A company is building a hybrid application that integrates an on-premises system with Azure. The on-premises system is behind a firewall and cannot accept inbound connections. The Azure application needs to send commands to the on-premises system and receive responses. The team is considering Azure Relay. What is the main architectural consideration they must address?

Azure Relay cannot be used with SOAP services.

The on-premises system must initiate an outbound connection to Azure Relay.

Azure Relay only supports one-way communication.

Azure Relay requires a VPN connection to the on-premises network.

A team wants to implement continuous delivery for a containerized application. They use Azure Kubernetes Service (AKS) and want to deploy new versions automatically when a new image is pushed to Azure Container Registry (ACR). They also want to roll back quickly if the deployment fails. Which approach should they use?

Use AKS with a webhook from ACR to trigger a rolling update

Use GitHub Actions to deploy directly to AKS without a pipeline

Use Azure DevOps Pipelines with a multi-stage YAML pipeline that builds, pushes to ACR, and uses Helm to deploy to AKS with rollback

Use Azure Container Instances (ACI) with a restart policy

A company is building a hybrid application where an on-premises service needs to communicate with a cloud service. The on-premises service is behind a firewall that only allows outbound HTTPS. The cloud service is an Azure Function that processes messages. The company wants to ensure that the communication is secure and that the on-premises service can be reached if needed. Which service should they use?

Azure Relay with Hybrid Connections

Azure VPN Gateway with site-to-site VPN

A company is deploying a microservices application to AKS. The application uses Azure App Configuration for feature flags and Azure Key Vault for secrets. The team wants to ensure that when a feature flag is changed, the application picks up the change without a restart. They also want to audit who accessed secrets. What should they implement?

Use Azure Key Vault for both configuration and secrets.

Use the App Configuration SDK's refresh mechanism to poll for changes, and enable Key Vault logging and monitoring.

Use Azure App Configuration with Event Grid to trigger a restart of the pods.

Use Kubernetes ConfigMaps and Secrets with a reloader.

Azure Solutions Architect Expert

Domain 4Objective 2

Design an Application Architecture AZ-305 Practice Questions (Page 5)

Part of the Design infrastructure solutions domain, which makes up ~32% of our current practice bank. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–26 in this domain), expect 4–7 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

Questions 21–25

21expert · hard
A company is building a hybrid application that integrates an on-premises system with Azure. The on-premises system is behind a firewall and cannot accept inbound connections. The Azure application needs to send commands to the on-premises system and receive responses. The team is considering Azure Relay. What is the main architectural consideration they must address?
Select an answer first
22application · medium
A team wants to implement continuous delivery for a containerized application. They use Azure Kubernetes Service (AKS) and want to deploy new versions automatically when a new image is pushed to Azure Container Registry (ACR). They also want to roll back quickly if the deployment fails. Which approach should they use?
Select an answer first
23expert · hard
A company is building a hybrid application where an on-premises service needs to communicate with a cloud service. The on-premises service is behind a firewall that only allows outbound HTTPS. The cloud service is an Azure Function that processes messages. The company wants to ensure that the communication is secure and that the on-premises service can be reached if needed. Which service should they use?
Select an answer first
24foundation · easy
An organization needs to expose a legacy on-premises WCF service to cloud-based clients without opening inbound firewall ports. Which Azure messaging pattern or service should the architect recommend?
Select an answer first
25expert · hard
A company is deploying a microservices application to AKS. The application uses Azure App Configuration for feature flags and Azure Key Vault for secrets. The team wants to ensure that when a feature flag is changed, the application picks up the change without a restart. They also want to audit who accessed secrets. What should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-305

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-305” is a trademark of its owner, used for identification only.

Design an Application Architecture AZ-305 Practice Questions (Page 5)

Questions 21–25

An organization needs to expose a legacy on-premises WCF service to cloud-based clients without opening inbound firewall ports. Which Azure messaging pattern or service should the architect recommend?

Keep studying — Design infrastructure solutions