Question 1

- (Exam Topic 1)
You plan to migrate App1 to Azure. The solution must meet the authentication and authorization requirements. Which type of endpoint should App1 use to obtain
an access token?

Accepted Answer

Scenario: To access the resources in Azure, App1 must use the managed identity of the virtual machines that will host the app.
Managed identities provide an identity for applications to use when connecting to resources that support Azure Active Directory (Azure AD) authentication.
Applications may use the managed identity to obtain Azure AD tokens.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

Question 2

- (Exam Topic 1)
You migrate App1 to Azure. You need to ensure that the data storage for App1 meets the security and compliance requirement
What should you do?

Accepted Answer

Scenario: Once App1 is migrated to Azure, you must ensure that new data can be written to the app, and the modification of new and existing data is prevented for
a period of three years.
As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying
critical resources. The lock overrides any permissions the user might have.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

Question 3

- (Exam Topic 1)
You plan to migrate App1 to Azure.
You need to estimate the compute costs for App1 in Azure. The solution must meet the security and compliance requirements.
What should you use to estimate the costs, and what should you implement to minimize the costs? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Accepted Answer

Text Description automatically generated
Box 1: The Azure Total Cost of Ownership (TCO) Calculator
The Total Cost of Ownership (TCO) Calculator estimates the cost savings you can realize by migrating your workloads to Azure.
Note: The TCO Calculator recommends a set of equivalent services in Azure that will support your applications. Our analysis will show each cost area with an
estimate of your on-premises spend versus your spend in Azure. There are several cost categories that either decrease or go away completely when you move
workloads to the cloud.
Box 2: Azure Hybrid Benefit
Azure Hybrid Benefit is a licensing benefit that helps you to significantly reduce the costs of running your workloads in the cloud. It works by letting you use your onpremises Software Assurance-enabled Windows Server and SQL Server licenses on Azure. And now, this benefit applies to RedHat and SUSE Linux
subscriptions, too.
Scenario:

100% Valid and Newest Version AZ-305 Questions & Answers shared by Certleader
/AZ-305-dumps.html (249 Q&As)
Litware identifies the following security and compliance requirements:
 Once App1 is migrated to Azure, you must ensure that new data can be written to the app, and the modification of new and existing data is prevented for a
period of three years.
 On-premises users and services must be able to access the Azure Storage account that will host the data in App1.
 Access to the public endpoint of the Azure Storage account that will host the App1 data must be prevented.
 All Azure SQL databases in the production environment must have Transparent Data Encryption (TDE) enabled.
 App1 must not share physical hardware with other workloads. Reference:
https://azure.microsoft.com/en-us/pricing/tco/ https://azure.microsoft.com/en-us/pricing/hybrid-benefit/

Question 4

- (Exam Topic 2)
You need to recommend a strategy for the web tier of WebApp1. The solution must minimize What should you recommend?

Accepted Answer

Correct answer: A

Question 5

- (Exam Topic 2)
You need to recommend a data storage strategy for WebApp1. What should you include in in the recommendation?

Accepted Answer

Correct answer: B

Question 6

- (Exam Topic 2)
You design a solution for the web tier of WebApp1 as shown in the exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Accepted Answer

Box 1: Yes
Any new deployments to Azure must be redundant in case an Azure region fails.
Traffic Manager uses DNS to direct client requests to the most appropriate service endpoint based on a
traffic-routing method and the health of the endpoints. An endpoint is any Internet-facing service hosted inside or outside of Azure. Traffic Manager provides a
range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to
failure, including the failure of an entire Azure region.
Box 2: Yes
Recent changes in Azure brought some significant changes in autoscaling options for Azure Web Apps (i.e. Azure App Service to be precise as scaling happens
on App Service plan level and has effect on all Web Apps running in that App Service plan).
Box 3: No
Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models.
Traffic Manager is resilient to failure, including the failure of an entire Azure region.
Reference:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview https://blogs.msdn.microsoft.com/hsirtl/2017/07/03/autoscaling-azure-web-apps/

Question 7

- (Exam Topic 3)
You need to recommend a solution that meets the data requirements for App1.
What should you recommend deploying to each availability zone that contains an instance of App1?

Accepted Answer

Correct answer: A

Question 8

- (Exam Topic 3)
You need to recommend a solution to ensure that App1 can access the third-party credentials and access strings. The solution must meet the security
requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Accepted Answer

Graphical user interface, text, application, table Description automatically generated
Scenario: Security Requirement
All secrets used by Azure services must be stored in Azure Key Vault.
Services that require credentials must have the credentials tied to the service instance. The credentials must NOT be shared between services.
Box 1: A service principal
A service principal is a type of security principal that identifies an application or service, which is to say, a piece of code rather than a user or group. A service
principal's object ID is known as its client ID and acts like its username. The service principal's client secret acts like its password.
Note: Authentication with Key Vault works in conjunction with Azure Active Directory (Azure AD), which is responsible for authenticating the identity of any given
security principal.
A security principal is an object that represents a user, group, service, or application that's requesting access to Azure resources. Azure assigns a unique object ID
to every security principal.
Box 2: A role assignment
You can provide access to Key Vault keys, certificates, and secrets with an Azure role-based access control.
Reference:
https://docs.microsoft.com/en-us/azure/key-vault/general/authentication

Question 9

- (Exam Topic 3)
What should you recommend lo meet the monitoring requirements for App2?

100% Valid and Newest Version AZ-305 Questions & Answers shared by Certleader
/AZ-305-dumps.html (249 Q&As)

Accepted Answer

Correct answer: A

Question 10

- (Exam Topic 3)
You need to recommend an App Service architecture that meets the requirements for Appl. The solution must minimize costs.
What should few recommend?

Accepted Answer

Correct answer: D