Free Designing Microsoft Azure Infrastructure Solutions (AZ-305) Trivia Questions and Answers — Questions and Answers
Question 1: The on-premise network of PTG Ltd. has an IP address range of 186.16.0.0/16. In his capacity as a solution architect, Sam has been asked to set up 20 virtual machines in a VNet subnet and deploy them to Azure. <br> <br> Ensure that a site-to-site VPN connection can be used for communication between the virtual machines housed in Azure and the on-premise systems. <br> <br> In order to host the virtual machines, Sam needs to construct the subnet for the Azure virtual network. <br> <br> Which of the following address space should Sam assign for the subnet in the Virtual Network?
- 186.16.0.0/16
- 186.16.1.0/28
- 192.168.0.0/24 (Correct answer)
- 192.168.1.0/28
Correct answer: 192.168.0.0/24
For a site-to-site VPN connection, the Azure Virtual Network and its subnets must have an IP address space that does not overlap with the on-premises network. The on-premises network uses 186.16.0.0/16, so options A and B are invalid due to overlap. Options C and D use the private 192.168.x.x range, which avoids conflict. To host 20 virtual machines, a /24 subnet (e.g., 192.168.0.0/24) provides 251 usable IP addresses, which is sufficient. A /28 subnet would only provide 11 usable IPs, which is not enough for 20 VMs.
Question 2: PTG Ltd. intends to use Azure to deploy web apps. Consider the requirements for the following company, which were listed: <br> <br> 1. Load-balancing traffic at Layer 7 <br> 2. Protecting the web application from SQL injection attacks <br> 3. Implementing cookie-based session affinity <br> <br> Which of the available Azure services would you advise using to deploy web applications to Azure that fulfill the specified criteria?
- Azure Traffic Manager
- Azure Load Balancer
- Azure Network Watcher
- Azure Application Gateway (Correct answer)
Correct answer: Azure Application Gateway
Azure Application Gateway is specifically designed to meet these requirements as a Layer 7 (HTTP/HTTPS) load balancer. It provides native Web Application Firewall (WAF) capabilities to protect web applications from common exploits like SQL injection attacks. Furthermore, Application Gateway supports cookie-based session affinity, ensuring that requests from a specific user are consistently routed to the same backend instance. This combination makes it the ideal service for deploying web applications with these specific needs.
Question 3: Mark is working at PTG Ltd. has two Azure virtual machines deployed in different regions. Given, each of the virtual machine has a public IP address that has been assigned to its network interface. Also, an application is installed on the virtual machines. Requirement - Peter has been asked to implement Azure Front Door-based load balancing across the virtual machines. He needs to ensure the application on the virtual machines only accept traffic that is routed from Azure Front Door. Which of the following options should Mark choose to meet the requirement?
- Network Security Groups with application security groups
- Azure Private Link
- Service Endpoints
- Network Security Groups with service tags (Correct answer)
Correct answer: Network Security Groups with service tags
To ensure that virtual machines only accept traffic routed from Azure Front Door, Network Security Groups (NSGs) with service tags are the appropriate solution. Service tags represent a group of IP address prefixes from a given Azure service, such as `AzureFrontDoor.Backend`. By creating an inbound NSG rule that allows traffic from the `AzureFrontDoor.Backend` service tag, you can restrict access to your virtual machines, ensuring only legitimate traffic originating from Azure Front Door can reach them, without needing to manage dynamic IP addresses.
Question 4: Josh is working at PTG Ltd. has an on-premises Hyper-V cluster containing 20 virtual machines. Given, some of the virtual machines are based on Windows and some in Linux. Josh has been asked to migrate the virtual machines onto Azure. Requirement - He has been asked to suggest a solution that would be used to replicate the disks of the virtual machines to Azure. Also, the solution must ensure that the virtual machines remain available when the migration of the disks is in progress. Solution - Josh decides to create an Azure storage account that has the file service and blob service and then use the Data Migration Assistant. Would the solution suggested by Josh meet the requirement?
- Incorrect (Correct answer)
- Correct
Correct answer: Incorrect
The proposed solution is incorrect because Data Migration Assistant (DMA) is designed for database migrations, not for replicating and migrating Hyper-V virtual machines to Azure. To replicate Hyper-V virtual machine disks to Azure while ensuring the VMs remain available during the migration, Azure Site Recovery (ASR) is the appropriate service. ASR provides continuous replication, allowing for minimal downtime during the actual migration cutover, which is crucial for maintaining availability.
Question 5: What are regions in Azure?
- Virtual locations within Azure datacenters
- Azure datacenters located in the same city
- Geographical locations around the globe that contain Azure datacenters (Correct answer)
- Azure virtual networks
Correct answer: Geographical locations around the globe that contain Azure datacenters
Azure regions are distinct geographical locations around the globe that contain one or more Azure datacenters. These datacenters are interconnected by a high-speed, low-latency network. Choosing a specific region for deploying resources allows users to place their applications and data closer to their users for better performance, and to meet data residency requirements.
Question 6: What do Azure regions' availability zones do?
- Different regions of Azure
- Different Azure datacenters within a region (Correct answer)
- Different datacenters owned by competitors
- Virtual locations within an Azure datacenter
Correct answer: Different Azure datacenters within a region
Azure regions' Availability Zones are physically separate, independent datacenters located within a single Azure region. Each zone has its own independent power, cooling, and networking, providing isolation from failures in other zones within the same region. This architecture ensures high availability and fault tolerance for applications and data by distributing resources across these distinct physical locations.
Question 7: When deploying a resource on Azure, what choice do you frequently have to make?
- Choose the network where you want your resource deployed
- Choose the region where you want your resource deployed (Correct answer)
- Choose the server where you want your resource deployed
- Choose the datacenter where you want your resource deployed
Correct answer: Choose the region where you want your resource deployed
When deploying a resource on Azure, you frequently have to choose the region where you want your resource deployed. This decision is crucial as it determines the physical location of your resources, impacting factors like data residency, latency for users, and available services. Selecting the appropriate region helps optimize performance, meet regulatory requirements, and manage costs effectively.
Free Designing Microsoft Azure Infrastructure Solutions (AZ-305) Trivia Questions and Answers
The on-premise network of PTG Ltd. has an IP address range of 186.16.0.0/16.
In his capacity as a solution architect, Sam has been asked to set up 20 virtual machines in a VNet subnet and deploy them to Azure.
Ensure that a site-to-site VPN connection can be used for communication between the virtual machines housed in Azure and the on-premise systems.
In order to host the virtual machines, Sam needs to construct the subnet for the Azure virtual network.
Which of the following address space should Sam assign for the subnet in the Virtual Network?