Home
Microsoft
AZ-305: Designing Microsoft Azure Infrastructure Solutions Dumps

Free Microsoft AZ-305 Exam Dumps November 2026

Here you can find all the free questions related with Microsoft Designing Microsoft Azure Infrastructure Solutions (AZ-305) exam. You can also find on this page links to recently updated premium files with which you can practice for actual Microsoft Designing Microsoft Azure Infrastructure Solutions Exam. These premium versions are provided as AZ-305 exam practice tests, both as desktop software and browser based application, you can use whatever suits your style. Feel free to try the Designing Microsoft Azure Infrastructure Solutions Exam premium files for free, Good luck with your Microsoft Designing Microsoft Azure Infrastructure Solutions Exam.

Question No: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Storage account that contains two 1-GB data files named File1 and File2. The data files are set to use the archive access tier.

You need to ensure that File1 is accessible immediately when a retrieval request is initiated.

Solution: For File1, you set Access tier to Cool.

Does this meet the goal?

AYes

BNo

Show Answer

Suggested Answer: A Explanation:

The data in the cool tier is 'considered / intended to be stored for 30 days'. But this is not a must. You can store data indefinitely in the cool tier. The mentioned reference (see below) even gives an example of large scientific or otherwise large data which is stored for long duration in the cool tier.

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal

Question No: 2

MultipleChoice

You have an Azure subscription that contains an Azure SQL database.

You are evaluating whether to use Azure reservations on the Azure SQL database.

Which tool should you use to estimate the potential savings?

Options

AThe Purchase reservations blade in the Azure portal

BThe Advisor blade in the Azure portal

CThe SQL database blade in the Azure portal

Answer
AExplanation

Buy reserved capacity

Select All services > Reservations.

Select Add and then in the Purchase Reservations pane, select SQL Database to purchase a new reservation for SQL Database.

Fill in the required fields. Existing databases in SQL Database and SQL Managed Instance that match the attributes you select qualify to get the reserved capacity discount. The actual number of databases or managed instances that get the discount depends on the scope and quantity selected.

Review the cost of the capacity reservation in the Costs section.

Select Purchase.

Select View this Reservation to see the status of your purchase.

https://docs.microsoft.com/en-us/azure/azure-sql/database/reserved-capacity-overview

Question No: 3

MultipleChoice

NO: 237

You are designing a solution that will include containerized applications running in an Azure Kubernetes Service (AKS) cluster.

You need to recommend a load balancing solution for HTTPS traffic. The solution must meet the following requirements:

Automatically configure load balancing rules as the applications are deployed to the cluster.

Support Azure Web Application Firewall (WAF).

Support cookie-based affinity.

Support URL routing.

What should you include the recommendation?

Options

Aan NGINX ingress controller

BApplication Gateway Ingress Controller (AGIC)

Can HTTP application routing ingress controller

Dthe Kubernetes load balancer service

Answer
BExplanation

Much like the most popular Kubernetes Ingress Controllers, the Application Gateway Ingress Controller provides several features, leveraging Azure's native Application Gateway L7 load balancer. To name a few:

URL routing

Cookie-based affinity

Secure Sockets Layer (SSL) termination

End-to-end SSL

Support for public, private, and hybrid web sites

Integrated support of Azure web application firewall

Application Gateway redirection support isn't limited to HTTP to HTTPS redirection alone. This is a generic redirection mechanism, so you can redirect from and to any port you define using rules. It also supports redirection to an external site as well.

https://docs.microsoft.com/en-us/azure/application-gateway/features

Question No: 4

MultipleChoice

You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:

* Provide access to the full .NET framework.

* Provide redundancy if an Azure region fails.

* Grant administrators access to the operating system to install custom application dependencies.

Solution: You deploy an Azure virtual machine to two Azure regions, and you deploy an Azure Application Gateway.

Does this meet the goal?

Options

AYes

BNo

Answer
BExplanation

You need to deploy two Azure virtual machines to two Azure regions, but also create a Traffic Manager profile.

Question No: 5

MultipleChoice

You are designing a message application that will run on an on-premises Ubuntu virtual machine. The application will use Azure Storage queues.

You need to recommend a processing solution for the application to interact with the storage queues. The solution must meet the following requirements:

Create and delete queues daily.

Be scheduled by using a CRON job.

Upload messages every five minutes.

What should developers use to interact with the queues?

Options

AAzure CLI

BAzCopy

CAzure Data Factory

D.NET Core

Answer
DExplanation

https://docs.microsoft.com/en-us/azure/storage/queues/storage-tutorial-queues

Question No: 6

MultipleChoice

You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region.

You are designing a disaster recovery plan for KeyVault1.

You plan to back up the keys in KeyVault1.

You need to identify to where you can restore the backup.

What should you identify?

Options

AKeyVault1 only

Bthe same region only

Cthe same geography only

Dany region worldwide

Answer
C

Question No: 7

MultipleChoice

You plan to deploy an Azure SQL database that will store Personally Identifiable Information (Pll). You need to ensure that only privileged users can view the Pll.

What should you include in the solution?

Options

ATransparent Data Encryption (TDE)

BData Discovery & Classification

Cdynamic data masking

Drole-based access control (RBAC)

Answer
C

Question No: 8

OrderList

You need to configure an Azure policy to ensure that the Azure SQL databases have TDE enabled. The solution must meet the security and compliance requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer
Explanation

https://docs.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources

Question No: 9

Hotspot

You have an Azure Load Balancer named LB1 that balances requests to five Azure virtual machines.

You need to develop a monitoring solution for LB1. The solution must generate an alert when any of the following conditions are met:

A virtual machine is unavailable.

Connection attempts exceed 50,000 per minute.

Which signal should you include in the solution for each condition? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Answer

Explanation

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-standard-diagnostics

Question No: 10

MultipleChoice

You are designing a solution that will include containerized applications running in an Azure Kubernetes Service (AKS) cluster.

You need to recommend a load balancing solution for HTTPS traffic. The solution must meet the following requirements:

Automatically configure load balancing rules as the applications are deployed to the cluster.

Support Azure Web Application Firewall (WAF).

Support cookie-based affinity.

Support URL routing.

What should you include the recommendation?

Options

Aan NGINX ingress controller

BApplication Gateway Ingress Controller (AGIC)

Can HTTP application routing ingress controller

Dthe Kubernetes load balancer service

Answer
BExplanation

URL routing

Cookie-based affinity

Secure Sockets Layer (SSL) termination

End-to-end SSL

Support for public, private, and hybrid web sites

Integrated support of Azure web application firewall

https://docs.microsoft.com/en-us/azure/application-gateway/features

Question No: 11

Hotspot

You need to recommend an Azure Storage Account configuration for two applications named Application1 and Applications. The configuration must meet the following requirements:

* Storage for Application1 must provide the highest possible transaction rates and the lowest possible latency.

* Storage for Application2 must provide the lowest possible storage costs per GB.

* Storage for both applications must be optimized for uploads and downloads.

* Storage for both applications must be available in an event of datacenter failure.

What should you recommend ? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point

Answer

Explanation

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview

https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy

Question No: 12

MultipleChoice

You are planning an Azure IoT Hub solution that will include 50,000 IoT devices.

Each device will stream data, including temperature, device ID, and time dat

a. Approximately 50,000 records will be written every second. The data will be visualized in near real time.

You need to recommend a service to store and query the data.

Which two services can you recommend? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Options

AAzure Table Storage

BAzure Event Grid

CAzure Cosmos DB SQL API

DAzure Time Series Insights

Answer
C, DExplanation

D: Time Series Insights is a fully managed service for time series data. In this architecture, Time Series Insights performs the roles of stream processing, data store, and analytics and reporting. It accepts streaming data from either IoT Hub or Event Hubs and stores, processes, analyzes, and displays the data in near real time.

C: The processed data is stored in an analytical data store, such as Azure Data Explorer, HBase, Azure Cosmos DB, Azure Data Lake, or Blob Storage.

https://docs.microsoft.com/en-us/azure/architecture/data-guide/scenarios/time-series

Question No: 13

MultipleChoice

You plan to deploy multiple instances of an Azure web app across several Azure regions.

You need to design an access solution for the app. The solution must meet the following replication requirements;

* Support rate limiting.

* Balance requests between all instances.

* Ensure that users can access the app in the event of a regional outage.

Solution: You use Azure Traffic Manager to provide access to the app Does this meet the goal?

Options

AYes

BNo

Answer
A

Question No: 14

Hotspot

Your company has two on-premises sites in New York and Los Angeles and Azure virtual networks in the East US Azure region and the West US Azure region. Each on-premises site has Azure ExpressRoute circuits to both regions.

You need to recommend a solution that meets the following requirements:

Outbound traffic to the Internet from workloads hosted on the virtual networks must be routed through the closest available on-premises site.

If an on-premises site fails, traffic from the workloads on the virtual networks to the Internet must reroute automatically to the other site.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

https://docs.microsoft.com/ja-jp/azure/expressroute/designing-for-disaster-recovery-with-expressroute-privatepeering

https://docs.microsoft.com/en-us/azure/expressroute/expressroute-optimize-routing#suboptimal-routing-from-customer-to-microsoft

Answer

Question No: 15

MultipleChoice

Your company has the divisions shown m the following table.

Sub1 contains an Azure App Service web app named App1. Appl uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

Options

AEnable Azure AD pass-through authentication and update the sign-in endpoint

BConfigure the Azure AD provisioning service.

CConfigure assignments tor the fabnkam.com users by using Azure AD Privileged Identity Management (PIM).

DConfigure Supported account types in the application registration and update the sign-in endpoint.

Answer
D

Question No: 16

MultipleChoice

Your company develops Azure applications.

You need to recommend a solution for the deployment of Azure subscriptions. The solution must meet the following requirements:

Options

AProvision resource groups.

BSupport deployments across all Azure regions.

CCreate custom role-based access control (RBAC) roles.

DProvide consistent virtual machine and virtual network configurations.

EWhat should you include in the recommendation?

Answer
DExplanation

Resource groups: You can scope your deployment to a resource group. You use an Azure Resource Manager template (ARM template) for the deployment.

Regions: If you have a template spec in one region and want to move it to new region, you can export the template spec and redeploy it.

RBAC: Azure role-based access control (Azure RBAC) is the authorization system you use to manage access to Azure resources. To grant access, you assign roles to users, groups, service principals, or managed identities at a particular scope. In addition to using Azure PowerShell or the Azure CLI, you can assign roles using Azure Resource Manager templates. Templates can be helpful if you need to deploy resources consistently and repeatedly

You can setup Virtual machines and virtual network configurations in an Azure Resource Manager template.

https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/microsoft-resources-move-regions

https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-template

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/template-description

Question No: 17

MultipleChoice

You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:

* Provide access to the full .NET framework.

* Provide redundancy if an Azure region fails.

* Grant administrators access to the operating system to install custom application dependencies.

Solution: You deploy a Azure virtual machine scale set that uses autoscaling.

Does this meet the goal?

Options

AYes

BNo

Answer
BExplanation

Instead, you should deploy two Azure virtual machines to two Azure regions, and you create a Traffic Manager profile.

Question No: 18

MultipleChoice

You are designing an order processing system in Azure that will contain the Azure resources shown in the following table.

The order processing system will have the following transaction flow:

A customer will place an order by using App1.

When the order is received, App1 will generate a message to check for product availability at vendor 1 and vendor 2.

An integration component will process the message, and then trigger either Function1 or Function2 depending on the type of order.

Once a vendor confirms the product availability, a status message for App1 will be generated by Function1 or Function2.

All the steps of the transaction will be logged to storage1.

Which type of resource should you recommend for the integration component?

D18912E1457D5D1DDCBD40AB3BF70D5D

Which type of resource should you recommend for the integration component?

Options

Aan Azure Data Factory pipeline

Ban Azure Service Bus queue

Can Azure Event Grid domain

Dan Azure Event Hubs capture

Answer
AExplanation

A data factory can have one or more pipelines. A pipeline is a logical grouping of activities that together perform a task.

The activities in a pipeline define actions to perform on your data.

Data Factory has three groupings of activities: data movement activities, data transformation activities, and control activities.

Azure Functions is now integrated with Azure Data Factory, allowing you to run an Azure function as a step in your data factory pipelines.

https://docs.microsoft.com/en-us/azure/data-factory/concepts-pipelines-activities

Question No: 19

Hotspot

You plan to deploy a custom database solution that will have multiple instances as shown in the following table.

Client applications will access database servers by using db.contoso.com.

You need to recommend load balancing services for the planned deployment. The solution must meet the following requirements:

Access to at least one database server must be maintained in the event of a regional outage.

The virtual machines must not connect to the internet directly.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Answer

Explanation

https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview

Question No: 20

Hotspot

You need to recommend a solution to ensure that App1 can access the third-party credentials and access strings. The solution must meet the security requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Answer

Explanation

https://docs.microsoft.com/en-us/azure/key-vault/general/authentication

Limited Time Offer

25%

Off

Get Premium AZ-305 Questions as Interactive Web-Based Practice Test or PDF