Microsoft Azure Infrastructure Solutions: AZ-305 Sample Questions

Candidates should study AZ-305: Designing Microsoft Azure Infrastructure Solutions if they have expertise in creating cloud and hybrid solutions that use Microsoft Azure, including computation, network, storage, monitoring, and security. Among other responsibilities, this position entails consulting stakeholders and translating business requirements into designs for secure, scalable, and reliable Azure solutions. An Azure Solutions Architect additionally works with administrators, developers, and other roles involved in the deployment of Azure solutions. The article provides a list of Microsoft Azure Infrastructure Solutions: AZ-305 Sample Questions that cover core exam topics including –

• Design Identity, Governance, and Monitoring Solutions
• Design Data Storage Solutions
•  Design Business Continuity Solutions
• Design Infrastructure Solutions

Advanced Sample Questions

Which Azure service is used to provide a scalable, fully managed NoSQL database?

• a. Azure Cosmos DB
• b. Azure SQL Database
• c. Azure Database for MySQL
• d. Azure Database for PostgreSQL

Answer: a. Azure Cosmos DB

Explanation: Azure Cosmos DB is a fully managed NoSQL database service that provides scalability, high availability, and global distribution. It supports a variety of data models, including document, key-value, graph, and column-family.

Which Azure service is used to monitor and diagnose issues across applications and infrastructure?

• a. Azure Monitor
• b. Azure Log Analytics
• c. Azure Application Insights
• d. Azure Service Health

Answer: a. Azure Monitor

Explanation: Azure Monitor is a platform for monitoring and diagnosing issues across applications and infrastructure. It provides a centralized location for collecting and analyzing telemetry data from a variety of sources, including applications, infrastructure, and Azure services.

Which Azure service is used to manage the configuration and deployment of virtual machines?

• a. Azure Resource Manager
• b. Azure Virtual Machines
• c. Azure Backup
• d. Azure Site Recovery

Answer: a. Azure Resource Manager

Explanation: Azure Resource Manager is a service for managing the configuration and deployment of resources in Azure. It provides a way to organize resources into resource groups, apply tags for easy searching, and create templates for deploying resources in a repeatable way.

Which Azure service is used to create and manage virtual networks?

• a. Azure Virtual Machines
• b. Azure Site Recovery
• c. Azure Backup
• d. Azure Virtual Network

Answer: d. Azure Virtual Network

Explanation: Azure Virtual Network is a service for creating and managing virtual networks in Azure. It provides a way to securely connect virtual machines, applications, and other services within a single virtual network, or across multiple virtual networks.

Which Azure service is used to provide a fully managed platform for running and scaling containerized applications?

• a. Azure Kubernetes Service
• b. Azure Container Instances
• c. Azure Container Registry
• d. Azure Batch

Answer: a. Azure Kubernetes Service

Explanation: Azure Kubernetes Service is a fully managed platform for running and scaling containerized applications. It provides a way to deploy and manage containerized applications using Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications.

Which Azure service is used to provide an identity and access management solution for applications and services?

• a. Azure Active Directory
• b. Azure Key Vault
• c. Azure Security Center
• d. Azure Information Protection

Answer: a. Azure Active Directory

Explanation: Azure Active Directory is a cloud-based identity and access management solution that provides a way to authenticate and authorize users for applications and services. It provides a centralized location for managing users and groups, enforcing access policies, and enabling single sign-on.

Which Azure service is used to automate the deployment and management of infrastructure resources?

• a. Azure DevOps
• b. Azure Resource Manager
• c. Azure Automation
• d. Azure Logic Apps

Answer: b. Azure Resource Manager

Explanation: Azure Resource Manager is a service for managing the configuration and deployment of resources in Azure. It provides a way to organize resources into resource groups, apply tags for easy searching, and create templates for deploying resources in a repeatable way.

Which Azure service is used to provide a scalable, fully managed relational database service?

• a. Azure Cosmos DB
• b. Azure SQL Database
• c. Azure Database for MySQL
• d. Azure Database for PostgreSQL

Answer: b. Azure SQL Database

Explanation: Azure SQL Database is a fully managed relational database service that provides scalability, high availability, and automatic backup and recovery. It supports SQL Server functionality and is compatible with a variety of tools and frameworks.

Which Azure service is used to manage secrets and keys used for authentication and encryption?

• a. Azure Active Directory
• b. Azure Key Vault
• c. Azure Security Center
• d. Azure Information Protection

Answer: b. Azure Key Vault

Explanation: Azure Key Vault is a service for managing secrets and keys used for authentication and encryption. It provides a way to securely store and manage cryptographic keys, certificates, and secrets, and enables the use of keys and secrets in applications and services.

Which Azure service is used to provide a fully managed messaging service for asynchronous communication between applications and services?

• a. Azure Service Bus
• b. Azure Event Hubs
• c. Azure Notification Hubs
• d. Azure Relay

Answer: a. Azure Service Bus

Explanation: Azure Service Bus is a fully managed messaging service that provides a way to decouple applications and services for asynchronous communication. It supports a variety of messaging patterns, including point-to-point, publish-subscribe, and request-response.

Basic Sample Questions

Q1) You have a bespoke application called Application1 in your Azure subscription. Application1 was created by Fabrikam, Ltd., a third-party business. Role-based access control (RBAC) permissions were given to Fabrikam developers for the Application1 components. Microsoft 365 E5 is licenced for all users. You must provide a remedy to determine whether the Fabrikam developers still need access to Application1. The answer must adhere to the following criteria:

Send a monthly email with a list of Application1 access permissions to the manager of the developers. Automatically withdraw an access authorization if the manager doesn’t confirm it. cut back on development work. What ought to you suggest?

• A. Create an application1 access review in Azure Active Directory (Azure AD).
• B. Develop a runbook for Azure Automation that executes the Get-AzRoleAssignment cmdlet.
• C. Create a unique role assignment for the Application1 resources in Azure Active Directory (Azure AD) Privileged Identity Management.
• D. Develop a runbook for Azure Automation that executes the Get-AzureADUserAppRoleAssignment cmdlet.

Correct Answer: A

Q2)You have a subscription to Azure. The subscription has a blob container with several blobs inside of it. During the month of April, ten users from your company’s financial division want to access the data. To allow access to the blobs only during the month of April, you must suggest a solution. Which security measure ought to be suggested in the recommendation?

• A. shared access signatures (SAS)
• B. Conditional Access policies
• C. certificates
• D. access keys

Correct Answer: A

Q3)You have an on-premises Active Directory domain that is synchronised with an Azure Active Directory (Azure AD) tenant. WebApp1 is an internal web application that is hosted on your premises. WebApp1 makes use of Windows Integrated authentication. Some users access the on-premises network via remote access but do not have VPN access. You must grant single sign-on (SSO) access to WebApp1 to the remote users. What two features ought to be incorporated into the solution? Each right response offers a piece of the answer.

• A. Azure AD Application Proxy
• B. Azure AD Privileged Identity Management (PIM)
• C. Conditional Access policies
• D. Azure Arc
• E. Azure AD enterprise applications
• F. Azure Application Gateway

Correct Answer: A and C

Q4)Several virtual machines are deployed by your business both on-premises and on Azure. ExpressRoute is being set up and deployed for connectivity from on-premises to Azure. There are problems with network connectivity on certain virtual computers. To determine whether packets are being accepted or blocked to the virtual machines, you must evaluate the network traffic. Use Azure Traffic Analytics in Azure Network Watcher to examine network traffic as a solution. Is the objective being met?

• A. Yes
• B. No

Correct Answer: B

Q5)Several virtual machines are deployed by your business both on-premises and on Azure. ExpressRoute is installed and set up for connectivity from on-premises to Azure. There are problems with network connectivity on certain virtual computers. To determine whether packets are being accepted or blocked to the virtual machines, you must evaluate the network traffic. Use Azure Advisor to examine network traffic as a solution. Is the objective being met?

• A. Yes
• B. No

Correct Answer: B

Q6)You are creating a sizable Azure environment with numerous subscriptions. As a component of a governance solution, you intend to employ Azure Policy. Which three scopes are available for Azure Policy definitions assignment? Each accurate response offers an entire resolution.

• A. Azure Active Directory (Azure AD) administrative units
• B. Azure Active Directory (Azure AD) tenants
• C. subscriptions
• D. compute resources
• E. resource groups
• F. management groups

Correct Answer: ACF

Q7)To create a monthly report of all new Azure Resource Manager (ARM) resource deployments in your Azure subscription, you must suggest a solution. What should the recommendation contain in Microsoft Azure Infrastructure Solutions: AZ-305 ?

• A. Azure Activity Log
• B. Azure Advisor
• C. Azure Analysis Services
• D. Azure Monitor action groups

Correct Answer: A

Q8)To create a monthly report of all new Azure Resource Manager (ARM) resource deployments in your Azure subscription, you must suggest a solution. What should the recommendation contain?

• A. an Azure Logic Apps integration account
• B. an Azure Import/Export job
• C. Azure Data Factory
• D. an Azure Analysis services On-premises data gateway
• E. an Azure Batch account

Correct Answer: B and C

Q9)You have a subscription to Azure that includes the programmes App1 and App2. App1 is a programme for processing sales. When an App1 transaction needs to be ship, a message is put to a queue in an Azure Storage account, and App2 scans the queue for pertinent transactions. Additional programmes will be implement in the future that will handle some shipping requests based on the particulars of the transactions. For each additional application to be able to read the pertinent transactions, you must suggest a replacement for the storage account queue. What ought to you suggest?

• A. one Azure Data Factory pipeline
• B. multiple storage account queues
• C. one Azure Service Bus queue
• D. one Azure Service Bus topic

Correct Answer: D

Q10)You are creating a programme that will run on Azure. The programme will store video files with sizes varying from 50 MB to 12 GB. Users will be able to access the application online and it will employ certificate-based authentication. You must suggest a location for the video files to be stored. The solution must minimise storage costs while offering the quickest read speed. What ought to you suggest?

• A. Azure Files
• B. Azure Data Lake Storage Gen2
• C. Azure Blob Storage
• D. Azure SQL Database

Correct Answer: C

Q11)A solution for the Azure IoT Hub that will contain 50,000 IoT devices is what you are designing. Temperature, device ID, and time data will all be stream by each device. Every second, 50,000 records will be written on average. Near real-time visualisation of the data will be use. You must suggest a service that can store and search the data. Which two services would you suggest? Each accurate response offers an entire resolution.

• A. Azure Table Storage
• B. Azure Event Grid
• C. Azure Cosmos DB SQL API
• D. Azure Time Series Insights

Correct Answer: C and D

Q12)To host a stateless web application under an Azure subscription, you must deploy resources. The answer must adhere to the following criteria:
Make the entire.NET framework available. Give backup in case an Azure region fails. Give administrators access to the operating system so they can install the dependencies for special applications. Solution: Along with an Azure Application Gateway, you deploy two Azure virtual machines to two different Azure regions. Is the objective being met in Microsoft Azure Infrastructure Solutions: AZ-305 ?

• A. Yes
• B. No

Correct Answer: B

Q13) To host a stateless web application in an Azure subscription, you must deploy resources. The answer must adhere to the following criteria:
Make the entire.NET framework available. Give backup in case an Azure region fails. Give administrators access to the operating system so they can install the dependencies for special applications. Solution: You set up an Azure Traffic Manager profile and deploy two Azure virtual machines to two different Azure regions. Is the objective being met?

• A. Yes
• B. No

Correct Answer: A

Q14) On a virtual machine hosted by Azure, you have SQL Server. Every night, a batch process is use to write data to the databases. For the data, you must suggest a disaster recovery plan. The answer must adhere to the following criteria:

• Offer the capacity to bounce back in the event of a local outage.

• Support automated recovery, a recovery point target (RPO) of 24 hours, and a recovery time objective (RTO) of 15 minutes. minimise expenses. What should the recommendation contain?

• A. Azure virtual machine availability sets
• B. Azure Disk Backup
• C. an Always On availability group
• D. Azure Site Recovery

Correct Answer: D

Q15)A SQL database design is what you’re doing. Twenty 20 GB databases with various consumption patterns will be part of the solution. You must suggest a database hosting platform for the databases. The answer must adhere to the following criteria: A 99.99% uptime Service Level Agreement (SLA) must be met by the solution. The databases’ allotted computing resources must scale dynamically. There must be reserve capacity in the solution. Reduced compute costs are require. What should the recommendation contain in Microsoft Azure Infrastructure Solutions: AZ-305 ?

• A. 20 Azure SQL databases in an elastic pool
• B. An availability set of 20 databases on a Microsoft SQL server running on an Azure virtual machine
• C. A Microsoft SQL server with 20 databases that is running on an Azure virtual machine
• D. 20 serverless Azure SQL Database instances.

Correct Answer: A