View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 201

A company wants to deploy an application in Azure with minimal infrastructure management. Which hosting model is most appropriate?

1. Infrastructure as a Service
2. Platform as a Service
3. Colocation
4. Bare-metal hosting

Correct Answer: 2

Explanation

Platform as a Service, or PaaS, allows organizations to deploy applications without managing much of the underlying infrastructure. Azure App Service is a common PaaS example because Microsoft manages the operating system, platform maintenance, and much of the underlying infrastructure. This lets development teams focus on application functionality instead of server administration. Infrastructure as a Service provides more control but requires greater management responsibility. Architects should choose PaaS when reducing operational overhead is more important than having complete control over the underlying operating system and infrastructure.

Question 202

Which Azure service provides a managed environment for deploying APIs, web apps, and backend services without managing servers?

1. Azure App Service
2. Azure Virtual Machines
3. Azure Managed Disks
4. Azure ExpressRoute

Correct Answer: 1

Explanation

Azure App Service is a managed platform that supports web applications, REST APIs, and backend services without requiring customers to manage the underlying operating system. It provides features such as autoscaling, deployment slots, custom domains, TLS support, and integration with monitoring and identity services. Microsoft handles much of the platform maintenance, allowing development teams to focus on application code. Virtual Machines provide more infrastructure control but require more administration. Architects should select App Service when a managed application hosting platform meets the workload requirements.

Question 203

A solution must continue serving users if one application instance becomes unhealthy. Which feature should be configured?

1. Health probes
2. Resource locks
3. Azure Policy
4. Private DNS

Correct Answer: 1

Explanation

Health probes allow Azure traffic distribution services to determine whether backend instances are available to receive requests. When a probe identifies an unhealthy instance, the load-balancing service can stop sending new traffic to that instance and continue using healthy instances. This improves application availability and helps prevent users from being routed to failed resources. Resource locks protect resources from accidental changes, Policy enforces governance, and Private DNS provides name resolution. Architects should configure appropriate health checks based on the actual application behavior and ensure that unhealthy instances can recover automatically when possible.

Question 204

Which Azure service is designed for centralized management of APIs, including authentication and rate limiting?

1. Azure API Management
2. Azure Event Hubs
3. Azure Storage
4. Azure Bastion

Correct Answer: 1

Explanation

Azure API Management provides a managed API gateway and governance platform. It can apply policies for authentication, authorization, rate limiting, request validation, transformation, caching, and other API controls. It also supports API documentation and consumer management. This allows organizations to expose backend services through a controlled interface instead of allowing clients to communicate directly with internal services. Event Hubs is designed for event ingestion, Storage provides data storage, and Bastion provides secure VM administration. API Management is the appropriate choice when centralized API security and lifecycle management are required.

Question 205

A company wants to protect data from accidental deletion and restore deleted blobs within a retention period. Which feature should be used?

1. Blob soft delete
2. Azure Firewall
3. VNet peering
4. Azure Traffic Manager

Correct Answer: 1

Explanation

Blob soft delete protects blobs from accidental deletion by retaining deleted data for a configured period. During the retention window, authorized users can restore deleted blobs instead of permanently losing them. This feature is particularly useful for protecting against accidental user actions and application errors. It can be combined with blob versioning and other storage protection capabilities for stronger recovery options. Azure Firewall protects network traffic, VNet peering connects virtual networks, and Traffic Manager performs DNS-based routing. Soft delete is specifically designed to support recovery from accidental blob deletion.

Question 206

Which architecture provides centralized security and connectivity services for multiple Azure virtual networks?

1. Hub-and-spoke
2. Peer-to-peer mesh only
3. Single-subnet architecture
4. Isolated virtual networks

Correct Answer: 1

Explanation

A hub-and-spoke architecture places shared networking and security services in a central hub while workload virtual networks are deployed as spokes. The hub can host Azure Firewall, VPN Gateway, DNS infrastructure, and other shared components. Spokes can contain separate applications while using centralized services through controlled connectivity. This design improves governance, scalability, and operational consistency compared with independently managing every network. Architects should carefully plan address spaces, routing, peering, security rules, and connectivity requirements so that the centralized architecture does not create unnecessary dependencies.

Question 207

Which Azure service provides globally distributed NoSQL database capabilities with configurable consistency?

1. Azure SQL Database
2. Azure Cosmos DB
3. Azure Files
4. Azure Database for PostgreSQL

Correct Answer: 2

Explanation

Azure Cosmos DB is a globally distributed database service designed for scalable NoSQL workloads. It supports multiple consistency levels, allowing architects to balance data consistency, availability, latency, and throughput according to application requirements. Cosmos DB can replicate data across multiple Azure regions and supports partitioning for large-scale workloads. Azure SQL Database and PostgreSQL provide relational database capabilities, while Azure Files is a managed file storage service. Cosmos DB is therefore the best choice when a globally distributed NoSQL architecture with configurable consistency is required.

Question 208

Which service should an architect use to estimate the monthly cost of a proposed Azure architecture?

1. Azure Advisor
2. Azure Pricing Calculator
3. Azure Monitor
4. Azure Service Health

Correct Answer: 2

Explanation

The Azure Pricing Calculator helps architects estimate the expected cost of Azure services before deploying a solution. Users can select services, regions, quantities, pricing options, and expected usage to build an approximate monthly cost estimate. This makes it useful during architecture planning and budgeting. Azure Advisor provides recommendations for existing resources, Azure Monitor focuses on monitoring and telemetry, and Service Health provides information about Azure service issues. Architects should use the Pricing Calculator to compare different architecture options and identify potential cost differences before committing to a deployment.

Question 209

A company needs to automatically move older blobs to a cheaper storage tier. Which feature should be used?

1. Azure Storage lifecycle management
2. Azure RBAC
3. Azure Bastion
4. Azure Private Link

Correct Answer: 1

Explanation

Azure Storage lifecycle management can automatically transition blobs between access tiers according to rules based on factors such as age or modification time. For example, frequently accessed data can initially remain in the Hot tier and later move to Cool or Archive as it becomes less active. This can reduce storage costs without requiring application code to manage every transition. Lifecycle policies can also delete data after a defined period. Architects should carefully define rules so required data is not moved or deleted in a way that negatively affects application performance or compliance requirements.

Question 210

Which Azure service provides encrypted private connectivity from an on-premises network through a dedicated connection?

1. Azure VPN Gateway
2. Azure ExpressRoute
3. Azure Traffic Manager
4. Azure Front Door

Correct Answer: 2

Explanation

Azure ExpressRoute provides private connectivity between an organization’s on-premises network and Azure through a supported connectivity provider. It is designed for scenarios requiring private network communication, predictable performance, or high-throughput connectivity. Unlike a typical site-to-site VPN, ExpressRoute does not rely on an encrypted tunnel over the public internet as the primary connectivity model. VPN Gateway is appropriate when organizations need secure connectivity over the internet. Architects should evaluate bandwidth, latency, redundancy, provider availability, security requirements, and cost when selecting between ExpressRoute and VPN Gateway.

Question 211

Which Azure service can protect web applications against SQL injection attacks?

1. Azure Web Application Firewall
2. Azure VPN Gateway
3. Azure Bastion
4. Azure DNS

Correct Answer: 1

Explanation

Azure Web Application Firewall, or WAF, helps protect web applications against common application-layer attacks, including SQL injection and cross-site scripting. It examines HTTP and HTTPS requests and can apply managed or customized rules to detect potentially malicious traffic. WAF can be integrated with services such as Azure Front Door and Application Gateway. VPN Gateway provides network connectivity, Bastion provides secure administrative access, and DNS handles name resolution. Architects should use WAF as part of a broader security architecture that also includes identity protection, secure coding practices, network controls, and monitoring.

Question 212

A workload requires automatic scaling based on CPU utilization and request demand. Which capability should be used?

1. Azure Autoscale
2. Resource Lock
3. Azure Policy
4. Azure Private DNS

Correct Answer: 1

Explanation

Azure Autoscale can automatically increase or decrease supported application resources according to workload demand. Scaling rules can use metrics such as CPU utilization, request counts, queue length, or other service-specific indicators. This helps applications maintain performance during periods of increased demand while reducing unnecessary resource consumption when demand falls. Autoscale is especially valuable for variable workloads. Architects should ensure that the application supports horizontal scaling where applicable and should configure appropriate minimum and maximum instance limits to prevent excessive resource consumption or insufficient capacity.

Question 213

Which Azure service provides a managed in-memory cache for low-latency application data?

1. Azure Cache for Redis
2. Azure Event Grid
3. Azure Data Factory
4. Azure Key Vault

Correct Answer: 1

Explanation

Azure Cache for Redis provides managed in-memory caching for applications that require fast access to frequently used data. By keeping selected information in memory, applications can reduce repeated database queries and improve response times. Redis can also be used for distributed session state, counters, and other low-latency scenarios. Architects should determine which data is appropriate for caching and establish expiration or invalidation strategies to prevent stale information. Event Grid handles event routing, Data Factory handles data integration, and Key Vault manages sensitive information rather than providing general-purpose application caching.

Question 214

Which Azure feature provides centralized authorization for users and applications accessing Azure resources?

1. Azure RBAC
2. Azure Storage lifecycle management
3. Azure CDN
4. Azure Traffic Manager

Correct Answer: 1

Explanation

Azure role-based access control, or RBAC, provides authorization for Azure resources by assigning roles to users, groups, service principals, and managed identities. Roles define which actions an identity can perform and can be scoped at management group, subscription, resource group, or resource levels. This supports least-privilege access and helps organizations separate administrative responsibilities. RBAC is different from Microsoft Entra authentication because authentication establishes identity while RBAC determines permissions on Azure resources. Architects should regularly review role assignments and avoid granting broader permissions than necessary.

Question 215

A company requires a recovery solution for virtual machines after a regional outage. Which service should be considered?

1. Azure Site Recovery
2. Azure Advisor
3. Azure CDN
4. Azure API Management

Correct Answer: 1

Explanation

Azure Site Recovery provides disaster recovery capabilities by replicating supported workloads to a secondary location and coordinating failover when the primary environment becomes unavailable. It can be used to support business continuity for Azure virtual machines and other supported workloads. Recovery plans can define the sequence in which application components should start during failover. This is different from Azure Backup, which primarily provides recoverable backup points. Architects should define RTO and RPO requirements first and then configure replication, recovery plans, networking, and testing accordingly.

Question 216

Which Azure storage redundancy protects against a failure affecting one availability zone?

1. LRS
2. ZRS
3. GRS
4. RA-GRS

Correct Answer: 2

Explanation

Zone-redundant storage, or ZRS, synchronously replicates data across multiple availability zones within an Azure region. If one availability zone experiences an infrastructure failure, data remains available through copies stored in other zones, depending on the service and workload configuration. LRS provides redundancy within a limited physical location, while GRS and RA-GRS provide replication to a secondary region. ZRS is therefore appropriate when the primary requirement is resilience against zone-level failures while keeping data within the same Azure region.

Question 217

Which Azure service provides centralized monitoring and alerting for resources?

1. Azure Monitor
2. Azure Policy
3. Azure Key Vault
4. Azure Resource Lock

Correct Answer: 1

Explanation

Azure Monitor provides monitoring capabilities for Azure resources, applications, and supported infrastructure. It collects metrics and logs and can generate alerts when defined conditions occur. Monitor integrates with services such as Log Analytics and Application Insights to provide broader observability across infrastructure and applications. Architects can use alerts to detect performance problems, availability issues, or operational conditions that require action. Azure Policy manages governance, Key Vault protects secrets, and Resource Locks protect resources from accidental changes. Azure Monitor is therefore the appropriate service for centralized monitoring and alerting.

Question 218

A company wants to isolate a critical production workload from other subscriptions for governance and billing purposes. Which option is most appropriate?

1. Create a separate subscription
2. Create another subnet
3. Create another storage container
4. Create another availability zone

Correct Answer: 1

Explanation

A separate Azure subscription provides a broader boundary for governance, billing, access management, quotas, and resource organization. Organizations commonly use separate subscriptions for production, development, testing, or different business units when stronger administrative separation is required. Subnets provide network segmentation but do not create an independent billing and governance boundary. Availability zones provide infrastructure resilience, not organizational isolation. Architects should design subscription structures according to organizational responsibilities and governance requirements while using management groups to apply policies and controls consistently across multiple subscriptions.

Question 219

Which Azure service is appropriate for moving and transforming data between multiple systems?

1. Azure Data Factory
2. Azure Bastion
3. Azure Firewall
4. Azure Front Door

Correct Answer: 1

Explanation

Azure Data Factory is a managed data integration service used to build pipelines that move and transform data between different sources and destinations. It supports connections to Azure services, databases, files, and many external data systems. Data Factory can orchestrate data movement, invoke transformations, schedule workflows, and coordinate other processing services. This makes it useful for enterprise data integration and migration architectures. Bastion provides secure VM access, Firewall provides network security, and Front Door handles global web delivery. Data Factory is therefore the appropriate choice for managed data movement and orchestration.

Question 220

Which Well-Architected Framework pillar focuses on maximizing performance while using resources efficiently?

1. Security
2. Reliability
3. Performance Efficiency
4. Operational Excellence

Correct Answer: 3

Explanation

Performance Efficiency focuses on ensuring that workloads deliver the required performance while using resources effectively. Architects consider scaling, resource sizing, caching, data access patterns, network performance, and workload monitoring when addressing this pillar. The goal is not simply to use the largest resources available but to match capacity with actual application requirements and changing demand. Autoscaling and caching can help maintain performance while avoiding unnecessary resource consumption. Performance Efficiency should be balanced with reliability, security, operational practices, and cost optimization when designing a complete Azure architecture.