A financial services company needs a dedicated, private connection from their on-premises data center to Azure with a guaranteed bandwidth of 10 Gbps and no traversal of the public internet. They also want to connect multiple branch offices to Azure with automated connectivity. Which solution should they implement?

Azure Bastion with a site-to-site VPN

Azure Front Door with private link to the on-premises network

Site-to-site VPN over the internet with a VPN gateway

ExpressRoute circuit with a connection to a Virtual WAN hub

A company runs a web application on a set of virtual machines in a single VNet. They need to route traffic based on URL paths (e.g., /images to one backend pool, /api to another) and perform TLS termination. They also need to restrict access to the application to only the IP ranges of their corporate office. Which solution should they implement?

Deploy Azure Front Door with URL path-based routing and a network security group on the backend subnets.

Deploy Azure Application Gateway with URL path-based routing and a network security group on the application gateway subnet that allows only corporate IP ranges.

Deploy Azure Traffic Manager with URL path-based routing and Azure Firewall.

Deploy Azure Load Balancer with NAT rules and configure network security groups on the backend VMs.

A company has a three-tier application in a VNet: web subnets, application subnets, and database subnets. They need to ensure that only the web subnets can communicate with the application subnets, and only the application subnets can communicate with the database subnets. They also need to allow outbound internet access from the web subnets only. What should they implement?

Configure Azure DDoS Protection to filter traffic between subnets.

Deploy Azure Firewall and route all traffic between subnets through it.

Configure Network Security Groups on each subnet with rules to allow only the required traffic flows.

Use Azure Application Gateway to filter traffic between subnets.

Azure Solutions Architect Expert

Domain 4Objective 4

Design Network Solutions AZ-305 Practice Questions (Page 2)

Part of the Design infrastructure solutions domain, which makes up ~32% of our current practice bank. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–26 in this domain), expect 4–7 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

Questions 6–10

6foundation · easy
Which Azure service is designed to optimize and automate branch connectivity to Azure by combining multiple networking services into a single managed hub?
Select an answer first
7application · medium
A financial services company needs a dedicated, private connection from their on-premises data center to Azure with a guaranteed bandwidth of 10 Gbps and no traversal of the public internet. They also want to connect multiple branch offices to Azure with automated connectivity. Which solution should they implement?
Select an answer first
8foundation · easy
Which Azure service provides a private, dedicated connection between an on-premises network and Azure that does not traverse the public internet?
Select an answer first
9application · medium
A company runs a web application on a set of virtual machines in a single VNet. They need to route traffic based on URL paths (e.g., /images to one backend pool, /api to another) and perform TLS termination. They also need to restrict access to the application to only the IP ranges of their corporate office. Which solution should they implement?
Select an answer first
10application · medium
A company has a three-tier application in a VNet: web subnets, application subnets, and database subnets. They need to ensure that only the web subnets can communicate with the application subnets, and only the application subnets can communicate with the database subnets. They also need to allow outbound internet access from the web subnets only. What should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-305

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-305” is a trademark of its owner, used for identification only.

Design Network Solutions AZ-305 Practice Questions (Page 2)

Questions 6–10

Which Azure service is designed to optimize and automate branch connectivity to Azure by combining multiple networking services into a single managed hub?

Which Azure service provides a private, dedicated connection between an on-premises network and Azure that does not traverse the public internet?

Keep studying — Design infrastructure solutions