AZ-305 Practice Test

AZ-305 Practice Test practice questions, page 8 of 15, with answer review and explanations.

Question 36

You are developing an app that will read activity logs for an Azure subscription by using Azure Functions. You need to recommend an authentication solution for Azure Functions. The solution must minimize administrative effort. What should you include in the recommendation?

  1. an enterprise application in Microsoft Entra ID
  2. system-assigned managed identities
  3. shared access signatures (SAS)
  4. application registration in Microsoft Entra ID

Question 37

Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

  1. Configure Azure AD join.
  2. Use Azure AD entitlement management to govern external users.
  3. Enable Azure AD pass-through authentication and update the sign-in endpoint.
  4. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).

Question 38

Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

  1. Configure Azure AD join.
  2. Configure Azure AD Identity Protection.
  3. Use Azure AD entitlement management to govern external users.
  4. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).

Question 39

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription. What should you include in the recommendation?

  1. Azure Activity Log
  2. Azure Arc
  3. Azure Analysis Services
  4. Azure Monitor metrics

Question 40

You have an Azure subscription that contains an Azure key vault named KV1 and a virtual machine named VM1. VM1 runs Windows Server Azure Edition. You plan to deploy an ASP.Net Core-based application named App1 to VM1. You need to configure App1 to use a system-assigned managed identity to retrieve secrets from KV1. The solution must minimize development effort. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.