AZ-305 Design data storage solutions Practice Test 8 — 15 Questions

Question 1

Refer to the exhibit. Your Azure policy team has created the following policy definition. After assigning this policy to a subscription, a developer tries to create a new storage account with network ACLs default action set to 'Allow'. What will happen?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The storage account creation will be denied because it violates the policy.. The policy definition uses the 'Deny' effect, which explicitly blocks any non-compliant resource creation. Since the developer attempts to set the network ACLs default action to 'Allow', this violates the policy's condition that requires the default action to be 'Deny'. Therefore, Azure Resource Manager will reject the deployment before the storage account is created.

Answer

The storage account will be created if the developer uses a different resource group.

Answer

The storage account will be created with a default action of 'Deny' automatically.

Answer

The storage account will be created successfully because the policy only audits.

Question 2

Refer to the exhibit. Your team deploys this ARM template to a resource group in West US. After deployment, you need to ensure the storage account is geo-redundant. What is the most efficient way to modify the template to achieve this?

Accepted Answer

Change the 'sku.name' property from 'Standard_LRS' to 'Standard_GRS'.. Changing the 'sku.name' property from 'Standard_LRS' to 'Standard_GRS' directly modifies the replication type of the existing storage account to geo-redundant storage (GRS). This is the most efficient approach as it updates the single resource in-place without adding extra resources or altering the storage account's kind or API version.

Answer

Add a second storage account resource with Geo-redundant replication.

Answer

Change the 'kind' property to 'BlobStorage'.

Answer

Change the 'apiVersion' to a newer version.

Question 3

Your organization is migrating on-premises SQL Server databases to Azure. The databases are mission-critical and require the highest level of availability with automatic failover to a secondary region. Which Azure SQL deployment option should you recommend?

Accepted Answer

Azure SQL Managed Instance with failover groups. Azure SQL Managed Instance with failover groups provides automatic failover to a secondary region by replicating data to a secondary instance and automatically failing over in case of an outage. Active geo-replication (Option A) does not support automatic failover; it requires manual or custom scripting to initiate failover. SQL Managed Instance with failover groups meets the requirement for automatic cross-region failover.

Answer

Azure SQL Database with active geo-replication

Answer

Azure Database for PostgreSQL

Answer

SQL Server on Azure Virtual Machines with Always On availability groups

Question 4

A financial services company needs to store transaction logs for regulatory compliance. The logs must be stored in a cost-effective manner, and they must be immutable to prevent tampering. The logs are accessed infrequently but must be retained for 7 years. Which Azure storage solution should you recommend?

Accepted Answer

Azure Blob Storage with immutable storage policy and cool access tier. Azure Blob Storage with an immutable storage policy (WORM) ensures that transaction logs cannot be modified or deleted during the retention period, meeting compliance requirements. The cool access tier is cost-effective for infrequently accessed data, and the 7-year retention aligns with the policy's time-based retention. This combination provides both immutability and low-cost storage for long-term archival.

Answer

Azure Cosmos DB with time-to-live (TTL)

Answer

Azure SQL Database with long-term retention backup

Answer

Azure Files with share snapshots

Question 5

You are designing a data storage solution for an IoT application that ingests millions of events per second. Each event is a small JSON message (under 1 KB). The solution must support real-time analytics and allow queries on recent data (last 24 hours) with low latency. Historical data (older than 24 hours) should be stored in a cost-optimized manner for occasional compliance queries. Which combination of Azure services should you recommend?

Accepted Answer

Azure Data Explorer for real-time analytics and Azure Blob Storage for historical data. Azure Data Explorer (ADX) is purpose-built for real-time analytics on high-velocity data streams, ingesting millions of events per second with sub-second query latency on recent data. Azure Blob Storage provides a cost-optimized tier (e.g., Cool or Archive) for historical data older than 24 hours, which can be queried occasionally via ADX’s continuous export or external table feature. This combination meets both the low-latency real-time analytics requirement and the cost-effective long-term storage need.

Answer

Azure Cosmos DB for both real-time and historical data

Answer

Azure Event Hubs for ingestion and Azure Functions for querying

Answer

Azure SQL Database with elastic pool

Question 6

Which TWO of the following Azure services support storing JSON documents without requiring a predefined schema? (Select two.)

Accepted Answer

Azure Blob Storage. Azure Blob Storage can store JSON documents as block blobs without requiring a predefined schema, treating the JSON as opaque binary data. Azure Cosmos DB is a NoSQL database that natively supports schema-less JSON document storage. Both services allow storing JSON documents without needing to define a schema upfront.

Answer

Azure Purview

Answer

Azure Analysis Services

Answer

Azure SQL Database

Question 7

Which THREE of the following are valid methods to securely transfer data to Azure Blob Storage? (Select three.)

Accepted Answer

Azure Data Box. Azure Data Box is a physical data transfer solution that allows you to securely transfer large volumes of data to Azure Blob Storage when network transfer is impractical. It uses AES-256 encryption for data at rest and TLS for data in transit, and after the device is shipped back, data is automatically uploaded to your designated storage account.

Answer

Azure File Sync

Answer

Azure Migrate

Question 8

Which TWO of the following are features of Azure SQL Database that help ensure high availability? (Select two.)

Accepted Answer

Active geo-replication. Active geo-replication (Option A) creates readable secondary replicas of an Azure SQL Database in a paired Azure region, enabling manual or automatic failover to maintain availability during a regional outage. This feature ensures high availability by providing disaster recovery capabilities with a Recovery Point Objective (RPO) of up to 5 seconds and a Recovery Time Objective (RTO) of less than 1 hour, depending on the failover group configuration.

Answer

Long-term retention (LTR) backups

Answer

Automatic tuning

Answer

Transparent Data Encryption (TDE)

Question 9

Refer to the exhibit. You are deploying an ARM template with the above parameters. After deployment, you need to ensure that the storage account automatically moves blobs that are not accessed for 30 days to the archive tier. What should you do?

Accepted Answer

Add a lifecycle management policy rule to the storage account.. Azure Storage lifecycle management policies allow you to automatically move blobs to cooler tiers (like Archive) based on age or last access time. By adding a rule with a filter for blobs not accessed in 30 days and an action to tier to Archive, you meet the requirement without manual intervention or changing the default access tier.

Answer

Enable soft delete for blobs.

Answer

Change the 'accessTier' parameter value to 'Archive'.

Answer

Change the 'replication' parameter value to 'GRS'.

Question 10

Which TWO of the following are requirements for using Azure SQL Database auto-failover groups? (Select two.)

Accepted Answer

The primary and secondary servers must be in different Azure regions.. Azure SQL Database auto-failover groups require the primary and secondary servers to be in different Azure regions for geo-replication and disaster recovery (B). All databases in the group must use the same service tier to ensure consistent performance (E). The secondary server must have a different logical server name from the primary; having the same name is incorrect (C). The servers can be in different regions, not the same (A). There is no requirement that databases must be in different elastic pools (D).

Answer

Both servers must be in the same Azure region.

Answer

The secondary server must have the same logical server name.

Answer

The databases must be in different elastic pools.

Question 11

Your company is designing a data lake solution using Azure Data Lake Storage Gen2. The solution must support hierarchical namespace for efficient directory operations, and must provide encryption at rest using customer-managed keys stored in Azure Key Vault. Which steps must you take to enable customer-managed key encryption for the storage account?

Accepted Answer

Create the storage account with hierarchical namespace enabled, then assign a system-assigned managed identity, and configure encryption with Azure Key Vault.. Azure Data Lake Storage Gen2 requires hierarchical namespace to be enabled at account creation time, and customer-managed key encryption with Azure Key Vault requires a system-assigned managed identity to be assigned to the storage account after creation. The system-assigned identity is used to authenticate to Key Vault for key access, and encryption with customer-managed keys can be configured post-creation via the Azure portal or PowerShell.

Answer

Create the storage account with a user-assigned managed identity, then enable hierarchical namespace, and configure encryption.

Answer

Create the storage account without hierarchical namespace, then enable it later, and configure encryption with Key Vault.

Answer

Create the storage account and specify customer-managed key encryption during creation using the Azure portal.

Question 12

You need to provide temporary shared access to a specific blob in Azure Storage for a contractor. The access must expire after 24 hours. Which feature should you use?

Accepted Answer

Shared access signature (SAS). A shared access signature (SAS) provides delegated, time-limited access to a specific Azure Storage resource, such as a blob, without exposing the storage account key. By configuring the SAS with an expiration time of 24 hours, you grant the contractor temporary access that automatically revokes after that period, meeting the requirement precisely.

Answer

Managed identity

Answer

Azure role-based access control (RBAC)

Answer

Storage account access key

Question 13

A company is designing a storage solution for a critical application that requires low latency (under 5 ms) and high throughput for large files (up to 10 GB). The solution must support NFS and SMB protocols. Which Azure storage solution should you recommend?

Accepted Answer

Azure NetApp Files. Azure NetApp Files is the correct choice because it provides a fully managed, high-performance file share service that supports both NFS and SMB protocols natively, with sub-millisecond latency and throughput suitable for large files up to 10 GB. It is built on NetApp's ONTAP technology and is designed for latency-sensitive enterprise workloads, meeting the under-5 ms requirement while handling large file sizes efficiently.

Answer

Azure Blob Storage (premium tier)

Answer

Azure Managed Disks (Ultra Disk)

Answer

Azure Files (premium tier)

Question 14

Your company stores sensitive customer data in Azure Blob Storage. You must ensure that data is encrypted at rest using customer-managed keys (CMK) and that key rotation is automated. You also need to prevent data from being accessed by any Microsoft administrator. Which solution should you implement?

Accepted Answer

Use Azure Key Vault Managed HSM with customer-managed keys and enable double encryption with infrastructure encryption.. Azure Key Vault Managed HSM provides FIPS 140-2 Level 3 validated hardware security modules (HSMs) for storing customer-managed keys (CMK), supports automated key rotation, and enables double encryption via infrastructure encryption. This ensures that data is encrypted at rest with a customer-controlled key, and the use of Managed HSM prevents Microsoft administrators from accessing the key material, as the HSM is isolated and Microsoft has no export or visibility permissions.

Answer

Use Azure Key Vault (Standard) to store customer-managed keys and enable automatic key rotation.

Answer

Use Azure Disk Encryption with customer-managed keys stored in Azure Key Vault.

Answer

Enable Azure Storage Service Encryption with platform-managed keys.

Question 15

A company needs to store millions of small JSON files (average 10 KB each) for a serverless application. The data must be accessed via HTTPS and support high read throughput. Which Azure storage solution is most cost-effective?

Accepted Answer

Azure Blob Storage (general-purpose v2, hot tier). Azure Blob Storage (general-purpose v2, hot tier) is the most cost-effective solution because it provides native HTTPS access, high throughput for read-heavy workloads, and low-cost storage for small objects like JSON files. The hot tier optimizes for frequent access, and GPv2 accounts support the high request rates needed for millions of small files without premium pricing.

Answer

Azure Files (standard)

Answer

Azure Cosmos DB

Answer

Azure Table Storage