Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Microsoft
Microsoft Certified: Azure Solutions Architect Expert
AZ-305
Designing Microsoft Azure Infrastructure Solutions Questions and Answers

Pass the Microsoft Certified: Azure Solutions Architect Expert AZ-305 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam AZ-305 Premium Access

View all detail and faqs for the AZ-305 exam

Go to Exam

717 Students Passed

92% Average Score

93% Same Questions

Viewing page 5 out of 12 pages

Viewing questions 41-50 out of questions

Questions # 41:

You need to recommend a solution to ensure that App1 can access the third-party credentials and access strings. The solution must meet the security requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 41

Options:

Answer

Answer:

Explanation

Scenario: Security Requirement

All secrets used by Azure services must be stored in Azure Key Vault.

Services that require credentials must have the credentials tied to the service instance. The credentials must NOT be shared between services.

Box 1: A service principal

A service principal is a type of security principal that identifies an application or service, which is to say, a piece of code rather than a user or group. A service principal's object ID is known as its client ID and acts like its username. The service principal's client secret acts like its password.

Note: Authentication with Key Vault works in conjunction with Azure Active Directory (Azure AD), which is responsible for authenticating the identity of any given security principal.

A security principal is an object that represents a user, group, service, or application that's requesting access to Azure resources. Azure assigns a unique object ID to every security principal.

Box 2: A role assignment

You can provide access to Key Vault keys, certificates, and secrets with an Azure role-based access control.

[Reference:, https://docs.microsoft.com/en-us/azure/key-vault/general/authentication, , , ]

Questions # 42:

You need to recommend a strategy for migrating the database content of WebApp1 to Azure. What should you include in the recommendation?

Options:

Use Azure Site Recovery to replicate the SQL servers to Azure.

Use SQL Server transactional replication.

Copy the BACPAC file that contains the Azure SQL database file to Azure Blob storage.

Copy the VHD that contains the Azure SQL database files to Azure Blob storage

Answer

Explanation

Before you upload a Windows virtual machine (VM) from on-premises to Azure, you must prepare the virtual hard disk (VHD or VHDX).

Scenario: WebApp1 has a web tier that uses Microsoft Internet Information Services (IIS) and a database tier that runs Microsoft SQL Server 2016. The web tier and the database tier are deployed to virtual machines that run on Hyper-V.

[Reference:, https://docs.microsoft.com/en-us/azure/virtual-machines/windows/prepare-for-upload-vhd-image, , , , , ]

Questions # 43:

You are evaluating the components of the migration to Azure that require you to provision an Azure Storage account.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question # 43

Options:

Answer

Answer:

Questions # 44:

You need to recommend a solution to meet the database retention requirement. What should you recommend?

Options:

Configure a long-term retention policy for the database.

Configure Azure Site Recovery.

Configure geo replication of the database.

Use automatic Azure SQL Database backups.

Answer

Explanation

https://docs.microsoft.com/en-us/azure/azure-sql/database/long-term-retention-overview

In Azure SQL Database, you can configure a database with a long-term backup retention policy (LTR) to automatically retain the database backups in separate Azure Blob storage containers for up to 10 years

Questions # 45:

You design a solution for the web tier of WebApp1 as shown in the exhibit.

Question # 45

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Question # 45

Options:

Answer

Answer:

Explanation

Box 1: Yes

Any new deployments to Azure must be redundant in case an Azure region fails.

Traffic Manager uses DNS to direct client requests to the most appropriate service endpoint based on a traffic-routing method and the health of the endpoints. An endpoint is any Internet-facing service hosted inside or outside of Azure. Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to failure, including the failure of an entire Azure region.

Box 2: Yes

Recent changes in Azure brought some significant changes in autoscaling options for Azure Web Apps (i.e. Azure App Service to be precise as scaling happens on App Service plan level and has effect on all Web Apps running in that App Service plan).

Box 3: No

Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to failure, including the failure of an entire Azure region.

[Reference:, https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview, , https://blogs.msdn.microsoft.com/hsirtl/2017/07/03/autoscaling-azure-web-apps/, , , , , ]

Questions # 46:

What should you include in the identity management strategy to support the planned changes?

Options:

Move all the domain controllers from corp.fabrikam.com to virtual networks in Azure.

Deploy domain controllers for corp.fabrikam.com to virtual networks in Azure.

Deploy a new Azure AD tenant for the authentication of new R&D projects.

Deploy domain controllers for the rd.fabrikam.com forest to virtual networks in Azure.

Answer

Explanation

Directory synchronization between Azure Active Directory (Azure AD) and corp.fabrikam.com must not be affected by a link failure between Azure and the on-premises network. (This requires domain controllers in Azure)

Users on the on-premises network must be able to authenticate to corp.fabrikam.com if an Internet link fails. (This requires domain controllers on-premises)

Questions # 47:

To meet the authentication requirements of Fabrikam, what should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 47