AZ-305 Practice Test 39 — 15 Questions

Question 1

A company is designing a solution for a global e-commerce platform that requires low-latency access to product catalog data from multiple regions. The data is read-heavy with occasional updates. The solution must support automatic scaling and provide high availability. Which Azure service should you recommend?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Cosmos DB with multi-region writes. Azure Cosmos DB with multi-region writes is the correct choice because it provides global distribution with turnkey multi-master replication, enabling low-latency reads and writes from any Azure region. It supports automatic scaling through request units (RU/s) and offers 99.999% high availability with multiple well-defined consistency levels, making it ideal for a read-heavy, globally distributed e-commerce catalog with occasional updates.

Answer

Azure SQL Database with active geo-replication

Answer

Azure Table Storage

Answer

Azure Cache for Redis

Question 2

Your company is migrating a legacy application to Azure. The application uses a proprietary database that requires file-level access to data files. You need to minimize changes to the application. Which Azure storage solution should you recommend?

Accepted Answer

Azure Files. Azure Files provides fully managed SMB and NFS file shares that offer file-level access over the network, which is exactly what a legacy application requiring file-level access to data files needs. By mapping a drive to an Azure file share, the application can continue using standard file I/O APIs with minimal or no code changes, making it the correct choice for this migration scenario.

Answer

Azure Disk Storage

Answer

Azure Blob Storage

Answer

Azure NetApp Files

Question 3

A company uses Microsoft Entra ID (Microsoft Entra ID). They have many guest users with access to internal SharePoint sites and applications. They need to review guest user access every 90 days and automatically remove access if the guest does not respond to the review request. The solution must be fully automated without custom scripting. Which Microsoft Entra ID feature should they use?

Accepted Answer

Microsoft Entra ID Access Reviews. Microsoft Entra ID Access Reviews is the correct feature because it allows administrators to create recurring reviews of guest user access to groups, applications, and SharePoint sites. It can be configured to automatically remove access if the guest does not respond within a specified period (e.g., 90 days), and it supports full automation without custom scripting by leveraging built-in review schedules and auto-apply actions.

Answer

Microsoft Entra ID Conditional Access

Answer

Microsoft Entra ID Identity Protection

Answer

Microsoft Entra ID Privileged Identity Management

Question 4

A company runs a critical application on Azure VMs in a single region. The application uses Azure SQL Database as its data store. The company needs a disaster recovery solution that can fail over the entire application stack (VMs and database) to another region with a Recovery Point Objective (RPO) of 5 minutes and a Recovery Time Objective (RTO) of 1 hour. The solution must be automated and minimize manual steps. Which combination of Azure services should they implement?

Accepted Answer

Azure Site Recovery for VMs and active geo-replication with auto-failover groups for Azure SQL Database. Azure Site Recovery (ASR) orchestrates replication and automated failover of Azure VMs to a secondary region, meeting the RTO of 1 hour. Active geo-replication with auto-failover groups for Azure SQL Database provides a readable secondary replica in another region with an RPO of 5 seconds (well under the 5-minute requirement) and enables automatic failover without manual intervention. Together, they automate the entire application stack failover, minimizing manual steps.

Answer

Azure Backup for VMs and Azure SQL Database backup to another region

Answer

Azure Site Recovery for VMs and Azure DNS for database failover

Answer

Azure Load Balancer for VMs and Azure SQL Database failover groups

Question 5

Refer to the exhibit. You deploy an Azure SQL Database with a secondary replica in another region using the ARM template shown. You need to ensure that the database can fail over automatically with zero data loss. What is missing?

Accepted Answer

Create a failover group that includes both databases.. A failover group is required to enable automatic failover between the primary and secondary replicas in Azure SQL Database. Without a failover group, the secondary replica exists as a readable copy but cannot automatically take over during a disaster. The failover group also supports the ability to achieve zero data loss by using the 'GracePeriodWithDataLoss' setting or by ensuring synchronous replication is configured, which is part of the failover group's properties.

Answer

Configure long-term backup retention.

Answer

Disable readScaleOut on the primary database.

Answer

Set zoneRedundant to true on the primary database.

Question 6

Your organization has a critical application running on Azure Virtual Machines. You need to design a backup and disaster recovery strategy. Which TWO options should you include in your design to meet a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 1 hour? (Choose two.)

Accepted Answer

Implement Azure Site Recovery with replication to a secondary region.. Azure Site Recovery (ASR) replicates Azure VMs to a secondary region with configurable recovery points. By enabling application-consistent snapshots within the replication policy, you can achieve an RPO of 15 minutes (snapshot frequency) and an RTO of 1 hour (failover time), meeting the stated requirements.

Answer

Store data in Azure Files and use Azure File Sync for replication.

Answer

Use Azure Traffic Manager to distribute traffic between regions.

Answer

Configure Azure Backup for daily backups with geo-redundant storage.

Question 7

A company deploys a web application on Azure VMs across multiple availability zones in a region. They need to distribute incoming traffic across VMs in all zones, maintain session persistence, and support SSL offloading and URL-based routing (e.g., /api/* to one pool, /app/* to another). Which Azure load balancing solution should they use?

Accepted Answer

Azure Application Gateway. Azure Application Gateway is the correct choice because it is a Layer 7 (HTTP/HTTPS) load balancer that supports SSL offloading, URL-based routing (e.g., /api/* and /app/* to different backend pools), and session persistence (cookie-based affinity). It can distribute traffic across VMs in multiple availability zones within a region, meeting all stated requirements.

Answer

Azure Load Balancer

Answer

Azure Traffic Manager

Answer

Azure Front Door

Question 8

A company uses Microsoft Entra ID (Microsoft Entra ID). They want to automatically detect sign-in attempts from anonymous IP addresses and sign-ins from unfamiliar locations. When such a risk is detected, they want to block the sign-in or require multi-factor authentication (MFA) in real time. Additionally, they need a dashboard that provides a summary of risk events and allows investigation. Which Microsoft Entra ID feature should they use?

Accepted Answer

Microsoft Entra ID Identity Protection. Microsoft Entra ID Identity Protection is the correct feature because it automatically detects sign-in risks such as anonymous IP addresses and unfamiliar locations, and can trigger real-time remediation actions like blocking the sign-in or requiring MFA. It also provides a risk dashboard and investigation capabilities, directly matching the requirements for risk detection, automated response, and reporting.

Answer

Microsoft Entra ID Conditional Access

Answer

Microsoft Entra ID Privileged Identity Management (PIM)

Answer

Microsoft Entra ID Access Reviews

Question 9

You are designing a backup and disaster recovery strategy for a SQL Server database hosted on an Azure virtual machine. The database is critical and has a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 4 hours. Which TWO services should you include in the solution?

Accepted Answer

Azure Backup. Azure Backup (A) is correct because it provides application-consistent, agent-based backups of SQL Server running on an Azure VM, supporting frequent log backups that can meet a 15-minute RPO and enabling restore within the 4-hour RTO. Azure Site Recovery (D) is correct because it replicates the entire VM (including the SQL Server instance and OS) to a secondary region or target, enabling orchestrated failover and recovery of the virtual machine within the RTO window. Azure SQL Database backup (B) does not apply because the database is hosted on an Azure VM (IaaS), not as an Azure SQL Database (PaaS) service. Azure Files (C) is a managed SMB/NFS file share service and is not a backup or disaster recovery mechanism for a SQL Server VM. Azure SQL Database auto-failover groups (E) are also a PaaS feature for Azure SQL Database/Managed Instance and cannot be used for SQL Server on an Azure VM.

Answer

Azure SQL Database backup

Answer

Azure Files

Answer

Azure SQL Database auto-failover groups

Question 10

A company uses Azure Policy to enforce tagging on resources. The security team reports that some resources are missing the required 'CostCenter' tag. You need to ensure that any resource created without the required tag is automatically remediated by adding the tag with a default value. What should you configure in Azure Policy?

Accepted Answer

DeployIfNotExists effect. The DeployIfNotExists effect is correct because it automatically remediates non-compliant resources by deploying a tag with a default value when the required 'CostCenter' tag is missing. This effect triggers a deployment task that adds the tag, ensuring continuous compliance without manual intervention.

Answer

AuditIfNotExists effect

Answer

Append effect

Answer

Deny effect

Question 11

You are designing a storage solution for a healthcare application that stores patient records. The solution must meet the following requirements: - Support for both structured and unstructured data. - Provide low-latency access to frequently accessed data. - Automatically move cold data to a lower-cost tier. - Encrypt data at rest using customer-managed keys. Which combination of Azure services should you recommend?

Accepted Answer

Azure Blob Storage for unstructured data and Azure Cosmos DB for structured data. Azure Cosmos DB provides low-latency access to structured data with multi-region writes and automatic indexing, while Azure Blob Storage handles unstructured data like medical images. Both services support encryption at rest with customer-managed keys via Azure Key Vault, and Blob Storage offers lifecycle management policies to automatically move cold data to lower-cost tiers like Cool or Archive.

Answer

Azure Table Storage for structured data and Azure Blob Storage for unstructured data

Answer

Azure Files for unstructured data and Azure SQL Database for structured data

Answer

Azure Blob Storage for unstructured data and Azure SQL Database for structured data

Question 12

Your organization uses Microsoft Entra ID and Azure Key Vault. You need to ensure that a custom application can securely access secrets in Key Vault without storing credentials in code. The application runs on an Azure Virtual Machine. What should you use?

Accepted Answer

Assign a system-assigned managed identity to the VM. A system-assigned managed identity for Azure Virtual Machines allows the application to authenticate to Azure Key Vault without storing any credentials in code. Azure automatically manages the identity's lifecycle and tokens, enabling the VM to obtain an access token from Microsoft Entra ID (now Microsoft Entra ID) to call Key Vault's REST API. This aligns with the principle of zero-trust and eliminates the need for service principals or certificates in the application.

Answer

Store the Key Vault URL and connection string in the application configuration

Answer

Create a service principal and upload a certificate to the VM

Answer

Use a shared access signature (SAS) token

Question 13

Your company runs a critical workload on Azure Virtual Machines in a single region. You need to design a disaster recovery solution that meets a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 1 hour. The solution should minimize cost. What should you recommend?

Accepted Answer

Implement Azure Site Recovery with replication to a secondary region.. Azure Site Recovery (ASR) provides continuous replication of Azure VMs to a secondary region, enabling failover within minutes. With replication intervals as low as 30 seconds for crash-consistent and 5 minutes for app-consistent snapshots, it comfortably meets the 15-minute RPO, and the orchestrated failover process can achieve the 1-hour RTO. ASR is the native Azure service designed for this exact scenario, minimizing cost by only charging for replication traffic and storage in the secondary region.

Answer

Configure Azure Backup with geo-redundant storage.

Answer

Deploy an active-passive pair of VMs using SQL Server Always On availability groups.

Answer

Use Azure Storage with read-access geo-redundant storage (RA-GRS) and failover the VMs.

Question 14

A company is designing a data storage solution for its IoT devices that generate telemetry data. The data is ingested at high velocity (millions of events per second) and must be stored for real-time dashboards and historical analysis. The solution must also support complex event processing and alerting. Which two Azure services should the company use together? (Choose two.)

Accepted Answer

Azure Event Hubs. Azure Event Hubs is the correct choice because it is a high-throughput data ingestion service designed to handle millions of events per second from IoT devices, providing low-latency, durable event capture for real-time dashboards and historical analysis. Azure Stream Analytics is the correct companion service because it natively integrates with Event Hubs to perform complex event processing (CEP), such as pattern matching, aggregation, and alerting, on the streaming telemetry data in real time.

Answer

Azure IoT Hub

Answer

Azure Synapse Analytics

Answer

Azure Data Lake Storage Gen2

Question 15

A software company runs 50 small Azure SQL databases for different clients. Each database has low average usage but unpredictable spikes. The company wants to minimize cost while providing resources for peak loads and easily adding new databases without manual sizing. Which Azure data service should they use?

Accepted Answer

Azure SQL Database elastic pool. Azure SQL Database elastic pool is ideal for multiple databases with low average usage and unpredictable spikes because it allows them to share a fixed set of resources (eDTUs or vCores). This pooling model minimizes cost by only paying for the aggregate peak usage across all databases, not each database's individual peak, and automatically handles resource allocation without manual sizing for new databases.

Answer

Azure SQL Database single databases

Answer

Azure SQL Managed Instance

Answer

SQL Server on Azure Virtual Machines