View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 301

A company wants to provide users with secure access to an Azure virtual machine without exposing the VM’s public IP address. Which service should the architect recommend?

1. Azure Front Door
2. Azure Bastion
3. Azure CDN
4. Azure Traffic Manager

Correct Answer: 2

Explanation

Azure Bastion provides secure browser-based RDP and SSH access to virtual machines without requiring public IP addresses on those VMs. Bastion is deployed within an Azure virtual network and provides administrative access through the Azure portal. This can reduce the public exposure of management ports such as RDP and SSH. Front Door and CDN focus on application and content delivery, while Traffic Manager provides DNS-based traffic routing. Architects should combine Bastion with network security groups, identity controls, and least-privilege access to create a secure administrative architecture.

Question 302

Which Azure storage feature allows multiple versions of a blob to be retained automatically when the blob is modified or overwritten?

1. Blob versioning
2. Storage firewall
3. Immutable storage
4. Azure File Sync

Correct Answer: 1

Explanation

Blob versioning automatically maintains previous versions of a blob when it is modified or overwritten. This allows applications or administrators to recover earlier versions of data and provides protection against accidental changes. Versioning can be used together with blob soft delete and lifecycle management to create a broader data protection strategy. Storage firewalls control network access, immutable storage prevents modification or deletion according to configured retention policies, and File Sync synchronizes files between Windows Server and Azure Files. Architects should consider retention and storage costs when enabling versioning at scale.

Question 303

An application requires a globally distributed relational database with automatic replication between regions. Which Azure service should be evaluated first?

1. Azure SQL Database
2. Azure Queue Storage
3. Azure Files
4. Azure Cache for Redis

Correct Answer: 1

Explanation

Azure SQL Database provides several capabilities for building highly available relational database architectures, including geo-replication and failover groups. These capabilities allow databases to be replicated across Azure regions and can support regional disaster recovery and read-scale scenarios depending on the configuration. Queue Storage provides messaging, Azure Files provides managed file shares, and Redis is an in-memory caching service. Architects should evaluate Azure SQL Database when the workload requires relational data, managed database operations, and regional resilience. RPO, RTO, write patterns, and application failover behavior should guide the final design.

Question 304

Which Azure networking capability can dynamically exchange routing information between network virtual appliances and Azure virtual networks?

1. Azure Route Server
2. Azure DNS
3. Azure CDN
4. Azure DDoS Protection

Correct Answer: 1

Explanation

Azure Route Server provides a managed routing service that enables dynamic routing exchange between network virtual appliances and Azure virtual networks using the Border Gateway Protocol. This can simplify architectures that require network virtual appliances to dynamically advertise or learn routes instead of relying entirely on manually configured user-defined routes. Azure DNS manages name resolution, CDN provides content delivery, and DDoS Protection mitigates denial-of-service attacks. Architects should evaluate Route Server when dynamic route exchange is required and should carefully design routing relationships to avoid loops and unintended traffic paths.

Question 305

A company wants to ensure that data stored in a blob container cannot be modified or deleted before a defined retention period expires. Which feature should be used?

1. Blob versioning
2. Immutable Blob Storage
3. Azure File Sync
4. Storage lifecycle management

Correct Answer: 2

Explanation

Immutable Blob Storage provides write-once-read-many protection for supported blob data. It can prevent data from being modified or deleted during a configured retention period, making it useful for compliance, legal, and regulatory scenarios. Blob versioning retains previous versions but does not by itself provide the same immutability guarantees. File Sync synchronizes file data, while lifecycle management automates movement or deletion according to rules. Architects should carefully configure retention policies and understand whether the workload requires time-based retention or legal hold capabilities before selecting immutable storage.

Question 306

Which architecture pattern is most appropriate for processing requests asynchronously so that a temporary slowdown in one component does not immediately block the producer?

1. Queue-based architecture
2. Single-tier architecture
3. Direct database dependency
4. Synchronous-only architecture

Correct Answer: 1

Explanation

A queue-based architecture decouples producers from consumers by placing messages into an intermediate queue. Producers can continue submitting work even when consumers are temporarily busy or unavailable, subject to queue capacity and message retention. Consumers process messages when resources become available, helping absorb workload spikes and improve resilience. This pattern is commonly implemented with Azure Service Bus or Storage Queues. Architects should also design for retries, dead-letter handling, duplicate messages, idempotent processing, and monitoring. Queue-based designs are particularly useful for background processing and workloads with variable demand.

Question 307

A company requires an API gateway that can authenticate clients, enforce quotas, transform requests, and publish API documentation. Which service should be selected?

1. Azure API Management
2. Azure Event Grid
3. Azure Data Factory
4. Azure Storage

Correct Answer: 1

Explanation

Azure API Management provides a managed API gateway and management platform. It supports policies for authentication, authorization, rate limiting, quotas, request and response transformation, caching, and other API controls. It can also provide developer-facing API documentation and subscription management capabilities. Event Grid handles event routing, Data Factory manages data integration, and Storage provides data storage. Architects should use API Management when APIs need centralized governance and controlled exposure. Networking, identity, backend connectivity, monitoring, and appropriate service tier selection should also be considered when designing the API architecture.

Question 308

Which Azure service is designed to provide high-performance shared file storage for demanding enterprise workloads?

1. Azure NetApp Files
2. Azure Queue Storage
3. Azure Event Hubs
4. Azure Table Storage

Correct Answer: 1

Explanation

Azure NetApp Files provides enterprise-grade file storage as a managed Azure service and is designed for workloads requiring high performance, low latency, and advanced file capabilities. It supports supported file protocols and is commonly considered for demanding enterprise applications such as high-performance file workloads, databases, and specialized business applications. Queue Storage provides asynchronous messaging, Event Hubs handles event ingestion, and Table Storage provides NoSQL key-value storage. Architects should evaluate performance requirements, capacity, network placement, protocol needs, and application compatibility before selecting Azure NetApp Files.

Question 309

A workload has extremely high I/O requirements for a virtual machine and needs consistently low disk latency. Which managed disk type should be evaluated?

1. Standard HDD
2. Standard SSD
3. Premium SSD v2
4. Archive Blob Storage

Correct Answer: 3

Explanation

Premium SSD v2 is designed for workloads requiring high-performance managed disks with configurable performance characteristics. It can provide high IOPS and throughput with low latency and is suitable for demanding workloads that require more granular performance control than traditional disk configurations. Standard HDD and Standard SSD are intended for lower-cost workloads with less demanding performance requirements. Archive Blob Storage is an object storage tier and is not a VM managed disk type. Architects should evaluate workload IOPS, throughput, latency, capacity, supported regions, and cost before selecting a disk architecture.

Question 310

Which Azure service can automatically shut down development virtual machines on a schedule to reduce unnecessary costs?

1. Azure Automation
2. Azure Front Door
3. Azure Firewall
4. Azure Event Hubs

Correct Answer: 1

Explanation

Azure Automation can be used to schedule operational tasks such as starting or stopping virtual machines. For development and testing environments, scheduled shutdowns can reduce costs when resources do not need to run continuously. Automation runbooks or supported scheduling mechanisms can execute administrative actions according to defined times. Front Door handles global web traffic, Firewall provides network security, and Event Hubs handles event ingestion. Architects should ensure that scheduled shutdowns do not affect production workloads or required background processes and should communicate operational schedules clearly to development teams.

Question 311

Which Azure service provides a fully managed relational database compatible with MySQL?

1. Azure Database for MySQL
2. Azure Cosmos DB
3. Azure Cache for Redis
4. Azure Table Storage

Correct Answer: 1

Explanation

Azure Database for MySQL provides a managed relational database service for applications that use the MySQL database engine. Azure handles many infrastructure responsibilities, including platform maintenance, patching, and other managed operations depending on the selected configuration. This reduces the administrative burden compared with running MySQL directly on virtual machines. Cosmos DB is a NoSQL database, Redis is an in-memory cache, and Table Storage is a key-value store. Architects should evaluate compute sizing, storage, high availability, backup, networking, and application compatibility before selecting a managed MySQL architecture.

Question 312

A company wants to expose an application privately to consumers in another virtual network without allowing public internet access. Which technology should be evaluated?

1. Azure Private Link
2. Azure Public IP
3. Azure CDN
4. Azure Traffic Manager

Correct Answer: 1

Explanation

Azure Private Link can provide private connectivity to supported services through private endpoints. A service can be exposed privately so that consumers access it through a private IP address within their virtual network rather than through a public endpoint. This is useful for service provider and consumer architectures where network exposure should be minimized. Public IP addresses provide public connectivity, CDN is used for content distribution, and Traffic Manager provides DNS-based traffic routing. Architects should also consider private DNS, authorization, network routing, and service exposure boundaries when designing private service connectivity.

Question 313

Which Azure service can continuously assess resources and provide recommendations to improve cost efficiency?

1. Azure Advisor
2. Azure Bastion
3. Azure Service Bus
4. Azure Container Registry

Correct Answer: 1

Explanation

Azure Advisor analyzes Azure resource usage and configuration and can provide recommendations related to cost optimization, security, reliability, performance, and operational excellence. Cost recommendations can identify opportunities such as underutilized resources or configurations that may be optimized. Advisor is useful after workloads are running because its recommendations can be based on observed resource behavior. Bastion provides secure VM administration, Service Bus provides messaging, and Container Registry stores container images. Architects should review Advisor recommendations alongside business requirements because reducing resource size or capacity without considering workload requirements can affect performance or availability.

Question 314

An organization needs to process a large number of real-time events and then perform streaming transformations before storing the results. Which service should be considered for the streaming processing layer?

1. Azure Stream Analytics
2. Azure Resource Manager
3. Azure Key Vault
4. Azure Bastion

Correct Answer: 1

Explanation

Azure Stream Analytics is a managed real-time analytics service designed to process streaming data from sources such as Event Hubs, IoT Hub, and other supported inputs. It can filter, aggregate, transform, and analyze events as they arrive and send processed results to supported destinations. Resource Manager handles resource deployment and management, Key Vault protects secrets and keys, and Bastion provides secure VM access. Architects should consider event volume, query complexity, latency, checkpointing, output requirements, and integration with event ingestion services when designing a streaming analytics solution.

Question 315

Which Azure storage redundancy option provides locally redundant copies while keeping all copies within a single availability zone or physical location?

1. GZRS
2. GRS
3. LRS
4. ZRS

Correct Answer: 3

Explanation

Locally redundant storage, or LRS, maintains multiple copies of data within a single physical location in the primary region. It provides protection against certain hardware failures but does not provide the same resilience as zone-redundant or geo-redundant options. ZRS distributes copies across availability zones, while GRS replicates data to a secondary region. GZRS combines zone redundancy with geo-replication. Architects should select LRS when the workload’s durability and availability requirements can be met without zone or regional redundancy and when minimizing storage redundancy costs is important.

Question 316

A company wants to automatically scale an Azure Virtual Machine Scale Set based on application demand. Which capability should be configured?

1. VM Scale Set autoscale
2. Azure Resource Lock
3. Azure DNS
4. Azure Storage Explorer

Correct Answer: 1

Explanation

Virtual Machine Scale Sets support autoscaling so that the number of VM instances can increase or decrease according to workload demand. Scaling rules can use metrics such as CPU utilization or other supported signals. This allows applications to maintain sufficient capacity during traffic increases while reducing resource usage when demand falls. Resource Locks protect resources from accidental changes, DNS handles name resolution, and Storage Explorer is a management utility. Architects should configure appropriate minimum, maximum, and default instance counts and ensure that the application is designed to support horizontal scaling.

Question 317

Which Azure service is appropriate for running short-lived container workloads without managing a full virtual machine infrastructure?

1. Azure Container Instances
2. Azure Dedicated Host
3. Azure Managed Disks
4. Azure VPN Gateway

Correct Answer: 1

Explanation

Azure Container Instances provides a simple way to run containers without managing virtual machines or a Kubernetes cluster. It is useful for short-lived jobs, batch processing, development tasks, and lightweight container workloads where advanced orchestration is unnecessary. Container Apps is generally more appropriate when applications require managed ingress, revisions, and advanced scaling features. Dedicated Host provides isolated physical servers, Managed Disks provide VM storage, and VPN Gateway provides network connectivity. Architects should evaluate execution duration, scaling, networking, orchestration, and workload complexity before choosing Container Instances.

Question 318

Which Azure capability allows an application to use a stable private DNS name for a private endpoint?

1. Azure Private DNS
2. Azure Public IP
3. Azure Load Balancer
4. Azure CDN

Correct Answer: 1

Explanation

Azure Private DNS provides name resolution for resources within private networks and can be integrated with private endpoints. When a private endpoint is created, appropriate private DNS configuration can allow the normal service hostname to resolve to the private IP address rather than a public address. This helps applications connect to private services without requiring application code to use hard-coded private IP addresses. Public IP addresses expose resources externally, Load Balancer distributes traffic, and CDN caches content. Architects should carefully design DNS zones, virtual network links, and resolution paths.

Question 319

A company needs a disaster recovery process that starts multiple application components in a specific dependency order after failover. Which Azure Site Recovery capability should be considered?

1. Recovery plans
2. Storage lifecycle policies
3. Resource locks
4. Azure Policy initiatives

Correct Answer: 1

Explanation

Azure Site Recovery recovery plans allow architects to organize and orchestrate the recovery of multiple workloads in a defined sequence. This is particularly useful for multi-tier applications where databases, application servers, and frontend components must be recovered in a specific order. Recovery plans can help coordinate failover actions and provide a structured disaster recovery process. Storage lifecycle policies manage data movement, Resource Locks protect resources, and Policy initiatives enforce governance. Architects should test recovery plans regularly and verify dependencies, network configuration, application startup procedures, and recovery objectives.

Question 320

Which Well-Architected Framework pillar focuses on minimizing unnecessary cloud spending while meeting business requirements?

1. Security
2. Reliability
3. Cost Optimization
4. Performance Efficiency

Correct Answer: 3

Explanation

The Cost Optimization pillar focuses on ensuring that cloud resources provide appropriate business value without unnecessary expenditure. Architects evaluate resource sizing, utilization, pricing models, reservations, savings opportunities, scaling, storage tiers, and workload architecture to control costs. Cost optimization does not simply mean selecting the cheapest resources; reducing costs must not violate performance, security, availability, or business requirements. Azure tools such as Cost Management, Advisor, Pricing Calculator, and the TCO Calculator can support financial analysis. Architects should continuously review costs because workload usage and business requirements change over time.