New 2026 Realistic AZ-305 Dumps Test Engine Exam Questions in here [Q60-Q81]

New 2026 Realistic AZ-305 Dumps Test Engine Exam Questions in here

Updated Official licence for AZ-305 Certified by AZ-305 Dumps PDF

The Microsoft AZ-305 exam covers a wide range of topics related to Azure infrastructure solutions, including designing compute solutions, designing storage solutions, designing networking solutions, and designing security solutions. Candidates will also be tested on their ability to manage and monitor Azure resources, as well as their knowledge of Azure tools and services.

NEW QUESTION # 60
You have an on-premises network that uses on IP address space of 172.16.0.0/16 You plan to deploy 25 virtual machines to a new azure subscription.
You identity the following technical requirements.
All Azure virtual machines must be placed on the same subnet subnet1.
All the Azure virtual machines must be able to communicate with all on premises severs.
The servers must be able to communicate between the on-premises network and Azure by using a site to site VPN.
You need to recommend a subnet design that meets the technical requirements.
What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnet. Each network address may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Graphical user interface, application Description automatically generated

NEW QUESTION # 61
Your company has IT, security, and finance departments.
You need to implement a new Azure deployment that will include multiple Azure subscriptions and management groups. The solution must meet the following requirements:
* Ensure that all policies are assigned at the management group level.
* Ensure that all the finance department resources have specific encryption policies applied.
* Ensure that only users in the IT department can create virtual machines in any Azure region.
* Ensure that users in the finance department can create virtual machines in only the East US Azure region.
What is the minimum number of management groups you can create for the planned deployment?

A. 0
B. 1
C. 2
D. 3

Answer: B

NEW QUESTION # 62
You plan to migrate App1 to Azure.
You need to recommend a high-availability solution for App1. The solution must meet the resiliency requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/dedicated-hosts
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-autoscale-overview

NEW QUESTION # 63
Your company has an app named App1 that uses data from the on-premises Microsoft SQL Server databases shown in the following table.

App1 and the data are used on the first day of the month only. The data is not expected to grow more than 3% each year.
The company is rewriting App1 as an Azure web app and plans to migrate all the data to Azure.
You need to migrate the data to Azure SQL Database. The solution must minimize costs.
Which service tier should you use?

A. DTU-based Standard
B. DTU-based Basic
C. vCore-based General Purpose
D. vCore-based Business Critical

Answer: A

Explanation:
DTU-based Standard supports databases up to 1 TB in size.
Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/service-tiers-dtu

NEW QUESTION # 64
Hotspot Question
A company plans to implement an HTTP-based API to support a web app. The web app allows customers to check the status of their orders.
The API must meet the following requirements:
- Implement Azure Functions
- Provide public read-only operations
- Do not allow write operations
You need to recommend configuration options.
What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation:
Allowed authentication methods: GET only
Authorization level: Anonymous
The option is Allow Anonymous requests. This option turns on authentication and authorization in App Service, but defers authorization decisions to your application code. For authenticated requests, App Service also passes along authentication information in the HTTP headers.
This option provides more flexibility in handling anonymous requests.
Reference:
https://docs.microsoft.com/en-us/azure/app-service/overview-authentication-authorization

NEW QUESTION # 65
You have 100 Azure Storage accounts.
Access to the accounts is restricted by using Azure role-based access control (Azure RBAC) assignments.
You need to recommend a solution that uses role assignment conditions based on the tags assigned to individual resources within the storage accounts.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

Explanation:

NEW QUESTION # 66
Your company has an app named App1 that uses data from the on-premises Microsoft SQL Server databases shown in the following table.

App1 and the data are used on the first day of the month only. The data is not expected to grow more than 3% each year.
The company is rewriting App1 as an Azure web app and plans to migrate all the data to Azure.
You need to migrate the data to Azure SQL Database. The solution must minimize costs.
Which service tier should you use?

A. DTU-based Standard
B. DTU-based Basic
C. vCore-based General Purpose
D. vCore-based Business Critical

Answer: A

Explanation:
Explanation
DTU-based Standard supports databases up to 1 TB in size.
Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/service-tiers-dtu

NEW QUESTION # 67
You have an Azure Load Balancer named LB1 that balances requests to five Azure virtual machines.
You need to develop a monitoring solution for LB1. The solution must generate an alert when any of the following conditions are met:
A virtual machine is unavailable.
Connection attempts exceed 50,000 per minute.
Which signal should you include in the solution for each condition? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-standard-diagnostics

NEW QUESTION # 68
You have a resource group named RG1 that contains the objects shown in the following table.

You need to configure permissions so that App1 can copy all the secrets from KV1 to KV2. App1 currently has the Get permission for the secrets in KV1.
Which additional permissions should you assign to App1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Graphical user interface, text, application Description automatically generated

Box 1: List
Get: Gets the specified Azure key vault.
List: The List operation gets information about the vaults associated with the subscription.
Box 2: Create
Create Or Update: Create or update a key vault in the specified subscription.
Reference:
https://docs.microsoft.com/en-us/rest/api/keyvault/

NEW QUESTION # 69
You are designing an app that will use Azure Cosmos DB to collate sales data from multiple countries. You need to recommend an API for the app. The solution must meet the following requirements:
* Support SQL queries.
* Support geo-replication.
* Store and access data relationally.
Which API should you recommend?

A. PostgreSQL
B. NoSQL
C. Apache Cassandra
D. MongoDB

Answer: A

NEW QUESTION # 70
You deploy several Azure SQL Database instances.
You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation:

In the exhibit, the SQLInsights data is configured to be stored in Azure Log Analytics for 90 days. However, the question is asking for the "maximum" amount of time that the data can be stored which is 730 days.

NEW QUESTION # 71
You have an Azure subscription that contains resources in three Azure regions.
You need to implement Azure Key Vault to meet the following requirements:
- In the event of a regional outage, all keys must be readable.
- All the resources in the subscription must be able to access Key
Vault.
- The number of Key Vault resources to be deployed and managed must be
minimized.
How many instances of Key Vault should you implement?

A. 0
B. 1
C. 2
D. 3

Answer: B

Explanation:
The contents of your key vault are replicated within the region and to a secondary region at least
150 miles away but within the same geography. This maintains high durability of your keys and secrets. See the Azure paired regions document for details on specific region pairs.
Example: Secrets that must be shared by your application in both Europe West and Europe North. Minimize these as much as you can. Put these in a key vault in either of the two regions.
Use the same URI from both regions. Microsoft will fail over the Key Vault service internally.
Reference:
https://docs.microsoft.com/en-us/azure/key-vault/general/disaster-recovery-guidance

NEW QUESTION # 72
You plan to deploy Azure Databricks to support a machine learning application. Data engineers will mount an Azure Data Lake Storage account to the Databricks file system. Permissions to folders are granted directly to the data engineers.
You need to recommend a design for the planned Databrick deployment. The solution must meet the following requirements:
* Ensure that the data engineers can only access folders to which they have permissions.
* Minimize development effort.
* Minimize costs.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Box 1: Standard
Choose Standard to minimize costs.
Box 2: Credential passthrough
Athenticate automatically to Azure Data Lake Storage Gen1 (ADLS Gen1) and Azure Data Lake Storage Gen2 (ADLS Gen2) from Azure Databricks clusters using the same Azure Active Directory (Azure AD) identity that you use to log into Azure Databricks. When you enable Azure Data Lake Storage credential passthrough for your cluster, commands that you run on that cluster can read and write data in Azure Data Lake Storage without requiring you to configure service principal credentials for access to storage.
Reference:
https://docs.microsoft.com/en-us/azure/databricks/security/credential-passthrough/adls-passthrough

NEW QUESTION # 73
You have a Microsoft Entra tenant that uses Microsoft Entra Connect Sync to sync with an on-premises Active Directory Domain Services {AD DS) domain. The domain contains several member servers.
You have a custom human resources (HR) application named App1 that stores employee records.
You are designing a solution to automate the management of user accounts. The solution must meet the following requirements:
* When employees are added to App1, the user accounts of the employees must be provisioned to the AD DS domain and the Microsoft Entra tenant automatically.
* New employee records must be read from a CSV file that is exported from App1 daily.
You need to recommend a Microsoft Entra Identity Governance provisioning method and a target endpoint for creating new user accounts.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each connect selection is worth one point.

Answer:

Explanation:

Explanation:

NEW QUESTION # 74
You are planning an Azure solution that will host production databases for a high-performance application.
The solution will include the following components:
Two virtual machines that will run Microsoft SQL Server 2016, will be deployed to different data centers in the same Azure region, and will be part of an Always On availability group.
SQL Server data that will be backed up by using the Automated Backup feature of the SQL Server IaaS Agent Extension (SQLIaaSExtension) You identify the storage priorities for various data types as shown in the following table.

Which storage type should you recommend for each data type? To answer, drag the appropriate storage types to the correct data types. Each storage type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation:

NEW QUESTION # 75
Hotspot Question
You have an Azure subscription. The subscription contains 100 virtual machines that run Windows Server 2022 and have the Azure Monitor Agent installed.
You need to recommend a solution that meets the following requirements:
- Forwards JSON-formatted logs from the virtual machines to a Log
Analytics workspace
- Transforms the logs and stores the data in a table in the Log
Analytics workspace
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation:
To forward the logs: Use the Azure Monitor Agent. The Azure Monitor Agent can collect different types of data into a Log Analytics workspace, including JSON-formatted logs from your virtual machines.
To transform the logs and store the data: Use Kusto Query Language (KQL). Once the data is in the Log Analytics workspace, you can write KQL queries to transform the logs and store the data in a table in the workspace. KQL is a read-only request to process data and return results.

NEW QUESTION # 76
You have an on-premises application that consumes data from multiple databases. The application code references database tables by using a combination of the server, database, and table name.
You need to migrate the application data to Azure.
To which two services can you migrate the application data to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. Azure SQL Managed Instance
B. Azure SQL Database
C. SQL Server Stretch Database
D. SQL Server on an Azure virtual machine

Answer: A,D

Explanation:
Cross-database queries are supported by SQL Server, for example on an Azure virtual machine, and also supported by an Azure SQL Managed Instance.
https://docs.microsoft.com/en-us/azure/azure-sql/database/elastic-query-getting-started- vertical?view=azuresql

NEW QUESTION # 77
You have a mobile app that is deployed to 100,000 users. Each instance of the app collects usage data.
You have an Azure subscription.
You need to recommend a solution that meets the following requirements:
* Accepts the usage data from the app instances
* Calculates the average hourly CPU utilization of each app instance and writes the average to an Azure SQL database
* Minimizes costs and administrative effort
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation:

NEW QUESTION # 78
You configure OAuth2 authorization in API Management as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: Web applications
The Authorization Code Grant Type is used by both web apps and native apps to get an access token after a user authorizes an app.
Note: The Authorization Code grant type is used by confidential and public clients to exchange an authorization code for an access token.
After the user returns to the client via the redirect URL, the application will get the authorization code from the URL and use it to request an access token.
Reference:
https://developer.okta.com/blog/2018/04/10/oauth-authorization-code-grant-type
https://connect2id.com/products/server/docs/guides/client-registration

NEW QUESTION # 79
You plan to migrate on-premises Microsoft SQL Server databases to Azure.
You need to recommend a deployment and resiliency solution that meets the following requirements:
Supports user-initiated backups
Supports multiple automatically replicated instances across Azure regions Minimizes administrative effort to implement and maintain business continuity What should you recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/active-geo-replication-overview

NEW QUESTION # 80
You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016 and Linux.
You need to use Azure Log Analytics design an alerting strategy for security-related events.
Which Log Analytics tables should you query? To answer, drag the appropriate tables to the correct log types. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.