Microsoft Designing Microsoft Azure Infrastructure Solutions - AZ-305무료 덤프문제 풀어보기
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company currently has an application that is hosted on their on-premises environment. The application currently connects to two databases in the on-premises environment. The databases are named whizlabdb1 and whizlabdb2.
You have to move the databases onto Azure. The databases have to support server-side transactions across both of the databases.
Solution: You decide to deploy the databases to an Azure SQL database-managed instance.
Would this fulfill the requirement?
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company currently has an application that is hosted on their on-premises environment. The application currently connects to two databases in the on-premises environment. The databases are named whizlabdb1 and whizlabdb2.
You have to move the databases onto Azure. The databases have to support server-side transactions across both of the databases.
Solution: You decide to deploy the databases to an Azure SQL database-managed instance.
Would this fulfill the requirement?
정답: A
You have a multi-tier app named App1 and an Azure SQL database named SQL1.
The backend service of App1 writes data to Users use the App1 client to read the data from SQL1.
During periods of high utilization the users experience delays retrieving the data.
You need to minimize how long it takes for data requests.
What should you include in the solution?
The backend service of App1 writes data to Users use the App1 client to read the data from SQL1.
During periods of high utilization the users experience delays retrieving the data.
You need to minimize how long it takes for data requests.
What should you include in the solution?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
You have multiple Azure subscriptions.
You need to ensure that you are notified of planned maintenance in your Azure region if the maintenance will affect the resources in the subscriptions. The solution must minimize administrative effort.
What should you use?
You need to ensure that you are notified of planned maintenance in your Azure region if the maintenance will affect the resources in the subscriptions. The solution must minimize administrative effort.
What should you use?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
You need to recommend a solution to deploy containers that run an application. The application has two tiers. Each tier is implemented as a separate Docker Linux-based image. The solution must meet the following requirements:
- The front-end tier must be accessible by using a public IP address on port 80.
- The backend tier must be accessible by using port 8080 from the
front-end tier only.
- Both containers must be able to access the same Azure file share.
- If a container fails, the application must restart automatically.
- Costs must be minimized.
What should you recommend using to host the application?
- The front-end tier must be accessible by using a public IP address on port 80.
- The backend tier must be accessible by using port 8080 from the
front-end tier only.
- Both containers must be able to access the same Azure file share.
- If a container fails, the application must restart automatically.
- Costs must be minimized.
What should you recommend using to host the application?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
Hotspot Question
You plan to deploy an Azure App Service web app named App1 that will service users in a single geographical region. App1 will access a highly available database named DB1 that will be hosted on two Azure virtual machines named VM1 and VM2.
You need to recommend a solution that meets the following requirements:
- Uses Azure Web Application Firewall (WAF) to minimize the risk of a
web-based attack against App1
- Ensures that administrators can access VM1 and VM2 securely from the
internet
- Ensures that traffic from App1 to DB1 is NOT sent via the internet
- Minimizes costs
What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You plan to deploy an Azure App Service web app named App1 that will service users in a single geographical region. App1 will access a highly available database named DB1 that will be hosted on two Azure virtual machines named VM1 and VM2.
You need to recommend a solution that meets the following requirements:
- Uses Azure Web Application Firewall (WAF) to minimize the risk of a
web-based attack against App1
- Ensures that administrators can access VM1 and VM2 securely from the
internet
- Ensures that traffic from App1 to DB1 is NOT sent via the internet
- Minimizes costs
What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
정답:
Explanation:
Box 1: Azure Application Gateway
Uses Azure Web Application Firewall (WAF) to minimize the risk of a web-based attack against App1 The Azure Web Application Firewall (WAF) on Azure Application Gateway actively safeguards your web applications against common exploits and vulnerabilities. As web applications become more frequent targets for malicious attacks, these attacks often exploit well-known vulnerabilities such as SQL injection and cross-site scripting.
WAF on Application Gateway is based on the Core Rule Set (CRS) from the Open Web Application Security Project (OWASP).
All of the following WAF features exist inside of a WAF policy. You can create multiple policies, and they can be associated with an Application Gateway, to individual listeners, or to path-based routing rules on an Application Gateway. This way, you can have separate policies for each site behind your Application Gateway if needed.
Box 2: Azure Bastion
Ensures that administrators can access VM1 and VM2 securely from the internet Protect your virtual machines with more secure remote access Azure Bastion is a fully managed service that provides more secure and seamless Remote Desktop Protocol (RDP) and Secure Shell Protocol (SSH) access to virtual machines (VMs) without any exposure through public IP addresses.
Box 3: Azure Private Link
Ensures that traffic from App1 to DB1 is NOT sent via the internet
* Azure Private Link
Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer-owned/partner services over a private endpoint in your virtual network.
Traffic between your virtual network and the service travels the Microsoft backbone network.
Exposing your service to the public internet is no longer necessary. You can create your own private link service in your virtual network and deliver it to your customers. Setup and consumption using Azure Private Link is consistent across Azure PaaS, customer-owned, and shared partner services.
Reference:
https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/ag-overview
https://azure.microsoft.com/en-us/products/azure-bastion
https://learn.microsoft.com/en-us/azure/app-service/overview-private-endpoint
https://learn.microsoft.com/en-us/azure/app-service/overview-security
https://learn.microsoft.com/en-us/azure/private-link/private-link-overview
Drag and Drop Question
You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016 and Linux.
You need to use Azure Monitor to design an alerting strategy for security-related events.
Which Azure Monitor Logs tables should you query? To answer, drag the appropriate tables to the correct log types. Each table may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016 and Linux.
You need to use Azure Monitor to design an alerting strategy for security-related events.
Which Azure Monitor Logs tables should you query? To answer, drag the appropriate tables to the correct log types. Each table may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
정답:
Explanation:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-windows-events
https://docs.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-syslog
You have an on-premises Microsoft SQL Server 2016 database named DB1.
You have an Azure subscription.
You need to migrate DB1 to an Azure SQL database by using the Azure SQL Migration extension for Azure Data Studio.
What should you do first?
You have an Azure subscription.
You need to migrate DB1 to an Azure SQL database by using the Azure SQL Migration extension for Azure Data Studio.
What should you do first?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
You store web access logs data in Azure Blob storage. You plan to generate monthly reports from the access logs. You need to recommend an automated process to upload the data to Azure SQL Database every month.
What should you include in the recommendation?
What should you include in the recommendation?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
Hotspot Questiom
Your company wants to maintain Activity log and resource log information for auditing and static analysis. The data must remain available for up to six months.
You need to identify an appropriate storage and maintenance solution.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Your company wants to maintain Activity log and resource log information for auditing and static analysis. The data must remain available for up to six months.
You need to identify an appropriate storage and maintenance solution.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
정답:
Explanation:
You can use the Azure Monitor menu in Azure portal to configure archive storage. It is necessary to configure an Azure storage account for archive storage because Activity log entries are only maintained for 90 days by Azure. You should create a storage account separate from other types of data so you can better control access to the data.
You can create an Azure storage account for log storage in the same subscription or a different subscription as the resource sending the logs. The user who configures the storage must have appropriate RBAC access to both subscriptions.
You can configure Blob storage policies to require time-based retention. This gives you a way to prevent the data from being deleted or modified during the retention period.
You have an Azure subscription. The subscription contains a tiered app named App1 that is distributed across multiple containers hosted in Azure Container Instances.
You need to deploy an Azure Monitor monitoring solution for App1. The solution must meet the following requirements:
- Support using synthetic transaction monitoring to simulate real user
interactions and identify UI failures.
- Minimize development effort.
What two features can you include in the solution? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
You need to deploy an Azure Monitor monitoring solution for App1. The solution must meet the following requirements:
- Support using synthetic transaction monitoring to simulate real user
interactions and identify UI failures.
- Minimize development effort.
What two features can you include in the solution? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
정답: C,D
설명: (Fast2test 회원만 볼 수 있음)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.
The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.
You need to recommend a solution to meet the regulatory requirement.
Solution: You recommend using the Regulatory compliance dashboard in Microsoft Defender for Cloud.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.
The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.
You need to recommend a solution to meet the regulatory requirement.
Solution: You recommend using the Regulatory compliance dashboard in Microsoft Defender for Cloud.
Does this meet the goal?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
You are designing an application that will aggregate content for users.
You need to recommend a database solution for the application. The solution must meet the following requirements:
- Support SQL commands.
- Support multi-master writes.
- Guarantee low latency read operations.
What should you include in the recommendation?
You need to recommend a database solution for the application. The solution must meet the following requirements:
- Support SQL commands.
- Support multi-master writes.
- Guarantee low latency read operations.
What should you include in the recommendation?
정답: A
설명: (Fast2test 회원만 볼 수 있음)