Microsoft - AZ-305: Designing Microsoft Azure Infrastructure Solutions
Sample Questions
Question: 471
Measured Skill: Design identity, governance, and monitoring solutions (25-30%)
You have an Azure subscription and a Microsoft Entra tenant.
You need to recommend a Microsoft Entra ID Identity Governance solution to manage the users in your company's sales department. The solution must meet the following requirements:
- New sales department users must be assigned automatically to all the required groups, teams, Microsoft SharePoint Online sites, and apps for the department.
- The manager of the sales department must validate a list of sales department users every month, and the user accounts of users that are no longer in the department must be removed from all assigned resources automatically.
What should you include in the recommendation for each requirement?
(To answer, drag the appropriate recommendations to the correct requirements. Each recommendation may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point.)
| A | Automatically assign new sales department users to resources: Access packages
Automatically remove user accounts from resources: Access reviews |
| B | Automatically assign new sales department users to resources: Microsoft Entra ID Protection
Automatically remove user accounts from resources: Conditional Access |
| C | Automatically assign new sales department users to resources: Privileged Identity Management (PIM)
Automatically remove user accounts from resources: Access packages |
| D | Automatically assign new sales department users to resources: Conditional Access
Automatically remove user accounts from resources: Access reviews |
| E | Automatically assign new sales department users to resources: Access reviews
Automatically remove user accounts from resources: Privileged Identity Management (PIM) |
| F | Automatically assign new sales department users to resources: Microsoft Entra ID Protection
Automatically remove user accounts from resources: Microsoft Entra ID Protection |
Correct answer: AExplanation:
Managing access to all the resources employees need, such as groups, applications, and sites, is an important function for organizations. You want to grant employees the right level of access they need to be productive and remove their access when it's no longer needed.
An access package enables you to do a one-time setup of resources and policies that automatically grants access for the life of the access package.
Access reviews in Microsoft Entra ID, part of Microsoft Entra, enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User access can be reviewed regularly to make sure only the right people have continued access.
References:
Create an access package in entitlement management
What are access reviews?
Question: 472
Measured Skill: Design data storage solutions (25-30%)
You are building an app named App1 that will store structured and unstructured data by using the Azure Table storage REST API.
You need to recommend a solution that meets the following requirements:
- Provides dedicated throughput and the fastest possible read and write times for the data
- Minimizes storage costs
What should you include in the recommendation?| A | An Azure Cosmos DB database |
| B | A standard storage account |
| C | A premium storage account |
| D | Azure Cache for Redis |
Correct answer: AExplanation:
Azure Table storage is a service that stores non-relational structured data (also known as structured NoSQL data) in the cloud, providing a key/attribute store with a schemaless design. Because Table storage is schemaless, it's easy to adapt your data as the needs of your application evolve. Access to Table storage data is fast and cost-effective for many types of applications, and is typically lower in cost than traditional SQL for similar volumes of data.
The requirement for dedicated throughput and the fastest possible read and write times points to Azure Cosmos DB Table API, which is compatible with the Azure Table Storage REST API and provides:
- Provisioned (dedicated) throughput using Request Units (RUs).
- Single-digit millisecond latency and very high performance for reads and writes.
- Support for the Table API, allowing applications that use the Azure Table Storage API to work with Cosmos DB.
References:
What is Azure Table storage?
What is Azure Cosmos DB for Table?
Table Storage REST API
Question: 473
Measured Skill: Design business continuity solutions (10-15%)
You have an Azure virtual machine named VM1 that contains a third-party application named App1. App1 is installed in a folder named D:\App1.
You back up the files on VM1 by using the Microsoft Azure Recovery Services (MARS) agent and include only D:\App1 in the backup.
You discover that the OS disk of VM1 is corrupted, and the virtual machine cannot start.
You need to recover VM1. The solution must minimize how long it takes to recover VM1.
What should you do?| A | Create a new virtual machine from an Azure Marketplace image, and then restore D:\App1 from
the backup. |
| B | Restore D:\App1 to a new VHD and attach the VHD to the existing virtual machine configuration. |
| C | From the Azure portal, recover the VHD of VM1. |
| D | Create a new VHD from the restored disks in a Recovery Services vault and then create a new virtual machine by using the VHD. |
Correct answer: AExplanation:
The MARS (Microsoft Azure Recovery Services) agent performs file and folder backups, not full virtual machine backups. Only the D:\App1 folder was backed up. Therefore, the backup doesn't contain the VM configuration, the OS disk, or a bootable VHD.
Since the OS disk is corrupted and the VM cannot start, the fastest recovery method is to create a new VM from the appropriate Azure Marketplace image and to restore the backed-up D:\App1 files using the MARS agent.
References: About restore using the Microsoft Azure Recovery Services (MARS) agent
Question: 474
Measured Skill: Design infrastructure solutions (25-30%)
You have an Azure subscription.
You need to recommend a deployment solution for an Azure function that will host a custom API. The solution must meet the following requirements:
- Minimize latency associated with launching the API.
- Support on-demand scaling out to 90 instances.
- Support availability zones.
- Minimize costs.
Which hosting plan and redundancy level should you include in the recommendation?
(To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)
| A | Hosting plan: Basic App Service
Redundancy level: Geo-redundant storage (GRS) |
| B | Hosting plan: Elastic Premium
Redundancy level: Geo-redundant storage (GRS) |
| C | Hosting plan: Consumption
Redundancy level: Locally-redundant storage (LRS) |
| D | Hosting plan: Container Apps environment
Redundancy level: Locally-redundant storage (LRS) |
| E | Hosting plan: Elastic Premium
Redundancy level: Zone-redundant storage (ZRS) |
| F | Hosting plan: Consumption
Redundancy level: Zone-redundant storage (ZRS) |
Correct answer: EExplanation:
Azure Functions is an event-driven compute service that runs small blocks of code, or functions, without explicit infrastructure provisioning or management. Functions can respond to events such as HTTP requests, timers, queue messages, and changes in other Azure services. This capability makes Functions well-suited for data processing, system integration, and background tasks.
A hosting plans represents the hosting environment for your function apps. The plan determines the available compute resources, pricing model, and scaling behavior.
Elastic Premium supports automatic scaling to a large number of instances, exceeding the required 90 instances, and prewarmed instances, which significantly reduces or eliminates cold starts.
While Consumption is usually the lowest-cost option, the traditional Consumption plan does not support availability zones. Availability zones are supported for Azure Functions on the Elastic Premium plan. Elastic Premium is the least expensive option that satisfies all requirements.
Zone redundancy enables your function apps to be resilient to problems in Azure availability zones, so your app remains available when a datacenter or zone has an outage. A zone-redundant Function App requires a zone-redundant storage account. Azure Functions zone redundancy documentation specifically calls for a ZRS storage account when configuring zone-redundant deployments.
References:
Reliability in Azure Functions
Azure Functions Premium plan
Configure zone redundancy for Azure Functions
Question: 475
Measured Skill: Design business continuity solutions (10-15%)
You have an Azure subscription that contains an Azure HDInsight cluster named Cluster1 and an Azure Data lake Storage Gen2 account named account1. Account1 uses read-access geo- redundant storage (RA-GRS) and blob snapshots. Cluster1 stores 2 TB of data in account1.
The primary Azure region of account1 experiences an outage.
You create a new Data Lake Storage Gen2 account named account2 in a different Azure region and register the account as the default storage for Cluster1.
You need to populate account2 with the data from account1. The solution must meet the following requirements:
- Minimize how long it takes to restore access to the data.
- Minimize administrative effort.
What should you use?| A | A restore from a blob snapshot |
| B | AzCopy |
| C | Azure Site Recovery |
| D | Azure Data Factory |
Correct answer: BExplanation:
The storage account uses read-access geo- redundant storage (RA-GRS), which means the data is already replicated to a secondary region and can be read directly from the secondary endpoint during a primary-region outage.
We have already created account2 in another region and need to quickly populate it with the existing 2 TB of data.
AzCopy is optimized for high-speed data transfer between Azure Storage accounts and requires minimal administration. It can directly copy data from the RA-GRS secondary endpoint to account2.
References:
Azure storage disaster recovery planning and failover
Copy blobs between Azure storage accounts by using AzCopy