AZ-305 Exam Preparation Material | Designing Microsoft Azure Infrastructure Solutions

You have to deploy an Azure SQL database named db1 for your company. The databases must meet the following security requirements
When IT help desk supervisors query a database table named customers, they must be able to see the full number of each credit card
When IT help desk operators query a database table named customers, they must only see the last four digits of each credit card number
A column named Credit Card rating in the customers table must never appear in plain text in the database system. Only client applications must be able to decrypt the information that is stored in this column
Which of the following can be implemented for the Credit Card rating column security requirement?

HOTSPOT
You are building a mobile app for users to upload data files to an Azure Storage account and set properties for data processing. You need to recommend a messaging solution for the app .
The solution must meet the following requirements:
• Use a messaging resource that supports 128KB messages and guarantees first in, first out (FIFO) delivery.
• Use an event resource that automatically triggers a webhook when a file is added to the storage account container.
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

HOTSPOT
You plan to deploy a containerized web app that will be hosted in five Azure Kubernetes Service (AKS) clusters. Each cluster will be hosted in a different Azure region.
You need to provide access to the app from the internet.
The solution must meet the following requirements:
• Incoming HTTPS requests must be routed to the cluster that has the lowest network latency.
• HTTPS traffic to individual pods must be routed via an ingress controller.
• In the event of an AKS cluster outage, failover time must be minimized.
What should you include in the solution? To answer, select the appropriate options in the answer area.

DRAG DROP
You have a 500-TB, on-premises Microsoft SQL Server database named DB 1.
You have an on-premises datacenter that contains virtual machines. The virtual machines host database, web, file, and application resources.
You have an Azure subscription.
You need to migrate DBl and the virtual machines to Azure.
The solution must meet the following requirements:
• During the migration of DB1, data cannot be transmitted over the internet, and the impact on the internet must be minimized.
• The migration of the virtual machines must support a test migration before the production migration.
• During the migration of the virtual machines, downtime must be minimized.
What should you use for each migration? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

You have the Azure resources shown in the following table.



You need to deploy a new Azure Firewall policy that will contain mandatory rules for all Azure Firewall deployments. The new policy will be configured as a parent policy for the existing policies.
What is the minimum number of additional Azure Firewall policies you should create?