View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps

 

Question 141

A company wants to migrate an on-premises application to Azure with minimal changes to the existing application architecture. Which approach is most appropriate?

1. Rebuild the application as microservices
2. Rehost the application on Azure virtual machines
3. Replace the application with Azure Functions
4. Redesign the application as a serverless workload

Correct Answer: 2

Explanation

Rehosting, often called lift and shift, moves an existing application to Azure with minimal changes to its architecture. Azure virtual machines can host applications that depend on operating-system configurations or software components that cannot easily be converted to PaaS services. This approach can accelerate migration because the application does not need to be extensively redesigned before moving. Refactoring or rearchitecting may provide greater long-term benefits, but those approaches require more planning and development effort. Architects should select rehosting when migration speed and minimal application changes are key requirements.

Question 142

Which Azure service provides managed relational database capabilities without requiring operating system management?

1. Azure SQL Database
2. SQL Server on Azure VM
3. Azure Virtual Machines
4. Azure Managed Disks

Correct Answer: 1

Explanation

Azure SQL Database is a fully managed relational database service where Microsoft handles many infrastructure tasks, including operating system maintenance, patching, backups, and platform management. This allows architects and application teams to focus more on database design and application functionality rather than infrastructure administration. SQL Server on an Azure VM provides greater control but requires more management because the customer manages the virtual machine and operating system. Azure SQL Database is therefore a strong choice when the organization wants relational database capabilities with reduced infrastructure management responsibilities.

Question 143

Which architecture pattern improves application resilience by separating components with queues?

1. Tight coupling
2. Shared-state design
3. Loose coupling
4. Single-tier design

Correct Answer: 3

Explanation

Loose coupling separates application components so that one component does not have to depend directly on the immediate availability of another. Queues such as Azure Service Bus can store messages temporarily, allowing producers and consumers to operate independently. This can improve resilience because temporary failures or workload spikes in one component do not necessarily cause the entire application to fail. Loose coupling also supports independent scaling and easier maintenance. Architects commonly use messaging services, event-driven designs, and asynchronous processing to reduce dependencies between distributed application components.

Question 144

Which Azure service is best for storing large amounts of unstructured object data?

1. Azure Files
2. Azure Blob Storage
3. Azure Table Storage
4. Azure Queue Storage

Correct Answer: 2

Explanation

Azure Blob Storage is designed to store large amounts of unstructured object data such as images, videos, documents, backups, logs, and application files. It supports multiple access tiers, lifecycle management, replication options, and security controls. Blob Storage can scale to accommodate very large datasets and is commonly used as the storage layer for cloud-native applications. Azure Files provides managed file shares, Table Storage is designed for NoSQL key-value data, and Queue Storage provides message storage. Therefore, Blob Storage is the appropriate choice for large-scale unstructured objects.

Question 145

A workload requires predictable performance and high availability across multiple availability zones. Which design should the architect consider?

1. Single VM with LRS
2. Multiple application instances across zones
3. One instance with a larger disk
4. One VM with a public IP

Correct Answer: 2

Explanation

Deploying multiple application instances across availability zones can improve both availability and resilience because instances are distributed across independent physical locations within an Azure region. If one zone experiences an infrastructure failure, instances in other zones can continue serving requests. A load-balancing service can distribute traffic among healthy instances. Simply increasing the size of one virtual machine does not eliminate the single-instance failure risk. Architects should also ensure that databases, storage, networking, and other dependencies support the desired availability model so that a single-zone failure does not create another critical point of failure.

Question 146

Which Azure service provides a managed message queue for decoupling applications?

1. Azure Service Bus
2. Azure Front Door
3. Azure Key Vault
4. Azure DNS

Correct Answer: 1

Explanation

Azure Service Bus provides managed queues and topics for reliable communication between distributed application components. Queues allow one component to send messages while another processes them independently. This helps applications handle temporary traffic spikes, reduce direct dependencies, and improve resilience. Service Bus also supports advanced capabilities such as dead-letter queues, duplicate detection, transactions, and message sessions. Front Door manages global web traffic, Key Vault protects secrets and keys, and Azure DNS provides name resolution. Service Bus is therefore the appropriate choice for reliable asynchronous application messaging.

Question 147

Which Azure service can automatically replicate an application to another region for disaster recovery?

1. Azure Site Recovery
2. Azure Advisor
3. Azure Policy
4. Azure Network Watcher

Correct Answer: 1

Explanation

Azure Site Recovery provides disaster recovery capabilities by replicating supported workloads to a secondary location and orchestrating failover when a major outage occurs. It can help organizations maintain business continuity for supported virtual machines and other workloads. Architects can define recovery plans and test failover without disrupting production environments. Site Recovery is particularly useful when applications require recovery in another Azure region or supported secondary environment. Advisor provides recommendations, Policy manages governance, and Network Watcher focuses on network diagnostics rather than workload disaster recovery.

Question 148

Which Azure architecture principle recommends designing systems to handle component failures?

1. Scalability
2. Resilience
3. Centralization
4. Isolation

Correct Answer: 2

Explanation

Resilience is the ability of a system to continue operating or recover quickly when individual components fail. Azure architectures can improve resilience by using redundancy, health monitoring, automatic failover, retries, queues, availability zones, and geographically distributed deployments. Architects should assume that failures can occur rather than designing around the expectation that every component will always remain available. Resilient architectures also avoid unnecessary single points of failure. The appropriate resilience strategy depends on business requirements such as availability targets, RTO, RPO, workload dependencies, and acceptable operational complexity.

Question 149

Which Azure service is best for hosting event-driven serverless code?

1. Azure Functions
2. Azure SQL Database
3. Azure Virtual Network
4. Azure Files

Correct Answer: 1

Explanation

Azure Functions is a serverless compute service designed to execute code in response to events or triggers. Functions can be triggered by HTTP requests, timers, queues, messages, storage events, and other supported sources. The platform manages much of the underlying infrastructure and can scale according to workload requirements depending on the selected hosting plan. This makes Functions suitable for lightweight APIs, background processing, automation, and event-driven workloads. Architects should select an appropriate hosting plan based on execution duration, scaling requirements, networking needs, and workload characteristics.

Question 150

A company needs to connect its on-premises datacenter to Azure using an encrypted tunnel over the public internet. Which service should it use?

1. ExpressRoute
2. VPN Gateway
3. Azure Front Door
4. Azure Load Balancer

Correct Answer: 2

Explanation

Azure VPN Gateway can create encrypted site-to-site VPN tunnels between an on-premises network and an Azure virtual network over the public internet. This provides secure connectivity without requiring a dedicated private circuit. ExpressRoute provides private connectivity through a supported connectivity provider and is generally selected when predictable performance or private network connectivity is required. Front Door handles global web traffic, while Load Balancer distributes network traffic among backend resources. VPN Gateway is therefore the appropriate choice when an encrypted internet-based connection is required.

Question 151

Which Azure feature allows a database to scale read operations separately from write operations?

1. Read scale-out
2. Resource locks
3. Lifecycle management
4. Azure Policy

Correct Answer: 1

Explanation

Read scale-out allows supported database workloads to direct read-only operations to additional replicas rather than sending all queries to the primary database. This can reduce pressure on the primary instance and improve performance for applications with a large number of read operations. It is useful for workloads where reads significantly outnumber writes. Architects should verify that the selected Azure database service and configuration support read scale-out and should understand consistency implications. It is not a replacement for general database scaling or high-availability mechanisms.

Question 152

Which Azure service is designed to manage containerized applications without requiring direct Kubernetes cluster management?

1. Azure Container Apps
2. Azure Virtual Machines
3. Azure Storage
4. Azure VPN Gateway

Correct Answer: 1

Explanation

Azure Container Apps provides a managed environment for running containerized applications without requiring customers to manage the underlying Kubernetes control plane directly. It supports features such as autoscaling, ingress, revisions, and integration with other Azure services. This makes it suitable for microservices, APIs, background jobs, and event-driven container workloads where teams want container flexibility without the operational overhead of managing a Kubernetes cluster. Azure Kubernetes Service provides greater Kubernetes control, while Virtual Machines require more infrastructure management. Container Apps is appropriate when simplified container hosting is a priority.

Question 153

A company requires an Azure database to support multiple consistency choices for globally distributed data. Which service should be selected?

1. Azure SQL Managed Instance
2. Azure Cosmos DB
3. Azure Database for MySQL
4. SQL Server on Azure VM

Correct Answer: 2

Explanation

Azure Cosmos DB provides multiple consistency levels that allow architects to balance data consistency, latency, availability, and performance for globally distributed workloads. Depending on application requirements, a solution can select stronger consistency or more relaxed consistency models that provide greater availability and lower latency. This flexibility is especially useful for applications distributed across multiple Azure regions. Traditional relational database services do not provide the same Cosmos DB consistency model. Architects should select the consistency level according to business requirements and understand the performance and availability trade-offs associated with each option.

Question 154

Which Azure service can provide a private connection to a SaaS or Azure service through a private endpoint?

1. Azure Private Link
2. Azure Traffic Manager
3. Azure Monitor
4. Azure Service Bus

Correct Answer: 1

Explanation

Azure Private Link enables private connectivity to supported Azure services, partner services, and customer-owned services through private endpoints. The private endpoint receives a private IP address within the customer’s virtual network, allowing applications to access the target service without relying on a public endpoint. This helps reduce exposure and supports network-isolated architectures. Private Link can be particularly valuable when security requirements prohibit direct public access to platform services. Traffic Manager provides DNS-based routing, Monitor handles observability, and Service Bus provides messaging rather than private network connectivity.

Question 155

Which Azure component distributes incoming TCP or UDP traffic across backend resources?

1. Azure Load Balancer
2. Azure Front Door
3. Azure API Management
4. Azure DNS

Correct Answer: 1

Explanation

Azure Load Balancer provides Layer 4 traffic distribution for TCP and UDP workloads. It can distribute incoming connections across healthy backend virtual machines or other supported resources according to configured rules and health probes. This makes it useful for applications that require high availability and network-level load distribution. Azure Front Door is designed primarily for global HTTP and HTTPS application delivery, while API Management provides API gateway capabilities. Azure DNS performs name resolution rather than directly distributing application connections. Architects should select Load Balancer when Layer 4 distribution is required.

Question 156

Which Azure service provides centralized monitoring data from multiple Azure resources?

1. Azure Log Analytics
2. Azure Pricing Calculator
3. Azure DNS
4. Azure Reservations

Correct Answer: 1

Explanation

Azure Log Analytics provides a workspace-based platform for collecting and querying monitoring data from Azure resources, applications, and other supported sources. Administrators and architects can use Kusto Query Language, or KQL, to analyze logs and identify operational issues, performance trends, and security events. Log Analytics integrates with Azure Monitor and can support alerts, dashboards, and investigations. Pricing Calculator estimates costs, Azure DNS manages domain resolution, and Reservations help optimize eligible workload costs. Log Analytics is therefore the appropriate choice for centralized log collection and analysis.

Question 157

A solution must automatically fail over a database to another region while keeping a consistent connection endpoint. Which Azure feature is appropriate?

1. Azure SQL failover groups
2. Azure Storage lifecycle management
3. Azure Load Balancer
4. Azure Files

Correct Answer: 1

Explanation

Azure SQL failover groups provide a disaster recovery mechanism for Azure SQL databases by managing replication between primary and secondary logical servers in different regions. They provide listener endpoints that applications can use so that connectivity can continue after a planned or unplanned failover. This reduces the need to manually change application connection strings during a regional disaster. Failover groups are therefore useful for business-critical relational database workloads requiring geographic redundancy and controlled failover. Architects should evaluate replication latency, failover policies, RPO, RTO, and application behavior during regional recovery.

Question 158

Which Azure service is most appropriate for protecting web applications from common HTTP attacks?

1. Azure DDoS Protection
2. Web Application Firewall
3. Azure Bastion
4. Azure ExpressRoute

Correct Answer: 2

Explanation

Web Application Firewall, or WAF, provides protection against common application-layer web threats by inspecting HTTP and HTTPS traffic. It can use managed rule sets to identify malicious requests associated with attacks such as SQL injection and cross-site scripting. WAF can be integrated with services such as Azure Front Door and Application Gateway. DDoS Protection addresses distributed denial-of-service attacks, while Bastion provides secure administrative access to virtual machines. ExpressRoute provides private network connectivity. Architects should use WAF when the primary requirement is protecting an internet-facing web application from malicious HTTP requests.

Question 159

Which Azure service provides centralized deployment and management of infrastructure through declarative templates?

1. Azure Resource Manager
2. Azure Cache for Redis
3. Azure Event Grid
4. Azure Load Balancer

Correct Answer: 1

Explanation

Azure Resource Manager, or ARM, provides the management layer for deploying and managing Azure resources. Declarative templates such as Azure Resource Manager templates and Bicep can define infrastructure as code, allowing deployments to be repeatable and consistent. Resource Manager also provides capabilities for organizing resources, applying tags, managing permissions, and controlling deployments. Infrastructure as code helps reduce manual configuration errors and supports consistent environments across development, testing, and production. The other listed services address caching, event routing, and traffic distribution rather than infrastructure deployment management.

Question 160

Which Azure architecture choice best supports an application with unpredictable traffic spikes?

1. Fixed-capacity virtual machines only
2. Autoscaling with load distribution
3. Single large virtual machine
4. Manual scaling only

Correct Answer: 2

Explanation

Autoscaling combined with load distribution allows an application to respond to changing demand while maintaining availability. During traffic spikes, autoscale can add application instances, while a load-balancing component distributes incoming requests among healthy instances. When demand decreases, unnecessary instances can be removed to reduce costs. A fixed-capacity or single-server design may become overloaded during unexpected demand increases. Manual scaling can also be too slow for sudden traffic changes. Architects should additionally verify that the application is stateless or appropriately designed for distributed execution so that scaling does not introduce consistency problems.