az-305 Practice Exam: Test Your Knowledge 2025

A large enterprise requires a centralized identity management solution that allows users to sign in once and access multiple Azure subscriptions and SaaS applications. The solution must support multi-factor authentication and conditional access policies. Which Azure service should you recommend?

Your organization has 50 Azure subscriptions across different departments. You need to ensure consistent policy enforcement for resource tagging, allowed regions, and VM SKU restrictions across all subscriptions. What is the BEST approach?

A financial services company needs to monitor and audit all administrative actions across their Azure environment for compliance purposes. The audit logs must be retained for 7 years and must be tamper-proof. Which combination of services should you implement?

You are designing a monitoring solution for a multi-tier application running across multiple Azure regions. The solution must provide application performance monitoring, distributed tracing across microservices, and automatic detection of performance anomalies. Which service should you use?

An organization needs to implement role-based access control where database administrators can manage Azure SQL databases but cannot view or modify the data within them. What is the appropriate approach?

A company needs to store 500 TB of archived financial documents that must be retained for 10 years. The documents are rarely accessed, but when needed, they must be available within 15 hours. Cost optimization is a priority. Which storage solution should you recommend?

You are designing a data storage solution for an IoT application that ingests 10 million telemetry events per second. The data must support real-time analytics, time-series queries, and must retain data for 90 days. After 90 days, data should be moved to cold storage. Which solution provides the BEST performance and cost optimization?

A global application requires a database that provides single-digit millisecond latency for reads and writes across multiple regions, automatic failover, and supports multiple consistency models. The application uses a document-based data model. Which database service should you use?

Your company needs to migrate a 50 TB on-premises data warehouse to Azure. The solution must support complex analytical queries, integration with Power BI, and must minimize query costs by only charging for queries executed. Which service should you choose?

A company requires a business continuity solution for their mission-critical Azure VMs that guarantees an RPO of 15 minutes and RTO of 2 hours. The solution must support automated failover to a secondary Azure region. What should you implement?

You need to design a backup strategy for a multi-tier application that includes Azure VMs, Azure SQL Databases, and Azure Files. The solution must provide centralized backup management, long-term retention for compliance, and point-in-time restore capabilities. What combination of services should you use?

An application running in Azure requires 99.99% availability SLA. The application consists of web servers, application servers, and a database. The architecture must survive the failure of an entire Azure datacenter. What is the MOST cost-effective architecture to meet this requirement?

Your company is deploying a new web application that expects high traffic variability, from 100 to 10,000 concurrent users. The application must scale automatically based on demand and minimize costs during low-traffic periods. Which compute solution should you recommend?

A company needs to deploy a hybrid application where on-premises servers must communicate securely with Azure VMs using private IP addresses. The solution must provide encrypted connectivity and must not traverse the public internet. Which connectivity solution should you implement?

You are designing a network architecture for a multi-tier application in Azure. The application has a web tier, application tier, and database tier. You need to ensure that the database tier is not directly accessible from the internet and that communication between tiers is secured. What is the BEST approach?

A company is migrating a legacy application that requires specific CPU and memory configurations not available in standard Azure VM sizes. The application has licensing tied to physical cores and requires nested virtualization for development environments. Which VM series should you recommend?

You need to design a solution to distribute HTTPS traffic across multiple backend web servers in different Azure regions. The solution must provide SSL offloading, URL-based routing, and automatic failover to healthy regions. Which Azure service should you use?

A financial application requires compute resources that process sensitive data. The data must never be stored on disk and must remain encrypted in memory during processing. Which Azure compute option meets this requirement?

Your organization uses Azure AD for identity management. You need to implement a solution that grants temporary, elevated access to Azure resources only when needed and requires approval and justification. The solution must include access reviews. What should you implement?

A microservices application running in Azure Kubernetes Service needs service-to-service authentication without managing credentials in code or configuration files. The services also need to access Azure Key Vault secrets. What is the recommended solution?