Microsoft Azure

Designing Microsoft Azure Infrastructure Solutions

AZ-305

Popular

Prepare for the AZ-305 exam to validate your skills in designing Azure infrastructure solutions.

144 questions 0 views Free

Start Mock Test Timed · Full-length · Scored

Q121

Which Azure service provides serverless computing functionality?

A Azure Functions
B Azure Virtual Machines
C Azure App Services
D Azure Kubernetes Service

Explanation Azure Functions is the serverless solution; other options require infrastructure management.

Q122

A company needs to control access to resources while allowing Azure services access on behalf of users. What should they use?

A Azure AD Roles
B Managed Identities
C Network Security Groups
D Role-Based Access Control

Explanation Managed Identities allow Azure services to authenticate without needing credentials; other options serve different purposes.

Q123

You are configuring a multi-region deployment for resiliency. What happens when one region goes down?

A Traffic stops entirely
B Users are directed to another region
C Instance automatically restarts
D Data is deleted in the down region

Explanation Traffic will be directed based on failover configurations; the other options do not accurately reflect Azure's handling of such scenarios.

Q124

Which service provides automated backup of Azure VMs?

A Azure Backup
A Automatically backs up configured VMs.
B Azure Site Recovery
B Mainly for disaster recovery scenarios.
C Azure Storage
C Used for scalable object storage.
D Azure Blob
D Not specifically for backing up VMs.

Explanation Azure Backup is designed specifically for backing up Azure VMs, while the others serve different purposes.

Q125

A company needs to restrict network access based on specific IP addresses. What should they use?

A Network Security Groups
A Controls inbound and outbound traffic.
B Virtual Network Peering
B Connects different Azure VNets.
C Azure Load Balancer
C Distributes traffic across VMs.
D Application Gateway
D Web application traffic management only.

Explanation Network Security Groups (NSGs) effectively restrict access based on IP addresses, whereas others do not provide such fine control on network traffic.

Q126

You are configuring Azure AD Conditional Access. What happens when a user's sign-in fails two times in a row?

A Only occurs if configured.
A Account is locked out immediately
B Default behavior unless managed.
B User must retry after a period
C Conditional Access does not trigger alerts.
C Security alert is generated
D Password must be changed
D This is not a trigger condition.

Explanation By default, the user must retry after a period unless specific conditional access policies indicate otherwise.

Q127

Which service provides a managed Kubernetes environment?

A Azure Kubernetes Service
B Azure Functions
C Azure App Service
D Azure Logic Apps

Explanation Azure Kubernetes Service is designed specifically for managing Kubernetes; the others serve different use cases.

Q128

A company needs to implement network security restrictions for their Azure virtual machines. What should they use?

A Azure Security Center
B Network Security Groups
C Azure Policy
D Azure Monitor

Explanation Network Security Groups are specifically designed to control inbound and outbound traffic; the other options do not focus on network-level security controls.

Q129

What happens when a virtual machine's managed disk encryption is turned off?

A Data remains encrypted
B All data is deleted
C Decryption phase begins
D VM cannot restart

Explanation Turning off encryption initiates the decryption process, allowing access to unencrypted data; the other options do not accurately reflect the result of disabling encryption.

Q130

Which service is best for serverless computing in Azure?

A Azure Functions
B Azure Virtual Machines
C Azure App Service
D Azure Kubernetes Service

Explanation Azure Functions provides a true serverless architecture, while others are not serverless.