AZ-305 practice questions 141–150

1. Question 141 · 232 in bank

   HOTSPOT - Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1. Server1 contains an app named App1 that uses AD DS authentication. Remote users access App1 by using a VPN connection to the on-premises network. You have an Azure AD tenant that syncs with the AD DS domain by using Azure AD Connect. You need to ensure that the remote users can access App1 without using a VPN. The solution must meet the following requirements: • Ensure that the users authenticate by using Azure Multi-Factor Authentication (MFA). • Minimize administrative effort. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The application doesn't do the authentication, this is handled by the App Proxy service, see https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy-security The service requires an Enterprise Application to be created, see https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy-add-on-premises-application - see section "Add an on-premises app to Microsoft Entra ID", "2. Browse to Identity > Applications > Enterprise applications".

   Source: Adapted from community discussion — kodathedog

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 142 · 232 in bank

   You have an Azure subscription that contains an Azure Kubernetes Service (AKS) instance named AKS1. AKS1 hosts microservice-based APIs that are configured to listen on non-default HTTP ports. You plan to deploy a Standard tier Azure API Management instance named APIM1 that will make the APIs available to external users. You need to ensure that the AKS1 APIs are accessible to APIM1. The solution must meet the following requirements: • Implement MTLS authentication between APIM1 and AKS1. • Minimize development effort. • Minimize costs. What should you do?

   • AImplement an external load balancer on AKS1.
   • BRedeploy APIM1 to the virtual network that contains AKS1.
   • CImplement an ExternalName service on AKS1.
   • DDeploy an ingress controller to AKS1.

   Show answer

   Answer: D

   Explanation

   Mutual TLS (mTLS) authentication is natively supported by Azure API Management and can be enabled in Kubernetes by installing an Ingress Controller. This approach simplifies the microservices as the authentication will be performed in the Ingress Controller. This solution also meets the requirements of implementing mTLS authentication between APIM1 and AKS1, minimizing development effort, and minimizing costs. Please note that while deploying an ingress controller to AKS1, you should ensure that it supports mTLS. Examples of enterprise-level ingress controllers that support mTLS include NGINX and AGIC1. https://learn.microsoft.com/en-us/azure/api-management/api-management-kubernetes

   Source: Adapted from community discussion — OrangeSG

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 143 · 232 in bank

   HOTSPOT - You need to recommend a solution to integrate Azure Cosmos DB and Azure Synapse. The solution must meet the following requirements: • Traffic from an Azure Synapse workspace to the Azure Cosmos DB account must be sent via the Microsoft backbone network. • Traffic from the Azure Synapse workspace to the Azure Cosmos DB account must NOT be routed over the internet. • Implementation effort must be minimized. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Configure a dedicated managed virtual network Provision the Azure Synapse workspace with the option to Configure a dedicated managed virtual network. This will ensure that the traffic between Azure Synapse and Azure Cosmos DB is routed through the Microsoft backbone network and not over the internet. Box 2: Managed private endpoints Configure the Azure Cosmos DB account to use Managed private endpoints. This will allow Azure Synapse to securely connect to Azure Cosmos DB using a private link.

   Source: Adapted from community discussion — OrangeSG

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 144 · 232 in bank

   You have an Azure subscription that contains an Azure Cosmos DB for NoSQL account named account1 and an Azure Synapse Analytics workspace named Workspace1. The account1 account contains a container named Contained that has the analytical store enabled. You need to recommend a solution that will process the data stored in Contained in near-real-time (NRT) and output the results to a data warehouse in Workspace1 by using a runtime engine in the workspace. The solution must minimize data movement. Which pool in Workspace1 should you use?

   • AApache Spark
   • Bserverless SQL
   • Cdedicated SQL
   • DData Explorer

   Show answer

   Answer: A

   Explanation

   Apache Spark: Spark pools in Azure Synapse Analytics provide a distributed data processing framework capable of processing large volumes of data in near-real-time. Spark is highly efficient in handling streaming data and can directly read from Azure Cosmos DB's analytical store with minimal data movement, making it an ideal choice for near-real-time processing. Serverless SQL and Dedicated SQL: While these can be used for querying and processing data, they are not as optimized for near-real-time processing as Apache Spark. Additionally, they typically involve more data movement compared to Spark's direct processing capabilities. Data Explorer: This is typically used for fast ad-hoc data exploration and querying, particularly for log and telemetry data, rather than for continuous near-real-time data processing and transformation.

   Source: Adapted from community discussion — 23169fd

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn

   Next question

5. Question 145 · 232 in bank

   DRAG DROP - You have an on-premises datacenter named Site1. Site1 contains a VMware vSphere cluster named Cluster1 that hosts 100 virtual machines. Cluster1 is managed by using VMware vCenter. You have an Azure subscription named Sub1. You plan to migrate the virtual machines from Cluster1 to Sub1. You need to identify which resources are required to run the virtual machines in Azure. The solution must minimize administrative effort. What should you configure? To answer, drag the appropriate resources to the correct targets. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answers should be: Sub: Azure Migrate project Cluster: Azure Migrate appliance Assuming that the agentless migration is the optimal way to reduce admin effort. You need a Migrate Project in Azure, and a Migrate Appliance (VM) in the on-prem host to discover and assess the rest of the VMs. As per: https://learn.microsoft.com/en-us/azure/migrate/server-migrate-overview#compare-deployment-steps

   Source: Adapted from community discussion — Mc71

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 146 · 232 in bank

   HOTSPOT - Your on-premises datacenter contains a server named Server1 that runs Microsoft SQL Server 2022. Server1 contains a 30-TB database named DB1 that stores customer data. Server1 runs a custom application named App1 that verifies the compliance of records in DB1. App1 must run on the same server as DB1. You have an Azure subscription. You need to migrate DB1 to Azure. The solution must minimize administrative effort. To which service should you migrate DB1, and what should you use to perform the migration? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Its SQL on Azure VM and Azure Migrate. Since the existing server has a custom app that must be installed on the local DB server and SQL is already SQL 2022 there is no need to do anything other than lift and shift. With that Azure Migrate to simply move the VM to Azure. Minimal Admin effort. https://learn.microsoft.com/en-us/azure/azure-sql/migration-guides/virtual-machines/sql-server-to-sql-on-azure-vm-migration-overview?view=azuresql

   Source: Adapted from community discussion — arnitjoe

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 147 · 232 in bank

   Your company has an app named App1 that uses data from the on-premises Microsoft SQL Server databases shown in the following table.

   

   App1 and the data are used on the first day of the month only. The data is not expected to grow more than 3 percent each year. The company is rewriting App1 as an Azure web app and plans to migrate all the data to Azure. You need to migrate the data to Azure SQL Database and ensure that the database is only available on the first day of each month. Which service tier should you use?

   • AvCore-based General Purpose
   • BDTU-based Standard
   • CvCore-based Business Critical
   • DDTU-based Basic

   Show answer

   Answer: A

   Explanation

   Correct. Use the serverless model in vcore https://docs.microsoft.com/en-us/azure/azure-sql/database/service-tiers-sql-database-vcore?view=azuresql While the provisioned compute tier provides a specific amount of compute resources that are continuously provisioned independent of workload activity, the serverless compute tier auto-scales compute resources based on workload activity. While the provisioned compute tier bills for the amount of compute provisioned at a fixed price per hour, the serverless compute tier bills for the amount of compute used, per second.

   Source: Adapted from community discussion — GarryK

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 148 · 232 in bank

   HOTSPOT - You have an Azure subscription that contains the resources shown in the following table.

   

   VNet1, VNet2, and VNet3 each has multiple virtual machines connected. The virtual machines use the Azure DNS service for name resolution. You need to recommend an Azure Monitor log routing solution that meets the following requirements: • Ensures that the logs collected from the virtual machines and sent to Workspace1 are routed over the Microsoft backbone network • Minimizes administrative effort What should you include in the recommendation? To answer, select the appropriate options in the answer area.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box1: 1 AMPLS Box2: 2 PEs I tested this and used 1 AMPLS and 2 PEs. As long as the DNS settings are correct and the PEs resolve for each VM fine without overlapping IPs, with just 1 AMPLS you can make this work to as many VNETs you want. The key idea here is to have the proper DNS private zone settings configured and of course VMs to have network connectivity to the PE.

   Source: Adapted from community discussion — cris_exam

   References

   • Microsoft Learn

   

   Next question

9. Question 149 · 232 in bank

   HOTSPOT - You have 100 Azure Storage accounts. Access to the accounts is restricted by using Azure role-based access control (Azure RBAC) assignments. You need to recommend a solution that uses role assignment conditions based on the tags assigned to individual resources within the storage accounts. What should you include in the recommendation? To answer, select the appropriate options in the answer area.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Attribute Based Access Control (ABAC) Attribute based because it says tags Box 2: Blobs Since Azure Storage supports blobs, files, and tables, but the most common use case for granular access control is typically blobs, "Blobs" is likely the appropriate answer here, unless more context specifies otherwise.

   Source: Adapted from community discussion — Nishtha11

   

   Next question

10. Question 150 · 232 in bank

    Your company has 300 virtual machines hosted in a VMware environment. The virtual machines vary in size and have various utilization levels. You plan to move all the virtual machines to Azure. You need to recommend how many and what size Azure virtual machines will be required to move the current workloads to Azure. The solution must minimize administrative effort. What should you use to make the recommendation?

    • AAzure Pricing calculator
    • BAzure Advisor
    • CAzure Migrate
    • DAzure Cost Management

    Show answer

    Answer: C

    Explanation

    Correct Azure Migrate: Discovery and assessment tool The Azure Migrate: Discovery and assessment tool discovers and assesses on-premises VMware VMs, Hyper-V VMs, and physical servers for migration to Azure. Here's what the tool does: Azure readiness: Assesses whether on-premises servers, SQL Servers and web apps are ready for migration to Azure. Azure sizing: Estimates the size of Azure VMs/Azure SQL configuration/number of Azure VMware Solution nodes after migration. Azure cost estimation: Estimates costs for running on-premises servers in Azure. Dependency analysis: Identifies cross-server dependencies and optimization strategies for moving interdependent servers to Azure. Learn more about Discovery and assessment with dependency analysis. https://docs.microsoft.com/en-us/azure/migrate/migrate-services-overview

    Source: Adapted from community discussion — GarryK

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-305 practice, question 141. 232 questions available.