{"id":12209,"date":"2026-09-15T07:04:00","date_gmt":"2026-09-15T07:04:00","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=12209"},"modified":"2026-09-15T07:04:00","modified_gmt":"2026-09-15T07:04:00","slug":"microsoft-az-305-practice-test-questions-and-exam-dumps-part4-q61-80","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/microsoft-az-305-practice-test-questions-and-exam-dumps-part4-q61-80\/","title":{"rendered":"Microsoft AZ-305 Practice Test Questions and Exam Dumps Part4 Q61-80"},"content":{"rendered":"

View Full Microsoft AZ-305 Exam Dumps<\/a> and Practice Test Dumps<\/b><\/h2>\n

 <\/p>\n

Question 61<\/b><\/h3>\n

Which Azure service is best for storing secrets and encryption keys?<\/b><\/p>\n

    \n
  1. Azure Monitor<\/span><\/li>\n
  2. Azure Key Vault<\/span><\/li>\n
  3. Azure DNS<\/span><\/li>\n
  4. Azure Files<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    Azure Key Vault provides secure management of sensitive information such as secrets, certificates, and cryptographic keys. Applications can access these values without storing credentials directly in source code or configuration files. This helps reduce the risk of exposing sensitive information and supports centralized security management. Azure Monitor is used for telemetry, Azure DNS handles name resolution, and Azure Files provides managed file shares. Key Vault is therefore the appropriate architectural service when an application requires secure storage and controlled access to secrets or encryption keys.<\/span><\/p>\n

    Question 62<\/b><\/h3>\n

    Which Azure service provides centralized log analysis using KQL?<\/b><\/p>\n

      \n
    1. Azure Advisor<\/span><\/li>\n
    2. Azure Monitor<\/span><\/li>\n
    3. Log Analytics workspace<\/span><\/li>\n
    4. Azure Policy<\/span><\/li>\n<\/ol>\n

      Correct Answer: 3<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      A Log Analytics workspace provides centralized storage and analysis of log data collected from Azure resources, applications, and supported external environments. Administrators and architects can use Kusto Query Language, or KQL, to query and analyze this information. This can help identify performance issues, operational problems, and security events. Azure Advisor provides recommendations, Azure Monitor provides broader monitoring capabilities, and Azure Policy handles governance. A Log Analytics workspace is therefore the most appropriate component when detailed centralized log analysis using KQL is required.<\/span><\/p>\n

      Question 63<\/b><\/h3>\n

      Which Azure database is best for a globally distributed application?<\/b><\/p>\n

        \n
      1. Azure Cosmos DB<\/span><\/li>\n
      2. Azure Files<\/span><\/li>\n
      3. Azure Queue Storage<\/span><\/li>\n
      4. Azure Managed Disks<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        Azure Cosmos DB is designed for globally distributed applications that require low-latency access to data. It supports replication across multiple Azure regions and provides several consistency options. This allows architects to design applications that serve users from different geographic locations while maintaining appropriate performance and availability. Azure Files provides file shares, Queue Storage handles messages, and Managed Disks provide virtual machine storage. Cosmos DB is therefore the appropriate database service when global distribution and low-latency data access are important architectural requirements.<\/span><\/p>\n

        Question 64<\/b><\/h3>\n

        Which Azure service provides managed backups for Azure workloads?<\/b><\/p>\n

          \n
        1. Azure Site Recovery<\/span><\/li>\n
        2. Azure Backup<\/span><\/li>\n
        3. Azure Front Door<\/span><\/li>\n
        4. Azure Traffic Manager<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          Azure Backup provides managed backup capabilities for supported Azure and hybrid workloads. It creates recovery points that can be used to restore protected data after accidental deletion, corruption, or other data-loss events. Backup focuses on data protection and restoration rather than continuously replicating an application for disaster recovery. Site Recovery is designed primarily for workload replication and failover. Front Door provides global application delivery, while Traffic Manager performs DNS-based routing. Azure Backup is therefore the correct choice for managed backup and data recovery.<\/span><\/p>\n

          Question 65<\/b><\/h3>\n

          Which service helps replicate workloads to another Azure region for disaster recovery?<\/b><\/p>\n

            \n
          1. Azure Backup<\/span><\/li>\n
          2. Azure Advisor<\/span><\/li>\n
          3. Azure Site Recovery<\/span><\/li>\n
          4. Azure Monitor<\/span><\/li>\n<\/ol>\n

            Correct Answer: 3<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            Azure Site Recovery helps organizations replicate supported workloads and coordinate disaster recovery between locations. It can replicate Azure virtual machines and supported on-premises workloads to a secondary location and provide failover capabilities when the primary environment becomes unavailable. Azure Backup focuses on backup and restoration rather than continuous workload replication. Advisor provides recommendations, while Monitor collects telemetry. Site Recovery is therefore the appropriate service when an architecture requires workload replication and coordinated failover to support disaster recovery.<\/span><\/p>\n

            Question 66<\/b><\/h3>\n

            Which Azure feature helps keep applications available during planned VM maintenance?<\/b><\/p>\n

              \n
            1. Availability Sets<\/span><\/li>\n
            2. Azure DNS<\/span><\/li>\n
            3. Azure Files<\/span><\/li>\n
            4. Azure Data Box<\/span><\/li>\n<\/ol>\n

              Correct Answer: 1<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              Availability Sets help distribute virtual machines across fault domains and update domains within an Azure datacenter. This arrangement reduces the likelihood that planned maintenance or a localized hardware failure will affect every VM instance at the same time. Availability Sets are particularly useful for architectures that use multiple virtual machines and need improved resilience within a datacenter. DNS provides name resolution, Azure Files provides file storage, and Data Box supports physical data transfer. Availability Sets are therefore appropriate for improving VM availability during maintenance events.<\/span><\/p>\n

              Question 67<\/b><\/h3>\n

              Which Azure storage option provides geo-replication to a secondary region?<\/b><\/p>\n

                \n
              1. LRS<\/span><\/li>\n
              2. ZRS<\/span><\/li>\n
              3. GRS<\/span><\/li>\n
              4. Premium SSD<\/span><\/li>\n<\/ol>\n

                Correct Answer: 3<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                Geo-redundant storage, or GRS, replicates Azure Storage data from the primary region to a secondary region. This provides additional protection against a major regional failure. LRS keeps copies within a single physical location, while ZRS distributes copies across availability zones in the primary region. Premium SSD is a performance-oriented disk option rather than a geographic redundancy model. GRS is therefore appropriate when an architecture requires storage replication to another Azure region for additional disaster resilience.<\/span><\/p>\n

                Question 68<\/b><\/h3>\n

                Which Azure service provides a managed platform for hosting web applications?<\/b><\/p>\n

                  \n
                1. Azure App Service<\/span><\/li>\n
                2. Azure VPN Gateway<\/span><\/li>\n
                3. Azure Event Grid<\/span><\/li>\n
                4. Azure Storage Explorer<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  Azure App Service is a managed platform for hosting web applications, APIs, and supported application workloads. It reduces infrastructure management because Azure handles much of the underlying platform, allowing development teams to focus on application deployment and configuration. VPN Gateway provides secure network connectivity, Event Grid routes events, and Storage Explorer is a management tool for storage resources. App Service is therefore the appropriate architectural choice when an organization needs managed hosting for web applications without directly managing the underlying operating system.<\/span><\/p>\n

                  Question 69<\/b><\/h3>\n

                  Which Azure service can automatically scale serverless code based on workload demand?<\/b><\/p>\n

                    \n
                  1. Azure DNS<\/span><\/li>\n
                  2. Azure Functions<\/span><\/li>\n
                  3. Azure Key Vault<\/span><\/li>\n
                  4. Azure Data Box<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 2<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    Azure Functions provides serverless compute that can automatically scale according to supported workload and hosting plan characteristics. Developers can execute code in response to triggers such as HTTP requests, timers, messages, or events. This model allows teams to focus on application logic while Azure manages the underlying infrastructure. Azure DNS provides name resolution, Key Vault manages secrets, and Data Box supports physical data transfer. Azure Functions is therefore the appropriate service when an architecture requires event-driven serverless execution with managed scaling.<\/span><\/p>\n

                    Question 70<\/b><\/h3>\n

                    Which Azure service provides centralized identity and access management?<\/b><\/p>\n

                      \n
                    1. Azure Monitor<\/span><\/li>\n
                    2. Microsoft Entra ID<\/span><\/li>\n
                    3. Azure Storage<\/span><\/li>\n
                    4. Azure Service Bus<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 2<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Microsoft Entra ID provides identity and access management for users, applications, and services. It supports authentication, authorization, single sign-on, multifactor authentication, and other identity-related capabilities. Architects can use Entra ID to design centralized identity management across cloud applications and resources. Azure Monitor handles monitoring, Storage provides data services, and Service Bus provides messaging. Microsoft Entra ID is therefore the appropriate choice when an architecture requires centralized management of identities and access to applications and resources.<\/span><\/p>\n

                      Question 71<\/b><\/h3>\n

                      Which Azure service provides recommendations for cost, security, and reliability?<\/b><\/p>\n

                        \n
                      1. Azure Advisor<\/span><\/li>\n
                      2. Azure Policy<\/span><\/li>\n
                      3. Azure Monitor<\/span><\/li>\n
                      4. Azure Resource Health<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        Azure Advisor analyzes Azure resources and usage patterns and provides personalized recommendations across areas such as cost optimization, security, reliability, performance, and operational excellence. These recommendations help architects identify potential improvements in an existing Azure environment. Azure Policy is used for governance and enforcement, Monitor provides telemetry, and Resource Health reports the condition of individual resources. Advisor is therefore the appropriate service when an organization wants actionable recommendations to improve the cost, security, performance, or reliability of its Azure architecture.<\/span><\/p>\n

                        Question 72<\/b><\/h3>\n

                        Which Azure service provides a managed NoSQL key-value data store?<\/b><\/p>\n

                          \n
                        1. Azure SQL Database<\/span><\/li>\n
                        2. Azure Table Storage<\/span><\/li>\n
                        3. Azure Files<\/span><\/li>\n
                        4. Azure Managed Disks<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 2<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          Azure Table Storage provides a managed NoSQL data store for applications that need to store large amounts of structured, non-relational data using a key-value model. It can be useful when applications require simple, scalable access to entities without the relational features of a traditional SQL database. Azure SQL Database provides relational storage, Azure Files provides shared file storage, and Managed Disks provide persistent VM disks. Azure Table Storage is therefore the appropriate choice for a simple, scalable NoSQL key-value storage architecture.<\/span><\/p>\n

                          Question 73<\/b><\/h3>\n

                          Which Azure service provides asynchronous queue-based messaging?<\/b><\/p>\n

                            \n
                          1. Azure Blob Storage<\/span><\/li>\n
                          2. Azure Service Bus<\/span><\/li>\n
                          3. Azure DNS<\/span><\/li>\n
                          4. Azure Front Door<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 2<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            Azure Service Bus provides enterprise messaging capabilities, including queues and topics. Queues allow producers to send messages that consumers can process independently, helping decouple application components and accommodate differences in processing speed. Service Bus can support reliable asynchronous communication between distributed applications and services. Blob Storage provides object storage, DNS handles name resolution, and Front Door provides global application delivery. Azure Service Bus is therefore the appropriate service when an architecture requires reliable asynchronous queue-based communication.<\/span><\/p>\n

                            Question 74<\/b><\/h3>\n

                            Which Azure service can route application traffic based on health and geographic location?<\/b><\/p>\n

                              \n
                            1. Azure Traffic Manager<\/span><\/li>\n
                            2. Azure Files<\/span><\/li>\n
                            3. Azure Key Vault<\/span><\/li>\n
                            4. Azure Queue Storage<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 1<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              Azure Traffic Manager is a DNS-based traffic routing service that can direct clients to application endpoints using different routing methods. It can use endpoint health information and routing strategies such as geographic routing to determine which endpoint should receive traffic. This makes it useful for multi-region application architectures. Azure Files provides file shares, Key Vault protects secrets, and Queue Storage supports messaging. Traffic Manager is therefore appropriate when architects need DNS-based routing that considers endpoint availability and geographic requirements.<\/span><\/p>\n

                              Question 75<\/b><\/h3>\n

                              Which Azure service protects web applications from common application-layer attacks?<\/b><\/p>\n

                                \n
                              1. Azure Load Balancer<\/span><\/li>\n
                              2. Network Security Group<\/span><\/li>\n
                              3. Web Application Firewall<\/span><\/li>\n
                              4. Azure VPN Gateway<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 3<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                Web Application Firewall, or WAF, protects web applications by inspecting HTTP and HTTPS traffic for common application-layer attack patterns. It can use managed and custom rules to help detect and block malicious requests. WAF is especially useful for applications exposed to internet traffic and can integrate with supported Azure application delivery services. Load Balancer distributes network traffic, NSGs provide network-level filtering, and VPN Gateway provides secure connectivity. WAF is therefore the appropriate security component for protecting web applications against common web-based attacks.<\/span><\/p>\n

                                Question 76<\/b><\/h3>\n

                                Which Azure feature allows private access to supported services through a virtual network?<\/b><\/p>\n

                                  \n
                                1. Azure Private Endpoint<\/span><\/li>\n
                                2. Public IP address<\/span><\/li>\n
                                3. Azure CDN<\/span><\/li>\n
                                4. Azure DNS<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  An Azure Private Endpoint creates a private network interface within a virtual network and provides private connectivity to supported Azure services. The service can therefore be accessed using a private IP address rather than requiring a publicly exposed endpoint. This can improve network isolation and reduce exposure to internet-based access. A public IP provides public connectivity, CDN improves content delivery, and DNS provides name resolution. Azure Private Endpoint is therefore the appropriate architectural feature when private access to an Azure service is required.<\/span><\/p>\n

                                  Question 77<\/b><\/h3>\n

                                  Which Azure storage option is best for data that is rarely accessed but must remain available?<\/b><\/p>\n

                                    \n
                                  1. Hot tier<\/span><\/li>\n
                                  2. Cool tier<\/span><\/li>\n
                                  3. Archive tier<\/span><\/li>\n
                                  4. Premium tier<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 2<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    The Cool access tier is designed for data that is accessed less frequently but still needs to remain readily available. It can help reduce storage costs compared with keeping infrequently accessed data in the Hot tier. The Archive tier is intended for data that is rarely accessed and can tolerate longer retrieval times. Premium storage is focused on high-performance scenarios rather than infrequent access. The Cool tier is therefore a suitable architectural choice when data access is infrequent but immediate availability remains important.<\/span><\/p>\n

                                    Question 78<\/b><\/h3>\n

                                    Which Azure service provides centralized policy enforcement for resource configurations?<\/b><\/p>\n

                                      \n
                                    1. Azure Advisor<\/span><\/li>\n
                                    2. Azure Policy<\/span><\/li>\n
                                    3. Azure Monitor<\/span><\/li>\n
                                    4. Azure Marketplace<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 2<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      Azure Policy enables organizations to define and enforce governance rules for Azure resources. Policies can audit existing resources or restrict deployments that do not meet organizational requirements. Examples include limiting deployment regions, requiring specific configurations, or restricting resource types. Advisor provides recommendations, Monitor provides telemetry, and Marketplace provides software and service solutions. Azure Policy is therefore the appropriate architectural capability when an organization needs centralized governance and control over resource configurations.<\/span><\/p>\n

                                      Question 79<\/b><\/h3>\n

                                      Which Azure service provides secure browser-based access to virtual machines?<\/b><\/p>\n

                                        \n
                                      1. Azure Bastion<\/span><\/li>\n
                                      2. Azure Traffic Manager<\/span><\/li>\n
                                      3. Azure Event Grid<\/span><\/li>\n
                                      4. Azure CDN<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        Azure Bastion provides managed browser-based RDP and SSH connectivity to virtual machines through the Azure portal. It allows administrators to connect to supported virtual machines without exposing their RDP or SSH management ports directly to the public internet. This can reduce the public attack surface of virtual machine deployments. Traffic Manager handles DNS-based routing, Event Grid routes events, and CDN provides content delivery. Azure Bastion is therefore the appropriate service for secure administrative access to virtual machines through the Azure portal.<\/span><\/p>\n

                                        Question 80<\/b><\/h3>\n

                                        Which Azure service helps assess on-premises workloads before migration to Azure?<\/b><\/p>\n

                                          \n
                                        1. Azure Monitor<\/span><\/li>\n
                                        2. Azure Advisor<\/span><\/li>\n
                                        3. Azure Migrate<\/span><\/li>\n
                                        4. Azure Service Health<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 3<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          Azure Migrate provides tools for discovering and assessing on-premises workloads before migration to Azure. It can help organizations understand workload dependencies, estimate Azure readiness, evaluate sizing, and develop migration plans. This assessment process allows architects to identify potential compatibility or capacity concerns before moving workloads. Azure Monitor focuses on telemetry, Advisor provides optimization recommendations, and Service Health reports Azure platform events. Azure Migrate is therefore the appropriate service when an organization needs to assess existing workloads before planning an Azure migration.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps   Question 61 Which Azure service is best for storing secrets and encryption keys? Azure Monitor Azure Key Vault Azure DNS Azure Files Correct Answer: 2 Explanation Azure Key Vault provides secure management of sensitive information such as secrets, certificates, and cryptographic keys. Applications can […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12209"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=12209"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12209\/revisions"}],"predecessor-version":[{"id":12242,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12209\/revisions\/12242"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=12209"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=12209"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=12209"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}