AZ-305 Designing Microsoft Azure Infrastructure Solutions

ABCD Widgets are working on an important deal to sell widgets to a new customer. The sales and marketing team have produced images for widget design and stored these in a blob storage container called, 'newwidgets'. You need to provide the customer with access to this container, but access must be restricted to the IP address of the new customer's headquarters .

Which of the following would you use to provide the required access to the new customer?

• Conditional Access Policies (CAP)

• Immutable Access Policies

• Shared Access Signatures (SAS)

• Lifecycle Management Policies

Your client has asked for a data storage solution that meets the following criteria. Applications must be able to access to data using a REST connection. The solution will host over 20 independent tables of changing sizes and variable usage patterns. Data should be set to replicate automatically to a different Azure region. The solution must minimize costs as much as possible. What do you recommend?

• Use of tables within an Azure Storage account using geo-redundant storage (GRS).

• An auto-scaling Azure SQL Database using auto-failover groups.

• Use of tables within an Azure Storage account using read-access zone-redundant storage (RA-ZRS).

• An Azure SQL Database elastic database pool using active geo-replication.

You're developing a solution that will use Azure API Management. In this solution, your APIs are hosted in an App Service Environment.

To protect your APIs, you require the following:

• -No public IP accessibility to AKS cluster nodes/containers

• -Provide partners with public access to the Developer portal

Which of the following configurations would you recommend? You should minimize the amount of effort required to meet the requirements.

• Deploy Azure API Management with Private Link. Configure a public application gateway for your App Service Environment APIs.

• Deploy Azure API Management using internal VNet mode. Leave the Azure App Service Environment configuration as-is.

• Deploy Azure API Management using external VNet mode. Leave the Azure App Service Environment configuration as-is.

• Deploy Azure API Management with a Service endpoint. Configure a public application gateway for your App Service Environment APIs.

You are architecting a web application within Azure.

You need to decouple your application components using asynchronous communication, where the order of messages is important.

Which service do you include in your design?

• Service Bus

• Storage Queues

• Azure Notification Hubs

• Event Grid

You are consulting for an organization that has Azure AD Premium P1 licenses.

The organization does not currently have any Azure resources or an Azure AD tenant.

You are helping to design an Azure-based identity security solution for the organization.

With the current licensing model which 2 services could you include in your design?

(Choose 2)

• Azure AD Conditional Access

• Azure AD Identity Protection

• Azure AD Application Proxy

• Azure AD Privileged Identity Management

You are responsible for the architecture of a modern analytics solution.

As part of the solution, you need to recommend an Azure service capable of the following:

• -Support for big data analytics

• -Support for storing to 1 petabyte of raw data

• -Support for unstructured data

• -High availability

The intended purpose for the data is not yet known, but it must be stored for further analytics.

Which service do you recommend as part of this solution?

• Azure SQL Hyperscale

• Azure Data Lake Storage Gen2

• Azure SQL Data Warehouse

• Azure SQL HDFS

You are helping to architect a solution for a company with many remote workers.

The remote workers use a mix of Windows and Mac laptops, all with support for SMB. Remote workers do not have a permanent office space and generally work from Internet cafes or shared office spaces with fast Internet connections.

You need to recommend a solution to better centralize and manage the shared access to data for all remote workers.

What solution would you recommend?

• Azure Files

• Azure Blob Storage with GRS replication

• Azure StorSimple

• Azure File Sync

Following a recent Microsoft event, the development team that you lead has become very excited about the possibility of using Cosmos DB for an application your team is currently designing.

Your team has performed various workshops, and have identified the following key requirements for the data tier of this application:

• -Must support read-replicas to improve performance

• -Must support SQL queries

• -Must allow throughput to be specified and guaranteed

• -Must support fluid schema-less data

Given these requirements, what would you say to the team regarding the possible usage of Cosmos DB for this application?

• Cosmos DB can be used. Cosmos DB must be configured with the SQL API.

• There is no individual Azure service capable of this.

• Cosmos DB cannot be used in this scenario. Use Azure Table Storage instead.

• Cosmos DB can be used. Cosmos DB must be configured with the Table API.

• Cosmos DB cannot be used in this scenario. Use Azure SQL Database with Active Geo-Replication instead.

You currently host a solution within Azure and need to improve security.

The solution is made up of the following components:

• -VM1: Virtual machine with a custom web application

• -DB1: Azure SQL Database with a back-end database for the web application

You want to improve security by ensuring VM1 can talk to DB1 without going over the internet.

You need to provide a recommendation to meet the requirements with the minimum required effort.

What do you include in your recommendation?

• Configure a service endpoint

• Re-deploy DB1 to an Azure SQL Database Managed Instance

• Configure VNet peering

• Configure a network security group

You are migrating an application’s data to Azure. The application instance consumes data from multiple databases. The app code references DB tables using a mix of server, database, and table names. It also sends emails using the dbmail feature.

What service do you use?

• An Amazon S3 account

• An Azure Storage account

• An Azure SQL Database

• SQL Managed Instance