| Exam Code | AZ-305 |
| Exam Name | Designing Microsoft Azure Infrastructure Solutions |
| Questions | 371 Questions Answers With Explanation |
| Update Date | July 16,2026 |
| Price |
Was : |
Welcome to Certsleader, your ultimate source for top-quality AZ-305 dumps tailored for Microsoft AZ-305 exam. Our comprehensive resources are designed to help you excel in your exam preparations and achieve your certification goals. Whether you are a beginner looking to start a career in Microsoft or an experienced professional seeking to advance your skills, Certsleader has the right tools to support your journey.
At Certsleader, we are committed to your success. Our practice questions answers are designed to improve your knowledge and help you pass your exams on the first attempt with high scores. In the rare event that you do not succeed, we offer a full refund, taking responsibility for your satisfaction.
Join thousands of satisfied learners who have successfully passed their certification exams with Certsleader. Explore our study materials, download your PDF files, and take the first step towards a rewarding IT career today.
After you migrate App1 to Azure, you need to enforce the data modification requirements to meet the security and compliance requirements. What should you do?
A. Create Azure RBAC assignments.
B. Create an access policy for the blob service.
C. Modify the access level of the blob service.
D. Implement Azure resource locks.
You have 12 on-premises data sources that contain customer information and consist of Microsoft SQL Server, MySQL, and Oracle databases. You have an Azure subscription. You plan to create an Azure Data Lake Storage account that will consolidate the customer information for analysis and reporting. You need to recommend a solution to automatically copy new information from the data sources to the Data Lake Storage account by using extract, transform and load (ETL). The solution must minimize administrative effort. What should you include in the recommendation?
A. Azure Data Factory
B. Azure Data Explorer
C. Azure Data Share
D. Azure Data Studio
You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region. You are designing a disaster recovery plan for KeyVault1. You plan to back up the keys in KeyVault1. You need to identify to where you can restore the backup. What should you identify?
A. KeyVault1 only
B. the same region only
C. the same geography only
D. any region worldwide
You have multiple on-premises networks You have multiple Azure subscriptions. Each subscription contains a virtual network that is assigned an IP address space of 172.16.0.0/16. Each virtual network is connected to the on premises networks by using ExpressRoute. You plan to deploy a container orchestration solution that will use multiple Azure Kubernetes Service (AKS) clusters. The clusters will be deployed to the existing virtual networks. You need to recommend a network configuration for the AKS dusters. The solution must meet the following requirements: • Minimize the number of IP addresses required on each virtual network. • Support outbound connectivity to on-premises datacenters. • Support Windows node pools Which AKS network model should you recommend?
A. Azure CNI Overlay
B. kubenet
C. Azure CNI
D. Azure CNI Powered by Cilium
You have an Azure subscription. The subscription has a blob container that contains multiple blobs. Ten users in the finance department of your company plan to access the blobs during the month of April. You need to recommend a solution to enable access to the blobs during the month of April only. The solution must minimize development effort. Which security solution should you include in the recommendation?
A. shared access signatures (SAS)
B. certificates
C. access keys
D. Conditional Access policies
You have an on-premises line-of-business (LOB) application that uses a Microsoft SQL Server instance as the backend. You plan to migrate the on-premises SQL Server instance to Azure virtual machines. You need to recommend a highly available SQL Server deployment that meets the following requirements: • Minimizes costs • Minimizes failover time if a single server fails What should you include in the recommendation?
A. an Always On availability group that has premium storage disks and a distributed
network name (DNN)
B. an Always On Failover Cluster Instance that has a virtual network name (VNN) and a premium file share
C. an Always On Failover Cluster Instance that has a virtual network name (VNN) and a standard file share
D. an Always On availability group that has premium storage disks and a virtual network name (VNN)
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. Your company, named Contoso, Ltd., has a Microsoft Entra tenant named contoso.com that uses Privileged Identity Management (PIM) and is linked to an Azure subscription named Sub1. You use Azure Backup to back up all the resources in Sub1 to a Recovery Services vault named Vault! An external company named Fabrikam, Inc. provides security management services to Contoso. Fabrikam has a Microsoft Entra tenant named fabrikam.com and an Azure subscription. You need to prevent a compromised administrator account in contoso.com from modifying backup policies in and deleting backups from Sub1. Solution: You configure a PIM role assignment that requires approval for activation by an administrator in contoso.com. Does this meet the goal?
A. Yes
B. No
You have an Azure subscription. You plan to deploy a monitoring solution that will include the following: • Azure Monitor Network Insights • Application Insights • Microsoft Sentinel • VM insights The monitoring solution will be managed by a single team. What is the minimum number of Azure Monitor workspaces required?
A. 1
B. 2
C. 3
D. 4
You have an Azure subscription. You plan to deploy an app named App1 that will be hosted on multiple virtual machines. App1 requires a service-level agreement (SLA) of 99.99%. You need to recommend a high availability solution for the virtual machines. What should you include in the recommendation?
A. application groups
B. availability zones
C. availability sets
D. Azure Site Recovery
You are designing a data analytics solution in Azure. You need to recommend a solution that meets the following requirements: • Supports multiple analytic languages • Integrates with Microsoft Power Bl • Works with multiple data stores • Supports visualizations What should you include in the recommendation?
A. Azure SQL Database
B. Azure HDInsight
C. Azure Data Lake Storage Gen2
D. Azure Databricks
You plan to use an Azure Storage account to store data assets. You need to recommend a solution that meets the following requirements: • Supports immutable storage • Disables anonymous access to the storage account • Supports access control list (ACL)-based Azure AD permissions What should you include in the recommendation?
A. Azure Blob Storage
B. Azure Data Lake Storage
C. Azure NetApp Files
D. Azure Files
You have an Azure subscription that contains an Azure Data Lake Storage Gen2 account named storage1 and an Azure Synapse Analytics workspace named Workspace1. Workspace! contains a serverless SQL pool and an Apache Spark pool. You need to recommend a disaster recovery solution for storage1. What should you include in the recommendation?
A. vaulted backup of Azure blobs
B. operational backup of Azure blobs
C. geo-backup in Azure Synapse Analytics
D. asynchronous replication
You have a landing zone that contains multiple Azure subscriptions. You need to automate the deployment of resources to the subscriptions. The solution must meet the following requirements: • Support parameters. • Support versioning and source control. Which two options can you use? Each correct answer presents a complete solution. NOTE Each correct selection is worth one point.
A. Azure Resource Manager (ARM) templates
B. Azure Policy
C. Azure Automation
D. Bleep files
E. Azure Functions
You have an on-premises datacenter named Site1 that contains multiple servers. You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains multiple virtual machines. VNet1 uses the default Azure DNS service. Site1 connects to VNet1 by using a Site-to-Site (S2S) VPN. You need to recommend a DNS solution that will forward DNS queries from the virtual machines that target the on-premises DNS namespace to the on-premises DNS servers. The solution must minimize administrative effort and costs. What should you include in the recommendation?
A. Private DNS zone
B. Azure Firewall DNS Proxy
C. an Azure virtual machine that runs the DNS service
D. Private DNS resolver
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. Your company, named Contoso, Ltd., has a Microsoft Entra tenant named contoso.com that uses Privileged Identity Management (PIM) and is linked to an Azure subscription named Sub1. You use Azure Backup to back up all the resources in Sub! to a Recovery Services vault named Vault1. An external company named Fabrikam, Inc. provides security management services to Contoso. Fabrikam has a Microsoft Entra tenant named fabrikam.com and an Azure subscription. You need to prevent a compromised administiator account in contoso.com from modifying backup policies in and deleting backups from Sub1. Solution: You configure Multi-user authorization (MUA) in Sub1 by using a Resource Guard from fabiikam.com. Does this meet the goal?
A. Yes
B. No
You have an Azure App Service web app named Appl. You need to recommend a monitoring solution for Appl. The solution must meet the following requirements: • Monitor the availability of Appl and send notifications if any availability issues are detected. • Monitor the usage of Azure Functions by Appl and send notifications if high usage is detected. • Analyze user behavior of Appl. What should you include in the recommendation?
A. Azure Monitor Application Insights
B. Diagnostics logging in App Service
C. Azure Data Explorer
D. Log stream in App Service
E. Log Analytics
Your company has 50 business units across the globe. The business units operate from 08:00 AM to 06:00 PM from Monday to Friday in their local time zone. Transactions are only processed during business hours. You have an Azure subscription. You plan to deploy an app named App1 that will manage the transactions for the business units. App1 will use a separate Azure SQL database for each business unit. You need to recommend an Azure SQL Database configuration for App1. The solution must meet the following requirements: • Support Azure Hybrid Benefit licensing. • Minimize costs. What should you recommend?
A. a vCore purchasing model and multiple single database instances
B. a DTU purchasing model and multiple single database instances
C. a vCore purchasing model and multiple database instances in an elastic pool
D. a DTU purchasing model and multiple database instances in an elastic pool
You need to recommend a data storage solution that meets the following requirements: • Ensures that applications can access the data by using a REST connection • Hosts 20 independent tables of varying sizes and usage patterns • Automatically replicates the data to a second Azure region • Minimizes costs What should you recommend?
A. an Azure SQL Database elastic pool that uses active geo-replication
B. tables in an Azure Storage account that use read-access geo-redundant storage (RAGRS)
C. an Azure SQL database that uses active geo-replication
D. tables in an Azure Storage account that use geo-redundant storage (GRS)
You have an Azure subscription You have a Microsoft Entra tenant. You need to recommend a Microsoft Entra Identity Governance solution to manage the user lifecycle. The solution must meet the following requirements: • Ensure that users have the correct permission for the correct resources and that the permissions are evaluated every quarter. • If a user is assigned a new role, ensure that the correct permissions are granted for the correct resources and regularly evaluated for the new role. • When a user leaves the company, ensure that the user's permissions are revoked What should you include in the recommendation?
A. Conditional Access
B. Privileged Identity Management (PIM)
C. Microsoft Entra ID Protection
D. access reviews
You have an Azure App Service app named App1. You need to recommend a solution to monitor the response times of App1 for end users. The solution must minimize administrative effort. What should you include in the recommendation?
A. Health check in App Service
B. Log Analytics
C. Application Insights
D. Azure Network Watcher connection monitor
