You have an Azure subscription that contains 1,000 virtual machines and a Log Analytics workspace named Workspace1.You plan to collect custom JSON logs from the virtual machines and store the logs in a custom table in Workspace1.You need to ensure that the logs are collected by using the Logs Ingestion API. The solution must prevent access to Workspace1 from the internet.What should you include in the solution?
Answer(s): A
Instead of creating a private link for each resource the virtual network connects to, Azure Monitor uses a single private link connection using a private endpoint from the virtual network to an Azure Monitor Private Link Scope (AMPLS). The AMPLS is a set of Azure Monitor resources that define the boundaries of your monitoring network.Resource-specific endpointsLog Analytics endpoints are workspace specific, except for the query endpoint. As a result, adding a specific Log Analytics workspace to the AMPLS will send ingestion requests to this workspace over the private link.Ingestion to other workspaces will continue to use the public endpoints.
https://learn.microsoft.com/en-us/azure/azure-monitor/logs/private-link-security
HOTSPOT (Drag and Drop is not supported)You have six Azure subscriptions in a management group. Each subscription contains two resource groups. Each resource group contains an Azure App Service instance. The App Service instances use app slots.You need to perform the following actions on three of the subscriptions:Disable public network access for all the app slots.Assign tags to all the App Service instances.The solution must meet the following requirements:Ensure that the App Service instances in the remaining subscriptions are unaffected.Minimize administrative effort.What is the minimum number of Azure Policy definitions and assignments required? To answer, select the appropriate options in the answer area.Hot Area:
Box 1: 2Policy definitionsPolicy definition 1: Disable public network access for all the app slots. Policy definition 2: Assign tags to all the App Service instances.Box 2: 1Policy assignmentsGroup the two policy definitions into a single policy initiative. For the policy initiative make one policy assignment with scope of the three subscriptions.Note: Azure Policy evaluates resources and actions in Azure by comparing the properties of those resources to business rules. These business rules, described in JSON format, are known as policy definitions. To simplify management, several business rules can be grouped together to form a policy initiative (sometimes called a policySet). Once your business rules have been formed, the policy definition or initiative is assigned to any scope of resources that Azure supports, such as management groups, subscriptions, resource groups, or individual resources. The assignment applies to all resources within the Resource Manager scope of that assignment.
https://learn.microsoft.com/en-us/azure/governance/policy/overview
HOTSPOT (Drag and Drop is not supported)You have an on-premises datacenter and an Azure subscription. The environment contains 100 databases of various types, including Azure SQL Database, Azure SQL Managed Instances, Azure Cosmos DB, Microsoft SQL Server, MySQL, and Oracle. Multiple apps access the databases.You need to recommend a data solution. The solution must meet the following requirements:Provide a single searchable catalog of the data in all the databases. The catalog must contain metadata of the data. The solution must minimize storage requirements.Provide a central data lake that contains specific data from multiple databases. The solution must include a big data engine that can create machine learning models.What should you include in the recommendation? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: Microsoft Purview Data MapFor the searchable data catalog, use:Provide a single searchable catalog of the data in all the databases. The catalog must contain metadata of the data. The solution must minimize storage requirements.The Microsoft Purview Data Map provides the foundation for data discovery and data governance. It captures metadata about data present in analytics, software-as-a-service (SaaS), and operational systems in hybrid, on- premises, and multicloud environments.Microsoft Purview, Data sources that connect to Data MapIt includes as required among many other: Azure SQL Database, Azure SQL Managed Instances, Azure Cosmos DB, Microsoft SQL Server, MySQL, and Oracle.Box 2: Azure Synapse AnalyticsFor the central data lake, use:Provide a central data lake that contains specific data from multiple databases. The solution must include a big data engine that can create machine learning models.Technology choicesWhen you build a comprehensive data lake solution on Azure, consider the following technologies:*-> Azure Synapse Analytics is a unified service that you can use to ingest, explore, prepare, manage, and serve data for immediate business intelligence and machine learning needs. It integrates deeply with Azure data lakes so that you can query and analyze large datasets efficiently.* Azure Data Factory is a cloud-based data integration service that you can use to create data-driven workflows to then orchestrate and automate data movement and transformation.* Azure Data Lake Storage combines Azure Blob Storage with data lake capabilities, which provides Apache Hadoop-compatible access, hierarchical namespace capabilities, and enhanced security for efficient big data analytics.* Azure Databricks is a unified platform that you can use to process, store, analyze, and monetize data. It supports ETL processes, dashboards, security, data exploration, machine learning, and generative AI.
https://learn.microsoft.com/en-us/purview/data-map https://learn.microsoft.com/en-us/purview/icrosoft-purview-connector-overview https://learn.microsoft.com/en-us/azure/architecture/data-guide/scenarios/data-lake
HOTSPOT (Drag and Drop is not supported)You have the following projects:Project1: The development of an app that processes scanned images stored in an Azure Blob Storage accountProject2: The migration of an on-premises app that processes log files as they arrive in an SMB file shareProject3: The migration of an on-premises app that processes PDF documents stored on a local file systemThe projects have the requirements shown in the following table.Project3 does NOT support the use of containers.You need to recommend a compute solution for the projects.What should you include in the recommendation for each project? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: Azure virtual machinesProject1: The development of an app that processes scanned images stored in an Azure Blob Storage account* Use high-performance computing (HPC)* Scale dynamicallyUse a pool of VMs for autoscaling.Note: High-performance computing (HPC) on AzureUse Azure Batch to run large-scale parallel and high-performance computing (HPC) batch jobs efficiently inAzure. Azure Batch creates and manages a pool of compute nodes (virtual machines), installs the applications you want to run, and schedules jobs to run on the nodes.ManagementAzure Batch is a platform service for running large-scale parallel and HPC applications efficiently in the cloud. Azure Batch schedules compute-intensive work to run on a managed pool of virtual machines, and can automatically scale compute resources to meet the needs of your jobs.ComputeManage the cost and size of the pool by using Azure Spot VMs or by automatically scaling the number of nodes as the workload changes.Box 2: Azure App ServiceProject2: The migration of an on-premises app that processes log files as they arrive in an SMB file share* Minimize how long it takes to spawn new processes* Scale dynamically* spawn new processesYou can run background tasks with WebJobs in Azure App Service.* ScaleAzure App Service has built-in autoscaling. Autoscale settings apply to all of the apps within an app service.Note: Azure Functions differs from the previous compute options, because you don’t need to configure any autoscale rules. Instead, Azure Functions automatically allocates compute power when your code is running, scaling out as necessary to handle load.Box 3: Azure BatchProject3: The migration of an on-premises app that processes PDF documents stored on a local file system* Minimize recoding requirementsIncorrect:*
https://learn.microsoft.com/en-us/azure/architecture/topics/high-performance-computing https://learn.microsoft.com/en-us/azure/batch/batch-technical-overview https://learn.microsoft.com/en-us/azure/architecture/best-practices/auto-scaling https://learn.microsoft.com/en-us/azure/app-service/webjobs-create
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription. The subscription contains a Log Analytics workspace named WS1 that is accessible via a public endpoint. The subscription contains the virtual machines shown in the following table.You need to collect logs from the virtual machines and forward the logs to WS1 by using the Azure MonitorAgent. The solution must meet the following requirements:Collect Windows logs and IIS logs from the virtual machines in the East US Azure region. Collect Windows logs from the virtual machines in the Central US Azure region. Collect IIS logs from the virtual machines in the West US Azure region.The solution must minimize the volume of data collected.What is the minimum number of data collection rules (DCRs) and data collection endpoints (DCEs) required? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: 2Minimum number of data collection rules (DCRs)One DCR to collect Windows logs.One DCR to collect IIS logs.Note: Data collection rules (DCRs) are part of an Extract, transform, and load (ETL)-like data collection process that improves on legacy data collection methods for Azure Monitor. This process uses a common data ingestion pipeline for all data sources and a standard method of configuration that’s more manageable and scalable than previous collection methods.Specific advantages of DCR-based data collection include:* Consistent method for configuration of different data sources.* Etc.Box 2: 3Minimum number of data collection endpoints (DCEs).One DCE for each region.Note:A data collection endpoint (DCE) is an Azure resource that defines a unique set of endpoints related to data collection, configuration, and ingestion in Azure Monitor.Create a data collection endpoint in each region where you have Azure Monitor Agent deployed to send configuration files to the agents in that region.
https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-rule-overview https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-endpoint-overview?
Post your Comments and Discuss Microsoft AZ-305 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-305 content, but please register or login to continue.