AZ-305 Design infrastructure solutions Practice Test 13 — 15 Questions

Question 1

You are designing a backup strategy for Azure virtual machines. The solution must support application-consistent backups for SQL Server databases running on the VMs. You need to ensure that backups are taken every 4 hours and retained for 30 days. What should you configure in Azure Backup?

Accepted Answer

Configure a VM backup policy with 4-hour frequency and 30-day retention using the default backup extension.. Option D is correct because Azure Backup supports application-consistent backups via the VM backup policy, which can be configured with a frequency of 4 hours and retention of 30 days. The backup extension for Windows (VMSnapshot) ensures application consistency. Option A (Azure Site Recovery) is for replication, not backup. Option B (Azure SQL Backup) is for Azure SQL databases, not VMs. Option C (Azure Backup for SAP HANA) is specific to SAP HANA.

Answer

Configure Azure SQL Backup for the SQL Server databases.

Answer

Configure Azure Site Recovery replication policy with 4-hour frequency.

Answer

Configure Azure Backup for SAP HANA on the VM.

Question 2

You are designing a solution to grant external partners access to specific Azure resources. The partners must authenticate using their own corporate credentials. You need to manage their access centrally. Which Microsoft Entra ID feature should you use?

Accepted Answer

Microsoft Entra ID B2B collaboration. Option C is correct because Microsoft Entra ID B2B collaboration allows external users to access your Azure resources using their own identities. Option A (Microsoft Entra ID B2C) is for customer-facing applications. Option B (Microsoft Entra ID Domain Services) provides domain services for VMs. Option D (Microsoft Entra ID Connect) syncs on-premises directories.

Answer

Microsoft Entra ID Domain Services

Answer

Microsoft Entra ID B2C

Answer

Microsoft Entra ID Connect

Question 3

Your organization is deploying a critical application on Azure virtual machines. You need to ensure that the VMs are distributed across multiple fault domains and update domains within an availability set. You create an availability set with 3 fault domains and 5 update domains. How many VMs can you add to this availability set to maximize fault tolerance?

Accepted Answer

Unlimited. Option D is correct. There is no limit on the number of VMs you can add to an availability set, but to maximize fault tolerance, you should add as many VMs as needed; the fault domains and update domains will be used to distribute them. The question asks for the number of VMs you can add, which is unlimited (subject to subscription limits). Options A, B, and C are incorrect because they imply a limit.

Answer

5 VMs

Answer

15 VMs

Answer

3 VMs

Question 4

Your company is designing a multi-region disaster recovery solution for a mission-critical application using Azure SQL Database. The application requires read-scale in the secondary region and must support automatic failover with no data loss. Which Azure SQL Database offering should you recommend?

Accepted Answer

Azure SQL Database Failover group. Option A is incorrect because Azure SQL Database Single Database with active geo-replication supports up to four readable secondaries but does not provide automatic failover without additional configuration. Option B is correct because Azure SQL Database Hyperscale with named replicas can be used for read-scale in secondary regions, but it does not automatically failover. Option C is correct for automatic failover with no data loss and readable secondary. Option D is incorrect because Azure SQL Managed Instance has limited geo-replication capabilities and does not support automatic failover with no data loss.

Answer

Azure SQL Managed Instance

Answer

Azure SQL Database Hyperscale with named replicas

Answer

Azure SQL Database Single Database with active geo-replication

Question 5

A company is planning to migrate its on-premises Active Directory to Microsoft Entra ID. They have a complex on-premises infrastructure with multiple forests and over 50,000 users. They need to synchronize identities and enable single sign-on (SSO) for Office 365. What should you recommend?

Accepted Answer

Microsoft Entra Connect Sync. Option A is incorrect because Microsoft Entra Connect is the correct tool, but it only supports a single forest. Option B is correct because Microsoft Entra Connect Sync supports multiple forests and large numbers of users. Option C is incorrect because Microsoft Entra Connect Cloud Sync is for simpler scenarios and does not support multiple forests. Option D is incorrect because Microsoft Entra ID synchronization is not a product name; it is a concept.

Answer

Microsoft Entra Connect Cloud Sync

Answer

Microsoft Entra Connect

Answer

Microsoft Entra ID synchronization

Question 6

Your organization is designing a solution to capture and analyze IoT data from millions of devices. The solution must ingest data at high velocity, store the data for long-term analytics, and provide real-time dashboards. Which combination of Azure services should you recommend?

Accepted Answer

Azure Event Hubs, Azure Data Lake Storage, and Azure Stream Analytics. Option A is correct because Azure Event Hubs ingests high-velocity data, Azure Data Lake Storage stores data for long-term analytics, and Azure Stream Analytics provides real-time processing and dashboards. Option B is incorrect because Azure IoT Hub is for device management and telemetry, but it is not optimized for high-velocity ingestion from millions of devices. Option C is incorrect because Azure Service Bus is for messaging, not high-velocity ingestion. Option D is incorrect because Azure Cosmos DB is for operational workloads, not long-term analytics.

Answer

Azure Service Bus, Azure SQL Database, and Power BI

Answer

Azure Cosmos DB, Azure Data Explorer, and Azure Logic Apps

Answer

Azure IoT Hub, Azure Blob Storage, and Azure Functions

Question 7

Your company is designing a hybrid network architecture to connect an on-premises data center to Azure. The requirements include: high availability, low latency, and cost optimization. Which TWO options should you recommend?

Accepted Answer

ExpressRoute Gateway. Option A is correct because ExpressRoute offers low latency and high bandwidth. Option C is correct because two ExpressRoute circuits from different providers provide high availability. Option B is incorrect because VPN Gateway can be used for backup but does not provide low latency. Option D is incorrect because ExpressRoute Direct is not required for high availability. Option E is incorrect because a single ExpressRoute circuit does not provide high availability.

Answer

Single ExpressRoute circuit

Answer

Site-to-Site VPN

Answer

ExpressRoute Direct

Question 8

A multinational corporation is designing a backup and disaster recovery strategy for Azure IaaS VMs. The solution must support cross-region failover, meet a recovery point objective (RPO) of 15 minutes, and a recovery time objective (RTO) of 1 hour. Which THREE options should you include in the design?

Accepted Answer

Azure Backup with geo-redundant storage (GRS). Option A is correct because Azure Backup with geo-redundant storage (GRS) enables cross-region recovery. Option B is correct because Azure Site Recovery replicates VMs to a secondary region for failover. Option C is correct because Azure Backup with locally redundant storage (LRS) does not support cross-region failover. Option D is incorrect because managed disk snapshots are not cross-region. Option E is correct because Azure Backup with zone-redundant storage (ZRS) provides redundancy within a region but not cross-region.

Answer

Azure Backup with locally redundant storage (LRS)

Answer

Managed disk snapshots

Question 9

Your organization is implementing a security strategy for Azure resources. You need to enforce consistent security policies across all subscriptions and ensure compliance with regulatory standards. Which TWO services should you use?

Accepted Answer

Microsoft Defender for Cloud. Option A is correct because Azure Policy enforces rules across resources. Option C is correct because Microsoft Defender for Cloud provides security posture management and compliance monitoring. Option B is incorrect because Azure Blueprints are deprecated. Option D is incorrect because Azure RBAC is for access control, not policy enforcement. Option E is incorrect because Microsoft Sentinel is for SIEM, not policy enforcement.

Answer

Azure RBAC

Answer

Microsoft Sentinel

Answer

Azure Blueprints

Question 10

Refer to the exhibit. You are an Azure administrator. You assign this policy definition to a subscription. A developer attempts to deploy a virtual machine with SKU Standard_DS1_v2. What is the outcome?

Accepted Answer

The deployment is denied because Standard_DS1_v2 is not in the allowed list.. The policy denies any virtual machine deployment where the SKU is not in the allowed list. The allowed SKUs are Standard_DS2_v2, Standard_DS3_v2, Standard_DS4_v2. Standard_DS1_v2 is not in the list, so the deployment is denied. Option A is incorrect because the policy denies non-compliant SKUs. Option C is incorrect because the effect is deny, not audit. Option D is incorrect because the policy does not create a remediation task.

Answer

The deployment succeeds because Standard_DS1_v2 is not explicitly denied.

Answer

The deployment is denied and a remediation task is created.

Answer

The deployment succeeds but is logged as non-compliant.

Question 11

Refer to the exhibit. You deploy this ARM template to a resource group in the East US region. You specify the parameter storageAccountType as 'Standard_GRS'. Which of the following is true about the deployed storage account?

Accepted Answer

The storage account is geo-redundant and replicates data to a paired region.. The template deploys a StorageV2 account with Standard_GRS SKU. Standard_GRS is geo-redundant, meaning data is replicated to a paired region. Option A is correct. Option B is incorrect because Standard_GRS is not zone-redundant. Option C is incorrect because the name is generated by uniqueString, which is deterministic based on the resource group ID. Option D is incorrect because the location is derived from the resource group location, not the parameter.

Answer

The storage account name will be 'storage' followed by a random string.

Answer

The storage account will be deployed in the same region as specified by the parameter.

Answer

The storage account is zone-redundant and replicates data across availability zones.

Question 12

Refer to the exhibit. You are analyzing Azure VM performance using Azure Monitor Logs. You run the KQL query shown. What is the purpose of the 'take 10' operator?

Accepted Answer

Limits the results to the first 10 rows after sorting by time.. The 'take' operator returns a specified number of rows. Here, it limits the output to 10 rows after sorting by TimeGenerated ascending. Option A is correct. Option B is incorrect because 'take' does not sample; it returns the first N rows. Option C is incorrect because the query returns rows after aggregation. Option D is incorrect because 'take' is not specific to time windows.

Answer

Limits the time range to the last 10 hours.

Answer

Filters the results to only include the top 10 CPUs.

Answer

Samples the data to reduce query cost.

Question 13

Your company is migrating a legacy application to Azure. The application uses a proprietary database that requires file-level access to data files. You need to minimize changes to the application. Which Azure storage solution should you recommend?

Accepted Answer

Azure Files. Option A is incorrect because Azure Blob Storage does not provide file-level access. Option B is correct because Azure Files provides SMB file shares that can be mounted with file-level access. Option C is incorrect because Azure NetApp Files provides high-performance file shares but is overkill and more expensive. Option D is incorrect because Azure Disk Storage provides block-level access, not file-level.

Answer

Azure Disk Storage

Answer

Azure Blob Storage

Answer

Azure NetApp Files

Question 14

A company is designing a solution for a global e-commerce platform that requires low-latency access to product catalog data from multiple regions. The data is read-heavy with occasional updates. The solution must support automatic scaling and provide high availability. Which Azure service should you recommend?

Accepted Answer

Azure Cosmos DB with multi-region writes. Option A is incorrect because Azure SQL Database with geo-replication can provide global distribution but is not optimized for low-latency reads. Option B is correct because Azure Cosmos DB with multi-region writes provides global distribution, low-latency reads, automatic scaling, and high availability. Option C is incorrect because Azure Table Storage is not as performant for global low-latency reads. Option D is incorrect because Azure Cache for Redis is a cache, not a primary data store.

Answer

Azure SQL Database with active geo-replication

Answer

Azure Table Storage

Answer

Azure Cache for Redis

Question 15

Your organization needs to provide temporary, limited-privilege access to Azure resources for external auditors. The access must be time-bound and require approval from a manager. Which Azure feature should you use?

Accepted Answer

Microsoft Entra Privileged Identity Management (PIM). Option A is incorrect because Azure RBAC does not provide time-bound access. Option B is incorrect because Managed identities are for Azure resources, not external users. Option C is correct because Microsoft Entra Privileged Identity Management (PIM) provides just-in-time access with time-bound and approval workflows. Option D is incorrect because Conditional Access policies control access based on conditions, not time-bound approvals.

Answer

Managed identities

Answer

Conditional Access policies

Answer

Azure RBAC roles