Practice Examples and Dumps & Tips for 2026 Latest AZ-305 Valid Tests Dumps
Latest [Mar 23, 2026] 100% Passing Guarantee - Brilliant AZ-305 Exam Questions PDF
Microsoft AZ-305 exam is designed to test a candidate's knowledge and skills in designing and implementing Azure infrastructure solutions. It covers a wide range of topics, including Azure virtual machines, storage solutions, networking, and security. AZ-305 exam is intended for experienced Azure professionals who have a good understanding of the platform and its various services. Candidates are required to have a solid understanding of Azure architecture and be able to design and implement solutions that meet the specific needs of their organization.
NEW QUESTION # 212
You need to ensure that users managing the production environment are registered for Azure MFA and must authenticate by using Azure MFA when they sign in to the Azure portal. The solution must meet the authentication and authorization requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-mfa-policy
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies
NEW QUESTION # 213
You have an Azure subscription that contains an Azure Blob storage account named store1.
You have an on-premises file server named Setver1 that runs Windows Sewer 2016. Server1 stores 500 GB of company files.
You need to store a copy of the company files from Server 1 in store1.
Which two possible Azure services achieve this goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point
- A. an On-premises data gateway
- B. an integration account
- C. an Azure Batch account
- D. Azure Data factory
- E. an Azure Import/Export job
Answer: D,E
Explanation:
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-from-blobs
https://docs.microsoft.com/en-us/answers/questions/31113/fastest-method-to-copy-500gb-table-from-on-premise.html
NEW QUESTION # 214
Drag and Drop Question
You have an on-premises network that uses on IP address space of 172.16.0.0/16.
You plan to deploy 25 virtual machines to a new azure subscription.
You identity the following technical requirements:
- All Azure virtual machines must be placed on the same subnet subnet1.
- All the Azure virtual machines must be able to communicate with all
on premises severs.
- The servers must be able to communicate between the on-premises
network and Azure by using a site to site VPN.
You need to recommend a subnet design that meets the technical requirements.
What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnet. Each network address may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 215
You have an Azure Active Directory (Azure AD) tenant.
You plan to use Azure Monitor to monitor user sign-ins and generate alerts based on specific user sign-in events.
You need to recommend a solution to trigger the alerts based on the events.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Box 1: An Azure Log Analytics workspace
To be able to create an alert we send the Azure AD logs to An Azure Log Analytics workspace.
Note: You can forward your AAD logs and events to either an Azure Storage Account, an Azure Event Hub, Log Analytics, or a combination of all of these.
Box 2: Log
Ensure Resource Type is an analytics source like Log Analytics or Application Insights and signal type as Log.
Reference:
https://4sysops.com/archives/how-to-create-an-azure-ad-admin-login-alert/
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-log
NEW QUESTION # 216
Your organization has developed and deployed several Azure App Service Web and API applications. The applications use Azure Key Vault to store several authentication, storage account, and data encryption keys. Several departments have the following requests to support the applications:
You need to recommend the appropriate Azure service for each department request.
What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 217
You need to design an architecture to capture the creation of users and the assignment of roles. The captured data must be stored in Azure Cosmos DB.
Which Azure services should you include in the design? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Diagram Description automatically generated
1. AAD audit log -> Event Hub (other two choices, LAW, storage, but not available in this question)
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/tutorial-azure-monitor-stream-logs-to
2. Azure function has the Event hub trigger and Cosmos output binding
a. Event Hub trigger for function
https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-event-hubs-trigger?tabs=csharp
NEW QUESTION # 218
Drag and Drop Question
A company is modernizing its infrastructure by moving workloads to the cloud. These workloads comprise virtual machines, databases, and applications.
You need to identify the appropriate phases of workload migration.
Which three steps should you identify in sequence? To answer, move the appropriate actions from the list of possible actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
You should identify the following migration steps in order:
1. Assess
2. Deploy
3. Release
The Microsoft Adoption Framework for Cloud provides you with guidelines to construct a plan for your journey into the cloud. The Microsoft Cloud Adoption Framework envisages the following main methodologies: Define strategy, Plan, Ready, Migrate, and Innovate.
First, during the assessment step of the Migrate methodology, you should assess your workloads in terms of calculating the migration costs and determining the required modernization effort and deployment tools.
Next, you should deploy your workloads by moving them, either without modernizing (lift-and- shift) or modernized, into the cloud.
Finally, you should test, optimize, and document your migrated workloads and, if the result is as expected, then you can release the workloads to your users. During this phase you should hand over workloads and documentation to your operation, security, and governance teams.
You should not identify Plan as one of the Migration steps. According to the Microsoft Adoption Framework for Cloud, during the Plan step you assess your digital estate (which workloads you can move as they are, which have to be modernized or rebuilt, which workloads you do not need anymore), align it with the business outcomes, evaluate skill gaps, and plan for adoption & change management. As such, the Plan step has to be carried out before you start your migration.
You should not identify Ready as one of the Migration steps. According to the Microsoft Adoption Framework for Cloud, during the Ready step you need to create your target environment, called the landing zone. As soon as your landing zone is in place, you are ready to start migration.
NEW QUESTION # 219
You have several Azure App Service web apps that use Azure Key Vault to store data encryption keys.
Several departments have the following requests to support the web app:
Which service should you recommend for each department's request? To answer, configure the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
NEW QUESTION # 220
You need to recommend a solution that meets the file storage requirements for App2.
What should you deploy to the Azure subscription and the on-premises network? To answer, drag the appropriate services to the correct locations. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, application Description automatically generated
Box 1: Azure Files
Scenario: App2 has the following file storage requirements:
* Save files to an Azure Storage account.
* Replicate files to an on-premises location.
* Ensure that on-premises clients can read the files over the LAN by using the SMB protocol.
Box 2: Azure File Sync
Use Azure File Sync to centralize your organization's file shares in Azure Files, while keeping the flexibility, performance, and compatibility of an on-premises file server. Azure File Sync transforms Windows Server into a quick cache of your Azure file share. You can use any protocol that's available on Windows Server to access your data locally, including SMB, NFS, and FTPS. You can have as many caches as you need across the world.
Reference:
https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-deployment-guide
NEW QUESTION # 221
To meet the authentication requirements of Fabrikam, what should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
1
1
0
NEW QUESTION # 222
You have an Azure subscription.
You plan to deploy five storage accounts that will store block blobs and five storage accounts that will host file shares. The file shares will be accessed by using the SMB protocol.
You need to recommend an access authorization solution for the storage accounts. The solution must meet the following requirements:
* Maximize security.
* Prevent the use of shared keys.
* Whenever possible, support time-limited access.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 223
Hotspot Question
You have an Azure subscription that is linked to an Azure Active Directory Premium Plan 2 tenant.
The tenant has multi-factor authentication (MFA) enabled for all users.
You have the named locations shown in the following table.
You have the users shown in the following table.
You plan to deploy the Conditional Access policies shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 224
You have an on-premises app named App1.
Customers use App1 to manage digital images.
You plan to migrate App1 to Azure.
You need to recommend a data storage solution for Appl. The solution must meet the following image storage requirements:
* Encrypt images at rest.
* Allow files up to 50 MB.
* Manage access to the images by using Azure Web Application Firewall (WAF) on Azure Front Door.
The solution must meet the following customer account requirements:
* Support automatic scale out of the storage.
* Maintain the availability of App1 if a datacenter fails.
* Support reading and writing data from multiple Azure regions.
Which service should you include in the recommendation for each type of data? To answer, drag the appropriate services to the correct type of data. Each service may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 225
You need to design an architecture to capture the creation of users and the assignment of roles. The captured data must be stored in Azure Cosmos DB.
Which Azure services should you include in the design? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Diagram Description automatically generated
1. AAD audit log -> Event Hub (other two choices, LAW, storage, but not available in this question)
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/tutorial-azure-monitor-stream-logs-to
2. Azure function has the Event hub trigger and Cosmos output binding
a. Event Hub trigger for function
https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-event-hubs-trigger?tabs=csharp
NEW QUESTION # 226
You need to design a highly available Azure SQL database that meets the following requirements:
- Failover between replicas of the database must occur without any data loss.
- The database must remain available in the event of a zone outage.
- Costs must be minimized.
Which deployment option should you use?
- A. Azure SQL Database Basic
- B. Azure SQL Database Hyperscale
- C. Azure SQL Managed Instance Business Critical
- D. Azure SQL Database Premium
Answer: D
Explanation:
Azure SQL Database Premium tier supports multiple redundant replicas for each database that are automatically provisioned in the same datacenter within a region. This design leverages the SQL Server AlwaysON technology and provides resilience to server failures with 99.99% availability SLA and RPO=0.
With the introduction of Azure Availability Zones, we are happy to announce that SQL Database now offers built-in support of Availability Zones in its Premium service tier.
Reference:
https://azure.microsoft.com/en-us/blog/azure-sql-database-now-offers-zone-redundant-premium- databases-and-elastic-pools/
NEW QUESTION # 227
You need to recommend a solution for the App1 maintenance task. The solution must minimize costs.
What should you include in the recommendation?
- A. an App Service WebJob
- B. an Azure virtual machine
- C. an Azure logic app
- D. an Azure function
Answer: C
Explanation:
https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-powershell?tabs=portal
https://learn.microsoft.com/en-us/azure/azure-functions/functions-create-scheduled-function#create-a-timer- triggered-function
NEW QUESTION # 228
You plan to import data from your on-premises environment to Azure. The data Is shown in the following table.
What should you recommend using to migrate the data? To answer, drag the appropriate tools to the correct data sources-Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/dms/tutorial-sql-server-to-azure-sql
https://docs.microsoft.com/en-us/azure/cosmos-db/import-data
NEW QUESTION # 229
You have two app registrations named App1 and App2 in Azure AD. App1 supports role-based access control (RBAC) and includes a role named Writer.
You need to ensure that when App2 authenticates to access App1, the tokens issued by Azure AD include the Writer role claim.
Which blade should you use to modify each app registration? To answer, drag the appropriate blades to the correct app registrations. Each blade may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 230
You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region.
You are designing a disaster recovery plan for KeyVault1.
You plan to back up the keys in KeyVault1.
You need to identify to where you can restore the backup.
What should you identify?
- A. any region worldwide
- B. KeyVault1 only
- C. the same geography only
- D. the same region only
Answer: C
NEW QUESTION # 231
A company plans to implement an HTTP-based API to support a web app. The web app allows customers to check the status of their orders.
The API must meet the following requirements:
Implement Azure Functions
Provide public read-only operations
Do not allow write operations
You need to recommend configuration options.
What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/app-service/overview-authentication-authorization
NEW QUESTION # 232
You need to design an Azure policy that will implement the following functionality:
* For new resources, assign tags and values that match the tags and values of the resource group to which the resources are deployed.
* For existing resources, identify whether the tags and values match the tags and values of the resource group that contains the resources.
* For any non-compliant resources, trigger auto-generated remediation tasks to create missing tags and values.
The solution must use the principle of least privilege.
What should you include in the design? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Modify
Modify is used to add, update, or remove properties or tags on a resource during creation or update. A common example is updating tags on resources such as costCenter. Existing non-compliant resources can be remediated with a remediation task. A single Modify rule can have any number of operations.
Box 2: A managed identity with the Contributor role
Managed identity
How remediation security works: When Azure Policy runs the template in the deployIfNotExists policy definition, it does so using a managed identity. Azure Policy creates a managed identity for each assignment, but must have details about what roles to grant the managed identity.
Contributor role
The Contributor role grants the required access to apply tags to any entity.
Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects
https://docs.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources
https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects#modify
NEW QUESTION # 233
......
The Microsoft AZ-305 exam covers a wide range of topics, including Azure compute, storage, networking, security, and monitoring. It also tests the candidate's ability to design and implement solutions that meet business and technical requirements, as well as their knowledge of Azure services and their integration with other Microsoft technologies.
AZ-305 are Available for Instant Access: https://simplilearn.lead1pass.com/Microsoft/AZ-305-practice-exam-dumps.html