Taking any exam requires preparation, and the Microsoft Azure AZ-305 exam is no exception. We have updated the new AZ-305 exam dumps to be the perfect Microsoft Azure AZ-305 preparation material for the AZ-305 exam.
Good preparation materials will help you successfully pass the AZ-305 exam, download the Microsoft AZ-305 exam dumps address: https://www.pass4itsure.com/az-305.html You will get the Microsoft AZ-305 exam questions and answers (PDF, VCE) all the required preparation materials, active practice, through Designing Microsoft Azure The Infrastructure Solutions exam was perfect.
Free download of the latest and updated AZ-305 exam dumps: https://drive.google.com/file/d/1XCyaYpZQi2pYNGntK3Vj920r0492TlUu/view?usp=sharing
What are the frequently asked questions about the Microsoft Azure AZ-305 exam?
People also ask
How long is the AZ-305 exam?
How do I prepare for AZ-305?
How many questions are there in the AZ-305 exam?
……
Below, I will summarize and answer for you.
Abbreviation: AZ-305
Full name: Designing Microsoft Azure Infrastructure Solutions
Certification: Microsoft Certified: Azure Solutions Architect Expert
Exam Passing Score: 700
Fee: $165 USD
Measurement Capability:
Design identity, governance, and monitoring solutions; design data storage solutions; design business continuity solutions; and design infrastructure solutions
Languages: English, Japanese, Chinese (Simplified), Korean, German, French, Spanish, Portuguese (Brazil), Arabic (Saudi Arabia), Russian, Chinese (Traditional), Italian, Indonesian (Indonesia)
Learning Path:
AZ-305: Design identity, governance, and monitor solutions
AZ-305: Design business continuity solutions
AZ-305: Design data storage solutions
AZ-305: Design infrastructure solutions
Build great solutions with the Microsoft Azure Well-Architected Framework
Accelerate cloud adoption with the Microsoft Cloud Adoption Framework for Azure
Speaking of how to prepare for the AZ-305 exam? That’s sure to be the perfect Microsoft Azure AZ-305 preparation material – Pass4itSure AZ-305 exam dumps. There are all the materials you want for the exam.
Do not know? Microsoft Certified: Azure Solutions Architect Expert
How to get:
Complete a prerequisite >>
Microsoft Certified: Azure Administrator Associate
Take an exam once >>
Designing Microsoft Azure Infrastructure Solutions (AZ-305)
Get certified >>
Microsoft Certification: Azure Solutions Architect Specialist
Note one premise:
Microsoft Certified: Azure Administrator Associate.
Take Exam AZ-104: Microsoft Azure Administrator >> Microsoft Certified: Azure Administrator Associate
Want to try it out? Share some exam questions for the AZ-305 free dumps:
QUESTION # 1
DRAG DROP
You have an on-premises network that uses an IP address space of 172.16.0.0/16. You plan to deploy 25 virtual machines to a new Azure subscription. You identify the following technical requirements:
1. All Azure virtual machines must be placed on the same subnet named Subnet1.
2. All the Azure virtual machines must be able to communicate with all on-premises servers.
3. The servers must be able to communicate between the on-premises network and Azure by using a site-to-site VPN.
You need to recommend a subnet design that meets the technical requirements.
What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnets. Each network address may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content
NOTE: Each correct selection is worth one point.
QUESTION # 2
HOTSPOT You have an Azure subscription that contains the resources shown in the following table.
You create an Azure SQL database named DB1 that is hosted in the East US region.
To DB1, you add a diagnostic setting named Settings1. Settings1 archives SQLInsights to storage1 and sends SQLInsights to Workspace1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selections is worth one point.
Hot Area:
Correct Answer:
Box 1: Yes Box 2: Yes Box 3: Yes
For more information on Azure SQL diagnostics , you can visit the below link https://docs.microsoft.com/enus/azure/azure-sql/database/metrics-diagnostic-telemetry-logging-streaming-export-configure
QUESTION # 3
You have the resources shown in the following table.
CDB1 hosts a container that stores continuously updated operational data.
You are designing a solution that will use AS1 to analyze the operational data daily.
You need to recommend a solution to analyze the data without affecting the performance of the operational data store. What should you include in the recommendation?
A. Azure Cosmos DB change feed
B. Azure Data Factory with Azure Cosmos DB and Azure Synapse Analytics connectors
C. Azure Synapse Analytics with PolyBase data loading
D. Azure Synapse Link for Azure Cosmos DB
Correct Answer: C
QUESTION # 4
HOTSPOT
You plan to migrate App1 to Azure.
You need to recommend a storage solution for App1 that meets the security and compliance requirements. Which type of storage should you recommend, and how should you recommend configuring the storage? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: Standard general-purpose v2
Standard general-purpose v2 supports Blob Storage.
Azure Storage provides data protection for Blob Storage and Azure Data Lake Storage Gen2.
Scenario:
Litware identifies the following security and compliance requirements:
Once App1 is migrated to Azure, you must ensure that new data can be written to the app, and the modification of new and existing data is prevented for a period of three years.
On-premises users and services must be able to access the Azure Storage account that will host the data in App1.
Access to the public endpoint of the Azure Storage account that will host the App1 data must be prevented. All Azure SQL databases in the production environment must have Transparent Data Encryption (TDE) enabled. App1 must NOT share physical hardware with other workloads.
Box 2: NFSv3
Scenario: Plan: Migrate App1 to Azure virtual machines.
Blob storage now supports the Network File System (NFS) 3.0 protocol. This support provides Linux file system compatibility at object storage scale and prices and enables Linux clients to mount a container in Blob storage from an Azure Virtual Machine (VM) or a computer on-premises.
Reference: https://docs.microsoft.com/en-us/azure/storage/blobs/data-protection-overview
QUESTION # 5
HOTSPOT
You have an Azure subscription that contains the SQL servers on Azure shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: Yes Be sure that the destination is in the same region as your database and server. Box 2: No Box 3: Yes
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-auditing\
QUESTION # 6
You have .NeT web service named service1 that has the following requirements:
1. Must read and write to the local file system.
2. Must write to the Windows Application event log. You need to recommend a solution to host Service1 in Azure .
The solution must meet the following requirements:
1. Minimize maintenance overhead.
2. Minimize costs.
What should you include in the recommendation?
A. an Azure App Service web app
B. an Azure virtual machine scale set
C. an App Service Environment (ASE)
D. an Azure Functions app
Correct Answer: A
QUESTION # 7
DRAG DROP
You need to configure an Azure policy to ensure that the Azure SQL databases have TDE enabled. The solution must meet the security and compliance requirements. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Scenario: All Azure SQL databases in the production environment must have Transparent Data Encryption (TDE) enabled.
Step 1: Create an Azure policy definition that uses the deployIfNotExists identity.
The first step is to define the roles that deployIfNotExists and modify needs in the policy definition to successfully deploy the content of your included template.
Step 2: Create an Azure policy assignment
When creating an assignment using the portal, Azure Policy both generates the managed identity and grants it the roles defined in roleDefinitionIds.
Step 3: Invoke a remediation task
Resources that are non-compliant to a deployIfNotExists or modify policy can be put into a compliant state through Remediation. Remediation is accomplished by instructing Azure Policy to run the deployIfNotExists effect or the modify operations of the assigned policy on your existing resources and subscriptions, whether that assignment is to a management group, a subscription, a resource group, or an individual resource.
During evaluation, the policy assignment with deployIfNotExists or modify effects determines if there are non-compliant resources or subscriptions. When non-compliant resources or subscriptions are found, the details are provided on the Remediation page.
QUESTION # 8
The application will host video files that range from 50 MB to 12 GB. The application will use certificate-based authentication and will be available to users on the internet.
You need to recommend a storage option for the video files. The solution must provide the fastest read performance and must minimize storage costs. What should you recommend?
A. Azure Files
B. Azure Data Lake Storage Gen2
C. Azure Blob Storage
D. Azure SQL Database
Correct Answer: C
Blob Storage: Stores large amounts of unstructured data, such as text or binary data, that can be accessed from anywhere in the world via HTTP or HTTPS. You can use Blob storage to expose data publicly to the world, or to store application data privately. Max file in Blob Storage. 4.77 TB.
Reference:
https://docs.microsoft.com/en-us/azure/architecture/solution-ideas/articles/digital-media-video
QUESTION # 9
You need to recommend a notification solution for the IT Support distribution group. What should you include in the recommendation?
A. Azure Network Watcher
B. an action group
C. a SendGrid account with advanced reporting
D. Azure AD Connect Health
Correct Answer: D
References: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-healthoperations
QUESTION # 10
HOTSPOT
Your company has two on-premises sites in New York and Los Angeles and Azure virtual networks in the East US Azure region and the West US Azure region. Each on-premises site has Azure ExpressRoute circuits to both regions.
You need to recommend a solution that meets the following requirements:
Outbound traffic to the Internet from workloads hosted on the virtual networks must be routed through the closest available on-premises site. If an on-premises site fails, traffic from the workloads on the virtual networks to the Internet must reroute automatically to the other site.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
An on-premises network gateway can exchange routes with an Azure virtual network gateway using the border gateway protocol (BGP). Using BGP with an Azure virtual network gateway is dependent on the type you selected when you created the gateway.
If the type you selected were: ExpressRoute: You must use BGP to advertise on-premises routes
to the Microsoft Edge router. You cannot create user-defined routes to force traffic to the ExpressRoute virtual network gateway if you deploy a virtual network gateway deployed as type: ExpressRoute. You can use user-defined routes for forcing traffic from the Express Route to, for example, a Network Virtual Appliance.
https://docs.microsoft.com/ja-jp/azure/expressroute/designing-for-disaster-recovery-with-expressroute-privatepeering https://docs.microsoft.com/en-us/azure/expressroute/expressroute-optimize-routing#suboptimal-routing-from-customer-tomicrosoft
QUESTION # 11
You plan to deploy an application named App1 that will run on five Azure virtual machines. Additional virtual machines will be deployed later to run App1. You need to recommend a solution to meet the following requirements for the virtual machines that will run App1:
1. Ensure that the virtual machines can authenticate to Azure Active Directory (Azure AD) to gain access to an Azure key vault, Azure Logic Apps instances, and an Azure SQL database.
2. Avoid assigning new roles and permissions for Azure services when you deploy additional virtual machines.
3. Avoid storing secrets and certificates on the virtual machines. Which type of identity should you include in the recommendation?
A. a service principal that is configured to use a certificate
B. a system-assigned managed identity
C. a service principal that is configured to use a client secret
D. a user-assigned managed identity
Correct Answer: D
Managed identities for Azure resources is a feature of Azure Active Directory. User-assigned managed identity can be shared. The same user-assigned managed identity can be associated with more than one Azure resource.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
QUESTION # 12
Your company has an app named App1 that uses data from the on-premises Microsoft SQL Server databases shown in the following table.
App1 and the data are used on the first day of the month only. The data is not expected to grow more than 3% each year.
The company is rewriting App1 as an Azure web app and plans to migrate all the data to Azure.
You need to migrate the data to Azure SQL Database. The solution must minimize costs. Which service tier should you use?
A. vCore-based Business Critical
B. vCore-based General Purpose
C. DTU-based Standard
D. DTU-based Basic
Correct Answer: C
DTU-based Standard supports databases up to 1 TB in size.
Reference: https://docs.microsoft.com/en-us/azure/azure-sql/database/service-tiers-dtu
QUESTION # 13
HOTSPOT
You have an Azure subscription that contains a virtual network named VNET1 and 10 virtual machines. The virtual machines are connected to VNET1.
You need to design a solution to manage the virtual machines from the internet. The solution must meet the following requirements:
1. Incoming connections to the virtual machines must be authenticated by using Azure Multi- Factor Authentication (MFA) before network connectivity is allowed.
2. Incoming connections must use TLS and connect to TCP port 443.
3. The solution must support RDP and SSH.
What should you Include In the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Full AZ-305 exam dumps question answers, here.
