View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 221

A company needs to run a Windows desktop application in Azure and provide employees with virtual desktops from different locations. Which service should the architect recommend?

1. Azure Virtual Desktop
2. Azure Functions
3. Azure Container Apps
4. Azure Batch

Correct Answer: 1

Explanation

Azure Virtual Desktop is a managed desktop and application virtualization service designed to provide Windows desktops and applications to users remotely. It supports centralized management, multiple user sessions, and integration with Microsoft Entra ID and other Azure services. Organizations can use it to provide employees with secure access to corporate applications without deploying physical desktops at every location. Azure Functions is designed for event-driven code, Container Apps hosts containers, and Azure Batch handles large-scale compute jobs. Azure Virtual Desktop is therefore the appropriate choice for centralized virtual desktop delivery.

Question 222

Which Azure service allows an organization to create a managed private network environment for Azure resources?

1. Azure DNS
2. Azure Virtual Network
3. Azure Advisor
4. Azure Monitor

Correct Answer: 2

Explanation

Azure Virtual Network provides the fundamental private networking environment for Azure resources. It enables resources such as virtual machines, application services, and other supported workloads to communicate securely through private IP addresses. Virtual networks can be divided into subnets and connected to on-premises networks using VPN Gateway or ExpressRoute. Network security groups, route tables, private endpoints, and other networking components can also be integrated. Azure DNS provides name resolution, Advisor provides recommendations, and Monitor handles observability. Architects use VNets as a core component of secure Azure network architectures.

Question 223

An application receives unpredictable traffic and should automatically add or remove compute instances without manual intervention. What should the architect configure?

1. Resource locks
2. Autoscale
3. Azure Policy
4. Azure Backup

Correct Answer: 2

Explanation

Autoscale allows supported Azure services to automatically adjust capacity according to workload demand. When traffic increases, additional instances can be added to maintain performance. When demand decreases, instances can be removed to reduce unnecessary resource consumption. Autoscale can use metrics or schedules depending on the service and workload requirements. Architects should define suitable minimum and maximum capacity values and select meaningful scaling metrics. Resource locks prevent changes, Policy enforces governance, and Backup provides data protection. Autoscale is therefore the appropriate capability for automatically adjusting application capacity.

Question 224

A database workload requires very high availability within a single Azure region. The architect wants database replicas distributed across availability zones. Which option should be considered?

1. Azure SQL Database zone redundancy
2. Azure Blob Archive
3. Azure Storage LRS
4. Azure Traffic Manager

Correct Answer: 1

Explanation

Azure SQL Database zone redundancy can distribute database compute replicas across multiple availability zones within a supported Azure region. This architecture improves resilience against failures affecting an individual availability zone while keeping the workload in the same region. It is useful when a workload requires high availability without necessarily implementing a full multi-region database architecture. LRS provides local storage redundancy, Blob Archive is a storage access tier, and Traffic Manager performs DNS-based traffic routing. Architects should verify service and region support and align the configuration with application availability and recovery requirements.

Question 225

Which Azure service is designed to provide managed file shares that can be accessed using the SMB protocol?

1. Azure Blob Storage
2. Azure Files
3. Azure Table Storage
4. Azure Queue Storage

Correct Answer: 2

Explanation

Azure Files provides fully managed cloud file shares that can be accessed using the Server Message Block, or SMB, protocol. This makes it suitable for applications that depend on traditional file-share semantics and can help migrate file servers to Azure. Azure Files supports access from Azure resources and, depending on the architecture, from on-premises environments. Blob Storage is optimized for object storage, Table Storage provides NoSQL key-value storage, and Queue Storage supports asynchronous messaging. Architects should select Azure Files when applications require shared file-system access rather than object-based storage.

Question 226

A company wants to deploy a web application without managing the underlying operating system but requires integration with a virtual network. Which Azure service is most appropriate?

1. Azure App Service
2. Azure Virtual Machines
3. Azure Dedicated Host
4. Azure Storage

Correct Answer: 1

Explanation

Azure App Service provides managed hosting for web applications and APIs while removing much of the operating system management responsibility. App Service can integrate with virtual networks through supported networking capabilities, allowing applications to access resources in private networks. This makes it useful for architectures where a managed web platform must communicate with databases or services that are not publicly exposed. Virtual Machines and Dedicated Hosts provide more infrastructure control but require greater management. Storage is not an application hosting platform. Architects should verify the exact networking requirements and App Service capabilities needed.

Question 227

Which Azure database option is best suited for a relational workload that requires compatibility with SQL Server features while reducing infrastructure administration?

1. Azure SQL Managed Instance
2. Azure Cosmos DB
3. Azure Table Storage
4. Azure Cache for Redis

Correct Answer: 1

Explanation

Azure SQL Managed Instance provides a managed relational database platform with broad compatibility with SQL Server features. It is particularly useful when migrating existing SQL Server workloads that depend on capabilities not available in every Azure SQL Database configuration. Microsoft manages infrastructure, patching, backups, and other platform responsibilities while customers continue to use familiar SQL technologies. Cosmos DB is a globally distributed NoSQL service, Table Storage is a key-value store, and Redis is an in-memory cache. Architects should evaluate compatibility, networking, licensing, performance, and migration requirements before selecting Managed Instance.

Question 228

An organization needs to run containerized applications but does not want to manage Kubernetes clusters. Which service should be considered?

1. Azure Kubernetes Service
2. Azure Container Apps
3. Azure Virtual Machines
4. Azure Dedicated Host

Correct Answer: 2

Explanation

Azure Container Apps provides a managed environment for running containerized applications without requiring customers to manage a Kubernetes control plane. It supports features such as autoscaling, ingress, revisions, and integration with other Azure services. This makes it suitable for microservices, APIs, background processing, and event-driven applications where Kubernetes-level control is unnecessary. AKS provides greater Kubernetes flexibility but introduces additional cluster architecture and management considerations. Virtual Machines and Dedicated Hosts require significantly more infrastructure administration. Architects should choose Container Apps when simplified container hosting is preferred over full Kubernetes control.

Question 229

Which Azure networking feature allows a virtual network to send traffic through a specified network virtual appliance or firewall?

1. User-defined route
2. Resource lock
3. Storage lifecycle policy
4. Availability set

Correct Answer: 1

Explanation

User-defined routes, or UDRs, allow architects to customize traffic routing within Azure virtual networks. A route can direct traffic toward a specific next hop, such as an Azure Firewall, network virtual appliance, virtual network gateway, or another supported destination. This is useful in hub-and-spoke architectures where traffic between spokes or toward external networks must pass through centralized security controls. Resource locks protect resources, lifecycle policies manage storage data, and availability sets improve VM resilience. UDRs should be designed carefully to avoid routing loops, unintended traffic paths, or connectivity failures.

Question 230

A company needs a centralized secret store for database passwords, API keys, and certificates. Which Azure service should be used?

1. Azure Key Vault
2. Azure Monitor
3. Azure Traffic Manager
4. Azure Data Factory

Correct Answer: 1

Explanation

Azure Key Vault provides centralized and secure management of secrets, keys, and certificates. Applications can retrieve required secrets without storing sensitive credentials directly in source code or configuration files. Key Vault integrates with Microsoft Entra ID and supports access control through appropriate authorization mechanisms. It can also support cryptographic operations and certificate management. Azure Monitor is used for observability, Traffic Manager handles DNS-based traffic routing, and Data Factory performs data integration. Architects should use managed identities where possible so applications can access Key Vault without embedding long-lived credentials.

Question 231

A business application must continue operating if an entire Azure region becomes unavailable. Which architecture provides the strongest resilience?

1. Single-zone deployment
2. Multi-region deployment
3. Single-subnet deployment
4. Single-VM deployment

Correct Answer: 2

Explanation

A multi-region architecture can provide resilience against a complete regional outage by deploying application components in geographically separate Azure regions. Traffic can be routed to a healthy region when the primary region becomes unavailable. Depending on the workload, the architecture may use active-active or active-passive deployment models. Data replication and recovery design are especially important because application availability alone does not guarantee data availability. Single-zone deployments primarily protect against zone-level failures, while single-subnet and single-VM designs provide no meaningful regional redundancy. Architects should define RTO and RPO before selecting the final design.

Question 232

Which Azure service provides a globally distributed entry point for web applications with integrated acceleration and security capabilities?

1. Azure Front Door
2. Azure Files
3. Azure VPN Gateway
4. Azure Backup

Correct Answer: 1

Explanation

Azure Front Door provides a global entry point for web applications and APIs. It uses Microsoft’s global network to route client traffic to appropriate backend endpoints and can provide features such as acceleration, caching, health-based routing, and Web Application Firewall integration. It is useful for globally distributed applications that require improved availability and performance. Azure Files provides managed file shares, VPN Gateway provides private network connectivity, and Backup provides data protection. Architects can use Front Door to create a resilient global application entry layer while maintaining suitable backend and data redundancy.

Question 233

A solution needs to process millions of independent background tasks and automatically distribute them across compute resources. Which Azure service is most appropriate?

1. Azure Batch
2. Azure DNS
3. Azure Key Vault
4. Azure Bastion

Correct Answer: 1

Explanation

Azure Batch is designed to run large-scale parallel and high-performance computing workloads. It manages pools of compute resources and distributes jobs and tasks across those resources, allowing organizations to process many independent workloads efficiently. Batch can automatically provision and scale compute capacity according to job requirements. Azure DNS handles name resolution, Key Vault manages secrets and cryptographic material, and Bastion provides secure administrative access to virtual machines. Architects should consider Batch when workloads consist of many independent or parallelizable tasks rather than continuously running interactive applications.

Question 234

Which design principle helps an application remain available by avoiding a single component whose failure can bring down the entire solution?

1. Single point of failure elimination
2. Centralized dependency
3. Manual scaling
4. Resource consolidation

Correct Answer: 1

Explanation

Eliminating single points of failure is a fundamental reliability principle. A single point of failure is a component whose failure can cause the entire application or a critical function to become unavailable. Architects can reduce this risk through redundancy, load balancing, multiple instances, availability zones, replicated databases, and geographically separate deployments where appropriate. Centralizing too many dependencies can increase failure impact, while manual scaling may reduce responsiveness during demand changes. Resource consolidation can also increase dependency on individual components. Reliable architectures distribute critical capabilities and provide suitable failover mechanisms.

Question 235

A workload requires a relational database with unpredictable usage and wants compute capacity to scale automatically during periods of demand. Which Azure SQL option should be evaluated?

1. Azure SQL Database serverless
2. Azure Blob Storage
3. Azure Cosmos DB
4. Azure Files

Correct Answer: 1

Explanation

Azure SQL Database serverless is designed for workloads with variable or intermittent usage. It automatically scales compute within configured limits based on workload demand and can pause during periods of inactivity when supported by the configuration. This can make it suitable for applications where continuous high compute capacity is unnecessary. Azure Blob Storage is object storage, Cosmos DB is a NoSQL database platform, and Azure Files provides managed file shares. Architects should evaluate workload patterns, latency requirements, scaling behavior, and cost before selecting serverless compute for a production database.

Question 236

Which Azure capability can enforce organizational requirements such as allowed regions or required resource tags?

1. Azure Policy
2. Azure Front Door
3. Azure Cache for Redis
4. Azure Load Balancer

Correct Answer: 1

Explanation

Azure Policy enables organizations to enforce or audit requirements across Azure resources. Policies can restrict deployments to approved regions, require specific tags, enforce configurations, or evaluate whether resources comply with organizational standards. Policy initiatives can group multiple policies into a broader governance framework. Front Door manages global web traffic, Redis provides caching, and Load Balancer distributes network traffic. Architects should use Policy as part of a broader governance model, often applying policies through management groups and subscriptions so that organizational requirements are consistently enforced across multiple environments.

Question 237

A company wants applications in Azure to access a storage account using a private IP address instead of exposing the storage service publicly. Which feature should be used?

1. Private endpoint
2. Public load balancer
3. Azure Traffic Manager
4. Network security group only

Correct Answer: 1

Explanation

An Azure private endpoint provides a private IP address from a virtual network for accessing supported Azure services, including storage accounts. Traffic between the virtual network and the service can remain on the Azure private network rather than requiring public internet connectivity. Private DNS can be used to resolve the service hostname to the private endpoint address. A public load balancer does not provide this private access model, Traffic Manager performs DNS-based routing, and an NSG alone does not create a private endpoint. Architects should also review DNS and network routing requirements when implementing private access.

Question 238

Which Azure service provides recommendations for improving reliability, security, performance, and cost efficiency of Azure resources?

1. Azure Advisor
2. Azure Service Bus
3. Azure Event Hubs
4. Azure Storage Explorer

Correct Answer: 1

Explanation

Azure Advisor analyzes Azure resource configurations and usage information and provides recommendations across areas such as cost, security, reliability, performance, and operational excellence. These recommendations can help architects identify opportunities to improve an existing environment after deployment. Advisor does not replace detailed architecture reviews, security assessments, or workload-specific testing, but it can provide useful guidance based on observed resource conditions. Service Bus and Event Hubs are messaging and event-ingestion services, while Storage Explorer is a management tool. Advisor is therefore the appropriate service for Azure resource recommendations.

Question 239

A company is designing an application that should continue functioning even when a dependent service temporarily becomes unavailable. Which application pattern can help prevent cascading failures?

1. Circuit breaker
2. Single-thread processing
3. Direct synchronous dependency
4. Permanent connection

Correct Answer: 1

Explanation

The circuit breaker pattern helps prevent repeated calls to an unavailable or unhealthy dependency. When failures exceed a defined threshold, the circuit temporarily stops sending requests to the failing service. This gives the dependency time to recover and prevents the calling application from continuously consuming resources through unsuccessful requests. After a suitable period, limited requests can test whether the dependency has recovered. The pattern can be combined with retries, timeouts, fallback behavior, and monitoring. Architects should avoid indiscriminate retries because they can worsen an overloaded dependency and create cascading failures.

Question 240

Which Azure storage option is best suited for extremely low-access archival data where retrieval can tolerate significant delay?

1. Hot tier
2. Premium tier
3. Archive tier
4. Transaction optimized tier

Correct Answer: 3

Explanation

The Azure Blob Storage Archive tier is designed for data that is rarely accessed and can tolerate longer retrieval times. It provides lower storage costs than frequently accessed tiers, making it suitable for long-term archival scenarios such as compliance records, historical datasets, and backup information that does not require immediate access. Data generally needs to be rehydrated before normal access. Hot storage is intended for frequently accessed data, while premium storage targets high-performance workloads. Architects should consider retention periods, retrieval requirements, early deletion considerations, and rehydration costs when selecting Archive.