AZ-305 DESIGNING MICROSOFT AZURE
INFRASTRUCTURE SOLUTIONS POPULAR 2 LATEST
VERSIONS COMPLETE 200 QUESTIONS AND CORRECT
DETAILED ANSWERS (VERIFIED ANSWERS) |ALREADY
GRADED A+
Azure RBAC - ANSWER: Azure role-based access control granting specific permissions
Litware - ANSWER: Fictional company in the notes with Azure subscriptions
RBAC Roles - ANSWER: Role-based access control defining user permissions
Azure Virtual Machines - ANSWER: Cloud-based virtual machines on Azure platform
Azure Dedicated Hosts - ANSWER: Physical servers dedicated to one Azure customer
Azure AD-Joined Device - ANSWER: Device connected to Azure Active Directory
Azure Multi-Factor Authentication - ANSWER: Additional security layer requiring
multiple verification steps
ExpressRoute - ANSWER: Dedicated private connection to Azure cloud services
Availability Zones - ANSWER: Isolated locations within an Azure region for resiliency
Transparent Data Encryption - ANSWER: Encrypting data at rest in Azure SQL
databases
Azure Region - ANSWER: Geographic area containing Azure data centers
Azure Resource Locks - ANSWER: Prevent accidental deletion or modification of
critical Azure resources
Azure Storage Account - ANSWER: Cloud storage solution in Azure platform
Network Connectivity Solution - ANSWER: Method to connect Azure resources
securely
Private Endpoint - ANSWER: Securely connect to Azure resources without exposure
to the public internet
Microsoft Peering - ANSWER: Access Azure public services via public endpoints with
public IP addresses
, Azure Public Peering - ANSWER: Deprecated method for connecting to Azure public
services
Service Endpoint - ANSWER: Direct connection to specific Azure services from a
virtual network
Azure public peering - ANSWER: Deprecated feature in Azure that is no longer
available for use.
Service Endpoints - ANSWER: Enabled by default on subnets in Azure virtual
networks but cannot be used for traffic from on-premises to Azure services.
Azure Instance Metadata Service (IMDS) - ANSWER: Type of endpoint that App1
should use to obtain an access token during migration to Azure.
Azure AD - ANSWER: Azure Active Directory service that provides authentication for
applications.
Azure Service Management - ANSWER: Type of endpoint that App1 should not use to
obtain an access token during migration to Azure.
Microsoft identity platform - ANSWER: Type of endpoint that App1 should use to
obtain an access token during migration to Azure.
Azure RBAC assignments - ANSWER: Action to be taken to ensure that data storage
for App1 in Azure meets security and compliance requirements.
Access policy for the blob service - ANSWER: Action to be taken to ensure that data
storage for App1 in Azure meets security and compliance requirements.
Azure resource locks - ANSWER: Action to be taken to ensure that data storage for
App1 in Azure meets security and compliance requirements.
Standard general-purpose v2 - ANSWER: Recommended type of storage for App1 in
Azure that supports Blob Storage.
NFSv3 - ANSWER: Type of storage that provides Linux file system compatibility at
object storage scale in Azure.
Azure Total Cost of Ownership (TCO) Calculator - ANSWER: Tool used to estimate
compute costs for App1 in Azure.
Azure Hybrid Benefit - ANSWER: Licensing benefit that helps reduce costs of running
workloads in Azure by using on-premises licenses.
Availability zones - ANSWER: Azure feature that supports fault isolation and high
availability by distributing resources across unique physical locations.
INFRASTRUCTURE SOLUTIONS POPULAR 2 LATEST
VERSIONS COMPLETE 200 QUESTIONS AND CORRECT
DETAILED ANSWERS (VERIFIED ANSWERS) |ALREADY
GRADED A+
Azure RBAC - ANSWER: Azure role-based access control granting specific permissions
Litware - ANSWER: Fictional company in the notes with Azure subscriptions
RBAC Roles - ANSWER: Role-based access control defining user permissions
Azure Virtual Machines - ANSWER: Cloud-based virtual machines on Azure platform
Azure Dedicated Hosts - ANSWER: Physical servers dedicated to one Azure customer
Azure AD-Joined Device - ANSWER: Device connected to Azure Active Directory
Azure Multi-Factor Authentication - ANSWER: Additional security layer requiring
multiple verification steps
ExpressRoute - ANSWER: Dedicated private connection to Azure cloud services
Availability Zones - ANSWER: Isolated locations within an Azure region for resiliency
Transparent Data Encryption - ANSWER: Encrypting data at rest in Azure SQL
databases
Azure Region - ANSWER: Geographic area containing Azure data centers
Azure Resource Locks - ANSWER: Prevent accidental deletion or modification of
critical Azure resources
Azure Storage Account - ANSWER: Cloud storage solution in Azure platform
Network Connectivity Solution - ANSWER: Method to connect Azure resources
securely
Private Endpoint - ANSWER: Securely connect to Azure resources without exposure
to the public internet
Microsoft Peering - ANSWER: Access Azure public services via public endpoints with
public IP addresses
, Azure Public Peering - ANSWER: Deprecated method for connecting to Azure public
services
Service Endpoint - ANSWER: Direct connection to specific Azure services from a
virtual network
Azure public peering - ANSWER: Deprecated feature in Azure that is no longer
available for use.
Service Endpoints - ANSWER: Enabled by default on subnets in Azure virtual
networks but cannot be used for traffic from on-premises to Azure services.
Azure Instance Metadata Service (IMDS) - ANSWER: Type of endpoint that App1
should use to obtain an access token during migration to Azure.
Azure AD - ANSWER: Azure Active Directory service that provides authentication for
applications.
Azure Service Management - ANSWER: Type of endpoint that App1 should not use to
obtain an access token during migration to Azure.
Microsoft identity platform - ANSWER: Type of endpoint that App1 should use to
obtain an access token during migration to Azure.
Azure RBAC assignments - ANSWER: Action to be taken to ensure that data storage
for App1 in Azure meets security and compliance requirements.
Access policy for the blob service - ANSWER: Action to be taken to ensure that data
storage for App1 in Azure meets security and compliance requirements.
Azure resource locks - ANSWER: Action to be taken to ensure that data storage for
App1 in Azure meets security and compliance requirements.
Standard general-purpose v2 - ANSWER: Recommended type of storage for App1 in
Azure that supports Blob Storage.
NFSv3 - ANSWER: Type of storage that provides Linux file system compatibility at
object storage scale in Azure.
Azure Total Cost of Ownership (TCO) Calculator - ANSWER: Tool used to estimate
compute costs for App1 in Azure.
Azure Hybrid Benefit - ANSWER: Licensing benefit that helps reduce costs of running
workloads in Azure by using on-premises licenses.
Availability zones - ANSWER: Azure feature that supports fault isolation and high
availability by distributing resources across unique physical locations.
