Microsoft Designing Microsoft Azure Infrastructure Solutions - AZ-305 Exam Questions

QUESTION NO: 1
You plan to deploy an app that will use an Azure Storage account.
You need to deploy the storage account. The solution must meet the following requirements:
* Store the data of multiple users.
* Encrypt each user ' s data by using a separate key.
* Encrypt all the data in the storage account by using Microsoft keys or customer-managed keys.
What should you deploy?

QUESTION NO: 2
You are designing a solution that calculates 3D geometry from height-map data. You need to recommend a solution that meets the following requirements:
* Performs calculations in Azure.
* Ensures that each node can communicate data to every other node.
* Maximizes the number of nodes to calculate multiple scenes as fast as possible.
* Minimizes the amount of effort to implement the solution.
Which two actions should you include in the recommendation? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

QUESTION NO: 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.
Several VMs are exhibiting network connectivity issues.
You need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.
Solution: Use Azure Network Watcher to run IP flow verify to analyze the network traffic Does the solution meet the goal?

QUESTION NO: 4
You have an on-premises file server that stores 2 TB of data files.
You plan to move the data files to Azure Blob Storage In the West Europe Azure region, You need to recommend a storage account type to store the data files and a replication solution for the storage account. The solution must meet the following requirements:
* Be available if a single Azure datacenter fails.
* Support storage tiers.
* Minimize cost.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION NO: 5
You have an Azure subscription.
You need to deploy an Azure Kubernetes Service (AKS) solution that will use Windows Server 2019 nodes.
The solution must meet the following requirements:
Minimize the time it takes to provision compute resources during scale-out operations.
Support autoscaling of Windows Server containers.
Which scaling option should you recommend?

QUESTION NO: 6
Your company has IT, security, and finance departments.
You need to implement a new Azure deployment that will include multiple Azure subscriptions and management groups. The solution must meet the following requirements:
* Ensure that all policies are assigned at the management group level.
* Ensure that all the finance department resources have specific encryption policies applied.
* Ensure that only users in the IT department can create virtual machines in any Azure region.
* Ensure that users in the finance department can create virtual machines in only the East US Azure region.
What is the minimum number of management groups you can create for the planned deployment?

QUESTION NO: 7
Your on-premises datacenter contains a server named Server1 that runs Microsoft SQL Server 2022. Server1 contains a 30-TB database named DB1 that stores customer data. Server1 runs a custom application named App1 that verifies the compliance of records in DB1. App1 must run on the same server as DB1.
You have an Azure subscription.
You need to migrate DB1 to Azure. The solution must minimize administrative effort.
To which service should you migrate DB1, and what should you use to perform the migration? To answer, select the appropriate options in the answer area.

QUESTION NO: 8
You need to deploy an instance of SQL Server on Azure Virtual Machines. The solution must meet the following requirements:
* Support 15.000 disk IOPS.
* Support SR-IOV.
* Minimize costs.
What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.

QUESTION NO: 9
Your on-premises datacenter contains a server that runs Linux and hosts a Java app named Appl. App1 has the following characteristics:
* App1 is an interactive app that users access by using HTTPS connections.
* The number of connections to App1 changes significantly throughout the day.
* App1 runs multiple concurrent instances.
* App1 requires major changes to run in a container.
You plan to migrate App1 to Azure.
You need to recommend a compute solution for Appl. The solution must meet the following requirements:
* The solution must run multiple instances of Appl.
* The number of instances must be managed automatically depending on the load.
* Administrative effort must be minimized.
What should you include in the recommendation?

QUESTION NO: 10
You have an Azure AD tenant that contains a management group named MG1. You have the Azure subscriptions shown in the following table.

The subscriptions contain the resource groups shown in the following table.

The subscription contains the Azure AD security groups shown in the following table.

The subscription contains the user accounts shown in the following table.

You perform the following actions:
* Assign User3 the Contributor role for Sub1.
* Assign Group1 the Virtual Machine Contributor role for MG1.
* Assign Group3 the Contributor role for the Tenant Root Group.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

QUESTION NO: 11
Your on premises network contains an Active Directory Domain Services (AD DS) forest. The forest contains a top level domain, three child domains, and an on-premises server named Server1.
You have a Microsoft Entra tenant. Server1 uses Microsoft Entra Connect Sync to replicate all the user objects from the three child domains to the tenant.
New contractors and employees are onboarded manually by using the Workday cloud-based human resources (HR) application.
You plan to automatically provision accounts for new users in one of the on-piemises child domains and the Microsoft Entra tenant. The provisioning logic for the employees will be distinct from the provisioning logic for the contractors.
You need to identify the following:
* The minimum number of apps to register in the Microsoft Entra tenant
* The minimum number of Microsoft Entra Connect provisioning agents to deploy The solution must minimize implementation effort.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE Each correct selection is worth one point.

QUESTION NO: 12
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is being deployed and configured for on-premises to Azure connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.
Solution: Use Azure Traffic Analytics in Azure Network Watcher to analyze the network traffic.
Does this meet the goal?

QUESTION NO: 13
You have an Azure App Service web app that uses a system-assigned managed identity.
You need to recommend a solution to store their settings of the web app as secrets in an Azure key vault The solution must meet the following requirements:
* Minimize changes to the app code,
* Use the principle of least privilege.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.