Download Designing Microsoft Azure Infrastructure Solutions.Dump4Pass.AZ-305.2023-11-20.1e.118q.vcex

You have an Azure subscription that contains a Basic Azure virtual WAN named VirtualWAN1 and the virtual hubs shown in the following table.  
  
        
  
You have an ExpressRoute circuit in the US East Azure region.  
You need to create an ExpressRoute association to VirtualWAN1.  
What should you do first?

You have an Azure subscription that contains a storage account.    
An application sometimes writes duplicate files to the storage account.    
You have a PowerShell script that identifies and deletes duplicate files in the storage account. Currently, the script is run manually after approval from the operations manager.    
You need to recommend a serverless solution that performs the following actions:   
Runs the script once an hour to identify whether duplicate files exist.  
Sends an email notification to the operations manager requesting approval to delete the duplicate files  
Processes an email response from the operations manager specifying whether the deletion was approved  
Runs the script if the deletion was approved.    
What should you include in the recommendation?

Your company has the infrastructure shown in the following table.  
  
        
  
The on-premises Active Directory domain syncs with Azure Active Directory (Azure AD).    
Server1 runs an application named App1 that uses LDAP queries to verify user identities in the on-premises Active Directory domain.  
You plan to migrate Server1 to a virtual machine in Subscription1.  
A company security policy states that the virtual machines and services deployed to Subscription1 must be prevented from accessing the on-premises network.  
You need to recommend a solution to ensure that App1 continues to function after the migration. The solution must meet the security policy.  
What should you include in the recommendation?

You need to design a solution that will execute custom C# code in response to an event routed to Azure Event Grid. The solution must meet the following requirements:   
The executed code must be able to access the private IP address of a Microsoft SQL Server instance that runs on an Azure virtual machine.  
Costs must be minimized.  
What should you include in the solution?

You have an on-premises network and an Azure subscription. The on-premises network has several branch offices.    
A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server. Users access the shared files on VM1 from all the offices.  
You need to recommend a solution to ensure that the users can access the shared files as quickly as possible if the Toronto branch office is inaccessible.  
What should you include in the recommendation?

You have an Azure subscription named Subscription1 that is linked to a hybrid Azure Active Directory (Azure AD) tenant.    
You have an on-premises datacenter that does NOT have a VPN connection to Subscription1. The datacenter contains a computer named Server1 that has Microsoft SQL Server 2016 installed. Server is prevented from accessing the internet.    
An Azure logic app resource named LogicApp1 requires write access to a database on Server1.  
You need to recommend a solution to provide LogicApp1 with the ability to access Server1.  
What should you recommend deploying on-premises and in Azure? To answer, select the appropriate options in the answer area.    
NOTE: Each correct selection is worth one point. 

Your company has an existing web app that runs on Azure virtual machines. 
You need to ensure that the app is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruptions to the code of the app.    
What should you recommend? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.    
NOTE: Each correct selection is worth one point. 

You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service (AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines. The virtual machines and the AKS cluster will reside on the same virtual network.    
You need to design a solution to expose the microservices to the consumer apps. The solution must meet the following requirements:   
Ingress access to the microservices must be restricted to a single private IP address and protected by using mutual TLS authentication.  
The number of incoming microservice calls must be rate-limited.  
Costs must be minimized.    
What should you include in the solution?

You have a .NET web service named Service1 that has the following requirements:   
Must read and write temporary files to the local file system.  
Must write to the Application event log.    
You need to recommend a solution to host Service1 in Azure. The solution must meet the following requirements:   
Minimize maintenance overhead.  
Minimize costs.    
What should you include in the recommendation?

You have the Azure resources shown in the following table.    

        
  
You need to deploy a new Azure Firewall policy that will contain mandatory rules for all Azure Firewall deployments. The new policy will be configured as a parent policy for the existing policies.    
What is the minimum number of additional Azure Firewall policies you should create?