View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 261

Which Azure service is best suited for storing large volumes of unstructured data such as images, videos, and documents?

1. Azure SQL Database
2. Azure Blob Storage
3. Azure Table Storage
4. Azure Cache for Redis

Correct Answer: 2

Explanation

Azure Blob Storage is designed for storing large amounts of unstructured data, including images, videos, documents, backups, logs, and other binary objects. It provides different access tiers that allow architects to balance storage cost and access requirements. Blob Storage also supports features such as lifecycle management, versioning, soft delete, and various redundancy options. Azure SQL Database is designed for relational data, Table Storage provides NoSQL key-value storage, and Redis is an in-memory cache. Architects should select Blob Storage when object-based storage is the primary requirement.

Question 262

An organization needs to automatically deploy identical Azure environments for development, testing, and production. Which approach should the architect recommend?

1. Manual portal deployments
2. Infrastructure as Code
3. Manual server configuration
4. Local desktop scripts only

Correct Answer: 2

Explanation

Infrastructure as Code allows organizations to define infrastructure in declarative templates or code and deploy consistent environments repeatedly. Azure technologies such as Bicep and ARM templates can describe resources, configurations, dependencies, and parameters. This improves consistency and reduces configuration drift between development, testing, and production environments. Manual deployments are more prone to human error and inconsistencies. Architects should store infrastructure definitions in source control and use automated deployment pipelines where appropriate. Parameterization can allow the same architecture to be deployed across environments with different settings.

Question 263

Which Azure service provides a managed event-driven platform for executing code without maintaining servers?

1. Azure Functions
2. Azure Virtual Machines
3. Azure Dedicated Host
4. Azure Managed Disks

Correct Answer: 1

Explanation

Azure Functions is a serverless compute service designed to execute code in response to events or triggers. Functions can respond to HTTP requests, timers, messages, queues, events, and other supported triggers. Microsoft manages the underlying infrastructure, allowing developers and architects to focus primarily on application logic. Azure Functions can be used for lightweight APIs, automation, background processing, and event-driven workflows. Virtual Machines and Dedicated Hosts require infrastructure management, while Managed Disks provide storage for virtual machines. Architects should select the appropriate Functions hosting plan based on scaling, networking, and execution requirements.

Question 264

A company wants to centrally manage Azure resources across several subscriptions belonging to different business units. Which Azure hierarchy should be used?

1. Availability sets
2. Management groups
3. Storage containers
4. Virtual network subnets

Correct Answer: 2

Explanation

Azure management groups provide a hierarchical organizational structure above subscriptions. They allow organizations to apply Azure Policy, role assignments, and governance controls consistently across multiple subscriptions. Management groups are particularly useful for large organizations with multiple business units, environments, or regulatory requirements. Availability sets are used for VM resilience, storage containers organize blobs, and subnets provide network segmentation. Architects should design the management group hierarchy according to governance and organizational needs, avoiding unnecessarily complex structures. Policies applied at higher levels can be inherited by subscriptions and resources below them.

Question 265

Which Azure service provides a managed registry for storing and managing container images?

1. Azure Container Registry
2. Azure Container Apps
3. Azure Functions
4. Azure Batch

Correct Answer: 1

Explanation

Azure Container Registry, or ACR, is a managed private registry for storing and managing container images and related artifacts. It integrates with Azure services such as AKS and Container Apps and can support automated image builds, security controls, and image lifecycle management. Container Apps and Functions are compute services, while Azure Batch is designed for large-scale parallel processing. Architects should consider authentication, network access, image scanning, replication, retention, and deployment integration when designing a container architecture. ACR is appropriate when organizations require controlled storage of private container images.

Question 266

A web application must remain available during the failure of one virtual machine. Which architecture should be used?

1. Deploy one larger VM
2. Deploy multiple VM instances behind a load balancer
3. Use one VM with a larger disk
4. Place the VM in a storage account

Correct Answer: 2

Explanation

Deploying multiple virtual machine instances behind a load balancer removes dependence on a single VM. If one instance fails, the load balancer can stop sending traffic to it while continuing to route requests to healthy instances. This improves application availability and supports horizontal scaling. A larger single VM does not eliminate the single point of failure. Disk size also does not improve application instance redundancy. Architects should additionally consider availability zones or availability sets, health probes, autoscaling, and application state management when designing a highly available VM-based application.

Question 267

Which Azure database service is designed for globally distributed applications requiring low-latency access to NoSQL data?

1. Azure SQL Managed Instance
2. Azure Cosmos DB
3. Azure Database for PostgreSQL
4. Azure Cache for Redis

Correct Answer: 2

Explanation

Azure Cosmos DB is designed for globally distributed NoSQL workloads that require low-latency access across geographic locations. It supports multi-region replication and configurable consistency models, allowing architects to balance latency, availability, and consistency requirements. Cosmos DB also uses partitioning to distribute data and workload across resources. SQL Managed Instance and PostgreSQL are relational database platforms, while Redis is primarily an in-memory caching service. Architects should carefully select partition keys, consistency levels, throughput configuration, and regional distribution based on workload access patterns and application requirements.

Question 268

A company wants to protect its Azure web application from common HTTP-based attacks while also routing global users to healthy application instances. Which architecture should be considered?

1. Azure Front Door with Web Application Firewall
2. Azure Files with Azure Backup
3. Azure VPN Gateway with Azure DNS
4. Azure Queue Storage with Azure Functions

Correct Answer: 1

Explanation

Azure Front Door combined with Web Application Firewall provides a strong architecture for globally distributed web applications. Front Door provides global HTTP and HTTPS routing, while WAF can inspect requests and help protect against common application-layer threats such as SQL injection and cross-site scripting. Front Door can also use backend health information to route traffic appropriately. The other combinations do not provide the same global web routing and application-layer security capabilities. Architects should also configure TLS, access controls, monitoring, and appropriate backend isolation to create a comprehensive web security architecture.

Question 269

Which Azure service should be used when an application needs a reliable enterprise message queue that supports dead-lettering and transactional messaging scenarios?

1. Azure Event Grid
2. Azure Service Bus
3. Azure Event Hubs
4. Azure Storage Blob

Correct Answer: 2

Explanation

Azure Service Bus provides enterprise messaging capabilities such as queues, topics, subscriptions, dead-letter queues, message sessions, duplicate detection, and transactional support for appropriate scenarios. It is designed for reliable asynchronous communication between distributed applications and services. Event Grid is primarily an event routing service, while Event Hubs is optimized for high-throughput event ingestion and streaming. Blob Storage is an object storage platform. Architects should choose Service Bus when reliable enterprise messaging semantics and advanced message-processing features are more important than raw event ingestion throughput.

Question 270

A company wants to move an existing application to Azure with minimal code changes and minimal redesign. Which migration strategy is most appropriate?

1. Refactoring
2. Rebuilding
3. Rehosting
4. Replacing

Correct Answer: 3

Explanation

Rehosting, commonly called lift-and-shift, involves moving an existing workload to Azure with minimal changes to the application. This strategy can accelerate migration because it avoids extensive application redesign. It is often useful when an organization needs to move workloads quickly or wants to modernize them later. Refactoring involves changing application architecture or code to take greater advantage of cloud capabilities, while rebuilding involves substantial redevelopment. Architects should evaluate dependencies, licensing, performance, security, and operational requirements before selecting rehosting as the migration strategy.

Question 271

Which Azure service provides a managed DNS service for hosting DNS zones and records?

1. Azure DNS
2. Azure Front Door
3. Azure Firewall
4. Azure Bastion

Correct Answer: 1

Explanation

Azure DNS provides managed hosting for DNS domains and records using Azure’s global network. It supports common DNS record types and integrates with Azure resource management and role-based access control. Organizations can use Azure DNS for public DNS zones and Azure Private DNS for name resolution within private networks. Front Door provides global application routing, Firewall provides network security, and Bastion provides secure VM access. Architects should select public or private DNS capabilities according to the application architecture and ensure that domain delegation and record management are properly configured.

Question 272

An application requires a globally distributed database and must support writes from multiple regions. Which Cosmos DB capability should the architect consider?

1. Multi-region writes
2. Blob lifecycle management
3. SQL elastic pools
4. Storage immutability

Correct Answer: 1

Explanation

Azure Cosmos DB multi-region writes allows applications to write data to multiple configured regions rather than relying on a single write region. This can reduce write latency for geographically distributed users and improve availability during regional failures. Architects must carefully consider consistency, conflict resolution, partitioning, and application behavior when enabling multi-region writes. Blob lifecycle management applies to storage objects, SQL elastic pools optimize resource sharing among databases, and storage immutability protects data from modification or deletion. Multi-region writes are appropriate when geographically distributed write workloads require low latency and high availability.

Question 273

Which Azure service can automatically discover an organization’s on-premises servers and help assess migration readiness?

1. Azure Migrate
2. Azure Monitor
3. Azure Advisor
4. Azure Policy

Correct Answer: 1

Explanation

Azure Migrate provides tools for discovering, assessing, and migrating on-premises workloads to Azure. It can help organizations collect information about servers, dependencies, resource utilization, and compatibility so architects can determine suitable migration approaches. Azure Migrate can support assessment activities before selecting targets such as Azure Virtual Machines or other Azure services. Azure Monitor focuses on monitoring, Advisor provides recommendations, and Policy provides governance. Architects should use migration assessments to identify dependencies, sizing requirements, compatibility issues, licensing considerations, and potential risks before executing migration waves.

Question 274

A workload needs dedicated physical server capacity for compliance and isolation requirements. Which Azure option should be evaluated?

1. Azure Dedicated Host
2. Azure Container Apps
3. Azure Functions
4. Azure CDN

Correct Answer: 1

Explanation

Azure Dedicated Host provides dedicated physical servers for an organization’s virtual machines. This can help satisfy certain compliance, isolation, or licensing requirements where workloads must run on dedicated physical infrastructure. Customers can control which VMs are placed on dedicated hosts while Azure continues to manage the underlying physical server infrastructure. Container Apps and Functions provide managed application hosting, while CDN provides content delivery. Architects should verify whether dedicated host capabilities satisfy the specific compliance requirement and should consider host capacity, VM sizes, fault domains, maintenance behavior, and cost.

Question 275

Which Azure networking component can provide outbound internet connectivity for resources in a virtual network while using a stable public IP address?

1. Azure NAT Gateway
2. Azure Private DNS
3. Azure Route Server
4. Azure Bastion

Correct Answer: 1

Explanation

Azure NAT Gateway provides managed outbound internet connectivity for resources in a virtual network. It can use one or more static public IP addresses, allowing outbound connections to originate from predictable public addresses. NAT Gateway does not accept unsolicited inbound connections, making it useful for scenarios where workloads need reliable outbound access without exposing them directly to inbound internet traffic. Private DNS provides name resolution, Route Server facilitates dynamic routing exchange, and Bastion provides secure administrative access. Architects should consider subnet association, public IP capacity, scaling, and outbound connectivity requirements.

Question 276

A company wants to deploy containers with automatic scaling based on HTTP traffic while avoiding Kubernetes cluster management. Which service should be recommended?

1. Azure Container Apps
2. Azure Virtual Machines
3. Azure Dedicated Host
4. Azure Managed Disks

Correct Answer: 1

Explanation

Azure Container Apps provides managed container hosting with built-in application scaling capabilities and does not require customers to manage a Kubernetes cluster directly. It supports HTTP-based scaling and other event-driven scaling scenarios, making it suitable for microservices and APIs with variable workloads. Virtual Machines and Dedicated Hosts require greater infrastructure administration, while Managed Disks provide storage for compute resources. Architects should consider Container Apps when simplified operations, container-based deployment, and automatic scaling are more important than direct Kubernetes control and advanced cluster customization.

Question 277

Which Azure service can provide application performance monitoring, distributed tracing, and telemetry for supported applications?

1. Application Insights
2. Azure Resource Lock
3. Azure Storage Queue
4. Azure VPN Gateway

Correct Answer: 1

Explanation

Application Insights is an Azure Monitor feature designed to provide application performance monitoring and telemetry. It can collect information about requests, dependencies, exceptions, performance, availability, and other application behaviors. Distributed tracing capabilities can help architects and developers understand how requests move across multiple services. Resource Locks protect resources, Storage Queue provides asynchronous messaging, and VPN Gateway provides network connectivity. Application Insights is particularly valuable in distributed applications where identifying bottlenecks and failures requires visibility across multiple application components and dependencies.

Question 278

An architect needs to choose between active-active and active-passive regional disaster recovery. What is a major advantage of an active-active design?

1. Both regions can serve production traffic
2. Only one region requires deployment
3. No data replication is necessary
4. RPO becomes irrelevant

Correct Answer: 1

Explanation

In an active-active architecture, multiple regions can simultaneously serve production traffic. This can improve utilization of deployed resources and provide faster traffic redirection because the secondary region is already serving users. It can also improve global performance when traffic is routed to geographically appropriate regions. However, active-active designs are more complex because data synchronization, consistency, deployment, and state management must work across regions. Active-passive designs generally keep one region as the primary production environment. Architects should choose the model based on RTO, RPO, workload behavior, complexity, and cost.

Question 279

Which Azure service can be used to orchestrate workflows that integrate applications, services, and automated actions?

1. Azure Logic Apps
2. Azure Managed Disks
3. Azure Load Balancer
4. Azure Availability Sets

Correct Answer: 1

Explanation

Azure Logic Apps provides a managed workflow platform for integrating applications, services, data sources, and automated actions. It offers many connectors and triggers that allow architects to create workflows without building all integration logic from scratch. Logic Apps can support scenarios such as processing business events, sending notifications, synchronizing systems, and automating operational tasks. Managed Disks provide VM storage, Load Balancer distributes network traffic, and Availability Sets improve VM availability. Architects should use Logic Apps when workflow orchestration and integration are central requirements and extensive custom code is unnecessary.

Question 280

A solution must tolerate temporary message-processing failures without losing messages. Which design is most appropriate?

1. Direct synchronous calls only
2. Queue-based load leveling
3. Single-instance processing
4. Client-side local storage only

Correct Answer: 2

Explanation

Queue-based load leveling separates message producers from consumers and allows messages to wait safely when processing capacity is temporarily unavailable. This helps absorb traffic spikes and prevents producers from overwhelming downstream services. If a consumer fails temporarily, messages can remain in the queue for later processing according to the messaging service’s retention and delivery configuration. Direct synchronous calls create tighter dependencies and can propagate failures between components. Architects should also consider retries, dead-letter handling, idempotency, message visibility, and monitoring when designing reliable queue-based architectures.