View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 281

Which Azure service provides a managed platform for building and running data integration pipelines?

1. Azure Data Factory
2. Azure Bastion
3. Azure Front Door
4. Azure Key Vault

Correct Answer: 1

Explanation

Azure Data Factory is a managed cloud data integration service used to create pipelines that move, transform, and orchestrate data across different systems. It supports many data stores and can coordinate activities such as copying data, invoking transformations, and scheduling workflows. Architects can use Data Factory for migration, analytics, and enterprise data integration scenarios. Azure Bastion provides secure VM access, Front Door manages global web traffic, and Key Vault stores secrets and keys. Data Factory is most appropriate when the architecture requires managed data movement and workflow orchestration across multiple sources.

Question 282

An organization wants to use a centralized network security appliance to inspect traffic between application spokes and external networks. Which Azure service should be considered?

1. Azure DNS
2. Azure Firewall
3. Azure Storage
4. Azure Advisor

Correct Answer: 2

Explanation

Azure Firewall is a managed, stateful network security service that can provide centralized traffic filtering and inspection. In a hub-and-spoke architecture, it can be deployed in the hub network so that traffic from spoke networks can be inspected before reaching other destinations. It supports network and application-level traffic rules and integrates with Azure networking capabilities. DNS handles name resolution, Storage provides data storage, and Advisor provides recommendations. Architects should design routing carefully so required traffic passes through the firewall without creating asymmetric paths or unnecessary network bottlenecks.

Question 283

Which Azure service provides protection against large-scale distributed denial-of-service attacks targeting public IP resources?

1. Azure DDoS Protection
2. Azure Data Factory
3. Azure Queue Storage
4. Azure File Sync

Correct Answer: 1

Explanation

Azure DDoS Protection provides enhanced protection against distributed denial-of-service attacks targeting resources with public IP addresses in Azure virtual networks. It helps defend applications against volumetric and protocol-level attacks and provides additional monitoring and mitigation capabilities. It is different from Web Application Firewall, which focuses primarily on application-layer HTTP and HTTPS threats. Data Factory manages data integration, Queue Storage provides asynchronous messaging, and File Sync synchronizes files. Architects should combine DDoS protection with secure application design, WAF, network controls, and monitoring for a comprehensive defense strategy.

Question 284

A company wants to run SQL queries directly against files in a data lake without first loading the data into a dedicated relational database. Which Azure service should be considered?

1. Azure Synapse Analytics serverless SQL
2. Azure SQL Database serverless
3. Azure Cache for Redis
4. Azure Service Bus

Correct Answer: 1

Explanation

Azure Synapse Analytics serverless SQL can query data stored in supported data lake formats without requiring the organization to provision a dedicated SQL pool for every query workload. This can be useful for ad hoc analytics, exploration, and scenarios where query demand varies significantly. Architects can use serverless capabilities to access data in storage while avoiding continuous dedicated compute costs. Azure SQL Database serverless is a relational database compute option, Redis is an in-memory cache, and Service Bus provides messaging. The architecture should consider data formats, query performance, security, and cost.

Question 285

Which Azure service is designed to provide scalable analytics and data warehousing capabilities for enterprise workloads?

1. Azure Synapse Analytics
2. Azure Bastion
3. Azure Traffic Manager
4. Azure Key Vault

Correct Answer: 1

Explanation

Azure Synapse Analytics is an analytics platform that combines capabilities for data warehousing, big data processing, and data integration. It supports analytical workloads that may involve large datasets and complex queries. Organizations can use different Synapse components depending on whether they need dedicated SQL processing, serverless querying, Spark-based processing, or integrated data pipelines. Bastion provides secure VM administration, Traffic Manager provides DNS-based routing, and Key Vault protects secrets. Architects should select Synapse components according to workload size, concurrency, data formats, performance expectations, and cost requirements.

Question 286

A company needs a managed analytics platform for large-scale data processing using Apache Spark. Which Azure service should the architect evaluate?

1. Azure Databricks
2. Azure Load Balancer
3. Azure VPN Gateway
4. Azure Files

Correct Answer: 1

Explanation

Azure Databricks provides a managed analytics platform built around Apache Spark and is designed for large-scale data engineering, analytics, and machine learning workloads. It can integrate with Azure storage and other data services while reducing the infrastructure management required for Spark environments. Load Balancer distributes network traffic, VPN Gateway provides secure network connectivity, and Azure Files offers managed file shares. Architects should evaluate Databricks when the workload requires scalable Spark processing, collaborative analytics, or data engineering capabilities and should consider cluster configuration, security, data access, and cost.

Question 287

A solution needs to send notifications when resources experience important Azure platform events, such as service incidents or planned maintenance. Which service should the architect use?

1. Azure Service Health
2. Azure Blob Storage
3. Azure Container Registry
4. Azure Cache for Redis

Correct Answer: 1

Explanation

Azure Service Health provides personalized information about Azure service issues that may affect an organization’s resources. It includes information related to service incidents, planned maintenance, and other health-related events. This allows organizations to understand potential impacts and respond appropriately. It is different from Azure Monitor, which primarily focuses on monitoring resource and application telemetry. Blob Storage provides object storage, Container Registry stores container images, and Redis provides caching. Architects should integrate Service Health notifications with appropriate alerting and operational processes to ensure teams can respond quickly to Azure platform events.

Question 288

A company wants to identify whether a specific Azure resource is currently experiencing a platform issue. Which service should be checked first?

1. Azure Resource Health
2. Azure Pricing Calculator
3. Azure Policy
4. Azure Data Factory

Correct Answer: 1

Explanation

Azure Resource Health provides information about the health of individual Azure resources. It can help determine whether a resource is available, degraded, or affected by an underlying platform issue. This is different from Service Health, which provides broader information about Azure services and incidents that may affect subscriptions or regions. Pricing Calculator estimates costs, Policy manages governance, and Data Factory handles data integration. Architects and operations teams can use Resource Health when troubleshooting a specific resource and determining whether an observed problem is related to Azure platform availability.

Question 289

Which Azure service allows a private application to securely connect to supported Azure services using a private endpoint?

1. Azure Private Link
2. Azure Traffic Manager
3. Azure CDN
4. Azure Public DNS

Correct Answer: 1

Explanation

Azure Private Link enables private connectivity from a virtual network to supported Azure services through private endpoints. The private endpoint receives a private IP address from the virtual network, allowing applications to communicate with the target service without relying on public endpoint exposure. This architecture can help reduce network exposure and support security requirements for sensitive workloads. Traffic Manager provides DNS-based traffic routing, CDN distributes content, and Public DNS hosts public DNS records. Architects should also configure private DNS resolution and appropriate network access controls when implementing Private Link.

Question 290

Which Azure service provides centralized identity management and authentication for users and applications?

1. Microsoft Entra ID
2. Azure Blob Storage
3. Azure Firewall
4. Azure Load Balancer

Correct Answer: 1

Explanation

Microsoft Entra ID provides cloud-based identity and access management for users, applications, and services. It supports authentication, application identities, conditional access, multifactor authentication, and integration with Azure resources and many external applications. Architects can use Entra ID to establish a centralized identity foundation and then use role-based access control to authorize access to Azure resources. Blob Storage provides object storage, Firewall provides network security, and Load Balancer distributes traffic. Identity architecture should include least privilege, strong authentication, lifecycle management, and appropriate protection for privileged accounts.

Question 291

A company wants to grant an Azure application access to Key Vault without storing a password or client secret in application configuration. Which identity approach is preferred?

1. Managed identity
2. Shared password
3. Embedded API key
4. Local administrator account

Correct Answer: 1

Explanation

Managed identities allow Azure resources to authenticate to supported services without requiring developers to store credentials such as passwords or client secrets in application configuration. Microsoft Entra ID manages the identity, while administrators can assign appropriate permissions to the resource. This reduces credential exposure and simplifies secret management. For example, an App Service application can use its managed identity to access secrets stored in Key Vault. Architects should follow least privilege and choose system-assigned or user-assigned managed identities according to lifecycle and reuse requirements.

Question 292

Which Azure service provides a managed platform for hosting containerized microservices with built-in ingress and scaling features?

1. Azure Container Apps
2. Azure Managed Disks
3. Azure DNS
4. Azure Backup

Correct Answer: 1

Explanation

Azure Container Apps is a managed application platform designed for containerized workloads such as microservices, APIs, and background services. It provides features including ingress, revisions, scaling, and integration with supporting Azure services without requiring customers to manage a Kubernetes control plane directly. Managed Disks provide storage for virtual machines, DNS provides name resolution, and Backup provides data protection. Architects should select Container Apps when they need simplified container deployment and scaling while avoiding the operational complexity associated with managing a full Kubernetes cluster.

Question 293

Which Azure service is appropriate for storing application configuration values separately from application code?

1. Azure App Configuration
2. Azure Bastion
3. Azure VPN Gateway
4. Azure Availability Sets

Correct Answer: 1

Explanation

Azure App Configuration provides a centralized service for managing application settings and configuration data. It allows configuration values to be separated from application code and supports centralized management across environments. Applications can retrieve configuration dynamically, helping reduce the need to redeploy code when settings change. Key Vault is more appropriate for sensitive secrets such as passwords and cryptographic keys, while App Configuration can work alongside Key Vault. Bastion provides VM access, VPN Gateway provides connectivity, and Availability Sets improve VM resilience. Architects should separate configuration management from sensitive secret storage.

Question 294

A web application has static images, JavaScript, and CSS files that should be delivered quickly to users around the world. Which architecture should be considered?

1. Azure CDN
2. Azure Key Vault
3. Azure Service Bus
4. Azure VPN Gateway

Correct Answer: 1

Explanation

Azure CDN is designed to cache and deliver static content from geographically distributed edge locations. By serving frequently requested files closer to users, CDN can reduce latency and decrease load on the origin server. Static assets such as images, JavaScript, CSS, and downloadable files are common CDN candidates. Key Vault manages secrets, Service Bus provides messaging, and VPN Gateway provides secure network connectivity. Architects should evaluate cache rules, content expiration, HTTPS, origin configuration, and invalidation requirements when designing a content delivery architecture.

Question 295

A company needs a storage solution that provides shared file access to multiple Azure virtual machines. Which service should be selected?

1. Azure Files
2. Azure Blob Storage
3. Azure Queue Storage
4. Azure Table Storage

Correct Answer: 1

Explanation

Azure Files provides managed file shares that can be mounted by multiple Azure virtual machines and other supported clients. It supports common file-sharing protocols such as SMB and can replace or extend traditional file server architectures. Blob Storage is optimized for object storage, Queue Storage is designed for asynchronous messaging, and Table Storage provides NoSQL key-value storage. Architects should evaluate storage performance tiers, redundancy, authentication, network access, backup, and protocol requirements when selecting Azure Files for shared application data.

Question 296

Which Azure capability allows a database workload to share a pool of compute resources across multiple databases?

1. Azure SQL elastic pool
2. Azure Storage lifecycle management
3. Azure Application Gateway
4. Azure Event Grid

Correct Answer: 1

Explanation

Azure SQL elastic pools provide a shared set of compute resources for multiple Azure SQL databases. They are particularly useful when databases have variable or unpredictable usage patterns that do not peak at the same time. Instead of provisioning dedicated capacity for every database, the databases can share pool resources, potentially improving cost efficiency and utilization. Storage lifecycle management handles blob movement and deletion, Application Gateway provides application traffic routing, and Event Grid handles event delivery. Architects should analyze database workload patterns before determining whether an elastic pool is economically and technically appropriate.

Question 297

A company wants to deploy resources using templates while ensuring that required naming, location, and configuration standards are consistently applied. Which combination is most appropriate?

1. Bicep and Azure Policy
2. Azure CDN and Redis
3. Azure VPN Gateway and DNS
4. Azure Backup and Site Recovery

Correct Answer: 1

Explanation

Bicep can define and deploy Azure infrastructure consistently, while Azure Policy can enforce or audit organizational requirements after and during deployment. Together, they provide a strong foundation for standardized infrastructure. Bicep can parameterize resource names, locations, SKUs, and other settings, while Policy can deny noncompliant configurations or audit resources that violate standards. CDN and Redis address application performance, VPN Gateway and DNS provide networking capabilities, and Backup and Site Recovery focus on resilience. Architects should combine Infrastructure as Code with governance rather than relying solely on manual processes.

Question 298

A workload requires predictable low-latency connectivity between virtual machines that communicate heavily with one another. Which Azure capability should the architect evaluate?

1. Proximity placement groups
2. Storage lifecycle management
3. Azure DNS
4. Azure Policy

Correct Answer: 1

Explanation

Proximity placement groups are designed to reduce physical distance between Azure compute resources within a region, which can help minimize network latency for workloads that require frequent communication. They can be useful for tightly coupled applications where latency between virtual machines is an important architectural requirement. However, using proximity placement groups can affect deployment flexibility and should not be selected solely for general-purpose applications. Storage lifecycle management manages blob data, DNS provides name resolution, and Policy provides governance. Architects should validate actual latency requirements before introducing placement constraints.

Question 299

Which Azure service helps an organization create a standardized, governed cloud environment across subscriptions before deploying workloads?

1. Azure Landing Zones
2. Azure Cache for Redis
3. Azure Event Hubs
4. Azure Storage Explorer

Correct Answer: 1

Explanation

Azure Landing Zones provide an architectural approach for establishing a standardized Azure environment before deploying application workloads. They help organizations define subscription structure, identity, networking, security, governance, monitoring, and other foundational capabilities. This approach is particularly useful for enterprises adopting Azure at scale because it establishes consistent guardrails while allowing application teams to deploy workloads within governed boundaries. Redis provides caching, Event Hubs handles event ingestion, and Storage Explorer is a management utility. Architects should tailor landing zone design to organizational structure, compliance requirements, and operational responsibilities.

Question 300

A company wants to reduce the impact of a regional database failure and needs a secondary database that can become the primary database during an outage. Which capability should be evaluated?

1. Geo-replication
2. Storage lifecycle management
3. Local caching only
4. Resource locking

Correct Answer: 1

Explanation

Database geo-replication creates a secondary database or replica in another Azure region, depending on the database service and configuration. It can provide a recovery option if the primary region experiences a significant outage. During a disaster, the secondary environment can be promoted or used according to the service’s failover model. Architects should consider replication latency, RPO, RTO, application connection changes, failover procedures, and regional availability when designing geo-replication. Local caching and resource locks do not provide regional database disaster recovery capabilities, while lifecycle management addresses storage data movement.