Azure Solutions Architect Expert AZ-305 Practice Exam 6

Contoso Ltd is a global manufacturing company with 50,000 employees. They operate a mix of on-premises infrastructure and Azure across 50 subscriptions. The company needs to improve security posture to meet ISO 27001 compliance. You need to design a centralized logging solution. The solution must support querying across all subscriptions, retain security logs for 2 years for compliance, support custom alerts, and minimize administrative overhead. Which architecture should you recommend?

A financial institution has 500 Windows Server VMs on-premises and 200 VMs in Azure. They need to implement a unified monitoring solution that provides VM insights, tracks missing updates, and monitors security events across both environments. The solution must use native Azure tools and minimize the deployment of custom agents. Which combination of services should you recommend?

An enterprise uses Azure Sentinel and Log Analytics. They ingest 500 GB of logs daily. The IT budget is constrained, and they need to optimize costs. Security logs must be searchable for 90 days, and compliance logs must be retained for 3 years but are rarely queried after 30 days. Which THREE actions should you recommend to optimize costs? (Select THREE)

You are designing a monitoring strategy for a new Azure deployment consisting of App Service, Azure SQL Database, and Key Vault. You need to ensure that all resource-level diagnostic logs are automatically collected and sent to a central Log Analytics workspace without manual intervention when new resources are created. What should you use?

A healthcare company uses Microsoft Entra ID (Azure AD). They need to implement a security policy that requires Multi-Factor Authentication (MFA) only when users access the Azure Portal from outside the corporate network or when Microsoft Entra ID Protection detects a medium or high sign-in risk. Which feature should you design?