Design Governance AZ-305 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is deploying a multi-tier web application that consists of a front-end VM, an application server VM, and a back-end SQL database. The application team needs to manage the VMs, while the database team needs to manage the SQL database. The company also wants to track costs by application and environment. You need to design a resource group strategy that supports these management and cost-tracking requirements. What should you do?

   • ACreate a resource group per environment (e.g., prod-rg, dev-rg) and place all resources for that environment in it.
   • BPlace all resources in a single resource group and use tags to indicate application and environment.
   • CCreate a resource group per resource type (e.g., one for all VMs in the subscription, one for all SQL databases).
   • DCreate one resource group for the VMs and another for the SQL database. Apply tags for application and environment to all resources.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company has a shared services subscription that contains resources used by multiple application teams (e.g., a central virtual network, DNS, and a shared key vault). Each application team has its own subscription. The company wants to allow application teams to use the shared resources but not modify them, and they want to track the cost of shared resources back to the consuming teams. What should you do?

   • AMove the shared resources into each application team's subscription and let them manage their own copies.
   • BGrant application teams Contributor access to the shared services subscription so they can use the resources, and rely on Azure cost management to allocate costs.
   • CPlace shared resources in a dedicated resource group in the shared services subscription, grant application teams read access to that resource group, and use tags on resources to track usage by team.
   • DCreate a resource group per application team in the shared services subscription and place the shared resources in each resource group.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is planning to migrate to Azure and has a mix of workloads: some are mission-critical with strict SLA requirements, some are test/dev with flexible uptime, and some have data residency constraints. They want to optimize costs while maintaining appropriate isolation and management boundaries. They also want to track costs by business unit. What subscription strategy should they adopt?

   • ACreate a subscription per workload, with no further separation.
   • BCreate a single subscription for all workloads and use resource groups to separate environments and data residency.
   • CCreate subscriptions based on environment (prod, test/dev) and further separate data-residency-constrained workloads into their own subscriptions, with management groups for business units and tags for cost tracking.
   • DCreate a subscription per business unit, and use resource groups to separate environments and data residency.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A startup is moving to Azure and expects rapid growth. They have a small IT team and want to minimize administrative overhead while still maintaining clear separation between production and development environments. They also want to track costs by project. What subscription strategy should they adopt?

   • ACreate two subscriptions: one for production and one for development. Use tags to track costs by project.
   • BCreate a subscription per project, with production and development in the same subscription.
   • CCreate a subscription per environment and per project (e.g., prod-project1, dev-project1, prod-project2, dev-project2).
   • DCreate a single subscription for everything and use resource groups to separate production and development.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is subject to multiple regulatory standards, including ISO 27001 and SOC 2. The compliance team wants a single dashboard to monitor compliance across all subscriptions and receive alerts when resources become non-compliant. The company also wants to automatically remediate certain non-compliant resources, such as storage accounts without encryption. You need to recommend a compliance management solution. What should you do?

   • AUse Microsoft Defender for Cloud to assign both ISO 27001 and SOC 2 regulatory standards, configure email alerts for compliance findings, and use Azure Policy with the 'DeployIfNotExists' effect to remediate storage accounts without encryption.
   • BUse Azure Advisor to monitor compliance with ISO 27001 and SOC 2, and use Azure Policy to remediate storage accounts without encryption.
   • CUse Azure Sentinel to collect compliance data from all subscriptions and create custom alerts for non-compliance, and use Azure Automation runbooks to remediate storage accounts.
   • DUse Azure Policy to assign both ISO 27001 and SOC 2 initiatives, and use the Azure Policy compliance dashboard for monitoring, but do not configure alerts or remediation.
   Reveal Solution Discussion Select an answer first