CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Microsoft
  5. AZ-305

Free AZ-305 Exam Braindumps (page: 13)

Page 13 of 67
PDF with 267 Questions

Your company has the divisions shown in the following table.



Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.

You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.

What should you recommend?

  1. Configure Azure AD join.
  2. Configure Azure AD Identity Protection.
  3. Configure a Conditional Access policy.
  4. Configure Supported account types in the application registration and update the sign-in endpoint.

Answer(s): D

Explanation:

Identity and account types for single- and multi-tenant apps
You, as a developer, can choose if your app allows only users from your Azure Active Directory (Azure AD) tenant, any Azure AD tenant, or users with personal Microsoft accounts. You can configure your app to be either single tenant or multitenant during app registration in Azure.

Note: A required part of application registration in Azure AD is your selection of supported account types. While IT Pros in administrator roles decide who can consent to apps in their tenant, you, as a developer, specify who can use your app based on account type. When a tenant doesn't allow you to register your application in Azure AD, administrators will provide you with a way to communicate those details to them through another mechanism.

You'll choose from the following supported account type options when registering your application.

Accounts in this organizational directory only (O365 only - Single tenant)
Accounts in any organizational directory (Any Azure AD directory - Multitenant)
Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)
Personal Microsoft accounts only

Incorrect:
* Configure Azure AD join.
Azure AD joined devices are signed in to using an organizational Azure AD account. Access to resources can be controlled based on Azure AD account and Conditional Access policies applied to the device.

* Configure Azure AD Identity Protection
Identity Protection allows organizations to accomplish three key tasks: Automate the detection and remediation of identity-based risks. Investigate risks using data in the portal. Export risk detection data to other tools.


Reference:

https://learn.microsoft.com/en-us/security/zero-trust/develop/identity-supported-account-types



You have an Azure AD tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned memberships. Group1 has 50 members, including 20 guest users.

You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:

-The evaluation must be repeated automatically every three months.
-Every member must be able to report whether they need to be in Group1.
-Users who report that they do not need to be in Group1 must be removed from Group1 automatically.
-Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.

What should you include in the recommendation?

  1. Implement Azure AD Identity Protection.
  2. Change the Membership type of Group1 to Dynamic User.
  3. Create an access review.
  4. Implement Azure AD Privileged Identity Management (PIM).

Answer(s): C

Explanation:

Based on the requirements below:

The evaluation must be repeated automatically every three months.
•Every member must be able to report whether they need to be in Group1.
•Users who report that they do not need to be in Group1 must be removed from Group1 automatically.
•Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.


Reference:

https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview



HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription named Sub1 that is linked to an Azure AD tenant named contoso.com.

You plan to implement two ASP.NET Core apps named App1 and App2 that will be deployed to 100 virtual machines in Sub1. Users will sign in to App1 and App2 by using their contoso.com credentials.

App1 requires read permissions to access the calendar of the signed-in user. App2 requires write permissions to access the calendar of the signed-in user.

You need to recommend an authentication and authorization solution for the apps. The solution must meet the following requirements:

-Use the principle of least privilege.
-Minimize administrative effort.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: Application registration in Azure AD
To get an access token, your app must be registered with the Microsoft identity platform and be granted Microsoft Graph permissions by a user or administrator.

Note: Register your app with the Microsoft identity platform
Before your app can get a token from the Microsoft identity platform, it must be registered in the Azure portal. Registration integrates your app with the Microsoft identity platform and establishes the information that it uses to get tokens, including:

Application ID: A unique identifier assigned by the Microsoft identity platform.
Redirect URI/URL: One or more endpoints at which your app will receive responses from the Microsoft identity platform. (For native and mobile apps, the URI is assigned by the Microsoft identity platform.)
Client secret: A password or a public/private key pair that your app uses to authenticate with the Microsoft identity platform. (Not needed for native or mobile apps.)

Box 2: Delegated permissions
Access scenarios
The method that an app uses to authenticate with the Microsoft identity platform will depend on how you want the app to access the data. This access can be in one of two ways.

Delegated access, an app acting on behalf of a signed-in user.
App-only access, an app acting with its own identity.

Note: Calendars permissions
Delegated permissions
* Calendars.Read
Read user calendars - Allows the app to read events in user calendars.

* Calendars.ReadWrite
Have full access to user calendars - Allows the app to create, read, update, and delete events in user calendars.

Incorrect:
* Application permissions
Calendar Application permissions
* Calendars.Read
Read calendars in all mailboxes - Allows the app to read events of all calendars without a signed-in user.

* Calendars.ReadWrite
Read and write calendars in all mailboxes - Allows the app to create, read, update, and delete events of all calendars without a signed-in user.


Reference:

https://learn.microsoft.com/en-us/graph/auth/auth-concepts
https://learn.microsoft.com/en-us/graph/permissions-reference



Your company has the divisions shown in the following table.



Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.

You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.

What should you recommend?

  1. Enable Azure AD pass-through authentication and update the sign-in endpoint.
  2. Use Azure AD entitlement management to govern external users.
  3. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
  4. Configure Azure AD Identity Protection.

Answer(s): B

Explanation:

Govern access for external users in Azure AD entitlement management
Azure AD entitlement management uses Azure AD business-to-business (B2B) to share access so you can collaborate with people outside your organization. With Azure AD B2B, external users authenticate to their home directory, but have a representation in your directory. The representation in your directory enables the user to be assigned access to your resources.


Reference:

https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-external-users



Page 13 of 67



Post your Comments and Discuss Microsoft AZ-305 exam with other Community members:

Criss commented on December 29, 2024
Very nice and very good questions
Anonymous
upvote

Jay Gomes commented on November 07, 2024
Very nice and very good questions
Anonymous
upvote

Jay Gomes commented on November 07, 2024
Nice v nice questions
Anonymous
upvote

Farid commented on November 05, 2024
This exam is hard but not as bad as others have stated here. With these question you can pass on first try.
Canada
upvote

Bobby commented on September 12, 2024
nice collection
Anonymous
upvote

Ram commented on September 06, 2024
Its a nice collection of questions with examplanation
Anonymous
upvote

Doran commented on June 10, 2024
Used these exam dumps and passed my exam. Of course I went for the full PDF version. Felt like I had the answers in my back pocket. If only they could help me find my car keys too!
United Kingdom
upvote

Emma Martin commented on May 04, 2024
I highly recommend Xcerts.com's Microsoft AZ-305 Dumps PDF for anyone preparing for the AZ-305 certification exam. The content is well-organized, comprehensive, and up-to-date, covering all key topics effectively. The inclusion of real-world scenarios and practice questions makes it a valuable resource for honing Azure solutions skills. Passexam4sure's AZ-305 Dumps PDF is a must-have for achieving success in Azure solutions architecture!
UNITED STATES
upvote

Komar commented on April 14, 2024
Practice Questions seem very relevant and the price is quite affordable compare to other sites where they charge for study guides and the software separately.
UNITED STATES
upvote

Ken commented on March 27, 2024
I wanted to say thank you for the set of study guides and practice questions. They turned out to be very helpful. I pass the exam.
ITALY
upvote

Sushant commented on February 02, 2024
The question are very relevant to real exam. Some are word by word. However some answers are not 100% correct. So if you have some knowledge of the topics like me then it is an easy pass with these questions.
Anonymous
upvote

Žarko commented on September 05, 2023
@t it seems like azure service bus message quesues could be the best solution
UNITED KINGDOM
upvote

Santhi commented on January 01, 2024
passed today.40% questions were new.litwere case study,lots of new questions on afd,ratelimit,tm,lb,app gatway.got 2 set series of questions which are not present here.questions on azure cyclecloud, no.of vnet/vms required for implimentation,blueprints assignment/management group etc
INDIA
upvote

T commented on July 28, 2023
this question is keep repeat : you are developing a sales application that will contain several azure cloud services and handle different components of a transaction. different cloud services will process customer orders, billing, payment, inventory, and shipping. you need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using xml messages. what should you include in the recommendation?
NEW ZEALAND
upvote

alaska commented on October 24, 2023
i scored 87% on the az-204 exam. thanks! i always trust
GERMANY
upvote

Chere commented on September 15, 2023
found it good
Anonymous
upvote

Santhi commented on January 01, 2024
Passed Today.40% questions were new.Litwere case study,Lots of new Questions on AFD,Ratelimit,TM,LB,App gatway.Got 2 set series of questions which are not present here.Questions on Azure CycleCloud, No.of vnet/vm's required for implimentation,Blueprints assignment/management group etc
INDIA
upvote

alaska commented on October 24, 2023
I scored 87% on the AZ-204 exam. Thanks! I always trust
GERMANY
upvote

luvinit commented on September 27, 2023
purfect happy to be here
UNITED STATES
upvote

Chere commented on September 15, 2023
Found it good
Anonymous
upvote

Chere commented on September 15, 2023
I am.just visiting the website, it looks good and valid.
Anonymous
upvote

Žarko commented on September 05, 2023
Q42: Shouldn't Answer be Access Review?!!
UNITED KINGDOM
upvote

Žarko commented on September 05, 2023
@T It seems like Azure Service Bus message quesues could be the best solution
UNITED KINGDOM
upvote

Computers Student commented on August 18, 2023
I am planning to take this exam soon. I will share the results.
SOUTH AFRICA
upvote

T commented on July 28, 2023
This question is keep repeat : You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages. What should you include in the recommendation?
NEW ZEALAND
upvote

avread09 commented on June 10, 2023
good set of questions
Anonymous
upvote

chopra commented on April 27, 2023
These questions cover a wide range of topics and are very helpful.
INDIA
upvote

Isaac commented on April 24, 2023
The dumps covered all the important topics. Very helpful for passing the exam.
UNITED KINGDOM
upvote

Rez commented on April 23, 2023
This is a good shortcut to passing. Questions are very similar to what I saw in my exam. That is what helped me pass.
GERMANY
upvote

George commented on March 27, 2023
This exam question and answer guide was an absolute lifesaver - I felt prepared and confident going into my exam and passed it.
CANADA
upvote

Pradhan commented on March 14, 2023
Real questions and answers in this exam dumps... helped me maximize my study time and pass my exam.
UNITED STATES
upvote

marcee commented on January 25, 2023
some new question came up in the exam and some answer are wrong, how ever the dump was useful
EUROPEAN UNION
upvote

Amit commented on September 05, 2022
The good thing about this site is that they provide free updates. The latest upddate has the new exam questions.
INDIA
upvote

Ranjeet commented on June 29, 2022
Second attemp and managed to pass with the help of this exam dumps questions. What relief.
INDIA
upvote