AZ-305 Practice Test 41 — 15 Questions

Question 1

Your company has an Azure subscription that contains several virtual machines (VMs) running Windows Server. You need to ensure that all VMs are compliant with a baseline security policy that includes specific registry key settings. The solution must automatically remediate non-compliant settings without manual intervention. What should you use?

Accepted Answer

Azure Policy with Guest Configuration. Azure Policy with guest configuration can audit and remediate settings inside VMs, including registry keys, using built-in or custom policies.

Answer

Azure Automation State Configuration (DSC)

Answer

Microsoft Defender for Cloud with custom recommendations

Answer

Microsoft Intune

Question 2

A healthcare organization is deploying a new application on Azure that will handle Protected Health Information (PHI). The application must be compliant with HIPAA. The security team requires encryption at rest and in transit, and the ability to audit access to the data. The solution should minimize administrative overhead. Which storage solution should you recommend?

Accepted Answer

Azure SQL Database with Transparent Data Encryption and Always Encrypted. Azure SQL Database with Transparent Data Encryption (TDE) and Always Encrypted meets HIPAA requirements for encryption at rest and in transit, and provides auditing capabilities. It is a PaaS solution that reduces administrative overhead compared to IaaS.

Answer

Azure Cosmos DB with encryption at rest

Answer

Azure SQL Managed Instance with customer-managed keys

Answer

SQL Server on Azure Virtual Machine with BitLocker

Question 3

Your organization is planning to migrate a large number of on-premises file servers to Azure. The data includes millions of small files. You need to select a storage solution that supports SMB protocol and can handle high file counts. Which TWO Azure services meet these requirements?

Accepted Answer

Azure Files. Azure Files supports SMB and can handle millions of files, though performance may degrade with very high file counts; Azure NetApp Files is a high-performance file service supporting SMB and large file counts.

Answer

Azure Stack Edge

Answer

Azure Blob Storage with NFS 3.0

Answer

Azure Disk Storage

Question 4

A company runs a critical application on Azure virtual machines in the West US region. They need a disaster recovery solution that replicates VMs to East US with a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours. They also need to perform non-disruptive disaster recovery drills. Which Azure service should they use?

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) orchestrates replication, failover, and failback of Azure VMs between regions. It supports RPOs as low as 15 minutes (continuous replication with crash-consistent or app-consistent snapshots) and RTOs of 2 hours or less, and it enables non-disruptive disaster recovery drills via test failover that isolates replicated VMs in a separate virtual network without impacting production.

Answer

Azure Backup

Answer

Azure Traffic Manager

Answer

Azure Front Door

Question 5

A company runs SQL Server on an Azure virtual machine. They need to automate database backups with application-consistency and retain backups for 10 years to meet compliance. They also want to restore to any point in time within the last 35 days. Which Azure Backup solution should they use?

Accepted Answer

Azure Backup for SQL Server in Azure VM. Azure Backup for SQL Server in Azure VM (Option A) is correct because it provides native application-consistent backups for SQL Server databases running on Azure VMs, supports long-term retention (LTR) up to 10 years using the backup vault's retention rules, and enables point-in-time restore (PITR) for the last 35 days by leveraging SQL Server transaction log backups. This solution is specifically designed for SQL Server workloads and meets both compliance and recovery requirements without additional infrastructure.

Answer

Azure Backup for Azure VM

Answer

Azure Site Recovery

Answer

SQL Server Always On Availability Groups

Question 6

A company runs a critical application on Azure VMs in a single region. The database tier uses SQL Server on Azure VMs. They need to implement disaster recovery to a secondary region with an RPO of 30 seconds and an RTO of 10 minutes for the database, and an RPO of 5 minutes and RTO of 1 hour for the VMs. The solution must minimize data loss and be cost-effective. Which combination should they use?

Accepted Answer

Azure Site Recovery for VMs and SQL Server Always On Availability Groups with asynchronous commit. Option D is correct because Azure Site Recovery (ASR) provides VM replication to a secondary region with an RPO of 5 minutes and RTO of 1 hour, meeting the VM requirements. SQL Server Always On Availability Groups with asynchronous commit can achieve an RPO of 30 seconds (or less) while minimizing cost by avoiding synchronous replication overhead, and it supports automatic failover for the database tier, meeting the 10-minute RTO.

Answer

Azure Site Recovery for VMs and SQL Server Always On Availability Groups with synchronous commit

Answer

Azure Site Recovery for VMs and SQL Server log shipping

Answer

Azure Backup for VMs and SQL Server database mirroring

Question 7

A company runs a critical application on Azure VMs in the West US region. They want to protect against a regional disaster by replicating VMs to East US using Azure Site Recovery. They have both managed and unmanaged disks. They need to ensure that after failover, the recovery VMs are automatically placed in a specific availability set to support the application's multi-tier architecture. Additionally, they want to minimize downtime during planned failover. Which configuration should they use?

Accepted Answer

Configure a recovery plan that includes the VMs and specifies the target availability set and failover order. Option A is correct because a recovery plan in Azure Site Recovery allows you to group VMs, specify the target availability set, and define the failover order. This ensures that after failover, the recovery VMs are automatically placed in the specified availability set, supporting the application's multi-tier architecture. Additionally, recovery plans enable you to automate and sequence failover steps, minimizing downtime during planned failover by orchestrating the process efficiently.

Answer

Set the target availability set in each VM's replication settings individually without a recovery plan

Answer

Use Azure Traffic Manager to route traffic to the secondary region after manual failover

Answer

Enable consistency groups across the VMs using a replication policy

Question 8

A company runs a critical web application on Azure VMs in the West US region. They need a disaster recovery solution that replicates the VMs to the East US region. The recovery point objective (RPO) must be 30 minutes, and the recovery time objective (RTO) must be 1 hour. The company also needs to perform quarterly disaster recovery drills without impacting the production environment. Additionally, after a failover, the solution must automatically update traffic management to route users to the East US region. Which combination of Azure services should they use?

Accepted Answer

Azure Site Recovery and Azure Traffic Manager. Azure Site Recovery (ASR) orchestrates replication, failover, and failback of Azure VMs from West US to East US, meeting the 30-minute RPO and 1-hour RTO. Azure Traffic Manager automatically updates DNS-based traffic routing to the East US region after failover, ensuring users are redirected without manual intervention. This combination satisfies all requirements: DR replication, RPO/RTO, quarterly drills (via test failover), and automated traffic management.

Answer

Azure Backup and Azure Traffic Manager

Answer

Azure Site Recovery and Azure Front Door

Answer

Azure Backup and Azure Front Door

Question 9

A business-critical App Service application must survive a full regional outage. The recovery design should fail over automatically based on endpoint health and avoid DNS-cache delay where possible. Which service should front the regional deployments?

Accepted Answer

Azure Front Door. Azure Front Door is the correct choice because it provides global HTTP/HTTPS load balancing with automatic failover across regions based on real-time endpoint health probes. It uses Anycast routing to direct traffic to the nearest healthy region, which avoids DNS-cache delay inherent in DNS-based solutions like Traffic Manager. This ensures sub-second failover and meets the requirement for a business-critical app that must survive a full regional outage.

Answer

Azure Load Balancer

Answer

Azure Application Security Groups

Answer

Azure Traffic Manager only

Question 10

A company runs an SAP HANA database on Azure large instances (HLI) in the West US region. The database is critical for business operations. They need a disaster recovery solution with a recovery point objective (RPO) of near zero (seconds) and a recovery time objective (RTO) of less than 30 minutes in the event of a region-wide outage. The solution must automatically replicate data to a secondary region (East US) and support automated failover. Which design should they implement?

Accepted Answer

Configure HANA System Replication (async) between the primary and secondary site, and use a Pacemaker cluster with Azure Load Balancer to enable automated failover. Option A is correct because HANA System Replication (async) provides near-zero RPO by continuously replicating log changes to the secondary region, while a Pacemaker cluster with Azure Load Balancer enables automated failover within the required 30-minute RTO. This combination meets the strict RPO/RTO requirements for SAP HANA on Azure Large Instances, as Azure Site Recovery does not support HLI and synchronous replication would introduce unacceptable latency over the West US to East US distance.

Answer

Use Azure Site Recovery to replicate the HANA large instance VMs with a replication frequency of 30 seconds and enable auto-failover

Answer

Schedule HANA database backups every 5 minutes to Azure Blob Storage with geo-redundant storage (GRS), and restore in the secondary region on demand

Answer

Set up HANA System Replication with synchronous mode to the secondary region

Question 11

A company runs a critical OLTP application on Azure SQL Database in the West US region. They need to ensure business continuity if a regional outage occurs. The solution must have a recovery point objective (RPO) of 5 seconds and a recovery time objective (RTO) of less than 1 hour. They also want to use the secondary region for read-only query offloading. Which Azure SQL Database feature should they enable?

Accepted Answer

Active geo-replication with automatic failover group. Active geo-replication with automatic failover groups is the correct choice because it provides continuous asynchronous data replication to a secondary Azure SQL Database in a paired region, achieving an RPO of 5 seconds and an RTO of under 1 hour. The automatic failover group enables coordinated failover of multiple databases and allows the secondary region to be used for read-only query offloading by connecting with ApplicationIntent=ReadOnly.

Answer

Geo-restore

Answer

Azure Site Recovery

Answer

Read scale-out with manual regional failover

Question 12

A company deploys a multi-tier application on Azure virtual machines. They need to implement disaster recovery using Azure Site Recovery. The recovery plan must ensure that the database VMs are started before the application VMs, and the application VMs before the web VMs. They also need to run a script after failover to update DNS records. Which ASR feature should they use?

Accepted Answer

Recovery Plan with custom groups and script actions. Azure Site Recovery (ASR) Recovery Plans allow you to orchestrate the order of VM failover by grouping VMs into custom groups and adding pre- and post-actions. By placing database VMs in Group 1, application VMs in Group 2, and web VMs in Group 3, you enforce the required startup sequence. Script actions (e.g., Azure Automation runbooks or PowerShell scripts) can be inserted at specific points in the plan to update DNS records after failover, making option B the correct choice.

Answer

Recovery Plan with manual steps

Answer

Replication policy with crash-consistent snapshots

Answer

Azure Automation runbook

Question 13

A company runs a critical application on Azure VMs. They want to back up the VMs using Azure Backup. The retention requirements are: daily backups for 35 days, weekly backups for 52 weeks, and yearly backups for 10 years. Which backup policy should they create?

Accepted Answer

Create a custom backup policy with a daily backup schedule and retention rules for daily (35), weekly (52), and yearly (10 years). Option A is correct because Azure Backup allows you to create a custom backup policy that defines a daily backup schedule and separate retention rules for daily, weekly, and yearly retention points. This directly meets the requirement of 35 days daily, 52 weeks weekly, and 10 years yearly retention, as Azure Backup supports granular retention policies with multiple tiers (daily, weekly, monthly, yearly) within a single policy.

Answer

Use the default backup policy provided by Azure Backup

Answer

Use Azure Site Recovery (ASR) to replicate the VMs and meet the retention

Answer

Use Azure Backup for VMs with instant recovery enabled

Question 14

A company runs SQL Server on Azure VMs using SQL Server Standard Edition. They need a disaster recovery solution that replicates the database to a secondary Azure region with a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 2 hours. They cannot use Always On Availability Groups due to licensing constraints. They also need to perform non-disruptive disaster recovery drills. Which Azure service should they implement?

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) replicates entire SQL Server VMs (including their databases) to a secondary Azure region, supporting RPOs as low as 30 seconds and RTOs of 2 hours or less. It allows non-disruptive disaster recovery drills by performing test failovers in an isolated network without affecting the production environment. This solution avoids the licensing constraints of Always On Availability Groups and works with SQL Server Standard Edition.

Answer

Azure Backup for SQL Server

Answer

SQL Server Log Shipping to an Azure VM

Answer

Geo-replication for Azure SQL Database

Question 15

A company runs a web application on Azure VMs in a single region. They need to ensure that if the region fails, the VMs are replicated to another region and can be started automatically. Which Azure service should they use?

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) orchestrates replication, failover, and failback of Azure VMs from one region to another. It continuously replicates VM disks to the target region and, upon failover, automatically starts the replicated VMs, meeting the requirement for regional disaster recovery with automated startup.

Answer

Azure Backup

Answer

Azure Traffic Manager

Answer

Azure Load Balancer