FREE Designing Microsoft Azure Infrastructure Solutions (AZ-305) Trivia Questions and Answers

Question 1

The on-premise network of PTG Ltd. has an IP address range of 186.16.0.0/16. In his capacity as a solution architect, Sam has been asked to set up 20 virtual machines in a VNet subnet and deploy them to Azure.

Ensure that a site-to-site VPN connection can be used for communication between the virtual machines housed in Azure and the on-premise systems.

In order to host the virtual machines, Sam needs to construct the subnet for the Azure virtual network.

Which of the following address space should Sam assign for the subnet in the Virtual Network?

Accepted Answer

192.168.0.0/24

Answer

For a site-to-site VPN connection, the Azure Virtual Network and its subnets must have an IP address space that does not overlap with the on-premises network. The on-premises network uses 186.16.0.0/16, so options A and B are invalid due to overlap. Options C and D use the private 192.168.x.x range, which avoids conflict. To host 20 virtual machines, a /24 subnet (e.g., 192.168.0.0/24) provides 251 usable IP addresses, which is sufficient. A /28 subnet would only provide 11 usable IPs, which is not enough for 20 VMs.

Question 2

PTG Ltd. intends to use Azure to deploy web apps. Consider the requirements for the following company, which were listed:

1. Load-balancing traffic at Layer 7
2. Protecting the web application from SQL injection attacks
3. Implementing cookie-based session affinity

Which of the available Azure services would you advise using to deploy web applications to Azure that fulfill the specified criteria?

Accepted Answer

Azure Application Gateway

Answer

Azure Application Gateway is specifically designed to meet these requirements as a Layer 7 (HTTP/HTTPS) load balancer. It provides native Web Application Firewall (WAF) capabilities to protect web applications from common exploits like SQL injection attacks. Furthermore, Application Gateway supports cookie-based session affinity, ensuring that requests from a specific user are consistently routed to the same backend instance. This combination makes it the ideal service for deploying web applications with these specific needs.

Question 3

Mark is working at PTG Ltd. has two Azure virtual machines deployed in different regions.

Given, each of the virtual machine has a public IP address that has been assigned to its network interface. Also, an application is installed on the virtual machines.

Requirement - Peter has been asked to implement Azure Front Door-based load balancing across the virtual machines.

He needs to ensure the application on the virtual machines only accept traffic that is routed from Azure Front Door.

Which of the following options should Mark choose to meet the requirement?

Accepted Answer

Network Security Groups with service tags

Answer

To ensure that virtual machines only accept traffic routed from Azure Front Door, Network Security Groups (NSGs) with service tags are the appropriate solution. Service tags represent a group of IP address prefixes from a given Azure service, such as `AzureFrontDoor.Backend`. By creating an inbound NSG rule that allows traffic from the `AzureFrontDoor.Backend` service tag, you can restrict access to your virtual machines, ensuring only legitimate traffic originating from Azure Front Door can reach them, without needing to manage dynamic IP addresses.

Question 4

Josh is working at PTG Ltd. has an on-premises Hyper-V cluster containing 20 virtual machines. Given, some of the virtual machines are based on Windows and some in Linux.

Josh has been asked to migrate the virtual machines onto Azure. 

Requirement - He has been asked to suggest a solution that would be used to replicate the disks of the virtual machines to Azure. Also, the solution must ensure that the virtual machines remain available when the migration of the disks is in progress.

Solution - Josh decides to create an Azure storage account that has the file service and blob service and then use the Data Migration Assistant.

Would the solution suggested by Josh meet the requirement?

Accepted Answer

Incorrect

Answer

The proposed solution is incorrect because Data Migration Assistant (DMA) is designed for database migrations, not for replicating and migrating Hyper-V virtual machines to Azure. To replicate Hyper-V virtual machine disks to Azure while ensuring the VMs remain available during the migration, Azure Site Recovery (ASR) is the appropriate service. ASR provides continuous replication, allowing for minimal downtime during the actual migration cutover, which is crucial for maintaining availability.

Question 5

What are regions in Azure?

Accepted Answer

Geographical locations around the globe that contain Azure datacenters

Answer

Azure regions are distinct geographical locations around the globe that contain one or more Azure datacenters. These datacenters are interconnected by a high-speed, low-latency network. Choosing a specific region for deploying resources allows users to place their applications and data closer to their users for better performance, and to meet data residency requirements.

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

FREE Designing Microsoft Azure Infrastructure Solutions (AZ-305) Trivia Questions and Answers