Academy Of Technology
CS 712
AZ-305 Exam – Actual Q&As. With Exam Topics
Question #1 Topic 1
You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an
...
Academy Of Technology
CS 712
AZ-305 Exam – Actual Q&As. With Exam Topics
Question #1 Topic 1
You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company
named Fabrikam,
Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed
for the
Microsoft 365 E5 plan.
You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet
the following requirements:
✑ To the manager of the developers, send a monthly email message that lists the access permissions to Application1.
✑ If the manager does not verify an access permission, automatically revoke that permission.
✑ Minimize development effort.
What should you recommend?
A. In Azure Active Directory (Azure AD), create an access review of Application1.
B. Create an Azure Automation runbook that runs the Get-AzRoleAssignment cmdlet.
C. In Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role assignment for the Application1 resources.
D. Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet.
Question #2 Topic 1
You have an Azure subscription. The subscription has a blob container that contains multiple blobs.
Ten users in the ¦nance department of your company plan to access the blobs during the month of April.
You need to recommend a solution to enable access to the blobs during the month of April only.
Which security solution should you include in the recommendation?
A. shared access signatures (SAS)
B. Conditional Access policies
C. certi¦cates
D. access keys
3/1/22, 8:12 PM AZ-305 Exam – Free Actual Q&As, Page 1 | ExamTopics
https://www.examtopics.com/exams/microsoft/az-305/custom-view/ 2/49
Question #3 Topic 1
You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain.
You have an internal web app named WebApp1 that is hosted on-premises. WebApp1 uses Integrated Windows authentication.
Some users work remotely and do NOT have VPN access to the on-premises network.
You need to provide the remote users with single sign-on (SSO) access to WebApp1.
Which two features should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Azure AD Application Proxy
B. Azure AD Privileged Identity Management (PIM)
C. Conditional Access policies
D. Azure Arc
E. Azure AD enterprise applications
F.
Azure Application Gateway
Question #4 Topic 1
You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group1. Group1 is con¦gured for
assigned membership. Group1 has 50 members, including 20 guest users.
You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:
✑ The evaluation must be repeated automatically every three months.
✑ Every member must be able to report whether they need to be in Group1.
✑ Users who report that they do not need to be in Group1 must be removed from Group1 automatically.
✑ Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.
What should you include in the recommendation?
A. Implement Azure AD Identity Protection.
B. Change the Membership type of Group1 to Dynamic User.
C. Create an access review.
D. Implement Azure AD Privileged Identity Management (PIM).
3/1/22, 8:12 PM AZ-305 Exam – Free Actual Q&As, Page 1 | ExamTopics
https://www.examtopics.com/exams/microsoft/az-305/custom-view/ 3/49
Question #5 Topic 1
HOTSPOT -
You plan to deploy Azure Databricks to support a machine learning application. Data engineers will mount an Azure Data Lake Storage account to
the Databricks ¦le system. Permissions to folders are granted directly to the data engineers.
You need to recommend a design for the planned Databrick deployment. The solution must meet the following requirements:
✑ Ensure that the data engineers can only access folders to which they have permissions.
✑ Minimize development effort.
✑ Minimize costs.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
3/1/22, 8:12 PM AZ-305 Exam – Free Actual Q&As, Page 1 | ExamTopics
https://www.examtopics.com/exams/microsoft/az-305/custom-view/ 4/49
Question #6 Topic 1
HOTSPOT -
You plan to deploy an Azure web app named App1 that will use Azure Active Directory (Azure AD) authentication.
App1 will be accessed from the internet by the users at your company. All the users have computers that run Windows 10 and are joined to Azure
AD.
You need to recommend a solution to ensure that the users can connect to App1 without being prompted for authentication and can access App1
only from company-owned computers.
What should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Question #7 Topic 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that
might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is being deployed and con¦gured for on-premises to
Azure connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network tra¨c to identify whether packets are being allowed or denied to the virtual machines.
Solution: Use Azure Tra¨c Analytics in Azure Network Watcher to analyze the network tra¨c.
Does this meet the goal?
A. Yes
B. No
3/1/22, 8:12 PM AZ-305 Exam – Free Actual Q&As, Page 1 | ExamTopics
https://www.examtopics.com/exams/microsoft/az-305/custom-view/ 5/49
Question #8 Topic 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that
might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and con¦gured for on-premises to Azure
connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network tra¨c to identify whether packets are being allowed or denied to the virtual machines.
Solution: Use Azure Advisor to analyze the network tra¨c.
Does this meet the goal?
A. Yes
B. No
Question #9 Topic 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that
might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and con¦gured for on-premises to Azure
connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network tra¨c to identify whether packets are being allowed or denied to the virtual machines.
Solution: Use Azure Network Watcher to run IP §ow verify to analyze the network tra¨c.
Does this meet the goal?
A. Yes
B. No
3/1/22, 8:12 PM AZ-305 Exam – Free Actual Q&As, Page 1 | ExamTopics
https://www.examtopics.com/exams/microsoft/az-305/custom-view/ 6/49
Question #10 Topic 1
DRAG DROP -
You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016 and Linux.
You need to use Azure Monitor to design an alerting strategy for security-related events.
Which Azure Monitor Logs tables should you query? To answer, drag the appropriate tables to the correct log types. Each table may be used once,
more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:
Question #11 Topic 1
You are designing a large Azure environment that will contain many subscriptions.
You plan to use Azure Policy as part of a governance solution.
To which three scopes can you assign Azure Policy de¦nitions? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Azure Active Directory (Azure AD) administrative units
B. Azure Active Directory (Azure AD) tenants
C. subscriptions
D. compute resources
E. resource groups
F.
management groups
3/1/22, 8:12 PM AZ-305 Exam – Free Actual Q&As, Page 1 | ExamTopics
https://www.examtopics.com/exams/microsoft/az-305/custom-view/ 7/49
Question #12 Topic 1
DRAG DROP -
Your on-premises network contains a server named Server1 that runs an ASP.NET application named App1.
You have a hybrid deployment of Azure Active Directory (Azure AD).
You need to recommend a solution to ensure that users sign in by using their Azure AD account and Azure Multi-Factor Authentication (MFA) when
they connect to App1 from the internet.
Which three features should you recommend be deployed and con¦gured in sequence? To answer, move the appropriate features from the list of
features to the answer area and arrange them in the correct order.
Select and Place:
Question #13 Topic 1
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your
Azure subscription.
What should you include in the recommendation?
A. Azure Activity Log
B. Azure Advisor
C. Azure Analysis Services
D. Azure Monitor action groups
Topic 2 - Question Set 2
3/1/22, 8:12 PM AZ-305 Exam – Free Actual Q&As, Page 1 | ExamTopics
https://www.examtopics.com/exams/microsoft/az-305/custom-view/ 8/49
Question #1 Topic 2
You have 100 servers that run Windows Server 2012 R2 and host Microsoft SQL Server 2014 instances. The instances host databases that have
the following characteristics:
✑ Stored procedures are implemented by using CLR.
✑ The largest database is currently 3 TB. None of the databases will ever exceed 4 TB.
You plan to move all the data from SQL Server to Azure.
You need to recommend a service to host the databases. The solution must meet the following requirements:
✑ Whenever possible, minimize management overhead for the migrated databases.
✑ Ensure that users can authenticate by using Azure Active Directory (Azure AD) credentials.
✑ Minimize the number of database changes required to facilitate the migration.
What should you include in the recommendation?
A. Azure SQL Database elastic pools
B. Azure SQL Managed Instance
C. Azure SQL Database single databases
D. SQL Server 2016 on Azure virtual machines
Question #2 Topic 2
You have an Azure subscription that contains an Azure Blob Storage account named store1.
You have an on-premises ¦le server named Server1 that runs Windows Server 2016. Server1 stores 500 GB of company ¦les.
You need to store a copy of the company ¦les from Server1 in store1.
Which two possible Azure services achieve this goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. an Azure Logic Apps integration account
B. an Azure Import/Export job
C. Azure Data Factory
D. an Azure Analysis services On-premises data gateway
E. an Azure Batch account
Question #3 Topic 2
You have an Azure subscription that contains two applications named App1 and App2. App1 is a sales processing application. When a transaction
in App1 requires shipping, a message is added to an Azure Storage account queue, and then App2 listens to the queue for relevant transactions.
In the future, additional applications will be added that will process some of the shipping requests based on the speci¦c details of the
transactions.
You need to recommend a replacement for the storage account queue to ensure that each additional application will be able to read the relevant
transactions.
What should you recommend?
A. one Azure Data Factory pipeline
B. multiple storage account queues
C. one Azure Service Bus queue
D. one Azure Service Bus topic
3/1/22, 8:12 PM AZ-305 Exam – Free Actual Q&As, Page 1 | ExamTopics
https://www.examtopics.com/exams/microsoft/az-305/custom-view/ 9/49
Question #4 Topic 2
HOTSPOT -
You need to design a storage solution for an app that will store large amounts of frequently used data. The solution must meet the following
requirements:
✑ Maximize data throughput.
✑ Prevent the modi¦cation of data for one year.
✑ Minimize latency for read and write operations.
Which Azure Storage account type and storage service should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
3/1/22, 8:12 PM AZ-305 Exam – Free Actual Q&As, Page 1 | ExamTopics
https://www.examtopics.com/exams/microsoft/az-305/custom-view/ 10/49
Question #5 Topic 2
HOTSPOT -
You have an Azure subscription that contains the storage accounts shown in the following table.
You plan to implement two new apps that have the requirements shown in the following table.
Which storage accounts should you recommend using for each app? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
3/1/22, 8:12 PM AZ-305 Exam – Free Actual Q&As, Page 1 | ExamTopics
https://www.examtopics.com/exams/microsoft/az-305/custom-view/ 11/49
Question #6 Topic 2
You are designing an application that will be hosted in Azure.
The application will host video ¦les that range from 50 MB to 12 GB. The application will use certi¦cate-based authentication and will be available
to users on the internet.
You need to recommend a storage option for the video ¦les. The solution must provide the fastest read performance and must minimize storage
costs.
What should you recommend?
A. Azure Files
B. Azure Data Lake Storage Gen2
C. Azure Blob Storage
D. Azure SQL Database
Question #7 Topic 2
You are designing a SQL database solution. The solution will include 20 databases that will be 20 GB each and have varying usage patterns.
You need to recommend a database platform to host the databases. The solution must meet the following requirements:
✑ The solution must meet a Service Level Agreement (SLA) of 99.99% uptime.
✑ The compute resources allocated to the databases must scale dynamically.
✑ The solution must have reserved capacity.
Compute charges must be minimized.
What should you include in the recommendation?
A. an elastic pool that contains 20 Azure SQL databases
B. 20 databases on a Microsoft SQL server that runs on an Azure virtual machine in an availability set
C. 20 databases on a Microsoft SQL server that runs on an Azure virtual machine
D. 20 instances of Azure SQL Database serverless
[Show More]
