AZ-305 DESIGNING MICROSOFT AZURE

• | P a g e

AZ-305 DESIGNING MICROSOFT AZURE

INFRASTRUCTURE SOLUTIONS POPULAR 2 LATEST

VERSIONS COMPLETE 200 QUESTIONS AND

CORRECT DETAILED ANSWERS (VERIFIED

ANSWERS) |ALREADY GRADED A+

AZ-305 DESIGNING MICROSOFT AZURE INFRASTRUCTURE VERSION A

You plan to deploy an app that will use an Azure Storage account.You need to deploy the storage account. The storage account must meet the

following requirements:✑ Store the data for multiple users.✑ Encrypt

each user's data by using a separate key.✑ Encrypt all the data in the storage account by using customer-managed keys.What should you deploy?

• files in a premium file share storage account
• blobs in a general purpose v2 storage account
• blobs in an Azure Data Lake Storage Gen2 account
• files in a general purpose v2 storage account - ANSWER- B. blobs in

a general purpose v2 storage account

HOTSPOT -You have an Azure App Service web app that uses a system-assigned managed identity.You need to recommend a solution to store the settings of the web app as secrets in an Azure key vault. The

solution must meet the following requirements:✑ Minimize changes to

the app code.✑ Use the principle of least privilege.What should you include in the recommendation? To answer, select the appropriate 1 / 4

• | P a g e

options in the answer area.NOTE: Each correct selection is worth one

point.

Hot Area: - ANSWER- Key Vault references in Application settings

Secrets: Get

You plan to deploy an application named App1 that will run on five Azure virtual machines. Additional virtual machines will be deployed later to run App1.You need to recommend a solution to meet the

following requirements for the virtual machines that will run App1:✑

Ensure that the virtual machines can authenticate to Azure Active Directory (Azure AD) to gain access to an Azure key vault, Azure Logic Apps instances, and an Azure SQL database.✑ Avoid assigning new roles and permissions for Azure services when you deploy additional virtual machines.✑ Avoid storing secrets and certificates on the virtual machines.✑ Minimize administrative effort for managing identities.Which type of identity should you include in the recommendation?

• a system-assigned managed identity
• a service principal that is configured to use a certificate
• a service principal that is configured to use a client secret
• a user-assig - ANSWER- D. a user-assigned managed identity

You have the resources shown in the following table:

CDB1 hosts a container that stores continuously updated operational data.You are designing a solution that will use AS1 to analyze the operational data daily.You need to recommend a solution to analyze the 2 / 4

• | P a g e

data without affecting the performance of the operational data store.What should you include in the recommendation?

• Azure Cosmos DB change feed
• Azure Data Factory with Azure Cosmos DB and Azure Synapse

Analytics connectors

• Azure Synapse Link for Azure Cosmos DB
• Azure Synapse Analytics with PolyBase data loading - ANSWER- C.

Azure Synapse Link for Azure Cosmos DB

HOTSPOT -

You deploy several Azure SQL Database instances.You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Hot Area: - ANSWER- 90 days

730 days

You have an application that is used by 6,000 users to validate their vacation requests. The application manages its own credential store.Users must enter a username and password to access the application. The application does NOT support identity providers.You plan to upgrade the application to use single sign-on (SSO) 3 / 4

• | P a g e

authentication by using an Azure Active Directory (Azure AD) application registration.Which SSO method should you use?

• header-based

B. SAML

• password-based
• OpenID Connect - ANSWER- C. password-based

HOTSPOT -

You have an Azure subscription that contains a virtual network named VNET1 and 10 virtual machines. The virtual machines are connected to

VNET1.

You need to design a solution to manage the virtual machines from the

internet. The solution must meet the following requirements:

✑ Incoming connections to the virtual machines must be authenticated by using Azure Multi-Factor Authentication (MFA) before network connectivity is allowed.✑ Incoming connections must use TLS and connect to TCP port 443.✑ The solution must support RDP and SSH.What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area: - ANSWER- Just-in-time (JIT) VN access

A conditional Access policy that has Cloud Apps assignment set to Azure Windows VM Sign-In

• / 4