Azure Solutions Architect Expert AZ-305 Practice Exam 5

Contoso Ltd has 50 subscriptions across 3 business units. Each business unit manages its own IT operations. You are designing a logging and monitoring solution using Azure Monitor and Log Analytics.

The company requires that each business unit has full control over its own logs, but the central security team must be able to query security logs across all business units simultaneously. You need to minimize administrative overhead and cost.

Which Log Analytics workspace architecture should you recommend?

You are designing a monitoring solution for a hybrid environment. The environment consists of 200 Azure VMs and 300 on-premises VMware VMs running Windows Server 2022 and Linux.

You need to collect guest OS metrics, event logs, and syslog data from all VMs into a central Log Analytics workspace. The solution must support Azure Policy for deployment at scale and use the latest Microsoft monitoring agents.

Which TWO components should you include in your design? (Select TWO)

Your company uses Microsoft Sentinel integrated with a Log Analytics workspace. The workspace ingests 500 GB of data daily.

You are tasked with optimizing costs. You notice that 300 GB of the daily ingestion consists of network firewall flow logs. These logs are rarely queried for active threat hunting but must be retained for 3 years for compliance audits. When they are needed for audits, a query response time of up to 24 hours is acceptable.

Which cost optimization strategy should you recommend for the firewall logs?

You are designing an application monitoring strategy using Application Insights. The application consists of a frontend web app, a backend API, and a background worker process, all hosted on Azure App Service.

The development team wants to trace requests end-to-end across all three components. They also need to ensure that telemetry data is not lost if the application experiences a sudden spike in traffic, but they want to control ingestion costs.

Which TWO features should you configure? (Select TWO)

A highly regulated financial institution is migrating to Microsoft 365 and Azure. They currently use an on-premises Active Directory Domain Services (AD DS) forest.

The Chief Security Officer (CSO) mandates the following strict requirements:

1. User passwords or password hashes MUST NOT be synchronized to the cloud under any circumstances.
2. Users must experience Single Sign-On (SSO) from their domain-joined corporate devices.
3. If the on-premises internet connection fails, users must not be able to authenticate to cloud services.
4. The solution must not require inbound ports to be opened on the corporate firewall.

Which hybrid identity solution should you design?