AZ-305 Design data storage solutions • Complete Question Bank
Complete AZ-305 Design data storage solutions question bank — all 0 questions with answers and detailed explanations.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag a concept onto its matching description — or click a concept then click the description.
3 copies within a single datacenter
3 copies across 3 availability zones in a region
LRS in primary region + LRS in paired secondary region
GRS with read access to secondary region
ZRS in primary region + LRS in paired secondary region
Drag a concept onto its matching description — or click a concept then click the description.
Orchestrates replication and failover of VMs
Cloud-based backup for Azure and on-premises workloads
Physically separate datacenter within a region
Logical grouping for fault and update domains
Another Azure region for cross-region replication
Drag a concept onto its matching description — or click a concept then click the description.
Enforce rules and compliance for resources
Define repeatable set of Azure resources and policies
Hierarchical structure for managing access and policies
Query and explore Azure resources across subscriptions
Monitor, allocate, and optimize cloud costs
{
"type": "Microsoft.Network/networkSecurityGroups/securityRules",
"apiVersion": "2023-11-01",
"properties": {
"protocol": "Tcp",
"sourcePortRange": "*",
"destinationPortRange": "1433",
"sourceAddressPrefix": "VirtualNetwork",
"destinationAddressPrefix": "10.0.1.4",
"access": "Allow",
"priority": 100,
"direction": "Inbound"
}
}{
"variables": {
"storageAccountName": "[concat('storage', uniqueString(resourceGroup().id))]"
},
"resources": [
{
"type": "Microsoft.Storage/storageAccounts",
"apiVersion": "2023-01-01",
"name": "[variables('storageAccountName')]",
"location": "[resourceGroup().location]",
"sku": {
"name": "Standard_LRS"
},
"kind": "StorageV2",
"properties": {
"minimumTlsVersion": "TLS1_2",
"supportsHttpsTrafficOnly": true
}
}
]
}{
"query": "AzureDiagnostics | where ResourceProvider == \"MICROSOFT.STORAGE\" | where OperationName == \"GetBlob\" | summarize Count = count() by BlobType, bin(TimeGenerated, 1h) | order by TimeGenerated desc",
"result": [
{"BlobType": "BlockBlob", "Count": 1200, "TimeGenerated": "2026-03-15T10:00:00Z"},
{"BlobType": "PageBlob", "Count": 50, "TimeGenerated": "2026-03-15T10:00:00Z"},
{"BlobType": "AppendBlob", "Count": 200, "TimeGenerated": "2026-03-15T10:00:00Z"}
]
}Refer to the exhibit.
```json
{
"roleName": "CustomStorageRole",
"permissions": [{
"actions": [
"Microsoft.Storage/storageAccounts/blobServices/containers/read",
"Microsoft.Storage/storageAccounts/blobServices/containers/write"
],
"notActions": [],
"dataActions": [
"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read",
"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write"
],
"notDataActions": []
}]
}
```Refer to the exhibit.
```json
{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"storageAccountName": {
"type": "string"
}
},
"resources": [
{
"type": "Microsoft.Storage/storageAccounts",
"apiVersion": "2023-01-01",
"name": "[parameters('storageAccountName')]",
"location": "[resourceGroup().location]",
"sku": {
"name": "Standard_GRS"
},
"kind": "StorageV2",
"properties": {
"supportsHttpsTrafficOnly": true
}
}
]
}
```Refer to the exhibit. ```sql SELECT OperationName, COUNT(*) AS OperationCount FROM StorageBlobLogs WHERE TimeGenerated > ago(1h) AND StatusCode == 404 GROUP BY OperationName ORDER BY OperationCount DESC ```
Refer to the exhibit. The following is an Azure Policy definition:
{
"if": {
"field": "type",
"equals": "Microsoft.Storage/storageAccounts"
},
"then": {
"effect": "deny",
"details": {
"field": "Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly",
"equals": false
}
}
}Refer to the exhibit. The following is an Azure CLI command output:
{
"id": "/subscriptions/.../resourceGroups/rg1/providers/Microsoft.Storage/storageAccounts/st1",
"kind": "StorageV2",
"properties": {
"accessTier": "Hot",
"supportsHttpsTrafficOnly": true,
"encryption": {
"keySource": "Microsoft.Storage",
"services": {
"blob": {
"enabled": true,
"keyType": "Account"
},
"file": {
"enabled": true,
"keyType": "Account"
}
}
},
"networkAcls": {
"bypass": "AzureServices",
"defaultAction": "Deny",
"ipRules": [],
"virtualNetworkRules": []
}
}
}Refer to the exhibit. The following is a Bicep snippet for an Azure Cosmos DB account:
resource cosmosAccount 'Microsoft.DocumentDB/databaseAccounts@2024-08-15' = {
name: 'mycosmos'
location: resourceGroup().location
properties: {
databaseAccountOfferType: 'Standard'
locations: [
{
locationName: 'East US'
failoverPriority: 0
}
{
locationName: 'West US'
failoverPriority: 1
}
]
}
}Refer to the exhibit.
```json
{
"properties": {
"defaultEncryption": false,
"encryption": {
"keySource": "Microsoft.Storage",
"services": {
"blob": {
"enabled": true
},
"file": {
"enabled": false
}
}
}
}
}
```Refer to the exhibit.
```json
{
"type": "Microsoft.Sql/servers/databases",
"apiVersion": "2023-05-01-preview",
"name": "mydatabase",
"properties": {
"collation": "SQL_Latin1_General_CP1_CI_AS",
"maxSizeBytes": 1073741824,
"requestedServiceObjectiveName": "S3",
"zoneRedundant": false
}
}
```Refer to the exhibit.
```json
{
"properties": {
"isVersioningEnabled": true,
"deleteRetentionPolicy": {
"enabled": true,
"days": 7
},
"restorePolicy": {
"enabled": true,
"days": 30
}
}
}
```{
"policyRule": {
"if": {
"field": "type",
"equals": "Microsoft.Storage/storageAccounts"
},
"then": {
"effect": "deny",
"details": {
"field": "Microsoft.Storage/storageAccounts/networkAcls.defaultAction",
"equals": "Allow"
}
}
}
}{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"storageName": {
"type": "string",
"defaultValue": "[uniqueString(resourceGroup().id)]"
},
"location": {
"type": "string",
"defaultValue": "[resourceGroup().location]"
}
},
"resources": [
{
"type": "Microsoft.Storage/storageAccounts",
"apiVersion": "2023-01-01",
"name": "[parameters('storageName')]",
"location": "[parameters('location')]",
"kind": "StorageV2",
"sku": {
"name": "Standard_LRS"
},
"properties": {
"supportsHttpsTrafficOnly": true
}
}
]
}{
"parameters": {
"storageAccountName": {
"value": "mystorageaccount"
},
"containerName": {
"value": "logs"
},
"accessTier": {
"value": "Cool"
},
"replication": {
"value": "LRS"
}
}
}Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Deny",
"Action": [
"Microsoft.Storage/storageAccounts/blobServices/containers/write"
],
"Resource": "/subscriptions/sub123/resourceGroups/rg1/providers/Microsoft.Storage/storageAccounts/storage1/blobServices/default/containers/*",
"Condition": {
"BoolIfExists": {
"Microsoft.Storage/encryptionScope": "false"
},
"StringNotEquals": {
"Microsoft.Storage/encryptionScope": "customEncryptionScope"
}
}
}
]
}Refer to the exhibit.
{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"storageName": {
"type": "string",
"defaultValue": "mystorageaccount"
},
"location": {
"type": "string",
"defaultValue": "[resourceGroup().location]"
}
},
"resources": [
{
"type": "Microsoft.Storage/storageAccounts",
"apiVersion": "2023-01-01",
"name": "[parameters('storageName')]",
"location": "[parameters('location')]",
"kind": "StorageV2",
"sku": {
"name": "Standard_GRS"
},
"properties": {
"accessTier": "Hot",
"minimumTlsVersion": "TLS1_2",
"supportsHttpsTrafficOnly": true,
"encryption": {
"keySource": "Microsoft.Storage"
},
"networkAcls": {
"defaultAction": "Deny",
"virtualNetworkRules": [],
"ipRules": []
}
}
}
]
}Refer to the exhibit. $connectionString = "DefaultEndpointsProtocol=https;AccountName=mystorage;AccountKey=mykey;EndpointSuffix=core.windows.net" $containerName = "mycontainer" $blobName = "myblob.txt" $content = "Hello, World!" $ctx = New-AzStorageContext -ConnectionString $connectionString Set-AzStorageBlobContent -Context $ctx -Container $containerName -Blob $blobName -Value $content -StandardBlobTier Hot
{
"statement": "{\"Effect\": \"Deny\", \"Action\": [\"Microsoft.Storage/storageAccounts/blobServices/containers/write\"], \"NotAction\": [], \"Resource\": \"Microsoft.Storage/storageAccounts/*\", \"Condition\": {\"Bool\": {\"acs:RequestAction\": [\"Microsoft.Storage/storageAccounts/blobServices/containers/put\"]}}}",
"policyName": "DenyContainerCreationWithoutEncryption"
}{
"query": "AzureDiagnostics | where ResourceProvider == 'MICROSOFT.DOCUMENTDB' | where Category == 'DataPlaneRequests' | summarize avg(DurationMs) by bin(TimeGenerated, 1h), OperationName | order by avg_DurationMs desc",
"resultSample": "TimeGenerated, OperationName, avg_DurationMs\n2024-01-01 10:00:00, Query, 150\n2024-01-01 11:00:00, Query, 300\n2024-01-01 12:00:00, Query, 450"
}{
"properties": {
"immutabilityPolicy": {
"state": "Locked",
"allowProtectedAppendWrites": false,
"immutabilityPeriodSinceCreationInDays": 365
},
"legalHold": {
"tags": ["audit-2024"]
}
}
}Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"AzureAD": "users@contoso.com"
},
"Action": "Microsoft.Storage/storageAccounts/blobServices/containers/read",
"Resource": "/subscriptions/12345/resourceGroups/RG1/providers/Microsoft.Storage/storageAccounts/storage1/blobServices/default/containers/container1",
"Condition": {
"IpAddress": {
"SourceIp": "192.168.1.0/24"
}
}
}
]
}