Master the Designing Microsoft Azure Infrastructure Solutions AZ-305 Exam with Confidence!

You have a resource group named RG1 that contains the objects shown in the following table.

You need to configure permissions so that App1 can copy all the secrets from KV1 to KV2. App1 currently has the Get permission for the secrets in KV1.

Which additional permissions should you assign to App1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an on-premises network and an Azure subscription. The on-premises network has several branch offices.

A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server. Users access the shared files on VM1 from all the offices.

You need to recommend a solution to ensure that the users can access the shares files as quickly as possible if the Toronto branch office is inaccessible.

What should you include in the recommendation?

You store web access logs data in Azure Blob storage.

You plan to generate monthly reports from the access logs.

You need to recommend an automated process to upload the data to Azure SQL Database every month.

What should you include in the recommendation?

You have an Azure subscription that contains a Windows Virtual Desktop tenant.

You need to recommend a solution to meet the following requirements:

• Start and stop Windows Virtual Desktop session hosts based on business hours.
• Scale out Windows Virtual Desktop session hosts when required.
• Minimize compute costs.

What should you include in the recommendation?

You configure OAuth2 authorization in API Management as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

You plan to deploy an application named App1 that will run in containers on Azure Kubernetes Service (AKS) clusters. The AKS clusters will be distributed across four Azure regions.

You need to recommend a storage solution to ensure that updated container images are replicated automatically to all the Azure regions hosting the AKS clusters.

Which storage solution should you recommend?

You have an app named App1 that uses an on-premises Microsoft SQL Server database named DB1.

You plan to migrate DB1 to an Azure SQL managed instance.

You need to enable customer-managed Transparent Data Encryption (TDE) for the instance. The solution must maximize encryption strength.

Which type of encryption algorithm and key length should you use for the TDE protector?

You have two on-premises Microsoft SQL Server 2017 instances that host an Always On availability group named AG1. AG1 contains a single database named DB1.

You have an Azure subscription that contains a virtual machine named VM1VM1 runs Linux and contains a SQL Server 2019 instance.

You need to migrate DB1 to VMI. The solution must minimize downtime on DBI. What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your on-premises datacenter contains a server that runs Linux and hosts a Java app named Appl. App1 has the following characteristics:

• App1 is an interactive app that users access by using HTTPS connections.

• The number of connections to App1 changes significantly throughout the day.

• App1 runs multiple concurrent instances.

• App1 requires major changes to run in a container.

You plan to migrate App1 to Azure.

You need to recommend a compute solution for Appl. The solution must meet the following requirements:

• The solution must run multiple instances of Appl.

• The number of instances must be managed automatically depending on the load.

• Administrative effort must be minimized.

What should you include in the recommendation?

You need to recommend a solution to meet the database retention requirement. What should you recommend?