which TWO connectors can you use? (Choose two.)

Accepted Answer

Syslog. Syslog is a standard protocol for sending log messages from network devices, including firewalls, to a central collector. Common Event Format (CEF) is a syslog-based format that normalizes logs from different security products, making them easier to parse and analyze in Sentinel. Both connectors allow on-premises firewalls to forward their logs to a Log Analytics agent or AMA, which then sends them to Sentinel.

Answer

DNS

Answer

Azure Activity Log

Answer

Windows Security Events via AMA

Question 4

You are designing a disaster recovery (DR) solution for a critical application hosted on Azure VMs. The solution must meet the following requirements: - Recovery Point Objective (RPO) of 15 minutes. - Recovery Time Objective (RTO) of 1 hour. - Automatically fail over to a secondary region in the event of a regional outage. - Support for non-disruptive DR testing. Which THREE components should you include in the solution? (Choose three.)

Accepted Answer

Azure Site Recovery test failover capability. Azure Site Recovery's test failover capability allows you to perform non-disruptive DR testing by isolating the test failover in a separate virtual network, ensuring no impact on the production environment. This meets the explicit requirement for non-disruptive DR testing while validating replication and failover processes.

Answer

Azure Backup

Answer

Azure Front Door

Question 5

Refer to the exhibit. A company is analyzing Azure Storage diagnostic logs using this KQL query. They notice a high number of GetBlob operations on BlockBlobs. The storage account is used for a web application that serves static content. What should they recommend to reduce the number of GetBlob operations?

Accepted Answer

Enable Azure CDN or Azure Front Door to cache content.. Enabling Azure CDN or Azure Front Door caches static content at edge locations, reducing the number of direct GetBlob operations against the storage account. This offloads repeated requests from the origin storage, lowering both operational costs and latency for the web application.

Answer

Implement Azure Blob Storage life cycle management to move data to the archive tier.

Answer

Use Azure File Sync to cache files on-premises.

Answer

Enable Azure Storage Analytics logging to track operations.

Question 6

You are designing a business continuity solution for a global SaaS application that runs on Azure Kubernetes Service (AKS) with Azure Cosmos DB as the database. The solution must support multi-region writes and automatic failover with zero data loss. Which THREE components should you include in your design? (Choose three.)

Accepted Answer

Deploy Azure Cache for Redis Enterprise with active geo-replication.. Azure Cache for Redis Enterprise with active geo-replication is correct because it provides a globally distributed cache that supports multi-region writes and automatic failover with zero data loss. This ensures that cached data remains consistent across regions, which is critical for a global SaaS application requiring high availability and low latency.

Answer

Use Azure Traffic Manager to route traffic to the primary region.

Answer

Use Azure SQL Database with failover groups for the database tier.

Question 7

Which THREE of the following are required components for a disaster recovery solution using Azure Site Recovery for on-premises Hyper-V VMs?

Accepted Answer

A Recovery Services vault in the target Azure region.. A Recovery Services vault in the target Azure region is required because it serves as the central management and storage container for replication data, configuration settings, and recovery points. Azure Site Recovery (ASR) uses this vault to orchestrate replication, failover, and failback for on-premises Hyper-V VMs to Azure. Without a vault in the target region, there is no destination to store replicated data or manage the recovery process.

Answer

Azure Backup Server installed on-premises.

Answer

An ExpressRoute connection from on-premises to Azure.

Question 8

You are designing an identity lifecycle management solution for a multinational company. Employees frequently change departments, and you need to automate the assignment and removal of application access based on their current department. Which THREE Microsoft Entra features should you use?

Accepted Answer

Dynamic membership groups. Dynamic membership groups (A) are correct because they automatically add or remove users based on attribute values like 'department'. When an employee changes departments, their department attribute is updated, and the group membership is recalculated, granting or revoking access to applications assigned to that group. This is the core mechanism for automating access changes based on user attributes.

Answer

Microsoft Entra Privileged Identity Management

Answer

Microsoft Entra self-service password reset

Question 9

Refer to the exhibit. This ARM template configures backup for an Azure App Service web app. The backup is scheduled daily. What is the primary limitation of this backup strategy in meeting a disaster recovery RPO of 4 hours?

Accepted Answer

The backup frequency is 1 day, resulting in an RPO of up to 24 hours. The backup frequency is set to 1 day, meaning the most recent backup could be up to 24 hours old. To meet a Recovery Point Objective (RPO) of 4 hours, you need backups taken at least every 4 hours. Azure App Service backup does not support sub-daily scheduling natively; you would need to use Azure Backup or custom logic to achieve a 4-hour RPO.

Answer

The backup storage account is in the same region as the web app

Answer

The retention period of 30 days is too short

Answer

The backup does not include the web app configuration

Question 10

You are designing a microservices architecture on Azure Kubernetes Service (AKS). The solution must handle traffic spikes by automatically scaling pods based on CPU utilization. Additionally, you need to minimize cost by scaling down nodes when not in use. Which two features should you implement? (Choose two.)

Accepted Answer

Horizontal Pod Autoscaler (HPA). Horizontal Pod Autoscaler (HPA) automatically scales the number of pod replicas based on observed CPU utilization (or custom metrics), directly addressing the requirement to handle traffic spikes by scaling pods. Cluster Autoscaler automatically adjusts the number of AKS nodes by scaling down unused nodes and scaling up when pods are unschedulable, which minimizes cost by reducing node count during low usage.

Answer

Azure Load Balancer

Answer

Vertical Pod Autoscaler (VPA)

Answer

Azure Container Instances (ACI)

Question 11

Which THREE considerations are important when designing a data storage solution for a high-throughput IoT ingestion pipeline in Azure?

Accepted Answer

Ingestion throughput limits of the storage service. Azure Storage services like Blob Storage and Event Hubs have defined ingestion throughput limits (e.g., up to 20 MB/s per partition or 1 MB/s per ingress for standard-tier Event Hubs). Exceeding these limits causes throttling (HTTP 429 errors) and data loss, making throughput capacity a critical design consideration for high-throughput IoT pipelines.

Answer

Network latency between devices and Azure

Answer

Data consistency levels required by downstream consumers

Question 12

Which TWO data storage solutions in Azure provide built-in, automatic geo-redundancy for disaster recovery across paired regions?

Accepted Answer

Azure SQL Database (active geo-replication). Azure SQL Database's active geo-replication automatically creates a readable secondary database in a paired Azure region, enabling synchronous or asynchronous replication for disaster recovery. Azure Blob Storage with GRS or RA-GRS replicates data to a paired secondary region automatically, ensuring durability even during a regional outage. Both services provide built-in geo-redundancy without manual configuration beyond selecting the replication option.

Answer

Azure Cosmos DB (default)

Answer

Azure Data Lake Storage Gen2

Answer

Azure Files (standard tier)

Question 13

A company needs to implement a hybrid identity solution that allows users to access both on-premises applications and Microsoft 365 using a single identity. The company has on-premises Active Directory Domain Services (AD DS). They want to synchronize identities to the cloud while also enabling password writeback for self-service password reset. Which Azure service should they use?

Accepted Answer

Microsoft Entra Connect. Microsoft Entra Connect (formerly Azure AD Connect) is the correct tool for synchronizing on-premises AD DS identities to Microsoft Entra ID while enabling password writeback for self-service password reset (SSPR). It supports the required hybrid identity scenarios, including password hash synchronization or pass-through authentication, and can be configured to write passwords back to on-premises AD DS via the SSPR writeback feature.

Answer

Microsoft Entra ID

Answer

Microsoft Entra Connect Health

Answer

Microsoft Entra Domain Services

Question 14

A company uses Azure Site Recovery to replicate VMs from the primary region to the secondary region. During a disaster, they want to ensure that the failover process is automated and includes runbooks to perform post-failover actions. Which TWO components are required? (Choose two.)

Accepted Answer

Azure Automation runbooks. Azure Automation runbooks are required because they contain the PowerShell or Python scripts that execute post-failover actions, such as updating DNS records, reconfiguring network settings, or starting dependent services. Azure Site Recovery Recovery Plans are required because they orchestrate the failover sequence, including grouping VMs into ordered groups and invoking runbooks at specific steps. Together, they enable automated, scripted post-failover tasks within a structured failover workflow.

Answer

Azure Monitor alerts

Answer

Azure Logic Apps

Answer

Azure Backup

Question 15

You are reviewing a PowerShell script for Azure SQL Database. The exhibit shows the script that sets backup retention. What is the effect of running this script?

Accepted Answer

It sets the short-term backup retention to 7 days, enabling point-in-time restore within that period.. The script uses the `Set-AzSqlDatabaseBackupShortTermRetentionPolicy` cmdlet with `-RetentionDays 7`, which configures the short-term backup retention period for point-in-time restore (PITR) to 7 days. This allows restoring the database to any point within the last 7 days, as automated backups are retained for that duration.

Answer

It enables geo-redundant backups for the database.

Answer

It sets the long-term retention (LTR) backup policy to 7 days.

Answer

It increases the backup retention from 7 to 35 days.

Question 16

Which TWO of the following are true about Microsoft Entra ID Governance features?

Accepted Answer

Access reviews allow administrators to periodically review and attest to access rights.. Microsoft Entra ID Access Reviews enable administrators to periodically review and attest to the access rights of users, groups, or applications, ensuring that only authorized users retain access. This is a core governance feature that helps organizations meet compliance and security requirements by automating the certification process.

Answer

Conditional Access policies govern access based on location and device.

Answer

Privileged Identity Management (PIM) provides just-in-time access for all users.

Answer

Identity Protection automatically blocks all risky sign-ins.

Question 17

An organization is migrating on-premises Oracle databases to Azure. They require minimal code changes and support for Oracle PL/SQL stored procedures. Which Azure data service best meets these requirements?

Accepted Answer

Azure Database for PostgreSQL with Oracle compatibility. Azure Database for PostgreSQL with the Oracle compatibility extension (e.g., orafce) provides support for Oracle PL/SQL stored procedures and syntax, minimizing code changes during migration. This service is designed to handle Oracle workloads with minimal re-engineering, unlike other Azure database options that lack native Oracle compatibility.

Answer

Azure Database for MySQL

Answer

Azure SQL Database

Answer

Azure Cosmos DB

Question 18

A multinational company plans to deploy a new application on Azure. The application must comply with GDPR and requires data residency in the EU. The solution should minimize latency for users in Europe and provide disaster recovery across regions. Which Azure architecture should the company implement?

Accepted Answer

Deploy the application in two EU regions with Azure Traffic Manager and Azure Cosmos DB multi-region writes.. It meets all requirements: deploying in two EU regions ensures data residency within the EU, Azure Traffic Manager provides low-latency routing for European users via DNS-based traffic distribution, and Azure Cosmos DB multi-region writes enable active-active disaster recovery with automatic failover and no data loss, minimizing latency for writes across regions.

Answer

Deploy the application in two EU regions with Azure Front Door and Azure SQL Database geo-replication.

Answer

Deploy the application in a single Azure region in Ireland with Azure Site Recovery for DR.

Answer

Deploy the application in a single EU region with Azure Site Recovery and Azure Redis Cache.

Question 19

Which TWO Azure services can be used to host a MongoDB-compatible database with global distribution? (Select two.)

Accepted Answer

Azure Cosmos DB API for MongoDB. Azure Cosmos DB API for MongoDB is correct because it provides a MongoDB-compatible API layer over Cosmos DB's globally distributed, multi-model database engine. This allows you to use standard MongoDB drivers and tools while benefiting from Cosmos DB's turnkey global distribution, multi-region writes, and 99.999% availability SLA.

Answer

Azure SQL Database

Answer

Azure Database for PostgreSQL

Answer

Azure Cache for Redis

Question 20

Drag and drop the steps to configure an Azure Application Gateway with end-to-end TLS encryption into the correct order.

Accepted Answer

Step 1: Obtain a TLS/SSL certificate. Step 2: Upload the certificate to the Application Gateway. Step 3: Configure the backend pool. Step 4: Create backend HTTP settings with HTTPS and upload the backend certificate (if required). Step 5: Create a routing rule.. First, have the certificate. Upload it, configure the backend, set up HTTP settings with TLS, then create the rule.

Answer

Step 1: Upload the certificate to the Application Gateway. Step 2: Obtain a TLS/SSL certificate. Step 3: Configure the backend pool. Step 4: Create backend HTTP settings with HTTPS and upload the backend certificate. Step 5: Create a routing rule.

Answer

Step 1: Obtain a TLS/SSL certificate. Step 2: Configure the backend pool. Step 3: Upload the certificate to the Application Gateway. Step 4: Create backend HTTP settings with HTTPS and upload the backend certificate. Step 5: Create a routing rule.

Answer

Step 1: Obtain a TLS/SSL certificate. Step 2: Upload the certificate to the Application Gateway. Step 3: Create backend HTTP settings with HTTPS and upload the backend certificate. Step 4: Configure the backend pool. Step 5: Create a routing rule.