Practice Free AZ-305 Exam Online Questions
HOTSPOT
You have an Azure AD tenant that contains a management group named MG1.
You have the Azure subscriptions shown in the following table.

The subscriptions contain the resource groups shown in the following table.

The subscription contains the Azure AD security groups shown in the following table.

The subscription contains the user accounts shown in the following table.

You perform the following actions:
• Assign User3 the Contributor role for Sub1.
• Assign Group1 the Virtual Machine Contributor role for MG1.
• Assign Group3 the Contributor role for the Tenant Root Group.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Storage account that contains two 1-GB data files named File1 and File2. The data files are set to use the archive access tier.
You need to ensure that File1 is accessible immediately when a retrieval request is initiated.
Solution: For File1, you set Access tier to Cool.
Does this meet the goal?
- A . Yes
- B . No
You have multiple on-premises networks
You have multiple Azure subscriptions. Each subscription contains a virtual network that is assigned an IP address space of 172.16.0.0/16. Each virtual network is connected to the on premises networks by using ExpressRoute.
You plan to deploy a container orchestration solution that will use multiple Azure Kubernetes Service (AKS) clusters. The clusters will be deployed to the existing virtual networks.
You need to recommend a network configuration for the AKS dusters.
The solution must meet the following requirements:
• Minimize the number of IP addresses required on each virtual network.
• Support outbound connectivity to on-premises datacenters.
• Support Windows node pools
Which AKS network model should you recommend?
- A . Azure CNI Overlay
- B . kubenet
- C . Azure CNI
- D . Azure CNI Powered by Cilium
HOTSPOT
You have an Azure subscription named Sub1 that is linked to an Azure AD tenant named contoso.com.
You plan to implement two ASP.NET Core apps named App1 and App2 that will be deployed to 100 virtual machines in Sub1. Users will sign in to App1 and App2 by using their contoso.com credentials.
App1 requires read permissions to access the calendar of the signed-m user. App2 requires write permissions to access the calendar of the signed-in user.
You need to recommend an authentication and authorization solution for the apps.
The solution must meet the following requirements:
• Use the principle of least privilege.
• Minimize administrative effort
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one pent.

HOTSPOT
You plan to migrate App1 to Azure.
You need to estimate the compute costs for App1 in Azure. The solution must meet the security and compliance requirements.
What should you use to estimate the costs, and what should you implement to minimize the costs? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

HOTSPOT
You are designing a software as a service (SaaS) application that will enable Microsoft Entra users to create and publish online surveys. The SaaS application will have a front-end web app and a back-end web API. The web app will rely on the web API to handle updates to customer surveys.
You need to design an authorization flow for the SaaS application.
The solution must meet the following requirements:
• To access the back-end web API, the web app must authenticate by using OAuth 2 bearer tokens.
• The web app must authenticate by using the identities of individual users.
What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct collection is worth one point.

HOTSPOT
Your on premises network contains an Active Directory Domain Services (AD DS) forest. The forest contains a top level domain, three child domains, and an on-premises server named Server 1.
You have a Microsoft Entra tenant. Server1 uses Microsoft Entra Connect Sync to replicate all the user objects from the three child domains to the tenant.
New contractors and employees are onboarded manually by using the Workday cloud-based human resources (HR) application.
You plan to automatically provision accounts for new users in one of the on-piemises child domains
and the Microsoft Entra tenant. The provisioning logic for the employees will be distinct from the
provisioning logic for the contractors.
You need to identify the following:
• The minimum number of apps to register in the Microsoft Entra tenant
• The minimum number of Microsoft Entra Connect provisioning agents to deploy
The solution must minimize implementation effort.
What should you identify? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

You have an Azure subscription.
You need to deploy an Azure Kubernetes Service (AKS) solution that will use Windows Server 2019 nodes.
The solution must meet the following requirements:
• Minimize the time it takes to provision compute resources during scale-out operations.
• Support autoscaling of Windows Server containers.
Which scaling option should you recommend?
- A . horizontal pod autoscaler
- B . Kubernetes version 1.20.2 or newer
- C . cluster autoscaler
- D . Virtual nodes
- E . with Virtual Kubelet ACI
You need to recommend a solution for the App1 maintenance task. The solution must minimize costs.
What should you include in the recommendation?
- A . an Azure logic app
- B . an Azure function
- C . an Azure virtual machine
- D . an App Service WebJob
You deploy two instances of an Azure web app. One instance is in the East US Azure region and the other instance is in the West US Azure region. The web app uses Azure Blob storage to deliver large files to end users.
You need to recommend a solution for delivering the files to the users.
The solution must meet the following requirements:
✑ Ensure that the users receive files from the same region as the web app that they access.
✑ Ensure that the files only need to be updated once.
✑ Minimize costs.
What should you include in the recommendation?
- A . Azure File Sync
- B . Distributed File System (DFS)
- C . read-access geo-redundant storage (RA-GRS)
- D . geo-redundant storage (GRS)





