Sign in

Free AZ-305 sample questions

Real questions from the Designing Microsoft Azure Infrastructure Solutions practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 10 of 20 free sample questions.

Question 1Choose one

An organization has deployed a critical application on a set of Azure Virtual Machines. The security team wants to ensure that administrative access (RDP and SSH) to these VMs is only possible from a secure, managed jump box and not directly from the internet. They also want to audit all administrative sessions. The solution should avoid exposing any public IP addresses on the VMs themselves. Which Azure service should be recommended to meet these requirements?

Question 2Choose one

A company has a hybrid cloud environment with resources both on-premises and in Azure. The governance team needs to enforce a consistent set of policies, such as requiring specific tags on resources and restricting deployments to certain regions, across both Azure and their on-premises servers. They want a single control plane to manage and audit compliance for all resources, regardless of their location. What Azure service should be the cornerstone of this governance design?

Question 3Choose one

You are designing a disaster recovery strategy for a stateful application running in Azure Kubernetes Service (AKS). The application uses Azure Disks for persistent storage via Persistent Volumes (PVs). The business requires a Recovery Point Objective (RPO) of 4 hours and a Recovery Time Objective (RTO) of 8 hours. The disaster recovery site will be in a paired Azure region. You need to recommend a solution for backing up and restoring the application's state, including its Kubernetes objects and persistent data. Which solution should you recommend?

Question 4Choose one

A development team is building a new serverless application using Azure Functions. The application needs to store connection strings, API keys, and other secrets securely. The team wants to follow the principle of least privilege and avoid storing secrets in application settings or source code. The Azure Functions must be able to retrieve these secrets at runtime automatically using their identity. What is the most secure and recommended approach for managing these secrets?

Question 5Choose one

An enterprise is planning to deploy a large number of applications in Azure, organized into multiple subscriptions for different business units. The CIO wants to ensure that all deployed resources comply with corporate standards from the moment they are created. The standards include a mandatory cost center tag, deployment only in specific Azure regions, and the automatic deployment of the Log Analytics agent on all VMs. The solution must be repeatable and version-controlled. Which Azure service is best suited for defining and assigning this comprehensive package of governance artifacts?

Question 6Choose one

You are designing the storage for a new cloud-native application that will process large volumes of unstructured data, including images and videos. The application requires a hierarchical namespace to manage files in a directory-like structure for big data analytics workloads (e.g., Spark, Databricks). It also needs to be cost-effective and support fine-grained, POSIX-like access control lists (ACLs). Which Azure Storage solution should you recommend?

Question 7Choose one

A company is designing a global web application with users in North America, Europe, and Asia. The application consists of a web front-end and a set of backend APIs. The company has the following requirements: - Provide a single, global endpoint for users (e.g., www.contoso.com). - Route users to the closest Azure region hosting the application to minimize latency. - Implement a Web Application Firewall (WAF) to protect against common web vulnerabilities. - Terminate SSL at the edge and manage certificates centrally. Which Azure service should be used to meet all these requirements?

Question 8Choose one

A company has an Azure SQL Database with a service level objective of General Purpose, Gen5, 8 vCores. The database supports a critical business application. The company's business continuity plan requires a Recovery Point Objective (RPO) of less than 5 seconds and a Recovery Time Objective (RTO) of less than 30 seconds for regional outages. The plan also requires that the failover process be manageable through a single endpoint for both the primary and secondary databases. Which feature should you configure to meet these requirements?

Question 9Choose one

A company is deploying a multi-tier application to Azure. The architecture consists of web servers, application servers, and a database. The security team wants to segment the network and control traffic flow between the tiers. They have the following rules: - Web servers should only be able to communicate with application servers on port 443. - Application servers should only be able to communicate with the database server on port 1433. - The database server should not be able to initiate connections to the web or application servers. You want to implement these rules using the simplest possible mechanism. Which combination of Azure networking components should you use?

Question 10Choose 2

You are designing a solution to collect and analyze logs from hundreds of Azure resources, including VMs, App Services, and Storage Accounts. The solution must meet the following requirements: - Provide a centralized repository for all logs. - Enable complex log queries using a rich query language. - Create alerts based on log data patterns. - Retain logs for 90 days for active analysis and up to 2 years for compliance. Which two Azure services should you design the solution around? Each correct answer presents part of the solution.

10 more free samples are waiting

Create a free account to unlock the whole AZ-305 sample bank, or get full access to all 205 practice questions in the simulator.

Create account