az-305 Practice Exam 2025: Latest Questions

Your company has 30 Azure subscriptions across multiple business units. You must ensure that all newly created resources automatically inherit a standard set of tags (CostCenter, DataClassification) and that noncompliant resources are denied at deployment time. What should you implement?

You need to design authentication for a multi-tenant SaaS app hosted on Azure App Service. Customers should sign in using their own Microsoft Entra ID tenants without creating guest users in your tenant. Which identity approach should you use?

You are designing monitoring for a microservices application running on AKS. You need to correlate a single user request across services, view end-to-end transaction timelines, and query telemetry centrally. What should you use?

A solution stores documents in Azure Blob Storage. You must ensure that documents can be read frequently for 30 days and then must be retained for 7 years in a write-once, read-many (WORM) state to meet compliance requirements. What should you implement?

A global e-commerce site uses Azure SQL Database and experiences periodic spikes in traffic. You need a design that minimizes the risk of database connection saturation and improves concurrency during spikes without changing the application code significantly. What should you recommend?

You are designing storage for an analytics workload. Data lands as large files once per hour, then is processed by Azure Databricks and queried by serverless SQL. You need hierarchical namespace, POSIX-like ACLs, and the ability to optimize for big data analytics. Which storage service should you choose?

You must design a business continuity solution for an Azure App Service web app backed by Azure SQL Database. The app must fail over to a secondary region with minimal administrative effort. Database writes must continue in the secondary region after failover. What should you recommend?

A company runs a three-tier application on Azure virtual machines in a single region. The business requires that the application remains available if an entire datacenter in the region fails. Which design should you implement?

You are designing a hub-and-spoke network in Azure. Spokes must communicate with each other through the hub, and on-premises connectivity must be shared. You must prevent transitive routing via VNet peering from allowing unintended spoke-to-spoke paths that bypass central inspection. What should you implement?

You need to design a secure access solution for administrators managing Azure VMs. Requirements: no public IPs on VMs, administrators must use least privilege, sessions must be audited, and inbound RDP/SSH from the internet must be eliminated. Which solution best meets the requirements?

You are designing network connectivity for a hub-and-spoke topology. Multiple spoke VNets must resolve private DNS records for several Azure Private Endpoints deployed across different spokes. You need a centralized approach that avoids duplicating DNS zones in every VNet and supports automatic record registration for Private Endpoints. What should you implement?

A company requires that any resource created in Azure must include tags for CostCenter and DataClassification. If a resource is missing either tag, the deployment must be blocked. What should you use?

You are designing storage for a global application. The app reads frequently from a large set of static images and must keep a local copy in two Azure regions for low-latency access. Writes occur only in the primary region, but reads should be served from both regions. Which storage replication option best meets the requirement?

You are designing an Azure landing zone for multiple business units. You need to centrally manage policies, role assignments, and budgets across many subscriptions, while allowing business units to delegate management within their scope. Which approach should you use?

A workload uses Azure SQL Database and must support point-in-time restore for accidental data changes. You also need the ability to restore to a specific time within the last 10 minutes for a critical table. What feature should you add to the design?

You have an on-premises datacenter and Azure VNets. You need private connectivity with predictable latency and higher throughput than VPN. The business also requires access to Microsoft SaaS services over the same private connection. Which solution should you recommend?

A mission-critical API runs on multiple Azure VMs behind an Azure Load Balancer. During a recent incident, one VM began returning HTTP 500 responses, but it remained in rotation because the load balancer health probe succeeded. You need the load balancer to remove instances based on application-level health, not just TCP port availability. What should you do?

You are designing an enterprise monitoring strategy. Security requires that all platform logs and metrics from multiple subscriptions be retained for 2 years and queried centrally. Operations teams also need near real-time alerting from those logs. What design best meets these requirements?

A company runs an active-active application in two Azure regions. The application uses Azure Cosmos DB and must achieve automatic regional failover with minimal RTO and multi-region writes. Which Cosmos DB configuration should you choose?

You must design a business continuity strategy for an Azure Kubernetes Service (AKS) platform hosting stateful microservices using managed disks. The solution must support regional outage recovery with low RTO and must avoid complex, application-managed replication. What is the best design choice?

Your organization uses multiple Azure subscriptions and wants to standardize governance. You must ensure: (1) all resources are deployed only in a set of approved regions, (2) all storage accounts block public access, and (3) exceptions can be granted with a documented justification and expiration. Which solution best meets these requirements?

You need to design storage for an application that writes millions of small files (1 KB to 64 KB). Requirements: (1) optimize for high throughput and low latency, (2) support SMB access from Windows workloads, and (3) support snapshots for point-in-time recovery. Which Azure storage option should you choose?

A mission-critical workload runs on Azure VMs using managed disks. The business requires the ability to recover the entire workload to a secondary region if the primary region becomes unavailable. The recovery plan must include orchestration of VM startup order and network configuration. Which solution should you implement?

You are designing a hub-and-spoke network in Azure. Spoke VNets must communicate with on-premises networks through the hub, and you must prevent transitive routing between spokes unless explicitly allowed. Which design best meets the requirements?

A platform team wants to monitor a business-critical API hosted on Azure App Service. Requirements: (1) detect availability and latency issues from multiple geographic locations, (2) correlate failures to backend dependencies such as Azure SQL and Storage, and (3) enable distributed tracing across services. Which Azure solution best meets these requirements?