View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 61

Which Azure service is best for storing secrets and encryption keys?

1. Azure Monitor
2. Azure Key Vault
3. Azure DNS
4. Azure Files

Correct Answer: 2

Explanation

Azure Key Vault provides secure management of sensitive information such as secrets, certificates, and cryptographic keys. Applications can access these values without storing credentials directly in source code or configuration files. This helps reduce the risk of exposing sensitive information and supports centralized security management. Azure Monitor is used for telemetry, Azure DNS handles name resolution, and Azure Files provides managed file shares. Key Vault is therefore the appropriate architectural service when an application requires secure storage and controlled access to secrets or encryption keys.

Question 62

Which Azure service provides centralized log analysis using KQL?

1. Azure Advisor
2. Azure Monitor
3. Log Analytics workspace
4. Azure Policy

Correct Answer: 3

Explanation

A Log Analytics workspace provides centralized storage and analysis of log data collected from Azure resources, applications, and supported external environments. Administrators and architects can use Kusto Query Language, or KQL, to query and analyze this information. This can help identify performance issues, operational problems, and security events. Azure Advisor provides recommendations, Azure Monitor provides broader monitoring capabilities, and Azure Policy handles governance. A Log Analytics workspace is therefore the most appropriate component when detailed centralized log analysis using KQL is required.

Question 63

Which Azure database is best for a globally distributed application?

1. Azure Cosmos DB
2. Azure Files
3. Azure Queue Storage
4. Azure Managed Disks

Correct Answer: 1

Explanation

Azure Cosmos DB is designed for globally distributed applications that require low-latency access to data. It supports replication across multiple Azure regions and provides several consistency options. This allows architects to design applications that serve users from different geographic locations while maintaining appropriate performance and availability. Azure Files provides file shares, Queue Storage handles messages, and Managed Disks provide virtual machine storage. Cosmos DB is therefore the appropriate database service when global distribution and low-latency data access are important architectural requirements.

Question 64

Which Azure service provides managed backups for Azure workloads?

1. Azure Site Recovery
2. Azure Backup
3. Azure Front Door
4. Azure Traffic Manager

Correct Answer: 2

Explanation

Azure Backup provides managed backup capabilities for supported Azure and hybrid workloads. It creates recovery points that can be used to restore protected data after accidental deletion, corruption, or other data-loss events. Backup focuses on data protection and restoration rather than continuously replicating an application for disaster recovery. Site Recovery is designed primarily for workload replication and failover. Front Door provides global application delivery, while Traffic Manager performs DNS-based routing. Azure Backup is therefore the correct choice for managed backup and data recovery.

Question 65

Which service helps replicate workloads to another Azure region for disaster recovery?

1. Azure Backup
2. Azure Advisor
3. Azure Site Recovery
4. Azure Monitor

Correct Answer: 3

Explanation

Azure Site Recovery helps organizations replicate supported workloads and coordinate disaster recovery between locations. It can replicate Azure virtual machines and supported on-premises workloads to a secondary location and provide failover capabilities when the primary environment becomes unavailable. Azure Backup focuses on backup and restoration rather than continuous workload replication. Advisor provides recommendations, while Monitor collects telemetry. Site Recovery is therefore the appropriate service when an architecture requires workload replication and coordinated failover to support disaster recovery.

Question 66

Which Azure feature helps keep applications available during planned VM maintenance?

1. Availability Sets
2. Azure DNS
3. Azure Files
4. Azure Data Box

Correct Answer: 1

Explanation

Availability Sets help distribute virtual machines across fault domains and update domains within an Azure datacenter. This arrangement reduces the likelihood that planned maintenance or a localized hardware failure will affect every VM instance at the same time. Availability Sets are particularly useful for architectures that use multiple virtual machines and need improved resilience within a datacenter. DNS provides name resolution, Azure Files provides file storage, and Data Box supports physical data transfer. Availability Sets are therefore appropriate for improving VM availability during maintenance events.

Question 67

Which Azure storage option provides geo-replication to a secondary region?

1. LRS
2. ZRS
3. GRS
4. Premium SSD

Correct Answer: 3

Explanation

Geo-redundant storage, or GRS, replicates Azure Storage data from the primary region to a secondary region. This provides additional protection against a major regional failure. LRS keeps copies within a single physical location, while ZRS distributes copies across availability zones in the primary region. Premium SSD is a performance-oriented disk option rather than a geographic redundancy model. GRS is therefore appropriate when an architecture requires storage replication to another Azure region for additional disaster resilience.

Question 68

Which Azure service provides a managed platform for hosting web applications?

1. Azure App Service
2. Azure VPN Gateway
3. Azure Event Grid
4. Azure Storage Explorer

Correct Answer: 1

Explanation

Azure App Service is a managed platform for hosting web applications, APIs, and supported application workloads. It reduces infrastructure management because Azure handles much of the underlying platform, allowing development teams to focus on application deployment and configuration. VPN Gateway provides secure network connectivity, Event Grid routes events, and Storage Explorer is a management tool for storage resources. App Service is therefore the appropriate architectural choice when an organization needs managed hosting for web applications without directly managing the underlying operating system.

Question 69

Which Azure service can automatically scale serverless code based on workload demand?

1. Azure DNS
2. Azure Functions
3. Azure Key Vault
4. Azure Data Box

Correct Answer: 2

Explanation

Azure Functions provides serverless compute that can automatically scale according to supported workload and hosting plan characteristics. Developers can execute code in response to triggers such as HTTP requests, timers, messages, or events. This model allows teams to focus on application logic while Azure manages the underlying infrastructure. Azure DNS provides name resolution, Key Vault manages secrets, and Data Box supports physical data transfer. Azure Functions is therefore the appropriate service when an architecture requires event-driven serverless execution with managed scaling.

Question 70

Which Azure service provides centralized identity and access management?

1. Azure Monitor
2. Microsoft Entra ID
3. Azure Storage
4. Azure Service Bus

Correct Answer: 2

Explanation

Microsoft Entra ID provides identity and access management for users, applications, and services. It supports authentication, authorization, single sign-on, multifactor authentication, and other identity-related capabilities. Architects can use Entra ID to design centralized identity management across cloud applications and resources. Azure Monitor handles monitoring, Storage provides data services, and Service Bus provides messaging. Microsoft Entra ID is therefore the appropriate choice when an architecture requires centralized management of identities and access to applications and resources.

Question 71

Which Azure service provides recommendations for cost, security, and reliability?

1. Azure Advisor
2. Azure Policy
3. Azure Monitor
4. Azure Resource Health

Correct Answer: 1

Explanation

Azure Advisor analyzes Azure resources and usage patterns and provides personalized recommendations across areas such as cost optimization, security, reliability, performance, and operational excellence. These recommendations help architects identify potential improvements in an existing Azure environment. Azure Policy is used for governance and enforcement, Monitor provides telemetry, and Resource Health reports the condition of individual resources. Advisor is therefore the appropriate service when an organization wants actionable recommendations to improve the cost, security, performance, or reliability of its Azure architecture.

Question 72

Which Azure service provides a managed NoSQL key-value data store?

1. Azure SQL Database
2. Azure Table Storage
3. Azure Files
4. Azure Managed Disks

Correct Answer: 2

Explanation

Azure Table Storage provides a managed NoSQL data store for applications that need to store large amounts of structured, non-relational data using a key-value model. It can be useful when applications require simple, scalable access to entities without the relational features of a traditional SQL database. Azure SQL Database provides relational storage, Azure Files provides shared file storage, and Managed Disks provide persistent VM disks. Azure Table Storage is therefore the appropriate choice for a simple, scalable NoSQL key-value storage architecture.

Question 73

Which Azure service provides asynchronous queue-based messaging?

1. Azure Blob Storage
2. Azure Service Bus
3. Azure DNS
4. Azure Front Door

Correct Answer: 2

Explanation

Azure Service Bus provides enterprise messaging capabilities, including queues and topics. Queues allow producers to send messages that consumers can process independently, helping decouple application components and accommodate differences in processing speed. Service Bus can support reliable asynchronous communication between distributed applications and services. Blob Storage provides object storage, DNS handles name resolution, and Front Door provides global application delivery. Azure Service Bus is therefore the appropriate service when an architecture requires reliable asynchronous queue-based communication.

Question 74

Which Azure service can route application traffic based on health and geographic location?

1. Azure Traffic Manager
2. Azure Files
3. Azure Key Vault
4. Azure Queue Storage

Correct Answer: 1

Explanation

Azure Traffic Manager is a DNS-based traffic routing service that can direct clients to application endpoints using different routing methods. It can use endpoint health information and routing strategies such as geographic routing to determine which endpoint should receive traffic. This makes it useful for multi-region application architectures. Azure Files provides file shares, Key Vault protects secrets, and Queue Storage supports messaging. Traffic Manager is therefore appropriate when architects need DNS-based routing that considers endpoint availability and geographic requirements.

Question 75

Which Azure service protects web applications from common application-layer attacks?

1. Azure Load Balancer
2. Network Security Group
3. Web Application Firewall
4. Azure VPN Gateway

Correct Answer: 3

Explanation

Web Application Firewall, or WAF, protects web applications by inspecting HTTP and HTTPS traffic for common application-layer attack patterns. It can use managed and custom rules to help detect and block malicious requests. WAF is especially useful for applications exposed to internet traffic and can integrate with supported Azure application delivery services. Load Balancer distributes network traffic, NSGs provide network-level filtering, and VPN Gateway provides secure connectivity. WAF is therefore the appropriate security component for protecting web applications against common web-based attacks.

Question 76

Which Azure feature allows private access to supported services through a virtual network?

1. Azure Private Endpoint
2. Public IP address
3. Azure CDN
4. Azure DNS

Correct Answer: 1

Explanation

An Azure Private Endpoint creates a private network interface within a virtual network and provides private connectivity to supported Azure services. The service can therefore be accessed using a private IP address rather than requiring a publicly exposed endpoint. This can improve network isolation and reduce exposure to internet-based access. A public IP provides public connectivity, CDN improves content delivery, and DNS provides name resolution. Azure Private Endpoint is therefore the appropriate architectural feature when private access to an Azure service is required.

Question 77

Which Azure storage option is best for data that is rarely accessed but must remain available?

1. Hot tier
2. Cool tier
3. Archive tier
4. Premium tier

Correct Answer: 2

Explanation

The Cool access tier is designed for data that is accessed less frequently but still needs to remain readily available. It can help reduce storage costs compared with keeping infrequently accessed data in the Hot tier. The Archive tier is intended for data that is rarely accessed and can tolerate longer retrieval times. Premium storage is focused on high-performance scenarios rather than infrequent access. The Cool tier is therefore a suitable architectural choice when data access is infrequent but immediate availability remains important.

Question 78

Which Azure service provides centralized policy enforcement for resource configurations?

1. Azure Advisor
2. Azure Policy
3. Azure Monitor
4. Azure Marketplace

Correct Answer: 2

Explanation

Azure Policy enables organizations to define and enforce governance rules for Azure resources. Policies can audit existing resources or restrict deployments that do not meet organizational requirements. Examples include limiting deployment regions, requiring specific configurations, or restricting resource types. Advisor provides recommendations, Monitor provides telemetry, and Marketplace provides software and service solutions. Azure Policy is therefore the appropriate architectural capability when an organization needs centralized governance and control over resource configurations.

Question 79

Which Azure service provides secure browser-based access to virtual machines?

1. Azure Bastion
2. Azure Traffic Manager
3. Azure Event Grid
4. Azure CDN

Correct Answer: 1

Explanation

Azure Bastion provides managed browser-based RDP and SSH connectivity to virtual machines through the Azure portal. It allows administrators to connect to supported virtual machines without exposing their RDP or SSH management ports directly to the public internet. This can reduce the public attack surface of virtual machine deployments. Traffic Manager handles DNS-based routing, Event Grid routes events, and CDN provides content delivery. Azure Bastion is therefore the appropriate service for secure administrative access to virtual machines through the Azure portal.

Question 80

Which Azure service helps assess on-premises workloads before migration to Azure?

1. Azure Monitor
2. Azure Advisor
3. Azure Migrate
4. Azure Service Health

Correct Answer: 3

Explanation

Azure Migrate provides tools for discovering and assessing on-premises workloads before migration to Azure. It can help organizations understand workload dependencies, estimate Azure readiness, evaluate sizing, and develop migration plans. This assessment process allows architects to identify potential compatibility or capacity concerns before moving workloads. Azure Monitor focuses on telemetry, Advisor provides optimization recommendations, and Service Health reports Azure platform events. Azure Migrate is therefore the appropriate service when an organization needs to assess existing workloads before planning an Azure migration.