AZ-305 Online Practice Questions and Answers

Correct Answer: DE

https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs https://docs.microsoft.com/en-us/answers/questions/31113/fastest-method-to-copy-500gb-table-from-on-premise.html

Correct Answer: D

Azure SQL Database elastic pools are a simple, cost-effective solution for managing and scaling multiple databases that have varying and unpredictable usage demands. The databases in an elastic pool are on a single server and share a set

number of resources at a set price. Elastic pools in Azure SQL Database enable SaaS developers to optimize the price performance for a group of databases within a prescribed budget while delivering performance elasticity for each

database.

Guaranteed 99.995 percent uptime for SQL Database

Reference:

https://docs.microsoft.com/en-us/azure/azure-sql/database/elastic-pool-overview

https://azure.microsoft.com/en-us/pricing/details/sql-database/elastic/

https://www.azure.cn/en-us/support/sla/virtual-machines/

https://techcommunity.microsoft.com/t5/azure-sql/optimize-price-performance-with-compute-auto-scaling-in-azure/ba-p/966149

Correct Answer: A

The Network Watcher Network performance monitor is a cloud-based hybrid network monitoring solution that helps you monitor network performance between various points in your network infrastructure. It also helps you monitor network

connectivity to service and application endpoints and monitor the performance of Azure ExpressRoute.

Note:

IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule

that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.

IP flow verify looks at the rules for all Network Security Groups (NSGs) applied to the network interface, such as a subnet or virtual machine NIC. Traffic flow is then verified based on the configured settings to or from that network interface. IP

flow verify is useful in confirming if a rule in a Network Security Group is blocking ingress or egress traffic to or from a virtual machine.

Reference:

https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview

https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview

Correct Answer: A

https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-overview

Correct Answer: C

Correct Answer: AE

https://learn.microsoft.com/en-us/azure/aks/concepts-scale#horizontal-pod-autoscaler

Kubernetes uses the horizontal pod autoscaler (HPA) to monitor the resource demand and automatically scale the number of replicas. By default, the horizontal pod autoscaler checks the Metrics API every 15 seconds for any required

changes in replica count, but the Metrics API retrieves data from the Kubelet every 60 seconds. Effectively, the HPA is updated every 60 seconds. When changes are required, the number of replicas is increased or decreased accordingly.

Horizontal pod autoscaler works with AKS clusters that have deployed the Metrics Server for Kubernetes 1.8+.

https://learn.microsoft.com/en-us/azure/aks/keda-about

Kubernetes Event-driven Autoscaling (KEDA) is a single-purpose and lightweight component that strives to make application autoscaling simple and is a CNCF Incubation project.

It applies event-driven autoscaling to scale your application to meet demand in a sustainable and cost-efficient manner with scale-to-zero.

Correct Answer: B

Use Azure Blobs if you want your application to support streaming and random access scenarios.

It's ideal for applications that require high transaction rates or consistent low-latency storage.

Incorrect:

Not A: Standard storage accounts has a default maximum request rate per storage account 20,000 requests per second1, but is not optimized for video and audio streams.

Not C: Page blobs is best suited for random reads and random writes.

Not D: FileStorage storage accounts (premium) has a maximum concurrent request rate of 100,000 IOPS.

Maximum file size is 4 TB, but is not optimized for video and audio streams.

Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction

https://docs.microsoft.com/en-us/azure/storage/files/storage-files-scale-targets

Correct Answer: C

Always On availability groups on Azure Virtual Machines are similar to Always On availability groups on-premises, and rely on the underlying Windows Server Failover Cluster.

If you deploy your SQL Server VMs to a single subnet, you can configure a virtual network name (VNN) and an Azure Load Balancer, or a distributed network name (DNN) to route traffic to your availability group listener.

There are some behavior differences between the functionality of the VNN listener and DNN listener that are important to note:

*

Failover time: Failover time is faster when using a DNN listener since there is no need to wait for the network load balancer to detect the failure event and change its routing.

*

Etc.

Incorrect:

Not B, not D: Migrate to an Always On availability group, not an Always on Failover cluster Instance.

Reference: https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/availability-group-overview

Correct Answer: A

Correct Answer: A

Scenario: Once App1 is migrated to Azure, you must ensure that new data can be written to the app, and the modification of new and existing data is prevented for a period of three years.

As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have.

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

Correct Answer:

Box 1: Standard

Choose Standard to minimize costs.

Box 2: Credential passthrough

Athenticate automatically to Azure Data Lake Storage Gen1 (ADLS Gen1) and Azure Data Lake Storage Gen2 (ADLS Gen2) from Azure Databricks clusters using the same Azure Active Directory (Azure AD) identity that you use to log into

Azure Databricks. When you enable Azure Data Lake Storage credential passthrough for your cluster, commands that you run on that cluster can read and write data in Azure Data Lake Storage without requiring you to configure service

principal credentials for access to storage.

Reference:

https://docs.microsoft.com/en-us/azure/databricks/security/credential-passthrough/adls-passthrough

Correct Answer:

References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sizes-hpc#h-series

Correct Answer:

Correct Answer:

Box 1: Business Critical service tier and Serverless computer tier.

Business Critical

OLTP applications with high transaction rate and low IO latency. Offers highest resilience to failures and fast failovers using multiple synchronously updated replicas.

Availability: 3 replicas, 1 Read Scale-out, zone-redundant HA, full local storage

Note: Azure SQL Database is based on SQL Server Database Engine architecture that is adjusted for the cloud environment to ensure high availability even in cases of infrastructure failures. There are three architectural models that are used

in Azure SQL Database:

General Purpose/Standard

Business Critical/Premium

Hyperscale

Incorrect:

*

General Purpose and Serverless computer tier Offers budget oriented balanced compute and storage options. No Read Scale-out.*

*

Hyperscale service tier and Provisioned compute tier Expensive.

Most business workloads. Autoscaling storage size up to 100 TB, fast vertical and horizontal compute scaling, fast database restore.

Box 2: Always Encrypted PII data needs to be tightly protected. In Azure, Most of the PaaS services already have a server-side encryption to protect data at rest like Transparent data encryption for Azure SQL Databases. For client side encryption, we can accomplish this natively with an encryption technology called Always encrypted for Azure SQL Database or any SQL Server datastore. There are several data tokenization solutions out in the marketplace which can tokenize this data as well but its only effective for small strings and integers. However, if your data contains large text columns which has PII information then these tokenization solutions are not so effective and can become a bottleneck. Example: Call center voice transcripts which may have sensitive information like a SSN or a Creditcard number etc. That's where Always encrypted can handle this effectively out of the box.

Reference: https://learn.microsoft.com/en-us/azure/azure-sql/database/service-tier-hyperscale https://medium.com/@raghavender7/protecting-sensitive-pii-data-in-azure-sql-databases-5c83bca473fc

Correct Answer:

Backend instance health: Health Probe Status Health Probe Status (DIP Availability): Standard Load Balancer uses a distributed health-probing service that monitors your application endpoint's health according to your configuration settings. This metric provides an aggregate or per-endpoint filtered view of each instance endpoint in the load balancer pool. You can see how Load Balancer views the health of your application, as indicated by your health probe configuration.

Outbound port exhaustion: SNAT connection Count SNAT connections: Standard Load Balancer reports the number of outbound flows that are masqueraded to the Public IP address front end. Source network address translation (SNAT) ports are an exhaustible resource. This metric can give an indication of how heavily your application is relying on SNAT for outbound originated flows. Counters for successful and failed outbound SNAT flows are reported and can be used to troubleshoot and understand the health of your outbound flows.

Reference: https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-standard-diagnostics