DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Enhance Your Microsoft AZ-305 Exam Readiness with Practice Tests

Discover the advantages of SPOTO Microsoft AZ-305 exam questions for designing Microsoft Azure Infrastructure Solutions. Our exam questions and answers cover key topics like Azure Functions, web app management, Azure storage solutions, and more. Prepare effectively with our comprehensive test questions that simulate real exam scenarios. Our study materials, designed by experts, ensure you have the knowledge to pass successfully. Access valuable exam resources and tips to enhance your preparation strategy. Utilize our mock exams to assess readiness and boost confidence. Transition your certification smoothly with SPOTO's reliable exam preparation resources for Microsoft Azure Solutions Architect Certification Transition exam (AZ-305), assessing skills in Azure solution design, resource management, storage implementation, identity security, and solution monitoring in Azure.
Take other online exams

Question #1
HOTSPOT (Drag and Drop is not supported)Your company has the divisions shown in the following table. You plan to deploy a custom application to each subscription. The application will contain the following:-A resource group-An Azure web app-Custom role assignments-An Azure Cosmos DB accountYou need to use Azure Blueprints to deploy the application to each subscription.What is the minimum number of objects required to deploy the application? To answer, select the appropriate options in the answer area.NOTE:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #2
You need to recommend a notification solution for the IT Support distribution group.What should you include in the recommendation?
A. SendGrid account with advanced reporting
B. n action group
C. zure Network Watcher
D. zure AD Connect Health
View answer
Correct Answer: D
Question #3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company deploys several virtual machines on-premises and to Azure. ExpressR
A. es
B. o
View answer
Correct Answer: A
Question #4
DRAG DROP (Drag and Drop is not supported)You plan to import data from your on-premises environment to Azure. The data is shown in the following table. What should you recommend using to migrate the data? To answer, drag the appropriate tools to the correct data sources. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Select and Place:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #5
HOTSPOT (Drag and Drop is not supported)You plan to deploy an Azure web app named App1 that will use Azure Active Directory (Azure AD) authentication.App1 will be accessed from the internet by the users at your company. All the users have computers that run Windows 10 and are joined to Azure AD. You need to recommend a solution to ensure that the users can connect to App1 without being prompted for authentication and can access App1 only from company-owned computers.What should you recommend for each requir
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #6
You have an Azure subscription. The subscription has a blob container that contains multiple blobs.Ten users in the finance department of your company plan to access the blobs during the month of April. You need to recommend a solution to enable access to the blobs during the month of April only.Which security solution should you include in the recommendation?
A. hared access signatures (SAS)
B. onditional Access policies
C. ertificates
D. ccess keys
View answer
Correct Answer: A
Question #7
You have an Azure AD tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned memberships. Group1 has 50 members, including 20 guest users.You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:-The evaluation must be repeated automatically every three months.-Every member must be able to report whether they need to be in Group1.-Users who report that they do not need to be in Group1 must be remove
A. mplement Azure AD Identity Protection
B. hange the Membership type of Group1 to Dynamic User
C. reate an access review
D. mplement Azure AD Privileged Identity Management (PIM)
View answer
Correct Answer: C
Question #8
HOTSPOT (Drag and Drop is not supported)You plan to develop a new app that will store business critical data. The app must meet the following requirements:-Prevent new data from being modified for one year.-Maximize data resiliency.-Minimize read latency.What storage solution should you recommend for the app? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #9
You plan to deploy an Azure SQL database that will store Personally Identifiable Information (PII).You need to ensure that only privileged users can view the PII.What should you include in the solution?
A. ynamic data masking
B. ole-based access control (RBAC)
C. ata Discovery & Classification
D. ransparent Data Encryption (TDE)
View answer
Correct Answer: A
Question #10
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You need to deploy resources to host a stateless web app in an Azure subscriptio
A. es
B. o
View answer
Correct Answer: A
Question #11
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains 50 Azure SQL databases.You create an Azure Resource Manager (ARM) template named Template1 that enables Transparent Data Encryption (TDE).You need to create an Azure Policy definition named Policy1 that will use Template1 to enable TDE for any noncompliant Azure SQL databases.How should you configure Policy1? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #12
You are designing an app that will use Azure Cosmos DB to collate sales from multiple countries.You need to recommend an API for the app. The solution must meet the following requirements:-Support SQL queries.-Support geo-replication.-Store and access data relationally.Which API should you recommend?
A. pache Cassandra
B. ostgreSQL
C. ongoDB
D. oSQL
View answer
Correct Answer: B
Question #13
You have an Azure subscription that contains 10 web apps. The apps are integrated with Azure AD and are accessed by users on different project teams.The users frequently move between projects.You need to recommend an access management solution for the web apps. The solution must meet the following requirements:•The users must only have access to the app of the project to which they are assigned currently.•Project managers must verify which users have access to their project’s app and remove users that are n
A. zure AD Identity Protection
B. icrosoft Defender for Identity
C. icrosoft Entra Permissions Management
D. zure AD Identity Governance
View answer
Correct Answer: D
Question #14
You store web access logs data in Azure Blob Storage.You plan to generate monthly reports from the access logs.You need to recommend an automated process to upload the data to Azure SQL Database every month.What should you include in the recommendation?
A. icrosoft SQL Server Migration Assistant (SSMA)
B. ata Migration Assistant (DMA)
C. zCopy
D. zure Data Factory
View answer
Correct Answer: D
Question #15
You are planning an Azure IoT Hub solution that will include 50,000 IoT devices.Each device will stream data, including temperature, device ID, and time datA. Approximately 50,000 records will be written every seconD. The data will be visualized in near real time.You need to recommend a service to store and query the datA. Which two services can you recommend? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
A. zure Cosmos DB SQL API
B. zure SQL Database that uses active geo-replication
C. zure SQL Database Hyperscale
D. zure Database for PostgreSQL
View answer
Correct Answer: CD
Question #16
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You create a storage account that will store documents.You need to configure the storage account to meet the following requirements:•Ensure that retention policies are standardized across the subscription.•Ensure that data can be purged if the data is copied to an unauthorized location.Which two settings should you enable? To answer, select the appropriate settings in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #17
DRAG DROP (Drag and Drop is not supported)Your company identifies the following business continuity and disaster recovery objectives for virtual machines that host sales, finance, and reporting applications in the company’s on-premises data center:-The sales application must be able to fail over to a second on-premises data center.-The reporting application must be able to recover point-in-time data at a daily granularity. The RTO is eight hours.-The finance application requires that data be retained for se
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #18
HOTSPOT (Drag and Drop is not supported)You have an Azure AD tenant that contains a management group named MG1.You have the Azure subscriptions shown in the following table.The subscriptions contain the resource groups shown in the following table.The subscription contains the Azure AD security groups shown in the following table.The subscription contains the user accounts shown in the following table.You perform the following actions:-Assign User3 the Contributor role for Sub1.-Assign Group1 the Virtual Ma
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #19
You plan to deploy an application named App1 that will run in containers on Azure Kubernetes Service (AKS) clusters. The AKS clusters will be distributed across four Azure regions.You need to recommend a storage solution to ensure that updated container images are replicated automatically to all the Azure regions hosting the AKS clusters.Which storage solution should you recommend?
A. zure Cache for Redis
B. remium SKU Azure Container Registry
C. zure Content Delivery Network (CON)
D. eo-redundant storage (GRS) accounts
View answer
Correct Answer: B
Question #20
You are designing an Azure governance solution.All Azure resources must be easily identifiable based on the following operational information: environment, owner, department and cost center.You need to ensure that you can use the operational information when you generate reports for the Azure resources.What should you include in the solution?
A. n Azure data catalog that uses the Azure REST API as a data source
B. n Azure management group that uses parent groups to create a hierarchy
C. n Azure policy that enforces tagging rules
D. zure Active Directory (Azure AD) administrative units
View answer
Correct Answer: C
Question #21
HOTSPOT (Drag and Drop is not supported)You are designing an app that will be hosted on Azure virtual machines that run Ubuntu. The app will use a third-party email service to send email messages to users. The third-party email service requires that the app authenticate by using an API key.You need to recommend an Azure Key Vault solution for storing and accessing the API key. The solution must minimize administrative effort.What should you recommend using to store and access the key? To answer, select the
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #22
HOTSPOT (Drag and Drop is not supported)To meet the authentication requirements of Fabrikam, what should you include in the solution? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #23
HOTSPOT (Drag and Drop is not supported)You plan to migrate App1 to Azure.You need to recommend a storage solution for App1 that meets the security and compliance requirements. Which type of storage should you recommend, and how should you recommend configuring the storage? To answer, select the appropriate options in the answer areA. NOTE: Each correct selection is worth one point. Hot Area:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #24
You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam, LtD. Developers at Fabrikam were assigned role-basedaccess control (RBAC) permissions to the Application1 components. All users are licensed for the Microsoft 365 E5 plan.You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements:-To the manager of th
A. n Azure Active Directory (Azure AD), create an access review of Application1
B. reate an Azure Automation runbook that runs the Get-AzRoleAssignmentcmdlet
C. n Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role assignment for the Application1 resources
D. reate an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignmentcmdlet
View answer
Correct Answer: A
Question #25
You have an Azure subscription. The subscription contains a tiered app named App1 that is distributed across multiple containers hosted in Azure Container Instances.You need to deploy an Azure Monitor monitoring solution for App. The solution must meet the following requirements:•Support using synthetic transaction monitoring to monitor traffic between the App1 components.•Minimize development effort.What should you include in the solution?
A. etwork insights
B. pplication Insights
C. ontainer insights
D. og Analytics Workspace insights
View answer
Correct Answer: B
Question #26
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.What should you include in the recommendation?
A. zure Activity Log
B. zure Arc
C. zure Analysis Services
D. zure Monitor metrics
View answer
Correct Answer: A
Question #27
HOTSPOT (Drag and Drop is not supported)You are designing a storage solution that will ingest, store, and analyze petabytes (PBs) of structured, semi-structured, and unstructured text data. The analyzed data will be offloaded to Azure Data Lake Storage Gen2 for long-term retention.You need to recommend a storage and analytics solution that meets the following requirements:•Stores the processed data•Provides interactive analytics•Supports manual scaling, built-in autoscaling, and custom autoscalingWhat shoul
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #28
You have an application that is used by 6,000 users to validate their vacation requests. The application manages its own credential store.Users must enter a username and password to access the application. The application does NOT support identity providers.You plan to upgrade the application to use single sign-on (SSO) authentication by using an Azure Active Directory (Azure AD) application registration.Which SSO method should you use?
A. eader-based
B. AML
C. assword-based
D. penID Connect
View answer
Correct Answer: C
Question #29
You need to recommend a solution for the App1 maintenance task. The solution must minimize costs.What should you include in the recommendation?
A. n Azure logic app
B. n Azure function
C. n Azure virtual machine
D. n App Service WebJob
View answer
Correct Answer: A
Question #30
You plan to deploy an app that will use an Azure Storage account.You need to deploy the storage account. The storage account must meet the following requirements:-Store the data for multiple users.-Encrypt each user’s data by using a separate key.-Encrypt all the data in the storage account by using customer-managed keys.What should you deploy?
A. iles in a premium file share storage account
B. lobs in a general purpose v2 storage account
C. lobs in an Azure Data Lake Storage Gen2 account
D. iles in a general purpose v2 storage account
View answer
Correct Answer: B
Question #31
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.What should you include in the recommendation?
A. zure Activity Log
B. zure Advisor
C. zure Analysis Services
D. zure Monitor action groups
View answer
Correct Answer: A
Question #32
You have an Azure subscription.You plan to deploy a monitoring solution that will include the following:-Azure Monitor Network Insights-Application Insights-Microsoft Sentinel-VM insightsThe monitoring solution will be managed by a single team.What is the minimum number of Azure Monitor workspaces required?
A.
B.
C.
D.
View answer
Correct Answer: C
Question #33
You are designing a large Azure environment that will contain many subscriptions. You plan to use Azure Policy as part of a governance solution.To which three scopes can you assign Azure Policy definitions? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: CEF
Question #34
HOTSPOT (Drag and Drop is not supported)You are evaluating whether to use Azure Traffic Manager and Azure Application Gateway to meet the connection requirements for App1.What is the minimum numbers of instances required for each service? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #35
HOTSPOT (Drag and Drop is not supported)You have an on-premises database that you plan to migrate to Azure.You need to design the database architecture to meet the following requirements: -Support scaling up and down.-Support geo-redundant backups. -Support a database of up to 75 TB. -Be optimized for online transaction processing (OLTP).What should you include in the design? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #36
HOTSPOT (Drag and Drop is not supported)You plan to deploy the backup policy shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphiC. NOTE: Each correct selection is worth one point. Hot Area:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #37
Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.What should you recommend?
A. onfigure Azure AD join
B. onfigure Azure AD Identity Protection
C. onfigure a Conditional Access policy
D. onfigure Supported account types in the application registration and update the sign-in endpoint
View answer
Correct Answer: D
Question #38
HOTSPOT (Drag and Drop is not supported)You need to design a storage solution for an app that will store large amounts of frequently used datA. The solution must meet the following requirements:-Maximize data throughput.-Prevent the modification of data for one year. -Minimize latency for read and write operations.Which Azure Storage account type and storage service should you recommend? To answer, select the appropriate options in the answer areA. NOTE: Each correct selection is worth one point. Hot Area:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #39
HOTSPOT (Drag and Drop is not supported)You are designing a data storage solution to support reporting.The solution will ingest high volumes of data in the JSON format by using Azure Event Hubs. As the data arrives, Event Hubs will write the data to storage. The solution must meet the following requirements:-Organize data in directories by date and time.-Allow stored data to be queried directly, transformed into summarized tables, and then stored in a data warehouse.-Ensure that the data warehouse can store
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #40
HOTSPOT (Drag and Drop is not supported)You have 10 on-premises servers that run Windows Server.You need to perform daily backups of the servers to a Recovery Services vault. The solution must meet the following requirements:•Back up all the files and folders on the servers.•Maintain three copies of the backups in Azure.•Minimize costs.What should you configure? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #41
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains an Azure key vault named KV1 and a virtual machine named VM1. VM1 runs Windows Server 2022: Azure Edition.You plan to deploy an ASP.Net Core-based application named App1 to VM1.You need to configure App1 to use a system-assigned managed identity to retrieve secrets from KV1. The solution must minimize development effort.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selec
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #42
You plan to use an Azure Storage account to store data assets.You need to recommend a solution that meets the following requirements:•Supports immutable storage•Disables anonymous access to the storage account•Supports access control list (ACL)-based Azure AD permissionsWhat should you include in the recommendation?
A. zure Files
B. zure Data Lake Storage
C. zure NetApp Files
D. zure Blob Storage
View answer
Correct Answer: C
Question #43
You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam,Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for theMicrosoft 365 E5 plan.You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements:? To the manager of th
A. n Azure Active Directory (Azure AD), create an access review of Application1
B. reate an Azure Automation runbook that runs the Get-AzRoleAssignment cmdlet
C. n Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role assignment for the Application1 resources
D. reate an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet
View answer
Correct Answer: A
Question #44
You have an Azure subscription. The subscription has a blob container that contains multiple blobs.Ten users in the finance department of your company plan to access the blobs during the month of April.You need to recommend a solution to enable access to the blobs during the month of April only.Which security solution should you include in the recommendation?
A. hared access signatures (SAS)
B. onditional Access policies
C. ertificates
D. ccess keys
View answer
Correct Answer: A
Question #45
You plan to deploy an application named App1 that will run on five Azure virtual machines. Additional virtual machines will be deployed later to run App1.You need to recommend a solution to meet the following requirements for the virtual machines that will run App1:-Ensure that the virtual machines can authenticate to Azure Active Directory (Azure AD) to gain access to an Azure key vault, Azure Logic Apps instances, and an Azure SQL database.-Avoid assigning new roles and permissions for Azure services when
A. system-assigned managed identity
B. service principal that is configured to use a certificate
C. service principal that is configured to use a client secret
D. user-assigned managed identity
View answer
Correct Answer: D
Question #46
You plan to migrate App1 to Azure.You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 datA. The solution must meet the security and compliance requirements.What should you include in the recommendation?
A. icrosoft peering for an ExpressRoute circuit
B. zure public peering for an ExpressRoute circuit
C. service endpoint that has a service endpoint policy
D. private endpoint
View answer
Correct Answer: D
Question #47
HOTSPOT (Drag and Drop is not supported)You have an Azure web app named App1 and an Azure key vault named KV1.App1 stores database connection strings in KV1.App1 performs the following types of requests to KV1:-Get-List-Wrap-Delete-Unwrap-Backup-Decrypt-EncryptYou are evaluating the continuity of service for App1.You need to identify the following if the Azure region that hosts KV1 becomes unavailable:-To where will KV1 fail over?-During the failover, which request type will be unavailable?What should you i
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #48
HOTSPOT (Drag and Drop is not supported)You are planning an Azure Storage solution for sensitive data. The data will be accessed daily. The dataset is less than 10 GB.You need to recommend a storage solution that meets the following requirements:-All the data written to storage must be retained for five years.-Once the data is written, the data can only be read. Modifications and deletion must be prevented.-After five years, the data can be deleted, but never modified.-Data access charges must be minimized.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #49
You are developing an app that will read activity logs for an Azure subscription by using Azure Functions.You need to recommend an authentication solution for Azure Functions. The solution must minimize administrative effort.What should you include in the recommendation?
A. n enterprise application in Azure AD
B. ystem-assigned managed identities
C. hared access signatures (SAS)
D. pplication registration in Azure AD
View answer
Correct Answer: B
Question #50
HOTSPOT (Drag and Drop is not supported)What should you implement to meet the identity requirements? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Hot Area:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #51
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You need to deploy a solution that will provide point-in-time restore for blobs in storage accounts that have blob versioning and blob soft delete enabled.Which type of blob should you create, and what should you enable for the accounts? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #52
You have an Azure subscription that contains two applications named App1 and App2. App1 is a sales processing application. When a transaction in App1 requires shipping, a message is added to an Azure Storage account queue, and then App2 listens to the queue for relevant transactions.In the future, additional applications will be added that will process some of the shipping requests based on the specific details of the transactions.You need to recommend a replacement for the storage account queue to ensure t
A. one Azure Data Factory pipeline
B. multiple storage account queues
C. one Azure Service Bus queue
D. one Azure Service Bus topic
View answer
Correct Answer: D
Question #53
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.What should you include in the recommendation?
A. pplication Insights
B. zure Analysis Services
C. zure Advisor
D. zure Activity Log
View answer
Correct Answer: D
Question #54
HOTSPOT (Drag and Drop is not supported)Your company, named Contoso, Ltd., has an Azure subscription that contains the following resources:•An Azure Synapse Analytics workspace named contosoworkspace1•An Azure Data Lake Storage account named contosolake1•An Azure SQL database named contososql1The product data of Contoso is copied from contososql1 to contosolake1.Contoso has a partner company named Fabrikam Inc. Fabrikam has an Azure subscription that contains the following resources:•A virtual machine named
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #55
You plan to deploy an Azure Database for MySQL flexible server named Server1 to the East US Azure region.You need to implement a business continuity solution for Server1. The solution must minimize downtime in the event of a failover to a paired region.What should you do?
A. reate a read replica
B. tore the database files in Azure premium file shares
C. mplement Geo-redundant backup
D. onfigure native MySQL replication
View answer
Correct Answer: C
Question #56
HOTSPOT (Drag and Drop is not supported)You deploy several Azure SQL Database instances.You plan to configure the Diagnostics settings on the databases as shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #57
HOTSPOT (Drag and Drop is not supported)You have the Azure subscriptions shown in the following table.Contoso.onmicrosft.com contains a user named User1.You need to deploy a solution to protect against ransomware attacks. The solution must meet the following requirements:•Ensure that all the resources in Sub1 are backed up by using Azure Backup.•Require that User1 first be assigned a role for Sub2 before the user can make major changes to the backup configuration.What should you create in each subscription?
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #58
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.Several virtual machines exhibit network connectivity issues.You need to analyze the network traffic to identify whether packets are being allowed or denied from Azure to the virtual machines.Solution. Install and configure the Azure Monitoring agent and the Dependency Agent on all the virtual machines. Use VM insights in Azure Monitor to analyze the network t
A. es
B. o
.
View answer
Correct Answer: B
Question #59
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Sub1 that is linked to an Azure AD tenant named contoso.com.You plan to implement two ASP.NET Core apps named App1 and App2 that will be deployed to 100 virtual machines in Sub1. Users will sign in to App1 and App2 by using their contoso.com credentials.App1 requires read permissions to access the calendar of the signed-in user. App2 requires write permissions to access the calendar of the signed-in user.You need to recommend an au
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #60
HOTSPOT (Drag and Drop is not supported)You have two on-premises Microsoft SQL Server 2017 instances that host an Always On availability group named AG1. AG1 contains a single database named DB1.You have an Azure subscription that contains a virtual machine named VM1. VM1 runs Linux and contains a SQL Server 2019 instance.You need to migrate DB1 to VM1. The solution must minimize downtime on DB1.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #61
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.What should you include in the recommendation?
A. zure Arc
B. zure Monitor metrics
C. zure Advisor
D. zure Log Analytics
View answer
Correct Answer: D
Question #62
HOTSPOT (Drag and Drop is not supported)You need to design an Azure policy that will implement the following functionality:-For new resources, assign tags and values that match the tags and values of the resource group to which the resources are deployed.-For existing resources, identify whether the tags and values match the tags and values of the resource group that contains the resources.-For any non-compliant resources, trigger auto-generated remediation tasks to create missing tags and values.The soluti
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #63
Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.What should you recommend?
A. onfigure Azure AD Identity Protection
B. onfigure assignments for the fabrikam
C. onfigure Supported account types in the application registration and update the sign-in endpoint
D. onfigure a Conditional Access policy
View answer
Correct Answer: C
Question #64
HOTSPOT (Drag and Drop is not supported)You plan to deploy Azure Databricks to support a machine learning application. Data engineers will mount an Azure Data Lake Storage account to the Databricks file system. Permissions to folders are granted directly to the data engineers.You need to recommend a design for the planned Databrick deployment. The solution must meet the following requirements:-Ensure that the data engineers can only access folders to which they have permissions. Minimize development effort.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #65
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.What should you include in the recommendation?
A. zure Monitor action groups
B. zure Arc
C. zure Monitor metrics
D. zure Activity Log
View answer
Correct Answer: D
Question #66
HOTSPOT (Drag and Drop is not supported)You design a solution for the web tier of WebApp1 as shown in the exhibit.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #67
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You plan to deploy five storage accounts that will store block blobs and five storage accounts that will host file shares. The file shares will be accessed by using the SMB protocol.You need to recommend an access authorization solution for the storage accounts. The solution must meet the following requirements:•Maximize security.•Prevent the use of shared keys.•Whenever possible, support time-limited access.What should you include in th
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #68
DRAG DROP (Drag and Drop is not supported)You need to recommend a solution that meets the file storage requirements for App2.What should you deploy to the Azure subscription and the on-premises network? To answer, drag the appropriate services to the correct locations. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point. Select and Place:
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #69
Your company, named Contoso, Ltd., implements several Azure logic apps that have HTTP triggers. The logic apps provide access to an on-premises web service.Contoso establishes a partnership with another company named Fabrikam, Inc.Fabrikam does not have an existing Azure Active Directory (Azure AD) tenant and uses third-party OAuth 2.0 identity management to authenticate its users.Developers at Fabrikam plan to use a subset of the logic apps to build applications that will integrate with the on-premises web
A. zure Front Door
B. zure AD Application Proxy
C. zure AD business-to-business (B2B)
D. zure API Management
View answer
Correct Answer: D
Question #70
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the resources shown in the following table. You create an Azure SQL database named DB1 that is hosted in the East US Azure region.To DB1, you add a diagnostic setting named Settings1. Settings1 archive SQLInsights to storage1 and sends SQLInsights to Workspace1.For each of the following statements, select Yes if the statement is true. Otherwise, select No.
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #71
DRAG DROP (Drag and Drop is not supported)You have two app registrations named App1 and App2 in Azure AD. App1 supports role-based access control (RBAC) and includes a role named Writer.You need to ensure that when App2 authenticates to access App1, the tokens issued by Azure AD include the Writer role claim.Which blade should you use to modify each app registration? To answer, drag the appropriate blades to the correct app registrations. Each blade may be used once, more than once, or not at all. You may n
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #72
After you migrate App1 to Azure, you need to enforce the data modification requirements to meet the security and compliance requirements.What should you do?
A. reate an access policy for the blob service
B. mplement Azure resource locks
C. reate Azure RBAC assignments
D. odify the access level of the blob service
View answer
Correct Answer: A
Question #73
You plan to migrate on-premises MySQL databases to Azure Database for MySQL Flexible Server.You need to recommend a solution for the Azure Database for MySQL Flexible Server configuration. The solution must meet the following requirements:-The databases must be accessible if a datacenter fails.-Costs must be minimized.Which compute tier should you recommend?
A. urstable
B. eneral Purpose
C. emory Optimized
View answer
Correct Answer: B
Question #74
You have an Azure subscription that contains an Azure Blob Storage account named store1.You have an on-premises file server named Server1 that runs Windows Server 2016. Server1 stores 500 GB of company files.You need to store a copy of the company files from Server1 in store1.Which two possible Azure services achieve this goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
A. an Azure Logic Apps integration account
B. an Azure Import/Export job
C. Azure Data Factory
D. an Azure Analysis services On-premises data gateway
E. an Azure Batch account
View answer
Correct Answer: BC
Question #75
You are planning an Azure IoT Hub solution that will include 50,000 IoT devices.Each device will stream data, including temperature, device ID, and time data. Approximately 50,000 records will be written every second. The data will be visualized in near real time.You need to recommend a service to store and query the data.Which two services can you recommend? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
A. ee Explanation section for answer
View answer
Correct Answer: CD
Question #76
HOTSPOT (Drag and Drop is not supported)You are building an Azure web app that will store the Personally Identifiable Information (PII) of employees.You need to recommend an Azure SQL. Database solution for the web app. The solution must meet the following requirements:-Maintain availability in the event of a single datacenter outage.-Support the encryption of specific columns that contain PII.-Automatically scale up during payroll operations.-Minimize costs.What should you include in the recommendations? T
A. ee Explanation section for answer
View answer
Correct Answer: A
Question #77
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You need to deploy resources to host a stateless web app in an Azure subscriptio
A. es
B. o
View answer
Correct Answer: B
Question #78
You have an app named App1 that uses two on-premises Microsoft SQL Server databases named DB1 and DB2.You plan to migrate DB1 and DB2 to AzureYou need to recommend an Azure solution to host DB1 and DB2. The solution must meet the following requirements:-Support server-side transactions across DB1 and DB2.-Minimize administrative effort to update the solution.What should you recommend?
A. wo Azure SQL databases in an elastic pool
B. wo databases on the same Azure SQL managed instance
C. wo databases on the same SQL Server instance on an Azure virtual machine
D. wo Azure SQL databases on different Azure SQL Database servers
View answer
Correct Answer: B
Question #79
You need to design a highly available Azure SQL database that meets the following requirements:-Failover between replicas of the database must occur without any data loss.-The database must remain available in the event of a zone outage.-Costs must be minimized.Which deployment option should you use?
A. zure SQL Database Serverless
B. zure SQL Database Business Critical
C. zure SQL Database Basic
D. zure SQL Database Standard
View answer
Correct Answer: A
Question #80
Your company has the divisions shown in the following table.Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.What should you recommend?
A. onfigure the Azure AD provisioning service
B. nable Azure AD pass-through authentication and update the sign-in endpoint
C. onfigure Supported account types in the application registration and update the sign-in endpoint
D. onfigure Azure AD join
View answer
Correct Answer: C

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number: