最新的Microsoft Designing Microsoft Azure Infrastructure Solutions - AZ-305免費考試真題
A company plans to implement an HTTP-based API to support a web app. The web app allows customers to check the status of their orders.
The API must meet the following requirements:
Implement Azure Functions
Provide public read-only operations
Do not allow write operations
You need to recommend configuration options.
What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.
The API must meet the following requirements:
Implement Azure Functions
Provide public read-only operations
Do not allow write operations
You need to recommend configuration options.
What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.
正確答案:
Explanation:
Allowed authentication methods: GET only
Authorization level: Anonymous
The option is Allow Anonymous requests. This option turns on authentication and authorization in App Service, but defers authorization decisions to your application code. For authenticated requests, App Service also passes along authentication information in the HTTP headers.
This option provides more flexibility in handling anonymous requests.
rences:
https://docs.microsoft.com/en-us/azure/app-service/overview-authentication-authorization
You have an Azure subscription that contains 1,000 resources.
You need to generate compliance reports for the subscription. The solution must ensure that the resources can be grouped by department.
What should you use to organize the resources?
You need to generate compliance reports for the subscription. The solution must ensure that the resources can be grouped by department.
What should you use to organize the resources?
正確答案: B
Your company deploys several Linux and Windows virtual machines (VMs) to Azure. The VMs are deployed with the Microsoft Dependency Agent and the Log Analytics Agent installed by using Azure VM extensions.
On-premises connectivity has been enabled by using Azure ExpressRoute.
You need to design a solution to monitor the VMs.
Which Azure monitoring services should you use? To answer, select the appropriate Azure monitoring services in the answer area.
NOTE: Each correct selection is worth one point.
On-premises connectivity has been enabled by using Azure ExpressRoute.
You need to design a solution to monitor the VMs.
Which Azure monitoring services should you use? To answer, select the appropriate Azure monitoring services in the answer area.
NOTE: Each correct selection is worth one point.
正確答案:
Explanation:
Box 1: Azure Traffic Analytics
Traffic Analytics is a cloud-based solution that provides visibility into user and application activity in cloud networks. Traffic analytics analyzes Network Watcher network security group (NSG) flow logs to provide insights into traffic flow in your Azure cloud. With traffic analytics, you can:
Identify security threats to, and secure your network, with information such as open-ports, applications attempting internet access, and virtual machines (VM) connecting to rogue networks.
Visualize network activity across your Azure subscriptions and identify hot spots.
Understand traffic flow patterns across Azure regions and the internet to optimize your network deployment for performance and capacity.
Pinpoint network misconfigurations leading to failed connections in your network.
Box 2: Azure Service Map
Service Map automatically discovers application components on Windows and Linux systems and maps the communication between services. With Service Map, you can view your servers in the way that you think of them: as interconnected systems that deliver critical services. Service Map shows connections between servers, processes, inbound and outbound connection latency, and ports across any TCP-connected architecture, with no configuration required other than the installation of an agent.
References:
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics
https://docs.microsoft.com/en-us/azure/azure-monitor/insights/service-map
A company needs a datastore created in Azure for an application. Below are the key requirements for the data store.
Ability to store JSON based items
Ability to use SQL like queries on the datastore
Ability to provide low latency access to data items
Which of the following would you consider as the data store?
Ability to store JSON based items
Ability to use SQL like queries on the datastore
Ability to provide low latency access to data items
Which of the following would you consider as the data store?
正確答案: A
You have the Free edition of a hybrid Azure Active Directory (Azure AD) tenant. The tenant uses password hash synchronization.
You need to recommend a solution to meet the following requirements:
Prevent Active Directory domain user accounts from being locked out as the result of brute force attacks targeting Azure AD user accounts.
Block legacy authentication attempts to Azure AD integrated apps.
Minimize costs.
What should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You need to recommend a solution to meet the following requirements:
Prevent Active Directory domain user accounts from being locked out as the result of brute force attacks targeting Azure AD user accounts.
Block legacy authentication attempts to Azure AD integrated apps.
Minimize costs.
What should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正確答案:
Explanation:
Smart lockout; Enable security defaults
Smart lockout mitigates password attacks. Because the tenant is Free, security defaults are the cost-free option for blocking legacy authentication.
You plan to use an Azure Storage account to store data assets.
You need to recommend a solution that meets the following requirements:
* Supports immutable storage
* Disables anonymous access to the storage account
* Supports access control list (ACL)-based Azure AD permissions
What should you include in the recommendation?
You need to recommend a solution that meets the following requirements:
* Supports immutable storage
* Disables anonymous access to the storage account
* Supports access control list (ACL)-based Azure AD permissions
What should you include in the recommendation?
正確答案: B
You are designing an Azure Cosmos DB solution that will host multiple writable replicas in multiple Azure regions.
You need to recommend the strongest database consistency level for the design. The solution must meet the following requirements:
Provide a latency-based Service Level Agreement (SLA) for writes.
Support multiple regions.
Which consistency level should you recommend?
You need to recommend the strongest database consistency level for the design. The solution must meet the following requirements:
Provide a latency-based Service Level Agreement (SLA) for writes.
Support multiple regions.
Which consistency level should you recommend?
正確答案: A
說明：（僅 Fast2test 成員可見）
You have an Azure subscription that contains an Azure Data Lake Storage Gen2 account named storage1 and an Azure Synapse Analytics workspace named Workspace1. Workspace! contains a serverless SQL pool and an Apache Spark pool.
You need to recommend a disaster recovery solution for storage1.
What should you include in the recommendation?
You need to recommend a disaster recovery solution for storage1.
What should you include in the recommendation?
正確答案: A
說明：（僅 Fast2test 成員可見）
You have 12 on-premises data sources that contain customer information and consist of Microsoft SQL Server, MySQL, and Oracle databases.
You have an Azure subscription.
You plan to create an Azure Data Lake Storage account that will consolidate the customer information for analysis and reporting.
You need to recommend a solution to automatically copy new information from the data sources to the Data Lake Storage account by using extract, transform and load (ETL). The solution must minimize administrative effort.
What should you include in the recommendation?
You have an Azure subscription.
You plan to create an Azure Data Lake Storage account that will consolidate the customer information for analysis and reporting.
You need to recommend a solution to automatically copy new information from the data sources to the Data Lake Storage account by using extract, transform and load (ETL). The solution must minimize administrative effort.
What should you include in the recommendation?
正確答案: B
You have five datacenters across North America and Europe.
You have an Azure subscription.
You need to recommend a solution to provide connectivity between the datacenters and Azure. The solution must meet the following requirements:
* Ensure that apps hosted in a datacenter can access the resources hosted in Azure and the other datacenters.
* Ensure that apps hosted in Azure can access the resources hosted in the datacenters.
* Support the central management of network routes.
* Support the central management of firewall rules.
* Minimize administrative effort.
What should you include in the recommendation?
You have an Azure subscription.
You need to recommend a solution to provide connectivity between the datacenters and Azure. The solution must meet the following requirements:
* Ensure that apps hosted in a datacenter can access the resources hosted in Azure and the other datacenters.
* Ensure that apps hosted in Azure can access the resources hosted in the datacenters.
* Support the central management of network routes.
* Support the central management of firewall rules.
* Minimize administrative effort.
What should you include in the recommendation?
正確答案: B
說明：（僅 Fast2test 成員可見）
You have an Azure subscription.
You are designing a deployment solution for the Azure App Service web apps shown in the following table.
You need to recommend a compute solution for the apps.
What should you include in the recommendation for each app? To answer, drag the appropriate recommendations to the correct apps. Each recommendation may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE Each correct selection is worth one point.
You are designing a deployment solution for the Azure App Service web apps shown in the following table.
You need to recommend a compute solution for the apps.
What should you include in the recommendation for each app? To answer, drag the appropriate recommendations to the correct apps. Each recommendation may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE Each correct selection is worth one point.
正確答案:
Explanation:
