AZ-305 Practice Test 48 — 15 Questions

Question 1

You need to provide temporary shared access to a specific blob in Azure Storage for a contractor. The access must expire after 24 hours. Which feature should you use?

Accepted Answer

Shared access signature (SAS). A shared access signature (SAS) provides delegated, time-limited access to a specific Azure Storage resource, such as a blob, without exposing the storage account key. By configuring the SAS with an expiration time of 24 hours, you grant the contractor temporary access that automatically revokes after that period, meeting the requirement precisely.

Answer

Managed identity

Answer

Azure role-based access control (RBAC)

Answer

Storage account access key

Question 2

A company wants to automatically tier data between hot, cool, and archive access tiers based on last access time to optimize costs. Which Azure feature should they implement?

Accepted Answer

Azure Blob Storage lifecycle management. Azure Blob Storage lifecycle management allows you to define policies that automatically move blobs between hot, cool, and archive access tiers based on conditions such as last access time or age. This directly addresses the requirement to optimize costs by tiering data according to access patterns without manual intervention.

Answer

Azure Data Box

Answer

Azure Backup

Answer

Azure File Sync

Question 3

You are designing a cloud-native application that will run on Azure Kubernetes Service (AKS). The application needs to authenticate users and manage access to resources. Which identity service should you use?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID (formerly Azure AD) is the correct identity service for a cloud-native application on AKS because it provides OAuth 2.0 and OpenID Connect authentication, enabling secure user sign-in and role-based access control (RBAC) for Kubernetes resources. It integrates natively with AKS to manage identities for users and service principals, supporting managed identities for Azure resources without credential management.

Answer

Microsoft Entra External ID

Answer

Microsoft Account

Answer

Azure Active Directory Domain Services

Question 4

Contoso, Ltd. is migrating a legacy on-premises application to Azure. The application uses a SQL Server database with complex queries and requires read-heavy workloads with sub-10-millisecond latency. The solution must support geo-replication for disaster recovery. Which Azure data service should you recommend?

Accepted Answer

Azure SQL Database Business Critical. Azure SQL Database Business Critical is correct because it uses SQL Server database engine with full T-SQL support for complex queries, provides read-heavy workloads with sub-10-millisecond latency via in-memory OLTP and local SSD storage, and supports active geo-replication for disaster recovery. This tier offers a readable secondary replica in a different Azure region, meeting both latency and geo-replication requirements.

Answer

Azure Cosmos DB for NoSQL

Answer

Azure SQL Database Hyperscale

Answer

Azure SQL Managed Instance Business Critical

Question 5

A company needs to back up an Azure virtual machine that runs a file server. They want to restore individual files quickly without restoring the entire VM. Which backup option should they use?

Accepted Answer

Azure Backup for Azure VMs with file-level restore.. Azure Backup for Azure VMs with file-level restore (option C) is correct because it allows you to mount the VM's backup as a drive on a designated recovery machine using iSCSI, enabling you to browse and copy individual files without restoring the entire VM. This meets the requirement for quick, granular file recovery from a VM backup.

Answer

Azure File Sync with cloud tiering.

Answer

Azure Backup using MARS agent with file and folder backup.

Answer

Azure Backup for Azure VMs with instant restore.

Question 6

Your company has a hybrid identity solution with Microsoft Entra ID Connect syncing on-premises Active Directory to Microsoft Entra ID. You need to design a business continuity solution for the identity service in case of an on-premises outage. The solution must allow users to authenticate and access cloud applications even if the on-premises domain controllers are unavailable. Which feature should you enable?

Accepted Answer

Password hash synchronization. Password hash synchronization (PHS) is the correct choice because it synchronizes password hashes from on-premises Active Directory to Microsoft Entra ID, enabling cloud authentication even when on-premises domain controllers are unavailable. During an on-premises outage, users can still authenticate against Entra ID using their synced credentials, ensuring continued access to cloud applications without dependency on local infrastructure.

Answer

Federation with AD FS in a secondary on-premises site

Answer

Seamless Single Sign-On

Answer

Pass-through authentication with an agent in a secondary on-premises site

Question 7

Your company runs a critical e-commerce application on Azure Virtual Machines (VMs) in a single region. You need to design a disaster recovery (DR) solution that meets a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 1 hour for the application tier. The application uses Azure SQL Database (single database). Which combination of Azure services should you recommend to meet the RPO and RTO?

Accepted Answer

Use Azure Site Recovery for VM replication to a secondary region and Azure SQL Database active geo-replication. Azure Site Recovery provides VM replication to a secondary region with RPO as low as 15 seconds and RTO typically under 1 hour, meeting the 15-minute RPO and 1-hour RTO. Azure SQL Database active geo-replication creates a readable secondary database in another region with an RPO of 5 seconds or less and supports manual failover within minutes, satisfying the stated RPO and RTO. This combination ensures both compute and database tiers can be recovered in the secondary region within the required timeframes.

Answer

Use Azure Site Recovery for VMs and Azure SQL Database read-scale replicas

Answer

Use Azure Backup for VM replication and Azure SQL Database auto-failover groups

Answer

Use Azure Front Door with regional load balancing and Azure SQL Database geo-restore

Question 8

A company runs a production Azure SQL Database. They need a business continuity solution that allows point-in-time restore to any time within the last 7 days and provides geo-failover capability with RTO of 1 hour. What is the MOST COST-EFFECTIVE option?

Accepted Answer

Configure active geo-replication with a readable secondary in another region. Active geo-replication with a readable secondary in another region meets the 7-day point-in-time restore requirement (each database has automated backups retained for 7 days by default) and provides geo-failover with an RTO of 1 hour, as the secondary is continuously synchronized and can be manually failed over. It is more cost-effective than auto-failover groups because it does not require the additional listener and routing overhead, and you pay only for the secondary compute and storage.

Answer

Use Azure SQL Database long-term retention (LTR) for backups

Answer

Deploy a zone-redundant Azure SQL Database

Answer

Deploy auto-failover groups with a secondary in another region

Question 9

Which THREE Azure services can be used to implement a disaster recovery plan for Azure Virtual Desktop (AVD) that meets an RTO of 2 hours and an RPO of 30 minutes? (Select THREE.)

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) orchestrates replication and failover of Azure Virtual Desktop (AVD) session hosts and their workloads to a secondary Azure region, enabling RTO of 2 hours and RPO of 30 minutes when configured with replication policies set to 30-minute frequency. It supports multi-VM consistency groups to ensure application-consistent recovery points for AVD infrastructure components.

Answer

Azure Database for MySQL

Answer

Azure Migrate

Question 10

Your company uses Azure Backup to protect on-premises file servers and Azure VMs. The compliance team requires that backup data be stored in a secondary region to protect against regional disasters. Which Azure Backup feature should you enable?

Accepted Answer

Enable geo-redundant storage (GRS) for the Recovery Services vault. Azure Backup uses the Recovery Services vault as its management and storage container. By enabling geo-redundant storage (GRS) on the vault, backup data is automatically replicated to a paired secondary Azure region, meeting the compliance requirement for off-site disaster recovery without any additional configuration or separate vault.

Answer

Use Azure Site Recovery to replicate the backup data

Answer

Configure backup policies to back up directly to the secondary region

Answer

Use a Recovery Services vault in the secondary region

Question 11

Your company has a critical application that uses Azure Kubernetes Service (AKS) in a single region. You need to design a disaster recovery solution that can automatically fail over to a secondary region in the event of a regional outage. The application data is stored in Azure Cosmos DB. What should you do?

Accepted Answer

Deploy a secondary AKS cluster in another region, use Azure Traffic Manager for global load balancing, and enable Cosmos DB multi-region writes.. It provides a comprehensive disaster recovery solution for both the compute and data tiers. Deploying a secondary AKS cluster in another region ensures compute capacity is available after a regional outage. Azure Traffic Manager (using priority routing) directs traffic to the primary cluster and automatically fails over to the secondary. Enabling Cosmos DB multi-region writes allows the application to write to the secondary region without conflict, ensuring data availability and consistency during failover.

Answer

Use Azure Front Door to route traffic to the primary AKS cluster and enable Cosmos DB automatic failover.

Answer

Use Azure Backup for AKS with cross-region restore and Cosmos DB geo-redundancy.

Answer

Replicate the AKS cluster to another region using Azure Site Recovery.

Question 12

Which TWO of the following are valid considerations when designing a SQL Server Always On availability group in Azure VMs? (Choose two.)

Accepted Answer

The availability group listener should use a static IP address in the same subnet as the primary replica.. The availability group listener in Azure VMs requires a static IP address in the same subnet as the primary replica. This is necessary because the internal load balancer (ILB) used for the listener must have a static frontend IP that matches the listener's IP, and the IP must reside in the same subnet as the primary replica to ensure proper routing and failover behavior.

Answer

The availability group listener can use DHCP to automatically assign an IP address.

Answer

A file share witness is required for the quorum configuration.

Answer

All replicas must be in the same subnet to use a single internal load balancer.

Question 13

A company is designing a hybrid identity solution that allows users to access both on-premises applications and Microsoft 365 using a single identity. The solution must support legacy authentication protocols for on-premises apps and modern authentication for cloud apps. Which Azure service should the company use?

Accepted Answer

Microsoft Entra Application Proxy. Microsoft Entra Application Proxy provides secure remote access to on-premises web applications by publishing them through the Microsoft Entra ID service. It supports legacy authentication protocols (such as Integrated Windows Authentication) for on-premises apps while enabling modern authentication (OAuth 2.0, OpenID Connect) for cloud apps like Microsoft 365, all using a single identity from Microsoft Entra ID. This makes it the correct choice for a hybrid identity solution that bridges on-premises and cloud authentication requirements.

Answer

Active Directory Federation Services (AD FS)

Answer

Microsoft Entra ID

Answer

Microsoft Entra Connect

Question 14

A company runs an application on Azure VMs that uses Azure SQL Database. They need a disaster recovery solution that ensures the application can fail over to a secondary region with minimal data loss. The solution must include automatic failover for the database and manual failover for the VMs. Which TWO Azure services should they use? (Choose two.)

Accepted Answer

Azure SQL Database auto-failover groups. Azure SQL Database auto-failover groups (option A) are correct because they provide automatic failover of the database to a secondary region with a defined RPO/RTO, satisfying the requirement for automatic database failover with minimal data loss. Azure Site Recovery (option D) is correct because it orchestrates replication and recovery of Azure VMs to a secondary region, and it supports manual (planned/unplanned) failover, matching the requirement for manual VM failover. Azure Traffic Manager (option B) and Azure Front Door (option C) are traffic-routing and load-balancing services that can direct users to a healthy endpoint, but they do not themselves provide database failover or VM replication/recovery. Azure SQL Database active geo-replication (option E) enables replicas and manual failover of the database, but it does not provide the automatic failover capability required, so it does not meet the scenario.

Answer

Azure Traffic Manager

Answer

Azure Front Door

Answer

Azure SQL Database active geo-replication

Question 15

You manage a globally distributed application using Azure Cosmos DB. You need to design a business continuity strategy that ensures zero data loss and automatic failover in case of a regional outage. The application must continue to serve reads and writes during a region failure. What should you recommend?

Accepted Answer

Configure multi-region writes with eventual consistency and enable automatic failover.. Azure Cosmos DB multi-region writes with automatic failover ensure zero data loss and continuous availability for both reads and writes during a regional outage. Writes are accepted in multiple regions and asynchronously replicated, eliminating a single point of failure. Option A is incorrect because a single write region with service-managed failover may lose writes that were not replicated before the failover. Option B is incorrect because disabling automatic failover requires manual intervention, which does not meet the automatic failover requirement and can still result in data loss. Option C is incorrect because single-region writes, even with strong consistency, will lose writes if the region fails before replication completes.

Answer

Use Azure Cosmos DB accounts with a single write region and enable service-managed failover.

Answer

Use Azure Cosmos DB accounts with multi-region writes but disable automatic failover and rely on manual failover.

Answer

Configure single-region writes with strong consistency and enable automatic failover.