πŸ”

AZ-305 β€” questions

Page 2 of 10 Β· 183 total questions.

Topic 1 Β· Question 35

Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

  • AConfigure the Azure AD provisioning service.
  • BConfigure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
  • CUse Azure AD entitlement management to govern external users. (correct answer)
  • DConfigure Azure AD Identity Protection.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use Azure AD entitlement management to govern external users.

Explanation

Azure Active Directory (Microsoft Entra ID) provides identity, single sign-on, and conditional access.

Topic 1 Β· Question 36

You are developing an app that will read activity logs for an Azure subscription by using Azure Functions. You need to recommend an authentication solution for Azure Functions. The solution must minimize administrative effort. What should you include in the recommendation?

  • Aan enterprise application in Azure AD
  • Bsystem-assigned managed identities (correct answer)
  • Cshared access signatures (SAS)
  • Dapplication registration in Azure AD
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: system-assigned managed identities.

Topic 1 Β· Question 37

Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

Exhibit 1 for question 37
  • AConfigure Azure AD join.
  • BUse Azure AD entitlement management to govern external users. (correct answer)
  • CEnable Azure AD pass-through authentication and update the sign-in endpoint.
  • DConfigure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Azure AD entitlement management to govern external users.

Explanation

Azure Active Directory (Microsoft Entra ID) provides identity, single sign-on, and conditional access.

Topic 1 Β· Question 38

Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

Exhibit 1 for question 38
  • AConfigure Azure AD join.
  • BConfigure Azure AD Identity Protection.
  • CUse Azure AD entitlement management to govern external users. (correct answer)
  • DConfigure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use Azure AD entitlement management to govern external users.

Explanation

Azure Active Directory (Microsoft Entra ID) provides identity, single sign-on, and conditional access.

Topic 1 Β· Question 39

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription. What should you include in the recommendation?

  • AAzure Activity Log (correct answer)
  • BAzure Arc
  • CAzure Analysis Services
  • DAzure Monitor metrics
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Azure Activity Log.

Topic 1 Β· Question 41

Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

Exhibit 1 for question 41
  • AConfigure Azure AD join.
  • BConfigure Azure AD Identity Protection.
  • CConfigure a Conditional Access policy.
  • DConfigure Supported account types in the application registration and update the sign-in endpoint. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure Supported account types in the application registration and update the sign-in endpoint.

Topic 1 Β· Question 42

You have an Azure AD tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned memberships. Group1 has 50 members, including 20 guest users. You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements: β€’ The evaluation must be repeated automatically every three months. β€’ Every member must be able to report whether they need to be in Group1. β€’ Users who report that they do not need to be in Group1 must be removed from Group1 automatically. β€’ Users who do not report whether they need to be in Group1 must be removed from Group1 automatically. What should you include in the recommendation?

  • AImplement Azure AD Identity Protection.
  • BChange the Membership type of Group1 to Dynamic User.
  • CCreate an access review. (correct answer)
  • DImplement Azure AD Privileged Identity Management (PIM).
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an access review.

Topic 1 Β· Question 44

Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

Exhibit 1 for question 44
  • AEnable Azure AD pass-through authentication and update the sign-in endpoint.
  • BUse Azure AD entitlement management to govern external users. (correct answer)
  • CConfigure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
  • DConfigure Azure AD Identity Protection.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Azure AD entitlement management to govern external users.

Explanation

Azure Active Directory (Microsoft Entra ID) provides identity, single sign-on, and conditional access.

Topic 1 Β· Question 45

Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

Exhibit 1 for question 45
  • AConfigure the Azure AD provisioning service.
  • BEnable Azure AD pass-through authentication and update the sign-in endpoint.
  • CConfigure Supported account types in the application registration and update the sign-in endpoint. (correct answer)
  • DConfigure Azure AD join.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure Supported account types in the application registration and update the sign-in endpoint.

Topic 1 Β· Question 47

Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

Exhibit 1 for question 47
  • AConfigure Azure AD Identity Protection.
  • BConfigure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
  • CConfigure Supported account types in the application registration and update the sign-in endpoint. (correct answer)
  • DConfigure a Conditional Access policy.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure Supported account types in the application registration and update the sign-in endpoint.

Topic 1 Β· Question 48

Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1. You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1. What should you recommend?

Exhibit 1 for question 48
  • AUse Azure AD entitlement management to govern external users. (correct answer)
  • BEnable Azure AD pass-through authentication and update the sign-in endpoint.
  • CConfigure a Conditional Access policy.
  • DConfigure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use Azure AD entitlement management to govern external users.

Explanation

Azure Active Directory (Microsoft Entra ID) provides identity, single sign-on, and conditional access.

Topic 1 Β· Question 49

You have an Azure subscription that contains 1,000 resources. You need to generate compliance reports for the subscription. The solution must ensure that the resources can be grouped by department. What should you use to organize the resources?

  • Aapplication groups and quotas
  • BAzure Policy and tags (correct answer)
  • Cadministrative units and Azure Lighthouse
  • Dresource groups and role assignments
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Azure Policy and tags

Explanation

Azure Policy enforces organizational rules and compliance across resources at scale.

Topic 1 Β· Question 50

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription. What should you include in the recommendation?

  • AAzure Arc
  • BAzure Monitor metrics
  • CAzure Advisor
  • DAzure Log Analytics (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Azure Log Analytics

Explanation

Log Analytics queries collected logs and metrics to investigate and alert on resource behavior.

Topic 1 Β· Question 51

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription. What should you include in the recommendation?

  • AAzure Monitor action groups
  • BAzure Arc
  • CAzure Monitor metrics
  • DAzure Activity Log (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Azure Activity Log.

Topic 1 Β· Question 53

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription. What should you include in the recommendation?

  • AAzure Arc
  • BAzure Log Analytics (correct answer)
  • CApplication insights
  • DAzure Monitor action groups
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Azure Log Analytics

Explanation

Log Analytics queries collected logs and metrics to investigate and alert on resource behavior.

Topic 1 Β· Question 56

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription. What should you include in the recommendation?

  • AApplication Insights
  • BAzure Arc
  • CAzure Log Analytics (correct answer)
  • DAzure Monitor metrics
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Azure Log Analytics

Explanation

Log Analytics queries collected logs and metrics to investigate and alert on resource behavior.

Topic 1 Β· Question 57

You have an Azure subscription. You plan to deploy a monitoring solution that will include the following: β€’ Azure Monitor Network Insights β€’ Application Insights β€’ Microsoft Sentinel β€’ VM insights The monitoring solution will be managed by a single team. What is the minimum number of Azure Monitor workspaces required?

  • A1 (correct answer)
  • B2
  • C3
  • D4
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: 1.

Topic 1 Β· Question 58

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription. What should you include in the recommendation?

  • AApplication Insights
  • BAzure Analysis Services
  • CAzure Advisor
  • DAzure Activity Log (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Azure Activity Log.

Topic 1 Β· Question 60

You have an Azure subscription that contains 10 web apps. The apps are integrated with Azure AD and are accessed by users on different project teams. The users frequently move between projects. You need to recommend an access management solution for the web apps. The solution must meet the following requirements: β€’ The users must only have access to the app of the project to which they are assigned currently. β€’ Project managers must verify which users have access to their project’s app and remove users that are no longer assigned to their project. β€’ Once every 30 days, the project managers must be prompted automatically to verify which users are assigned to their projects. What should you include in the recommendation?

  • AAzure AD Identity Protection
  • BMicrosoft Defender for Identity
  • CMicrosoft Entra Permissions Management
  • DAzure AD Identity Governance (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Azure AD Identity Governance

Explanation

Azure Active Directory (Microsoft Entra ID) provides identity, single sign-on, and conditional access.

Topic 1 Β· Question 62

You have an Azure subscription. The subscription contains a tiered app named App1 that is distributed across multiple containers hosted in Azure Container Instances. You need to deploy an Azure Monitor monitoring solution for App. The solution must meet the following requirements: β€’ Support using synthetic transaction monitoring to monitor traffic between the App1 components. β€’ Minimize development effort. What should you include in the solution?

  • ANetwork insights
  • BApplication Insights (correct answer)
  • CContainer insights
  • DLog Analytics Workspace insights
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Application Insights

Explanation

Application Insights provides application performance monitoring and diagnostics for apps.

Showing questions 21–40 of 183 Β· Page 2 of 10