View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 161

A company needs to migrate a database to Azure while preserving compatibility with existing SQL Server features. Which service should the architect consider first?

1. Azure Cosmos DB
2. Azure SQL Managed Instance
3. Azure Table Storage
4. Azure Cache for Redis

Correct Answer: 2

Explanation

Azure SQL Managed Instance is a fully managed relational database service designed to provide broad compatibility with SQL Server workloads. It supports many SQL Server features and can be a strong migration target when an existing application depends on capabilities that may not be available in Azure SQL Database. Microsoft manages much of the underlying infrastructure, including patching and platform maintenance. Architects should assess compatibility before migration, but SQL Managed Instance is often appropriate when organizations want to modernize SQL Server workloads while minimizing application and database changes.

Question 162

Which Azure service can distribute traffic based on DNS responses across global endpoints?

1. Azure Front Door
2. Azure Load Balancer
3. Azure Traffic Manager
4. Azure Application Gateway

Correct Answer: 3

Explanation

Azure Traffic Manager is a DNS-based traffic routing service that directs clients toward appropriate application endpoints. It supports routing methods such as priority, weighted, performance, geographic, and failover-based routing. Because routing decisions are made through DNS, Traffic Manager can direct users to endpoints in different Azure regions or even supported external locations. Azure Front Door provides global HTTP and HTTPS application delivery at the edge, while Load Balancer operates at Layer 4 and Application Gateway provides regional Layer 7 functionality. Traffic Manager is appropriate when DNS-based global endpoint routing is required.

Question 163

Which Azure service is best for hosting a web application without managing the underlying operating system?

1. Azure App Service
2. Azure Virtual Machines
3. Azure Dedicated Host
4. Azure Virtual Desktop

Correct Answer: 1

Explanation

Azure App Service is a managed platform for hosting web applications, APIs, and supported application workloads without requiring customers to manage the underlying operating system. Microsoft handles many infrastructure tasks such as platform patching and maintenance. App Service also supports features including autoscaling, deployment slots, custom domains, and integration with other Azure services. Virtual Machines provide more control but require greater management responsibility. App Service is therefore a strong choice when an organization wants a PaaS approach that reduces infrastructure administration while still supporting scalable web applications.

Question 164

A business requires a backup solution that can restore Azure virtual machines after accidental deletion or corruption. Which service should be used?

1. Azure Backup
2. Azure Advisor
3. Azure Policy
4. Azure Front Door

Correct Answer: 1

Explanation

Azure Backup provides managed backup capabilities for supported Azure workloads, including Azure virtual machines. It can create recovery points that can be used to restore data or entire virtual machines after accidental deletion, corruption, or other failures. Backup retention policies can be configured according to business and compliance requirements. Azure Backup is different from Azure Site Recovery, which focuses primarily on disaster recovery and failover between locations. Architects should use Backup for recoverable copies of data and consider Site Recovery when rapid workload failover is also required.

Question 165

Which design provides the strongest isolation between application environments?

1. Separate subscriptions
2. Shared resource groups
3. Shared virtual machines
4. Shared storage accounts

Correct Answer: 1

Explanation

Separate Azure subscriptions can provide a strong administrative and security boundary between application environments such as production, development, and testing. Subscriptions can have independent access controls, policies, budgets, and resource organization. This separation can reduce the risk that changes in one environment affect another. Resource groups provide organization within a subscription but are not equivalent to the broader subscription boundary. Architects should still implement appropriate identity, networking, and governance controls because subscriptions alone do not automatically secure every workload component.

Question 166

Which Azure service provides a managed private file share accessible using SMB?

1. Azure Blob Storage
2. Azure Files
3. Azure Table Storage
4. Azure Queue Storage

Correct Answer: 2

Explanation

Azure Files provides fully managed cloud file shares that can be accessed using the Server Message Block, or SMB, protocol. It is useful for applications that require shared file storage and for workloads migrating from traditional file servers. Azure Files can be accessed from Azure virtual machines and supported on-premises environments, depending on connectivity and configuration. Blob Storage is designed for object storage rather than traditional file-share access. Table Storage provides NoSQL key-value storage, while Queue Storage is designed for message storage. Azure Files is therefore the appropriate choice for managed SMB-based file shares.

Question 167

A solution requires secure remote administration of Azure virtual machines without assigning public IP addresses. Which service should be considered?

1. Azure Bastion
2. Azure Traffic Manager
3. Azure Data Factory
4. Azure CDN

Correct Answer: 1

Explanation

Azure Bastion provides managed, secure access to virtual machines through the Azure portal without requiring public IP addresses on the individual virtual machines. Administrators can use browser-based RDP or SSH sessions through Bastion. This reduces the need to expose management ports directly to the public internet. Bastion is especially useful in architectures where virtual machines should remain on private networks while still requiring administrative access. Network security rules and identity controls should still be configured appropriately because Bastion is one component of the overall secure administration architecture.

Question 168

Which Azure storage feature helps recover a previous version of a blob?

1. Blob versioning
2. Azure Firewall
3. Private DNS
4. Storage encryption

Correct Answer: 1

Explanation

Blob versioning automatically maintains previous versions of modified or overwritten block blobs. If an application accidentally changes or overwrites data, an earlier version can be accessed or restored according to the organization’s recovery procedures. This provides an additional protection layer for data integrity and recovery. Blob versioning can be used alongside soft delete and lifecycle management to create a more complete storage protection strategy. Encryption protects confidentiality, Private DNS handles name resolution, and Azure Firewall provides network security. Versioning specifically addresses recovery from object modifications.

Question 169

Which Azure service is designed for ingesting high-volume event streams?

1. Azure Event Hubs
2. Azure Service Bus
3. Azure Queue Storage
4. Azure Files

Correct Answer: 1

Explanation

Azure Event Hubs is a managed event ingestion service designed to handle high-volume streams of telemetry and event data. It is commonly used for scenarios such as application telemetry, IoT data, logs, and streaming analytics. Event Hubs can ingest large volumes of events and make them available to multiple consumers for processing. Service Bus is better suited for enterprise messaging scenarios that require features such as transactions and dead-lettering. Queue Storage provides simpler asynchronous messaging. Architects should choose Event Hubs when the primary requirement is large-scale event streaming and ingestion.

Question 170

Which Azure service can analyze application logs using Kusto Query Language?

1. Azure Log Analytics
2. Azure Pricing Calculator
3. Azure Advisor
4. Azure DNS

Correct Answer: 1

Explanation

Azure Log Analytics provides a workspace where collected monitoring data can be stored and analyzed using Kusto Query Language, or KQL. KQL allows teams to search, filter, aggregate, and correlate log information to troubleshoot applications and infrastructure. Log Analytics is a core component of Azure Monitor and can collect data from many Azure services and supported external sources. Advisor focuses on recommendations, Pricing Calculator estimates costs, and Azure DNS manages domain resolution. Architects commonly use Log Analytics when centralized logging and detailed operational analysis are required.

Question 171

A company needs to process uploaded files automatically whenever they are added to Azure Blob Storage. Which architecture is most suitable?

1. Azure Functions triggered by storage events
2. Azure VPN Gateway
3. Azure Load Balancer
4. Azure Reservations

Correct Answer: 1

Explanation

Azure Functions can provide an event-driven processing model for files uploaded to Blob Storage. A storage event can trigger a function that validates, transforms, analyzes, or otherwise processes the newly created object. This architecture avoids continuously running servers that wait for work and can scale according to incoming events. It is especially suitable for lightweight background processing and automation. Architects should select an appropriate Functions hosting plan based on expected execution duration, workload volume, networking requirements, and scaling behavior. Event Grid can also be used to route storage events.

Question 172

Which Azure service provides centralized policy enforcement for organizational standards?

1. Azure Policy
2. Azure Cache for Redis
3. Azure Front Door
4. Azure Load Balancer

Correct Answer: 1

Explanation

Azure Policy helps organizations enforce and assess compliance with defined rules across Azure resources. Policies can require specific configurations, prevent certain deployments, audit resources, or automatically apply supported remediation actions. They can be assigned at management group, subscription, resource group, or resource scope depending on governance requirements. Azure Policy is different from Azure RBAC because RBAC controls who can perform actions, while Policy evaluates whether resource configurations comply with organizational standards. Architects commonly use both services together to establish strong governance and access control.

Question 173

Which architecture approach allows multiple application instances to share user session information?

1. Distributed session state
2. Local-only session storage
3. Single-server sessions
4. Static file storage

Correct Answer: 1

Explanation

Distributed session state stores user session information in a shared service that can be accessed by multiple application instances. This allows requests from the same user to be handled by different instances without losing session information. Azure Cache for Redis is commonly used for this purpose because it provides fast, distributed in-memory storage. Keeping session state only on a single server can create problems when applications scale horizontally or when that server becomes unavailable. Architects should also consider data expiration, security, consistency, and cache availability when designing distributed session storage.

Question 174

Which Azure service provides managed relational database scaling for a group of databases with variable workloads?

1. Azure SQL elastic pools
2. Azure Cosmos DB
3. Azure Table Storage
4. Azure Cache for Redis

Correct Answer: 1

Explanation

Azure SQL elastic pools allow multiple Azure SQL databases to share a common set of compute resources. This model is useful when databases have different usage patterns and do not all reach peak demand simultaneously. Shared capacity can improve resource utilization and reduce costs compared with provisioning each database independently for its maximum expected load. Elastic pools are particularly useful for SaaS applications that maintain many databases. Architects should evaluate the workload distribution and ensure that the pool has sufficient capacity for aggregate demand while preventing one database from consuming excessive resources.

Question 175

Which Azure feature helps ensure resources are deployed consistently across environments?

1. Infrastructure as code
2. Manual portal deployment
3. Individual configuration changes
4. Local scripts only

Correct Answer: 1

Explanation

Infrastructure as code, or IaC, defines infrastructure configuration in reusable and repeatable files rather than relying entirely on manual portal operations. Azure Bicep and Azure Resource Manager templates are examples of IaC technologies used to describe Azure resources declaratively. This approach improves consistency between development, testing, and production environments and reduces configuration errors. IaC also supports version control, automated deployment pipelines, and repeatable recovery. Architects should use parameterization and modular templates where appropriate so the same infrastructure definitions can support multiple environments without duplicating configuration.

Question 176

A workload requires a private connection between two Azure virtual networks. Which feature should be used?

1. VNet peering
2. Azure CDN
3. Azure Advisor
4. Blob lifecycle management

Correct Answer: 1

Explanation

VNet peering connects two Azure virtual networks so that resources in those networks can communicate using private IP addresses. Peering can be used within the same region or across supported Azure regions. It is commonly used in hub-and-spoke architectures and other designs where workloads need direct private network communication. Architects should consider address-space planning, routing, security rules, and transitive connectivity requirements when designing peered networks. VNet peering is different from VPN Gateway, which can provide encrypted connectivity through a gateway-based network tunnel.

Question 177

Which service should be used when an application needs a global content delivery network for static content?

1. Azure CDN
2. Azure VPN Gateway
3. Azure Key Vault
4. Azure SQL Database

Correct Answer: 1

Explanation

Azure CDN is designed to cache and deliver static content from geographically distributed edge locations closer to users. This can reduce latency and decrease the load on the origin server. Common CDN content includes images, videos, JavaScript files, CSS, and other static assets. A CDN is particularly useful when users are distributed across different geographic locations and frequently request the same content. VPN Gateway provides network connectivity, Key Vault protects secrets and keys, and Azure SQL Database provides relational data services. CDN is therefore the appropriate choice for global static-content delivery.

Question 178

Which Azure service provides protection against accidental resource deletion?

1. Resource locks
2. Azure Event Grid
3. Azure Functions
4. Azure Data Factory

Correct Answer: 1

Explanation

Azure resource locks help prevent accidental modification or deletion of important Azure resources. A Delete lock prevents users from deleting a protected resource while still allowing permitted management operations. A ReadOnly lock restricts modifications as well as deletion. Resource locks are useful for critical production resources, shared infrastructure, and other assets where accidental changes could cause significant disruption. They should not be considered a replacement for backups or access control because authorized administrators can still require appropriate management processes. Architects should combine locks with RBAC and governance policies.

Question 179

A company needs a database with automatic global replication and configurable consistency. Which Azure service should it choose?

1. Azure SQL Database
2. Azure Cosmos DB
3. Azure Database for MySQL
4. Azure Files

Correct Answer: 2

Explanation

Azure Cosmos DB is designed for globally distributed applications and provides configurable consistency models that allow architects to balance latency, availability, and data consistency. Data can be replicated across multiple Azure regions, allowing applications to serve users closer to their geographic locations. Cosmos DB also supports partitioning for scalable workloads. Azure SQL Database can provide geo-replication and failover capabilities, but Cosmos DB is specifically designed around globally distributed NoSQL workloads with flexible consistency choices. Architects should select the appropriate consistency level based on the application’s business and performance requirements.

Question 180

Which Well-Architected Framework pillar focuses on efficient operations, monitoring, and deployment practices?

1. Reliability
2. Security
3. Operational Excellence
4. Cost Optimization

Correct Answer: 3

Explanation

Operational Excellence focuses on operating and improving workloads effectively throughout their lifecycle. It includes practices such as automation, monitoring, deployment processes, incident management, and continuous improvement. Architects should design systems that are not only functional but also manageable and observable after deployment. Automation through infrastructure as code and deployment pipelines can reduce manual errors, while monitoring helps teams detect issues and understand system behavior. Operational Excellence works alongside the other Well-Architected pillars, including Reliability, Security, Performance Efficiency, and Cost Optimization, to create balanced cloud solutions.