Authentic AZ-305 Dumps With 100% Passing Rate Practice Tests Dumps
Microsoft AZ-305 Real Exam Questions Guaranteed Updated Dump from Actualtests4sure
Microsoft AZ-305: Designing Microsoft Azure Infrastructure Solutions is a certification exam designed for professionals who want to demonstrate their skills in designing solutions on the Azure infrastructure. AZ-305 exam is intended for individuals with a strong technical background in Azure and a good understanding of the principles of cloud computing. AZ-305 exam is also suitable for individuals who have experience with designing and implementing Azure solutions.
NEW QUESTION # 44
You have an Azure subscription.
You have a Microsoft Entra tenant.
You need to recommend a Microsoft Entra Identity Governance solution to manage the user lifecycle. The solution must meet the following requirements:
- Ensure that users have the correct permission for the correct
resources and that the permissions are evaluated every quarter.
- If a user is assigned a new role, ensure that the correct permissions are granted for the correct resources and regularly evaluated for the new role.
- When a user leaves the company, ensure that the user's permissions
are revoked.
What should you include in the recommendation?
- A. Conditional Access
- B. Microsoft Entra ID Protection
- C. access reviews
- D. Privileged Identity Management (PIM)
Answer: C
Explanation:
Based on the requirements to handle user lifecycle (joiner-mover-leaver), ensure correct permissions, and conduct quarterly evaluations of those permissions, the Microsoft Entra Identity Governance solution that fits the bill best is Access Reviews.
While all components are part of the broader Identity Governance portfolio, Access Reviews specifically address the need for recurring (quarterly) evaluation of user access, role changes, and the revocation of permissions when users leave.
Here is why Access Reviews is the best fit among the options provided:
Quarterly Evaluation: Access reviews enable scheduled, automatic, or recurring (e.g., quarterly) reviews of user access to groups, applications, and roles.
Lifecycle and Mover/Leaver Support: They allow managers or resource owners to verify if a user's current permissions (including new roles) are still needed and can automatically remove access if denied.
Role Changes & Revocation: When a user changes roles or leaves the company, access reviews can be used to audit and revoke privileges, ensuring the "least privilege" principle is maintained.
Reference:
https://learn.microsoft.com/en-us/entra/id-governance/scenarios/automate-identity-lifecycle
NEW QUESTION # 45
You are developing a multi-tier app named App1 that will be hosted on Azure virtual machines. The peak utilization periods for App1 will be from 8 AM to 9 AM and 4 PM to 5 PM on weekdays.
You need to deploy the infrastructure for App1. The solution must meet the following requirements:
* Support virtual machines deployed to four availability zones across two Azure regions.
* Minimize costs by accumulating CPU credits during periods of low utilization.
What is the minimum number of virtual networks you should deploy, and which virtual machine size should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 46
Your organization has developed and deployed several Azure App Service Web and API applications. The applications use Azure Key Vault to store several authentication, storage account, and data encryption keys. Several departments have the following requests to support the applications:
You need to recommend the appropriate Azure service for each department request.
What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 47
You have an on-premises named App 1.
Customers App1 to manage digital images.
You plan to migrate App1 to Azure.
You need to recommend a data storage solution for Appl. The solution must meet the following image storage requirements:
Encrypt images at rest.
Allow files up to 50M
Answer:
Explanation:
NEW QUESTION # 48
You plan to move a web application named App1 from an on-premises data center to Azure.
App1 depends on a custom COM component that is installed on the host server.
You need to recommend a solution to host App1 in Azure. The solution must meet the following requirements:
- App1 must be available to users if an Azure data center becomes
unavailable.
- Costs must be minimized.
What should you include in the recommendation?
- A. In two Azure regions, deploy a load balancer and a web app.
- B. In two Azure regions, deploy a Traffic Manager profile and a web app.
- C. Deploy a load balancer and a virtual machine scale set across two availability zones.
- D. In two Azure regions, deploy a load balancer and a virtual machine scale set.
Answer: C
Explanation:
https://docs.microsoft.com/en-us/dotnet/azure/migration/app-service#com-and-com-components Azure App Service does not allow the registration of COM components on the platform. If your app makes use of any COM components, these need to be rewritten in managed code and deployed with the site or application.
https://docs.microsoft.com/en-us/dotnet/azure/migration/app-service
Azure App Service with Windows Containers If your app cannot be migrated directly to App Service, consider App Service using Windows Containers, which enables usage of the GAC, COM components, MSIs, full access to .NET FX APIs, DirectX, and more.
NEW QUESTION # 49
You have 10 on-premises servers that run Windows Server.
You need to perform daily backups of the servers to a Recovery Services vault. The solution must meet the following requirements:
* Back up all the files and folders on the servers.
* Maintain three copies of the backups in Azure.
* Minimize costs.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 50
Drag and Drop Question
A company has an existing web application that runs on virtual machines (VMs) in Azure.
You need to ensure that the application is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruption to the code for the existing web application.
What should you recommend? To answer, drag the appropriate values to the correct items. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Azure Application Gateway
Azure Application Gateway provides an application delivery controller (ADC) as a service. It offers various layer 7 load-balancing capabilities for your applications.
Box 2: Web Application Firwewall (WAF)
Application Gateway web application firewall (WAF) protects web applications from common vulnerabilities and exploits.
This is done through rules that are defined based on the OWASP core rule sets 3.0 or 2.2.9.
There are rules that detects SQL injection attacks.
Reference:
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq
https://docs.microsoft.com/en-us/azure/application-gateway/waf-overview
NEW QUESTION # 51
You have an on-premises Microsoft SQL Server database named SQL1.
You plan to migrate SQL 1 to Azure.
You need to recommend a hosting solution for SQL1. The solution must meet the following requirements:
* Support the deployment of multiple secondary, read-only replicas.
* Support automatic replication between primary and secondary replicas.
* Support failover between primary and secondary replicas within a 15-minute recovery time objective (RTO).
Answer:
Explanation:
Explanation:
NEW QUESTION # 52
You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group'. Group i is configured Tor assigned membership. Group I has 50 members. including 20 guest users.
You need To recommend a solution for evaluating the member ship of Group1. The solution must meet the following requirements:
* The evaluation must be repeated automatically every three months
* Every member must be able to report whether they need to be in Group1
* Users who report that they do not need to be in Group 1 must be removed from Group1 automatically
* Users who do not report whether they need to be m Group1 must be removed from Group1 automatically.
What should you include in me recommendation?
- A. Change the Membership type of Group1 to Dynamic User.
- B. Create an access review.
- C. Implement Azure AD Privileged Identity Management.
- D. implement Azure AU Identity Protection.
Answer: B
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#learn-about-access-reviews Have reviews recur periodically: You can set up recurring access reviews of users at set frequencies such as weekly, monthly, quarterly or annually, and the reviewers will be notified at the start of each review. Reviewers can approve or deny access with a friendly interface and with the help of smart recommendations.
An administrator creates an access review of Group C with 50 member users and 25 guest users. Makes it a self-review. 50 licenses for each user as self-reviewers.* https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#example-license-scenarios There are 4 requirements and every single one is only met by access reviews. https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#when-should-you-use-access-reviews Dynamic User is needed if a user must be automatically granted access on base of its attributes (department, jobtitle, location, etc.) https://techcommunity.microsoft.com/t5/itops-talk-blog/dynamic-groups-in-azure-ad-and-microsoft-365/ba-p/2267494 Implementing Azure AD PIM is no solution and absolutely not necessary for access reviews. https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#where-do-you-create-reviews
NEW QUESTION # 53
You have an Azure Active Directory (Azure AD) tenant.
You plan to use Azure Monitor to monitor user sign-ins and generate alerts based on specific user sign-in events.
You need to recommend a solution to trigger the alerts based on the events.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://4sysops.com/archives/how-to-create-an-azure-ad-admin-login-alert/
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-log
NEW QUESTION # 54
You have an Azure subscription that contains multiple storage accounts.
You assign Azure Policy definitions to the storage accounts.
You need to recommend a solution to meet the following requirements:
* Trigger on-demand Azure Policy compliance scans.
* Raise Azure Monitor non-compliance alerts by querying logs collected by Log Analytics.
What should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 55
Your organization has developed and deployed several Azure App Service Web and API applications. The applications use Azure Key Vault to store several authentication, storage account, and data encryption keys.
Several departments have the following requests to support the applications:
You need to recommend the appropriate Azure service for each department request.
What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
NEW QUESTION # 56
You plan to migrate App1 to Azure.
You need to recommend a storage solution for App1 that meets the security and compliance requirements.
Which type of storage should you recommend, and how should you recommend configuring the storage? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/data-protection-overview
NEW QUESTION # 57
Your company deploys several Linux and Windows virtual machines (VMs) to Azure. The VMs are deployed with the Microsoft Dependency Agent and the Log Analytics Agent installed by using Azure VM extensions.
On-premises connectivity has been enabled by using Azure ExpressRoute.
You need to design a solution to monitor the VMs.
Which Azure monitoring services should you use? To answer, select the appropriate Azure monitoring services in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Box 1: Azure Traffic Analytics
Traffic Analytics is a cloud-based solution that provides visibility into user and application activity in cloud networks. Traffic analytics analyzes Network Watcher network security group (NSG) flow logs to provide insights into traffic flow in your Azure cloud. With traffic analytics, you can:
* Identify security threats to, and secure your network, with information such as open-ports, applications attempting internet access, and virtual machines (VM) connecting to rogue networks.
* Visualize network activity across your Azure subscriptions and identify hot spots.
* Understand traffic flow patterns across Azure regions and the internet to optimize your network deployment for performance and capacity.
* Pinpoint network misconfigurations leading to failed connections in your network.
Box 2: Azure Service Map
Service Map automatically discovers application components on Windows and Linux systems and maps the communication between services. With Service Map, you can view your servers in the way that you think of them: as interconnected systems that deliver critical services. Service Map shows connections between servers, processes, inbound and outbound connection latency, and ports across any TCP-connected architecture, with no configuration required other than the installation of an agent.
References:
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics
https://docs.microsoft.com/en-us/azure/azure-monitor/insights/service-map
NEW QUESTION # 58
You have the Azure resources shown in the following table.
You need to design a solution that provides on-premises network connectivity to SQLDB1 through PE1. How should you configure name resolution? To answer, select the appropriate options in the answer area.
Answer:
Explanation:
NEW QUESTION # 59
You have an Azure subscription.
You are designing a solution for containerized apps. The solution must meet the following requirements:
* Automatically scale the apps by creating additional instances.
* Minimize administrative effort to maintain nodes and clusters.
* Ensure that containerized apps are highly available across multiple availability zones.
* Provide a central location for the lifecycle management and storage of container images.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 60
You plan to develop a new app that will store business critical data. The app must meet the following requirements:
Prevent new data from being modified for one year.
Minimize read latency.
Maximize data resiliency.
You need to recommend a storage solution for the app.
What should you recommend? To answer, select the appropriate options in the answer area.
Answer:
Explanation:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy?toc=/azure/storage/blobs/toc.json
NEW QUESTION # 61
How should the migrated databases DB1 and DB2 be implemented in Azure?
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/auto-failover-group-overview
https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/sql-managed-instance-paas-overview
NEW QUESTION # 62
You have a multi-tier app named App1 and an Azure SQL database named SQL1.
The backend service of App1 writes data to Users use the App1 client to read the data from SQL1.
During periods of high utilization the users experience delays retrieving the data.
You need to minimize how long it takes for data requests.
What should you include in the solution?
- A. Azure Synapse Analytics
- B. Azure Content Delivery Network (CDN)
- C. Azure Data Factory
- D. Azure Cache for Redis
Answer: D
Explanation:
https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-overview Azure Cache for Redis provides an in-memory data store based on the Redis software. Redis improves the performance and scalability of an application that uses backend data stores heavily.
It's able to process large volumes of application requests by keeping frequently accessed data in the server memory, which can be written to and read from quickly. Redis brings a critical low- latency and high-throughput data storage solution to modern applications.
NEW QUESTION # 63
......
Verified Pass AZ-305 Exam in First Attempt Guaranteed: https://www.actualtests4sure.com/AZ-305-test-questions.html
Free AZ-305 Sample Questions and 100% Cover Real Exam Questions: https://drive.google.com/open?id=1Eor10TqlVkO0MjPZEBJdz6kSsozt9ToE
