๐ŸŽ„

CertoMetrics - 15% OFF Special Discount Offer - Ends In:

0d 00h 00m 00s
Coupon code: SALE2026

Microsoft Designing Microsoft Azure Infrastructure Solutions (AZ-305)

Get full access to the updated question bank and confidently prepare for your exam.

Vendor

Microsoft

Certification

Infrastructure

Content

295 Qs

Status

Verified

Updated

15 hours ago

Test the Practice Engine

Experience our interactive testing environment with free demo questions

Launch Free Demo
Best Value Bundle

Premium Bundle

Complete Success Suite

$83 $49

Save $34 Instantly

  • โœ“
    Full PDF + Interactive Engine Everything you need to pass
  • โœ“
    All Advanced Question Types Drag & Drop, Hotspots, Case Studies
  • โœ“
    Priority 24/7 Expert Support Direct line to certification leads
  • โœ“
    90 Days Free Priority Updates Stay current as exams change

Success Metric

98.4% Pass Rate

Verified by 15k+ Students
Secure Checkout
Popular

Standard Simulation

Practice Engine

$44

One-Time Payment

  • Web-Based (Zero Install)
  • Real Testing Environment Virtual & Practice Modes
  • Interactive Engine Drag & Drop, Hotspots
  • 60 Days Free Updates

Compatible with All Devices

Chrome
Verified Secure Checkout

Basic Tier

PDF Study Guide

$39

Digital Access

  • โœ“ Exam Questions (PDF)
  • โœ“ Mobile Friendly
  • โœ“ 60 Days Updates
Download Free Sample PDF

Verified 59-Question Preview (AZ-305)

Secure Checkout

Verified Community

The CertoMetrics Standard.

Recommend the #1 platform for verified Microsoft certification resources.

Success Network

Help a Colleague Succeed.

Invite a peer to get their own updated AZ-305 prep kit.

Exam Overview

The AZ-305: Designing Microsoft Azure Infrastructure Solutions exam is a pivotal step towards achieving the prestigious Microsoft Certified: Azure Solutions Architect Expert certification. This exam validates your advanced ability to design robust, scalable, and secure Azure solutions that meet complex business requirements. You'll demonstrate expertise in translating business needs into well-architected cloud designs, covering areas like identity, governance, data storage, business continuity, and infrastructure. Earning this certification signifies your mastery in leveraging Azure's full capabilities to drive organizational success, enhance operational efficiency, and optimize cloud investments. It's a testament to your strategic thinking and technical acumen, positioning you as a highly valued expert in the rapidly evolving cloud landscape, crucial for any enterprise adopting Azure.

Questions

40-60

Passing Score

700/1000

Duration

120 Minutes

Difficulty

Expert

Level

Expert

Skills Measured

Design identity, governance, and monitoring solutions
Design data storage solutions
Design business continuity solutions
Design infrastructure solutions
Design a migration strategy

Career Path

Target Roles

Azure Solutions Architect Cloud Architect Senior Azure Engineer

Common Questions

Is the material up to date?

Yes. We update our question bank weekly to match the latest Microsoft standards. You get free updates for 90 days.

What format do I get?

You get instant access to both the **PDF** (for reading) and our **Premium Test Engine** (for exam simulation).

Is there a guarantee?

Absolutely. If you fail the AZ-305 exam using our materials, we offer a full money-back guarantee.

When do I get the download?

Instantly. The download link is available in your dashboard immediately after payment is confirmed.

Free Study Guide Samples

Previewing updated AZ-305 bank (59 Questions).

QUESTION 1

Your on-premises network contains an Active Directory Domain Services (AD DS) forest. The forest contains servers that run Windows Server. The servers contain file shares that replicate by using Distributed File System (DFS) Replication.

You have multiple remote Windows 11 devices that connect to the on-premises network by using Point-to-Site (P2S) VPN and access the file shares by using drive mappings.

You have an Azure subscription. The subscription contains virtual machines that run Windows Server and are configured as domain controllers. The virtual machines replicate to the on-premises forest. The forest syncs with a Microsoft Entra tenant that is linked to the Azure subscription.

You plan to migrate the on-premises file shares to the Azure virtual machines.

You need to recommend a solution for replicating the file shares to Azure and providing the Windows 11 devices with access to the shares. The solution must ensure that the devices can access the shares by using mapped drive letters via TCP port 445.

What should you use to replicate the shares, and what should the devices use to the access the shares? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

 

Technical Scenario Diagram
Answer Canvas

For Access:

REST / HTTPS: These are web protocols. While you can access data over them, Windows 11 devices cannot natively use them to create standard mapped drive letters for file shares without clunky legacy workarounds (like WebDAV).

SMB over QUIC: Even though it violates the text's "TCP 445" rule, it is the only option in the dropdown that natively supports mapping a drive letter securely over the internet.

For Replicate:

Azure Data Share: Used for sharing data securely with external organizations, not for syncing local file servers to Azure VMs.

Azure NetApp Files: A highly performant, fully managed bare-metal file storage service. You cannot use it to replicate data into a Windows Server VM's local storage.

Azure File Sync: The exact Microsoft service designed to sync on-premises Windows Server file shares to Azure.

QUESTION 2

You plan to deploy a microservice named App1.

You need to configure a hosting solution for App1. The solution must meet the following requirements:

  • Scale to zero.
  • Support traffic splitting.
  • Minimize administrative effort and costs.

What should you include in the solution?

A
Azure Spring Apps
B
a Service Fabric cluster
C
Azure App Service
D
Azure Container Apps

Correct Option: D

Azure Container Apps is the ideal solution for this scenario as it directly addresses all the requirements:

  • Scale to zero: Container Apps can automatically scale down to zero instances when there is no incoming traffic, which aligns with the requirement to minimize costs.
  • Traffic splitting: Container Apps supports advanced deployment strategies, including traffic splitting, which allows for phased rollouts and A/B testing by directing a percentage of traffic to different revisions of the application.
  • Minimize administrative effort and costs: It is a fully managed platform that abstracts away infrastructure management, reducing operational overhead and associated costs compared to managing VMs or Kubernetes clusters directly.

Other options are less suitable:

  • Azure Kubernetes Service (AKS) is powerful but involves significant administrative overhead and doesn't inherently scale to zero without additional configuration (e.g., KEDA).
  • Azure App Service (Consumption plan) offers scale to zero but lacks the built-in traffic splitting capabilities of Container Apps.
  • Azure Virtual Machines (VMs) require extensive management and do not scale to zero or easily support traffic splitting without complex additional tooling.


Reference: https://azure.microsoft.com/en-us/products/container-apps/
QUESTION 3

You have an Azure AD tenant that contains a management group named MG1.

You have the Azure subscriptions shown in the following table.

The subscriptions contain the resource groups shown in the following table.

The subscription contains the Azure AD security groups shown in the following table.

The subscription contains the user accounts shown in the following table.

 

You perform the following actions:

  • Assign User3 the Contributor role for Sub1. 
  • Assign Group1 the Virtual Machine Contributor role for MG1. 
  • Assign Group3 the Contributor role for the Tenant Root Group.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

 

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Answer Canvas

Azure Role-Based Access Control (RBAC) permissions are inherited down the resource hierarchy. Roles assigned at a higher scope (like a Management Group or Tenant Root Group) apply to all child resources, including subscriptions and resource groups. The 'Contributor' role provides full access to manage all resources but does not include permission to grant access to others. The 'Virtual Machine Contributor' role allows management of virtual machines. Granting permissions requires specific roles like 'User Access Administrator' or 'Owner'.

โœ… User1 can create a new virtual machine in RG1.
Reasoning: Group1 is assigned the Virtual Machine Contributor role at the MG1 scope. MG1 contains Sub1, and RG1 is within Sub1. Assuming User1 is a member of Group1 (a common inference for exam questions when user permissions are tested via group roles), User1 inherits the Virtual Machine Contributor role for all resources under MG1, including RG1. This role allows creating virtual machines.

โœ… User2 can grant permissions to Group2.
Reasoning: Granting permissions requires roles such as User Access Administrator or Owner. User2's explicit role or group membership (as a member of Group2, which is a member of Group3, inheriting Contributor at Tenant Root Group) does not provide these elevated access management permissions. The Contributor role does not allow granting access.

โœ… User3 can create a storage account in RG2.
Reasoning: User3 is assigned the Contributor role for Sub1. However, RG2 is located within Sub2. Permissions assigned to Sub1 do not extend to sibling subscriptions like Sub2. Therefore, User3 does not have the necessary permissions to create a storage account in RG2.



Reference: https://docs.microsoft.com/azure/role-based-access-control/overview
QUESTION 4

You have an Azure App Service web app named Webapp1 that connects to an Azure SQL database named DB1. Webapp1 and DB1 are deployed to the East US Azure region.

You need to ensure that all the traffic between Webapp1 and DB1 is sent via a private connection.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Answer Canvas

To ensure all traffic between an Azure App Service web app (Webapp1) and an Azure SQL database (DB1) is sent via a private connection, you must implement Azure Private Link for the SQL database and use VNet Integration for the App Service. This setup requires the following:

โœ… 2 subnets Reasoning: A virtual network must be created. Within this virtual network, at least two dedicated subnets are required: one for the Azure App Service VNet integration (as enhanced VNet integration, necessary for Private Link access, requires a dedicated subnet) and another subnet for the Azure SQL Database Private Endpoint. The Private Endpoint will provision a private IP address for DB1 within this dedicated subnet.

โœ… A private DNS zone Reasoning: For Webapp1 to connect to DB1 via its private IP address, it must be able to resolve the FQDN of the SQL database to its private IP. This is achieved by creating an Azure Private DNS zone (e.g., privatelink.database.windows.net) and linking it to the virtual network where Webapp1 is integrated. This Private DNS zone will contain the necessary DNS records to map the SQL database's FQDN to its private IP address within the VNet.



Reference: https://docs.microsoft.com/azure/app-service/overview-vnet-integration https://docs.microsoft.com/azure/private-link/private-endpoint-overview https://docs.microsoft.com/azure/private-link/private-endpoint-dns
QUESTION 5

You plan to deploy an Azure Database for MySQL flexible server named Server1 to the East IJS Azure region.

You need to implement a business continuity solution for Server 1. The solution must minimize downtime in the event of a failover to a paired region.

What should you do?

A
Create a read replica.
B
Implement Geo-redundant backup.
C
Store the database files in Azure premium file shares.
D
Configure native MySQL replication.

Correct Option: B

To minimize downtime during a failover for Azure Database for MySQL flexible server, you should configure read replicas in the paired region. This allows for near real-time data synchronization. In case of a disaster in the primary region, the read replica can be promoted to a standalone server, becoming the new primary with minimal data loss and reduced downtime compared to other disaster recovery strategies. The paired region for East US is West US. Therefore, deploying a read replica in West US addresses the requirement of minimizing downtime in the event of a failover.



Reference: https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-read-replicas
QUESTION 6

You have an Azure subscription. The subscription contains an Azure SQL managed instance that stores employee details, including social security numbers and phone numbers.

You need to configure the managed instance to meet the following requirements:

  • The helpdesk team must see only the last four digits of an employee's phone number.
  • Cloud administrators must be prevented from seeing the employees' social security numbers.

What should you enable for each column in the managed instance? To answer, select the appropriate options in the answer area.

 

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Answer Canvas

โœ… Dynamic data masking
Reasoning: Dynamic Data Masking (DDM) is used to limit sensitive data exposure to non-privileged users by masking it on the fly. It allows specifying custom masking functions, such as partially masking a phone number to show only the last four digits, while allowing the full data to be accessible to privileged users. This directly addresses the requirement for the helpdesk team to see only the last four digits of phone numbers.

โœ… Always Encrypted
Reasoning: Always Encrypted is designed to protect sensitive data at rest and in use. Data is encrypted on the client side before being stored in the database, and the encryption keys never leave the client application. This prevents even database administrators (including cloud administrators) from accessing sensitive data in plain text, as they do not possess the keys required for decryption. This perfectly fulfills the requirement to prevent cloud administrators from seeing social security numbers.



Reference: https://learn.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview?view=azuresql https://learn.microsoft.com/en-us/azure/azure-sql/database/always-encrypted-overview?view=azuresql
QUESTION 7

You have an on-premises database named DB1.

You need to migrate DB1 to an Azure SQL managed instance. The solution must minimize downtime.

What should you use?

A
the Data Migration Assistant (DMA)
B
Azure Migrate
C
Azure Data Box
D
Azure Database Migration Service

Correct Option: D

For migrating an on-premises database to Azure SQL Managed Instance with minimal downtime, the Azure Database Migration Service (DMS) is the recommended tool. DMS supports online migrations, which allow the source database to remain operational during the migration process. This is achieved through continuous synchronization of data changes from the source to the target. The process typically involves setting up an Azure DMS instance, creating a migration project, performing an initial load, and then applying ongoing changes until the cutover. This method significantly minimizes the downtime required for the final switch to the Azure SQL Managed Instance.



Reference: https://learn.microsoft.com/en-us/azure/dms/dms-overview
QUESTION 8

You have an on-premises Microsoft SQL Server 2008 instance that hosts a 50-GB database.

You need to migrate the database to an Azure SQL managed instance. The solution must minimize downtime.

What should you use?

A
Azure Data Studio
B
SQL Server Management Studio (SSMS)
C
Azure Migrate
D
WANdisco LiveData Platform for Azure

Correct Option: A

For migrating SQL Server 2008 databases to Azure SQL Managed Instance with minimal downtime, Azure Database Migration Service (DMS) is the recommended tool. DMS supports online migrations, which involve replicating data changes from the source to the target while the source remains operational, thus minimizing application downtime during the cutover phase. The 50-GB database size is well within the capabilities of DMS. Other methods like backup/restore or transactional replication might involve longer downtime windows or more complex configurations for achieving minimal downtime with SQL Server 2008.



Reference: https://docs.microsoft.com/en-us/azure/dms/tutorial-sql-server-to-managed-instance-online
QUESTION 9

You architect a solution that calculates 3D geometry from height-map data.

You have the following requirements:

  • Perform calculations in Azure.
  • Each node must communicate data to every other node.
  • Maximize the number of nodes to calculate multiple scenes as fast as possible.
  • Require the least amount of effort to implement.

You need to recommend a solution.

Which two actions should you recommend? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A
Create a render farm that uses Azure Batch.
B
Create a render farm that uses virtual machines (VMs).
C
Enable parallel task execution on compute nodes.
D
Create a render farm that uses virtual machine (VM) scale sets.
E
Enable parallel file systems on Azure.

Correct Option: A,C

To meet the requirements of performing calculations in Azure, maximizing node count for speed, and requiring the least implementation effort, Azure Batch and Azure Container Instances (ACI) are the most suitable choices.

Azure Batch (Option A) is a managed service for running large-scale parallel and high-performance computing (HPC) applications. It simplifies the management of computing infrastructure, allowing you to efficiently run workloads by scaling out the number of compute nodes. It supports containerized workloads, aligning with the need for each node to communicate with others and the goal of maximizing nodes for speed.

Azure Container Instances (ACI) (Option C) provide the simplest way to run a container in Azure. It's ideal for event-driven applications or simple tasks that can run in a container. For this scenario, ACI can be used to deploy individual nodes that can communicate with each other, offering a quick and easy implementation, especially if the application is already containerized. It allows for rapid scaling by launching many container instances.

The other options are less suitable:

  • Azure Kubernetes Service (AKS) (Option B) is powerful but introduces significant management overhead and complexity compared to ACI or Batch, thus violating the 'least amount of effort' requirement.
  • Azure Virtual Machine Scale Sets (VMSS) (Option D) is a good option for scaling but requires more manual configuration for inter-node communication and job orchestration compared to Azure Batch, which is specifically designed for such HPC workloads.


Reference: https://learn.microsoft.com/en-us/azure/batch/batch-technical-overview, https://learn.microsoft.com/en-us/azure/container-instances/container-instances-overview
QUESTION 10

You plan to deploy Azure Logic Apps workflows.

You need to configure the hosting environment for the planned deployment. The solution must meet the following requirements:

  • Support virtual networks and private endpoints.
  • Support stateful workloads.
  • Minimize administrative effort and costs.

What should you use?

A
a Consumption resource type in a multi-tenant environment
B
a Standard resource type in App Service Environment
C
a Standard resource type in a single-tenant environment
D
a Consumption resource type in an integration service environment (ISE) environment

Correct Option: C

The question requires hosting Azure Logic Apps with support for virtual networks, private endpoints, stateful workflows, while minimizing administration and cost. Azure Logic Apps Consumption plans are designed for serverless execution, automatically scaling and handling stateful workflows. They offer integration with virtual networks via integration service environments (ISE) or VNet integration features and support private endpoints for secure inbound and outbound connectivity. This plan minimizes administrative effort as Azure manages the underlying infrastructure, and it's cost-effective for variable workloads as you pay per execution and resource consumption, aligning with the requirements for minimizing administrative effort and costs.



Reference: https://learn.microsoft.com/en-us/azure/logic-apps/logic-apps-overview
QUESTION 11

You have an Azure subscription that contains multiple storage accounts.

You assign Azure Policy definitions to the storage accounts.

You need to recommend a solution to meet the following requirements:

  • Trigger on-demand Azure Policy compliance scans.
  • Raise Azure Monitor non-compliance alerts by querying logs collected by Log Analytics.

What should you recommend for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 12

You have an Azure subscription.

You plan to deploy a monitoring solution that will include the following:

  • Azure Monitor Network Insights
  • Application Insights
  • Microsoft Sentinel
  • VM insights

The monitoring solution will be managed by a single team.

What is the minimum number of Azure Monitor workspaces required?

A
1
B
2
C
3
D
4

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 13

You are designing an app that will be hosted on Azure virtual machines that run Ubuntu. The app will use a third-patty email service to send email messages to users. The third-party email service requires that the app authenticate by using an API key.

You need to recommend an Azure Key Vault solution for storing and accessing the API key. The solution must minimize administrative effort.

What should you recommend using to store and access the key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 14

You have the following Azure management group hierarchy:

 

โ€ข A root management group named RootMG

โ€ข Under RootMG1, two child management groups named Group and Group2

โ€ข Under Group2, three Azure subscriptions named Sub1, Sub2, and Sub3

 

Your company has identified the following governance requirements:

 

โ€ข Production and development workloads must inherit a common baseline policy that restricts Azure regions and enforces required resource tags.

โ€ข Sub3 must remain under Group2 for organizational reporting, but the subscription must NOT inherit the common baseline policy.

โ€ข Existing noncompliant resources in Sub1 must be brought into compliance after the common baseline policy is assigned.

โ€ข Access to shared Al resources must support self-service requests, approval, periodic review, and automatic expiration.

โ€ข The team that manages Group1 must minimize policy assignments for RootMG1.

A consultant proposes the following governance solution:

  • Assign an Azure Policy security baseline named Policy1 that contains the region and tagging controls for Group2.
  • Exclude Sub3 from the Policy1 assignment.
  • After assigning Policy1, run remediation tasks for the existing resources in Sub1.
  • Use Microsoft Entra entitlement management for access packages to shared Al resources.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 15

You have an Azure subscription that contains 10 web apps. The apps are integrated with Azure AD and are accessed by users on different project teams.

The users frequently move between projects.

You need to recommend an access management solution for the web apps. The solution must meet the following requirements:

โ€ข The users must only have access to the app of the project to which they are assigned currently.

โ€ข Project managers must verify which users have access to their project's app and remove users that are no longer assigned to their project.

โ€ข Once every 30 days, the project managers must be prompted automatically to verify which users are assigned to their projects.

What should you include in the recommendation?

A
Microsoft Entra Permissions Management
B
Azure AD Identity Protection
C
Microsoft Defender for Identity
D
Azure AD Identity Governance

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 16

You are building an app named Appl that will store structured and unstructured data by using the Azure Table storage REST API.

You need to recommend a solution that meets the following requirements:

โ€ข Provides dedicated throughput and the fastest possible read and write times for the data

โ€ข Minimizes storage costs

What should you include in the recommendation?

A
a premium storage account
B
an Azure Cosmos DB database
C
Azure Cache for Redis
D
a standard storage account

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 17

You have an Azure subscription that contains the SQL servers on Azure shown in the following table.

The subscription contains the storage accounts shown in the following table.

You create the Azure SQL databases shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 18

You have the following Azure subscriptions:

โ€ข Multiple subscriptions that host workloads

โ€ข A dedicated management subscription for the workloads

Your company runs platform and application resources across several subscriptions and has on-premises Azure Arc-enabled virtual machines.

Development teams have permission to deploy monitoring components to their own subscriptions.

Operations teams find it difficult to correlate platform with workload telemetry across Azure and hybrid resources.

You need to recommend a monitoring solution that provides centralized querying for log and trace data. The solution must meet the following requirements:

โ€ข Support the hybrid resources.

โ€ข Prevent the teams from storing monitoring data in disparate locations.

What should you include in the recommendation?

A
Configure Azure Service Health alerts for each subscription.
B
Deploy an Azure Monitor workspace to each workload subscription.
C
Deploy Azure Managed Grafana to the management subscription.
D
Deploy a Log Analytics Workspace to the management subscription.

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 19

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.

The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.

You need to recommend a solution to meet the regulatory requirement.

Solution: You recommend using an Azure Policy initiative to enforce the location of resource groups.

Does this meet the goal?

A
Yes
B
No

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 20

You have an Azure subscription that contains an Azure Cosmos DB for NoSQL account named account1 and an Azure Synapse Analytics workspace named Workspace1.

The account1 account contains a container named Container1 that has the analytical store enabled.

You need to recommend a solution that will process the data stored in Container1 in near-real-time (NRT) and output the results to a data warehouse in Workspace1 by using a runtime engine in the workspace. The solution must minimize data movement

Which pool in Workspace1 should you use?

A
Data Explorer
B
Apache Spark
C
serverless SQL
D
dedicated SQL

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 21

You plan to deploy an infrastructure solution that will contain the following configurations:
โ€ข External users will access the infrastructure by using Azure Front Door.
โ€ข External user access to the backend APIs hosted in Azure Kubernetes Service (AKS) will be controlled by using Azure API Management.
โ€ข External users will be authenticated by an Azure AD B2C tenant that uses OpenID Connect-based federation with a third-party identity provider.
Which function does each service provide? To answer, drag the appropriate functions to the correct services. Each function may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 22

You have an Azure subscription that contains 10 virtual machines. The virtual machines process sensitive user data.

You need to recommend a solution that will email an alert when a virtual machine is deallocated. The solution must minimize administrative effort.

What should you include in the recommendation?

A
Azure Monitor
B
Azure Activity log
C
Azure Service Health
D
Azure Virtual Machine Scale Sets

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 23

You have an Azure AD tenant that contains an administrative unit named MarketingAU. MarketingAU contains 100 users.

You create two users named User1 and User2.

You need to ensure that the users can perform the following actions in MarketingAU:

โ€ข User1 must be able to create user accounts.

โ€ข User2 must be able to reset user passwords.

Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 24

You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains a user named User1 that is assigned a Microsoft Entra ID P2 license.

The tenant has security defaults disabled.

You need to ensure that User1 is prompted for multifactor authentication (MFA) when the user attempts to access Azure resources from untrusted networks. The solution must minimize administrative effort.

What should you use?

A
an identity governance policy
B
a user risk policy
C
a sign-in risk policy
D
an access package

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 25

You have an on-premises file server named Server1 that contains 3 TB of data. You have an Azure subscription that contains an Azure Data Lake Storage Gen2 account named adls1 and an Azure Synapse Analytics dedicated SQL pool named DW1. DW1 contains 5 TB of data.

You need to perform the following tasks:

  • Identify all the files on Server1 and DW1 that were modified during the last 12 months.
  • Copy the modified files to adls1.

The solution must minimize administrative effort

What should you use on each storage location to perform the tasks? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

 

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 26

You are designing a data analytics solution that will use Azure Synapse and Azure Data Lake Storage Gen2.

You need to recommend Azure Synapse pools to meet the following requirements:

โ€ข Ingest data from Data Lake Storage into hash-distributed tables.

โ€ข Implement query, and update data in Delta Lake.

What should you recommend for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 27

You have an Azure-based global media processing solution that generates JSON telemetry files and application logs. Data engineers query the files and logs by using Apache Hadoop-compatible batch analytics jobs.

Background thumbnail generation is implemented as asynchronous workers that read pending work items.

You need to recommend a storage solution for each workload component. The solution must ensure that all data be stored by using Azure services.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 28

You are designing an app that will include two components. The components will communicate by sending messages via a queue.

You need to recommend a solution to process the messages by using a First in, First out (FIFO) pattern.

What should you include in the recommendation?

A
storage queues with a custom metadata setting.
B
Azure Service Bus queues with partitioning enabled.
C
Azure Service Bus queues with sessions enabled.
D
storage queues with a stored access policy

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 29

You have the Azure subscriptions shown in the following table.

A close up of a box
<p>Description automatically generated"></p><p>Contoso.onmicrosft.com contains a user named User 1.</p><p>You need to deploy a solution to protect against ransomware attacks. The solution must meet the following requirements:</p><ul><li>Ensure that all the resources in Sub1 are backed up by using Azure Backup.</li><li>Require that User1 first be assigned a role for Sub2 before the user can make major changes to the backup configuration.</li></ul><p>What should you create in each subscription? To answer, select the appropriate options in the answer area.</p><p>NOTE: Each correct selection is worth one point.</p></p>

</div>




    
<div class= Technical Scenario Diagram

Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 30

You have an Azure subscription.

You plan to deploy five storage accounts that will store block blobs and five storage accounts that will host file shares. The file shares will be accessed by using the SMB protocol.

 

You need to recommend an access authorization solution for the storage accounts. The solution must meet the following requirements:

  • Maximize security.
  • Prevent the use of shared keys.
  • Whenever possible, support time-limited access.

What should you include in the solution? To answer, select the appropriate options in the answer area.

 

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 31

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server 1. Server1 contains an app named App1 that uses AD DS authentication. Remote users access App1 by using a VPN connection to the on-premises network.

You have an Azure AD tenant that syncs with the AD DS domain by using Azure AD Connect

You need to ensure that the remote users can access Appl without using a VPN. The solution must meet the following requirements:

  • Ensure that the users authenticate by using Azure Multi-Factor Authentication (MFA).
  • Minimize administrative effort.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 32

You plan to use an Azure Storage account to store data assets.

You need to recommend a solution that meets the following requirements:

  • Supports immutable storage.
  • Disables anonymous access to the storage account.
  • Supports access control list (ACL)-based permissions.

What should you include in the recommendation?

A
Azure NetApp Files
B
Azure Files
C
Azure Blob Storage
D
Azure Data Lake Storage Gen2

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 33

Your company, named Contoso, Ltd., has an Azure subscription that contains the following resources:

  • An Azure Synapse Analytics workspace named contosoworkspace1.
  • An Azure Data Lake Storage account named contosolake1.
  • An Azure SQL database named contososql1.

The product data of Contoso is copied from contososql1 to contosolake1.

Contoso has a partner company named Fabrikam Inc. Fabrikam has an Azure subscription that contains the following resources:

  • A virtual machine named FabrikamVM1 that runs Microsoft SQL Server 2019
  • An Azure Storage account named fabrikamsa1.

Contoso plans to upload the research data on FabrikamVM1 to contosolake1. During the upload, the research data must be transformed to the data formats used by Contoso.

 

The data in contosolake1 will be analyzed by using contosoworkspace1.

You need to recommend a solution that meets the following requirements:

  • Upload and transform the FabrikamVM1 research data.
  • Provide Fabrikam with restricted access to snapshots of the data in contosoworkspace1.

What should you recommend for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 34

You are designing a virtual machine that will run Microsoft SQL Server and will contain two data disks. The first data disk will store log files, and the second data disk will store data. Both disks are P40 managed disks.

You need to recommend a caching policy for each disk. The policy must provide the best overall performance for the virtual machine while preserving integrity of the SQL data and logs.

Which caching policy should you recommend for each disk? To answer, drag the appropriate policies to the correct disks. Each policy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 35

You are building an Azure web app that will store the Personally Identifiable Information (PII) of employees.

You need to recommend an Azure SQL Database solution for the web app. The solution must meet the following requirements:

โ€ข Maintain availability in the event of a single datacenter outage.

โ€ข Support the encryption of specific columns that contain PII.

โ€ข Automatically scale up during payroll operations.

โ€ข Minimize costs.

What should you include in the recommendations? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 36

A company plans to implement an HTTP-based API to support a web app. The web app allows customers to check the status of their orders.

The API must meet the following requirements:

โœ‘ Implement Azure Functions.

โœ‘ Provide public read-only operations.

โœ‘ Do not allow write operations.

You need to recommend configuration options.

What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 37

You have an Azure Functions microservice app named App1 that is hosted in the Consumption plan. App1 uses an Azure Queue Storage trigger.

You plan to migrate App1 to an Azure Kubernetes Service (AKS) cluster.

You need to prepare the AKS cluster to support App1. The solution must meet the following requirements:

โ€ข Use the same scaling mechanism as the current deployment.

โ€ข Support kubenet and Azure Container Networking Interface (CNI) networking.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct answer is worth one point.

A
Configure the horizontal pod autoscaler.
B
Install Virtual Kubelet.
C
Configure the AKS cluster autoscaler.
D
Configure the virtual node add-on.
E
Install Kubernetes-based Event Driven Autoscaling (KEDA).

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 38

You have two app registrations named App1 and App2 in Azure AD. App1 supports role-based access control (RBAC) and includes a role named Writer.

You need to ensure that when App2 authenticates to access App1, the tokens issued by Azure AD include the Writer role claim.

Which blade should you use to modify each app registration? To answer, drag the appropriate blades to the correct app registrations. Each blade may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 39

You are designing a storage solution that will ingest, store, and analyze petabytes (PBs) of structured, semi-structured, and unstructured text data. The analyzed data will be offloaded to Azure Data Lake Storage Gen2 for long-term retention.

You need to recommend a storage and analytics solution that meets the following requirements:

โ€ข Stores the processed data

โ€ข Provides interactive analytics

โ€ข Supports manual scaling, built-in autoscaling, and custom autoscaling

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 40

You plan to use Azure SQL as a database platform.

You need to recommend an Azure SQL product and service tier that meets the following requirements:

โ€ข Automatically scales compute resources based on the workload demand

โ€ข Provides per second billing

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 41

You have an on-premises Microsoft SQL Server database named DB1.

You have an Azure subscription.

You need to migrate DB1 to an Azure SQL managed instance. The solution must meet the following requirements:

  • Support offloading a read-only workload to a secondary replica.
  • Provide resiliency in the event of an Azure region outage.
  • Support up to 16 TB of storage.
  • Minimize costs.

Which service tier and feature should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

 

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 42

You have an app that generates 50,000 events daily.

You plan to stream the events to an Azure event hub and use Event Hubs Capture to implement cold path processing of the events. The output of Event Hubs Capture will be consumed by a reporting system.

You need to identify which type of Azure storage must be provisioned to support Event Hubs Capture, and which inbound data format the reporting system must support.

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 43

You are designing a data analytics solution in Azure.

You need to recommend a solution that meets the following requirements:

โ€ข Supports multiple analytic languages

โ€ข Integrates with Microsoft Power Bl

โ€ข Works with multiple data stores

โ€ข Supports visualizations

What should you include in the recommendation?

A
Azure Data Lake Storage Gen2
B
Azure Databricks
C
Azure SQL Database
D
Azure HDInsight

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 44

You have an Azure subscription.

You create a storage account that will store documents.

You need to configure the storage account to meet the following requirements:

 

โ€ข Ensure that retention policies are standardized across the subscription.

โ€ข Ensure that data can be purged if the data is copied to an unauthorized location.

 

Which two settings should you enable? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 45

Your company has 50 business units across the globe. The business units operate from 08:00 AM to 06:00 PM from Monday to Friday in their local time zone. Transactions are only

processed during business hours.

You have an Azure subscription.

You plan to deploy an app named Appl that will manage the transactions for the business units. Appl will use a separate Azure SQL database for each business unit.

You need to recommend an Azure SQL Database configuration for Appl. The solution must meet the following requirements:

  • Support Azure Hybrid Benefit licensing.
  • Minimize costs.

What should you recommend?

A
a DTIJ purchasing model and multiple database instances in an elastic pool
B
a vCore purchasing model and multiple single database instances
C
a vCore purchasing model and multiple database instances in an elastic pool
D
a DTU purchasing model and multiple single database instances

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 46

You have a management group named MGI that contains an Azure subscription named Sub1. Sub1 contains the resources shown in the following table.

 

 

You create the Azure Policy definitions shown in the following table.

 

 

You assign Policy1 and Policy2 at the RGI scope.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

 

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 47

You have an Azure subscription that contains an Azure Kubernetes Service (AKS) instance named AKS1. AKS1 hosts microservice-based APIs that are configured to listen on non-default HTTP ports.

You plan to deploy a Standard tier Azure API Management instance named APIM1 that will make the APIs available to external users.

You need to ensure that the AKS1 APIs are accessible to APIM1. The solution must meet the following requirements:

โ€ข Implement MTLS authentication between APIM1 and AKS1.

โ€ข Minimize development effort.

โ€ข Minimize costs.

What should you do?

A
Implement an external load balancer on AKS1.
B
Redeploy APIM1 to the virtual network that contains AKS1.
C
Implement an ExternalName service on AKS1.
D
Deploy an ingress controller to AKS1.

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 48

You have an Azure subscription. The subscription contains virtual machines that run Windows Server.

You are designing a disaster recovery solution that will immediately deploy a new virtual machine when an existing virtual machine

fails. The solution must meet the following requirements:

 

  • New virtual machines must be deployed with all the required configurations in place.
  • Virtual machine deployments must use an infrastructure as code (Iao methodology.
  • New virtual machines must be created by using standard Microsoft disk images.
  • New virtual machines must be authorized by virtual machine administrators.
  • Virtual machine deployments must be managed by using CI/CD pipelines.

You need to recommend which service to use to manage the virtual machine deployment process and which artifact to use to create each virtual machine.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 49

You have an Azure subscription.

You need to deploy a solution that will provide point-in-time restore for blobs in storage accounts that have blob versioning and blob soft delete enabled.

Which type of blob should you create, and what should you enable for the accounts? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 50

You have multiple on-premises networks.

You have multiple Azure subscriptions. Each subscription contains a virtual network that is assigned an IP address space of 172.16.0.0/16. Each virtual network is connected to the on- premises networks by using ExpressRoute.

You plan to deploy a container orchestration solution that will use multiple Azure Kubernetes Service (AKS) clusters. The clusters will be deployed to the existing virtual networks.

You need to recommend a network configuration for the AKS clusters. The solution must meet the following requirements:

 

โ€ข Minimize the number of IP addresses required on each virtual network.

โ€ข Support outbound connectivity to on-premises datacenters.

โ€ข Support Windows node pools.

 

Which AKS network model should you recommend?

A
Kubernete
B
Azure CNI Overlay
C
Azure CNI Powered by Cilium
D
Azure CNI

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 51

You are designing an app that will use Azure Cosmos DB to collate sales from multiple countries.

You need to recommend an API for the app. The solution must meet the following requirements:

โ€ข Support SQL queries.

โ€ข Support geo-replication.

โ€ข Store and access data relationally.

Which API should you recommend?

A
Apache Cassandra
B
PostgreSQL
C
MongoDB
D
NoSQL

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 52

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains three virtual machines that host a web app named Appl. The virtual machines are assigned only private IP addresses.

You need to recommend a solution to evenly distribute the traffic for Appl across the virtual machines. The solution must meet the following requirements:

  • Ensure that Appl is accessible only from VNet1.
  • Minimize administrative effort.

What should you include in the recommendation?

 

A
Azure Traffic Manager
B
Azure Application Gateway
C
Azure Front Door
D
Azure Firewall

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 53

You have an Azure subscription. The subscription contains 100 virtual machines that run Windows Server 2022 and have the Azure Monitor Agent installed.

You need to recommend a solution that meets the following requirements:

โ€ข Forwards JSON-formatted logs from the virtual machines to a Log Analytics workspace

โ€ข Transforms the logs and stores the data in a table in the Log Analytics workspace

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 54

You have an Azure subscription that contains the resources shown in the following table:

Log files from App1 are registered to App1Logs. An average of 120 GB of log data is ingested per day.

You configure an Azure Monitor alert that will be triggered if the App1 logs contain error messages.

You need to minimize the Log Analytics costs associated with App1. The solution must meet the following requirements:

 

โ€ข Ensure that all the log files from App1 are ingested to App1Logs.

โ€ข Minimize the impact on the Azure Monitor alert.

 

Which resource should you modify, and which modification should you perform? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 55

You have an Azure subscription that contains an Azure Data Lake Storage Gen2 account named storage1 and an Azure Synapse Analytics workspace named Workspace1. Workspace1 contains a serverless SQL pool and an Apache Spark poo1.

You need to recommend a disaster recovery solution for storage1.

What should you include in the recommendation?

A
vaulted backup of Azure blobs
B
operational backup of Azure blobs
C
geo-backup in Azure Synapse Analytics
D
asynchronous replication

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 56

You have an Azure subscription that contains an Azure key vault named KV1 and a virtual machine named VM1. VM1 runs Windows Server 2022: Azure Edition.

You plan to deploy an ASP.Net Core-based application named App1 to VM1.

You need to configure App1 to use a system-assigned managed identity to retrieve secrets from KV1. The solution must minimize development effort.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 57

You have a landing zone that contains multiple Azure subscriptions.

You need to automate the deployment of resources to the subscriptions. The solution must meet the following requirements:

โ€ข Support parameters.

โ€ข Support versioning and source control.

Which two options can you use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A
Azure Automation
B
Bicep files
C
Azure Policy
D
Azure Resource Manager (ARM) templates
E
Azure Functions

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 58

You have an Azure subscription named Sub1 that is linked to an Azure AD tenant named contoso.com.

You plan to implement two ASP.NET Core apps named App1 and App2 that will be deployed to 100 virtual machines in Sub1. Users will sign in to App1 and App2 by using their contoso.com credentials.

App1 requires read permissions to access the calendar of the signed-in user. App2 requires write permissions to access the calendar of the signed-in user.

You need to recommend an authentication and authorization solution for the apps. The solution must meet the following requirements:

 

โ€ข Use the principle of least privilege.

โ€ข Minimize administrative effort.

 

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

QUESTION 59

You have five on-premises servers that run Windows Server.

You have an Azure subscription.

you plan to migrate the on-premises servers to Azure by using Azure Migrate.

From the Azure portal, you create an Azure Migrate project.

You need to prepare the environment to discover and assess the on-premises servers. The solution must minimize administrative effort.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

 

Technical Scenario Diagram
Interactive Canvas Locked

Premium Solution Locked

Unlock all 295 answers & explanations

Full Question Bank Locked

You have reached the end of the free study guide preview. Upgrade now to unlock all 295 questions and the full simulation engine.

Customer Reviews

5 / 5
(15,000+ verified)
5
100%
4
0%
3
0%
2
0%
1
0%

Global Community Feedback

DM

David M.

Verified Student

"The practice engine is incredible. It feels exactly like the real testing environment and helped me build so much confidence."

SJ

Sarah J.

Premium Member

"The PDF is very well organized and the explanations for the answers are actually helpful, not just random text."

MC

Michael C.

Verified Buyer

"I was skeptical, but the content is high quality and definitely worth the price. I passed on my first try!"

Need Assistance?

> Our expert support team is available to assist you with any inquiries about our exam materials.

Contact Support
Average response: < 24 Hours

Get Exam Updates

> Subscribe to receive instant notifications on new questions and exclusive flash sales.

* Join 5,000+ students getting weekly updates

Support Chat โ— Active Now

๐Ÿ‘‹ Hi! How can we help you pass your exam?

Enter email to start chatting