{"id":12218,"date":"2026-09-15T07:01:46","date_gmt":"2026-09-15T07:01:46","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=12218"},"modified":"2026-09-15T07:01:46","modified_gmt":"2026-09-15T07:01:46","slug":"microsoft-az-305-practice-test-questions-and-exam-dumps-part13-q241-260","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/microsoft-az-305-practice-test-questions-and-exam-dumps-part13-q241-260\/","title":{"rendered":"Microsoft AZ-305 Practice Test Questions and Exam Dumps Part13 Q241-260"},"content":{"rendered":"

View Full Microsoft AZ-305 Exam Dumps<\/a> and Practice Test Dumps<\/b><\/h2>\n

 <\/p>\n

Question 241<\/b><\/h3>\n

A company needs to encrypt data in an Azure service using keys that it controls and manages rather than Microsoft-managed keys. Which approach should the architect recommend?<\/b><\/p>\n

    \n
  1. Customer-managed keys<\/span><\/li>\n
  2. Shared access signatures<\/span><\/li>\n
  3. Resource locks<\/span><\/li>\n
  4. Network security groups<\/span><\/li>\n<\/ol>\n

    Correct Answer: 1<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    Customer-managed keys allow organizations to control encryption keys used by supported Azure services. Keys can be stored and managed in Azure Key Vault or Managed HSM, giving the organization greater control over key rotation, access, and lifecycle management. This approach is useful when regulatory or organizational requirements demand control over encryption material. Shared access signatures provide delegated resource access, resource locks prevent accidental changes, and network security groups control network traffic. Architects should carefully design permissions and key availability because losing access to encryption keys can affect the ability to access protected data.<\/span><\/p>\n

    Question 242<\/b><\/h3>\n

    Which Azure service is designed to provide a managed PostgreSQL database with built-in high availability options?<\/b><\/p>\n

      \n
    1. Azure Cosmos DB<\/span><\/li>\n
    2. Azure Database for PostgreSQL<\/span><\/li>\n
    3. Azure Cache for Redis<\/span><\/li>\n
    4. Azure Table Storage<\/span><\/li>\n<\/ol>\n

      Correct Answer: 2<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      Azure Database for PostgreSQL provides a managed relational PostgreSQL database service that reduces the infrastructure administration required by customers. Azure Database for PostgreSQL Flexible Server supports high availability configurations designed to improve resilience against infrastructure failures. Microsoft manages many platform operations, including patching and infrastructure maintenance. Cosmos DB is a globally distributed NoSQL database, Redis provides in-memory caching, and Table Storage provides key-value storage. Architects should evaluate compute requirements, storage, networking, backup, availability, and application compatibility when selecting PostgreSQL as the database platform.<\/span><\/p>\n

      Question 243<\/b><\/h3>\n

      An organization wants to connect several branch offices to Azure and manage connectivity centrally across multiple virtual networks and regions. Which service should be considered?<\/b><\/p>\n

        \n
      1. Azure Virtual WAN<\/span><\/li>\n
      2. Azure Blob Storage<\/span><\/li>\n
      3. Azure Application Insights<\/span><\/li>\n
      4. Azure Queue Storage<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        Azure Virtual WAN provides a managed networking service that helps organizations connect branch offices, remote users, Azure virtual networks, and other network locations through a centralized architecture. It can simplify large-scale connectivity and routing across regions while reducing the need to manually design every individual network connection. Blob Storage handles object storage, Application Insights provides application monitoring, and Queue Storage supports asynchronous messaging. Architects should evaluate Virtual WAN when an organization has distributed networking requirements and wants centralized connectivity management, especially across multiple branches and Azure regions.<\/span><\/p>\n

        Question 244<\/b><\/h3>\n

        Which Azure networking service can provide a highly available private connection from on-premises infrastructure to Azure using a VPN tunnel?<\/b><\/p>\n

          \n
        1. Azure CDN<\/span><\/li>\n
        2. Azure VPN Gateway<\/span><\/li>\n
        3. Azure Event Grid<\/span><\/li>\n
        4. Azure Front Door<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          Azure VPN Gateway provides encrypted connectivity between Azure virtual networks and on-premises networks over the internet. It supports site-to-site VPN connections and can be configured for redundancy and high availability using supported gateway configurations. VPN Gateway is useful when an organization requires secure connectivity but does not need the dedicated private connectivity provided by ExpressRoute. CDN and Front Door are designed for application and content delivery, while Event Grid provides event routing. Architects should consider bandwidth, latency, redundancy, encryption, and operational requirements when selecting VPN connectivity.<\/span><\/p>\n

          Question 245<\/b><\/h3>\n

          A web application must route users to the nearest healthy backend and support automatic failover between regions. Which service is most appropriate?<\/b><\/p>\n

            \n
          1. Azure Front Door<\/span><\/li>\n
          2. Azure Files<\/span><\/li>\n
          3. Azure Key Vault<\/span><\/li>\n
          4. Azure Data Factory<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            Azure Front Door provides global HTTP and HTTPS traffic routing and can direct users toward appropriate backend endpoints based on factors such as health and routing configuration. It can support multi-region application architectures and automatically route traffic away from unhealthy origins. Front Door also integrates with capabilities such as caching and Web Application Firewall. Azure Files provides file shares, Key Vault manages secrets, and Data Factory performs data integration. Architects should design healthy backend endpoints, configure appropriate probes and routing rules, and ensure that application data is also resilient across regions.<\/span><\/p>\n

            Question 246<\/b><\/h3>\n

            Which architectural approach is most appropriate when an application requires independent deployment and scaling of business capabilities?<\/b><\/p>\n

              \n
            1. Monolithic architecture<\/span><\/li>\n
            2. Microservices architecture<\/span><\/li>\n
            3. Single-tier architecture<\/span><\/li>\n
            4. Dedicated-host architecture<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              Microservices architecture divides an application into smaller services that can be developed, deployed, and scaled independently. This approach can allow individual business capabilities to evolve without requiring the entire application to be redeployed. It is particularly useful when different components have different scaling requirements or release schedules. However, microservices also introduce additional complexity around communication, service discovery, monitoring, data consistency, and deployment. Architects should not adopt microservices automatically; they should evaluate organizational maturity, workload complexity, operational capabilities, and business requirements before choosing this architecture.<\/span><\/p>\n

              Question 247<\/b><\/h3>\n

              A company wants to synchronize files between an on-premises Windows file server and an Azure file share while keeping frequently accessed files locally cached. Which service should be used?<\/b><\/p>\n

                \n
              1. Azure File Sync<\/span><\/li>\n
              2. Azure Data Factory<\/span><\/li>\n
              3. Azure Site Recovery<\/span><\/li>\n
              4. Azure Event Hubs<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                Azure File Sync allows organizations to synchronize files between Windows Server and Azure file shares. It can maintain a local cache of frequently accessed files while using Azure Files as a centralized cloud storage location. This can support gradual migration, distributed file access, and hybrid file-server architectures. Data Factory is intended for data integration and transformation, Site Recovery focuses on disaster recovery, and Event Hubs handles high-volume event ingestion. Architects should consider cache behavior, namespace design, synchronization topology, bandwidth, and file access patterns when planning an Azure File Sync deployment.<\/span><\/p>\n

                Question 248<\/b><\/h3>\n

                A solution must process events from many devices in real time and support high-throughput ingestion. Which Azure service should be selected?<\/b><\/p>\n

                  \n
                1. Azure Service Bus<\/span><\/li>\n
                2. Azure Event Hubs<\/span><\/li>\n
                3. Azure Files<\/span><\/li>\n
                4. Azure Key Vault<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 2<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  Azure Event Hubs is designed for high-throughput event ingestion and streaming scenarios. It can receive large volumes of events from applications, devices, telemetry systems, and other sources and make those events available for downstream processing. Event Hubs is commonly used in analytics and Internet of Things architectures where continuous event streams must be ingested efficiently. Service Bus is better suited to enterprise messaging scenarios requiring features such as queues and topics. Azure Files provides file storage, while Key Vault manages secrets. Architects should select Event Hubs when high-volume streaming ingestion is the primary requirement.<\/span><\/p>\n

                  Question 249<\/b><\/h3>\n

                  A company wants to deploy an Azure application using Infrastructure as Code and prefers a concise declarative language supported by Microsoft for Azure resource deployment. Which option should be considered?<\/b><\/p>\n

                    \n
                  1. Bicep<\/span><\/li>\n
                  2. PowerPoint<\/span><\/li>\n
                  3. Azure Monitor<\/span><\/li>\n
                  4. Azure DNS<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    Bicep is a domain-specific language designed for declaratively deploying Azure resources. It provides a simpler authoring experience than raw ARM JSON templates while compiling into Azure Resource Manager templates. Bicep supports reusable modules, parameters, variables, dependencies, and other Infrastructure as Code capabilities. This allows organizations to consistently deploy environments and maintain infrastructure definitions in source control. Azure Monitor provides monitoring, Azure DNS manages DNS services, and PowerPoint is unrelated to infrastructure deployment. Architects should use Infrastructure as Code to improve consistency, repeatability, automation, and change management.<\/span><\/p>\n

                    Question 250<\/b><\/h3>\n

                    Which Azure feature can prevent administrators from accidentally deleting a critical resource?<\/b><\/p>\n

                      \n
                    1. Azure Resource Lock<\/span><\/li>\n
                    2. Azure Traffic Manager<\/span><\/li>\n
                    3. Azure Cache for Redis<\/span><\/li>\n
                    4. Azure Event Grid<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Azure Resource Locks help protect important Azure resources from accidental deletion or modification. The Delete lock prevents a resource from being deleted while still allowing authorized changes, whereas a ReadOnly lock prevents modifications and deletion. Locks can be applied at different scopes, including subscriptions, resource groups, and individual resources. They are useful for protecting production resources and other critical infrastructure. However, locks should not be treated as a replacement for proper access control or backup strategies. Architects should understand lock inheritance and ensure that operational processes account for protected resources.<\/span><\/p>\n

                      Question 251<\/b><\/h3>\n

                      A workload has strict data residency requirements and must keep customer information within a specific geographic area. What should the architect prioritize?<\/b><\/p>\n

                        \n
                      1. Regional resource placement<\/span><\/li>\n
                      2. Maximum public accessibility<\/span><\/li>\n
                      3. Global replication without restrictions<\/span><\/li>\n
                      4. Random region selection<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        Regional resource placement is important when applications must comply with data residency or sovereignty requirements. Architects should determine where customer data may legally be stored and processed before selecting Azure regions and services. They must also evaluate whether selected services replicate data to other locations by default or through optional configurations. Global replication can conflict with residency requirements if data crosses permitted boundaries. The architecture should therefore consider service-specific data handling, backup locations, disaster recovery regions, and regulatory requirements. Documentation and compliance requirements should be validated before deployment.<\/span><\/p>\n

                        Question 252<\/b><\/h3>\n

                        Which Azure service provides centralized log storage and querying capabilities using Kusto Query Language?<\/b><\/p>\n

                          \n
                        1. Azure Log Analytics<\/span><\/li>\n
                        2. Azure Bastion<\/span><\/li>\n
                        3. Azure Load Balancer<\/span><\/li>\n
                        4. Azure Storage Queue<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 1<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          Azure Log Analytics provides a centralized workspace for collecting, storing, and querying log data using Kusto Query Language, commonly called KQL. It can receive telemetry from Azure resources, applications, operating systems, and other supported sources. Architects can use Log Analytics to investigate failures, identify performance trends, build queries, and support operational monitoring. Bastion provides secure VM access, Load Balancer distributes traffic, and Storage Queue supports asynchronous messaging. A well-designed logging architecture should consider workspace organization, retention, access control, data volume, and cost.<\/span><\/p>\n

                          Question 253<\/b><\/h3>\n

                          A company wants to expose a service securely to selected consumers without giving them direct access to the underlying Azure resources. Which architectural component is most suitable?<\/b><\/p>\n

                            \n
                          1. Azure API Management<\/span><\/li>\n
                          2. Azure Resource Lock<\/span><\/li>\n
                          3. Azure Backup<\/span><\/li>\n
                          4. Azure Availability Set<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            Azure API Management can expose backend services through controlled APIs without requiring consumers to access the underlying infrastructure directly. Architects can apply authentication, authorization, rate limits, quotas, transformations, caching, and other policies at the API gateway layer. This creates an abstraction between consumers and backend implementations and makes it easier to manage API lifecycle and security. Resource Locks protect resources, Backup provides recovery capabilities, and Availability Sets improve VM availability. API Management is therefore suitable when controlled service exposure and centralized API governance are important architectural requirements.<\/span><\/p>\n

                            Question 254<\/b><\/h3>\n

                            Which storage redundancy option provides replication across availability zones in the primary Azure region and also replicates data to a secondary region?<\/b><\/p>\n

                              \n
                            1. LRS<\/span><\/li>\n
                            2. ZRS<\/span><\/li>\n
                            3. GRS<\/span><\/li>\n
                            4. GZRS<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 4<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              Geo-zone-redundant storage, or GZRS, combines zone-level redundancy in the primary region with geo-replication to a secondary region. This provides protection against both localized infrastructure failures and a larger regional disaster. Data is synchronously replicated across availability zones in the primary region and asynchronously replicated to the secondary region. LRS provides local redundancy, ZRS provides zone redundancy within one region, and GRS provides geo-replication without primary-region zone redundancy. Architects should choose GZRS when both regional and zone-level resilience are important and the workload supports the required storage configuration.<\/span><\/p>\n

                              Question 255<\/b><\/h3>\n

                              An application needs to store session information that must be shared across multiple web servers. Which architecture is most appropriate?<\/b><\/p>\n

                                \n
                              1. Store sessions only in each server’s local memory<\/span><\/li>\n
                              2. Use a distributed cache such as Azure Cache for Redis<\/span><\/li>\n
                              3. Store sessions in DNS records<\/span><\/li>\n
                              4. Store sessions in an NSG<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 2<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                A distributed cache such as Azure Cache for Redis can provide shared session state across multiple application instances. This supports stateless or horizontally scaled web applications because users do not need to remain connected to a particular server for their session information to remain available. Storing sessions only in local server memory creates problems when requests are routed to different instances or when an instance fails. DNS and network security groups are not designed for application session storage. Architects should also configure expiration, availability, security, and appropriate serialization for session data.<\/span><\/p>\n

                                Question 256<\/b><\/h3>\n

                                Which Azure service can provide private access to supported Azure services without requiring traffic to traverse the public internet?<\/b><\/p>\n

                                  \n
                                1. Azure Private Link<\/span><\/li>\n
                                2. Azure Traffic Manager<\/span><\/li>\n
                                3. Azure Public IP<\/span><\/li>\n
                                4. Azure CDN<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  Azure Private Link provides private connectivity to supported Azure services by exposing them through private endpoints within a virtual network. This allows applications to communicate with services such as Azure Storage or Azure SQL Database using private IP addresses. The architecture can reduce exposure to public network paths and support more restrictive network security requirements. Traffic Manager provides DNS-based routing, public IP addresses expose resources publicly, and CDN focuses on content delivery. Architects should also plan DNS resolution, network routing, access controls, and service-specific private endpoint behavior.<\/span><\/p>\n

                                  Question 257<\/b><\/h3>\n

                                  A company wants to reduce database read latency for users distributed across multiple geographic locations. Which approach should the architect evaluate?<\/b><\/p>\n

                                    \n
                                  1. Read replicas<\/span><\/li>\n
                                  2. Resource locks<\/span><\/li>\n
                                  3. Azure Policy<\/span><\/li>\n
                                  4. Single-region storage only<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Read replicas can help reduce latency for read-heavy workloads by allowing applications to retrieve data from database replicas located closer to users or application components. This can also reduce read pressure on the primary database. The exact capabilities depend on the Azure database service being used, including supported replication models and consistency behavior. Architects must distinguish read scaling from write scaling because replicas may not independently accept all write operations. The design should consider replication lag, failover requirements, application routing, consistency expectations, and the geographic distribution of users.<\/span><\/p>\n

                                    Question 258<\/b><\/h3>\n

                                    Which Azure service provides a managed private environment for hosting applications while offering stronger network isolation than the standard App Service environment?<\/b><\/p>\n

                                      \n
                                    1. Azure App Service Environment<\/span><\/li>\n
                                    2. Azure DNS<\/span><\/li>\n
                                    3. Azure Event Grid<\/span><\/li>\n
                                    4. Azure Queue Storage<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      Azure App Service Environment provides an isolated deployment environment for Azure App Service applications. It is designed for scenarios that require greater network isolation, control, and dedicated application hosting capabilities than the standard multi-tenant App Service environment. It can be deployed within a virtual network and is useful for workloads with stringent networking or compliance requirements. Azure DNS provides name resolution, Event Grid handles event routing, and Queue Storage supports messaging. Architects should evaluate cost, scaling requirements, network architecture, and whether the additional isolation provided by App Service Environment is justified.<\/span><\/p>\n

                                      Question 259<\/b><\/h3>\n

                                      A solution requires a message to be processed by multiple independent applications, with each application receiving its own copy. Which Azure messaging design should be used?<\/b><\/p>\n

                                        \n
                                      1. Service Bus topic with subscriptions<\/span><\/li>\n
                                      2. Single Service Bus queue<\/span><\/li>\n
                                      3. Azure Blob container<\/span><\/li>\n
                                      4. Azure Files share<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        An Azure Service Bus topic with multiple subscriptions allows one published message to be delivered independently to multiple subscribers. Each subscription maintains its own message processing path, making this pattern suitable for publish-subscribe architectures. For example, separate applications can independently process the same business event without requiring the publisher to send separate messages to each application. A single queue generally distributes messages among competing consumers rather than giving each consumer its own copy. Blob containers and file shares provide storage rather than enterprise publish-subscribe messaging semantics.<\/span><\/p>\n

                                        Question 260<\/b><\/h3>\n

                                        A company is planning a new Azure workload and wants to evaluate architecture decisions across reliability, security, cost, operational practices, and performance. Which Microsoft framework should guide the review?<\/b><\/p>\n

                                          \n
                                        1. Azure Well-Architected Framework<\/span><\/li>\n
                                        2. Azure Pricing Calculator<\/span><\/li>\n
                                        3. Azure Storage Explorer<\/span><\/li>\n
                                        4. Azure Resource Graph<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 1<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          The Azure Well-Architected Framework provides guidance for reviewing and improving cloud workloads across key architectural pillars, including reliability, security, cost optimization, operational excellence, and performance efficiency. It helps architects identify risks and make deliberate tradeoffs rather than focusing on only one aspect of a solution. The Pricing Calculator is primarily used for cost estimation, Storage Explorer is a management utility, and Resource Graph helps query resource information. Architects should use the Well-Architected Framework throughout the design lifecycle and revisit decisions as workload requirements evolve.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Microsoft AZ-305 Exam Dumps and Practice Test Dumps   Question 241 A company needs to encrypt data in an Azure service using keys that it controls and manages rather than Microsoft-managed keys. Which approach should the architect recommend? Customer-managed keys Shared access signatures Resource locks Network security groups Correct Answer: 1 Explanation Customer-managed […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12218"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=12218"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12218\/revisions"}],"predecessor-version":[{"id":12233,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12218\/revisions\/12233"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=12218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=12218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=12218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}