Free AZ-305 Exam Braindumps (page: 8)

Page 8 of 67

HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription that contains the resources shown in the following table.



You create an Azure SQL database named DB1 that is hosted in the East US Azure region.

To DB1, you add a diagnostic setting named Settings1. Settings1 archive SQLInsights to storage1 and sends SQLInsights to Workspace1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  1. See Explanation section for answer.

Answer(s): A

Explanation:





Box 1: Yes
A single diagnostic setting can define no more than one of each of the destinations. If you want to send data to more than one of a particular destination type (for example, two different Log Analytics workspaces), then create multiple settings.
Each resource can have up to 5 diagnostic settings.

Note: This diagnostic telemetry can be streamed to one of the following Azure resources for analysis.
* Log Analytics workspace
* Azure Event Hubs
* Azure Storage
Box 2: Yes

Box 3: Yes


Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/essentials/diagnostic-settings
https://docs.microsoft.com/en-us/azure/azure-sql/database/metrics-diagnostic-telemetry-logging-streaming-export-configure?tabs=azure-portal



You plan to deploy an Azure SQL database that will store Personally Identifiable Information (PII).

You need to ensure that only privileged users can view the PII.

What should you include in the solution?

  1. dynamic data masking
  2. role-based access control (RBAC)
  3. Data Discovery & Classification
  4. Transparent Data Encryption (TDE)

Answer(s): A

Explanation:

Dynamic data masking limits sensitive data exposure by masking it to non-privileged users.

Dynamic data masking helps prevent unauthorized access to sensitive data by enabling customers to designate how much of the sensitive data to reveal with minimal impact on the application layer. It’s a policy-based security feature that hides the sensitive data in the result set of a query over designated database fields, while the data in the database is not changed.


Reference:

https://docs.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview



You plan to deploy an app that will use an Azure Storage account.

You need to deploy the storage account. The storage account must meet the following requirements:

-Store the data for multiple users.
-Encrypt each user’s data by using a separate key.
-Encrypt all the data in the storage account by using customer-managed keys.

What should you deploy?

  1. files in a premium file share storage account
  2. blobs in a general purpose v2 storage account
  3. blobs in an Azure Data Lake Storage Gen2 account
  4. files in a general purpose v2 storage account

Answer(s): B

Explanation:

You can specify a customer-provided key on Blob storage operations. A client making a read or write request against Blob storage can include an encryption key on the request for granular control over how blob data is encrypted and decrypted.


Reference:

https://docs.microsoft.com/en-us/azure/storage/common/storage-service-encryption



HOTSPOT (Drag and Drop is not supported)
You have an Azure App Service web app that uses a system-assigned managed identity.

You need to recommend a solution to store the settings of the web app as secrets in an Azure key vault. The solution must meet the following requirements:

-Minimize changes to the app code.
-Use the principle of least privilege.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:





Box 1: Key Vault references in Application settings
Source Application Settings from Key Vault.
Key Vault references can be used as values for Application Settings, allowing you to keep secrets in Key Vault instead of the site config. Application Settings are securely encrypted at rest, but if you need secret management capabilities, they should go into Key Vault.

To use a Key Vault reference for an app setting, set the reference as the value of the setting. Your app can reference the secret through its key as normal. No code changes are required.

Box 2: Secrets: Get
In order to read secrets from Key Vault, you need to have a vault created and give your app permission to access it.

1. Create a key vault by following the Key Vault quickstart.
2. Create a managed identity for your application.
3. Key Vault references will use the app's system assigned identity by default, but you can specify a user-assigned identity.
4. Create an access policy in Key Vault for the application identity you created earlier. Enable the "Get" secret permission on this policy.


Reference:

https://docs.microsoft.com/en-us/azure/app-service/app-service-key-vault-references
https://docs.microsoft.com/en-us/azure/app-service/app-service-key-vault-references



Page 8 of 67



Post your Comments and Discuss Microsoft AZ-305 exam with other Community members:

Emma Martin 5/4/2024 3:57:10 AM
I highly recommend Xcerts.com's Microsoft AZ-305 Dumps PDF for anyone preparing for the AZ-305 certification exam. The content is well-organized, comprehensive, and up-to-date, covering all key topics effectively. The inclusion of real-world scenarios and practice questions makes it a valuable resource for honing Azure solutions skills. Passexam4sure's AZ-305 Dumps PDF is a must-have for achieving success in Azure solutions architecture!
UNITED STATES
upvote

Komar 4/14/2024 5:57:28 AM
Practice Questions seem very relevant and the price is quite affordable compare to other sites where they charge for study guides and the software separately.
UNITED STATES
upvote

Ken 3/27/2024 4:55:12 PM
I wanted to say thank you for the set of study guides and practice questions. They turned out to be very helpful. I pass the exam.
ITALY
upvote

Sushant 2/2/2024 9:49:29 PM
The question are very relevant to real exam. Some are word by word. However some answers are not 100% correct. So if you have some knowledge of the topics like me then it is an easy pass with these questions.
Anonymous
upvote

Žarko 9/5/2023 3:35:00 AM
@t it seems like azure service bus message quesues could be the best solution
UNITED KINGDOM
upvote

Santhi 1/1/2024 8:23:00 AM
passed today.40% questions were new.litwere case study,lots of new questions on afd,ratelimit,tm,lb,app gatway.got 2 set series of questions which are not present here.questions on azure cyclecloud, no.of vnet/vms required for implimentation,blueprints assignment/management group etc
INDIA
upvote

T 7/28/2023 9:06:00 PM
this question is keep repeat : you are developing a sales application that will contain several azure cloud services and handle different components of a transaction. different cloud services will process customer orders, billing, payment, inventory, and shipping. you need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using xml messages. what should you include in the recommendation?
NEW ZEALAND
upvote

alaska 10/24/2023 5:48:00 AM
i scored 87% on the az-204 exam. thanks! i always trust
GERMANY
upvote

Chere 9/15/2023 4:21:00 AM
found it good
Anonymous
upvote

Santhi 1/1/2024 8:23:07 AM
Passed Today.40% questions were new.Litwere case study,Lots of new Questions on AFD,Ratelimit,TM,LB,App gatway.Got 2 set series of questions which are not present here.Questions on Azure CycleCloud, No.of vnet/vm's required for implimentation,Blueprints assignment/management group etc
INDIA
upvote

alaska 10/24/2023 5:48:44 AM
I scored 87% on the AZ-204 exam. Thanks! I always trust
GERMANY
upvote

luvinit 9/27/2023 3:42:22 PM
purfect happy to be here
UNITED STATES
upvote

Chere 9/15/2023 4:21:27 AM
Found it good
Anonymous
upvote

Chere 9/15/2023 4:11:49 AM
I am.just visiting the website, it looks good and valid.
Anonymous
upvote

Žarko 9/5/2023 5:37:18 AM
Q42: Shouldn't Answer be Access Review?!!
UNITED KINGDOM
upvote

Žarko 9/5/2023 3:35:05 AM
@T It seems like Azure Service Bus message quesues could be the best solution
UNITED KINGDOM
upvote

Computers Student 8/18/2023 9:49:08 AM
I am planning to take this exam soon. I will share the results.
SOUTH AFRICA
upvote

T 7/28/2023 9:06:29 PM
This question is keep repeat : You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages. What should you include in the recommendation?
NEW ZEALAND
upvote

avread09 6/10/2023 11:07:44 PM
good set of questions
Anonymous
upvote

chopra 4/27/2023 10:27:30 PM
These questions cover a wide range of topics and are very helpful.
INDIA
upvote

Isaac 4/24/2023 10:50:33 PM
The dumps covered all the important topics. Very helpful for passing the exam.
UNITED KINGDOM
upvote

Rez 4/23/2023 1:03:57 AM
This is a good shortcut to passing. Questions are very similar to what I saw in my exam. That is what helped me pass.
GERMANY
upvote

George 3/27/2023 10:04:31 PM
This exam question and answer guide was an absolute lifesaver - I felt prepared and confident going into my exam and passed it.
CANADA
upvote

Pradhan 3/14/2023 12:10:40 AM
Real questions and answers in this exam dumps... helped me maximize my study time and pass my exam.
UNITED STATES
upvote

Amit 9/5/2022 10:54:10 PM
The good thing about this site is that they provide free updates. The latest upddate has the new exam questions.
INDIA
upvote

Ranjeet 6/29/2022 10:08:58 PM
Second attemp and managed to pass with the help of this exam dumps questions. What relief.
INDIA
upvote

Manish 6/25/2022 11:51:25 PM
I only needed one exam but as part of the 50% discount me and my friend got 2 exams. This is a win win for both of us since we split the cost.
INDIA
upvote