AZ-305 Design infrastructure solutions Practice Test 19 — 15 Questions

Question 1

A company is designing a hybrid network solution connecting an on-premises data center to Azure. They require high availability with active-active routing and need to support up to 10 Gbps throughput. Which Azure service should they include in the design?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

ExpressRoute Direct. ExpressRoute Direct provides dedicated, private connections from on-premises to Azure, supporting bandwidths up to 100 Gbps (10 Gbps easily). It enables active-active routing by using two circuits with BGP, meeting high availability and throughput requirements. ExpressRoute FastPath is a performance feature that reduces latency but is not a standalone service and does not itself provide active-active routing or guaranteed throughput; it requires an ExpressRoute circuit and does not replace the need for Direct when dedicated throughput is required.

Answer

Site-to-Site VPN Gateway

Answer

Azure Virtual WAN

Answer

ExpressRoute FastPath

Question 2

You need to design a solution to store configuration data for a cloud-native application. The configuration must be centrally managed, versioned, and accessible to multiple services without hard-coding values. Which Azure service should you use?

Accepted Answer

Azure App Configuration. Azure App Configuration is the correct choice because it is a fully managed service specifically designed for central management of application configuration and feature flags. It supports versioning of configuration key-values, provides instant access to multiple services via SDKs or REST API, and eliminates the need to hard-code values by allowing dynamic updates without redeployment.

Answer

Azure Cosmos DB

Answer

Azure Blob Storage

Answer

Azure Key Vault

Question 3

You are designing a disaster recovery (DR) solution for a critical application hosted on Azure VMs. The solution must meet the following requirements: - Recovery Point Objective (RPO) of 15 minutes. - Recovery Time Objective (RTO) of 1 hour. - Automatically fail over to a secondary region in the event of a regional outage. - Support for non-disruptive DR testing. Which THREE components should you include in the solution? (Choose three.)

Accepted Answer

Azure Site Recovery test failover capability. Azure Site Recovery's test failover capability allows you to perform non-disruptive DR testing by isolating the test failover in a separate virtual network, ensuring no impact on the production environment. This meets the explicit requirement for non-disruptive DR testing while validating replication and failover processes.

Answer

Azure Backup

Answer

Azure Front Door

Question 4

Your company is planning to migrate a large number of on-premises servers to Azure. The migration must be completed within 3 months. You need to assess the current on-premises environment and recommend the most appropriate Azure VM sizes and costs. What should you do?

Accepted Answer

Use Azure Migrate to discover and assess the on-premises environment, and generate sizing and cost recommendations.. Azure Migrate is the correct tool because it provides automated discovery and assessment of on-premises servers, including performance data, dependencies, and configuration details. It then generates right-sized Azure VM recommendations and cost estimates based on actual usage, which is essential for a large-scale migration with a tight 3-month deadline.

Answer

Create a manual inventory of all servers and use Azure Pricing Calculator to estimate costs.

Answer

Use Azure Advisor to analyze on-premises server usage and recommend Azure VM sizes.

Answer

Use Azure Cost Management to estimate costs based on manual input of server specifications.

Question 5

You are an Azure administrator. The above Azure Policy definition is assigned to a subscription. A developer tries to deploy a Virtual Machine with SKU Standard_DS2_v2. What will happen?

Accepted Answer

The deployment is denied and an error message is returned.. The Azure Policy definition assigned to the subscription includes a 'deny' effect for VM SKUs that are not in the allowed list. Since Standard_DS2_v2 is not an allowed SKU, the deployment is denied and an error message is returned to the developer, preventing the VM from being created.

Answer

The deployment succeeds with a warning logged.

Answer

The VM is created but the SKU is changed to a different series.

Answer

The deployment succeeds because the policy only audits.

Question 6

A multinational company plans to deploy a new application on Azure. The application must comply with GDPR and requires data residency in the EU. The solution should minimize latency for users in Europe and provide disaster recovery across regions. Which Azure architecture should the company implement?

Accepted Answer

Deploy the application in two EU regions with Azure Traffic Manager and Azure Cosmos DB multi-region writes.. It meets all requirements: deploying in two EU regions ensures data residency within the EU, Azure Traffic Manager provides low-latency routing for European users via DNS-based traffic distribution, and Azure Cosmos DB multi-region writes enable active-active disaster recovery with automatic failover and no data loss, minimizing latency for writes across regions.

Answer

Deploy the application in two EU regions with Azure Front Door and Azure SQL Database geo-replication.

Answer

Deploy the application in a single Azure region in Ireland with Azure Site Recovery for DR.

Answer

Deploy the application in a single EU region with Azure Site Recovery and Azure Redis Cache.

Question 7

Your company has a hybrid identity environment using Microsoft Entra ID (formerly Azure AD) and on-premises Active Directory. You need to design a solution that allows users to authenticate to Azure services using their on-premises credentials and enforce conditional access policies for sensitive applications. The solution must support multi-factor authentication (MFA) using the Microsoft Authenticator app. Which components should you include?

Accepted Answer

Microsoft Entra Connect Sync, Microsoft Entra ID, and Conditional Access policies with MFA.. Microsoft Entra Connect Sync synchronizes on-premises Active Directory identities to Microsoft Entra ID, enabling users to authenticate with their on-premises credentials. Conditional Access policies in Microsoft Entra ID can then enforce MFA using the Microsoft Authenticator app for sensitive applications, meeting all requirements without additional infrastructure.

Answer

Microsoft Entra Connect Health, Microsoft Entra ID with cloud sync, and Azure AD Identity Protection.

Answer

Active Directory Federation Services (AD FS), Web Application Proxy, and Azure AD Conditional Access.

Answer

Azure AD Pass-through Authentication, Azure AD Application Proxy, and Azure AD Identity Protection.

Question 8

Which TWO of the following are benefits of using Azure Policy? (Choose two.)

Accepted Answer

Assess compliance of resources against defined policies. Azure Policy is a service that enables you to create, assign, and manage policies that enforce rules and effects over your Azure resources. Option A is correct because one of its primary benefits is the ability to assess the compliance state of existing and newly deployed resources against defined policy definitions, providing a clear compliance dashboard and reports. This assessment is continuous and can be viewed at the subscription, management group, or resource group level.

Answer

Manage access control for resources

Answer

Create new Azure resources based on a template

Answer

Automatically remediate non-compliant resources without manual intervention

Question 9

You are designing a disaster recovery strategy for an Azure virtual machine running a SQL Server Always On availability group. The primary region is East US, and the secondary region is West US. You need to ensure minimal data loss and automatic failover. Which Azure service should you use for cross-region replication of the managed disks?

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) orchestrates replication, failover, and failback of Azure VMs across regions. For a SQL Server Always On availability group, ASR can replicate the managed disks at the VM level, enabling automatic failover to the West US region with minimal data loss by using crash-consistent or app-consistent recovery points. This meets the requirement for cross-region replication with automatic failover, unlike storage-level replication which does not provide orchestrated failover.

Answer

Azure Traffic Manager

Answer

Azure Backup

Answer

Azure Storage Geo-Redundant Storage (GRS)

Question 10

You are designing a microservices architecture on Azure Kubernetes Service (AKS). The solution must handle traffic spikes by automatically scaling pods based on CPU utilization. Additionally, you need to minimize cost by scaling down nodes when not in use. Which two features should you implement? (Choose two.)

Accepted Answer

Horizontal Pod Autoscaler (HPA). Horizontal Pod Autoscaler (HPA) automatically scales the number of pod replicas based on observed CPU utilization (or custom metrics), directly addressing the requirement to handle traffic spikes by scaling pods. Cluster Autoscaler automatically adjusts the number of AKS nodes by scaling down unused nodes and scaling up when pods are unschedulable, which minimizes cost by reducing node count during low usage.

Answer

Azure Load Balancer

Answer

Vertical Pod Autoscaler (VPA)

Answer

Azure Container Instances (ACI)

Question 11

Your company plans to migrate on-premises file servers to Azure. The solution must support SMB protocol and integrate with Microsoft Entra ID for authentication. You need to choose a service that provides fully managed file shares accessible from multiple Azure regions. Which Azure service should you use?

Accepted Answer

Azure Files. Azure Files provides fully managed SMB file shares that can be accessed from multiple Azure regions using the SMB 3.0 protocol. It integrates natively with Microsoft Entra ID (formerly Azure AD) for Kerberos-based authentication, allowing on-premises identities to access shares without additional domain controllers. This makes it the correct choice for migrating on-premises file servers to a multi-region, identity-aware managed file service.

Answer

Azure Disk Storage

Answer

Azure NetApp Files

Answer

Azure Blob Storage

Question 12

You are designing a backup strategy for Azure virtual machines. The solution must support application-consistent backups for SQL Server databases running on the VMs. You need to ensure that backups are taken every 4 hours and retained for 30 days. What should you configure in Azure Backup?

Accepted Answer

Configure a VM backup policy with 4-hour frequency and 30-day retention using the default backup extension.. Azure Backup's default VM backup extension (VMSnapshot) can achieve application-consistent backups for SQL Server by using Windows Volume Shadow Copy Service (VSS) to quiesce the database writes. You configure a VM backup policy with a 4-hour frequency and 30-day retention to meet the stated requirements, as this policy applies to the entire VM and ensures SQL Server databases are backed up consistently.

Answer

Configure Azure SQL Backup for the SQL Server databases.

Answer

Configure Azure Site Recovery replication policy with 4-hour frequency.

Answer

Configure Azure Backup for SAP HANA on the VM.

Question 13

Refer to the exhibit. You deploy this ARM template to a resource group in the East US region. You specify the parameter storageAccountType as 'Standard_GRS'. Which of the following is true about the deployed storage account?

Accepted Answer

The storage account is geo-redundant and replicates data to a paired region.. The parameter 'storageAccountType' is set to 'Standard_GRS', which specifies geo-redundant storage (GRS). GRS replicates your data synchronously three times within a single region using LRS, then asynchronously replicates to a paired secondary region, ensuring durability even during a regional outage.

Answer

The storage account name will be 'storage' followed by a random string.

Answer

The storage account will be deployed in the same region as specified by the parameter.

Answer

The storage account is zone-redundant and replicates data across availability zones.

Question 14

You are designing a disaster recovery solution for an Azure IaaS workload. The application runs on Azure VMs in a single region and requires a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 4 hours. Which of the following is the most cost-effective approach to meet these requirements?

Accepted Answer

Deploy Azure Site Recovery to replicate VMs to the secondary region with a replication policy that meets the RPO and RTO.. Azure Site Recovery (ASR) provides orchestrated replication of Azure VMs to a secondary region with configurable RPO (as low as 30 seconds) and supports automated failover, meeting the 15-minute RPO and 4-hour RTO requirements. It is the most cost-effective because it replicates only changed blocks and does not require running standby VMs, unlike multi-region active deployments.

Answer

Configure geo-redundant storage (GRS) for the VM disks and manually attach them to new VMs in the secondary region.

Answer

Use Azure Front Door with a back-end pool containing VMs in both regions, and configure health probes to route traffic on failure.

Answer

Use Azure Backup to back up VMs to a Recovery Services vault in the secondary region and perform restore during failover.

Question 15

You are designing a connectivity solution for a hybrid network. The company has an on-premises network connected to an Azure virtual network via ExpressRoute. They also have a site-to-site VPN to the same Azure virtual network as a backup. When the ExpressRoute connection fails, traffic should automatically fail over to the VPN. How should you configure the routes to ensure automatic failover?

Accepted Answer

Ensure the ExpressRoute connection has a lower BGP metric than the VPN connection; Azure automatically prefers lower metric.. B is correct because when both ExpressRoute and VPN connections use BGP to advertise routes to Azure, Azure automatically selects the route with the lowest BGP metric (MED). By configuring the ExpressRoute connection with a lower BGP metric than the VPN connection, Azure will prefer the ExpressRoute path under normal conditions. If the ExpressRoute fails, its routes are withdrawn, and Azure falls back to the VPN routes, providing automatic failover.

Answer

Configure Azure Traffic Manager with a priority routing method to direct traffic to ExpressRoute first.

Answer

Set the BGP metrics (local preference) on the ExpressRoute connection to be higher than the VPN connection.

Answer

Configure Azure Route Server to propagate routes with a lower metric for the VPN connection.