Skip to main content

AZ-305 Designing Microsoft Azure Infrastructure Solutions

  • Microsoft
  • 5 free sample questions

About this exam

AZ-305 is the Microsoft exam Designing Microsoft Azure Infrastructure Solutions. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
AZ-305
Vendor
Microsoft
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for AZ-305.

Question 1

You plan to migrate App1 to Azure. The solution must meet the authentication and authorization requirements. Which type of endpoint should App1 use to obtain an access token?

  1. Option A:
    Azure Instance Metadata Service (IMDS)
  2. Option B:
    Azure AD
  3. Option C:
     Azure Service Management
  4. Option D:
    Microsoft identity platform
Show answer and explanation

Correct answer: D

Scenario: To access the resources in Azure, App1 must use the managed identity of the virtual machines that will host the app. Managed identities provide an identity for applicationsto use when connecting to resources that support Azure Active Directory (Azure AD) authentication. Applications may use the managed identity to obtain Azure AD tokens.

Question 2

You plan to migrate App1 to Azure. You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 dat a. The solution must meet the security and compliance requirements. Whatshould you include in the recommendation?

  1. Option A:
    a private endpoint
  2. Option B:
    a service endpoint that has a service endpoint policy
  3. Option C:
    Azure public peering for an ExpressRoute circuit
  4. Option D:
     Microsoft peering for an ExpressRoute circuit
Show answer and explanation

Correct answer: A

Private Endpointsecurely connect to storage accountsfrom on-premises networks that connect to the VNet using VPN or ExpressRoutes with private-peering. Private Endpoint also secure yourstorage account by configuring the storage firewall to block all connections on the public endpoint for the storage service.  
See all 5 free sample questions