View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 181

A company needs to ensure that an application continues operating when one virtual machine fails. Which architecture should the architect use?

1. Deploy multiple instances behind a load balancer
2. Use one larger virtual machine
3. Store application files on local disk
4. Disable health probes

Correct Answer: 1

Explanation

Deploying multiple application instances behind a load balancer removes the single virtual machine as a single point of failure. Health probes can identify unavailable instances, allowing the load balancer to send new requests only to healthy instances. This architecture also supports horizontal scaling because additional instances can be added as demand increases. A larger single VM may provide more capacity but does not eliminate the risk of complete instance failure. Architects should also ensure that application state and dependent services are designed appropriately for multiple instances.

Question 182

Which Azure service provides a managed environment for running Kubernetes workloads?

1. Azure Container Apps
2. Azure Kubernetes Service
3. Azure App Service
4. Azure Functions

Correct Answer: 2

Explanation

Azure Kubernetes Service, or AKS, is a managed Kubernetes service for deploying and operating containerized applications. Azure manages important Kubernetes infrastructure components while organizations retain control over cluster configuration and workloads. AKS supports features such as scaling, networking, identity integration, monitoring, and automated cluster management capabilities. Container Apps provides a simpler managed container platform without requiring direct Kubernetes management. App Service is a PaaS hosting platform, while Functions is designed primarily for serverless event-driven code. AKS is the appropriate choice when Kubernetes orchestration capabilities are required.

Question 183

Which Azure storage redundancy option provides read access to a secondary region?

1. LRS
2. ZRS
3. GRS
4. RA-GRS

Correct Answer: 4

Explanation

Read-access geo-redundant storage, or RA-GRS, provides geo-replication of Azure Storage data to a secondary region while also allowing read access to that secondary copy. This can be useful when applications require access to replicated data even when the primary region remains available. GRS also replicates data to another region but does not normally provide read access to the secondary endpoint. LRS provides local redundancy, while ZRS replicates across availability zones within the primary region. RA-GRS is therefore appropriate when geographic replication and secondary-region read access are required.

Question 184

Which Azure service provides managed identity-based access to Azure resources without storing credentials?

1. Managed identities
2. Azure Firewall
3. Resource locks
4. Azure DNS

Correct Answer: 1

Explanation

Managed identities allow Azure resources to authenticate to supported services using identities managed through Microsoft Entra ID. Applications do not need to store passwords, client secrets, or access keys in source code or configuration files. System-assigned identities are tied to individual resources, while user-assigned identities can be associated with multiple resources. Managed identities are especially useful when applications need secure access to services such as Azure Key Vault, Storage, or Azure SQL. Architects should assign only the permissions required by the workload to maintain the principle of least privilege.

Question 185

A company wants to reduce database load caused by repeated read requests. Which solution should the architect implement?

1. Azure Cache for Redis
2. Azure Backup
3. Azure Policy
4. Azure Bastion

Correct Answer: 1

Explanation

Azure Cache for Redis can store frequently accessed information in memory, allowing applications to retrieve repeated data without querying the primary database every time. This can reduce database workload and improve application response times. Caching is particularly useful for data that is read frequently but does not change constantly. Architects should define suitable expiration and invalidation strategies to prevent stale data from being served when freshness is important. Backup protects recoverability, Policy provides governance, and Bastion provides secure VM administration, so none directly addresses repeated database reads.

Question 186

Which Azure service is best for collecting telemetry from IoT devices at high volume?

1. Azure Event Hubs
2. Azure Files
3. Azure API Management
4. Azure Key Vault

Correct Answer: 1

Explanation

Azure Event Hubs is designed for high-throughput event ingestion and is well suited to telemetry workloads generated by large numbers of devices. It can ingest streams of events and make them available to multiple downstream consumers for processing or analytics. Event Hubs is commonly used for IoT telemetry, application logs, and other streaming scenarios. API Management manages APIs, Azure Files provides managed file shares, and Key Vault protects secrets and cryptographic keys. Event Hubs is therefore the appropriate choice when the primary requirement is large-scale event ingestion.

Question 187

Which Azure service can provide automated deployment slots for testing application changes before production?

1. Azure App Service
2. Azure Storage
3. Azure Load Balancer
4. Azure VPN Gateway

Correct Answer: 1

Explanation

Azure App Service deployment slots provide separate environments where application versions can be deployed and tested before being moved into production. A staging slot can receive a new version, allowing teams to validate functionality before swapping it with the production slot. This can reduce downtime and simplify application release management. Slots also support controlled rollback by swapping the previous version back when required. Architects should consider application settings, database changes, and session behavior when designing slot-based deployments to ensure that staging and production transitions remain safe.

Question 188

A workload requires a database capable of handling massive scale with partitioned data. Which service should be considered?

1. Azure Cosmos DB
2. Azure Files
3. Azure Service Bus
4. Azure Key Vault

Correct Answer: 1

Explanation

Azure Cosmos DB supports horizontal scaling through partitioning, allowing large datasets and high-throughput workloads to be distributed across logical and physical partitions. A carefully selected partition key is important because it determines how data is distributed and can significantly affect performance and scalability. Cosmos DB is designed for globally distributed and highly scalable applications, making it appropriate for workloads that need large-scale NoSQL storage. Architects should avoid poor partition-key choices that create hot partitions or uneven workload distribution because these can limit scalability and increase costs.

Question 189

Which Azure networking service can translate private IP addresses for outbound internet access?

1. Azure NAT Gateway
2. Azure Bastion
3. Azure Private DNS
4. Azure Traffic Manager

Correct Answer: 1

Explanation

Azure NAT Gateway provides predictable outbound internet connectivity for resources in a virtual network by performing network address translation. It allows multiple private IP addresses to share public IP addresses for outbound connections without requiring each resource to have its own public IP. NAT Gateway is useful when applications need controlled and scalable outbound connectivity. Bastion is for secure VM administration, Private DNS handles internal name resolution, and Traffic Manager provides DNS-based traffic routing. Architects should use NAT Gateway when predictable outbound connectivity is a requirement.

Question 190

Which Azure service provides centralized secrets management for applications?

1. Azure Key Vault
2. Azure Monitor
3. Azure Data Factory
4. Azure CDN

Correct Answer: 1

Explanation

Azure Key Vault provides centralized management of secrets, encryption keys, and certificates. Applications can retrieve sensitive information securely instead of embedding credentials in source code or configuration files. Key Vault integrates with Microsoft Entra ID and can work with managed identities to reduce credential-management requirements. It is useful for protecting database passwords, API keys, certificates, and other sensitive values. Architects should apply appropriate access controls and least-privilege permissions. Azure Monitor handles observability, Data Factory manages data integration, and CDN provides content delivery.

Question 191

A company needs a messaging solution that supports topics and multiple subscribers. Which service should be selected?

1. Azure Service Bus
2. Azure Blob Storage
3. Azure Files
4. Azure Monitor

Correct Answer: 1

Explanation

Azure Service Bus supports topics and subscriptions, allowing a single message to be distributed to multiple independent subscribers. This publish-subscribe capability is useful when several application components need to process the same business message independently. Service Bus also provides enterprise messaging capabilities such as dead-letter queues, transactions, duplicate detection, and message sessions. Event Grid can also distribute events but is generally more focused on event notification and reactive architectures. Architects should choose Service Bus when durable enterprise messaging and advanced delivery controls are important requirements.

Question 192

Which Azure service provides automated recommendations for improving deployed resources?

1. Azure Policy
2. Azure Advisor
3. Azure Resource Manager
4. Azure DNS

Correct Answer: 2

Explanation

Azure Advisor analyzes deployed Azure resources and provides personalized recommendations across areas such as cost, performance, reliability, security, and operational efficiency. These recommendations can identify underutilized resources, configuration improvements, and opportunities to optimize workloads. Azure Policy is used to enforce organizational standards, while Resource Manager provides the management layer for Azure resources. Azure DNS provides domain name resolution. Advisor is therefore most appropriate when an organization wants recommendations based on its existing Azure environment rather than rules that enforce resource configuration.

Question 193

Which Azure service can provide automatic global application failover for HTTP traffic?

1. Azure Front Door
2. Azure Queue Storage
3. Azure Key Vault
4. Azure Files

Correct Answer: 1

Explanation

Azure Front Door can route global HTTP and HTTPS traffic to healthy backend endpoints and support failover when an endpoint becomes unavailable. It uses Microsoft’s global edge infrastructure to improve application availability and user performance. Front Door can also integrate with Web Application Firewall and caching capabilities. Queue Storage provides asynchronous messaging, Key Vault manages secrets, and Azure Files provides managed file shares. Architects should use Front Door when a web application requires global traffic distribution, health-based routing, and improved resilience across application endpoints.

Question 194

Which Azure feature can prevent a production resource from being accidentally deleted?

1. Azure Resource Lock
2. Azure Event Grid
3. Azure CDN
4. Azure Functions

Correct Answer: 1

Explanation

Azure resource locks help prevent accidental changes or deletion of critical resources. A Delete lock prevents deletion while still allowing other permitted management operations, whereas a ReadOnly lock prevents modifications and deletion. Resource locks are useful for important production infrastructure, shared services, and resources that should not be removed casually. Locks should be used alongside RBAC and governance policies because they are not a replacement for proper access management. Architects should carefully consider inheritance and operational procedures before applying locks to production environments.

Question 195

Which Azure database service is appropriate when an application requires a relational database with automatic patching and backups?

1. Azure SQL Database
2. Azure Virtual Machines
3. Azure Managed Disks
4. Azure Blob Storage

Correct Answer: 1

Explanation

Azure SQL Database is a fully managed relational database service that reduces infrastructure administration responsibilities. Microsoft manages many platform operations, including patching and automated backup capabilities, allowing application teams to focus on database design and workload requirements. Azure SQL Database can also provide built-in high availability and scalability options depending on the selected service tier. Running SQL Server on a virtual machine offers greater operating-system control but requires more administrative work. Blob Storage and Managed Disks are storage services rather than managed relational database platforms.

Question 196

A solution must maintain application availability while an entire availability zone fails. Which design is most appropriate?

1. Deploy instances in multiple availability zones
2. Deploy all instances on one VM
3. Use only local storage
4. Disable health monitoring

Correct Answer: 1

Explanation

Deploying application instances across multiple availability zones protects against failures affecting a single zone within an Azure region. Each zone has independent infrastructure, so an outage in one zone does not necessarily affect resources in other zones. A load-balancing mechanism can distribute requests among healthy instances, allowing the application to continue operating when one zone fails. Architects should also evaluate database and storage dependencies because placing only the application tier across zones does not guarantee complete workload resilience. The entire architecture should be reviewed for single points of failure.

Question 197

Which Azure service provides private DNS zones for resources inside virtual networks?

1. Azure Private DNS
2. Azure Traffic Manager
3. Azure Front Door
4. Azure Load Balancer

Correct Answer: 1

Explanation

Azure Private DNS provides private DNS zones that can be linked to virtual networks for internal name resolution. It is commonly used with private endpoints so applications can resolve Azure service names to private IP addresses. Private DNS helps maintain consistent application connection strings while keeping traffic on private network paths. Traffic Manager performs DNS-based traffic routing for endpoints, Front Door provides global web delivery, and Load Balancer distributes network traffic. Architects should include private DNS when private connectivity requires reliable and centralized name resolution inside Azure networks.

Question 198

Which Azure service can enforce that resources comply with organizational configuration standards?

1. Azure Policy
2. Azure Advisor
3. Azure Cache for Redis
4. Azure Front Door

Correct Answer: 1

Explanation

Azure Policy evaluates Azure resources against organizational rules and can audit, deny, or remediate configurations depending on the policy definition. Organizations can use Policy to enforce requirements such as allowed regions, required tags, approved resource types, or specific security configurations. Policies can be assigned at different scopes and can inherit through the Azure management hierarchy. Azure Advisor provides recommendations but does not primarily enforce compliance. Cache for Redis provides in-memory caching, while Front Door handles global application delivery. Policy is therefore the correct governance service.

Question 199

A company wants to reduce costs by automatically shutting down nonproduction virtual machines outside working hours. Which approach should the architect consider?

1. Automation-based scheduled shutdown
2. Azure Front Door
3. Azure Private Link
4. Azure DDoS Protection

Correct Answer: 1

Explanation

Scheduled shutdown can automatically stop nonproduction virtual machines during periods when they are not required. This reduces compute consumption and can provide meaningful cost savings for development and testing environments that operate only during business hours. Azure Automation, supported scheduling mechanisms, or other Azure management capabilities can be used to implement this approach. Architects should ensure that required workloads are not stopped unexpectedly and should account for startup time and dependencies. Front Door, Private Link, and DDoS Protection address networking and security rather than workload cost optimization.

Question 200

Which Well-Architected Framework pillar focuses on making workloads reliable and resilient to failures?

1. Performance Efficiency
2. Security
3. Reliability
4. Cost Optimization

Correct Answer: 3

Explanation

Reliability is a core pillar of the Azure Well-Architected Framework and focuses on ensuring workloads can recover from failures and continue meeting business requirements. Reliability practices include redundancy, fault isolation, health monitoring, automated recovery, backup, disaster recovery, and appropriate scaling. Architects should identify potential failure points and design recovery mechanisms based on business requirements such as availability targets, RTO, and RPO. Reliability should be considered across application, infrastructure, networking, storage, and data layers rather than being treated as a feature of a single Azure service.