Microsoft AZ-305 Practice Test 34
Question 330
Acceptance testing must establish the following operational result: The result demonstrates ciphertext visibility boundaries. Which verification action most directly establishes that outcome?
- Run an authorized query without the client encryption key.
- Compare row counts and application transaction checks before final switch.
- Execute a controlled audited query and locate the audit record.
- Inspect database encryption state and key configuration.
Explanation
Correct Answer
A:The result demonstrates ciphertext visibility boundaries.
Incorrect Answers
B:This is a test for A legacy OLTP app can tolerate a brief cutover but requires schema and data fidelity. The requirement here is instead demonstrated by run an authorized query without the client encryption key.
C:That verification addresses the different requirement: Security needs SQL audit events centralized without giving auditors table modification privileges. It does not directly establish the result demonstrates ciphertext visibility boundaries.
D:That verification addresses the different requirement: A regulated database needs data encrypted at rest without developers implementing custom column crypto. It does not directly establish the result demonstrates ciphertext visibility boundaries.
Question 331
Security needs SQL audit events centralized without giving auditors table modification privileges. Which Azure architecture choice best meets this requirement?
- Enable supported Azure SQL auditing and route events to approved monitoring storage.
- Assume NSG inbound rules encrypt persisted database pages.
- Make auditors database owners and rely only on SQL server errors.
- Use TDE alone and claim privileged database users cannot read sensitive columns.
Explanation
Correct Answer
A:SQL audit records access operations separately from user authorization.
Incorrect Answers
B:Network access controls do not encrypt database storage. In the present requirement, security needs SQL audit events centralized without giving auditors table modification privileges. The needed design instead works because sQL audit records access operations separately from user authorization.
C:Ownership expands privileges and error logs are not a complete audited access stream. This proposal contradicts the stated architecture constraint.
D:TDE does not hide decrypted column values from authorized SQL queries. In the present requirement, security needs SQL audit events centralized without giving auditors table modification privileges. The needed design instead works because sQL audit records access operations separately from user authorization.
Question 332
An architecture proposal for sql encryption and access relies on the following approach: Make auditors database owners and rely only on SQL server errors. Which specific failure or mismatch should the design reviewer identify?
- Network access controls do not encrypt database storage.
- Business Critical does not share the same serverless capability profile.
- TDE does not hide decrypted column values from authorized SQL queries.
- Ownership expands privileges and error logs are not a complete audited access stream.
Explanation
Correct Answer
D:Make auditors database owners and rely only on SQL server errors. Ownership expands privileges and error logs are not a complete audited access stream.
Incorrect Answers
A:That assessment refers to the separate proposal 'Assume NSG inbound rules encrypt persisted database pages.' not to the recommendation under review. Here, Ownership expands privileges and error logs are not a complete audited access stream.
B:This concern applies to Assume Business Critical offers general-purpose-style serverless auto-pause by default. in another design data storage solutions for relational data design. The current proposal specifically fails because ownership expands privileges and error logs are not a complete audited access stream.
C:That assessment refers to the separate proposal 'Use TDE alone and claim privileged database users cannot read sensitive columns.' not to the recommendation under review. Here, Ownership expands privileges and error logs are not a complete audited access stream.
Question 333
Acceptance testing must establish the following operational result: The log proves query activity is recorded and accessible read-only. Which verification action most directly establishes that outcome?
- Inspect database encryption state and key configuration.
- Run an authorized query without the client encryption key.
- Review current tier settings and Microsoft service feature availability.
- Execute a controlled audited query and locate the audit record.
Explanation
Correct Answer
D:The log proves query activity is recorded and accessible read-only.
Incorrect Answers
A:That verification addresses the different requirement: A regulated database needs data encrypted at rest without developers implementing custom column crypto. It does not directly establish the log proves query activity is recorded and accessible read-only.
B:That verification addresses the different requirement: Developers must not see highly sensitive values even when operating the SQL server. It does not directly establish the log proves query activity is recorded and accessible read-only.
C:This is a test for An architect asserts serverless automatic pause is GA for every Azure SQL Database tier. The requirement here is instead demonstrated by execute a controlled audited query and locate the audit record.
Question 334
A blob account stores heavily accessed product images alongside decade-long archives. Which TWO storage strategies respect their contrasting access needs? (Select TWO.)
- Put seldom-accessed records into a compatible cooler or archive tier based on retrieval SLA.
- Keep interactive frequently accessed image blobs in a suitable online tier.
- Assume archive can be used on every redundancy SKU without checking compatibility.
- Store all hot product images only in offline Archive tier.
- Force all decade-old dormant evidence to remain Hot with no cost review.
Explanation
Correct Answers
A:Long retention can justify access latency and retrieval costs.
B:Hot online storage supports low-latency reads.
Incorrect Answers
C:Tier capabilities depend on the storage configuration.
D:Archive rehydration does not offer interactive access.
E:Expensive hot retention may be unnecessary.
Question 335
An architecture proposal for blob access tiers and archive retrieval relies on the following approach: Put actively used images in offline Archive tier. Which specific failure or mismatch should the design reviewer identify?
- Offline archive retrieval has nontrivial delay and operational steps.
- Archive rehydration latency is incompatible with interactive image requests.
- Relational joins add avoidable complexity for simple document retrieval.
- Hot storage may cost more for long-lived dormant content.
Explanation
Correct Answer
B:Put actively used images in offline Archive tier. Archive rehydration latency is incompatible with interactive image requests.
Incorrect Answers
A:That assessment refers to the separate proposal 'Assume offline Archive blobs can always be read with hot-tier latency.' not to the recommendation under review. Here, Archive rehydration latency is incompatible with interactive image requests.
C:This concern applies to Force all JSON data through normalized SQL joins with no business need. in another design data storage solutions for semi-structured and unstructured data design. The current proposal specifically fails because archive rehydration latency is incompatible with interactive image requests.
D:That assessment refers to the separate proposal 'Keep every file permanently hot despite negligible reads.' not to the recommendation under review. Here, Archive rehydration latency is incompatible with interactive image requests.
Question 336
Acceptance testing must establish the following operational result: Real workload evidence validates the hot-data choice. Which verification action most directly establishes that outcome?
- Measure read latency and tier transaction costs under representative traffic.
- Rehydrate a nonproduction sample and time usability.
- Benchmark point reads by id and partition key.
- Estimate access, early deletion and rehydration charges for the retention period.
Explanation
Correct Answer
A:Real workload evidence validates the hot-data choice.
Incorrect Answers
B:That verification addresses the different requirement: A legal team needs immediate viewing of an archived blob during an unexpected audit. It does not directly establish real workload evidence validates the hot-data choice.
C:This is a test for An API must get predictable low latency for key-value documents without joining relational tables. The requirement here is instead demonstrated by measure read latency and tier transaction costs under representative traffic.
D:That verification addresses the different requirement: Compliance files are retained for years and are rarely opened but can wait for retrieval. It does not directly establish real workload evidence validates the hot-data choice.
Question 337
Compliance files are retained for years and are rarely opened but can wait for retrieval. Which Azure architecture choice best meets this requirement?
- Use an eligible low-cost cold or archive access strategy based on retrieval SLA.
- Keep every file permanently hot despite negligible reads.
- Put actively used images in offline Archive tier.
- Assume offline Archive blobs can always be read with hot-tier latency.
Explanation
Correct Answer
A:Cooler tiers trade lower storage rates for access costs and possible rehydration.
Incorrect Answers
B:Hot storage may cost more for long-lived dormant content. This proposal contradicts the stated architecture constraint.
C:Archive rehydration latency is incompatible with interactive image requests. In the present requirement, compliance files are retained for years and are rarely opened but can wait for retrieval. The needed design instead works because cooler tiers trade lower storage rates for access costs and possible rehydration.
D:Offline archive retrieval has nontrivial delay and operational steps. In the present requirement, compliance files are retained for years and are rarely opened but can wait for retrieval. The needed design instead works because cooler tiers trade lower storage rates for access costs and possible rehydration.
Question 338
An architecture proposal for blob access tiers and archive retrieval relies on the following approach: Keep every file permanently hot despite negligible reads. Which specific failure or mismatch should the design reviewer identify?
- Archive rehydration latency is incompatible with interactive image requests.
- Hot storage may cost more for long-lived dormant content.
- Offline archive retrieval has nontrivial delay and operational steps.
- Ordinary management roles do not remove mandatory retention restrictions.
Explanation
Correct Answer
B:Keep every file permanently hot despite negligible reads. Hot storage may cost more for long-lived dormant content.
Incorrect Answers
A:That assessment refers to the separate proposal 'Put actively used images in offline Archive tier.' not to the recommendation under review. Here, Hot storage may cost more for long-lived dormant content.
C:That assessment refers to the separate proposal 'Assume offline Archive blobs can always be read with hot-tier latency.' not to the recommendation under review. Here, Hot storage may cost more for long-lived dormant content.
D:This concern applies to Assume a storage Owner can bypass a locked WORM policy. in another design data storage solutions for semi-structured and unstructured data design. The current proposal specifically fails because hot storage may cost more for long-lived dormant content.
Question 339
Acceptance testing must establish the following operational result: Total-cost modeling prevents tier-only price comparisons. Which verification action most directly establishes that outcome?
- Measure read latency and tier transaction costs under representative traffic.
- Inspect policy lock state and use an approved nonproduction duration test.
- Rehydrate a nonproduction sample and time usability.
- Estimate access, early deletion and rehydration charges for the retention period.
Explanation
Correct Answer
D:Total-cost modeling prevents tier-only price comparisons.
Incorrect Answers
A:That verification addresses the different requirement: A publisher reads product images every hour with low latency requirements. It does not directly establish total-cost modeling prevents tier-only price comparisons.
B:This is a test for An architect wants to change a locked time-based retention policy to shorter duration midterm. The requirement here is instead demonstrated by estimate access, early deletion and rehydration charges for the retention period.
C:That verification addresses the different requirement: A legal team needs immediate viewing of an archived blob during an unexpected audit. It does not directly establish total-cost modeling prevents tier-only price comparisons.
Question 340
A legal team needs immediate viewing of an archived blob during an unexpected audit. Which Azure architecture choice best meets this requirement?
- Put actively used images in offline Archive tier.
- Keep every file permanently hot despite negligible reads.
- Plan rehydration time or maintain an online retrieval copy for urgent access.
- Assume offline Archive blobs can always be read with hot-tier latency.
Explanation
Correct Answer
C:Archive content requires a rehydration process before ordinary online reads.
Incorrect Answers
A:Archive rehydration latency is incompatible with interactive image requests. In the present requirement, a legal team needs immediate viewing of an archived blob during an unexpected audit. The needed design instead works because archive content requires a rehydration process before ordinary online reads.
B:Hot storage may cost more for long-lived dormant content. In the present requirement, a legal team needs immediate viewing of an archived blob during an unexpected audit. The needed design instead works because archive content requires a rehydration process before ordinary online reads.
D:Offline archive retrieval has nontrivial delay and operational steps. This proposal contradicts the stated architecture constraint.