CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Microsoft
  5. AZ-305

Free AZ-305 Exam Braindumps (page: 12)

Page 12 of 67
PDF with 267 Questions

Your company has the divisions shown in the following table.



Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.

You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.

What should you recommend?

  1. Configure Azure AD join.
  2. Use Azure AD entitlement management to govern external users.
  3. Enable Azure AD pass-through authentication and update the sign-in endpoint.
  4. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).

Answer(s): B

Explanation:

Govern access for external users in Azure AD entitlement management
Azure AD entitlement management uses Azure AD business-to-business (B2B) to share access so you can collaborate with people outside your organization. With Azure AD B2B, external users authenticate to their home directory, but have a representation in your directory. The representation in your directory enables the user to be assigned access to your resources.

Note: Entitlement management is an identity governance capability that enables organizations to manage identity and access lifecycle at scale by automating access request workflows, access assignments, reviews, and expiration. Entitlement management allows delegated non-admins to create access packages that external users from other organizations can request access to. One and multi-stage approval workflows can be configured to evaluate requests, and provision users for time-limited access with recurring reviews. Entitlement management enables policy-based provisioning and deprovisioning of external accounts.

Note: Access Packages
An access package is the foundation of entitlement management. Access packages are groupings of policy-governed resources a user needs to collaborate on a project or do other tasks. For example, an access package might include:
access to specific SharePoint sites.
enterprise applications including your custom in-house and SaaS apps like Salesforce.
Microsoft Teams.
Microsoft 365 Groups.


Reference:

https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-external-users



Your company has the divisions shown in the following table.



Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.

You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.

What should you recommend?

  1. Configure Azure AD join.
  2. Configure Azure AD Identity Protection.
  3. Use Azure AD entitlement management to govern external users.
  4. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).

Answer(s): C

Explanation:

Govern access for external users in Azure AD entitlement management
Azure AD entitlement management uses Azure AD business-to-business (B2B) to share access so you can collaborate with people outside your organization. With Azure AD B2B, external users authenticate to their home directory, but have a representation in your directory. The representation in your directory enables the user to be assigned access to your resources.

Note: Entitlement management is an identity governance capability that enables organizations to manage identity and access lifecycle at scale by automating access request workflows, access assignments, reviews, and expiration. Entitlement management allows delegated non-admins to create access packages that external users from other organizations can request access to. One and multi-stage approval workflows can be configured to evaluate requests, and provision users for time-limited access with recurring reviews. Entitlement management enables policy-based provisioning and deprovisioning of external accounts.

Note: Access Packages
An access package is the foundation of entitlement management. Access packages are groupings of policy-governed resources a user needs to collaborate on a project or do other tasks. For example, an access package might include:
access to specific SharePoint sites.
enterprise applications including your custom in-house and SaaS apps like Salesforce.
Microsoft Teams.
Microsoft 365 Groups.


Reference:

https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-external-users



You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.

What should you include in the recommendation?

  1. Azure Activity Log
  2. Azure Arc
  3. Azure Analysis Services
  4. Azure Monitor metrics

Answer(s): A

Explanation:

Activity logs are kept for 90 days. You can query for any range of dates, as long as the starting date isn’t more than 90 days in the past.

Through activity logs, you can determine:
-what operations were taken on the resources in your subscription
-who started the operation
-when the operation occurred
-the status of the operation
-the values of other properties that might help you research the operation


Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/view-activity-logs



HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription that contains an Azure key vault named KV1 and a virtual machine named VM1. VM1 runs Windows Server 2022: Azure Edition.

You plan to deploy an ASP.Net Core-based application named App1 to VM1.

You need to configure App1 to use a system-assigned managed identity to retrieve secrets from KV1. The solution must minimize development effort.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: Client Credentials flow
Client Credentials flow — The only flow that does not require immediate user interaction, usually used when the OAuth client is acting on-behalf of itself, when user-consent doesn’t make sense, or when authorization primitives could be configured out-of-band (for instance via Azure AD)

Note: Authenticating to Azure Services
Local machines don't support managed identities for Azure resources. As a result, the Microsoft.Azure.Services.AppAuthentication library uses your developer credentials to run in your local development environment. When the solution is deployed to Azure, the library uses a managed identity to switch to an OAuth 2.0 client credential grant flow. This approach means you can test the same code locally and remotely without worry.

Incorrect:
* Authorization code flow — Requires user interaction and consent, typically via the web browser, to get a code which is then used to issue an access token.

* Implicit grant flow — Created for single page web / mobile webview apps, where token creation and handling is done entirely from the front end.

Box 2: OAuth 2.0 access token endpoint of Azure AD

Example: Issuing & inspecting our first OAuth token
At this stage, we should be able to issue tokens to Service A, on behalf of Service B — let’s see that in action.

1. In Azure AD application registration blade, go to Service B (as shown in previous steps)
2. In the Overview blade, Click on the ‘Endpoints’ button at the command bar
3. In the opened Endpoints blade, copy the OAuth 2.0 token endpoint (v2) URL
4. Issue a HTTP POST call for the given URL with the following parameters
$> curl -s -XPOST <token-v2-endpoint> \
-d grant_type=client_credentials \
-d client_id=<service-b-app-id> \
-d client_secret=<service-b-client-secret> \
-d scope=<service-a-application-id-uri>/.default

5. Etc.


Reference:

https://medium.com/@dany74q/service-to-service-auth-with-azure-ad-msi-oauth-2-0-step-by-step-a1aed196b1e1
https://learn.microsoft.com/en-us/dotnet/api/overview/azure/service-to-service-authentication



Page 12 of 67



Post your Comments and Discuss Microsoft AZ-305 exam with other Community members:

Criss commented on December 29, 2024
Very nice and very good questions
Anonymous
upvote

Jay Gomes commented on November 07, 2024
Very nice and very good questions
Anonymous
upvote

Jay Gomes commented on November 07, 2024
Nice v nice questions
Anonymous
upvote

Farid commented on November 05, 2024
This exam is hard but not as bad as others have stated here. With these question you can pass on first try.
Canada
upvote

Bobby commented on September 12, 2024
nice collection
Anonymous
upvote

Ram commented on September 06, 2024
Its a nice collection of questions with examplanation
Anonymous
upvote

Doran commented on June 10, 2024
Used these exam dumps and passed my exam. Of course I went for the full PDF version. Felt like I had the answers in my back pocket. If only they could help me find my car keys too!
United Kingdom
upvote

Emma Martin commented on May 04, 2024
I highly recommend Xcerts.com's Microsoft AZ-305 Dumps PDF for anyone preparing for the AZ-305 certification exam. The content is well-organized, comprehensive, and up-to-date, covering all key topics effectively. The inclusion of real-world scenarios and practice questions makes it a valuable resource for honing Azure solutions skills. Passexam4sure's AZ-305 Dumps PDF is a must-have for achieving success in Azure solutions architecture!
UNITED STATES
upvote

Komar commented on April 14, 2024
Practice Questions seem very relevant and the price is quite affordable compare to other sites where they charge for study guides and the software separately.
UNITED STATES
upvote

Ken commented on March 27, 2024
I wanted to say thank you for the set of study guides and practice questions. They turned out to be very helpful. I pass the exam.
ITALY
upvote

Sushant commented on February 02, 2024
The question are very relevant to real exam. Some are word by word. However some answers are not 100% correct. So if you have some knowledge of the topics like me then it is an easy pass with these questions.
Anonymous
upvote

Žarko commented on September 05, 2023
@t it seems like azure service bus message quesues could be the best solution
UNITED KINGDOM
upvote

Santhi commented on January 01, 2024
passed today.40% questions were new.litwere case study,lots of new questions on afd,ratelimit,tm,lb,app gatway.got 2 set series of questions which are not present here.questions on azure cyclecloud, no.of vnet/vms required for implimentation,blueprints assignment/management group etc
INDIA
upvote

T commented on July 28, 2023
this question is keep repeat : you are developing a sales application that will contain several azure cloud services and handle different components of a transaction. different cloud services will process customer orders, billing, payment, inventory, and shipping. you need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using xml messages. what should you include in the recommendation?
NEW ZEALAND
upvote

alaska commented on October 24, 2023
i scored 87% on the az-204 exam. thanks! i always trust
GERMANY
upvote

Chere commented on September 15, 2023
found it good
Anonymous
upvote

Santhi commented on January 01, 2024
Passed Today.40% questions were new.Litwere case study,Lots of new Questions on AFD,Ratelimit,TM,LB,App gatway.Got 2 set series of questions which are not present here.Questions on Azure CycleCloud, No.of vnet/vm's required for implimentation,Blueprints assignment/management group etc
INDIA
upvote

alaska commented on October 24, 2023
I scored 87% on the AZ-204 exam. Thanks! I always trust
GERMANY
upvote

luvinit commented on September 27, 2023
purfect happy to be here
UNITED STATES
upvote

Chere commented on September 15, 2023
Found it good
Anonymous
upvote

Chere commented on September 15, 2023
I am.just visiting the website, it looks good and valid.
Anonymous
upvote

Žarko commented on September 05, 2023
Q42: Shouldn't Answer be Access Review?!!
UNITED KINGDOM
upvote

Žarko commented on September 05, 2023
@T It seems like Azure Service Bus message quesues could be the best solution
UNITED KINGDOM
upvote

Computers Student commented on August 18, 2023
I am planning to take this exam soon. I will share the results.
SOUTH AFRICA
upvote

T commented on July 28, 2023
This question is keep repeat : You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages. What should you include in the recommendation?
NEW ZEALAND
upvote

avread09 commented on June 10, 2023
good set of questions
Anonymous
upvote

chopra commented on April 27, 2023
These questions cover a wide range of topics and are very helpful.
INDIA
upvote

Isaac commented on April 24, 2023
The dumps covered all the important topics. Very helpful for passing the exam.
UNITED KINGDOM
upvote

Rez commented on April 23, 2023
This is a good shortcut to passing. Questions are very similar to what I saw in my exam. That is what helped me pass.
GERMANY
upvote

George commented on March 27, 2023
This exam question and answer guide was an absolute lifesaver - I felt prepared and confident going into my exam and passed it.
CANADA
upvote

Pradhan commented on March 14, 2023
Real questions and answers in this exam dumps... helped me maximize my study time and pass my exam.
UNITED STATES
upvote

marcee commented on January 25, 2023
some new question came up in the exam and some answer are wrong, how ever the dump was useful
EUROPEAN UNION
upvote

Amit commented on September 05, 2022
The good thing about this site is that they provide free updates. The latest upddate has the new exam questions.
INDIA
upvote

Ranjeet commented on June 29, 2022
Second attemp and managed to pass with the help of this exam dumps questions. What relief.
INDIA
upvote