Free Microsoft AZ-305 Practice Questions & Answers 2026 Part1

You plan to migrate App1 to Azure. You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 dat a. The solution must meet the security and compliance requirements. What should you include in the recommendation?

You plan to migrate App1 to Azure. The solution must meet the authentication and authorization requirements. Which type of endpoint should App1 use to obtain an access token?

You have five datacenters across North America and Europe.You have an Azure subscription.You need to recommend a solution to provide connectivity between the datacenters and Azure. The solution must meet the following requirements:* Ensure that apps hosted in a datacenter can access the resources hosted in Azure and the other datacenters.* Ensure that apps hosted in Azure can access the resources hosted in the datacenters.* Support the central management of network routes.* Support the central management of firewall rules.* Minimize administrative effort.What should you include in the recommendation?

The accounting department at your company migrates to a new financial accounting software. The accounting department must keep file-based database backups for seven years for compliance purposes. It is unlikely that the backups will be used to recover data.You need to move the backups to Azure. The solution must minimize costs.Where should you store the backups?

You have an application named App1. App1 generates log files that must be archived for five years. The log files must be readable by App1 but must not be modified.Which storage solution should you recommend for archiving?

You plan to develop, deploy, and maintain 100 React-based web apps that will NOT require server-side rendering. You need to recommend a hosting solution for the apps. The solution must meet the following requirements:* Automatically deploy new versions of the apps when changes to the apps' source code are committed in Azure Repos.* Automatically stage a preview version of an app when a pull request is processed.* Support Azure API Management by using the /api.* Minimize costs.What should you include in the recommendation?

You have the resources shown in the following table.CDB1 hosts a container that stores continuously updated operational dataYou are designing a solution that will use AS1 to analyze the operational data dairy.You need to recommend a solution to analyze the data without affecting the performance of the operational data store.What should you include in the recommendation?

You plan to migrate App1 to Azure.You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 data. The solution must meet the security and compliance requirements.What should you include in the recommendation?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.You need to recommend a solution to meet the regulatory requirement.Solution: You recommend using an Azure policy to enforce the resource group location.Does this meet the goal?

Your company has the divisions shown in the following table.Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.What should you recommend?

What should you include in the identity management strategy to support the planned changes?

You plan to deploy an Azure Database for MySQL flexible server named Server1 to the East US Azure region.You need to implement a business continuity solution for Server1. The solution must minimize downtime in the event of a failover to a paired region.What should you do?

You are designing an Azure governance solution.All Azure resources must be easily identifiable based on the following operational information: environment, owner, department and cost center.You need to ensure that you can use the operational information when you generate reports for the Azure resources.What should you include in the solution?

You are planning an Azure IoT Hub solution that will include 50,000 IoT devices.Each device will stream data, including temperature, device ID, and time data. Approximately 50,000 records will be written every second. The data will be visualized in near real time.You need to recommend a service to store and query the data.Which two services can you recommend? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.What should you include in the recommendation?

You have an Azure subscription that contains a Basic Azure virtual WAN named VirtualWAN1 and the virtual hubs shown in the following table.You have an ExpressRoute circuit in the US East Azure region.You need to create an ExpressRoute association to VirtualWAN1.What should you do first?

You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam,Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for theMicrosoft 365 E5 plan.You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements:✑ To the manager of the developers, send a monthly email message that lists the access permissions to Application1.✑ If the manager does not verify an access permission, automatically revoke that permission.✑ Minimize development effort.What should you recommend?

You have an Azure subscription. The subscription has a blob container that contains multiple blobs.Ten users in the finance department of your company plan to access the blobs during the month of April.You need to recommend a solution to enable access to the blobs during the month of April only.Which security solution should you include in the recommendation?

You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain.You have an internal web app named WebApp1 that is hosted on-premises. WebApp1 uses Integrated Windows authentication.Some users work remotely and do NOT have VPN access to the on-premises network.You need to provide the remote users with single sign-on (SSO) access to WebApp1.Which two features should you include in the solution? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned membership. Group1 has 50 members, including 20 guest users.You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:✑ The evaluation must be repeated automatically every three months.✑ Every member must be able to report whether they need to be in Group1.✑ Users who report that they do not need to be in Group1 must be removed from Group1 automatically.✑ Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.What should you include in the recommendation?

After you migrate App1 to Azure, you need to enforce the data modification requirements to meet the security and compliance requirements.What should you do?

You need to recommend a notification solution for the IT Support distribution group.What should you include in the recommendation?

You need to recommend a solution to meet the database backup retention requirements.What should you recommend?

What should you recommend to meet the monitoring requirements for App2?

You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam, Ltd. Developers at Fabrikam were assigned role-based permissions to the Application1 components. All users are licensed for the Microsoft 365 E5 plan.You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements:To the manager of the developers, send a monthly email message that lists the access permissions toApplication1.If the manager does not verify an access permission, automatically revoke that permission.Minimize development effort.What should you recommend?

You have an Azure subscription. The subscription has a blob container that contains multiple blobs.Ten users in the finance department of your company plan to access the blobs during the month of April.You need to recommend a solution to enable access to the blobs during the month of April only.Which security solution should you include in the recommendation?

You have a Microsoft Entra tenant that syncs with an on-premises Active Directory domain.You have an internal web app named WebApp1 that is hosted on-premises. WebApp1 uses Integrated Windows authentication.Some users work remotely and do NOT have VPN access to the on-premises network.You need to provide the remote users with single sign-on (SSO) access to WebApp1.Which two features should you include in the solution? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.

You have a Microsoft Entra tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned membership. Group1 has 50 members, including 20 guest users.You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:The evaluation must be repeated automatically every three months.Every member must be able to report whether they need to be in Group1.Users who report that they do not need to be in Group1 must be removed from Group1 automatically.Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.What should you include in the recommendation?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.Several virtual machines exhibit network connectivity issues.You need to analyze the network traffic to identify whether packets are being allowed or denied from the Azure virtual machines to the on-premises virtual machines.Solution: Use Azure Traffic Analytics in Azure Network Watcher to analyze the network traffic.Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.Several virtual machines exhibit network connectivity issues.You need to analyze the network traffic to identify whether packets are being allowed or denied from the Azure virtual machines to the on-premises virtual machines.Solution: Use Azure Advisor.Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.Several virtual machines exhibit network connectivity issues.You need to analyze the network traffic to identify whether packets are being allowed or denied from the Azure virtual machines to the on-premises virtual machines.Solution: Use Azure Network Watcher to run IP flow verify to analyze the network traffic.Does this meet the goal?

You are designing a large Azure environment that will contain many subscriptions.You plan to use Azure Policy as part of a governance solution.To which three scopes can you assign Azure Policy definitions? Each correct answer presents a complete solution.Note: Each correct selection is worth one point.

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.What should you include in the recommendation?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.Several virtual machines exhibit network connectivity issues.You need to analyze the network traffic to identify whether packets are being allowed or denied from the Azure virtual machines to the on-premises virtual machines.Solution: Install and configure the Azure Monitoring agent and the Dependency Agent on all the virtual machines. Use VM insights in Azure Monitor to analyze the network traffic.Does this meet the goal?

Your company, named Contoso, Ltd., implements several Azure logic apps that have HTTP triggers. The logic apps provide access to an on-premises web service.Contoso establishes a partnership with another company named Fabrikam, Inc.Fabrikam does not have an existing Microsoft Entra tenant and uses third-party Oauth 2.0 identity management to authenticate its users.Developers at Fabrikam plan to use a subset of the logic apps to build applications that will integrate with the on-premises web service of Contoso.You need to design a solution to provide the Fabrikam developers with access to the logic apps. The solution must meet the following requirements:Requests to the logic apps from the developers must be limited to lower rates than the requests from the users at Contoso.The developers must be able to rely on their existing Oauth 2.0 provider to gain access to the logic apps.The solution must NOT require changes to the logic apps.The solution must NOT use Microsoft Entra guest accounts.What should you include in the solution?

You plan to deploy an Azure SQL database that will store Personally Identifiable Information (PII).You need to ensure that only privileged users can view the PII. All other users must still be allowed to view other columns.What should you include in the solution?