{"id":12213,"date":"2026-09-15T07:03:03","date_gmt":"2026-09-15T07:03:03","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=12213"},"modified":"2026-09-15T07:03:03","modified_gmt":"2026-09-15T07:03:03","slug":"microsoft-az-305-practice-test-questions-and-exam-dumps-part8-q141-160","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/microsoft-az-305-practice-test-questions-and-exam-dumps-part8-q141-160\/","title":{"rendered":"Microsoft AZ-305 Practice Test Questions and Exam Dumps Part8 Q141-160"},"content":{"rendered":"<h2><b>View Full <a href=\"https:\/\/www.examlabs.com\/az-305-exam-dumps\">Microsoft AZ-305 Exam Dumps<\/a> and Practice Test Dumps<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 141<\/b><\/h3>\n<p><b>A company wants to migrate an on-premises application to Azure with minimal changes to the existing application architecture. Which approach is most appropriate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Rebuild the application as microservices<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Rehost the application on Azure virtual machines<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Replace the application with Azure Functions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Redesign the application as a serverless workload<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Rehosting, often called lift and shift, moves an existing application to Azure with minimal changes to its architecture. Azure virtual machines can host applications that depend on operating-system configurations or software components that cannot easily be converted to PaaS services. This approach can accelerate migration because the application does not need to be extensively redesigned before moving. Refactoring or rearchitecting may provide greater long-term benefits, but those approaches require more planning and development effort. Architects should select rehosting when migration speed and minimal application changes are key requirements.<\/span><\/p>\n<h3><b>Question 142<\/b><\/h3>\n<p><b>Which Azure service provides managed relational database capabilities without requiring operating system management?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure SQL Database<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SQL Server on Azure VM<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Virtual Machines<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Managed Disks<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure SQL Database is a fully managed relational database service where Microsoft handles many infrastructure tasks, including operating system maintenance, patching, backups, and platform management. This allows architects and application teams to focus more on database design and application functionality rather than infrastructure administration. SQL Server on an Azure VM provides greater control but requires more management because the customer manages the virtual machine and operating system. Azure SQL Database is therefore a strong choice when the organization wants relational database capabilities with reduced infrastructure management responsibilities.<\/span><\/p>\n<h3><b>Question 143<\/b><\/h3>\n<p><b>Which architecture pattern improves application resilience by separating components with queues?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Tight coupling<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Shared-state design<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Loose coupling<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Single-tier design<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Loose coupling separates application components so that one component does not have to depend directly on the immediate availability of another. Queues such as Azure Service Bus can store messages temporarily, allowing producers and consumers to operate independently. This can improve resilience because temporary failures or workload spikes in one component do not necessarily cause the entire application to fail. Loose coupling also supports independent scaling and easier maintenance. Architects commonly use messaging services, event-driven designs, and asynchronous processing to reduce dependencies between distributed application components.<\/span><\/p>\n<h3><b>Question 144<\/b><\/h3>\n<p><b>Which Azure service is best for storing large amounts of unstructured object data?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Files<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Blob Storage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Table Storage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Queue Storage<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Blob Storage is designed to store large amounts of unstructured object data such as images, videos, documents, backups, logs, and application files. It supports multiple access tiers, lifecycle management, replication options, and security controls. Blob Storage can scale to accommodate very large datasets and is commonly used as the storage layer for cloud-native applications. Azure Files provides managed file shares, Table Storage is designed for NoSQL key-value data, and Queue Storage provides message storage. Therefore, Blob Storage is the appropriate choice for large-scale unstructured objects.<\/span><\/p>\n<h3><b>Question 145<\/b><\/h3>\n<p><b>A workload requires predictable performance and high availability across multiple availability zones. Which design should the architect consider?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Single VM with LRS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Multiple application instances across zones<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">One instance with a larger disk<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">One VM with a public IP<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Deploying multiple application instances across availability zones can improve both availability and resilience because instances are distributed across independent physical locations within an Azure region. If one zone experiences an infrastructure failure, instances in other zones can continue serving requests. A load-balancing service can distribute traffic among healthy instances. Simply increasing the size of one virtual machine does not eliminate the single-instance failure risk. Architects should also ensure that databases, storage, networking, and other dependencies support the desired availability model so that a single-zone failure does not create another critical point of failure.<\/span><\/p>\n<h3><b>Question 146<\/b><\/h3>\n<p><b>Which Azure service provides a managed message queue for decoupling applications?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Service Bus<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Front Door<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Key Vault<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure DNS<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Service Bus provides managed queues and topics for reliable communication between distributed application components. Queues allow one component to send messages while another processes them independently. This helps applications handle temporary traffic spikes, reduce direct dependencies, and improve resilience. Service Bus also supports advanced capabilities such as dead-letter queues, duplicate detection, transactions, and message sessions. Front Door manages global web traffic, Key Vault protects secrets and keys, and Azure DNS provides name resolution. Service Bus is therefore the appropriate choice for reliable asynchronous application messaging.<\/span><\/p>\n<h3><b>Question 147<\/b><\/h3>\n<p><b>Which Azure service can automatically replicate an application to another region for disaster recovery?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Site Recovery<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Advisor<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Policy<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Network Watcher<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Site Recovery provides disaster recovery capabilities by replicating supported workloads to a secondary location and orchestrating failover when a major outage occurs. It can help organizations maintain business continuity for supported virtual machines and other workloads. Architects can define recovery plans and test failover without disrupting production environments. Site Recovery is particularly useful when applications require recovery in another Azure region or supported secondary environment. Advisor provides recommendations, Policy manages governance, and Network Watcher focuses on network diagnostics rather than workload disaster recovery.<\/span><\/p>\n<h3><b>Question 148<\/b><\/h3>\n<p><b>Which Azure architecture principle recommends designing systems to handle component failures?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Scalability<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Resilience<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Centralization<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Isolation<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Resilience is the ability of a system to continue operating or recover quickly when individual components fail. Azure architectures can improve resilience by using redundancy, health monitoring, automatic failover, retries, queues, availability zones, and geographically distributed deployments. Architects should assume that failures can occur rather than designing around the expectation that every component will always remain available. Resilient architectures also avoid unnecessary single points of failure. The appropriate resilience strategy depends on business requirements such as availability targets, RTO, RPO, workload dependencies, and acceptable operational complexity.<\/span><\/p>\n<h3><b>Question 149<\/b><\/h3>\n<p><b>Which Azure service is best for hosting event-driven serverless code?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Functions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure SQL Database<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Virtual Network<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Files<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Functions is a serverless compute service designed to execute code in response to events or triggers. Functions can be triggered by HTTP requests, timers, queues, messages, storage events, and other supported sources. The platform manages much of the underlying infrastructure and can scale according to workload requirements depending on the selected hosting plan. This makes Functions suitable for lightweight APIs, background processing, automation, and event-driven workloads. Architects should select an appropriate hosting plan based on execution duration, scaling requirements, networking needs, and workload characteristics.<\/span><\/p>\n<h3><b>Question 150<\/b><\/h3>\n<p><b>A company needs to connect its on-premises datacenter to Azure using an encrypted tunnel over the public internet. Which service should it use?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">ExpressRoute<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">VPN Gateway<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Front Door<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Load Balancer<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure VPN Gateway can create encrypted site-to-site VPN tunnels between an on-premises network and an Azure virtual network over the public internet. This provides secure connectivity without requiring a dedicated private circuit. ExpressRoute provides private connectivity through a supported connectivity provider and is generally selected when predictable performance or private network connectivity is required. Front Door handles global web traffic, while Load Balancer distributes network traffic among backend resources. VPN Gateway is therefore the appropriate choice when an encrypted internet-based connection is required.<\/span><\/p>\n<h3><b>Question 151<\/b><\/h3>\n<p><b>Which Azure feature allows a database to scale read operations separately from write operations?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Read scale-out<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Resource locks<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lifecycle management<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Policy<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Read scale-out allows supported database workloads to direct read-only operations to additional replicas rather than sending all queries to the primary database. This can reduce pressure on the primary instance and improve performance for applications with a large number of read operations. It is useful for workloads where reads significantly outnumber writes. Architects should verify that the selected Azure database service and configuration support read scale-out and should understand consistency implications. It is not a replacement for general database scaling or high-availability mechanisms.<\/span><\/p>\n<h3><b>Question 152<\/b><\/h3>\n<p><b>Which Azure service is designed to manage containerized applications without requiring direct Kubernetes cluster management?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Container Apps<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Virtual Machines<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Storage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure VPN Gateway<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Container Apps provides a managed environment for running containerized applications without requiring customers to manage the underlying Kubernetes control plane directly. It supports features such as autoscaling, ingress, revisions, and integration with other Azure services. This makes it suitable for microservices, APIs, background jobs, and event-driven container workloads where teams want container flexibility without the operational overhead of managing a Kubernetes cluster. Azure Kubernetes Service provides greater Kubernetes control, while Virtual Machines require more infrastructure management. Container Apps is appropriate when simplified container hosting is a priority.<\/span><\/p>\n<h3><b>Question 153<\/b><\/h3>\n<p><b>A company requires an Azure database to support multiple consistency choices for globally distributed data. Which service should be selected?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure SQL Managed Instance<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Cosmos DB<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Database for MySQL<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SQL Server on Azure VM<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Cosmos DB provides multiple consistency levels that allow architects to balance data consistency, latency, availability, and performance for globally distributed workloads. Depending on application requirements, a solution can select stronger consistency or more relaxed consistency models that provide greater availability and lower latency. This flexibility is especially useful for applications distributed across multiple Azure regions. Traditional relational database services do not provide the same Cosmos DB consistency model. Architects should select the consistency level according to business requirements and understand the performance and availability trade-offs associated with each option.<\/span><\/p>\n<h3><b>Question 154<\/b><\/h3>\n<p><b>Which Azure service can provide a private connection to a SaaS or Azure service through a private endpoint?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Private Link<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Traffic Manager<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Monitor<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Service Bus<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Private Link enables private connectivity to supported Azure services, partner services, and customer-owned services through private endpoints. The private endpoint receives a private IP address within the customer&#8217;s virtual network, allowing applications to access the target service without relying on a public endpoint. This helps reduce exposure and supports network-isolated architectures. Private Link can be particularly valuable when security requirements prohibit direct public access to platform services. Traffic Manager provides DNS-based routing, Monitor handles observability, and Service Bus provides messaging rather than private network connectivity.<\/span><\/p>\n<h3><b>Question 155<\/b><\/h3>\n<p><b>Which Azure component distributes incoming TCP or UDP traffic across backend resources?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Load Balancer<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Front Door<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure API Management<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure DNS<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Load Balancer provides Layer 4 traffic distribution for TCP and UDP workloads. It can distribute incoming connections across healthy backend virtual machines or other supported resources according to configured rules and health probes. This makes it useful for applications that require high availability and network-level load distribution. Azure Front Door is designed primarily for global HTTP and HTTPS application delivery, while API Management provides API gateway capabilities. Azure DNS performs name resolution rather than directly distributing application connections. Architects should select Load Balancer when Layer 4 distribution is required.<\/span><\/p>\n<h3><b>Question 156<\/b><\/h3>\n<p><b>Which Azure service provides centralized monitoring data from multiple Azure resources?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Log Analytics<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Pricing Calculator<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure DNS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Reservations<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Log Analytics provides a workspace-based platform for collecting and querying monitoring data from Azure resources, applications, and other supported sources. Administrators and architects can use Kusto Query Language, or KQL, to analyze logs and identify operational issues, performance trends, and security events. Log Analytics integrates with Azure Monitor and can support alerts, dashboards, and investigations. Pricing Calculator estimates costs, Azure DNS manages domain resolution, and Reservations help optimize eligible workload costs. Log Analytics is therefore the appropriate choice for centralized log collection and analysis.<\/span><\/p>\n<h3><b>Question 157<\/b><\/h3>\n<p><b>A solution must automatically fail over a database to another region while keeping a consistent connection endpoint. Which Azure feature is appropriate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure SQL failover groups<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Storage lifecycle management<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Load Balancer<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Files<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure SQL failover groups provide a disaster recovery mechanism for Azure SQL databases by managing replication between primary and secondary logical servers in different regions. They provide listener endpoints that applications can use so that connectivity can continue after a planned or unplanned failover. This reduces the need to manually change application connection strings during a regional disaster. Failover groups are therefore useful for business-critical relational database workloads requiring geographic redundancy and controlled failover. Architects should evaluate replication latency, failover policies, RPO, RTO, and application behavior during regional recovery.<\/span><\/p>\n<h3><b>Question 158<\/b><\/h3>\n<p><b>Which Azure service is most appropriate for protecting web applications from common HTTP attacks?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure DDoS Protection<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Web Application Firewall<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Bastion<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure ExpressRoute<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Web Application Firewall, or WAF, provides protection against common application-layer web threats by inspecting HTTP and HTTPS traffic. It can use managed rule sets to identify malicious requests associated with attacks such as SQL injection and cross-site scripting. WAF can be integrated with services such as Azure Front Door and Application Gateway. DDoS Protection addresses distributed denial-of-service attacks, while Bastion provides secure administrative access to virtual machines. ExpressRoute provides private network connectivity. Architects should use WAF when the primary requirement is protecting an internet-facing web application from malicious HTTP requests.<\/span><\/p>\n<h3><b>Question 159<\/b><\/h3>\n<p><b>Which Azure service provides centralized deployment and management of infrastructure through declarative templates?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Resource Manager<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Cache for Redis<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Event Grid<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Load Balancer<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Resource Manager, or ARM, provides the management layer for deploying and managing Azure resources. Declarative templates such as Azure Resource Manager templates and Bicep can define infrastructure as code, allowing deployments to be repeatable and consistent. Resource Manager also provides capabilities for organizing resources, applying tags, managing permissions, and controlling deployments. Infrastructure as code helps reduce manual configuration errors and supports consistent environments across development, testing, and production. The other listed services address caching, event routing, and traffic distribution rather than infrastructure deployment management.<\/span><\/p>\n<h3><b>Question 160<\/b><\/h3>\n<p><b>Which Azure architecture choice best supports an application with unpredictable traffic spikes?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Fixed-capacity virtual machines only<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Autoscaling with load distribution<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Single large virtual machine<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Manual scaling only<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Autoscaling combined with load distribution allows an application to respond to changing demand while maintaining availability. During traffic spikes, autoscale can add application instances, while a load-balancing component distributes incoming requests among healthy instances. When demand decreases, unnecessary instances can be removed to reduce costs. A fixed-capacity or single-server design may become overloaded during unexpected demand increases. Manual scaling can also be too slow for sudden traffic changes. Architects should additionally verify that the application is stateless or appropriately designed for distributed execution so that scaling does not introduce consistency problems.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps &nbsp; Question 141 A company wants to migrate an on-premises application to Azure with minimal changes to the existing application architecture. Which approach is most appropriate? Rebuild the application as microservices Rehost the application on Azure virtual machines Replace the application with Azure Functions Redesign [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12213"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=12213"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12213\/revisions"}],"predecessor-version":[{"id":12238,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12213\/revisions\/12238"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=12213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=12213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=12213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}