Pass Your Microsoft AZ-305 Exam Easy!

Microsoft AZ-305 Exam Questions & Answers, Accurate & Verified By IT Experts

Instant Download, Free Fast Updates, 99.6% Pass Rate

AZ-305 Premium Bundle

$79.99

Microsoft AZ-305 Premium Bundle

AZ-305 Premium File: 382 Questions & Answers

Last Update: Oct 14, 2026

AZ-305 Training Course: 87 Video Lectures

AZ-305 PDF Study Guide: 933 Pages

AZ-305 Bundle gives you unlimited access to "AZ-305" files. However, this does not replace the need for a .vce exam simulator. To download VCE exam simulator click here
Microsoft AZ-305 Premium Bundle
Microsoft AZ-305 Premium Bundle

AZ-305 Premium File: 382 Questions & Answers

Last Update: Oct 14, 2026

AZ-305 Training Course: 87 Video Lectures

AZ-305 PDF Study Guide: 933 Pages

$79.99

AZ-305 Bundle gives you unlimited access to "AZ-305" files. However, this does not replace the need for a .vce exam simulator. To download your .vce exam simulator click here

Microsoft AZ-305 Practice Test 50

Question 490

The planned architecture is: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported. Workload context: A data integration process needs secure connection secrets without embedding storage keys in ADF linked service JSON. Which acceptance test demonstrates that the required behavior works?

  1. Send old, new and malformed event payloads and verify accepted versus quarantined behavior.
  2. Run a Spark transformation, inspect output parquet partitions and compare row counts to input.
  3. Rotate a test secret and verify the pipeline continues with approved identity and network access.
  4. Run the pipeline and compare source/target counts and integration-runtime activity logs.

Explanation

Correct Answer

C:

The acceptance test is specific: Rotate a test secret and verify the pipeline continues with approved identity and network access. Its purpose is to establish that the proposed architecture works: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported.

Incorrect Answers

A:

The alternative test targets: Add validated event schema/version handling and a quarantine path to the ingestion pipeline before writing curated tables. The scenario's actual proposed remedy is: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported. Verify that one by: Rotate a test secret and verify the pipeline continues with approved identity and network access.

B:

This check validates a different workload: Run a Spark transformation, inspect output parquet partitions and compare row counts to input. Its associated design is: Use Azure Databricks or supported managed Spark compute with storage access through managed identities where supported. The required acceptance test here is: Rotate a test secret and verify the pipeline continues with approved identity and network access.

D:

The alternative test targets: Use Azure Data Factory with supported linked services, self-hosted integration runtime and a scheduled copy pipeline. The scenario's actual proposed remedy is: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported. Verify that one by: Rotate a test secret and verify the pipeline continues with approved identity and network access.

Question 491

The customer states: A data integration process needs secure connection secrets without embedding storage keys in ADF linked service JSON. An incident reveals: The integration pipeline fails when a hard-coded database password expires. What cause best accounts for this evidence?

  1. Schema evolution and invalid-event handling were not designed into ingestion.
  2. A suitable self-hosted connectivity runtime was not provided for private data movement.
  3. The compute framework does not match parallel data-lake transformation scale.
  4. Credential management was not separated from pipeline definitions and access scopes.

Explanation

Correct Answer

D:

The recorded behavior follows from: Credential management was not separated from pipeline definitions and access scopes. The appropriate mitigation would be: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported. Verify with: Rotate a test secret and verify the pipeline continues with approved identity and network access.

Incorrect Answers

A:

The alternative weakness is: Schema evolution and invalid-event handling were not designed into ingestion. Its associated failure is: A new optional field breaks a downstream transformation and all streaming ingestion stops. Neither explains the present observation: The integration pipeline fails when a hard-coded database password expires. The direct cause here is: Credential management was not separated from pipeline definitions and access scopes.

B:

This cause would explain a different symptom: The pipeline cannot access a private on-prem SQL instance using only Azure-hosted integration runtime. The mechanism for that event is: A suitable self-hosted connectivity runtime was not provided for private data movement. Here the stated symptom is: The integration pipeline fails when a hard-coded database password expires. Its cause is: Credential management was not separated from pipeline definitions and access scopes.

C:

The proposed diagnosis fits another scenario: The compute framework does not match parallel data-lake transformation scale. It would typically be reflected by: Analysts attempt to process terabytes of distributed data in one small VM process. The current evidence instead supports: Credential management was not separated from pipeline definitions and access scopes.

Question 492

Workload context: A data integration process needs secure connection secrets without embedding storage keys in ADF linked service JSON. The implemented remedy is: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported. Which ongoing practice most specifically prevents recurrence of this failure: The integration pipeline fails when a hard-coded database password expires.?

  1. Keep contract tests and versioned schema validation for each upstream producer release.
  2. Monitor cluster/job compute costs, access permissions and data quality checks.
  3. Monitor integration runtime health, pipeline retries and schema drift for scheduled loads.
  4. Review Key Vault access and runtime network connectivity after credential rotation.

Explanation

Correct Answer

D:

The key follow-up control is: Review Key Vault access and runtime network connectivity after credential rotation. It avoids recurrence of the scenario in which: The integration pipeline fails when a hard-coded database password expires. It addresses: Credential management was not separated from pipeline definitions and access scopes.

Incorrect Answers

A:

The proposed control focuses on: Schema evolution and invalid-event handling were not designed into ingestion. For the design in the question, recurrence comes from: Credential management was not separated from pipeline definitions and access scopes. A precise prevention step is: Review Key Vault access and runtime network connectivity after credential rotation.

B:

That safeguard manages another risk: The compute framework does not match parallel data-lake transformation scale. Its scenario is: Analysts attempt to process terabytes of distributed data in one small VM process. The present recurring risk is: Credential management was not separated from pipeline definitions and access scopes. The proper ongoing control is: Review Key Vault access and runtime network connectivity after credential rotation.

C:

This is a reasonable safeguard for a different fault: The pipeline cannot access a private on-prem SQL instance using only Azure-hosted integration runtime. That different mechanism is: A suitable self-hosted connectivity runtime was not provided for private data movement. The original incident here instead arises from: Credential management was not separated from pipeline definitions and access scopes. The directly relevant safeguard is: Review Key Vault access and runtime network connectivity after credential rotation.

Question 493

A solution architect is reviewing a workload: An enterprise receives batch exports from several departments and wants a governed central analytics zone with separate raw, cleansed and curated data layers. The observed incident is: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Which architecture choice most directly removes the identified weakness?

  1. Use Azure Databricks or supported managed Spark compute with storage access through managed identities where supported.
  2. Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.
  3. Use Azure Data Factory with supported linked services, self-hosted integration runtime and a scheduled copy pipeline.
  4. Design a staged ingestion and transformation pipeline with a data lake and an appropriate SQL analytics serving layer.

Explanation

Correct Answer

B:

The evidence (A reporting client accidentally reads unvalidated raw data mixed with production-ready tables.) identifies the following cause: The lake lacks layered data-quality boundaries and separate access scopes. The design that removes it is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines. The acceptance check is: Move a sample batch from raw to curated and verify users cannot access unapproved raw files.

Incorrect Answers

A:

That design instead addresses another observed condition: Analysts attempt to process terabytes of distributed data in one small VM process. Its technical cause is: The compute framework does not match parallel data-lake transformation scale. The current workload exhibits: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Its targeted remedy is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.

C:

The option belongs to a different failure mechanism: A suitable self-hosted connectivity runtime was not provided for private data movement. That situation exhibits: The pipeline cannot access a private on-prem SQL instance using only Azure-hosted integration runtime. For the stated case, the remedy is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.

D:

That design instead addresses another observed condition: Dashboards query raw operational SQL tables directly and cause transaction contention. Its technical cause is: Operational OLTP and heavy analytical serving duties were not isolated. The current workload exhibits: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Its targeted remedy is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.

Question 494

An architect proposes this change: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines. The workload context is: An enterprise receives batch exports from several departments and wants a governed central analytics zone with separate raw, cleansed and curated data layers. Which evidence would most directly validate the change?

  1. Run the pipeline and compare source/target counts and integration-runtime activity logs.
  2. Reconcile source-row counts, curated output and downstream query latency before cutover.
  3. Move a sample batch from raw to curated and verify users cannot access unapproved raw files.
  4. Run a Spark transformation, inspect output parquet partitions and compare row counts to input.

Explanation

Correct Answer

C:

The decisive evidence is: Move a sample batch from raw to curated and verify users cannot access unapproved raw files. This measures the mechanism of the planned change, not an unrelated Azure service: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.

Incorrect Answers

A:

This check validates a different workload: Run the pipeline and compare source/target counts and integration-runtime activity logs. Its associated design is: Use Azure Data Factory with supported linked services, self-hosted integration runtime and a scheduled copy pipeline. The required acceptance test here is: Move a sample batch from raw to curated and verify users cannot access unapproved raw files.

B:

That observation pertains to a separate failure: Dashboards query raw operational SQL tables directly and cause transaction contention. Its cause is: Operational OLTP and heavy analytical serving duties were not isolated. It does not confirm the result of this design. The direct proof would be: Move a sample batch from raw to curated and verify users cannot access unapproved raw files.

D:

This check validates a different workload: Run a Spark transformation, inspect output parquet partitions and compare row counts to input. Its associated design is: Use Azure Databricks or supported managed Spark compute with storage access through managed identities where supported. The required acceptance test here is: Move a sample batch from raw to curated and verify users cannot access unapproved raw files.

Question 495

During architecture troubleshooting, a team reports: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Context: An enterprise receives batch exports from several departments and wants a governed central analytics zone with separate raw, cleansed and curated data layers. Which underlying design mistake explains the observed behavior most precisely?

  1. The lake lacks layered data-quality boundaries and separate access scopes.
  2. The compute framework does not match parallel data-lake transformation scale.
  3. A suitable self-hosted connectivity runtime was not provided for private data movement.
  4. Operational OLTP and heavy analytical serving duties were not isolated.

Explanation

Correct Answer

A:

The incident is explained by: The lake lacks layered data-quality boundaries and separate access scopes. The reported symptom is: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. The corresponding design fix is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.

Incorrect Answers

B:

The proposed diagnosis fits another scenario: The compute framework does not match parallel data-lake transformation scale. It would typically be reflected by: Analysts attempt to process terabytes of distributed data in one small VM process. The current evidence instead supports: The lake lacks layered data-quality boundaries and separate access scopes.

C:

The alternative weakness is: A suitable self-hosted connectivity runtime was not provided for private data movement. Its associated failure is: The pipeline cannot access a private on-prem SQL instance using only Azure-hosted integration runtime. Neither explains the present observation: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. The direct cause here is: The lake lacks layered data-quality boundaries and separate access scopes.

D:

This cause would explain a different symptom: Dashboards query raw operational SQL tables directly and cause transaction contention. The mechanism for that event is: Operational OLTP and heavy analytical serving duties were not isolated. Here the stated symptom is: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Its cause is: The lake lacks layered data-quality boundaries and separate access scopes.

Question 496

The design change is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines. The original failure was: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Which ongoing control best prevents recurrence of the same root cause?

  1. Monitor integration runtime health, pipeline retries and schema drift for scheduled loads.
  2. Audit data lifecycle and data access policies across raw and curated layers.
  3. Monitor cluster/job compute costs, access permissions and data quality checks.
  4. Monitor refresh lineage and data-lake transformation completion before reports run.

Explanation

Correct Answer

B:

This is an ongoing protection specific to the fault: Audit data lifecycle and data access policies across raw and curated layers. The recurrence risk is: The lake lacks layered data-quality boundaries and separate access scopes. It should be checked using: Move a sample batch from raw to curated and verify users cannot access unapproved raw files.

Incorrect Answers

A:

That safeguard manages another risk: A suitable self-hosted connectivity runtime was not provided for private data movement. Its scenario is: The pipeline cannot access a private on-prem SQL instance using only Azure-hosted integration runtime. The present recurring risk is: The lake lacks layered data-quality boundaries and separate access scopes. The proper ongoing control is: Audit data lifecycle and data access policies across raw and curated layers.

C:

The proposed control focuses on: The compute framework does not match parallel data-lake transformation scale. For the design in the question, recurrence comes from: The lake lacks layered data-quality boundaries and separate access scopes. A precise prevention step is: Audit data lifecycle and data access policies across raw and curated layers.

D:

That safeguard manages another risk: Operational OLTP and heavy analytical serving duties were not isolated. Its scenario is: Dashboards query raw operational SQL tables directly and cause transaction contention. The present recurring risk is: The lake lacks layered data-quality boundaries and separate access scopes. The proper ongoing control is: Audit data lifecycle and data access policies across raw and curated layers.

Question 497

A design workshop has this requirement: A manufacturing business runs Azure VMs in one region and needs orchestrated recovery in a second region if the primary region fails. Operators currently observe: After a regional outage, engineers have only VM snapshots in the unavailable primary region. Select the ONE design remedy that best addresses the root cause.

  1. Design Azure SQL failover groups or appropriate geo-replication with an explicit application-level RPO and listener behavior.
  2. Use supported failback/reprotect procedures and validate reverse replication and recovery plans.
  3. Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
  4. Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.

Explanation

Correct Answer

D:

The evidence (After a regional outage, engineers have only VM snapshots in the unavailable primary region.) identifies the following cause: Regional DR replication and orchestrated recovery were not configured for the workloads. The design that removes it is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan. The acceptance check is: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.

Incorrect Answers

A:

This choice mitigates an alternative scenario, where: Applications remain pinned to a lost primary server endpoint after SQL recovery. The underlying issue there is: The database regional failover and application endpoint strategy were not designed together. Here the root issue is: Regional DR replication and orchestrated recovery were not configured for the workloads. Choose the corresponding action: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.

B:

The option belongs to a different failure mechanism: The DR design lacks a reprotection and reverse-replication workflow. That situation exhibits: Operations stop replication after failover and cannot return when the original site recovers. For the stated case, the remedy is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.

C:

That design instead addresses another observed condition: Replicated VMs start in the backup region but are unreachable from the corporate data center. Its technical cause is: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. The current workload exhibits: After a regional outage, engineers have only VM snapshots in the unavailable primary region. Its targeted remedy is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.

Question 498

The planned architecture is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan. Workload context: A manufacturing business runs Azure VMs in one region and needs orchestrated recovery in a second region if the primary region fails. Which acceptance test demonstrates that the required behavior works?

  1. Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path.
  2. Initiate regional failover in staging and compare latest replicated transactions with primary commit history.
  3. Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.
  4. Execute an isolated recovery rehearsal and verify reverse replication health before failback cutover.

Explanation

Correct Answer

C:

This observation directly verifies the intended design: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations. The architecture being tested is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan. The original symptom was: After a regional outage, engineers have only VM snapshots in the unavailable primary region.

Incorrect Answers

A:

That observation pertains to a separate failure: Replicated VMs start in the backup region but are unreachable from the corporate data center. Its cause is: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. It does not confirm the result of this design. The direct proof would be: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.

B:

The alternative test targets: Design Azure SQL failover groups or appropriate geo-replication with an explicit application-level RPO and listener behavior. The scenario's actual proposed remedy is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan. Verify that one by: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.

D:

That observation pertains to a separate failure: Operations stop replication after failover and cannot return when the original site recovers. Its cause is: The DR design lacks a reprotection and reverse-replication workflow. It does not confirm the result of this design. The direct proof would be: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.

Question 499

The customer states: A manufacturing business runs Azure VMs in one region and needs orchestrated recovery in a second region if the primary region fails. An incident reveals: After a regional outage, engineers have only VM snapshots in the unavailable primary region. What cause best accounts for this evidence?

  1. Regional DR replication and orchestrated recovery were not configured for the workloads.
  2. The DR plan replicated compute without replicating connectivity, routes and DNS dependencies.
  3. The DR design lacks a reprotection and reverse-replication workflow.
  4. The database regional failover and application endpoint strategy were not designed together.

Explanation

Correct Answer

A:

This is the failure mechanism rather than an incidental symptom: Regional DR replication and orchestrated recovery were not configured for the workloads. It accounts for: After a regional outage, engineers have only VM snapshots in the unavailable primary region. The architectural repair is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.

Incorrect Answers

B:

The alternative weakness is: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. Its associated failure is: Replicated VMs start in the backup region but are unreachable from the corporate data center. Neither explains the present observation: After a regional outage, engineers have only VM snapshots in the unavailable primary region. The direct cause here is: Regional DR replication and orchestrated recovery were not configured for the workloads.

C:

This cause would explain a different symptom: Operations stop replication after failover and cannot return when the original site recovers. The mechanism for that event is: The DR design lacks a reprotection and reverse-replication workflow. Here the stated symptom is: After a regional outage, engineers have only VM snapshots in the unavailable primary region. Its cause is: Regional DR replication and orchestrated recovery were not configured for the workloads.

D:

The proposed diagnosis fits another scenario: The database regional failover and application endpoint strategy were not designed together. It would typically be reflected by: Applications remain pinned to a lost primary server endpoint after SQL recovery. The current evidence instead supports: Regional DR replication and orchestrated recovery were not configured for the workloads.

Question 500

Workload context: A manufacturing business runs Azure VMs in one region and needs orchestrated recovery in a second region if the primary region fails. The implemented remedy is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan. Which ongoing practice most specifically prevents recurrence of this failure: After a regional outage, engineers have only VM snapshots in the unavailable primary region.?

  1. Schedule non-disruptive test failovers and monitor replication health and recovery plans.
  2. Test DR connectivity routes, gateways and private DNS for failover regions.
  3. Include failback tests and network address planning in every recovery exercise.
  4. Rehearse the secondary listener and replication lag under representative load.

Explanation

Correct Answer

A:

This is an ongoing protection specific to the fault: Schedule non-disruptive test failovers and monitor replication health and recovery plans. The recurrence risk is: Regional DR replication and orchestrated recovery were not configured for the workloads. It should be checked using: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.

Incorrect Answers

B:

The proposed control focuses on: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. For the design in the question, recurrence comes from: Regional DR replication and orchestrated recovery were not configured for the workloads. A precise prevention step is: Schedule non-disruptive test failovers and monitor replication health and recovery plans.

C:

That safeguard manages another risk: The DR design lacks a reprotection and reverse-replication workflow. Its scenario is: Operations stop replication after failover and cannot return when the original site recovers. The present recurring risk is: Regional DR replication and orchestrated recovery were not configured for the workloads. The proper ongoing control is: Schedule non-disruptive test failovers and monitor replication health and recovery plans.

D:

This is a reasonable safeguard for a different fault: Applications remain pinned to a lost primary server endpoint after SQL recovery. That different mechanism is: The database regional failover and application endpoint strategy were not designed together. The original incident here instead arises from: Regional DR replication and orchestrated recovery were not configured for the workloads. The directly relevant safeguard is: Schedule non-disruptive test failovers and monitor replication health and recovery plans.


Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests

Purchase Individually

AZ-305 Premium File

Premium File
AZ-305 Premium File
382 Q&A
$76.99$69.99

AZ-305 Training Video Course

Training Course
AZ-305 Training Video Course
87 Lectures
$27.49$24.99

AZ-305 Study Guide

Study Guide
AZ-305 Study Guide
933 PDF Pages
$27.49$24.99

Site Search:

 

VISA, MasterCard, AmericanExpress, UnionPay

SPECIAL OFFER: GET 10% OFF

ExamCollection Premium

ExamCollection Premium Files

Pass your Exam with ExamCollection's PREMIUM files!

  • ExamCollection Certified Safe Files
  • Guaranteed to have ACTUAL Exam Questions
  • Up-to-Date Exam Study Material - Verified by Experts
  • Instant Downloads
Enter Your Email Address to Receive Your 10% Off Discount Code
A Confirmation Link will be sent to this email address to verify your login
We value your privacy. We will not rent or sell your email address

SPECIAL OFFER: GET 10% OFF

Use Discount Code:

MIN10OFF

A confirmation link was sent to your e-mail.
Please check your mailbox for a message from support@examcollection.com and follow the directions.

Next

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.