View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 101

A company needs an application to remain available if an entire Azure region becomes unavailable. Which architecture should the solution use?

1. Deploy all resources in one availability zone
2. Deploy resources across multiple Azure regions
3. Use only locally redundant storage
4. Use a single virtual machine with Premium SSD

Correct Answer: 2

Explanation

Deploying resources across multiple Azure regions provides protection against a regional outage. A multi-region architecture can use replicated application components, databases, storage, and traffic-routing services to direct users toward a healthy region. Availability Zones protect against failures within a region but do not protect against a complete regional outage. Local redundancy also remains within a limited physical location. For applications requiring strong business continuity, architects should consider active-active or active-passive regional designs based on required RTO, RPO, application complexity, and cost.

Question 102

Which Azure service is best for asynchronous messaging between application components?

1. Azure Service Bus
2. Azure DNS
3. Azure Firewall
4. Azure Policy

Correct Answer: 1

Explanation

Azure Service Bus provides reliable asynchronous messaging between distributed application components. It supports queues and topics, allowing producers and consumers to communicate without requiring both components to be available simultaneously. Features such as dead-letter queues, duplicate detection, message sessions, and transactions support enterprise messaging scenarios. This makes Service Bus useful for decoupling applications and improving resilience. Azure Event Grid is more focused on event-driven notifications, while Service Bus is better suited when applications require reliable enterprise messaging and controlled message processing.

Question 103

Which storage redundancy option replicates data across availability zones in one region?

1. LRS
2. GRS
3. ZRS
4. RA-GRS

Correct Answer: 3

Explanation

Zone-redundant storage, or ZRS, synchronously replicates data across multiple availability zones within a single Azure region. This protects storage data against a failure affecting an individual zone while keeping the data within the same region. LRS maintains copies within a single datacenter, while GRS and RA-GRS provide replication to a secondary region. ZRS is therefore appropriate when an architecture requires higher regional availability but does not necessarily require protection against an entire regional disaster. Architects should select redundancy based on availability, durability, recovery, and cost requirements.

Question 104

A solution requires disaster recovery with minimal acceptable data loss. Which metric should the architect prioritize?

1. RTO
2. RPO
3. SLA
4. MTTR

Correct Answer: 2

Explanation

Recovery Point Objective, or RPO, defines the maximum amount of data loss an organization can tolerate after a failure. It is commonly expressed as a period of time. For example, an RPO of five minutes means the solution should be designed so that no more than approximately five minutes of data is lost during recovery. RTO focuses on how quickly the service must be restored. Architects use RPO when selecting replication and backup frequencies because lower RPO requirements generally require more frequent replication and potentially higher infrastructure costs.

Question 105

Which Azure networking design centralizes shared services for multiple virtual networks?

1. Hub-and-spoke
2. Point-to-point
3. Single-tier
4. Isolated network

Correct Answer: 1

Explanation

A hub-and-spoke network places shared connectivity and security services in a central hub virtual network while workload networks are deployed as spokes. The hub can contain services such as Azure Firewall, VPN Gateway, DNS infrastructure, and other centralized components. Spokes can remain logically separated while still using shared services through controlled connectivity. This architecture improves scalability and centralized management compared with creating independent networking configurations for every workload. It is commonly used in enterprise Azure environments where multiple applications require consistent security and connectivity controls.

Question 106

Which Azure service provides private connectivity to supported platform services?

1. Azure Traffic Manager
2. Azure Private Link
3. Azure Load Balancer
4. Azure Front Door

Correct Answer: 2

Explanation

Azure Private Link enables private connectivity from a virtual network to supported Azure services and privately exposed services. A private endpoint is created inside the virtual network and receives a private IP address. Traffic can then travel through the private network rather than relying on a publicly accessible endpoint. This helps reduce exposure to the public internet and supports security-focused architectures. Private Link is particularly useful for services such as Azure Storage, Azure SQL Database, and other supported platform services that need controlled private access.

Question 107

A web application needs automatic scaling based on changing demand. Which Azure capability should be used?

1. Resource locks
2. Autoscale
3. Azure Policy
4. Availability Sets

Correct Answer: 2

Explanation

Azure autoscale allows supported services to automatically increase or decrease resources according to workload demand. For example, an application can add instances when CPU usage or request volume increases and remove instances when demand falls. This improves application responsiveness while helping control costs during periods of low activity. Autoscale can use metrics or schedules depending on the service and configuration. Architects should combine autoscaling with suitable load distribution and application design so that additional instances can handle requests consistently without creating dependencies on a single server.

Question 108

Which service is most suitable for global HTTP routing with web application security features?

1. Azure Front Door
2. Azure VPN Gateway
3. Azure ExpressRoute
4. Azure Bastion

Correct Answer: 1

Explanation

Azure Front Door is designed for global HTTP and HTTPS application delivery. It can route users to appropriate backend endpoints based on health, routing configuration, and other rules. Front Door can also provide features such as caching, TLS termination, and Web Application Firewall integration. It is therefore well suited to globally distributed web applications requiring improved availability and performance. VPN Gateway and ExpressRoute provide network connectivity, while Bastion provides secure administrative access to virtual machines. Front Door is specifically designed for global web traffic management.

Question 109

Which Azure service is designed to orchestrate data movement between many data sources?

1. Azure Cache for Redis
2. Azure Data Factory
3. Azure DDoS Protection
4. Azure Key Vault

Correct Answer: 2

Explanation

Azure Data Factory provides managed data integration and orchestration capabilities. It can connect to numerous cloud and on-premises data sources, copy information between systems, and coordinate transformation activities. Pipelines can be scheduled or triggered according to business requirements. This makes Data Factory useful for enterprise data integration, ingestion, and migration workloads. It can also coordinate other processing services instead of performing every transformation itself. Architects commonly use it when a solution needs reliable, scalable movement and orchestration of data across different platforms.

Question 110

Which Azure feature allows an application to use a secret without storing it in source code?

1. Managed identity
2. Public IP address
3. Availability Zone
4. Route table

Correct Answer: 1

Explanation

Managed identities allow Azure resources to authenticate to supported services through Microsoft Entra ID without storing credentials directly in application code. This removes the need to manage passwords, client secrets, or access keys manually for many Azure-to-Azure authentication scenarios. Applications can obtain tokens automatically and use them to access services according to assigned permissions. Managed identities can be system-assigned or user-assigned. Architects should apply least privilege so that the identity receives only the permissions required for its workload.

Question 111

A company must retain financial records so they cannot be altered or deleted during a required retention period. Which solution is most appropriate?

1. Blob lifecycle management
2. Immutable Blob Storage
3. Azure Cache for Redis
4. Storage account failover

Correct Answer: 2

Explanation

Immutable Blob Storage is designed for scenarios where data must remain unchanged for a specified retention period. It supports write-once, read-many behavior so protected blobs cannot be modified or deleted according to the configured immutability policy. This is particularly valuable for compliance records, financial documents, legal evidence, and other regulated information. Lifecycle management handles automated data transitions and deletion but does not provide the same protection against modification. Architects should select immutable storage when regulatory or business requirements demand strong protection against alteration or premature deletion.

Question 112

Which Azure database service is designed for globally distributed NoSQL applications?

1. Azure SQL Database
2. Azure Cosmos DB
3. Azure Database for PostgreSQL
4. SQL Server on Azure VM

Correct Answer: 2

Explanation

Azure Cosmos DB is a globally distributed database service designed for highly scalable applications requiring low-latency access across geographic locations. It supports multiple APIs and provides features for automatic data distribution, partitioning, and configurable consistency. Architects can distribute data across regions so applications can serve users closer to where they are located. Cosmos DB is especially appropriate for globally distributed NoSQL workloads with large-scale throughput requirements. Azure SQL Database and other relational services are better suited when relational data models and SQL-based capabilities are primary requirements.

Question 113

Which Azure service provides centralized governance across multiple subscriptions?

1. Azure Management Groups
2. Azure Load Balancer
3. Azure Functions
4. Azure Storage

Correct Answer: 1

Explanation

Azure Management Groups provide a hierarchical way to organize multiple Azure subscriptions and apply governance consistently. Policies, role assignments, and other management configurations can be applied at the management group level and inherited by subscriptions beneath it. This is useful for large organizations that need consistent compliance, security, and access controls across many subscriptions. Management groups reduce the need to configure the same governance settings independently for every subscription. They are especially valuable in enterprise architectures with multiple business units, environments, or workload subscriptions.

Question 114

Which service is best for exposing internal applications through a managed API gateway?

1. Azure Event Grid
2. Azure API Management
3. Azure Queue Storage
4. Azure Monitor

Correct Answer: 2

Explanation

Azure API Management provides a managed API gateway for publishing and controlling access to backend services. It can expose internal APIs to approved consumers while applying authentication, authorization, rate limits, transformations, and other policies. API Management also supports monitoring and API lifecycle management. This makes it useful when an organization wants to provide a controlled interface to internal applications without exposing backend services directly. Event Grid distributes events, Queue Storage provides simple asynchronous messaging, and Monitor focuses on observability rather than API gateway functionality.

Question 115

Which Azure service provides a dedicated private connection from on-premises networks to Azure?

1. VPN Gateway
2. ExpressRoute
3. Azure Firewall
4. Private DNS

Correct Answer: 2

Explanation

Azure ExpressRoute provides a private connection between an organization’s on-premises network and Microsoft cloud services through a connectivity provider. Traffic does not travel over the public internet in the same way as a standard site-to-site VPN connection. ExpressRoute is appropriate for organizations that require predictable networking performance, private connectivity, or high-throughput connections. VPN Gateway can also connect on-premises environments to Azure, but it generally uses encrypted tunnels over the internet. Architects should select between these options according to security, performance, reliability, and cost requirements.

Question 116

Which Azure service helps protect application secrets and encryption keys?

1. Azure Key Vault
2. Azure Advisor
3. Azure Data Factory
4. Azure Traffic Manager

Correct Answer: 1

Explanation

Azure Key Vault is a managed service for securely storing and controlling access to secrets, keys, and certificates. Applications can retrieve sensitive values from Key Vault rather than storing credentials directly in configuration files or source code. Key Vault integrates with Microsoft Entra ID and supports access control mechanisms that help enforce least privilege. It can also support cryptographic operations and certificate management. Architects commonly use Key Vault together with managed identities so applications can securely access required secrets without embedding long-lived credentials in the application.

Question 117

An organization needs a database architecture that can continue operating after a regional Azure outage. Which approach is most suitable?

1. Use only local backups
2. Deploy a secondary database in another region
3. Store database files on one VM
4. Increase the database storage size

Correct Answer: 2

Explanation

Deploying a secondary database in another Azure region provides geographic redundancy and supports disaster recovery from a regional outage. Depending on the database service, this can be implemented through geo-replication, failover groups, or another supported replication mechanism. The secondary environment can be promoted or used for failover when the primary region becomes unavailable. Local backups alone may not provide sufficient protection if the entire region is affected. Architects should also consider replication latency, RPO, RTO, application connection handling, and the additional cost of maintaining the secondary environment.

Question 118

Which Azure service provides network flow information for troubleshooting?

1. Azure Network Watcher
2. Azure Policy
3. Azure Pricing Calculator
4. Azure Service Health

Correct Answer: 1

Explanation

Azure Network Watcher provides tools for monitoring, diagnosing, and troubleshooting Azure networking. It includes capabilities such as connection troubleshooting, IP flow verification, packet capture, and network topology information. These tools help architects and administrators determine why traffic is being blocked or why network communication is not behaving as expected. Network Watcher is focused on network diagnostics rather than governance or cost management. Azure Policy manages compliance, Pricing Calculator estimates costs, and Service Health reports information about Azure service issues and planned maintenance.

Question 119

Which Azure database option is designed for unpredictable workloads across multiple databases?

1. Azure SQL elastic pools
2. Azure SQL Managed Instance
3. Azure Database for PostgreSQL
4. Azure Cosmos DB

Correct Answer: 1

Explanation

Azure SQL elastic pools allow multiple Azure SQL databases to share a pool of compute resources. This is useful when databases have different or unpredictable usage patterns because unused capacity from one database can be used by another database in the pool. Elastic pools can provide a more cost-efficient architecture than independently sizing every database for its individual peak workload. They are especially useful for SaaS applications with many databases. Architects should evaluate workload characteristics, performance requirements, and resource limits before selecting an elastic pool architecture.

Question 120

Which Well-Architected Framework pillar focuses on protecting workloads from threats?

1. Reliability
2. Security
3. Cost Optimization
4. Operational Excellence

Correct Answer: 2

Explanation

Security is a core pillar of the Azure Well-Architected Framework and focuses on protecting applications, data, identities, and infrastructure from threats. Security architecture includes practices such as identity management, least-privilege access, encryption, network segmentation, threat detection, and secure application design. Architects should incorporate security throughout the solution lifecycle rather than treating it as a separate final step. The other pillars address availability and resilience, spending efficiency, and operational practices. A well-designed Azure solution balances security with performance, reliability, cost, and operational requirements.