Microsoft Azure

Designing Microsoft Azure Infrastructure Solutions

AZ-305
Popular

Prepare for the AZ-305 exam to validate your skills in designing Azure infrastructure solutions.

144 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 101–110 of 144

Q101

A company needs to ensure their Azure virtual machines are compliant with defined security policies. What should they use?

  • A Azure Monitor
  • B Azure Policy
  • C Azure Resource Manager
  • D Azure DevOps
Explanation Azure Policy provides governance to ensure compliance, whereas the others focus on monitoring or resource deployment.
Q102

You are configuring a multi-region disaster recovery solution for an app in Azure. What happens if a primary region fails?

  • A Service automatically moves to backup region
  • B Users will remain connected to primary
  • C Manual intervention is always required
  • D Backup region is automatically deleted
Explanation Services configured for disaster recovery can automatically failover, while the other options incorrectly imply static or manual processes.
Q103

Which service provides managed database for SQL Server?

  • A Azure SQL Database
  • B Azure Cosmos DB
  • C Azure Blob Storage
  • D Azure Table Storage
Explanation Azure SQL Database is designed for SQL Server workloads, while others serve different data storage needs.
Q104

A company needs to implement a secure way to allow users access to multiple Azure resources without managing individual credentials. What should they use?

  • A Azure Active Directory
  • B Azure Storage Account
  • C Virtual Network Peering
  • D Azure Key Vault
Explanation Azure Active Directory centralizes identity management for resource access, while others serve different purposes.
Q105

You are configuring Azure Front Door for your web application. What happens if you set your custom domain to use HTTPS only?

  • A Redirects all HTTP traffic to HTTPS
  • B Allows both HTTP and HTTPS
  • C Blocks all HTTP traffic
  • D Forces complete downtime
Explanation Setting to HTTPS only ensures secure connections, while others misinterpret traffic behavior.
Q106

Which Azure service is best for serverless event-driven compute?

  • A Azure Functions
  • B Azure Virtual Machines
  • C Azure Batch
  • D Azure App Service
Explanation Azure Functions provides a serverless compute option for event-driven operations, while the others are for different compute or hosting scenarios.
Q107

A company needs to analyze large datasets stored in Azure Data Lake Storage. Which service should they use?

  • A Azure SQL Database
  • B Azure Data Explorer
  • C Azure Blob Storage
  • D Azure Logic Apps
Explanation Azure Data Explorer is designed for fast analytics on large datasets, unlike the others which serve different purposes.
Q108

What happens when you set a network security group (NSG) rule to deny all traffic?

  • A All traffic is blocked
  • B Only outbound traffic is blocked
  • C Only inbound traffic is blocked
  • D Traffic is allowed but logged
Explanation A deny all rule blocks all traffic, both inbound and outbound, contradicting the other options.
Q109

A company needs to improve compliance while storing sensitive data in Azure. Which service should they use?

  • A Azure Information Protection
  • B Azure Blob Storage
  • C Azure Virtual Network
  • D Azure Functions
Explanation Azure Information Protection enhances compliance by classifying and protecting sensitive data, while the others do not specifically focus on compliance.
Q110

What happens when you enable Azure Policies for a subscription?

  • A Resource configuration is automated.
  • B Non-compliant resources are deleted.
  • C Compliance is enforced against resource deployment.
  • D All network traffic is logged.
Explanation Azure Policies enforce compliance on resource deployment, while others describe different scenarios not related to policy enforcement.