Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

az-305 > test9 > Flashcards

test9 Flashcards

1
Q

What solution would you recommend for pre-authentication with Entra ID accounts for an ASP.Net application on Azure VM?

A

An Entra ID enterprise application

An Entra ID enterprise application integrates seamlessly with Entra ID and ensures authentication before accessing the application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which Azure service ensures IT administrators receive alerts for critical conditions in a .Net Core application?

A

Azure Monitor

Azure Monitor collects and analyzes telemetry data, allowing proactive alerts based on metrics, logs, and events.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What would you suggest for the Procurement department’s unique identity management needs with Premium P2 licenses?

A

Privileged Identity Management (PIM)

PIM manages and monitors privileged access, enforcing strict controls and least privilege principles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which Azure service correlates Azure resource usage with application performance data for a .Net Core app?

A

Azure Log Analytics

Azure Log Analytics collects and analyzes data from various sources, correlating resource usage with application performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What services should be used to enforce least privilege and just-in-time access?

A

PIM and Access Reviews

PIM enforces just-in-time access, while Access Reviews validate high-level permissions periodically.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What solution minimizes administrative effort for setting up a root management group and role assignments in Azure?

A

Azure Bicep

Azure Bicep is a declarative language that simplifies deploying Azure resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which Azure Cosmos DB API accommodates JSON documents?

A

SQL or MongoDB

Both APIs handle JSON documents with native storage and querying capabilities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which Azure data store supports JSON items, SQL-like queries, and low latency access?

A

Azure CosmosDB

Azure CosmosDB supports JSON storage and SQL-like queries with low-latency access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which Azure SQL DB model allows independent compute/storage selection?

A

vCore Mode

The vCore model offers independent compute/storage selection and supports hybrid benefits.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What parameters ensure an Azure SQL Managed Instance handles workload demands?

A

Define maximum CPU cores and allocated storage

Setting max CPU cores and storage ensures adequate processing and storage capacity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Where is a Sample.txt file stored in an Azure storage account by default?

A

The lowest storage cost

Storing at the lowest cost tier is the most cost-effective default option.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How can you mask the ‘Credit Card rating’ column in an Azure SQL database?

A

Dynamic Data Masking

Dynamic Data Masking shows sensitive data only to authorized users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What solution automates monthly transfer of web access logs from Azure Blob storage to an Azure SQL database?

A

Azure Data Factory

Azure Data Factory is designed for automating data movement and transformation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How do you protect VM3 and VM4 with Azure Recovery Services if VM1 and VM2 use a vault in East US?

A

Create a new Recovery Services vault

A new vault is needed in the same region as VM3 and VM4.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Can Store3 be converted to a GRS account in Azure?

A

Yes

Store3 can be converted to GRS for data replication to a secondary region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which Azure storage feature recovers accidentally deleted BLOB data up to 14 days?

A

Soft Delete

Soft Delete allows recovery of deleted BLOB data within a specified timeframe.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

During planned maintenance of an Availability Set with 10 VMs, what’s the least number of VMs available?

A

6

At least 6 VMs remain available during maintenance due to Update Domain distribution.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Does registering Windows Admin Center and configuring Azure Backup prevent data loss for an on-premises file server?

A

Yes

Azure Backup with Windows Admin Center ensures regular backups to Azure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which components are needed in an Azure Logic App to notify an admin of VM setting changes?

A

Condition control, Action, Azure Event Grid trigger

These components work together to detect changes and notify the admin.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What’s the first step to peer a virtual network (10.1.0.0/16) with another (10.2.0.0/16)?

A

Modify the address space

Modifying the address space avoids IP overlap, a prerequisite for peering.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How do you restrict VM traffic to only Azure Front Door using load balancing?

A

Network Security Groups with service tags

NSGs with service tags effectively restrict traffic to Azure Front Door.

22
Q

Which Azure service load-balances at Layer 7 and protects against SQL injection?

A

Azure Application Gateway with WAF

Application Gateway with WAF offers Layer 7 load balancing and SQL injection protection.

23
Q

What protects an Azure API Management instance from DDoS attacks?

A

Rate Limiting

Rate Limiting restricts request rates to prevent DDoS attacks.

24
Q

What storage solution replicates container images across multiple AKS clusters?

A

Azure Container Registry (Premium SKU)

The Premium SKU’s geo-replication automatically syncs images across regions.

25
How do you prevent the 'GetCloudSkillsAdmin' group from assigning external IPs to VMs?
Azure Policy ## Footnote Azure Policy enforces rules to block external IP assignments.
26
Where can you restore a Key Vault backup from East US?
To a key vault in the same geography ## Footnote Key Vault backups must be restored within the same Azure geography.
27
Which Azure Cosmos DB API manages graph-oriented data?
Gremlin ## Footnote The Gremlin API is specifically designed for graph data management.
28
For PTA (Pass-Through Authentication), what is true about AD and Entra ID synchronization?
AD security and password policies can be enforced ## Footnote PTA forwards authentication to on-premises AD without syncing both ways.
29
How many rules and action groups are needed in Azure Monitor to email an admin for VM operations?
Three rules, one action group ## Footnote Three rules monitor each operation, while one action group handles email notifications.
30
Which service provides a monthly report of all resources in an Azure subscription?
Azure Activity Log ## Footnote The Activity Log tracks all subscription activities for reporting.
31
Which synchronization methods allow password-less access to corporate machines via AD and Entra ID?
PHS and PTA ## Footnote PHS syncs password hashes, while PTA passes authentication requests to AD.
32
What ensures an Azure Web App authenticates via Entra ID to access Key Vault keys?
Managed Identities ## Footnote Managed Identities provide an Entra ID-based identity for secure access.
33
Which service lets the testing team view app components and calls for a .Net Core app on Azure Web Apps?
Application Insights ## Footnote Application Insights monitors and visualizes app components and dependencies.
34
Which service stores JSON documents with a globally distributed scalable architecture?
Azure Cosmos DB ## Footnote Cosmos DB is designed for JSON documents with global distribution and scalability.
35
What enhances endpoint threat detection for a company with 10,000 users?
Entra ID Protection ## Footnote Entra ID Protection offers advanced threat detection and remediation.
36
Which service hosts a data warehouse for nightly SQL Server data migration?
Azure Synapse Analytics ## Footnote Synapse Analytics integrates with Spark for analytics and hosts data warehouses.
37
Does Azure SQL Managed Instance support server-side transactions across two databases?
Yes ## Footnote Managed Instance supports distributed transactions across databases.
38
For SQL database migration, which Azure service is recommended?
vCore-based Azure SQL Database ## Footnote vCore offers flexibility and minimal downtime for migration.
39
How do you mask credit card numbers for IT help desk operators in an Azure SQL database?
Dynamic Data Masking ## Footnote Dynamic Data Masking shows only the last four digits to operators.
40
What provides time-limited access to blobs for the finance department in March?
Shared Access Signatures (SAS) ## Footnote SAS grants temporary access with an expiration date.
41
Which service ensures high availability for SQL databases on VMs?
Always On availability groups ## Footnote Always On provides automatic failover for high availability.
42
What’s true about configuring a failover group for SQL databases?
Secondary server in a different region; potential 5-second data loss ## Footnote Different regions enhance disaster recovery capabilities.
43
Does an Azure Recovery Services vault with Backup agent prevent data loss for a Windows Server 2019 file server?
Yes ## Footnote The vault and agent ensure regular backups to Azure.
44
Does Windows Server Backup with a Recovery Services vault suffice to prevent data loss for a file server?
No ## Footnote Additional Azure backups or HA solutions are needed for comprehensive protection.
45
What configures daily VM backups at 03:00 UTC with 90-day retention in Azure?
Backup Policy ## Footnote Backup Policy sets the schedule and retention for backups.
46
How do you restrict Azure SQL DB admin access to specific static IP workstations?
Server Level IP Firewall rules ## Footnote Firewall rules restrict access to specific IPs effectively.
47
Does using a storage account and Data Migration Assistant migrate Hyper-V VMs to Azure with disks replicated?
No ## Footnote Azure Migrate is needed for replicating VM disks to Azure.
48
What subnet address space supports 20 VMs communicating with an on-premise 186.16.0.0/16 network?
192.168.0.0/24 ## Footnote This address space avoids overlap and supports VPN connectivity.
49
Which managed service migrates an on-premise MongoDB database to Azure with minimal overhead?
CosmosDB ## Footnote CosmosDB is a managed service supporting MongoDB migration.
50
Which Azure service best provides the testing team with visibility into application components for a .Net Core app?
Application Insights ## Footnote Application Insights enables real-time monitoring and diagnostics.

az-305 (14 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions