cert
cert-1
cert-2

Pass Microsoft AZ-305 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
AZ-305 Exam - Verified By Experts
AZ-305 Premium Bundle
$29.98

AZ-305 Premium Bundle

$79.99
$109.97
  • Premium File 382 Questions & Answers. Last update: Nov 02, 2026
  • Training Course 87 Video Lectures
  • Study Guide 933 Pages
 
$109.97
$79.99
accept 174 downloads in last 7 days
block-screenshots
Purchase Microsoft AZ-305 Exam Training Products Individually
Microsoft AZ-305 Premium File
Premium File 382 Q&A
$76.99$69.99
Microsoft AZ-305 Video Training Course
Training Course 87 Lectures
$21.99 $19.99
Microsoft AZ-305 PDF Study Guide
Study Guide 933 Pages
$21.99 $19.99
Microsoft AZ-305 Practice Test 90

Question 890

An architecture proposal for application gateway and waf relies on the following approach: Continue routing to every open TCP port even when the application is unhealthy. Which specific failure or mismatch should the design reviewer identify?

  1. NSGs match network traffic properties, not full HTTP application content.
  2. Socket availability does not prove login or backend dependencies work.
  3. Layer 4 load balancing lacks HTTP path awareness.
  4. Broad propagation defeats separation requirements.

Explanation

Correct Answer

B:

Continue routing to every open TCP port even when the application is unhealthy. Socket availability does not prove login or backend dependencies work.

Incorrect Answers

A:

That assessment refers to the separate proposal 'Use an NSG only and assume it inspects SQL injection request payloads.' not to the recommendation under review. Here, Socket availability does not prove login or backend dependencies work.

C:

That assessment refers to the separate proposal 'Use only a network Load Balancer rule that cannot inspect URLs.' not to the recommendation under review. Here, Socket availability does not prove login or backend dependencies work.

D:

This concern applies to Propagate all sensitive prefixes to every connection by default. in another design network solutions design. The current proposal specifically fails because socket availability does not prove login or backend dependencies work.

Question 891

Acceptance testing must establish the following operational result: Health status confirms routing follows application readiness. Which verification action most directly establishes that outcome?

  1. Simulate the dependency fault and inspect gateway backend health.
  2. Send requests to two paths and inspect destination backends.
  3. Send an approved WAF test payload and review resulting logs.
  4. Test reachability from restricted and permitted connections.

Explanation

Correct Answer

A:

Health status confirms routing follows application readiness.

Incorrect Answers

B:

That verification addresses the different requirement: A regional HTTPS service requires path-based routing to separate API and static application backends. It does not directly establish health status confirms routing follows application readiness.

C:

That verification addresses the different requirement: A public ecommerce site must inspect common SQL injection patterns before requests reach its web tier. It does not directly establish health status confirms routing follows application readiness.

D:

This is a test for Two Virtual WAN route tables must isolate sensitive workloads while retaining shared services. The requirement here is instead demonstrated by simulate the dependency fault and inspect gateway backend health.

Question 892

A globally deployed HTTPS application requires edge WAF protection and failover from an unhealthy regional origin. Which TWO Azure Front Door elements fit? (Select TWO.)

  1. Apply an appropriate Front Door Web Application Firewall policy.
  2. Assume Front Door makes a single-region SQL database globally synchronous.
  3. Configure a global Front Door route with healthy regional origins.
  4. Treat DNS Traffic Manager as an inline TLS-terminating reverse proxy.
  5. Use a private regional Layer 4 load balancer as the worldwide WAF.

Explanation

Correct Answers

A:

Edge WAF inspects applicable web threats before origin delivery.

C:

Origin groups provide global HTTP routing and failover.

Incorrect Answers

B:

Web routing does not replicate database transactions.

D:

Traffic Manager supplies DNS answers, not HTTP WAF inspection.

E:

An internal transport load balancer cannot provide global HTTP WAF.

Question 893

An architecture proposal for global routing and load-balancer selection relies on the following approach: Use a single regional internal Load Balancer as the public worldwide failover layer. Which specific failure or mismatch should the design reviewer identify?

  1. Traffic Manager is a DNS service, not an inline WAF gateway.
  2. Ad hoc mesh operations become difficult at global scale.
  3. Front Door's HTTP delivery model is not a general TCP load balancer.
  4. A regional private Layer 4 endpoint cannot provide global HTTP edge routing.

Explanation

Correct Answer

D:

Use a single regional internal Load Balancer as the public worldwide failover layer. A regional private Layer 4 endpoint cannot provide global HTTP edge routing.

Incorrect Answers

A:

That assessment refers to the separate proposal 'Assume Traffic Manager terminates client TLS and inspects HTTP payloads itself.' not to the recommendation under review. Here, A regional private Layer 4 endpoint cannot provide global HTTP edge routing.

B:

This concern applies to Build hundreds of independent point-to-point tunnels with no routing framework. in another design network solutions design. The current proposal specifically fails because a regional private Layer 4 endpoint cannot provide global HTTP edge routing.

C:

That assessment refers to the separate proposal 'Use Front Door HTTP routing as if it supports arbitrary private TCP protocols.' not to the recommendation under review. Here, A regional private Layer 4 endpoint cannot provide global HTTP edge routing.

Question 894

Acceptance testing must establish the following operational result: Continuity verifies failover across origins. Which verification action most directly establishes that outcome?

  1. Inspect propagated branch and VNet routes through representative hubs.
  2. Disable a region's origin and test global service reachability.
  3. Exercise a TCP connection and simulate a backend failure.
  4. Query DNS under simulated endpoint health failures and observe answer changes.

Explanation

Correct Answer

B:

Continuity verifies failover across origins.

Incorrect Answers

A:

This is a test for An enterprise connects dozens of global branches and VNets with central routing governance. The requirement here is instead demonstrated by disable a region's origin and test global service reachability.

C:

That verification addresses the different requirement: A non-HTTP TCP application needs regional private load distribution among backend VMs. It does not directly establish continuity verifies failover across origins.

D:

That verification addresses the different requirement: A legacy non-HTTP service needs DNS-based regional endpoint selection without a global reverse proxy. It does not directly establish continuity verifies failover across origins.

Question 895

A non-HTTP TCP application needs regional private load distribution among backend VMs. Which Azure architecture choice best meets this requirement?

  1. Use an Azure internal Load Balancer with relevant TCP health probes.
  2. Use a single regional internal Load Balancer as the public worldwide failover layer.
  3. Assume Traffic Manager terminates client TLS and inspects HTTP payloads itself.
  4. Use Front Door HTTP routing as if it supports arbitrary private TCP protocols.

Explanation

Correct Answer

A:

Layer 4 load balancing is suited to transport-protocol applications inside a VNet.

Incorrect Answers

B:

A regional private Layer 4 endpoint cannot provide global HTTP edge routing. In the present requirement, a non-HTTP TCP application needs regional private load distribution among backend VMs. The needed design instead works because layer 4 load balancing is suited to transport-protocol applications inside a VNet.

C:

Traffic Manager is a DNS service, not an inline WAF gateway. In the present requirement, a non-HTTP TCP application needs regional private load distribution among backend VMs. The needed design instead works because layer 4 load balancing is suited to transport-protocol applications inside a VNet.

D:

Front Door's HTTP delivery model is not a general TCP load balancer. This proposal contradicts the stated architecture constraint.

Question 896

An architecture proposal for global routing and load-balancer selection relies on the following approach: Use Front Door HTTP routing as if it supports arbitrary private TCP protocols. Which specific failure or mismatch should the design reviewer identify?

  1. A regional private Layer 4 endpoint cannot provide global HTTP edge routing.
  2. Front Door's HTTP delivery model is not a general TCP load balancer.
  3. S2S is not the normal per-user remote access model.
  4. Traffic Manager is a DNS service, not an inline WAF gateway.

Explanation

Correct Answer

B:

Use Front Door HTTP routing as if it supports arbitrary private TCP protocols. Front Door's HTTP delivery model is not a general TCP load balancer.

Incorrect Answers

A:

That assessment refers to the separate proposal 'Use a single regional internal Load Balancer as the public worldwide failover layer.' not to the recommendation under review. Here, Front Door's HTTP delivery model is not a general TCP load balancer.

C:

This concern applies to Build a site-to-site tunnel from every individual laptop as a branch router. in another design network solutions design. The current proposal specifically fails because front Door's HTTP delivery model is not a general TCP load balancer.

D:

That assessment refers to the separate proposal 'Assume Traffic Manager terminates client TLS and inspects HTTP payloads itself.' not to the recommendation under review. Here, Front Door's HTTP delivery model is not a general TCP load balancer.

Question 897

Acceptance testing must establish the following operational result: The test confirms transport-level distribution. Which verification action most directly establishes that outcome?

  1. Disable a region's origin and test global service reachability.
  2. Query DNS under simulated endpoint health failures and observe answer changes.
  3. Test a client authentication and a permitted private address route.
  4. Exercise a TCP connection and simulate a backend failure.

Explanation

Correct Answer

D:

The test confirms transport-level distribution.

Incorrect Answers

A:

That verification addresses the different requirement: A multi-region HTTP service needs one global entry point with edge WAF and origin failover. It does not directly establish the test confirms transport-level distribution.

B:

That verification addresses the different requirement: A legacy non-HTTP service needs DNS-based regional endpoint selection without a global reverse proxy. It does not directly establish the test confirms transport-level distribution.

C:

This is a test for Remote employees need individually authenticated access to private Azure networks. The requirement here is instead demonstrated by exercise a TCP connection and simulate a backend failure.

Question 898

A legacy non-HTTP service needs DNS-based regional endpoint selection without a global reverse proxy. Which Azure architecture choice best meets this requirement?

  1. Evaluate Azure Traffic Manager's DNS routing profile with health monitoring.
  2. Use a single regional internal Load Balancer as the public worldwide failover layer.
  3. Assume Traffic Manager terminates client TLS and inspects HTTP payloads itself.
  4. Use Front Door HTTP routing as if it supports arbitrary private TCP protocols.

Explanation

Correct Answer

A:

DNS-level routing returns healthy regional endpoints rather than proxying the traffic.

Incorrect Answers

B:

A regional private Layer 4 endpoint cannot provide global HTTP edge routing. In the present requirement, a legacy non-HTTP service needs DNS-based regional endpoint selection without a global reverse proxy. The needed design instead works because DNS-level routing returns healthy regional endpoints rather than proxying the traffic.

C:

Traffic Manager is a DNS service, not an inline WAF gateway. This proposal contradicts the stated architecture constraint.

D:

Front Door's HTTP delivery model is not a general TCP load balancer. In the present requirement, a legacy non-HTTP service needs DNS-based regional endpoint selection without a global reverse proxy. The needed design instead works because DNS-level routing returns healthy regional endpoints rather than proxying the traffic.

Question 899

An architecture proposal for global routing and load-balancer selection relies on the following approach: Assume Traffic Manager terminates client TLS and inspects HTTP payloads itself. Which specific failure or mismatch should the design reviewer identify?

  1. Front Door's HTTP delivery model is not a general TCP load balancer.
  2. Traffic Manager is a DNS service, not an inline WAF gateway.
  3. A regional private Layer 4 endpoint cannot provide global HTTP edge routing.
  4. Socket availability does not prove login or backend dependencies work.

Explanation

Correct Answer

B:

Assume Traffic Manager terminates client TLS and inspects HTTP payloads itself. Traffic Manager is a DNS service, not an inline WAF gateway.

Incorrect Answers

A:

That assessment refers to the separate proposal 'Use Front Door HTTP routing as if it supports arbitrary private TCP protocols.' not to the recommendation under review. Here, Traffic Manager is a DNS service, not an inline WAF gateway.

C:

That assessment refers to the separate proposal 'Use a single regional internal Load Balancer as the public worldwide failover layer.' not to the recommendation under review. Here, Traffic Manager is a DNS service, not an inline WAF gateway.

D:

This concern applies to Continue routing to every open TCP port even when the application is unhealthy. in another design network solutions design. The current proposal specifically fails because traffic Manager is a DNS service, not an inline WAF gateway.

Question 900

Acceptance testing must establish the following operational result: DNS selection behavior confirms the routing model. Which verification action most directly establishes that outcome?

  1. Disable a region's origin and test global service reachability.
  2. Query DNS under simulated endpoint health failures and observe answer changes.
  3. Exercise a TCP connection and simulate a backend failure.
  4. Simulate the dependency fault and inspect gateway backend health.

Explanation

Correct Answer

B:

DNS selection behavior confirms the routing model.

Incorrect Answers

A:

That verification addresses the different requirement: A multi-region HTTP service needs one global entry point with edge WAF and origin failover. It does not directly establish DNS selection behavior confirms the routing model.

C:

That verification addresses the different requirement: A non-HTTP TCP application needs regional private load distribution among backend VMs. It does not directly establish DNS selection behavior confirms the routing model.

D:

This is a test for The new web deployment passes its TCP probe but fails application login because an identity provider is down. The requirement here is instead demonstrated by query DNS under simulated endpoint health failures and observe answer changes.

Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests