What You Must Know About the Microsoft AZ-305 Exam

You have an Azure Active Directory (Azure AD) tenant. All user accounts are synchronized from an on-premises Active Directory domain and are configured for federated authentication. Active Directory Federation Services (AD FS) servers

are published for external connections by using a farm of Web Application Proxy servers.

You need to recommend a solution to monitor the servers that integrate with Azure AD. The solution must meet the following requirements:

1.

Identify any AD FS issues and their potential resolutions.

2.

Identify any directory synchronization configuration issues and their potential resolutions

3.

Notify administrators when there are any issues affecting directory synchronization or AD FS operations.

Which monitoring solution should you recommend for each server type?

To answer, drag the appropriate monitoring solutions to the correct server types. Each monitoring solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:

A company has an on-premises file server cbflserver that runs Windows Server 2019.

Windows Admin Center manages this server. The company owns an Azure subscription.

You need to provide an Azure solution to prevent data loss if the file server fails.

Solution: You decide to register Windows Admin Center in Azure and then configure Azure Backup.

Would this meet the requirement?

A. Yes

B. No

Correct Answer: A

You have an Azure subscription that contains a resource group named RG1.

You have a group named Group1 that is assigned the Contributor role for RG1.

You need to enhance security for the virtual machines in RG1 to meet the following requirements:

1.

Prevent Group1 from assigning external IP addresses to the virtual machines.

2.

Ensure that Group1 can establish an RDP connection to the virtual machines through a shared external IP address.

What should you use to meet each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

You plan provision a High Performance Computing (HPC) cluster in Azure that will use a third-party scheduler.

You need to recommend a solution to provision and manage the HPC cluster node.

What should you include in the recommendation?

A. Azure Lighthouse

B. Azure CycleCloud

C. Azure Purview

D. Azure Automation

Correct Answer: B

You can dynamically provision Azure HPC clusters with Azure CycleCloud. Azure CycleCloud is the simplest way to manage HPC workloads.

Note: Azure CycleCloud is an enterprise-friendly tool for orchestrating and managing High Performance Computing (HPC) environments on Azure.

With CycleCloud, users can provision infrastructure for HPC systems, deploy familiar HPC schedulers, and automatically scale the infrastructure to run jobs efficiently at any scale.

Through CycleCloud, users can create different types of file systems and mount them to the compute cluster nodes to support HPC workloads.

Reference: https://docs.microsoft.com/en-us/azure/cyclecloud/overview

You have an Azure AD tenant that contains an administrative unit named MarketingAU. MarketingAU contains 100 users.

You create two users named User1 and User2.

You need to ensure that the users can perform the following actions in MarketingAU:

User1 must be able to create user accounts.

User2 must be able to reset user passwords.

Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:

Box 1: User Administrator for the MarketingAU

User1 must be able to create user accounts.

User Administrator

Can manage all aspects of users and groups, including resetting passwords for limited admins.

Create users

Etc.

Roles that can be assigned with administrative unit scope

The following Azure AD roles can be assigned with administrative unit scope.

*

Helpdesk Administrator

*

User Administrator

*

Etc.

Box 2: Helpdesk Administrator for the MarketingAU

User2 must be able to reset user passwords.

Helpdesk Administrator

Can reset passwords for non-administrators and Helpdesk Administrators.

Administrative units restrict permissions in a role to any portion of your organization that you define. You could, for example, use administrative units to delegate the Helpdesk Administrator role to regional support specialists, so they can

manage users only in the region that they support.

Reference: https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference https://learn.microsoft.com/en-us/azure/active-directory/roles/admin-units-assign-roles

You need to recommend an Azure Storage Account configuration for two applications named Application1 and Applications. The configuration must meet the following requirements:

1.

Storage for Application1 must provide the highest possible transaction rates and the lowest possible latency.

2.

Storage for Application2 must provide the lowest possible storage costs per GB.

3.

Storage for both applications must be optimized for uploads and downloads.

4.

Storage for both applications must be available in an event of datacenter failure.

What should you recommend ? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point

Hot Area:

Correct Answer:

Box 1: BloblBlobStorage with Premium performance and Zone-redundant storage (ZRS) replication.

BlockBlobStorage accounts: Storage accounts with premium performance characteristics for block blobs and append blobs. Recommended for scenarios with high transactions rates, or scenarios that use smaller objects or require

consistently low storage latency. Premium: optimized for high transaction rates and single-digit consistent storage latency.

Box 2: General purpose v2 with Standard performance.. General-purpose v2 accounts: Basic storage account type for blobs, files, queues, and tables. Recommended for most scenarios using Azure Storage.

You are designing an app that will be hosted on Azure virtual machines that run Ubuntu.

The app will use a third-party email service to send email messages to users. The thirdparty email service requires that the app authenticate by using an API key.

You need to recommend an Azure Key Vault solution for storing and accessing the API key. The solution must minimize administrative effort.

What should you recommend using to store and access the key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

1.

Storage: Secret.

API keys are typically stored as secrets in Azure Key Vault. The key vault can store and manage secrets like API keys, passwords, or database connection strings.

2.

Access: A managed service identity (MSI).

A managed service identity (MSI) is used to give your VM access to the key vault. The advantage of using MSI is that you do not have to manage credentials yourself. Azure takes care of rolling the credentials and ensuring their lifecycle. The

application running on your VM can use its managed service identity to get a token to Azure AD, and then use that token to authenticate to Azure Key Vault.

You have an Azure subscription named Subscription1.

You deploy a Linux virtual machine named VM1 to Subscription1.

You need to monitor the metrics and the logs of VM1.

What should you use?

A. the Azure PerformanceDiagnostics extension

B. Azure Analytic Services

C. Linux Diagnostic Extension (LAD) 10

D. Azure HDinsight

Correct Answer: A

You can use extensions to configure diagnostics on your VMs to collect additional metric data.

The basic host metrics are available, but to see more granular and VM-specific metrics, you need to install the Azure diagnostics extension on the VM. The Azure diagnostics extension allows additional monitoring and diagnostics data to be

retrieved from the VM.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-monitoring

You have an Azure Data Lake Storage account that contains 1,000 10-MB CSV files and an Azure Synapse Analytics dedicated SQL pool named sql1. You need to load the files to sql1. The solution must meet the following requirements:

1.Maximize data load performance.

2.Eliminate the need to define external tables before the data loads.

What should you use?

A. the copy statement

B. PolyBase

C. BCP

D. the sqlBulkcopy object

Correct Answer: B

What should you recommend to meet themonitoring requirements for App2?

A. Microsoft Sentinel

B. Azure Application Insights

C. Container insights

D. VM insights

Correct Answer: B

You are planning an Azure solution that will host production databases for a high- performance application. The solution will include the following components:

1.

Two virtual machines that will run Microsoft SQL Server 2016, will be deployed to different data centers in the same Azure region, and will be part of an Always On availability group.

2.

SQL Server data that will be backed up by using the Automated Backup feature of the SQL Server IaaS Agent Extension (SQLIaaSExtension) You identify the storage priorities for various data types as shown in the following table.

Which storage type should you recommend for each data type? To answer, drag the appropriate storage types to the correct data types. Each storage type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:

You plan to deploy a custom database solution that will have multiple instances as shown in the following table.

Client applications will access database servers by using db.contoso.com.

You need to recommend load balancing services for the planned deployment. The solution must meet the following requirements:

Access to at least one database server must be maintained in the event of a regional outage.

The virtual machines must not connect to the internet directly.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Box 1: Azure Traffic Manager Traffic Manager is a DNS-based traffic load balancer that enables you to distribute traffic optimally to services across global Azure regions, while providing high availability and responsiveness.

Because Traffic Manager is a DNS-based load-balancing service, it load balances only at the domain level. For that reason, it can\’t fail over as quickly as Front Door, because of common challenges around DNS caching and systems not honoring DNS TTLs.

You are designing a point of sale (POS) solution that will be deployed across multiple locations and will use an Azure Databricks workspace in the Standard tier. The solution will include multiple apps deployed to the on-premises network of each location.

You need to configure the authentication method that will be used by the app to access the workspace. The solution must minimize the administrative effort associated with staff turnover and credential management.

What should you configure?

A. a managed identity

B. a service principal

C. a personal access token

Correct Answer: B

You plan to deploy an Azure SQL database that will store Personally Identifiable Information (Pll).

You need to ensure that only privileged users can view the Pll. What should you include in the solution?

A. Transparent Data Encryption (TDE)

B. Data Discovery and Classification

C. dynamic data masking

D. role-based access control (RBAC)

Correct Answer: C

Dynamic data masking limits sensitive data exposure by masking it to non-privileged users.

Dynamic data masking helps prevent unauthorized access to sensitive data by enabling customers to designate how much of the sensitive data to reveal with minimal impact on the application layer. It\’s a policy-based security feature that

hides the sensitive data in the result set of a query over designated database fields, while the data in the database is not changed.

Reference:

https://docs.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview

You have .NeT web service named service1 that has the following requirements:

1.Must read and write to the local file system.

2.Must write to the Windows Application event log.

You need to recommend a solution to host Service1 in Azure .

The solution must meet the following requirements:

1.Minimize maintenance overhead.

2.Minimize costs.

What should you include in the recommendation?

A. an Azure App Service web app

B. an Azure virtual machine scale set

C. an App Service Environment (ASE)

D. an Azure Functions app

Correct Answer: A

https://social.msdn.microsoft.com/Forums/vstudio/en-US/294b9e3e-e89c-4095-b8d0-ee1646e77268/writing-to-local-file-system-from-web-app-in-azure?forum=windowsazurewebsitespreview