View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 361

A company needs to connect an on-premises network to Azure using a dedicated private connection that does not traverse the public internet. Which service should the architect recommend?

1. Azure Traffic Manager
2. Azure VPN Gateway
3. ExpressRoute
4. Azure CDN

Correct Answer: 3

Explanation

Azure ExpressRoute provides private connectivity between an organization’s on-premises network and Microsoft cloud services. The connection is established through an ExpressRoute provider or exchange provider rather than using the public internet. ExpressRoute can provide more predictable performance, reliability, and connectivity characteristics than a site-to-site VPN. Traffic Manager provides DNS-based routing, VPN Gateway provides encrypted network connectivity over supported VPN connections, and CDN provides content delivery. Architects should evaluate bandwidth, provider availability, routing requirements, redundancy, cost, and ExpressRoute Global Reach requirements when designing the connection.

Question 362

Which Azure service provides centralized DNS hosting and name resolution for resources that require custom domain names?

1. Azure DNS
2. Azure Bastion
3. Azure Firewall
4. Azure Policy

Correct Answer: 1

Explanation

Azure DNS provides hosting for DNS domains and supports DNS records that can direct users and applications to Azure or external resources. It uses Azure’s global infrastructure and integrates with Azure resource management and access control. Azure Private DNS is used when private name resolution is required within virtual networks. Bastion provides secure VM access, Firewall controls network traffic, and Policy provides governance. Architects should determine whether public or private DNS is required and design appropriate zones, records, delegation, and resolution paths for the application architecture.

Question 363

A web application is deployed in multiple Azure regions. Users should automatically be directed to the region providing the lowest network latency. Which routing method is most appropriate?

1. Geographic routing
2. Priority routing
3. Weighted routing
4. Performance routing

Correct Answer: 4

Explanation

Performance routing in Azure Traffic Manager directs users toward the endpoint that provides the best network performance based on latency measurements between users and Azure regions. This is useful for globally distributed applications where reducing network latency is an important requirement. Geographic routing instead bases decisions on the geographic location of users, while priority routing is commonly used for ordered failover and weighted routing distributes traffic according to assigned weights. Architects should also consider endpoint health, application state, DNS caching, regional capacity, and data consistency when designing global traffic distribution.

Question 364

A company wants to connect two virtual networks in Azure and requires resources in both networks to communicate privately. What should the architect configure?

1. Azure CDN
2. VNet peering
3. Azure Key Vault
4. Azure Event Grid

Correct Answer: 2

Explanation

VNet peering provides private connectivity between Azure virtual networks. Resources in peered networks can communicate using private IP addresses over Microsoft’s network infrastructure. Peering can be configured between virtual networks in the same region or between supported regions using global VNet peering. Architects should remember that VNet peering is not automatically transitive, meaning a connection from VNet A to VNet B and from VNet B to VNet C does not automatically connect A to C. Routing, address spaces, security rules, and DNS should also be considered.

Question 365

Which Azure capability allows applications to use managed identities instead of storing credentials in application configuration?

1. Azure Resource Graph
2. Azure Policy
3. Microsoft Entra ID
4. Azure Traffic Manager

Correct Answer: 3

Explanation

Microsoft Entra ID provides the identity platform used by Azure managed identities. Managed identities allow supported Azure resources and applications to authenticate to services without requiring developers to store passwords, client secrets, or certificates in application code. Azure automatically manages the identity credentials and rotation. Resource Graph is used for resource querying, Policy provides governance, and Traffic Manager provides DNS-based routing. Architects should assign only the permissions required by the workload and use role-based access control to maintain least privilege when managed identities access resources such as Key Vault or Storage.

Question 366

A company wants to ensure that a storage account can only be accessed through selected networks and not from arbitrary public locations. Which configuration should be considered?

1. Storage account network rules
2. Azure Advisor
3. Application Insights
4. Azure Cost Management

Correct Answer: 1

Explanation

Storage account network rules allow organizations to control which networks can access a storage account. Depending on the architecture, access can be restricted using virtual networks, IP network rules, resource instances, or private endpoints. These controls help reduce the public exposure of storage resources and support defense-in-depth security. Azure Advisor provides recommendations, Application Insights monitors applications, and Cost Management tracks spending. Architects should combine network restrictions with identity-based authorization, encryption, secure transfer requirements, and appropriate logging rather than relying on network rules as the only security control.

Question 367

An application requires a highly available PostgreSQL database with automatic failover within an Azure region. Which service should be evaluated?

1. Azure Table Storage
2. Azure Database for PostgreSQL Flexible Server
3. Azure Service Bus
4. Azure Cosmos DB

Correct Answer: 2

Explanation

Azure Database for PostgreSQL Flexible Server provides managed PostgreSQL database capabilities and supports high availability configurations for supported workloads. High availability can provide a standby server and automatic failover when the primary instance experiences an eligible failure. This reduces the operational effort required to build and maintain database redundancy. Table Storage is a NoSQL key-value service, Service Bus provides messaging, and Cosmos DB is a globally distributed NoSQL database. Architects should evaluate zone placement, backup requirements, recovery objectives, application connection behavior, performance, and regional availability before selecting the database configuration.

Question 368

A company needs to execute a containerized batch job for a short period without managing a Kubernetes cluster. Which Azure service is appropriate?

1. Azure Kubernetes Service
2. Azure Container Registry
3. Azure Container Instances
4. Azure App Configuration

Correct Answer: 3

Explanation

Azure Container Instances provides a simple way to run containers without requiring organizations to manage virtual machines or a Kubernetes cluster. It is suitable for short-lived workloads, development tasks, batch processing, and burst scenarios where full container orchestration is unnecessary. Azure Kubernetes Service is appropriate when advanced orchestration is required, while Container Registry stores container images and App Configuration manages application settings. Architects should evaluate startup requirements, networking, storage, workload duration, scaling needs, and orchestration complexity before selecting Container Instances for a containerized workload.

Question 369

A company needs to store large amounts of analytics data using a hierarchical namespace and access controls similar to a file system. Which Azure service should be selected?

1. Azure Data Lake Storage Gen2
2. Azure Queue Storage
3. Azure Cache for Redis
4. Azure Files

Correct Answer: 1

Explanation

Azure Data Lake Storage Gen2 provides scalable object storage with a hierarchical namespace designed for analytics workloads. It supports directory structures and access control lists that allow organizations to manage permissions at directory and file levels. ADLS Gen2 is commonly used with services such as Azure Synapse Analytics, Azure Databricks, and Azure Data Factory. Queue Storage is intended for asynchronous messaging, Redis provides in-memory caching, and Azure Files provides managed file shares. Architects should plan directory structures, ACLs, identity integration, storage tiers, lifecycle policies, and workload access patterns.

Question 370

Which Azure service is designed to provide global edge delivery and caching for static and dynamic web content?

1. Azure SQL Database
2. Azure Front Door
3. Azure NetApp Files
4. Azure Event Hubs

Correct Answer: 2

Explanation

Azure Front Door provides global application delivery capabilities and can use Microsoft’s edge network to improve application performance for geographically distributed users. Depending on the configuration, Front Door can provide caching, traffic routing, health-based failover, TLS termination, and Web Application Firewall integration. Azure SQL Database provides relational database services, NetApp Files provides high-performance file storage, and Event Hubs provides event ingestion. Architects should evaluate caching requirements, cache invalidation, routing rules, backend health, security policies, and regional architecture when using Front Door for global applications.

Question 371

An organization wants to separate Azure subscriptions by development, testing, and production while applying common governance policies to all of them. Which design is most appropriate?

1. Place all workloads in one resource group
2. Use management groups above the subscriptions
3. Create a separate tenant for every environment
4. Use one storage account for every environment

Correct Answer: 2

Explanation

Management groups provide a hierarchy above Azure subscriptions, making them suitable for applying common governance controls across multiple subscriptions. An organization can create separate subscriptions for development, testing, and production and organize them under an appropriate management group hierarchy. Policies and role assignments can then be applied at the management group level and inherited by child subscriptions. Resource groups organize resources within subscriptions, while separate tenants are generally unnecessary for normal environment separation. Architects should design subscription boundaries around governance, billing, security, ownership, and operational requirements.

Question 372

Which Azure feature is most useful for identifying unused resources and opportunities to reduce Azure spending?

1. Azure Bastion
2. Azure Advisor
3. Azure Event Grid
4. Azure DNS

Correct Answer: 2

Explanation

Azure Advisor analyzes Azure resources and provides recommendations across areas such as cost, security, reliability, operational excellence, and performance efficiency. Cost recommendations can identify opportunities such as underutilized virtual machines or other resources that may be resized, stopped, or removed. Bastion provides secure VM access, Event Grid routes events, and DNS provides name resolution. Architects should review Advisor recommendations alongside actual workload requirements, business constraints, and performance measurements before implementing changes. Cost optimization should avoid reducing resources in ways that compromise availability or application performance.

Question 373

A company wants a centralized solution for routing API requests, applying policies, and providing developer-facing API management capabilities. Which Azure service should be used?

1. Azure API Management
2. Azure Storage
3. Azure Load Balancer
4. Azure Data Box

Correct Answer: 1

Explanation

Azure API Management provides a managed platform for publishing, securing, transforming, monitoring, and governing APIs. It can act as an API gateway between clients and backend services and supports policies for capabilities such as authentication, rate limiting, transformation, and traffic control. API Management can also provide developer portal functionality depending on the configuration and tier. Storage provides data storage, Load Balancer distributes network traffic, and Data Box supports physical data transfer. Architects should evaluate networking, authentication, backend integration, scalability, API lifecycle management, and required API gateway features.

Question 374

An organization wants to enforce a rule that all storage accounts must use secure transfer. Which Azure governance mechanism should be used?

1. Azure Bastion
2. Azure Traffic Manager
3. Azure Policy
4. Azure Cache for Redis

Correct Answer: 3

Explanation

Azure Policy can enforce configuration requirements such as requiring secure transfer for supported storage accounts. A policy can audit existing resources or deny deployments that do not meet the defined security requirement. Secure transfer helps ensure that requests to storage services use encrypted connections such as HTTPS. Bastion provides secure VM administration, Traffic Manager performs DNS-based routing, and Redis provides caching. Architects should combine Policy with identity controls, encryption, network restrictions, monitoring, and logging to create a comprehensive storage security architecture rather than depending on a single governance control.

Question 375

A company needs a database that can distribute data globally and support multiple consistency models. Which Azure service is most appropriate?

1. Azure SQL Managed Instance
2. Azure Database for MySQL
3. Azure Cosmos DB
4. Azure Files

Correct Answer: 3

Explanation

Azure Cosmos DB is a globally distributed database service designed for applications requiring low-latency access across geographic regions. It supports multiple consistency models, allowing architects to balance consistency, latency, and availability according to application requirements. Cosmos DB also supports automatic global distribution and can be configured for multi-region writes in suitable architectures. SQL Managed Instance and MySQL provide relational database capabilities, while Azure Files provides file storage. Architects should carefully select partition keys, consistency levels, throughput configuration, regional distribution, and conflict-handling strategies when designing a Cosmos DB solution.

Question 376

A workload has unpredictable traffic and must automatically add or remove compute instances based on demand. Which Azure capability should be considered?

1. Azure Autoscale
2. Azure Resource Lock
3. Azure Key Vault
4. Azure Data Box

Correct Answer: 1

Explanation

Azure Autoscale allows supported services to automatically adjust capacity based on workload demand or predefined schedules. This can help maintain application performance during periods of increased traffic while reducing resource consumption during periods of lower demand. Autoscale can be used with services such as App Service and Virtual Machine Scale Sets, depending on the workload architecture. Resource Locks protect resources, Key Vault manages secrets and keys, and Data Box supports large-scale physical data transfer. Architects should define appropriate scaling metrics, minimum and maximum capacity, cooldown periods, and application performance thresholds.

Question 377

Which disaster recovery service can replicate Azure virtual machines to another Azure region and support failover during a regional outage?

1. Azure Site Recovery
2. Azure Resource Graph
3. Azure App Configuration
4. Azure CDN

Correct Answer: 1

Explanation

Azure Site Recovery provides disaster recovery capabilities for supported workloads by orchestrating replication and failover to a secondary location. For Azure virtual machines, it can replicate workloads to another Azure region and support planned or unplanned failover scenarios. Recovery plans can also coordinate the startup sequence of dependent workloads. Resource Graph is used for querying resource information, App Configuration manages application settings, and CDN provides content delivery. Architects should define recovery objectives, replication policies, network mappings, dependencies, test failover procedures, and post-failover operations before implementing Site Recovery.

Question 378

A company needs a storage solution that provides managed SMB file shares accessible by multiple Windows and Linux clients. Which Azure service should be considered?

1. Azure Blob Storage
2. Azure Files
3. Azure Event Hubs
4. Azure Queue Storage

Correct Answer: 2

Explanation

Azure Files provides fully managed cloud file shares that can be accessed using protocols such as SMB and, for supported configurations, NFS. Azure Files can be used when applications or users require shared file-system semantics rather than object storage. Blob Storage is optimized for object data, Event Hubs handles high-throughput event ingestion, and Queue Storage supports asynchronous messaging. Architects should consider authentication, network access, performance tier, redundancy, quotas, backup, and protocol requirements when designing an Azure Files solution for shared application or user data.

Question 379

A company wants to protect an application from a volumetric distributed denial-of-service attack while keeping normal application traffic available. Which Azure service should be evaluated?

1. Azure Advisor
2. Azure Policy
3. Azure DDoS Protection
4. Azure Data Factory

Correct Answer: 3

Explanation

Azure DDoS Protection provides capabilities designed to help protect Azure resources from distributed denial-of-service attacks. It uses Azure’s network infrastructure and attack detection mechanisms to help distinguish malicious traffic from normal traffic and can provide enhanced protection and visibility compared with basic platform-level protection. Advisor provides recommendations, Policy manages governance, and Data Factory provides data integration. Architects should combine DDoS protection with other controls such as WAF, network segmentation, secure authentication, monitoring, and appropriate application architecture to create layered protection against both network-level and application-level threats.

Question 380

A business-critical application must continue operating even if an entire Azure region becomes unavailable. Which architecture should the solution prioritize?

1. Single-region deployment with backups only
2. Multi-region deployment
3. Single availability zone
4. Single virtual machine

Correct Answer: 2

Explanation

A multi-region architecture provides protection against a complete Azure region failure by deploying application components and required data across geographically separate regions. Traffic can be redirected to a healthy region using services such as Azure Front Door or Traffic Manager, depending on the application architecture. The exact design depends on whether the application uses active-active or active-passive deployment and how data replication is handled. A single region, availability zone, or VM cannot provide equivalent regional resilience. Architects should define RTO, RPO, data residency, failover, cost, and operational requirements.