AZ-305 Practice Test

AZ-305 Practice Test practice questions, page 5 of 15, with answer review and explanations.

Question 21

You have an Azure subscription that contains the resources shown in the following table. You create an Azure SQL database named DB1 that is hosted in the East US Azure region. To DB1, you add a diagnostic setting named Settings1. Settings1 archive SQLInsights to storage1 and sends SQLInsights to Workspace1. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Question 22

You plan to deploy an Azure SQL database that will store Personally Identifiable Information (PII). You need to ensure that only privileged users can view the PII. All other users must still be allowed to view other columns. What should you include in the solution?

  1. dynamic data masking
  2. role-based access control (RBAC)
  3. Data Discovery & Classification
  4. Transparent Data Encryption (TDE)

Question 23

You plan to deploy an app that will use an Azure Storage account. You need to deploy the storage account. The storage account must meet the following requirements: Store the data for multiple users.Encrypt each user’s data by using a separate key.Encrypt all the data in the storage account by using customer-managed keys. What should you deploy?

  1. files in a premium file share storage account
  2. blobs in a general purpose v2 storage account
  3. blobs in an Azure Data Lake Storage Gen2 account
  4. files in a general purpose v2 storage account

Question 24

You have an Azure App Service web app that uses a system-assigned managed identity. You need to recommend a solution to store the settings of the web app as secrets in an Azure key vault. The solution must meet the following requirements: Minimize changes to the app code.Use the principle of least privilege. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 25

You plan to deploy an application named App1 that will run on five Azure virtual machines. Additional virtual machines will be deployed later to run App1. You need to recommend a solution to meet the following requirements for the virtual machines that will run App1: Ensure that the virtual machines can authenticate to Microsoft Entra ID to gain access to an Azure key vault, Azure Logic Apps instances, and an Azure SQL database.Avoid assigning new roles and permissions for Azure services when you deploy additional virtual machines.Avoid storing secrets and certificates on the virtual machines.Minimize administrative effort for managing identities. Which type of identity should you include in the recommendation?

  1. a system-assigned managed identity
  2. a service principal that is configured to use a certificate
  3. a service principal that is configured to use a client secret
  4. a user-assigned managed identity