Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

az-305 > test12 > Flashcards

test12 Flashcards

1
Q

To identify denied data packets to Azure VMs connected via ExpressRoute, which tool should you use?

A

Azure Network Watcher – IP Flow Verify Tool

IP Flow Verify checks if packets are allowed or denied to/from VMs, unlike Traffic Analytics or Connection Troubleshoot.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

To protect a web app on Azure from SQL injection and XSS attacks, which service should you use?

A

Azure Application Gateway

Application Gateway’s Web Application Firewall (WAF) protects against web-based attacks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the least permissions needed for an app to copy secrets from appvault89989 to another vault?

A

Get and List only

The app needs ‘Get’ to fetch secret values and ‘List’ to see available secrets in the source vault.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

To restrict Azure portal login to on-premises network computers for a user group, what should you use?

A

Azure AD Conditional Access Policies

Conditional Access Policies can enforce location-based login restrictions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

To grant a team temporary permissions to start/stop Azure VMs while minimizing costs, what should you recommend?

A

Azure AD Privileged Identity Management

PIM provides just-in-time access, reducing costs by limiting permissions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What license is required to use Azure AD Privileged Identity Management for temporary VM permissions?

A

Azure AD Premium P2

PIM requires Azure AD Premium P2 licenses for advanced identity management features.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which two artifacts can be added to Azure Blueprints?

A

Resource Groups and Role Assignment

Blueprints support artifacts like resource groups and role assignments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

For hosting a Linux Docker container web app with auto-scaling, custom domains, SSL, and minimal admin effort, what should you use?

A

Azure Web Apps

Web Apps supports Linux containers, auto-scaling, and simplifies management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which two services can copy 100 GB of on-premises files to Azure Blob Storage?

A

Azure Import/Export and Azure Data Factory

Import/Export ships physical drives, and Data Factory automates data transfer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

For a storage solution storing immutable data for 3 years with minimal access costs, which access tier should you choose?

A

Hot Access tier

Hot tier minimizes access costs for frequent operations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

To ensure data in a storage account remains immutable for 3 years, what should you use?

A

Container Access Policy

An immutable Blob access policy prevents modifications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

To restrict Azure VM deployment to specific regions, what should you use?

A

Azure Policies

Azure Policies enforce deployment rules like region restrictions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

To collect System Log events from Windows Server 2019 Azure VMs, what should you create in Azure?

A

A Log Analytics Workspace

Log Analytics Workspace stores and analyzes event log data from VMs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What must be installed on Windows Server 2019 VMs to send System Logs to a Log Analytics Workspace?

A

Microsoft Monitoring Agent

The Microsoft Monitoring Agent collects and sends log data to the workspace.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

To enable communication between appvm1 and appvm2 in different Azure VNETs, what should you implement?

A

Virtual Network Peering

VNET Peering connects virtual networks cost-effectively.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

To minimize costs when running parallel jobs in Azure Batch, what should you recommend?

A

Low-priority virtual machines

Low-priority VMs reduce costs for Batch workloads.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Is the storage cost of demo1.txt (Hot tier) less than demo2.txt (Cool tier) in a GPv2 storage account?

A

No

Cool tier storage costs less than Hot tier for Blob storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Can you access demo3.txt in the Archive tier immediately?

A

No

Archive tier requires rehydration to Hot or Cool tier before access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

For deploying a public web app and private Web API container group with minimal admin effort, what should you use?

A

Azure Container Instances

ACI supports container groups with low overhead.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

To assess on-premises Hyper-V VM migration to Azure with VM sizing, what should you use?

A

Azure Migrate

Azure Migrate assesses migration and recommends VM sizes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

For processing images in parallel from an Azure Storage Account, what service should you recommend?

A

Azure Batch

Batch excels at parallel compute tasks like image processing.

22
Q

To evaluate group membership monthly with self-reviews and auto-removal, what should you use?

A

Azure AD Access Reviews

Access Reviews automate group membership evaluation.

23
Q

For a sender app to broadcast transaction messages to multiple listeners, what should you use?

A

A Service Bus Topic

Service Bus Topics support publish-subscribe messaging.

24
Q

To migrate an on-premises SQL Server 2014 database to Azure SQL Database, what should you use?

A

Database Migration Assistant

DMA migrates SQL Server to Azure SQL Database.

25
Q

To migrate an on-premises SQL Server 2014 database to Azure Cosmos DB (SQL API), what should you use?

A

Azure Cosmos DB Data Migration Tool

This tool migrates data to Cosmos DB’s SQL API.

26
Q

To access files in the Archive tier immediately, what must you do?

A

Change the access tier for the files

Files in Archive must be rehydrated to Hot/Cool tier for immediate access.

27
Q

What is the least permission needed for an app to copy secrets into destinationvault1000?

A

Set only

‘Set’ allows writing secrets to the destination vault.

28
Q

For load balancing multiple Azure Web Apps globally with rate limiting and region failover, what should you use?

A

Azure Front Door

Front Door provides global load balancing and failover.

29
Q

To minimize scale-out time and admin effort in an Azure Kubernetes cluster, what should you use?

A

Cluster Autoscaler

Cluster Autoscaler automatically scales nodes based on demand.

30
Q

For a web app with a legacy component requiring high availability and minimal cost, what hosting solution should you use?

A

Azure Virtual Machine Scale Set

VM Scale Sets support custom installs and scale for availability.

31
Q

What load balancing solution should you use for a VM Scale Set with a legacy app across data centers?

A

Azure Load Balancer

Load Balancer ensures availability within a region.

32
Q

How should you deploy a VM Scale Set with a legacy app for data center availability?

A

Across two availability zones

Availability zones ensure data center redundancy.

33
Q

What is the strongest consistency level for an Azure Cosmos DB with multi-region writes?

A

Bounded Staleness

Strong consistency isn’t supported with multi-region writes.

34
Q

Which model must Azure SQL Databases use for cost-saving reservations?

A

vCore-based

vCore-based model supports Azure reservations.

35
Q

Can you store data in Azure file shares in a General Purpose V2 storage account (cloudstore1000)?

A

Yes

GPv2 accounts support file shares.

36
Q

Can you store data in Azure file shares in a Premium Block Blob storage account (cloudstore2000)?

A

No

Premium Block Blob accounts don’t support file shares.

37
Q

Can you configure Lifecycle Management for a Premium File Share account (cloudstore3000)?

A

No

Premium File Share accounts don’t support Lifecycle Management.

38
Q

For routing users to a North Europe web app with failover, what should you use?

A

Azure Traffic Manager

Traffic Manager provides global routing with priority to North Europe.

39
Q

What must you do first to associate an ExpressRoute circuit with a Basic Azure Virtual WAN?

A

Upgrade the Virtual WAN

Basic Virtual WAN doesn’t support ExpressRoute.

40
Q

To improve Azure SQL Database performance with minimal effort, what should you use?

A

Automatic Tuning

Automatic Tuning optimizes performance automatically.

41
Q

To store Azure AD sign-in event data for monitoring and alerts, what should you use?

A

Azure Log Analytics Workspace

Log Analytics stores sign-in logs for querying and alerting.

42
Q

Which two methods can track costs by department in an Azure subscription?

A

Resource Groups per department and Resource Tags

Resource groups or tags per department allow cost filtering.

43
Q

For a storage account with immutable data, low latency, and max resiliency, what replication should you choose?

A

Geo-redundant storage

GRS maximizes resiliency across regions.

44
Q

What storage account type offers low latency and immutable data support?

A

Azure BlockBlob Storage account

Premium BlockBlob offers low latency and supports immutable policies.

45
Q

To block legacy authentication in Azure AD Free edition, what should you use?

A

Azure AD Security Defaults

Security Defaults block legacy auth without cost.

46
Q

To prevent Azure AD account lockouts from brute force attacks, what should you use?

A

Azure AD Smart Lockout

Smart Lockout prevents lockouts from brute force attempts.

47
Q

For a 2 TB data store with multi-region reads/writes and consistency options, what should you recommend?

A

Azure Cosmos DB

Cosmos DB supports large data and multi-region access.

48
Q

For storing 5-year database backups with minimal cost, where should you store them?

A

Azure General Purpose V2 Storage – Archive Access tier

Archive tier in GPv2 minimizes cost for rarely accessed backups.

49
Q

What routing method ensures users hit a North Europe web app with failover?

A

Priority routing method

Priority routing in Traffic Manager directs users to North Europe first.

50
Q

Can you direct Azure SQL Database audit logs to a BlockBlobStorage account (appstore3000) in the same region?

A

Yes

BlockBlobStorage supports audit log storage when in the same region as the SQL database.

az-305 (14 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions