AZ-305 Design data storage solutions Practice Test 7 — 15 Questions

Question 1

A company is migrating a legacy application that uses Oracle Database to Azure. They want to minimize code changes and maintain compatibility with Oracle PL/SQL. Which TWO Azure data services should they consider?

Accepted Answer

Azure SQL Managed Instance with Oracle compatibility. Azure SQL Managed Instance with Oracle compatibility (option B) provides a high degree of PL/SQL compatibility through its 'Oracle compatibility mode,' which supports stored procedures, triggers, and functions written in PL/SQL with minimal changes. This service also offers a fully managed SQL Server engine that can run Oracle workloads with near-zero code modifications, making it ideal for legacy application migration.

Answer

Azure SQL Database

Answer

Azure Cosmos DB

Answer

Azure Database for MySQL

Question 2

A company needs to design a data storage solution for a global SaaS application that requires multi-region writes with conflict resolution. The data model includes both structured and unstructured data. Which THREE Azure data services should they consider?

Accepted Answer

Azure Blob Storage. Azure Blob Storage is correct because it provides globally scalable, object-based storage for unstructured data (such as images, videos, and documents) that can be accessed from anywhere via HTTP/HTTPS. It supports geo-redundant storage options (e.g., GRS, RA-GRS) and can be integrated with Azure Front Door or Traffic Manager to enable multi-region read access, though it does not natively handle multi-region writes with conflict resolution—this is why it is paired with Cosmos DB for structured data.

Answer

Azure Cache for Redis

Answer

Azure Table Storage

Question 3

A company needs to store sensitive customer data that must be encrypted at rest. Which TWO Azure storage services support customer-managed keys (CMK) for encryption?

Accepted Answer

Azure SQL Database. Azure SQL Database and Azure Blob Storage both support customer-managed keys (CMK) via Azure Key Vault, allowing you to bring your own encryption keys (BYOK) for data at rest. This meets the requirement for sensitive customer data where the organization needs full control over encryption keys, including key rotation and revocation.

Answer

Azure Files

Answer

Azure Cache for Redis

Answer

Azure Cosmos DB

Question 4

Refer to the exhibit. An Azure SQL Database is deployed in a VNet with a private endpoint at IP 10.0.1.4. The network security group rule shown is applied to the subnet of the private endpoint. A developer reports that they cannot connect to the database from a VM in the same VNet. What is the most likely cause?

Accepted Answer

The rule is being blocked by a higher priority deny rule.. The exhibit shows a valid inbound NSG rule allowing TCP traffic from VirtualNetwork to the private endpoint IP. However, if a higher-priority deny rule exists (e.g., denying all traffic from VirtualNetwork or a specific source), it will override this allow rule. Since the developer cannot connect from a VM in the same VNet, the most likely cause is a conflicting deny rule with a lower priority number (higher priority) blocking the traffic.

Answer

The source address prefix is set to VirtualNetwork, which is incorrect.

Answer

The protocol should be UDP instead of TCP.

Answer

The rule is applied to the wrong direction (outbound instead of inbound).

Question 5

Refer to the exhibit. An organization deployed this ARM template to create a storage account. After deployment, they try to enable geo-redundant storage (GRS) but receive an error. What is the most likely reason?

Accepted Answer

The storage account uses Standard_LRS, which does not support GRS.. Option D is correct because Standard_LRS (Locally Redundant Storage) does not support upgrading to GRS (Geo-Redundant Storage) directly. To enable GRS, the storage account must be created with a redundancy tier that supports geo-replication, such as Standard_GRS or Standard_RAGRS. The error occurs because the ARM template specifies Standard_LRS, which only replicates data within a single datacenter and cannot be converted to a geo-redundant tier after deployment.

Answer

The supportsHttpsTrafficOnly property must be set to false.

Answer

The storage account name is not globally unique.

Answer

The minimumTlsVersion property prevents geo-replication.

Question 6

Refer to the exhibit. A company is analyzing Azure Storage diagnostic logs using this KQL query. They notice a high number of GetBlob operations on BlockBlobs. The storage account is used for a web application that serves static content. What should they recommend to reduce the number of GetBlob operations?

Accepted Answer

Enable Azure CDN or Azure Front Door to cache content.. Option C is correct because enabling Azure CDN or Azure Front Door caches static content at edge locations, reducing the number of direct GetBlob operations against the storage account. This offloads repeated requests from the origin storage, lowering both operational costs and latency for the web application.

Answer

Implement Azure Blob Storage life cycle management to move data to the archive tier.

Answer

Use Azure File Sync to cache files on-premises.

Answer

Enable Azure Storage Analytics logging to track operations.

Question 7

A company is designing a data storage solution for a globally distributed application that requires low-latency read access to frequently accessed data and high throughput for write operations. The data is non-relational and can be stored as key-value pairs. Which Azure service should they use?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is the correct choice because it is a globally distributed, multi-model database service that provides guaranteed low-latency reads (under 10 ms at the 99th percentile) and high throughput for write operations, with automatic indexing and turnkey global distribution. It natively supports key-value data models, making it ideal for non-relational, frequently accessed data requiring consistent performance across regions.

Answer

Azure Table Storage

Answer

Azure SQL Database

Answer

Azure Blob Storage

Question 8

A healthcare organization needs to store patient records that must be immutable and auditable for compliance purposes. The records should be stored in a cost-effective manner with the ability to set retention policies. Which Azure storage solution should they implement?

Accepted Answer

Azure Blob Storage with immutable storage. Azure Blob Storage with immutable storage (WORM policy) is the correct solution because it provides time-based retention policies and legal hold capabilities that make data non-erasable and non-modifiable, meeting compliance requirements for patient records. It is cost-effective for large volumes of data and integrates with Azure Policy for audit logging, making it ideal for healthcare compliance scenarios like HIPAA.

Answer

Azure NetApp Files

Answer

Azure SQL Database

Answer

Azure Files

Question 9

A financial services company is migrating its on-premises SAP HANA database to Azure. The database requires high IOPS and low latency with a capacity of 4 TB. They need to choose a storage solution that supports SAP HANA certified configurations. Which Azure storage solution should they use?

Accepted Answer

Azure Ultra Disk Storage. Azure Ultra Disk Storage is the correct choice because it is the only Azure managed disk that is SAP HANA certified for high IOPS and sub-millisecond latency, which is critical for SAP HANA workloads. It supports up to 300,000 IOPS and 2,000 MB/s throughput per disk, and can be provisioned with up to 64 TB capacity, easily covering the 4 TB requirement. Premium SSD v2 is not SAP HANA certified for production databases, and Azure NetApp Files, while offering high performance, is not a managed disk and requires specific NFS configurations that may not meet SAP HANA's strict certification requirements for block storage.

Answer

Azure Premium SSD v2

Answer

Azure Standard HDD

Answer

Azure NetApp Files

Question 10

A company wants to automatically tier data between hot, cool, and archive access tiers based on last access time to optimize costs. Which Azure feature should they implement?

Accepted Answer

Azure Blob Storage lifecycle management. Azure Blob Storage lifecycle management allows you to define policies that automatically move blobs between hot, cool, and archive access tiers based on conditions such as last access time or age. This directly addresses the requirement to optimize costs by tiering data according to access patterns without manual intervention.

Answer

Azure Data Box

Answer

Azure Backup

Answer

Azure File Sync

Question 11

A gaming company stores player session data in Azure Cosmos DB. They need to handle sudden spikes in write traffic without throttling and ensure low-latency reads globally. Which configuration should they use?

Accepted Answer

Autoscale provisioned throughput. Autoscale provisioned throughput (A) is correct because it allows Cosmos DB to automatically scale up to the maximum throughput (up to 10x the base RU/s) during sudden write spikes, preventing throttling (HTTP 429 errors). Combined with multi-region writes (which is a separate configuration), it ensures low-latency global reads by enabling writes to be accepted in any region and replicated asynchronously. This meets both the spike-handling and global read latency requirements.

Answer

Serverless capacity mode

Answer

Multi-region writes

Answer

Manual provisioned throughput

Question 12

A multinational corporation needs to store and analyze petabytes of historical data for regulatory reporting. The data is rarely accessed but must be available for queries within 5 minutes. Which Azure storage solution should they choose to minimize cost?

Accepted Answer

Azure Data Lake Storage Gen2. Azure Data Lake Storage Gen2 (ADLS Gen2) is the correct choice because it combines a hierarchical namespace with Azure Blob Storage's massive scalability, enabling petabyte-scale storage at low cost. It supports fast queries via tools like Azure Synapse or PolyBase, meeting the 5-minute query SLA for cold data, while its tiered storage (e.g., Cool or Archive access tiers) minimizes cost for rarely accessed historical data.

Answer

Azure SQL Database

Answer

Azure Files

Answer

Azure Cosmos DB

Question 13

A company is deploying a containerized microservices application on Azure Kubernetes Service (AKS). The application requires persistent storage that can be attached to pods and supports dynamic provisioning. Which Azure storage solution should they use?

Accepted Answer

Azure Disks. Azure Disks is the correct choice because it provides block-level storage volumes that can be dynamically provisioned via the AKS built-in StorageClass, supporting ReadWriteOnce access mode required for a single pod in a containerized microservices application. Azure Disks integrate directly with Kubernetes PersistentVolumeClaims (PVCs) for dynamic provisioning, offering low-latency, high-performance storage suitable for stateful workloads.

Answer

Azure Blob Storage

Answer

Azure Files

Answer

Azure NetApp Files

Question 14

A media company needs to store large video files that are frequently accessed for the first month, then infrequently after that. They want to minimize storage costs while ensuring files are instantly accessible when needed. Which storage strategy should they implement?

Accepted Answer

Use Azure Blob Storage lifecycle management to move files from hot to cool after 30 days. Option D is correct because Azure Blob Storage lifecycle management allows you to define rules that automatically transition blobs from the hot tier (frequent access) to the cool tier (infrequent access) after a specified number of days. This meets the requirement of instant accessibility for the first month and cost minimization thereafter, as the cool tier offers lower storage costs with the same low-latency access as the hot tier.

Answer

Store all files in the hot access tier

Answer

Manually move files between tiers using AzCopy

Answer

Store all files in the archive access tier

Question 15

A company needs to store sensitive customer data in Azure Blob Storage with encryption at rest using customer-managed keys (CMK) stored in a hardware security module (HSM). Which Azure service should they use to manage the keys?

Accepted Answer

Azure Key Vault Managed HSM. Azure Key Vault Managed HSM is a fully managed, highly available, single-tenant HSM that is FIPS 140-2 Level 3 validated. It allows you to store customer-managed encryption keys (CMKs) in a hardware security module (HSM) for Azure Storage encryption at rest, meeting the requirement for HSM-backed key storage. The Premium tier of Azure Key Vault also supports HSM-backed keys, but the question specifies 'stored in a hardware security module (HSM)', and Managed HSM provides dedicated HSM partitions with stronger isolation and compliance.

Answer

Azure Key Vault (Premium tier)

Answer

Azure Information Protection

Answer

Azure Key Vault (Standard tier)