Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.Your company, named Contoso, Ltd., has a Microsoft Entra tenant named contoso.com that uses Privileged Identity Management (PIM) and is linked to an Azure subscription named Sub1.You use Azure Backup to back up all the resources in Sub1 to a Recovery Services vault named Vault1.An external company named Fabrikam, Inc. provides security management services to Contoso. Fabrikam has a Microsoft Entra tenant named fabrikam.com and an Azure subscription.You need to prevent a compromised administrator account in contoso.com from modifying backup policies in and deleting backups from Sub1.Solution: You configure a PIM role assignment that requires approval for activation by an administrator in contoso.com.Does this meet the goal?
Answer(s): B
Correct:* You configure Multi-user authorization (MUA) in Sub1 by using a Resource Guard from fabrikam.com.Incorrect:* In Vault1, you generate a security PIN for critical operations.* You configure a PIM role assignment that requires approval for activation by an administrator in contoso.com.Note: Azure Resource GuardAzure Resource Guard is a security feature that provides an additional layer of protection for critical Azure backup and disaster recovery operations. It helps prevent unauthorized or accidental changes to your backup and recovery configurations, mitigating risks associated with malicious or unintentional modifications.Purpose:Azure Resource Guard is designed to enhance the security of Recovery Services vaults and their associated backup vaults. It allows you to implement multi-user authorization (MUA) on protected operations, reducing the risk of accidental or malicious data loss.How it works:Resource Guard acts as a gatekeeper for critical operations, requiring approvals or permissions before sensitive changes can be made. This helps ensure that only authorized individuals can modify backup settings, delete backups, or perform other critical actions.Key benefits:Reduces the risk of accidental data loss or corruption.*-> Enhances security posture by preventing unauthorized changes to backup configurations.*-> Enables multi-user authorization, requiring approvals for sensitive operations.Provides a granular level of control over backup and recovery operations.
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.Your company, named Contoso, Ltd., has a Microsoft Entra tenant named contoso.com that uses Privileged Identity Management (PIM) and is linked to an Azure subscription named Sub1.You use Azure Backup to back up all the resources in Sub1 to a Recovery Services vault named Vault1.An external company named Fabrikam, Inc. provides security management services to Contoso. Fabrikam has a Microsoft Entra tenant named fabrikam.com and an Azure subscription.You need to prevent a compromised administrator account in contoso.com from modifying backup policies in and deleting backups from Sub1.Solution: You configure Multi-user authorization (MUA) in Sub1 by using a Resource Guard from fabrikam.com.Does this meet the goal?
Answer(s): A
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.Your company, named Contoso, Ltd., has a Microsoft Entra tenant named contoso.com that uses Privileged Identity Management (PIM) and is linked to an Azure subscription named Sub1.You use Azure Backup to back up all the resources in Sub1 to a Recovery Services vault named Vault1.An external company named Fabrikam, Inc. provides security management services to Contoso. Fabrikam has a Microsoft Entra tenant named fabrikam.com and an Azure subscription.You need to prevent a compromised administrator account in contoso.com from modifying backup policies in and deleting backups from Sub1.Solution: In Vault1, you generate a security PIN for critical operations.Does this meet the goal?
You are building an app named App1 that will monitor thousands of sensors across multiple sites. The app will include the resources shown in the following table.You need to recommend a real-time analytics solution for App1. The solution must meet the following requirements:Perform analytics on the sensor data in real time.Ensure that the solution scales dynamically.Minimize development effort.Minimize costs.What is the minimum number of Azure Stream Analytics jobs you should deploy?
One Azure Stream Analytics job for the West Europe region, and one Azure Stream Analytics job for the North Europe region.Note:A single Azure Stream Analytics (ASA) job cannot span multiple regions; it is a single-region service by design, and by default, customer data and metadata for the job are stored and processed within that single region to meet data residency requirements. While ASA offers built-in features like Availability Zones to improve fault tolerance and uptime within a region, it does not natively support distributing a single job across different geographic regions.A single Azure Stream Analytics (ASA) job can include both Azure IoT Hubs and Azure Synapse Analytics by configuring IoT Hub as a streaming input and Synapse Analytics (specifically, a SQL pool or Data Explorer pool within it) as an output. You can set up multiple inputs and outputs for an ASA job, allowing you to ingest data from IoT devices and then process and store it in Synapse Analytics for further analysis and reporting.How to integrate them:Configure the Input: In your Azure Stream Analytics job, add an input of type Azure IoT Hub. This ingests the real-time data streams from your IoT devices.Write Your Query: Use the Stream Analytics Query Language to define the transformations and processing you want to perform on the incoming data.Configure the Output: Add an output to your ASA job that targets an Azure Synapse Analytics resource, such as a Synapse SQL pool or Data Explorer pool.Connect and Process: Once configured, the ASA job will read data from the IoT Hub, apply your query logic, and then write the results to the connected Synapse Analytics instance, making the data available for further analytics and business intelligence.
You have an Azure subscription. The subscription contains a tiered app named App1 that is distributed across multiple containers hosted in Azure Container Instances.You need to deploy an Azure Monitor monitoring solution for App1. The solution must meet the following requirements:Support using synthetic transaction monitoring to simulate real user interactions and identify UI failures.Minimize development effort.What two features can you include in the solution? Each correct answer presents a complete solution.Note: Each correct selection is worth one point.
Answer(s): A,C
[C]Azure Monitor Application Insights supports synthetic transaction monitoring to simulate user interactions and identify UI failures by using availability tests and Playwright-based tests to verify functionality and performance from different locations globally. You can configure these tests to perform various actions, such as opening URLs and performing complex user workflows, which then generate telemetry to report availability, performance, and failures.[A]Log Analytics Workspace Insights is a feature within Azure Monitor that provides a unified, graphical view of your Log Analytics workspace’s usage, performance, health, connected agents, query activity, and change log.It offers a centralized dashboard to help you monitor and understand your workspaces, enabling operational teams to track health, identify trends, and ensure continuous improvement of your log collection and monitoring strategy.
Post your Comments and Discuss Microsoft AZ-305 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-305 content, but please register or login to continue.