Practice Free AZ-305 Exam Online Questions

DRAG DROP

You have an on-premises network that uses on IP address space of 172.16.0.0/16

You plan to deploy 25 virtual machines to a new azure subscription.

You identity the following technical requirements.

✑ All Azure virtual machines must be placed on the same subnet subnet1.

✑ All the Azure virtual machines must be able to communicate with all on premises severs.

✑ The servers must be able to communicate between the on-premises network and Azure by using a site to site VPN.

You need to recommend a subnet design that meets the technical requirements.

What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnet. Each network address may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

DRAG DROP

You plan to deploy an infrastructure solution that will contain the following configurations:

• External users will access the infrastructure by using Azure Front Door.

• External user access to the backend APIs hosted in Azure Kubernetes Service (AKS) will be controlled by using Azure API Management.

• External users will be authenticated by an Azure AO B2C tenant that uses OpenlD Connect-based federate with a third-party identity provider.

Which function does each service provide? To answer, drag the appropriate functions to the correct services. Each function may be used once, more than once, or not at all You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Front Door: Protection against Open Web Application Security Project (OWASP) vulnerabilities1

API Management: IP filtering on a per-API level2 and validation of Azure B2C JSON Web Tokens (JWTs)3

Reference:

1: Azure Front Door – Web Application Firewall

2: Azure API Management policy reference – ip-filter

3: How to validate an Azure B2C JWT token in a web API?

HOTSPOT

Your company deploys several Linux and Windows virtual machines (VMs) to Azure. The VMs are deployed with the Microsoft Dependency Agent and the Microsoft Monitoring Agent installed by using Azure VM extensions. On-premises connectivity has been enabled by using Azure ExpressRoute.

You need to design a solution to monitor the VMs.

Which Azure monitoring services should you use? To answer, select the appropriate Azure monitoring services in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: Azure Network Watcher

Traffic Analytics is a cloud-based solution that provides visibility into user and application activity in cloud networks. Traffic analytics analyzes Network Watcher network security group (NSG) flow logs to provide insights into traffic flow in your Azure cloud.

With traffic analytics, you can:

✑ Identify security threats to, and secure your network, with information such as open-ports, applications attempting internet access, and virtual machines (VM) connecting to rogue networks.

✑ Visualize network activity across your Azure subscriptions and identify hot spots.

✑ Understand traffic flow patterns across Azure regions and the internet to optimize your network deployment for performance and capacity.

✑ Pinpoint network misconfigurations leading to failed connections in your network.

Box 2: Azure Service Map

Service Map automatically discovers application components on Windows and Linux systems and maps the communication between services. With Service Map, you can view your servers in the way that you think of them: as interconnected systems that deliver critical services. Service Map shows connections between servers, processes, inbound and outbound connection latency, and ports across any TCP-connected architecture, with no configuration required other than the installation of an agent.

Reference:

https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/service-map

What should you include in the identity management strategy to support the planned changes?

Reveal Solution Hide Solution

You plan to migrate on-premises MySQL databases to Azure Database for MySQL Flexible Server.

You need to recommend a solution for the Azure Database for MySQL Flexible Server configuration.

The solution must meet the following requirements:

• The databases must be accessible if a datacenter fails.

• Costs must be minimized.

Which compute tier should you recommend?

Reveal Solution Hide Solution

You have an Azure subscription that contains a storage account named storage 1.

The storage1 account contains a container named container!

You are planning the development of an app that will process and analyze vast amounts of user analytics data.

You need to recommend a solution to collect data from various sources and store the data in an Azure Synapse Analytics workspace. The solution must ensure that data processing and analysis is automated when a new data file is added to contained

What should you include in the recommendation?

Reveal Solution Hide Solution

The accounting department at your company migrates to a new financial accounting software. The accounting department must keep file-based database backups for seven years for compliance purposes. It is unlikely that the backups will be used to recover data.

You need to move the backups to Azure. The solution must minimize costs.

Where should you store the backups?

Reveal Solution Hide Solution

HOTSPOT

You plan to deploy an Azure App Service web app named App1 that will service users in a single geographical region. App1 will access a highly available database named DB1 that will be hosted on two Azure virtual machines named VM1 and VM2.

You need to recommend a solution that meets the following requirements:

• Uses Azure Web Application Firewall (WAF) to minimize the risk of a web-based attack against App1

• Ensures that administrators can access VM1 and VM2 securely from the internet

• Ensures that traffic from App1 to DB1 is NOT sent via the internet

• Minimizes costs

What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area.

Reveal Solution Hide Solution

Correct Answer:

DRAG DROP

You have an Azure subscription.

You are planning the development of two Azure applications as shown in the following table.

You need to configure diagnostic settings and ensure logs are routed to the correct destination for each application.

What destination should you use for each application? To answer, drag the appropriate destinations to the correct applications. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

HOTSPOT

A company plans to implement an HTTP-based API to support a web app. The web app allows customers to check the status of their orders.

The API must meet the following requirements:

✑ Implement Azure Functions

✑ Provide public read-only operations

✑ Do not allow write operations

You need to recommend configuration options.

What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Allowed authentication methods: GET only

Authorization level: Anonymous

The option is Allow Anonymous requests. This option turns on authentication and authorization in App Service, but defers authorization decisions to your application code. For authenticated requests,

App Service also passes along authentication information in the HTTP headers.

This option provides more flexibility in handling anonymous requests.

Reference: https://docs.microsoft.com/en-us/azure/app-service/overview-authentication-authorization