CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Microsoft
  5. AZ-305

Free AZ-305 Exam Braindumps

You plan to deploy an application named App1 that will run on five Azure virtual machines. Additional virtual machines will be deployed later to run App1.

You need to recommend a solution to meet the following requirements for the virtual machines that will run App1:

-Ensure that the virtual machines can authenticate to Azure Active Directory (Azure AD) to gain access to an Azure key vault, Azure Logic Apps instances, and an Azure SQL database.
-Avoid assigning new roles and permissions for Azure services when you deploy additional virtual machines.
-Avoid storing secrets and certificates on the virtual machines.
-Minimize administrative effort for managing identities.

Which type of identity should you include in the recommendation?

  1. a system-assigned managed identity
  2. a service principal that is configured to use a certificate
  3. a service principal that is configured to use a client secret
  4. a user-assigned managed identity

Answer(s): D

Explanation:

Managed identities provide an identity for applications to use when connecting to resources that support Azure Active Directory (Azure AD) authentication.

A user-assigned managed identity:
Can be shared.
The same user-assigned managed identity can be associated with more than one Azure resource.

Common usage:
Workloads that run on multiple resources and can share a single identity.
For example, a workload where multiple virtual machines need to access the same resource.

Incorrect:
Not A: A system-assigned managed identity can’t be shared. It can only be associated with a single Azure resource.
Typical usage:
Workloads that are contained within a single Azure resource.
Workloads for which you need independent identities.
For example, an application that runs on a single virtual machine.


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview



You have the resources shown in the following table:



CDB1 hosts a container that stores continuously updated operational data.

You are designing a solution that will use AS1 to analyze the operational data daily.

You need to recommend a solution to analyze the data without affecting the performance of the operational data store.

What should you include in the recommendation?

  1. Azure Cosmos DB change feed
  2. Azure Data Factory with Azure Cosmos DB and Azure Synapse Analytics connectors
  3. Azure Synapse Link for Azure Cosmos DB
  4. Azure Synapse Analytics with PolyBase data loading

Answer(s): C

Explanation:

Azure Synapse Link for Azure Cosmos DB creates a tight integration between Azure Cosmos DB and Azure Synapse Analytics. It enables customers to run near real-time analytics over their operational data with full performance isolation from their transactional workloads and without an ETL pipeline.


Reference:

https://docs.microsoft.com/en-us/azure/cosmos-db/synapse-link-frequently-asked-questions



HOTSPOT (Drag and Drop is not supported)
You deploy several Azure SQL Database instances.

You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.




Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:





Box 1: 90 days
As per exhibit.

Box 2: 730 days
How long is the data kept?
Raw data points (that is, items that you can query in Analytics and inspect in Search) are kept for up to 730 days.


Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/app/data-retention-privacy



You have an application that is used by 6,000 users to validate their vacation requests. The application manages its own credential store.

Users must enter a username and password to access the application. The application does NOT support identity providers.

You plan to upgrade the application to use single sign-on (SSO) authentication by using an Azure Active Directory (Azure AD) application registration.

Which SSO method should you use?

  1. header-based
  2. SAML
  3. password-based
  4. OpenID Connect

Answer(s): C

Explanation:

Password - On-premises applications can use a password-based method for SSO. This choice works when applications are configured for Application Proxy.

With password-based SSO, users sign in to the application with a username and password the first time they access it. After the first sign-on, Azure AD provides the username and password to the application. Password-based SSO enables secure application password storage and replay using a web browser extension or mobile app. This option uses the existing sign-in process provided by the application, enables an administrator to manage the passwords, and doesn't require the user to know the password.

Incorrect:
Choosing an SSO method depends on how the application is configured for authentication. Cloud applications can use federation-based options, such as OpenID Connect, OAuth, and SAML.

Federation - When you set up SSO to work between multiple identity providers, it's called federation.


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on






Post your Comments and Discuss Microsoft AZ-305 exam with other Community members:

AZ-305 Discussions & Posts