AZ-305 Design infrastructure solutions Practice Test 19 — 15 Questions

Question 1

Your company is migrating a critical application to Azure and needs to design a highly available and disaster recovery solution. The application runs on Azure VMs with SQL Server Always On Availability Groups. You need to ensure that the database remains available even during a regional outage. Which TWO options should you include in the design? (Choose two.)

Accepted Answer

Enable geo-redundant backup storage (RA-GRS) for the database.. The correct answers are B and D. Azure SQL Database Managed Instance with auto-failover groups provides automatic failover to a secondary region. Geo-redundant backup storage (RA-GRS) ensures backups are replicated to a paired region. Option A is wrong because Always On Availability Groups require manual configuration for cross-region failover. Option C is wrong because Azure Site Recovery replicates VMs but not SQL Server databases in a consistent manner for transactional workloads. Option E is wrong because load balancers do not provide database-level failover.

Answer

Configure Azure Site Recovery for the SQL Server VMs.

Answer

Deploy SQL Server Always On Availability Groups across availability zones.

Answer

Deploy a load balancer and distribute traffic to multiple replicas.

Question 2

A multinational corporation is designing a hybrid identity solution using Microsoft Entra ID. The company has multiple on-premises Active Directory forests with complex trust relationships. They require that users can authenticate to both cloud and on-premises resources using the same credentials, and they want to minimize changes to the existing infrastructure. Which THREE components should be part of the solution? (Choose three.)

Accepted Answer

Microsoft Entra Connect Sync. The correct answers are A, C, and D. Microsoft Entra Connect Sync synchronizes identities from multiple forests. Active Directory Federation Services (AD FS) can be used for federated authentication with Entra ID. Password hash synchronization provides a fallback authentication method. Option B is wrong because Microsoft Entra Connect Health monitors the sync health but is not a core identity component. Option E is wrong because Microsoft Entra Domain Services is for domain-join scenarios without on-premises AD, not for hybrid identity.

Answer

Microsoft Entra Connect Health

Answer

Microsoft Entra Domain Services

Question 3

A company is designing a storage solution for a new application that will store large amounts of unstructured data, such as images and videos. The data must be highly durable and available, and the solution should minimize costs for infrequently accessed data. Which TWO storage options should be recommended? (Choose two.)

Accepted Answer

Azure Blob Storage with Cool access tier. The correct answers are A and C. Azure Blob Storage is ideal for unstructured data, and the Cool access tier is cost-effective for infrequently accessed data. Option B is wrong because Azure Files is for file shares, not optimal for large-scale unstructured data. Option D is wrong because Azure Disk Storage is for VM disks, not for general unstructured data. Option E is wrong because Azure NetApp Files is for enterprise workloads requiring high performance, not cost-effective for infrequent access.

Answer

Azure Disk Storage with Standard HDD

Answer

Azure Files with Premium performance tier

Answer

Azure NetApp Files with Standard service level

Question 4

You are designing a network topology for a global e-commerce company that operates multiple web applications. The company has three main offices (New York, London, Tokyo) connected via ExpressRoute to Azure. Users access the applications through a public endpoint. The company requires that traffic be routed to the nearest healthy application instance based on geographic location, and that the solution provide automatic failover if an entire region goes down. Additionally, the company wants to protect against DDoS attacks at the network layer. You need to recommend a solution that meets these requirements while minimizing cost. What should you include in the design?

Accepted Answer

Deploy Azure Front Door with geographic routing and enable DDoS protection.. Option C is correct because Azure Front Door provides global load balancing with automatic failover, geographic routing, and integrated DDoS protection (Azure DDoS Protection Basic is included). Option A is wrong because Traffic Manager provides DNS-based routing without DDoS protection and has slower failover. Option B is wrong because Application Gateway is regional, not global. Option D is wrong because Azure Firewall is a stateful firewall but does not provide global load balancing or geographic routing.

Answer

Deploy Azure Firewall in each region and use Public IP prefix for egress.

Answer

Deploy Azure Application Gateway v2 with WAF in each region and Azure DDoS Standard protection.

Answer

Deploy Azure Traffic Manager with geographic routing and Azure DDoS Standard protection.

Question 5

A healthcare organization is migrating its on-premises applications to Azure. The applications use custom authentication and authorization logic and require low latency between application tiers. The organization needs to ensure that the applications can scale out dynamically based on user demand, and that costs are minimized by only paying for resources when they are used. The applications are expected to have variable traffic patterns, with peak usage during business hours and low usage at night. You need to design a compute solution that meets these requirements. What should you recommend?

Accepted Answer

Migrate the applications to Azure App Service with autoscaling enabled.. Option B is correct because Azure App Service with autoscaling allows dynamic scaling, supports custom authentication, and you only pay for the resources used. Option A is wrong because Azure Functions is event-driven, not ideal for stateful custom authentication. Option C is wrong because Azure Kubernetes Service (AKS) adds complexity and cost for this use case. Option D is wrong because Azure Virtual Machine Scale Sets require more management of VMs and are less cost-effective for variable traffic.

Answer

Migrate the applications to Azure Virtual Machine Scale Sets with autoscaling.

Answer

Migrate the applications to Azure Functions with consumption plan.

Answer

Migrate the applications to Azure Kubernetes Service (AKS) with cluster autoscaler.

Question 6

You are designing a backup and disaster recovery solution for a financial services company. The company has a critical application running on Azure VMs with premium SSDs. The RPO for the application is 15 minutes, and the RTO is 1 hour. The application data is stored on a separate managed disk with a premium SSD. The company wants to ensure that backups are cost-effective and do not impact application performance. You need to recommend a backup strategy. What should you do?

Accepted Answer

Use Azure Backup with application-consistent snapshots and configure a backup policy with a 15-minute frequency.. Option A is correct because Azure Backup with application-consistent snapshots can achieve an RPO of 15 minutes with high-frequency backup policies, and the use of premium SSDs ensures low performance impact. Option B is wrong because Azure Site Recovery has a higher RTO and is more expensive for backup. Option C is wrong because manual snapshots are not automated and can impact performance. Option D is wrong because Azure Disk Backup does not provide application consistency and has a minimum backup frequency of 4 hours.

Answer

Use Azure Site Recovery with replication from the primary to a secondary region.

Answer

Use Azure Disk Backup with a backup policy of 15-minute frequency.

Answer

Use Azure Compute Gallery to create custom snapshots every 15 minutes.

Question 7

A small business is moving its on-premises file server to Azure. The company has 50 users and stores approximately 500 GB of data, which includes documents and spreadsheets. The users need to access the files from their Windows laptops both at the office and remotely. The company wants to minimize costs while ensuring that files are always available and secure. You need to recommend a storage solution. What should you recommend?

Accepted Answer

Deploy Azure Files with Azure File Sync and use a Windows File Server on-premises.. Option C is correct because Azure Files with Azure File Sync provides cloud file shares that can be synced to on-premises Windows Server for local access, and supports remote access via SMB over the internet. Option A is wrong because Azure Blob Storage is not a file share and does not support SMB access natively. Option B is wrong because Azure NetApp Files is too expensive for this small use case. Option D is wrong because Azure Stack Edge is for edge computing, not file sharing.

Answer

Migrate the files to Azure Blob Storage and use Azure Storage Explorer for access.

Answer

Use Azure Stack Edge to sync the data to Azure Blob Storage.

Answer

Deploy Azure NetApp Files with a Standard capacity pool.

Question 8

A manufacturing company is designing an IoT solution to monitor equipment in real-time. Thousands of sensors send telemetry data every second. The data must be ingested, processed, and stored for analysis. The solution must handle high throughput and provide low-latency analytics. Additionally, the company wants to use Azure Machine Learning to predict equipment failures based on historical data. You need to design a data pipeline that meets these requirements. What should you include in the design?

Accepted Answer

Use Azure IoT Hub to ingest data, Azure Stream Analytics for real-time processing, and Azure Blob Storage for long-term storage.. Option A is correct because Azure IoT Hub ingests sensor data, Azure Stream Analytics processes the stream in real-time with low latency, and Azure Blob Storage stores the data for historical analysis. Option B is wrong because Azure Data Lake Storage is for big data analytics, not real-time processing. Option C is wrong because Azure Cosmos DB is a NoSQL database, but the primary processing should be with Stream Analytics. Option D is wrong because Azure Event Hubs is for ingestion, but Azure Databricks is overkill for simple real-time analytics.

Answer

Use Azure IoT Hub to ingest data, Azure Cosmos DB for storage, and Azure Functions for processing.

Answer

Use Azure IoT Hub to ingest data, Azure Data Lake Storage for storage, and Azure Stream Analytics for processing.

Answer

Use Azure Event Hubs to ingest data, Azure Databricks for processing, and Azure Blob Storage for storage.

Question 9

A government agency is designing a solution to store sensitive citizen data. The data must be encrypted at rest and in transit. The agency requires that the encryption keys be managed by the agency and stored in a hardware security module (HSM). Additionally, the solution must comply with regulatory requirements that mandate customer-managed keys. You need to recommend a key management solution. What should you recommend?

Accepted Answer

Use Azure Key Vault Managed HSM with FIPS 140-2 Level 3 validated HSMs.. Option B is correct because Azure Key Vault Managed HSM provides FIPS 140-2 Level 3 validated HSMs, allowing customers to manage their own keys in a dedicated HSM. Option A is wrong because Azure Key Vault Standard uses software-backed keys, not HSM. Option C is wrong because Azure Information Protection is for classification and labeling, not key management. Option D is wrong because Microsoft Purview is for data governance, not key management.

Answer

Use Azure Key Vault Standard with software-protected keys.

Answer

Use Microsoft Purview to manage keys and compliance.

Answer

Use Azure Information Protection with a custom protection template.

Question 10

A media company is building a video streaming platform on Azure. The platform will store original high-definition videos and convert them to multiple resolutions for distribution. The company needs a cost-effective storage solution for the original videos, which are accessed infrequently but must be instantly available when needed. The converted videos will be served to end users globally and must be cached at edge locations for low latency. You need to design a storage and content delivery solution. What should you recommend?

Accepted Answer

Store original videos in Azure Blob Storage Cool tier and use Azure CDN for distribution.. Option C is correct because Azure Blob Storage Cool tier is cost-effective for infrequently accessed original videos, and Azure Content Delivery Network (CDN) caches converted videos at edge locations for low latency. Option A is wrong because Premium tier is expensive for infrequent access. Option B is wrong because Azure Files is not optimized for video streaming. Option D is wrong because Archive tier has high retrieval latency.

Answer

Store original videos in Azure Blob Storage Premium tier and use Azure CDN for distribution.

Answer

Store original videos in Azure Blob Storage Archive tier and use Azure CDN for distribution.

Answer

Store original videos in Azure Files and use Azure Front Door for caching.

Question 11

A large enterprise is designing a hybrid network architecture. The company has an on-premises data center connected to Azure via ExpressRoute. They want to extend their on-premises network to Azure by using a site-to-site VPN as a backup connection. The company has multiple VNets in Azure that need to communicate with each other and with the on-premises network. The solution must be highly available and provide redundancy for the ExpressRoute connection. You need to recommend a network connectivity design. What should you include?

Accepted Answer

Use Azure ExpressRoute as the primary connection, and configure a site-to-site VPN as a backup. Use VNet peering for VNet-to-VNet connectivity.. Option D is correct because using ExpressRoute as the primary connection and a site-to-site VPN as backup provides redundancy. VNet peering allows VNets to communicate. Option A is wrong because Azure VPN Gateway alone does not provide ExpressRoute backup. Option B is wrong because Azure Firewall is not a connectivity solution. Option C is wrong because VNet-to-VNet VPN is for VNet communication, not for backup.

Answer

Use Azure ExpressRoute as the primary connection, and configure VNet-to-VNet VPN as a backup for ExpressRoute.

Answer

Use Azure VPN Gateway to connect the on-premises network to Azure, and use VNet peering for VNet-to-VNet connectivity.

Answer

Use Azure ExpressRoute as the primary connection, and use Azure Firewall to inspect traffic between VNets.

Question 12

A startup is building a web application that will be used by a small number of users initially but is expected to grow rapidly. The application runs on Linux and uses a PostgreSQL database. The company wants to minimize operational overhead and costs during the early stages. You need to recommend a platform as a service (PaaS) solution for both the application and the database. What should you recommend?

Accepted Answer

Deploy the application on Azure App Service for Linux and use Azure Database for PostgreSQL.. Option B is correct because Azure App Service for Linux provides a PaaS environment for web apps, and Azure Database for PostgreSQL is a managed database service. Option A is wrong because Azure Virtual Machines are IaaS, not PaaS, and require more management. Option C is wrong because Azure Kubernetes Service adds unnecessary complexity. Option D is wrong because Azure Functions is for event-driven workloads, not for standard web apps.

Answer

Deploy the application on Azure Kubernetes Service (AKS) and use Azure Database for PostgreSQL.

Answer

Deploy the application as Azure Functions and use Azure Cosmos DB for storage.

Answer

Deploy the application on Azure Virtual Machines and use PostgreSQL on the same VM.

Question 13

A company is designing a disaster recovery solution for a critical application that runs on Azure VMs in a single region. The RTO is 4 hours, and the RPO is 1 hour. The application uses Azure SQL Database. The company wants to minimize the cost of the disaster recovery solution while meeting the RTO and RPO. You need to recommend a solution. What should you recommend?

Accepted Answer

Use Azure Site Recovery to replicate VMs to a secondary region and Azure SQL Database geo-replication for the database.. Option C is correct because Azure Site Recovery can replicate VMs to a secondary region with a 1-hour RPO, and Azure SQL Database active geo-replication can provide a secondary database with RPO of seconds. Option A is wrong because Azure Backup has a higher RPO (typically 4 hours). Option B is wrong because read-scale replicas are for read-only workloads, not disaster recovery. Option D is wrong because Traffic Manager does not handle database failover.

Answer

Use Azure SQL Database active geo-replication for the database and Azure Backup for VMs.

Answer

Use Azure Backup to back up VMs and Azure SQL Database to a secondary region.

Answer

Use Azure Traffic Manager to distribute traffic to VMs in multiple regions and Azure SQL Database failover groups.

Question 14

A company is designing a solution for a data analytics workload. The company receives streaming data from multiple sources, including IoT devices and social media feeds. The data must be ingested, processed in real-time, and stored for historical analysis. The company also wants to use Power BI to create real-time dashboards from the streaming data. You need to recommend a data pipeline architecture. What should you include?

Accepted Answer

Use Azure Event Hubs for ingestion, Azure Stream Analytics for real-time processing, and Power BI for dashboards.. Option A is correct because Azure Event Hubs ingests streaming data, Azure Stream Analytics processes it in real-time, and outputs to Power BI for real-time dashboards. Data can also be stored in Azure Blob Storage for historical analysis. Option B is wrong because Azure IoT Hub is for IoT devices only. Option C is wrong because Azure Data Lake Analytics is for batch processing. Option D is wrong because Azure Synapse Analytics is for big data analytics, not real-time streaming.

Answer

Use Azure IoT Hub for ingestion, Azure Stream Analytics for processing, and Power BI for dashboards.

Answer

Use Azure Event Hubs for ingestion, Azure Data Lake Analytics for processing, and Power BI for dashboards.

Answer

Use Azure Event Hubs for ingestion, Azure Synapse Analytics for processing, and Power BI for dashboards.

Question 15

Your company is migrating a legacy on-premises application to Azure. The application requires persistent storage for configuration files that must be accessible from multiple virtual machines in a virtual network. The storage must be accessible only from within the virtual network and should not be exposed to the internet. Which Azure storage solution should you use?

Accepted Answer

Azure Files with a private endpoint. Azure Files shares can be mounted via SMB and accessed from multiple VMs simultaneously. Private endpoints ensure traffic stays within the virtual network, preventing internet exposure.

Answer

Azure Disk Storage with shared disks

Answer

Azure NetApp Files with network security groups

Answer

Azure Blob Storage with a service endpoint