AZ-305 Practice Exam 51 — 20 Questions

Question 1

An enterprise data platform must store petabytes of raw files for analytics and support fine-grained access control through Microsoft Entra ID. Which storage solution should be selected?

Accepted Answer

Azure Data Lake Storage Gen2. Azure Data Lake Storage Gen2 (ADLS Gen2) combines a hierarchical namespace with Azure Blob Storage, enabling petabyte-scale storage for raw files and fine-grained access control via POSIX-like ACLs integrated with Microsoft Entra ID (formerly Azure AD). This makes it the ideal solution for enterprise analytics requiring both massive capacity and granular security.

Answer

Azure Queue Storage

Answer

Azure Disk Storage attached to one VM

Answer

Azure Cache for Redis

Question 2

A company runs a mission-critical application on Azure virtual machines (VMs) in the West US region. The application consists of multiple VMs that must be recovered in a specific order during a disaster: database VM first, then application VMs, then web VMs. They also require that after failover to East US, the VMs retain their private IP addresses to avoid DNS updates. The recovery point objective (RPO) is 5 minutes and recovery time objective (RTO) is 30 minutes. The company needs to perform quarterly disaster recovery tests without impacting production. Which combination of Azure Site Recovery features should they configure?

Accepted Answer

Use app-consistent replication, recovery plans with pre/post scripts for ordering, and static IP address assignment in failover settings. The requirement for an RPO of 5 minutes and RTO of 30 minutes necessitates application-consistent replication, which ensures database and application integrity. The need to recover VMs in a specific order is met by recovery plans with pre/post scripts, which allow custom actions (e.g., starting the database VM first, then application, then web). Static IP address assignment in failover settings ensures that VMs retain their private IP addresses after failover to East US, avoiding DNS updates.

Answer

Use crash-consistent replication, recovery plans with manual ordering, and target network with same IP address range

Answer

Use multi-VM consistency groups, recovery plans with automation runbooks, and Azure Traffic Manager to redirect traffic

Answer

Use application-consistent replication, recovery plans with pre/post scripts for ordering, and target network with different IP address range and DNS updates

Question 3

Your organization has a hybrid identity infrastructure using Microsoft Entra ID (formerly Azure AD) and Active Directory Domain Services (AD DS) on-premises. You plan to deploy a critical application on Azure VMs that must remain available even if the on-premises network connection fails. The application authenticates users via on-premises AD DS. You need to design an identity disaster recovery solution that works during a network outage. What should you implement?

Accepted Answer

Deploy Microsoft Entra Domain Services and join the Azure VMs to the managed domain.. Microsoft Entra Domain Services provides a managed domain that is synchronized from your on-premises AD DS via Microsoft Entra Connect. By joining the Azure VMs to this managed domain, the application can authenticate users against the managed domain even when the on-premises network connection fails, ensuring local authentication within Azure without dependency on the on-premises AD DS.

Answer

Create a site-to-site VPN connection with a secondary on-premises data center.

Answer

Configure Azure AD Connect with password hash synchronization and enable seamless single sign-on.

Answer

Use Azure AD Application Proxy to publish the application and authenticate via Azure AD.

Question 4

Your organization uses Microsoft Sentinel for security monitoring. You need to create a rule that triggers an incident when a user from a specific IP address performs more than 10 failed sign-ins within an hour. Which rule type should you use?

Accepted Answer

Scheduled query rule. A scheduled query rule is the correct choice because it allows you to define a custom KQL query that counts failed sign-in events from a specific IP address over a 1-hour window and triggers an incident when the count exceeds 10. This rule type is designed for user-defined detection logic based on log data, such as SigninLogs, and supports aggregation and threshold-based alerting.

Answer

Microsoft Security rule

Answer

Anomaly detection rule

Answer

Fusion rule

Question 5

A company is designing a storage solution for its backup data. The backups must be stored for 10 years for compliance reasons. The solution should minimize storage costs while ensuring data durability. Which two Azure services should the company consider? (Choose two.)

Accepted Answer

Azure Blob Storage Archive tier. Azure Blob Storage Archive tier is correct because it provides the lowest-cost storage for data that is rarely accessed, with a 10-year retention period meeting compliance requirements. It offers 11 nines of durability (99.999999999%) by storing multiple copies across Azure regions, ensuring data integrity over the long term.

Answer

Azure Files with snapshots

Answer

Azure NetApp Files with cross-region replication

Answer

Azure Disk Storage with incremental snapshots

Question 6

You are designing a backup strategy for Azure VMs that host a file server. The backup must support daily backups with a retention of 30 days, and the ability to restore individual files quickly. The solution must minimize backup storage costs. What backup policy should you configure?

Accepted Answer

Use Azure Backup with daily backup, retention of 30 days, and enable instant restore snapshot for file-level recovery.. Option B is correct because Azure Backup for Azure VMs uses instant restore snapshots to provide fast file-level recovery. The backup policy defines the daily backup schedule, 30-day retention, and instant restore snapshot retention. Storage redundancy (LRS/GRS) is configured at the Recovery Services vault level, not in the backup policy; to minimize costs, select LRS at the vault level separately. Option A is incorrect because it treats LRS as part of the backup policy and does not address the file-level recovery requirement. Option C uses GRS, which increases cost unnecessarily, and option D uses weekly backups, which violates the daily backup requirement.

Answer

Use Azure Backup with daily backup, retention of 30 days, and use locally redundant storage (LRS) for backup data.

Answer

Use Azure Backup with daily backup, retention of 30 days, and use geo-redundant storage (GRS) for backup data.

Answer

Use Azure Backup with weekly backup, retention of 30 days, and use geo-redundant storage (GRS) for backup data.

Question 7

Which Azure service can be used to implement a globally distributed database that supports multi-region writes and provides low-latency access to users worldwide?

Accepted Answer

Azure Cosmos DB with multi-master enabled.. Azure Cosmos DB with multi-master enabled (Option C) is the only Azure service among the options that natively supports multi-region write operations, allowing data to be written to any Azure region simultaneously with automatic conflict resolution and low-latency access globally. Azure SQL Database with active geo-replication and failover groups (Option E) does not support concurrent multi-region writes; it enables read-only replicas in secondary regions and failover to a single writable region, which does not meet the requirement for multi-region writes. Other options either don't support multi-region writes or aren't database services.

Answer

Azure Storage with geo-redundant storage (GRS).

Answer

Azure Cache for Redis with geo-replication.

Answer

Azure Database for PostgreSQL with geo-replication.

Answer

Azure SQL Database with active geo-replication and failover groups.

Question 8

You are designing a business continuity solution for a critical application that uses Azure Cosmos DB with multiple write regions. The application is deployed in the East US and West Europe regions. The business requires that if one region fails, the application can continue to serve writes in the remaining region with no data loss. Which consistency level should you use?

Accepted Answer

Bounded staleness. Azure Cosmos DB does not support strong consistency when multiple write regions are enabled. The supported consistency levels for multi-region writes are Eventual, Session, and Bounded staleness. None of these guarantees zero data loss during a regional failure, because writes that have not yet been replicated to the surviving region can be lost. Bounded staleness limits how far the data can lag behind, but it does not eliminate data loss. To meet a strict no-data-loss requirement, you must use a single write region with strong consistency (or another architecture that ensures synchronous replication before acknowledging writes). Therefore, the requirement as stated cannot be satisfied by any of the listed consistency levels in a multi-write-region configuration.

Answer

Strong

Answer

Eventual

Answer

Session

Question 9

Drag and drop the steps to implement Azure Backup for an Azure virtual machine into the correct order.

Accepted Answer

Create a Recovery Services vault, then define a backup policy, then assign the VM to the vault, then enable backup, then test the backup.. The correct sequence for implementing Azure Backup for an Azure VM is: first create a Recovery Services vault, then define a backup policy that specifies the backup schedule and retention, then assign the VM to the vault (which associates the VM with the vault and policy), then enable backup (which starts the protection), and finally test the backup to ensure it works correctly. This order ensures that each step has the necessary prerequisites completed before moving forward.

Answer

Create a Recovery Services vault, then assign the VM to the vault, then define a backup policy, then enable backup, then test the backup.

Answer

Create a Recovery Services vault, then define a backup policy, then enable backup, then assign the VM to the vault, then test the backup.

Answer

Create a Recovery Services vault, then define a backup policy, then assign the VM to the vault, then test the backup, then enable backup.

Question 10

You are designing a monitoring solution for Azure SQL Database. The requirement is to track query performance metrics such as CPU usage, data IO, and wait statistics over time. You need to identify performance bottlenecks and provide historical data for analysis. Which Azure service should you use?

Accepted Answer

Query Performance Insight for Azure SQL Database. Query Performance Insight for Azure SQL Database is the correct choice because it provides built-in, intelligent analysis of top queries by CPU, data IO, and wait statistics over time, enabling you to identify performance bottlenecks and review historical data. It is specifically designed for Azure SQL Database and offers a customizable time range for trend analysis, directly meeting the requirement to track query performance metrics and analyze historical data.

Answer

Azure Monitor Metrics for Azure SQL Database

Answer

Azure SQL Analytics (preview) in Azure Monitor

Answer

Azure SQL Database Intelligent Insights

Question 11

A company is designing a data storage solution for a global e-commerce platform that requires low-latency access to product catalog data from multiple Azure regions. The data is read-heavy, with occasional updates. Which Azure data store should they recommend?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is the correct choice because it provides globally distributed, multi-region writes with tunable consistency levels and single-digit-millisecond latency for read-heavy workloads. Its ability to replicate data across Azure regions and serve reads from the nearest region directly addresses the requirement for low-latency global access to product catalog data with occasional updates.

Answer

Azure Cache for Redis

Answer

Azure Blob Storage

Answer

Azure SQL Database

Question 12

Which TWO of the following Azure services support storing JSON documents without requiring a predefined schema? (Select two.)

Accepted Answer

Azure Blob Storage. Azure Blob Storage can store JSON documents as block blobs without requiring a predefined schema, treating the JSON as opaque binary data. Azure Cosmos DB is a NoSQL database that natively supports schema-less JSON document storage. Both services allow storing JSON documents without needing to define a schema upfront.

Answer

Azure Purview

Answer

Azure Analysis Services

Answer

Azure SQL Database

Question 13

A company runs a high-performance computing (HPC) workload that requires low-latency access to large files (hundreds of GB) from thousands of Azure VMs concurrently. The files must be accessible via the NFS protocol and the solution must be a fully managed, POSIX-compliant file system that can scale throughput linearly with capacity. Which Azure storage solution should they choose?

Accepted Answer

Azure NetApp Files. Azure NetApp Files is the correct choice because it provides a fully managed, POSIX-compliant NFS file system that can scale throughput linearly with capacity. It is designed for HPC workloads requiring low-latency access to large files from thousands of concurrent VMs, offering sub-millisecond latency and high throughput that increases as you add capacity.

Answer

Azure Files (premium tier)

Answer

Azure Blob Storage with NFS 3.0 support

Answer

Azure HPC Cache

Question 14

Your organization is moving to a cloud-only identity model using Microsoft Entra ID. You need to ensure that users can reset their own passwords without help desk intervention. The solution must support multi-factor authentication and notify administrators of password resets. What should you implement?

Accepted Answer

Microsoft Entra Self-Service Password Reset (SSPR). Microsoft Entra Self-Service Password Reset (SSPR) allows users to reset their own passwords without help desk intervention. It supports multi-factor authentication (MFA) as a verification step before resetting, and can be configured to send notifications to administrators when a password reset occurs. This directly meets all stated requirements.

Answer

Microsoft Entra Connect Password Writeback

Answer

Conditional Access policies for password change

Answer

Microsoft Entra ID Protection

Question 15

A company uses Microsoft Entra ID (Microsoft Entra ID). They need to automatically detect sign-ins from users with leaked credentials and prompt those users to reset their password during the next sign-in. Which Microsoft Entra ID feature should they enable?

Accepted Answer

Microsoft Entra ID Identity Protection. Microsoft Entra ID Identity Protection includes a 'Leaked Credentials' detection capability that continuously monitors for credentials exposed in known data breaches. When a user's credentials are detected as leaked, Identity Protection can automatically trigger a password reset during the next sign-in, ensuring the compromised credentials are no longer usable.

Answer

Conditional Access

Answer

Privileged Identity Management (PIM)

Answer

Microsoft Entra ID B2B

Question 16

You need to design a storage solution for unstructured data that requires low latency (single-digit milliseconds) for frequently accessed files and must support NFS and SMB protocols. Which Azure storage solution should you recommend?

Accepted Answer

Azure NetApp Files. Azure NetApp Files is a fully managed, high-performance file share service that supports both NFS (v3/v4.1) and SMB protocols natively, and is designed for low-latency (single-digit milliseconds) access to unstructured data. It provides the required protocol flexibility and performance for frequently accessed files, making it the correct choice for this scenario.

Answer

Azure Files

Answer

Azure Blob Storage

Answer

Azure Disk Storage

Question 17

You are designing a business continuity solution for a global e-commerce platform that runs on Azure Kubernetes Service (AKS) in multiple regions. The application must remain available even if an entire Azure region fails. The application uses Azure Cosmos DB for its database. You need to ensure that the application can continue to serve traffic with minimal disruption. What should you recommend?

Accepted Answer

Configure Cosmos DB with multi-region writes and deploy AKS clusters in two regions behind Azure Front Door.. It combines multi-region writes in Azure Cosmos DB with AKS clusters deployed in two regions behind Azure Front Door. Multi-region writes provide active-active failover with RTO near zero and 99.999% read/write availability, while Azure Front Door offers global load balancing and automatic failover at the application layer. This architecture ensures the application remains available even if an entire Azure region fails, with minimal disruption.

Answer

Use Cosmos DB with geo-redundant storage and deploy a single AKS cluster with Azure Site Recovery.

Answer

Deploy AKS clusters in two regions with Azure Traffic Manager and use Cosmos DB single-region writes with async replication.

Answer

Deploy the application to a single region and use Azure Backup for Cosmos DB to restore in another region.

Question 18

A company has multiple branch offices and needs to connect them to Azure and to each other using a scalable, managed solution that simplifies network architecture. The solution should support automatic routing and integration with ExpressRoute and VPN. Which Azure service should they use?

Accepted Answer

Azure Virtual WAN. Azure Virtual WAN is a managed networking service that aggregates branch, VPN, and ExpressRoute connectivity into a single hub-and-spoke architecture. It automatically handles routing between branches and Azure, supports any-to-any connectivity, and integrates natively with ExpressRoute and VPN gateways, making it the correct choice for a scalable, managed solution that simplifies network architecture.

Answer

Azure Virtual Network

Answer

Azure ExpressRoute

Answer

Azure VPN Gateway

Question 19

A company needs a fully managed NoSQL database for a new application with a key-value and document data model. They require single-digit millisecond latency at any scale, multi-region writes with automatic conflict resolution, and a serverless capacity option to handle unpredictable traffic. Which Azure data service should they use?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is the correct choice because it is a fully managed NoSQL database that supports both key-value and document data models natively. It guarantees single-digit millisecond latency at any scale, offers multi-region writes with automatic conflict resolution via its multi-master replication, and provides a serverless capacity mode that automatically scales based on demand, making it ideal for unpredictable traffic.

Answer

Azure Table Storage

Answer

Azure Cache for Redis

Answer

Azure SQL Database

Question 20

You are designing a data storage solution for an IoT application that ingests millions of events per second. Each event is a small JSON message (under 1 KB). The solution must support real-time analytics and allow queries on recent data (last 24 hours) with low latency. Historical data (older than 24 hours) should be stored in a cost-optimized manner for occasional compliance queries. Which combination of Azure services should you recommend?

Accepted Answer

Azure Data Explorer for real-time analytics and Azure Blob Storage for historical data. Azure Data Explorer (ADX) is purpose-built for real-time analytics on high-velocity data streams, ingesting millions of events per second with sub-second query latency on recent data. Azure Blob Storage provides a cost-optimized tier (e.g., Cool or Archive) for historical data older than 24 hours, which can be queried occasionally via ADX’s continuous export or external table feature. This combination meets both the low-latency real-time analytics requirement and the cost-effective long-term storage need.

Answer

Azure Cosmos DB for both real-time and historical data

Answer

Azure Event Hubs for ingestion and Azure Functions for querying

Answer

Azure SQL Database with elastic pool