View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 81

Which Azure service provides distributed caching for web applications?

1. Azure Table Storage
2. Azure Queue Storage
3. Azure Cache for Redis
4. Azure Data Factory

Correct Answer: 3

Explanation

Azure Cache for Redis provides a managed, in-memory data store that can significantly improve application performance. Frequently accessed data can be stored in Redis so applications do not repeatedly query slower databases or storage services. It is useful for session state, caching database results, leaderboards, and other low-latency workloads. Azure Cache for Redis supports distributed applications running across multiple instances, making it suitable for scalable web architectures. Using a cache can reduce database load and improve response times, especially when many users request the same information repeatedly.

Question 82

Which Azure feature provides architecture guidance for cloud solutions?

1. Azure Architecture Center
2. Azure Monitor
3. Azure Advisor
4. Azure Service Health

Correct Answer: 1

Explanation

The Azure Architecture Center provides guidance, reference architectures, design patterns, and recommendations for building solutions on Azure. Architects can use it to evaluate different approaches for application design, data platforms, networking, security, reliability, and scalability. It includes architecture examples and guidance aligned with common Azure workloads. Azure Advisor, by comparison, analyzes deployed resources and provides recommendations based on the current environment. For designing a new solution and selecting suitable Azure services and architecture patterns, the Architecture Center is the more appropriate resource.

Question 83

Which metric defines how quickly a system must be restored after failure?

1. RPO
2. SLA
3. RTO
4. MTTR

Correct Answer: 3

Explanation

Recovery Time Objective, or RTO, defines the maximum acceptable amount of time a system can remain unavailable after a disruption. A lower RTO means the organization requires faster recovery. For example, an application with an RTO of one hour should be restored within approximately one hour after a major failure. Recovery Point Objective, or RPO, is different because it defines how much data loss is acceptable, measured by time. Architects use both RTO and RPO when designing backup, replication, failover, and disaster recovery strategies.

Question 84

Which Azure storage redundancy provides protection across regions?

1. LRS
2. GRS
3. ZRS
4. Premium SSD

Correct Answer: 2

Explanation

Geo-redundant storage, or GRS, replicates storage data asynchronously to a secondary Azure region. This provides protection against a regional disaster that could make the primary region unavailable. The secondary copy is normally not directly accessible for reads unless the storage account is configured for an appropriate access model or a failover is performed. LRS protects data within a single datacenter, while ZRS replicates data across availability zones within the same region. GRS is therefore appropriate when architects require geographic disaster protection for Azure Storage.

Question 85

Which Azure feature can prevent accidental deletion of blobs?

1. Blob soft delete
2. Azure Firewall
3. VNet peering
4. Azure Bastion

Correct Answer: 1

Explanation

Blob soft delete allows deleted blobs and, depending on configuration, blob versions to be retained for a defined period. If a user or application accidentally deletes a blob, the data can be restored before the retention period expires. This feature is useful for protecting against accidental deletion and certain operational mistakes. It is different from storage redundancy because redundancy protects availability and durability rather than providing a convenient recovery mechanism for deleted objects. Architects should combine soft delete with appropriate backup, versioning, and access controls for stronger data protection.

Question 86

Which design pattern uses a central network connected to multiple spokes?

1. Mesh
2. Hub-and-spoke
3. Point-to-point
4. Ring

Correct Answer: 2

Explanation

The hub-and-spoke architecture uses a central virtual network called the hub and separate spoke virtual networks for workloads. Shared services such as Azure Firewall, VPN Gateway, DNS services, or connectivity infrastructure can be placed in the hub. Spokes can then host applications and other workloads while using centralized services. This design improves network organization, security, and management compared with connecting every virtual network directly to every other network. Azure VNet peering is commonly used to connect the hub and spokes and support controlled communication between them.

Question 87

Which Azure service protects applications from distributed denial-of-service attacks?

1. Azure Firewall
2. Azure DDoS Protection
3. Network Watcher
4. Azure Policy

Correct Answer: 2

Explanation

Azure DDoS Protection provides dedicated protection against distributed denial-of-service attacks targeting Azure resources. It helps detect and mitigate malicious traffic intended to overwhelm network resources and make applications unavailable. Azure provides basic DDoS protection automatically for Azure services, while Azure DDoS Protection provides enhanced capabilities for supported architectures. Azure Firewall focuses on network traffic filtering and security policies rather than specialized DDoS mitigation. Architects should consider DDoS protection when designing internet-facing applications that require strong availability and resilience against volumetric network attacks.

Question 88

Which Azure service provides centralized API management?

1. Azure Service Bus
2. Azure Front Door
3. Azure API Management
4. Azure Event Grid

Correct Answer: 3

Explanation

Azure API Management provides a managed platform for publishing, securing, monitoring, and managing APIs. It can act as a gateway between clients and backend services, allowing architects to apply authentication, authorization, rate limiting, transformations, policies, and usage controls. It also provides developer-oriented capabilities such as API documentation and subscription management. Service Bus is designed for messaging, Event Grid handles event distribution, and Front Door provides global application delivery and routing. API Management is therefore the most appropriate service when centralized API governance and exposure are required.

Question 89

Which storage option is best for long-term, rarely accessed blob data?

1. Hot tier
2. Premium tier
3. Cool tier
4. Archive tier

Correct Answer: 4

Explanation

The Archive tier is designed for blob data that is rarely accessed and can tolerate retrieval delays. It offers lower storage costs than frequently accessed tiers, making it suitable for long-term retention, compliance records, and historical data. Archived blobs must be rehydrated before they can be read normally, so it is not appropriate for data requiring immediate access. The Hot tier is intended for frequent access, while the Cool tier is designed for infrequently accessed data that still needs relatively faster availability.

Question 90

Which Azure service can automatically move blobs between access tiers?

1. Azure Storage lifecycle management
2. Azure Policy
3. Azure Advisor
4. Azure Monitor

Correct Answer: 1

Explanation

Azure Storage lifecycle management allows organizations to automatically transition blobs between access tiers or delete them based on defined rules. Policies can evaluate conditions such as blob age, last modification time, or access patterns and then move data from Hot to Cool or Archive tiers. They can also delete obsolete data after a specified period. This capability helps optimize storage costs while maintaining appropriate data retention. Azure Policy is primarily used for governance, while Advisor provides recommendations and Monitor focuses on monitoring and alerting.

Question 91

Which Azure service provides private name resolution for Azure resources?

1. Azure Private DNS
2. Azure Traffic Manager
3. Azure DNS Public
4. Azure Front Door

Correct Answer: 1

Explanation

Azure Private DNS provides DNS zones that are accessible only within virtual networks or connected environments. It is commonly used with private endpoints so applications can resolve private Azure service addresses without sending DNS requests to public endpoints. Private DNS zones can be linked to virtual networks and support centralized name resolution for internal resources. Public Azure DNS is intended for publicly accessible domain names. Traffic Manager and Front Door perform traffic routing rather than providing the private DNS resolution required for internal Azure architectures.

Question 92

Which Azure service provides stateful network traffic filtering?

1. Network Security Group
2. Azure Firewall
3. Azure Monitor
4. Azure Policy

Correct Answer: 2

Explanation

Azure Firewall is a managed, stateful network security service that can control traffic flowing between networks and to the internet. It supports centralized security rules and can provide network, application, and threat-intelligence-based filtering capabilities. Unlike an individual Network Security Group, Azure Firewall is designed for centralized network security across larger architectures. This makes it particularly useful in hub-and-spoke designs. Architects can deploy Azure Firewall in a central hub and route traffic from multiple spoke networks through it for consistent security enforcement.

Question 93

Which Azure SQL feature provides automatic failover between databases in different regions?

1. Elastic pools
2. Read scale-out
3. Failover groups
4. Query Store

Correct Answer: 3

Explanation

Azure SQL Database failover groups provide a mechanism for managing geo-replication and automatic failover between primary and secondary logical servers in different Azure regions. They are useful when applications require regional disaster recovery and a consistent connection endpoint during failover. The secondary database can become the primary when a regional outage occurs. Elastic pools are designed to share resources among multiple databases, while read scale-out supports read workloads. Failover groups are specifically intended to simplify disaster recovery and application connectivity across regions.

Question 94

Which Azure storage feature protects data from unauthorized modification?

1. Blob lifecycle management
2. Immutable Blob Storage
3. Storage Explorer
4. Blob indexing

Correct Answer: 2

Explanation

Immutable Blob Storage enables organizations to store data in a write-once, read-many configuration for a defined retention period. During that period, protected data cannot be modified or deleted according to the configured immutability policy. This capability is useful for regulatory compliance, legal retention, financial records, and other workloads where data must remain unchanged. Lifecycle management primarily automates tiering and deletion, while ordinary blob storage does not inherently prevent authorized users from modifying stored data. Immutable storage provides stronger protection against alteration or deletion.

Question 95

Which Azure identity option avoids storing credentials in application code?

1. Managed identity
2. Shared access signature
3. Access key
4. Connection string

Correct Answer: 1

Explanation

Managed identities allow Azure resources to authenticate to supported services without developers storing usernames, passwords, secrets, or access keys in application code. Azure automatically manages the identity credentials and applications can request tokens through Microsoft Entra ID. System-assigned identities are tied to a specific resource, while user-assigned identities can be shared across multiple resources. This approach improves security and simplifies credential management. It is especially useful when applications need controlled access to services such as Key Vault, Storage, Azure SQL, or other Microsoft Entra-integrated resources.

Question 96

Which Azure service is designed for large-scale data integration pipelines?

1. Azure Cache for Redis
2. Azure Data Factory
3. Azure Bastion
4. Azure Load Balancer

Correct Answer: 2

Explanation

Azure Data Factory is a cloud-based data integration service used to create and manage pipelines that move and transform data between different sources and destinations. It supports activities such as copying data, orchestrating transformations, scheduling workflows, and integrating with numerous Azure and external data services. It is suitable for enterprise data ingestion and integration architectures. Azure Data Factory can coordinate complex workflows without requiring applications to implement all integration logic themselves, making it valuable when architects need scalable and managed data movement across multiple systems.

Question 97

Which Azure architecture principle focuses on reducing unnecessary spending?

1. Reliability
2. Operational excellence
3. Cost optimization
4. Security

Correct Answer: 3

Explanation

Cost optimization is one of the key pillars of the Azure Well-Architected Framework. It focuses on delivering required business value while avoiding unnecessary cloud spending. Architects can optimize costs through right-sizing resources, selecting suitable pricing tiers, using autoscaling, removing unused resources, and choosing appropriate purchasing options. Cost decisions should still consider reliability, performance, security, and operational requirements. A low-cost design that cannot meet business requirements is not necessarily well architected. Cost optimization instead seeks an appropriate balance between expenditure and the required workload outcomes.

Question 98

Which Azure service provides centralized application telemetry?

1. Azure Application Insights
2. Azure Resource Manager
3. Azure Policy
4. Azure DNS

Correct Answer: 1

Explanation

Azure Application Insights provides application performance monitoring and telemetry for supported applications. It can collect information about requests, dependencies, exceptions, availability, performance, and other application behavior. This information helps development and operations teams identify failures, performance problems, and usage patterns. Application Insights integrates with Azure Monitor, allowing telemetry to be analyzed alongside other monitoring data. Azure Resource Manager manages Azure resources, Azure Policy handles governance, and Azure DNS provides name resolution. Application Insights is therefore the appropriate choice for application-level observability.

Question 99

Which option provides read access to Azure Storage without exposing the account key?

1. Storage account key
2. User delegation SAS
3. Connection string
4. Shared administrator password

Correct Answer: 2

Explanation

A user delegation SAS provides controlled, time-limited access to Azure Blob Storage using Microsoft Entra credentials rather than the storage account key. It allows administrators or applications to grant specific permissions for particular resources and periods. This reduces the security risk associated with distributing long-lived account keys. A SAS can be configured with restrictions such as permissions, start and expiry times, and resource scope. User delegation SAS is therefore a strong option when temporary delegated access to Blob Storage is required without exposing the storage account’s primary access keys.

Question 100

Which Azure service helps estimate costs before deployment?

1. Azure Advisor
2. Azure Pricing Calculator
3. Azure Monitor
4. Azure Service Health

Correct Answer: 2

Explanation

The Azure Pricing Calculator helps architects estimate the expected cost of Azure services before deploying a solution. Users can select services, regions, configurations, usage levels, and other factors to create an approximate monthly cost estimate. It is useful during architecture planning and budgeting because different design choices can be compared before resources are provisioned. Azure Advisor instead provides recommendations for existing Azure resources, while Azure Monitor focuses on monitoring. Therefore, the Pricing Calculator is the appropriate tool for estimating projected Azure infrastructure and service costs.