AZ-305 Practice Test 49 — 15 Questions

Question 1

A media company needs to store large volumes of video files that are processed by an application. The files are accessed via REST APIs and are rarely accessed after the first few days. The company wants to minimize storage costs by automatically moving older files to a cheaper storage tier without any manual intervention. Which Azure storage solution should they use, and which feature should they configure?

Accepted Answer

Azure Blob Storage with lifecycle management policies. Azure Blob Storage with lifecycle management policies is the correct solution because it allows you to define rules that automatically move blobs to cooler tiers (e.g., from Hot to Cool to Archive) based on age or last modification time, minimizing storage costs without manual intervention. The REST API access requirement is natively supported by Blob Storage via HTTPS, and the large video file workload fits well within its object storage capabilities.

Answer

Azure Files with tiering

Answer

Azure NetApp Files with capacity pools

Answer

Azure Disk Storage with managed disks

Question 2

A media company stores large video files that are accessed once a month for audits. When needed, they must be available for download immediately (within seconds). The company wants to minimize storage costs. Which Azure Blob Storage access tier should they use?

Accepted Answer

Cool tier. The Cool tier is optimal for this scenario because it balances low storage cost with high availability and low latency access. Video files accessed once a month for audits require immediate download (within seconds), which Cool tier supports with the same millisecond latency as Hot tier, but at a lower storage price. Archive tier would introduce a multi-hour rehydration delay, making it unsuitable for on-demand access within seconds.

Answer

Hot tier

Answer

Cold tier

Answer

Archive tier

Question 3

A healthcare analytics platform stores semi-structured JSON documents and requires globally distributed low-latency reads with tunable consistency. Which Azure data platform should be recommended?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is the correct choice because it natively supports semi-structured JSON documents, offers globally distributed multi-region writes and reads with low-latency (typically <10 ms at the 99th percentile), and provides tunable consistency levels (from strong to eventual) via its multi-master replication protocol. This directly matches the requirements for a healthcare analytics platform needing global distribution and flexible consistency.

Answer

Azure Files premium shares

Answer

Azure Data Factory

Answer

Azure SQL Managed Instance

Question 4

A company runs a legacy application on Azure Virtual Machines. The application uses a SQL Server database that requires 50,000 IOPS consistently. It also uses a shared file system for storing documents. They plan to migrate from on-premises where they used a SAN for block storage and NAS for file shares. Which combination of Azure storage should they use to meet performance requirements?

Accepted Answer

Premium SSD v2 disks for the database and Azure Files premium tier for the file share.. Premium SSD v2 disks can deliver up to 80,000 IOPS per disk, easily meeting the 50,000 IOPS requirement for the SQL Server database. Azure Files premium tier uses SSD-backed storage and provides consistent low-latency performance suitable for a shared file system, replacing the on-premises NAS. This combination directly maps the SAN (block) and NAS (file) workloads to Azure's highest-performance managed disks and file shares.

Answer

Premium SSD (non-v2) for the database and Azure NetApp Files for the file share.

Answer

Ultra Disk for the database and Azure Files standard tier for the file share.

Answer

Standard SSD for the database and Azure Blob Storage for the file share.

Question 5

A company stores large video files for a media streaming application. The files are accessed infrequently but need to be available instantly when requested. The company wants to minimize storage costs while ensuring high durability. Which Azure Blob Storage access tier should they use?

Accepted Answer

Cool tier. The Cool tier is the optimal choice because it balances low storage cost with instant access for infrequently accessed data. The scenario specifies that files are accessed infrequently but require instant availability, which aligns with the Cool tier's design for data that will be stored for at least 30 days and needs millisecond retrieval latency. Hot tier would be more expensive for infrequent access, while Cold and Archive tiers introduce retrieval delays or higher access costs that violate the 'available instantly' requirement.

Answer

Hot tier

Answer

Cold tier

Answer

Archive tier

Question 6

A company uses Microsoft Entra ID (Microsoft Entra ID). They need to grant external partners access to an internal application for a limited time (30 days). The access request must be approved by a manager from the partner's organization, and after 30 days the access must automatically expire. They also want to send email reminders 7 days before expiration. Which Microsoft Entra ID feature should they use?

Accepted Answer

Microsoft Entra ID Entitlement Management. Microsoft Entra ID Entitlement Management enables organizations to manage access for external partners through access packages, which can include time-limited assignments, approval workflows (including manager approval from the partner's organization), and automatic expiration with email notifications. This directly meets the requirement for a 30-day access period with manager approval and 7-day reminder emails.

Answer

Microsoft Entra ID Identity Protection

Answer

Microsoft Entra ID Privileged Identity Management (PIM)

Answer

Microsoft Entra ID B2B with Conditional Access

Question 7

A company uses Microsoft Entra ID (Microsoft Entra ID) Premium P2. They want to enforce that users accessing sensitive cloud applications from outside the corporate network must use multi-factor authentication (MFA). Which Microsoft Entra ID feature should they configure?

Accepted Answer

Conditional Access. Conditional Access is the correct feature because it allows administrators to define policies that enforce MFA based on specific conditions, such as network location (outside corporate network) and cloud app sensitivity. By configuring a Conditional Access policy targeting 'All cloud apps' or specific sensitive apps with the condition 'Locations: All trusted/untrusted networks', you can require MFA for external access. This directly meets the requirement without needing additional licenses or features beyond Entra ID Premium P2.

Answer

Identity Protection

Answer

Privileged Identity Management

Answer

Access Reviews

Question 8

A company uses Microsoft Entra ID (Microsoft Entra ID) for identity management. They want to enforce that only devices compliant with security policies (e.g., BitLocker enabled, antivirus running) can access corporate cloud applications (Microsoft 365 and custom SaaS apps). They also need a dashboard to monitor device compliance status. Which Microsoft Entra ID feature(s) should they configure?

Accepted Answer

Conditional Access policies with device compliance conditions, and Microsoft Intune for compliance management. Option A is correct because Conditional Access policies in Microsoft Entra ID can enforce device compliance as a condition for granting access to cloud applications, while Microsoft Intune provides the device compliance policies (e.g., BitLocker, antivirus) and the dashboard to monitor compliance status. Together, they ensure only compliant devices can access corporate resources and provide visibility into device health.

Answer

Microsoft Entra ID Identity Protection with user risk policies

Answer

Microsoft Entra ID Access Reviews

Answer

Microsoft Entra ID Device Registration only

Question 9

A company uses Microsoft Entra ID (Microsoft Entra ID). They need to generate periodic reports of user sign-ins and audit activities for compliance. They want to store the logs for 1 year. Which Azure service should they use?

Accepted Answer

Azure Monitor Log Analytics workspace with Microsoft Entra ID diagnostic settings. Option B is correct because Microsoft Entra ID sign-in and audit logs are retained for only 30 days by default. To store them for 1 year, you must route the logs via diagnostic settings to an Azure Monitor Log Analytics workspace, which allows configurable retention up to 2 years (or more with a commitment tier). This is the only native Azure service that supports long-term retention of Entra ID logs for compliance reporting.

Answer

Microsoft Entra ID sign-in logs and audit logs with retention set to 1 year in the Azure portal

Answer

Azure Storage account with lifecycle management

Answer

Azure Event Hubs for streaming

Question 10

Drag and drop the steps to configure Azure Load Balancer for high availability of web servers into the correct order.

Question 11

A company requires all users to use multi-factor authentication (MFA) when accessing cloud applications. However, they want to exempt users from MFA when they connect from the company's headquarters, which has a trusted IP range. They want to enforce this policy centrally. Which Microsoft Entra ID feature should they use?

Accepted Answer

Microsoft Entra ID Conditional Access. Microsoft Entra ID Conditional Access is the correct feature because it allows administrators to create policies that enforce MFA based on conditions such as user location, device state, and application sensitivity. By configuring a Conditional Access policy with a 'trusted location' condition (defined via named locations with specific IP ranges), the company can require MFA for all cloud app access except when users connect from the headquarters' trusted IP range. This provides centralized, granular control over authentication requirements without needing to modify individual user settings.

Answer

Microsoft Entra ID Identity Protection

Answer

Microsoft Entra ID Privileged Identity Management

Answer

Microsoft Entra ID Self-Service Password Reset

Question 12

A company uses Microsoft Entra ID B2B to collaborate with external vendors. They want to enforce that external users must use multi-factor authentication (MFA) and access company resources only from compliant devices (e.g., managed by Intune). They also want to require a session timeout of 1 hour. Which combination of Microsoft Entra ID features should they use?

Accepted Answer

B. Option B is correct because it combines Conditional Access policies with session controls to enforce MFA, device compliance (via Intune), and a 1-hour session timeout. Conditional Access policies evaluate sign-in risk and require MFA and compliant devices, while the session control 'Sign-in frequency' can be set to 1 hour to enforce reauthentication. This meets all three requirements without relying on deprecated or separate features.

Answer

A

Answer

C

Answer

D

Question 13

A company uses Microsoft Entra ID for identity management. They need to automate the process of granting access to resources for employees and external partners, and require periodic access reviews to ensure compliance. Which Microsoft Entra ID feature should they use?

Accepted Answer

Microsoft Entra ID Entitlement Management. Microsoft Entra ID Entitlement Management is the correct feature because it enables automation of access request workflows for employees and external partners, including time-limited access packages and periodic access reviews to enforce compliance. This directly matches the requirement for granting access and ensuring ongoing governance through reviews.

Answer

Microsoft Entra ID Privileged Identity Management (PIM)

Answer

Microsoft Entra ID Conditional Access

Answer

Microsoft Entra ID Identity Protection

Question 14

Drag and drop the steps to implement Azure AD Privileged Identity Management (PIM) for a role into the correct order.

Question 15

A large enterprise wants to enforce zero-trust conditional access policies that use real-time user risk, sign-in risk, and device compliance. Which combination of Microsoft Entra ID features should they use?

Accepted Answer

Microsoft Entra ID Identity Protection and Conditional Access. Microsoft Entra ID Identity Protection provides real-time risk detection for users and sign-ins, while Conditional Access policies can enforce access controls based on those risk signals and device compliance. Together, they enable zero-trust conditional access by blocking or requiring MFA when user or sign-in risk is high, and ensuring only compliant devices can access resources.

Answer

Microsoft Entra ID Privileged Identity Management and Access Reviews

Answer

Microsoft Entra ID B2B and External Identities

Answer

Microsoft Entra ID Domain Services and Managed Identities