Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

az-305 > test9 > Flashcards

test9 Flashcards

1
Q

What solution would you recommend for pre-authentication with Entra ID accounts for an ASP.Net application on Azure VM?

A

An Entra ID enterprise application

An Entra ID enterprise application integrates seamlessly with Entra ID and ensures authentication before accessing the application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which Azure service ensures IT administrators receive alerts for critical conditions in a .Net Core application?

A

Azure Monitor

Azure Monitor collects and analyzes telemetry data, allowing proactive alerts based on metrics, logs, and events.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What would you suggest for the Procurement department’s unique identity management needs with Premium P2 licenses?

A

Privileged Identity Management (PIM)

PIM manages and monitors privileged access, enforcing strict controls and least privilege principles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which Azure service correlates Azure resource usage with application performance data for a .Net Core app?

A

Azure Log Analytics

Azure Log Analytics collects and analyzes data from various sources, correlating resource usage with application performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What services should be used to enforce least privilege and just-in-time access?

A

PIM and Access Reviews

PIM enforces just-in-time access, while Access Reviews validate high-level permissions periodically.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What solution minimizes administrative effort for setting up a root management group and role assignments in Azure?

A

Azure Bicep

Azure Bicep is a declarative language that simplifies deploying Azure resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which Azure Cosmos DB API accommodates JSON documents?

A

SQL or MongoDB

Both APIs handle JSON documents with native storage and querying capabilities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which Azure data store supports JSON items, SQL-like queries, and low latency access?

A

Azure CosmosDB

Azure CosmosDB supports JSON storage and SQL-like queries with low-latency access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which Azure SQL DB model allows independent compute/storage selection?

A

vCore Mode

The vCore model offers independent compute/storage selection and supports hybrid benefits.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What parameters ensure an Azure SQL Managed Instance handles workload demands?

A

Define maximum CPU cores and allocated storage

Setting max CPU cores and storage ensures adequate processing and storage capacity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Where is a Sample.txt file stored in an Azure storage account by default?

A

The lowest storage cost

Storing at the lowest cost tier is the most cost-effective default option.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How can you mask the ‘Credit Card rating’ column in an Azure SQL database?

A

Dynamic Data Masking

Dynamic Data Masking shows sensitive data only to authorized users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What solution automates monthly transfer of web access logs from Azure Blob storage to an Azure SQL database?

A

Azure Data Factory

Azure Data Factory is designed for automating data movement and transformation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How do you protect VM3 and VM4 with Azure Recovery Services if VM1 and VM2 use a vault in East US?

A

Create a new Recovery Services vault

A new vault is needed in the same region as VM3 and VM4.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Can Store3 be converted to a GRS account in Azure?

A

Yes

Store3 can be converted to GRS for data replication to a secondary region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which Azure storage feature recovers accidentally deleted BLOB data up to 14 days?

A

Soft Delete

Soft Delete allows recovery of deleted BLOB data within a specified timeframe.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

During planned maintenance of an Availability Set with 10 VMs, what’s the least number of VMs available?

A

6

At least 6 VMs remain available during maintenance due to Update Domain distribution.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Does registering Windows Admin Center and configuring Azure Backup prevent data loss for an on-premises file server?

A

Yes

Azure Backup with Windows Admin Center ensures regular backups to Azure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which components are needed in an Azure Logic App to notify an admin of VM setting changes?

A

Condition control, Action, Azure Event Grid trigger

These components work together to detect changes and notify the admin.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What’s the first step to peer a virtual network (10.1.0.0/16) with another (10.2.0.0/16)?

A

Modify the address space

Modifying the address space avoids IP overlap, a prerequisite for peering.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How do you restrict VM traffic to only Azure Front Door using load balancing?

A

Network Security Groups with service tags

NSGs with service tags effectively restrict traffic to Azure Front Door.

22
Q

Which Azure service load-balances at Layer 7 and protects against SQL injection?

A

Azure Application Gateway with WAF

Application Gateway with WAF offers Layer 7 load balancing and SQL injection protection.

23
Q

What protects an Azure API Management instance from DDoS attacks?

A

Rate Limiting

Rate Limiting restricts request rates to prevent DDoS attacks.

24
Q

What storage solution replicates container images across multiple AKS clusters?

A

Azure Container Registry (Premium SKU)

The Premium SKU’s geo-replication automatically syncs images across regions.

25
Q

How do you prevent the ‘GetCloudSkillsAdmin’ group from assigning external IPs to VMs?

A

Azure Policy

Azure Policy enforces rules to block external IP assignments.

26
Q

Where can you restore a Key Vault backup from East US?

A

To a key vault in the same geography

Key Vault backups must be restored within the same Azure geography.

27
Q

Which Azure Cosmos DB API manages graph-oriented data?

A

Gremlin

The Gremlin API is specifically designed for graph data management.

28
Q

For PTA (Pass-Through Authentication), what is true about AD and Entra ID synchronization?

A

AD security and password policies can be enforced

PTA forwards authentication to on-premises AD without syncing both ways.

29
Q

How many rules and action groups are needed in Azure Monitor to email an admin for VM operations?

A

Three rules, one action group

Three rules monitor each operation, while one action group handles email notifications.

30
Q

Which service provides a monthly report of all resources in an Azure subscription?

A

Azure Activity Log

The Activity Log tracks all subscription activities for reporting.

31
Q

Which synchronization methods allow password-less access to corporate machines via AD and Entra ID?

A

PHS and PTA

PHS syncs password hashes, while PTA passes authentication requests to AD.

32
Q

What ensures an Azure Web App authenticates via Entra ID to access Key Vault keys?

A

Managed Identities

Managed Identities provide an Entra ID-based identity for secure access.

33
Q

Which service lets the testing team view app components and calls for a .Net Core app on Azure Web Apps?

A

Application Insights

Application Insights monitors and visualizes app components and dependencies.

34
Q

Which service stores JSON documents with a globally distributed scalable architecture?

A

Azure Cosmos DB

Cosmos DB is designed for JSON documents with global distribution and scalability.

35
Q

What enhances endpoint threat detection for a company with 10,000 users?

A

Entra ID Protection

Entra ID Protection offers advanced threat detection and remediation.

36
Q

Which service hosts a data warehouse for nightly SQL Server data migration?

A

Azure Synapse Analytics

Synapse Analytics integrates with Spark for analytics and hosts data warehouses.

37
Q

Does Azure SQL Managed Instance support server-side transactions across two databases?

A

Yes

Managed Instance supports distributed transactions across databases.

38
Q

For SQL database migration, which Azure service is recommended?

A

vCore-based Azure SQL Database

vCore offers flexibility and minimal downtime for migration.

39
Q

How do you mask credit card numbers for IT help desk operators in an Azure SQL database?

A

Dynamic Data Masking

Dynamic Data Masking shows only the last four digits to operators.

40
Q

What provides time-limited access to blobs for the finance department in March?

A

Shared Access Signatures (SAS)

SAS grants temporary access with an expiration date.

41
Q

Which service ensures high availability for SQL databases on VMs?

A

Always On availability groups

Always On provides automatic failover for high availability.

42
Q

What’s true about configuring a failover group for SQL databases?

A

Secondary server in a different region; potential 5-second data loss

Different regions enhance disaster recovery capabilities.

43
Q

Does an Azure Recovery Services vault with Backup agent prevent data loss for a Windows Server 2019 file server?

A

Yes

The vault and agent ensure regular backups to Azure.

44
Q

Does Windows Server Backup with a Recovery Services vault suffice to prevent data loss for a file server?

A

No

Additional Azure backups or HA solutions are needed for comprehensive protection.

45
Q

What configures daily VM backups at 03:00 UTC with 90-day retention in Azure?

A

Backup Policy

Backup Policy sets the schedule and retention for backups.

46
Q

How do you restrict Azure SQL DB admin access to specific static IP workstations?

A

Server Level IP Firewall rules

Firewall rules restrict access to specific IPs effectively.

47
Q

Does using a storage account and Data Migration Assistant migrate Hyper-V VMs to Azure with disks replicated?

A

No

Azure Migrate is needed for replicating VM disks to Azure.

48
Q

What subnet address space supports 20 VMs communicating with an on-premise 186.16.0.0/16 network?

A

192.168.0.0/24

This address space avoids overlap and supports VPN connectivity.

49
Q

Which managed service migrates an on-premise MongoDB database to Azure with minimal overhead?

A

CosmosDB

CosmosDB is a managed service supporting MongoDB migration.

50
Q

Which Azure service best provides the testing team with visibility into application components for a .Net Core app?

A

Application Insights

Application Insights enables real-time monitoring and diagnostics.

az-305 (14 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions