AZ-305 Practice Test practice questions, page 7 of 15, with answer review and explanations.
Question 31
A company named Contoso, Ltd. has a Microsoft Entra tenant that is integrated with Microsoft 365 and an Azure subscription. Contoso has an on-premises identity infrastructure. The infrastructure includes servers that run Active Directory Domain Services (AD DS) and Microsoft Entra Connect Sync. Contoso has a partnership with a company named Fabrikam, Inc. Fabrikam has an Active Directory forest and a Microsoft 365 tenant. Fabrikam has the same on-premises identity infrastructure components as Contoso. A team of 10 developers from Fabrikam will work on an Azure solution that will be hosted in the Azure subscription of Contoso. The developers must be added to the Contributor role for a resource group in the Contoso subscription. You need to recommend a solution to ensure that Contoso can assign the role to the 10 Fabrikam developers. The solution must ensure that the Fabrikam developers use their existing credentials to access resources. What should you recommend?
In the Microsoft Entra tenant of Contoso, create cloud-only user accounts for the Fabrikam developers.
Configure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.
Configure an organization relationship between the Microsoft 365 tenants of Fabrikam and Contoso.
In the Microsoft Entra tenant of Contoso, create guest accounts for the Fabrikam developers.
Question 32
Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Microsoft Entra ID for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?
Configure the Microsoft Entra provisioning service.
Enable Microsoft Entra pass-through authentication and update the sign-in endpoint.
Use Microsoft Entra entitlement management to govern external users.
Configure Microsoft Entra join.
Question 33
Your company has 20 web APIs that were developed in-house. The company is developing 10 web apps that will use the web APIs. The web apps and the APIs are registered in the company's Microsoft Entra tenant. The web APIs are published by using Azure API Management. You need to recommend a solution to block unauthorized requests originating from the web apps from reaching the web APIs. The solution must meet the following requirements: Use Microsoft Entra-generated claims.Minimize configuration and management effort. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Question 34
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription. What should you include in the recommendation?
Azure Log Analytics
Azure Arc
Azure Analysis Services
Application Insights
Question 35
Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?
Configure the Azure AD provisioning service.
Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
Use Azure AD entitlement management to govern external users.