AZ-305 Practice Test 35 — 15 Questions

Question 1

Your company runs an on-premises application that needs to be failed over to Azure in the event of a disaster. The application uses a SQL Server database and requires an RPO of 15 minutes and an RTO of 1 hour. You plan to use Azure Site Recovery (ASR) for the VMs and Azure SQL Database for the database. Which combination of actions should you take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use ASR with 15-minute replication for the VMs and configure a failover group for Azure SQL Database with active geo-replication.. It meets both the RPO of 15 minutes and RTO of 1 hour. Azure Site Recovery (ASR) with 15-minute replication ensures VM replication within the RPO, while Azure SQL Database failover groups with active geo-replication provide automatic, continuous data synchronization and a fast, orchestrated failover for the database, achieving the required RTO.

Answer

Use ASR with 5-minute replication and configure SQL Server Log Shipping to an Azure VM.

Answer

Use ASR with 30-minute replication frequency and backup the SQL Server database every 15 minutes.

Answer

Use ASR with 15-minute replication and restore the SQL Server database from backup.

Question 2

Refer to the exhibit. You are analyzing Azure VM performance using Azure Monitor Logs. You run the KQL query shown. What is the purpose of the 'take 10' operator?

Accepted Answer

Limits the results to the first 10 rows after sorting by time.. The 'take 10' operator in Kusto Query Language (KQL) returns a specified number of arbitrary rows from the query result set. When used after a sort operator (e.g., 'order by TimeGenerated desc'), it effectively limits the output to the first 10 rows of the sorted data, which in this context are the 10 most recent log entries. This is the standard behavior of 'take' in KQL, as it does not guarantee any specific order unless preceded by a sort.

Answer

Limits the time range to the last 10 hours.

Answer

Filters the results to only include the top 10 CPUs.

Answer

Samples the data to reduce query cost.

Question 3

AdventureWorks is a global retailer with a cloud-native architecture. They have a microservices application deployed on Azure Kubernetes Service (AKS). Each microservice needs to store its own data. The data requirements vary: (1) Shopping cart service: key-value data with high write throughput and low latency, data can be lost if not critical; (2) Order service: transactional data with strong consistency and ACID compliance; (3) Product catalog service: semi-structured product data that supports complex queries and is globally distributed for low-latency reads. The solution must use Azure PaaS services and minimize operational overhead. You need to design the data storage for each microservice. What should you recommend?

Accepted Answer

Azure Cache for Redis for shopping cart, Azure SQL Database for orders, Azure Cosmos DB for product catalog.. Azure Cache for Redis provides a high-throughput, low-latency key-value store ideal for the shopping cart service where data loss is acceptable. Azure SQL Database offers full ACID compliance and strong consistency required for transactional order data. Azure Cosmos DB supports semi-structured data with global distribution and complex querying via its SQL API, meeting the product catalog's needs while minimizing operational overhead as a fully managed PaaS service.

Answer

Azure Cosmos DB for all three services.

Answer

Azure Table Storage for shopping cart, Azure SQL Database for orders, Azure Cosmos DB for product catalog.

Answer

Azure SQL Database for all three services.

Question 4

A multinational corporation needs to design a global DNS solution for Azure resources. They require automatic failover across Azure regions and low-latency responses based on the client's geographic location. The solution must also support custom domains without exposing the underlying Azure public IP addresses. Which combination of Azure services should they use?

Accepted Answer

Azure Traffic Manager with geographic routing and Azure Front Door. Azure Front Door provides global load balancing with automatic failover across regions and low-latency routing based on the client's geographic location via its anycast protocol. Azure Traffic Manager with geographic routing complements this by directing traffic to specific regional endpoints based on the client's origin, and together they support custom domains while hiding the underlying Azure public IP addresses through Front Door's frontend endpoint.

Answer

Azure Application Gateway with Azure Front Door

Answer

Azure DNS with Azure Traffic Manager

Answer

Azure Traffic Manager with priority routing and Azure Application Gateway

Question 5

A company needs to store immutable audit logs for regulatory compliance. The logs must be stored in a write-once, read-many (WORM) state for 7 years. Which Azure storage feature should be used?

Accepted Answer

Azure Blob Storage immutable storage with time-based retention. Azure Blob Storage immutable storage with time-based retention enforces a WORM (Write Once, Read Many) state, preventing logs from being modified or deleted for a specified retention period. This directly meets the regulatory requirement to store audit logs immutably for 7 years, as the policy locks the data at the container or blob level and cannot be removed until the retention interval expires.

Answer

Azure SQL Database temporal tables

Answer

Azure Blob Storage change feed

Answer

Azure Blob Storage soft delete

Question 6

You need to design a disaster recovery strategy for an Azure SQL Database that supports a critical financial application. The recovery point objective (RPO) is 5 seconds and recovery time objective (RTO) is 30 seconds. Which option should you choose?

Accepted Answer

Configure active geo-replication with auto-failover groups.. Active geo-replication with auto-failover groups is the correct choice because it provides continuous data replication to a secondary region with an RPO of 5 seconds (asynchronous replication) and an RTO of 30 seconds when auto-failover is enabled. This meets the stringent requirements for a critical financial application, as failover groups handle both database and server-level failover automatically, ensuring minimal data loss and rapid recovery.

Answer

Use failover groups with manual failover.

Answer

Use long-term retention (LTR) backups.

Answer

Enable geo-restore (geo-redundant backup).

Question 7

You are designing a containerized microservices application on Azure Kubernetes Service (AKS). The application must scale automatically based on HTTP traffic. You need to minimize cost by scaling down to zero pods when there is no traffic. Which scaling solution should you use?

Accepted Answer

Kubernetes Event-driven Autoscaler (KEDA). KEDA (Kubernetes Event-driven Autoscaler) is the correct choice because it can scale the number of pods in an AKS deployment down to zero when there is no HTTP traffic, and then scale up from zero when traffic resumes. Unlike the Horizontal Pod Autoscaler (HPA), which cannot scale below 1 replica by default, KEDA works with external event sources (like HTTP requests via an add-on) to achieve true zero-to-N scaling, minimizing cost during idle periods.

Answer

Horizontal Pod Autoscaler (HPA)

Answer

Cluster Autoscaler

Answer

Vertical Pod Autoscaler (VPA)

Question 8

Refer to the exhibit. You are reviewing an ARM template that deploys a virtual network with two subnets. Subnet-b includes a delegation to Microsoft.Web/serverFarms. What is the purpose of this delegation?

Accepted Answer

It enables Azure App Service instances to be deployed into subnet-b. Delegating a subnet to Microsoft.Web/serverFarms explicitly authorizes Azure App Service (specifically, the App Service Plan's infrastructure) to inject network interfaces into that subnet. This is required for features like regional VNet Integration, where an App Service instance needs direct access to resources in the virtual network without going through a public endpoint. Without this delegation, the App Service cannot use the subnet for its internal networking.

Answer

It allows subnet-b to use a different address space

Answer

It configures a firewall policy for subnet-b

Answer

It creates a peering connection to another virtual network

Question 9

A global company stores customer profile data in JSON format. The application requires low-latency writes and reads from multiple regions. The solution must support multi-region writes with automatic conflict resolution and provide high availability. Which Azure Cosmos DB configuration should they choose?

Accepted Answer

SQL API with eventual consistency and multi-region writes enabled. The scenario demands low-latency multi-region writes with automatic conflict resolution and high availability. Azure Cosmos DB's SQL API supports multi-region writes with eventual consistency, which is the only consistency level that allows multi-region writes. Eventual consistency provides the lowest latency and highest availability, and Cosmos DB's automatic conflict resolution handles concurrent writes across regions using last-writer-wins (LWW) or custom conflict resolution policies.

Answer

MongoDB API with strong consistency and multi-region writes enabled

Answer

Table API with consistent prefix consistency and single-region writes

Answer

Gremlin API with session consistency and multi-region writes enabled

Question 10

Your company has an Azure subscription with multiple virtual networks (VNets) in different regions. You need to ensure that resources in all VNets can communicate with each other privately over the Microsoft backbone network. Which Azure solution should you implement?

Accepted Answer

VNet peering. VNet peering connects Azure virtual networks privately over the Microsoft backbone network, enabling resources in different VNets (including those in different regions) to communicate directly without traversing the public internet. It uses the Azure infrastructure to route traffic between peered VNets with low latency and high bandwidth, meeting the requirement for private inter-VNet communication.

Answer

Azure ExpressRoute

Answer

Azure DNS

Answer

Azure VPN Gateway

Question 11

A company uses Azure Backup to protect on-premises Windows servers and Azure VMs. They need to restore a file from a backup of an Azure VM that was deleted three months ago. The backup policy retains daily backups for 30 days and weekly backups for 12 months. What is the CORRECT way to restore the file?

Accepted Answer

Use the file-level recovery option to mount the recovery point as a drive and copy the file. Azure Backup supports file-level recovery for Azure VMs by mounting the recovery point as a network drive using iSCSI. This allows you to browse and copy individual files without restoring the entire VM or disk. Since the backup is older than 30 days but within 12 months, a weekly recovery point is available and can be used for file-level restore.

Answer

Azure Backup does not support file-level restore for Azure VMs; restore the entire disk

Answer

Restore the entire VM from a weekly recovery point and then copy the file

Answer

Use the 'Restore to a new VM' option and select the file during the restore process

Question 12

A company uses Azure Redis Cache to improve the performance of a web application. They need to ensure that cached data survives a failover to a secondary region. Which Azure Redis Cache tier should they choose?

Accepted Answer

Premium tier. The Premium tier of Azure Redis Cache supports geo-replication, which enables data to be replicated across paired regions. This ensures that cached data survives a failover to a secondary region, meeting the requirement for disaster recovery. The Standard tier only provides replication within a single region, while the Basic tier offers no replication at all.

Answer

Standard tier

Answer

Basic tier

Answer

Enterprise tier

Question 13

A company uses Azure Cosmos DB for a globally distributed e-commerce application. They need to ensure that write operations in one region are immediately visible in all other regions. Which consistency level should they choose?

Accepted Answer

Strong. Strong consistency ensures that write operations are synchronously replicated across all regions before acknowledging the write. This guarantees that any read operation in any region returns the most recent write, providing linearizability. For a globally distributed e-commerce application requiring immediate visibility of writes, Strong consistency is the correct choice.

Answer

Session

Answer

Eventual

Answer

Bounded staleness

Question 14

A company is designing a data lake for analytics. The data includes personally identifiable information (PII) that must be anonymized before analysts access it. Which Azure service should they use to automate the anonymization process?

Accepted Answer

Microsoft Purview data policies. Microsoft Purview data policies allow you to define and enforce data access policies that can automatically anonymize or mask sensitive data, such as PII, when accessed by analysts. This service integrates with Azure data lake storage and provides a centralized way to manage data governance and compliance, making it the correct choice for automating anonymization in a data lake scenario.

Answer

Azure Policy

Answer

Azure SQL Database dynamic data masking

Answer

Azure Key Vault

Question 15

Refer to the exhibit. You are deploying an ARM template that assigns a policy to audit virtual machines not using managed disks. After deployment, you need to verify that the policy assignment is working. Which Azure CLI command should you run?

Accepted Answer

az policy assignment list --subscription 12345678-1234-1234-1234-123456789abc. The `az policy assignment list` command retrieves all policy assignments in the specified subscription, including the one deployed via the ARM template. This allows you to confirm that the policy assignment exists and is properly configured. To verify that the policy is actually evaluating resources and producing compliance states, you would then use `az policy state list` to see the compliance results, but the question specifically asks to verify that the assignment itself is working, which is done by listing assignments.

Answer

az policy state list --resource-group myResourceGroup

Answer

az policy definition list --subscription 12345678-1234-1234-1234-123456789abc

Answer

az policy event list --subscription 12345678-1234-1234-1234-123456789abc