AZ-305 Design data storage solutions Practice Test 4 — 15 Questions

Question 1

Drag and drop the steps to implement Azure Traffic Manager for geographic routing into the correct order.

Accepted Answer

Create profile, then add endpoints, then configure mapping, then update DNS, then test.. The correct sequence for implementing Azure Traffic Manager for geographic routing is: first create the Traffic Manager profile, then add the endpoints (e.g., Azure regions), then configure the geographic routing mapping to assign regions to endpoints, then update DNS records to point to the Traffic Manager domain name, and finally test the routing. Skipping or reordering these steps can lead to misconfiguration or routing failures.

Answer

Add endpoints, then create profile, then configure mapping, then update DNS, then test.

Answer

Create profile, then configure mapping, then add endpoints, then update DNS, then test.

Answer

Create profile, then add endpoints, then update DNS, then configure mapping, then test.

Question 2

Match each Azure storage redundancy option to its description.

Accepted Answer

LRS: Replicates data three times within a single data center in the primary region.. Azure Storage offers several redundancy options: LRS (local), ZRS (zone), GRS (geo), and RA-GRS (geo with read access). Common confusions include mixing LRS and ZRS, or assuming all geo-replicated options provide read access.

Answer

LRS: Replicates data across multiple availability zones.

Answer

GRS: Provides read access to the secondary region without failover.

Question 3

Match each Azure disaster recovery feature to its description.

Accepted Answer

Azure Site Recovery: Replicates workloads from primary site to secondary site, enabling automated failover and failback.. Azure disaster recovery features include Site Recovery for replication and failover, Backup for retention, Availability Zones for datacenter failure protection, and Paired Regions for region-level disaster recovery. Common confusions involve mixing the roles of Site Recovery and Backup.

Answer

Azure Site Recovery: Provides long-term retention of backups.

Answer

Azure Backup: Replicates VMs for failover.

Question 4

A company is designing a data storage solution for a global e-commerce platform that requires low-latency access to product catalog data from multiple Azure regions. The data is read-heavy, with occasional updates. Which Azure data store should they recommend?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is the correct choice because it provides globally distributed, multi-region writes with tunable consistency levels and single-digit-millisecond latency for read-heavy workloads. Its ability to replicate data across Azure regions and serve reads from the nearest region directly addresses the requirement for low-latency global access to product catalog data with occasional updates.

Answer

Azure Cache for Redis

Answer

Azure Blob Storage

Answer

Azure SQL Database

Question 5

A company needs to store immutable audit logs for regulatory compliance. The logs must be stored in a write-once, read-many (WORM) state for 7 years. Which Azure storage feature should be used?

Accepted Answer

Azure Blob Storage immutable storage with time-based retention. Azure Blob Storage immutable storage with time-based retention enforces a WORM (Write Once, Read Many) state, preventing logs from being modified or deleted for a specified retention period. This directly meets the regulatory requirement to store audit logs immutably for 7 years, as the policy locks the data at the container or blob level and cannot be removed until the retention interval expires.

Answer

Azure SQL Database temporal tables

Answer

Azure Blob Storage change feed

Answer

Azure Blob Storage soft delete

Question 6

A company wants to analyze IoT sensor data from millions of devices in near real-time and store the raw data for batch processing. Which combination of Azure services should they use?

Accepted Answer

Azure Event Hubs and Azure Blob Storage. Azure Event Hubs is a highly scalable data streaming platform and event ingestion service capable of ingesting millions of events per second from IoT devices in near real-time. Azure Blob Storage provides cost-effective, durable object storage for the raw data, which can then be used for batch processing with services like Azure Data Lake Analytics or Azure Synapse. This combination directly meets the requirements for near real-time ingestion and raw data storage for batch processing.

Answer

Azure Event Hubs and Azure Synapse Analytics

Answer

Azure IoT Hub and Azure Cosmos DB

Answer

Azure Data Lake Storage and Azure Stream Analytics

Question 7

A company needs to store backup data from Azure Virtual Machines with a retention policy of 99 years to meet compliance requirements. The backups must be encrypted at rest and in transit. Which Azure storage solution should they use?

Accepted Answer

Azure Blob Storage with immutable storage. Azure Backup's Recovery Services vault directly supports yearly retention points up to 99 years (not capped at 10 years -- 10 years is just the default), plus vault-level immutability and encryption at rest/in transit. For 99-year VM backup retention with encryption requirements, the correct answer should be Azure Backup with a long-term retention policy and immutable vault settings, not manually storing backups in Blob Storage with immutable storage as a workaround.

Answer

Azure Files

Answer

Azure NetApp Files

Answer

Azure Disk Storage

Question 8

A company is designing a data lake for analytics. The data includes personally identifiable information (PII) that must be anonymized before analysts access it. Which Azure service should they use to automate the anonymization process?

Accepted Answer

Microsoft Purview data policies. Microsoft Purview data policies allow you to define and enforce data access policies that can automatically anonymize or mask sensitive data, such as PII, when accessed by analysts. This service integrates with Azure data lake storage and provides a centralized way to manage data governance and compliance, making it the correct choice for automating anonymization in a data lake scenario.

Answer

Azure Policy

Answer

Azure SQL Database dynamic data masking

Answer

Azure Key Vault

Question 9

An application requires a highly available key-value store with sub-millisecond read and write latencies across multiple Azure regions. The data model is simple and does not require complex queries. Which Azure data store should they choose?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is the correct choice because it provides a globally distributed, multi-region key-value store with guaranteed sub-10-millisecond read and write latencies at the 99th percentile, and supports multiple consistency models including eventual consistency for even lower latency. Its turnkey global distribution enables active-active replication across Azure regions, meeting the high availability and sub-millisecond performance requirements without complex query support.

Answer

Azure SQL Database

Answer

Azure Table Storage

Answer

Azure Cache for Redis

Question 10

A company needs to store large amounts of unstructured data such as images and videos for a content management system. The data must be accessible via HTTPS and support tiered storage for cost optimization. Which Azure service should they use?

Accepted Answer

Azure Blob Storage. Azure Blob Storage is the correct choice because it is designed for storing large amounts of unstructured data (such as images and videos) and provides HTTPS access. It also offers tiered storage (hot, cool, cold, and archive tiers) to optimize costs based on data access patterns, making it ideal for a content management system.

Answer

Azure Cosmos DB

Answer

Azure Data Lake Storage

Answer

Azure Files

Question 11

A company is migrating a legacy application that uses Oracle Database to Azure. They want to minimize code changes and maintain compatibility with Oracle PL/SQL. Which TWO Azure data services should they consider?

Accepted Answer

Azure SQL Managed Instance with Oracle compatibility. Azure SQL Managed Instance with Oracle compatibility (option B) provides a high degree of PL/SQL compatibility through its 'Oracle compatibility mode,' which supports stored procedures, triggers, and functions written in PL/SQL with minimal changes. This service also offers a fully managed SQL Server engine that can run Oracle workloads with near-zero code modifications, making it ideal for legacy application migration.

Answer

Azure SQL Database

Answer

Azure Cosmos DB

Answer

Azure Database for MySQL

Question 12

A company needs to design a data storage solution for a global SaaS application that requires multi-region writes with conflict resolution. The data model includes both structured and unstructured data. Which TWO Azure data services should they consider?

Accepted Answer

Azure Blob Storage. Azure Cosmos DB natively supports multi-region writes with automatic conflict resolution, making it suitable for globally distributed structured data. Azure Blob Storage provides object storage for unstructured data with geo-redundant replication, though it does not natively handle multi-region writes; however, it can be used with application-level strategies. Azure SQL Database with active geo-replication is incorrect because it only supports a single writable primary and readable secondaries, lacking multi-region write capability and conflict resolution. Azure Cache for Redis is a caching layer, not a primary storage solution. Azure Table Storage (non-Cosmos) does not support multi-region writes.

Answer

Azure SQL Database with active geo-replication

Answer

Azure Cache for Redis

Answer

Azure Table Storage

Question 13

A company needs to store sensitive customer data that must be encrypted at rest. Which TWO Azure storage services support customer-managed keys (CMK) for encryption?

Accepted Answer

Azure SQL Database. Azure SQL Database and Azure Blob Storage both support customer-managed keys (CMK) via Azure Key Vault, allowing you to bring your own encryption keys (BYOK) for data at rest. This meets the requirement for sensitive customer data where the organization needs full control over encryption keys, including key rotation and revocation.

Answer

Azure Files

Answer

Azure Cache for Redis

Answer

Azure Cosmos DB

Question 14

Refer to the exhibit. An Azure SQL Database is deployed in a VNet with a private endpoint at IP 10.0.1.4. The network security group rule shown is applied to the subnet of the private endpoint. A developer reports that they cannot connect to the database from a VM in the same VNet. What is the most likely cause?

Accepted Answer

The rule is being blocked by a higher priority deny rule.. The exhibit shows a valid inbound NSG rule allowing TCP traffic from VirtualNetwork to the private endpoint IP. However, if a higher-priority deny rule exists (e.g., denying all traffic from VirtualNetwork or a specific source), it will override this allow rule. Since the developer cannot connect from a VM in the same VNet, the most likely cause is a conflicting deny rule with a lower priority number (higher priority) blocking the traffic.

Answer

The source address prefix is set to VirtualNetwork, which is incorrect.

Answer

The protocol should be UDP instead of TCP.

Answer

The rule is applied to the wrong direction (outbound instead of inbound).

Question 15

Refer to the exhibit. An organization deployed this ARM template to create a storage account. After deployment, they try to enable geo-redundant storage (GRS) but receive an error. What is the most likely reason?

Accepted Answer

The minimumTlsVersion property prevents geo-replication.. The minimumTlsVersion property, when set to a value lower than TLS 1.2 (e.g., TLS 1.0), prevents geo-replication because Azure requires that storage accounts with geo-replication support TLS 1.2 or higher on the secondary endpoints. The error occurs because the secondary region endpoints do not support the lower TLS version specified.

Answer

The supportsHttpsTrafficOnly property must be set to false.

Answer

The storage account name is not globally unique.

Answer

The storage account uses Standard_LRS, which does not support GRS.