View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 381

A company needs to minimize database costs for an application whose usage is highly variable and includes long periods of inactivity. Which Azure SQL Database option should the architect consider?

1. Azure SQL Managed Instance
2. Azure SQL Database serverless
3. Azure Dedicated Host
4. Azure Database for MySQL

Correct Answer: 2

Explanation

Azure SQL Database serverless is designed for workloads with intermittent or unpredictable usage. It can automatically scale compute based on demand and may pause after a configured period of inactivity, helping reduce compute costs when the database is not actively being used. It is particularly useful for development, test, and applications with variable traffic patterns. SQL Managed Instance provides broader SQL Server compatibility, Dedicated Host provides dedicated physical infrastructure, and MySQL is a separate database platform. Architects should evaluate database size, performance requirements, scaling behavior, and application connection patterns before selecting serverless.

Question 382

Which Azure capability allows a virtual machine workload to use a temporary local disk for the operating system, potentially reducing storage costs?

1. Ephemeral OS disk
2. Azure Files
3. Blob lifecycle management
4. Storage account replication

Correct Answer: 1

Explanation

Ephemeral OS disks store the operating system disk on local storage associated with the virtual machine host rather than on a persistent managed disk. They can provide benefits such as faster reset operations and reduced storage costs for suitable workloads. Ephemeral OS disks are appropriate when the operating system can be recreated from the original image and important application data is stored elsewhere. They are not suitable when the OS disk itself must persist independently of the VM host. Architects should verify VM size, supported cache placement, durability requirements, and workload recovery behavior.

Question 383

An organization wants to route requests to different microservices based on URL paths, such as /orders and /payments. Which Azure service is most suitable?

1. Azure Load Balancer
2. Azure Traffic Manager
3. Azure Application Gateway
4. Azure VPN Gateway

Correct Answer: 3

Explanation

Azure Application Gateway operates at the application layer and supports path-based routing for HTTP and HTTPS traffic. An architect can configure rules that send requests such as /orders to one backend pool and /payments to another. This capability is useful for microservice architectures, APIs, and applications hosted across multiple backend services. Load Balancer operates primarily at Layer 4, Traffic Manager performs DNS-based routing, and VPN Gateway provides secure network connectivity. Application Gateway can also integrate with WAF and TLS termination capabilities for additional application delivery and security requirements.

Question 384

A company wants to automatically move older blob data to lower-cost storage tiers according to the age of the data. Which feature should be configured?

1. Blob versioning
2. Storage lifecycle management
3. Private endpoint
4. Storage account firewall

Correct Answer: 2

Explanation

Azure Blob Storage lifecycle management allows organizations to automatically transition blobs between access tiers or delete data based on defined rules. For example, frequently accessed data can remain in the Hot tier while older data can move to Cool or Archive according to business requirements. This can reduce storage costs while retaining data for required periods. Blob versioning retains previous blob versions, private endpoints provide private connectivity, and storage firewalls control network access. Architects should consider access frequency, retrieval costs, retention requirements, compliance, and lifecycle policy conditions before implementing automated tiering.

Question 385

A solution needs to ensure that messages that repeatedly fail processing are separated from normal messages for later investigation. Which Azure Service Bus feature should be used?

1. Service Bus sessions
2. Dead-letter queue
3. Azure Event Grid
4. Azure CDN

Correct Answer: 2

Explanation

Azure Service Bus dead-letter queues provide a mechanism for isolating messages that cannot be successfully processed. Messages can be moved to the dead-letter queue after conditions such as repeated delivery failures or expiration, depending on configuration and messaging behavior. Applications can then inspect, repair, or reprocess these messages separately from normal traffic. Service Bus sessions are primarily used for ordered processing and stateful message handling. Event Grid provides event routing, while CDN provides content delivery. Architects should design monitoring, retry limits, dead-letter processing, and operational procedures for failed messages.

Question 386

Which architecture pattern is useful when an application needs to decouple producers from consumers and absorb sudden increases in workload?

1. Queue-based load leveling
2. Direct synchronous communication
3. Single-instance processing
4. Static content delivery

Correct Answer: 1

Explanation

Queue-based load leveling places a messaging queue between producers and consumers so that incoming work can be buffered when demand temporarily exceeds processing capacity. Consumers can process messages at a controlled rate, allowing the application to absorb traffic spikes without requiring backend systems to immediately handle the entire workload. Azure Service Bus and Storage Queues can support this pattern depending on requirements. Direct synchronous communication creates tighter dependencies, while single-instance processing does not provide sufficient elasticity. Architects should also design retry handling, idempotency, queue monitoring, and scaling policies.

Question 387

A company wants to provide a centralized private DNS namespace for resources connected to multiple virtual networks. Which Azure service should be considered?

1. Azure DNS Public
2. Azure Private DNS
3. Azure Traffic Manager
4. Azure Front Door

Correct Answer: 2

Explanation

Azure Private DNS provides private DNS zones for name resolution within virtual networks. It can be integrated with multiple virtual networks through virtual network links, allowing resources across connected networks to resolve names within a private namespace. Private DNS is particularly important for architectures using private endpoints because it can map service hostnames to private IP addresses. Public Azure DNS hosts internet-facing DNS zones, while Traffic Manager provides DNS-based traffic routing and Front Door provides global application delivery. Architects should plan zone ownership, virtual network links, resolution paths, and naming conventions.

Question 388

An organization has several subscriptions and wants to query resource information across all of them from a centralized service. Which Azure service should be used?

1. Azure Monitor
2. Azure Resource Graph
3. Azure Advisor
4. Azure Backup

Correct Answer: 2

Explanation

Azure Resource Graph is designed for querying Azure resource information at scale across subscriptions and management groups. It can help organizations inventory resources, identify configurations, analyze tags, support governance, and perform compliance investigations without manually inspecting each resource. Azure Monitor focuses on observability and telemetry, Advisor provides recommendations, and Azure Backup provides data protection. Resource Graph is particularly useful for large environments where centralized resource discovery and reporting are important. Architects can combine Resource Graph queries with governance processes and automation to improve operational visibility across an Azure estate.

Question 389

A company is designing a secure architecture for an internet-facing application. Which combination provides protection at both the web application and network levels?

1. WAF and Azure Firewall
2. Azure Files and Azure DNS
3. Azure Cache for Redis and Event Hubs
4. Azure Data Factory and Azure Storage

Correct Answer: 1

Explanation

A combination of Web Application Firewall and Azure Firewall can provide layered protection at different levels of the network architecture. WAF focuses on HTTP and HTTPS application-layer threats such as SQL injection and cross-site scripting, while Azure Firewall provides centralized network traffic filtering and control. This defense-in-depth approach can be used with other controls such as DDoS Protection, identity security, private networking, and monitoring. The other combinations provide storage, DNS, caching, messaging, or data integration capabilities but do not directly provide equivalent layered network and application security.

Question 390

A company wants to store secrets used by applications without placing passwords or connection strings directly in source code. Which service should be used?

1. Azure Policy
2. Azure Key Vault
3. Azure Traffic Manager
4. Azure Load Balancer

Correct Answer: 2

Explanation

Azure Key Vault provides secure storage and management for secrets, keys, and certificates. Applications can retrieve secrets at runtime using identities and appropriate access permissions instead of embedding sensitive values directly in source code or configuration files. This reduces the risk of credentials being exposed through repositories or deployment artifacts. Azure Policy provides governance, Traffic Manager provides DNS-based routing, and Load Balancer distributes network traffic. Architects should integrate Key Vault with managed identities where possible and implement least-privilege access, auditing, monitoring, rotation, and appropriate recovery procedures.

Question 391

A workload requires a globally distributed NoSQL database and must support multiple write regions to reduce write latency for geographically distributed users. Which service should be selected?

1. Azure SQL Database
2. Azure Files
3. Azure Cosmos DB
4. Azure Service Bus

Correct Answer: 3

Explanation

Azure Cosmos DB supports global distribution and can be configured for multi-region writes, allowing applications in different geographic locations to write to nearby regions. This can reduce write latency and improve application availability for globally distributed workloads. Architects must carefully select partition keys and consistency models and understand conflict resolution behavior when using multiple write regions. Azure SQL Database provides relational database capabilities, Azure Files provides file shares, and Service Bus provides messaging. Cosmos DB is particularly suitable when the application’s data model and scalability requirements align with a globally distributed NoSQL architecture.

Question 392

Which Azure networking service can provide outbound internet connectivity for virtual machines without requiring a public IP address on each VM?

1. Azure NAT Gateway
2. Azure Bastion
3. Azure Private DNS
4. Azure Route Server

Correct Answer: 1

Explanation

Azure NAT Gateway provides managed outbound internet connectivity for resources in a virtual network without requiring individual public IP addresses on those resources. It provides scalable and predictable outbound connectivity and can use one or more public IP addresses or a public IP prefix. Bastion provides secure administrative access, Private DNS provides private name resolution, and Route Server facilitates dynamic routing exchange with network virtual appliances. Architects should evaluate outbound port requirements, SNAT capacity, security controls, and whether inbound connectivity is also required when designing the network architecture.

Question 393

A company wants to deploy a new application version gradually and quickly switch back if problems occur. Which Azure App Service capability is most appropriate?

1. Deployment slots
2. Storage lifecycle rules
3. Resource locks
4. Availability sets

Correct Answer: 1

Explanation

Azure App Service deployment slots provide separate environments within an App Service application, such as staging and production. A new application version can be deployed to a staging slot, tested, and then swapped with the production slot. Slot swaps can support controlled releases and provide a relatively quick rollback approach by swapping slots again when appropriate. Storage lifecycle rules manage data, resource locks prevent accidental changes, and availability sets improve VM availability. Architects should also consider slot-specific settings, database schema compatibility, configuration changes, monitoring, and validation before performing production swaps.

Question 394

Which Azure service provides recommendations for improving the reliability, security, performance, and cost efficiency of Azure resources?

1. Azure Monitor
2. Azure Advisor
3. Azure Event Hubs
4. Azure Service Bus

Correct Answer: 2

Explanation

Azure Advisor analyzes Azure resource configurations and usage and provides recommendations across areas such as cost optimization, security, reliability, operational excellence, and performance efficiency. These recommendations can help architects identify underutilized resources, potential security improvements, reliability concerns, and performance opportunities. Azure Monitor focuses on telemetry and observability, while Event Hubs and Service Bus provide messaging capabilities. Advisor recommendations should be evaluated against application requirements before implementation because an optimization that lowers cost, for example, may affect performance or availability if applied without considering workload behavior.

Question 395

A company wants to connect an Azure virtual network to an on-premises network using an encrypted tunnel over the public internet. Which service should be used?

1. ExpressRoute
2. Azure VPN Gateway
3. Azure Front Door
4. Azure Application Gateway

Correct Answer: 2

Explanation

Azure VPN Gateway can establish encrypted site-to-site VPN connections between an Azure virtual network and an on-premises network over the public internet. IPsec/IKE-based tunnels provide encrypted communication between the networks. VPN Gateway is often suitable when organizations need secure connectivity without requiring a dedicated private circuit. ExpressRoute provides private connectivity through a connectivity provider and does not rely on the public internet in the same manner. Front Door and Application Gateway are application delivery services. Architects should consider bandwidth, latency, redundancy, encryption, routing, and operational requirements.

Question 396

An application receives a very large number of events from devices and needs to process the stream in near real time based on queries and time windows. Which service should be evaluated?

1. Azure Stream Analytics
2. Azure Resource Graph
3. Azure Policy
4. Azure Bastion

Correct Answer: 1

Explanation

Azure Stream Analytics is a managed real-time analytics service designed to process streaming data from sources such as Event Hubs, IoT Hub, and other supported inputs. It can use SQL-like queries to filter, aggregate, correlate, and analyze streaming data over time windows before sending results to supported outputs. Resource Graph queries Azure resource metadata, Policy provides governance, and Bastion provides secure VM access. Architects should evaluate event volume, partitioning, latency requirements, query complexity, scaling, checkpointing, and downstream destinations when designing a real-time streaming architecture.

Question 397

A company wants to move an existing application to Azure with minimal code changes while preserving most of its current architecture. Which migration strategy is most appropriate?

1. Refactor
2. Rebuild
3. Rehost
4. Replace

Correct Answer: 3

Explanation

Rehosting, often called lift-and-shift, moves an existing application to Azure with minimal modifications to the application’s architecture or code. It can provide a faster migration path and reduce the initial effort required to modernize a workload. Refactoring changes the application architecture to take greater advantage of cloud capabilities, while rebuilding involves creating a new implementation. Replacing means adopting another solution instead of migrating the existing application. Architects should consider long-term modernization opportunities, operational costs, dependencies, performance, licensing, and whether minimal-change migration meets business objectives.

Question 398

Which Azure service provides centralized monitoring logs and supports Kusto Query Language queries for analyzing collected data?

1. Azure Logic Apps
2. Azure Application Gateway
3. Log Analytics workspace
4. Azure Container Registry

Correct Answer: 3

Explanation

A Log Analytics workspace provides a centralized location for collecting and analyzing log data from Azure resources, applications, and other supported sources. It supports Kusto Query Language, commonly called KQL, which allows users to filter, aggregate, correlate, and investigate telemetry and operational information. Application Gateway handles application traffic, Logic Apps provides workflow automation, and Container Registry stores container images. Architects should consider workspace design, data retention, access control, ingestion costs, and whether separate workspaces are needed for organizational, regional, security, or operational boundaries.

Question 399

A company needs a highly available architecture but wants to keep workloads within one Azure region. Which design provides protection against failure of a single datacenter?

1. Deploy resources across Availability Zones
2. Deploy all resources in one availability zone
3. Use a single virtual machine
4. Store only a backup in the same VM

Correct Answer: 1

Explanation

Deploying supported application components across multiple Availability Zones can protect a workload from the failure of a single physical datacenter within an Azure region. Zones have independent power, cooling, and networking, allowing applications designed for zone redundancy to continue operating when one zone becomes unavailable. A single zone or VM does not provide the same level of infrastructure resilience. Architects should also consider zone-redundant data services, load balancing, application statelessness, health probes, and failure testing. Availability Zones provide regional resilience but do not protect against an entire region becoming unavailable.

Question 400

A business-critical application has an RTO of 15 minutes and an RPO of 5 minutes. What does the RPO requirement mean?

1. The application must be fully restored within five minutes
2. The organization can lose up to five minutes of data
3. The application must run for five minutes before failover
4. The backup must remain available for five minutes

Correct Answer: 2

Explanation

A Recovery Point Objective of five minutes means the organization should design the solution so that, after a defined disaster scenario, the maximum acceptable amount of data loss is approximately five minutes. RPO focuses on the age of data that may be lost, while RTO defines how quickly the application should be restored or made available after an outage. In this scenario, the 15-minute RTO addresses recovery time, whereas the five-minute RPO addresses data-loss tolerance. Architects should use these requirements to determine replication frequency, backup strategy, and recovery architecture.