Microsoft Azure AZ-305 training material is important for those who want to pass the AZ-305 exam. The Pass4itSure AZ-305 exam dumps have just been updated with AZ-305 training material and are the best choice for passing the Designing Microsoft Azure Infrastructure Solutions exam.
New updated AZ-305 exam dumps address https://www.pass4itsure.com/az-305.html New training material with 248 exam practice questions to help you prepare for the Microsoft AZ-305 exam.
Can you briefly describe the Microsoft Azure AZ-305 exam?
The full name of the Azure AZ-305 exam is Microsoft Certified – Azure Solutions Architect Expert. It is an exam that costs $165. Requires candidates to answer 40-60 questions in 120 minutes to reach a 700-point pass and earn Microsoft Certified: Azure Solutions Architect Expert certification.
Note that there is a prerequisite here that you need to pass the AZ-104 exam.
How do I easily pass the Microsoft AZ-305 exam?
Knowing the basics of the AZ-305 exam, I guess you will ask how to pass the Microsoft AZ-305 exam.
You will need a Pass4itSure AZ-305 exam dumps to provide you with valid training materials to help you prepare for the AZ-305 exam.
After getting the AZ-305 exam dumps, practice as many exam questions as possible to achieve proficiency.
Did you know where to offer free Designing Microsoft Azure Infrastructure Solutions exam questions?
Work2you.org blog, that’s right here. Not only that, but you can also get the Microsoft series of exam questions here, welcome to search.
Microsoft actual free training material AZ-305 exam Q&As
Q1.
You are designing a solution that will include containerized applications running in an Azure Kubernetes Service (AKS) cluster. You need to recommend a load-balancing solution for HTTPS traffic. The solution must meet the following requirements:
Automatically configure load balancing rules as the applications are deployed to the cluster.
Support Azure Web Application Firewall (WAF).
Support cookie-based affinity.
Support URL routing.
What should you include in the recommendation?
A. an NGINX ingress controller
B. Application Gateway Ingress Controller (AGIC)
C. an HTTP application routing ingress controller
D. the Kubernetes load balancer service
Correct Answer: B
Much like the most popular Kubernetes Ingress Controllers, the Application Gateway Ingress Controller provides several features, leveraging Azure\\’s native Application Gateway L7 load balancer. To name a few: URL routing Cookie-based affinity Secure Sockets Layer (SSL) termination End-to-end SSL Support for the public, private, and hybrid websites Integrated support of Azure web application firewall Application Gateway redirection support isn\\’t limited to HTTP to HTTPS redirection alone.
This is a generic redirection mechanism, so you can redirect from and to any port, you define using rules. It also supports redirection to an external site as well.
Reference: https://docs.microsoft.com/en-us/azure/application-gateway/features
Q2.
You plan to migrate data to Azure. The IT department at your company identifies the following requirements:
Microsoft AZ-305
The storage must support 1 PB of data.
The data must be stored in blob storage.
The storage must support three levels of subfolders. The storage must support access control lists (ACLs). You need to meet the requirements. What should you use?
A. a premium storage account that is configured for block blobs
B. a general purpose v2 storage account that has hierarchical namespace enabled
C. a premium storage account that is configured for page blobs
D. a premium storage account that is configured for files shares and supports large file shares
Correct Answer: B
Microsoft recommends that you use a GPv2 storage account for most scenarios. It supports up to 5 PB, and blob storage including Data Lake storage.
Note: A key mechanism that allows Azure Data Lake Storage Gen2 to provide file system performance at object storage scale and prices is the addition of a hierarchical namespace. This allows the collection of objects/files within an account to be organized into a hierarchy of directories and nested subdirectories in the same way that the file system on your computer is organized. With a hierarchical namespace enabled, a storage account becomes capable of providing the scalability and cost-effectiveness of object storage, with file system semantics that is familiar to analytics engines and frameworks.
References: https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-namespace
Q3.
You architect a solution that calculates 3D geometry from height-map data. You have the following requirements:
Perform calculations in Azure.
Each node must communicate data to every other node.
Maximize the number of nodes to calculate multiple scenes as fast as possible.
Require the least amount of effort to implement.
You need to recommend a solution.
Which two actions should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Create a render farm that uses Azure Batch.
B. Enable parallel file systems on Azure.
C. Enable parallel task execution on compute nodes.
D. Create a render farm that uses virtual machine (VM) scale sets.
E. Create a render farm that uses virtual machines (VMs).
Correct Answer: AC
Q4.
You have an Azure subscription. You need to deploy an Azure Kubernetes Service (AKS) solution that will use Windows Server 2019 nodes. The solution must meet the following requirements:
1. Minimize the time it takes to provision compute resources during scale-out operations.
2. Support autoscaling of Windows Server containers. Which scaling option should you recommend?
A. horizontal pod autoscaler
B. Kubernetes version 1.20.2 or newer
C. cluster autoscaler
D. Virtual nodes
E. with Virtual Kubelet ACI
Correct Answer: C
https://docs.microsoft.com/en-us/azure/aks/cluster-autoscaler#about-the-cluster-autoscaler
Q5.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen. Your company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.
Several VMs are exhibiting network connectivity issues. You need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs. Solution: Install and configure the Microsoft Monitoring Agent and the Dependency Agent on all VMs. Use the Wire Data solution in Azure Monitor to analyze the network traffic. Does the solution meet the goal?
A. Yes
B. No
Correct Answer: B
Instead, use Azure Network Watcher to run IP flow verification to analyze the network traffic.
Note: Wire Data looks at network data at the application level, not down at the TCP transport layer. The solution doesn\\’t look at individual ACKs and SYNs.
Reference: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview
Q6.
You have an Azure web app that runs in a Premium App Service plan. Developers plan to update the app weekly. You need to ensure that the app can be twitched from the current version to the new version. The solution must meet the following requirements
1. Provide the developers with the ability to test the app m Azure prior to switching versions Testing must use the same app instance
2. Ensure that the app version can be rolled back.
3. Minimize downtime.
What should you do?
A. Create a deployment slot.
B. Add an instance of the app to the scale set
C. Copy the App Service plan.
D. Create an Azure Active Directory (Azure AD) enterprise application
Correct Answer: A
Azure Functions deployment slots allow your function app to run different instances called “slots”. Slots are different environments exposed via a publicly available endpoint. One app instance is always mapped to the production slot, and you can swap instances assigned to a slot on demand.
There are a number of advantages to using deployment slots. The following scenarios describe common uses for slots:
Different environments for different purposes: Using different slots gives you the opportunity to differentiate app instances before swapping to production or a staging slot. Easy fallbacks: After a swap with production, the slot with a previously staged app now has the previous production app. If the changes swapped into the production slot aren\\’t as you expect, you can immediately reverse the swap to get your “last known good instance” back.
Reference:
https://docs.microsoft.com/en-us/azure/azure-functions/functions-deployment-slots
Q7.
You migrate App1 to Azure. You need to ensure that the data storage for App1 meets the security and compliance requirement. What should you do?
A. Create an access policy for the blob
B. Modify the access level of the blob service.
C. Implement Azure resource locks.
D. Create Azure RBAC assignments.
Correct Answer: C
Scenario: Once App1 is migrated to Azure, you must ensure that new data can be written to the app, and the modification of new and existing data is prevented for a period of three years. As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization
from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lockresources
Q8.
You plan to move a web application named App1 from an on-premises data center to Azure. App1 depends on a custom COM component that is installed on the host server. You need to recommend a solution to host App1 in Azure. The solution must meet the following requirements:
1. App1 must be available to users if an Azure data center becomes unavailable.
2. Costs must be minimized.
What should you include in the recommendation?
A. In two Azure regions, deploy a load balancer and a virtual machine scale set.
B. In two Azure regions, deploy a Traffic Manager profile and a web app.
C. In two Azure regions, deploy a load balancer and a web app.
D. Deploy a load balancer and a virtual machine scale set across two availability zones.
Correct Answer: D
(https://docs.microsoft.com/en-us/dotnet/azure/migration/app-service#com-and-com-components)
Azure App Service does not allow the registration of COM components on the platform. If your app makes use of any COM components, these need to be rewritten in managed code and deployed with the site or application.
https://docs.microsoft.com/en-us/dotnet/azure/migration/app-service
“Azure App Service with Windows Containers If your app cannot be migrated directly to App Service, consider App Service using Windows Containers, which enables usage of the GAC, COM components, MSIs, and full access to .NET FX APIs, DirectX, and more.”
Q9.
You are designing a large Azure environment that will contain many subscriptions. You plan to use Azure Policy as part of a governance solution. To which three scopes can you assign Azure Policy definitions? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
A. management groups
B. subscriptions
C. Azure Active Directory (Azure AD) tenants
D. resource groups
E. Azure Active Directory (Azure AD) administrative units
F. compute resources
Correct Answer: ABD
Azure Policy evaluates resources in Azure by comparing the properties of those resources to business rules. Once your business rules have been formed, the policy definition or initiative is assigned to any scope of resources that Azure supports, such as management groups, subscriptions, resource groups, or individual resources.
Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/overview
Q10.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen. You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
1. Provide access to the full .NET framework.
2. Provide redundancy if an Azure region fails.
3. Grant administrators access to the operating system to install custom application dependencies.
Solution: You deploy two Azure virtual machines to two Azure regions, and you create a Traffic Manager profile. Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Azure Traffic Manager is a DNS-based traffic load balancer that enables you to distribute traffic optimally to services across global Azure regions while providing high availability and responsiveness.
https://docs.microsoft.com/enus/azure/traffic-manager/traffic-manager-overview
Q11.
You deploy two instances of an Azure web app. One instance is in the East US Azure region and the other instance is in the West US Azure region. The web app uses Azure Blob storage to deliver large files to end users. You need to recommend a solution for delivering the files to the users. The solution must meet the following requirements:
Ensure that the users receive files from the same region as the web app that they access. Ensure that the files only need to be updated once. Minimize costs. What should you include in the recommendation?
A. Azure File Sync
B. Distributed File System (DFS)
C. read-access geo-redundant storage (RA-GRS)
D. geo-redundant storage (GRS)
Correct Answer: C
Q12.
You have 500 Azure web apps in the same Azure region. The apps use a premium Azure Key vault for authentication. A developer reports that some authentication requests are being throttled. You need 10 recommend a solution to increase the available throughput of the key vault the solution must minimize costs. What should you recommend?
A. Increase me number of key vaults in the subscription
B. Configure geo-replication.
C. Change the pacing tier.
D. Configure load balancing for the apps.
Correct Answer: C
Q13.
You have an Active Directory forest named contoso.com. You install and configure AD Connect to use password hash synchronization as the single sign-on(SSO) method. Staging mode is enabled. You review the synchronization results and discover that the Synchronization Service Manager does not display any
sync jobs. You need to ensure that the synchronization completes successfully. What should you do?
A. From Azure PowerShell, run Start-AdSyncSycnCycle policy type Initial.
B. Run Azure AD Connect and set the SSO method to Pass-through Authentication.
C. From Synchronization Service Manager, run a full import.
D. Run Azure AD Connect and disable staging mode.
Correct Answer: D
In staging mode, the server is active for import and synchronization, but it does not run any exports. A server in staging mode is not running password sync or password writeback, even if you selected these features during installation. When you disable staging mode, the server starts exporting, enables password sync, and enables password writeback.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-staging-server
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-operations
Microsoft Azure AZ-305 PDF download available for free in 2022:
[Drive] https://drive.google.com/file/d/1APiDF-NJa38XmIm-SeKCotAaifDNfcis/view?usp=sharing
Pass4itSure AZ-305 exam dumps the latest updated training material contains 248 exam questions and answers and fixes previous bugs, please download AZ-305 exam dumps: https://www.pass4itsure.com/az-305.html