Microsoft Designing Microsoft Azure Infrastructure Solutions - AZ-305 Exam Practice Test
Hotspot Question
You have an Azure subscription.
You are designing a Microsoft SQL Server failover cluster instance (FCI) solution. The solution must meet the following requirements:
- Ensure that the FCI contains three virtual machines that run Windows
Server 2025.
- Place the virtual machines and storage resources in three
availability zones to provide an availability SLA of 99.99%.
- Minimize read/write latency for storage without affecting the
availability SLA of the virtual machines.
- Ensure that neither a network load balancer nor a distributed network name (DNN) are required.
- Minimize administrative effort.
You need to recommend which type of storage to use and the minimum number of subnets required for the FCI.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have an Azure subscription.
You are designing a Microsoft SQL Server failover cluster instance (FCI) solution. The solution must meet the following requirements:
- Ensure that the FCI contains three virtual machines that run Windows
Server 2025.
- Place the virtual machines and storage resources in three
availability zones to provide an availability SLA of 99.99%.
- Minimize read/write latency for storage without affecting the
availability SLA of the virtual machines.
- Ensure that neither a network load balancer nor a distributed network name (DNN) are required.
- Minimize administrative effort.
You need to recommend which type of storage to use and the minimum number of subnets required for the FCI.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
The storage can use Fibre Channel, iSCSI, FCoE, or SAS for shared disk storage, or use locally attached storage with Storage Spaces Direct (S2D).
Box 1: Storage Spaces Direct
* Storage Spaces Direct
Storage Spaces Direct requires 2 and up to 16 Microsoft-approved servers with direct-attached SATA, SAS, NVMe, or persistent memory drives that are physically attached to just one server each. Each server must have at least two solid-state drives, and at least four more drives. The SATA and SAS devices should be behind a host-bus adapter (HBA) and SAS expander.
Box 2: 3
For a single application or service requiring high availability across three availability zones, you need a minimum of three subnets, with one subnet in each availability zone. This setup ensures that if one availability zone experiences an outage, your application can still operate from the remaining availability zones, maintaining its availability and fault tolerance.
Reference:
https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/failover-cluster-instance-storage-spaces-direct-manually-configure?
https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/performance-guidelines-best-practices-storage
https://learn.microsoft.com/en-us/azure/virtual-machines/disks-enable-ultra-ssd
https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/availability-group-manually-configure-tutorial-multi-subnet
Your company, named Contoso, Ltd., implements several Azure logic apps that have HTTP triggers. The logic apps provide access to an on-premises web service. Contoso establishes a partnership with another company named Fabrikam. IncL Fabrikam does not have an existing Azure Active Directory (Azure AD) tenant and uses third-party OAuth 2.0 identity management to authenticate its users. Developers at Fabrikam plan to use a subset of the logic apps to build applications that will integrate with the on-premises web service of Contoso.
You need to design a solution to provide the Fabrikam developers with access to the logic apps.
The solution must meet the following requirements:
- Requests to the logic apps from the developers must be limited to
lower rates than the requests from the users at Contoso.
- The developers must be able to rely on their existing OAuth 2.0
provider to gain access to the logic apps.
- The solution must NOT require changes to the logic apps.
- The solution must NOT use Azure AD guest accounts.
What should you include in the solution?
You need to design a solution to provide the Fabrikam developers with access to the logic apps.
The solution must meet the following requirements:
- Requests to the logic apps from the developers must be limited to
lower rates than the requests from the users at Contoso.
- The developers must be able to rely on their existing OAuth 2.0
provider to gain access to the logic apps.
- The solution must NOT require changes to the logic apps.
- The solution must NOT use Azure AD guest accounts.
What should you include in the solution?
Correct Answer: C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
You have an Azure subscription.
You plan to deploy a monitoring solution that will include the following:
- Azure Monitor Network Insights
- Application Insights
- Microsoft Sentinel
- VM insights
The monitoring solution will be managed by a single team.
What is the minimum number of Azure Monitor workspaces required?
You plan to deploy a monitoring solution that will include the following:
- Azure Monitor Network Insights
- Application Insights
- Microsoft Sentinel
- VM insights
The monitoring solution will be managed by a single team.
What is the minimum number of Azure Monitor workspaces required?
Correct Answer: D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
You have an Azure subscription that contains an Azure Data Lake Storage Gen2 account named storage1 and an Azure Synapse Analytics workspace named Workspace1. Workspace1 contains a serverless SQL pool and an Apache Spark pool.
You need to recommend a disaster recovery solution for storage1.
What should you include in the recommendation?
You need to recommend a disaster recovery solution for storage1.
What should you include in the recommendation?
Correct Answer: D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
You have an Azure subscription that contains resources in three Azure regions.
You need to implement Azure Key Vault to meet the following requirements:
- In the event of a regional outage, all keys must be readable.
- All the resources in the subscription must be able to access Key
Vault.
- The number of Key Vault resources to be deployed and managed must be
minimized.
How many instances of Key Vault should you implement?
You need to implement Azure Key Vault to meet the following requirements:
- In the event of a regional outage, all keys must be readable.
- All the resources in the subscription must be able to access Key
Vault.
- The number of Key Vault resources to be deployed and managed must be
minimized.
How many instances of Key Vault should you implement?
Correct Answer: D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
You have a .NET web service named Service1 that has the following requirements:
* Must read and write temporary files to the local file system.
* Must write to the Application event log.
You need to recommend a solution to host Service1 in Azure. The solution must meet the following requirements:
* Minimize maintenance overhead.
* Minimize costs.
What should you include in the recommendation?
* Must read and write temporary files to the local file system.
* Must write to the Application event log.
You need to recommend a solution to host Service1 in Azure. The solution must meet the following requirements:
* Minimize maintenance overhead.
* Minimize costs.
What should you include in the recommendation?
Correct Answer: C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Hotspot Question
You have an Azure subscription. The subscription contains virtual machines that run Windows Server.
You are designing a disaster recovery solution that will immediately deploy a new virtual machine when an existing virtual machine fails. The solution must meet the following requirements:
- New virtual machines must be deployed with all the required
configurations in place.
- Virtual machine deployments must use an infrastructure as code (IaC)
methodology.
- New virtual machines must be created by using standard Microsoft disk images.
- New virtual machines must be authorized by virtual machine
administrators.
- Virtual machine deployments must be managed by using CI/CD pipelines.
You need to recommend which service to use to manage the virtual machine deployment process and which artifact to use to create each virtual machine.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have an Azure subscription. The subscription contains virtual machines that run Windows Server.
You are designing a disaster recovery solution that will immediately deploy a new virtual machine when an existing virtual machine fails. The solution must meet the following requirements:
- New virtual machines must be deployed with all the required
configurations in place.
- Virtual machine deployments must use an infrastructure as code (IaC)
methodology.
- New virtual machines must be created by using standard Microsoft disk images.
- New virtual machines must be authorized by virtual machine
administrators.
- Virtual machine deployments must be managed by using CI/CD pipelines.
You need to recommend which service to use to manage the virtual machine deployment process and which artifact to use to create each virtual machine.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: Azure VM Image Builder
Azure VM Image Builder can be used to create custom VM images from standard Microsoft disk images.
This allows you to customize the image with specific software, configurations, and scripts.
The built images can then be used to deploy VMs with your desired configuration.
Box 2: Azure Resource Manager (ARM) template
Azure Resource Manager (ARM) Templates/Bicep
ARM templates are JSON-based templates that define the infrastructure required for deployment.
Bicep is a domain-specific language that simplifies the creation and management of ARM templates.
These templates allow you to define the VM configuration, including the disk image, size, and other settings.
They can be integrated into CI/CD pipelines for automated deployment.
Reference:
https://learn.microsoft.com/en-us/devops/deliver/what-is-infrastructure-as-code
https://luke.geek.nz/azure/Azure-Image-Builder-Build-Pipeline-with-Azure-DevOps/
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.
Several VMs are exhibiting network connectivity issues.
You need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.
Solution: Use the Azure Traffic Analytics solution in Azure Log Analytics to analyze the network traffic.
Does the solution meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.
Several VMs are exhibiting network connectivity issues.
You need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.
Solution: Use the Azure Traffic Analytics solution in Azure Log Analytics to analyze the network traffic.
Does the solution meet the goal?
Correct Answer: A
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
You have an on-premises network and an Azure subscription. The on-premises network has several branch offices.
A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server. Users access the shared files on VM1 from all the offices.
You need to recommend a solution to ensure that the users can access the shared files as quickly as possible if the Toronto branch office is inaccessible.
What should you include in the recommendation?
A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server. Users access the shared files on VM1 from all the offices.
You need to recommend a solution to ensure that the users can access the shared files as quickly as possible if the Toronto branch office is inaccessible.
What should you include in the recommendation?
Correct Answer: D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
You plan to deploy an app that will use an Azure Storage account.
You need to deploy the storage account.
The solution must meet the following requirements:
- Store the data of multiple users.
- Encrypt each user's data by using a separate key.
- Encrypt all the data in the storage account by using Microsoft keys
or customer-managed keys.
What should you deploy?
You need to deploy the storage account.
The solution must meet the following requirements:
- Store the data of multiple users.
- Encrypt each user's data by using a separate key.
- Encrypt all the data in the storage account by using Microsoft keys
or customer-managed keys.
What should you deploy?
Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).