AZ-305 Exam Dumps and Practice Questions

No, this solution does not meet the goal. The Regulatory Compliance dashboard in Microsoft Defender for Cloud is not the appropriate tool for enforcing deployment constraints:

<ul><li><strong>Compliance dashboard for assessment:</strong> Shows compliance status against regulatory frameworks (PCI-DSS, HIPAA, etc.) but does not enforce deployment restrictions</li><li><strong>Post-deployment evaluation:</strong> Assesses existing resources against compliance standards after they are deployed</li><li><strong>Cannot prevent regional deployment:</strong> Does not have capability to restrict App Service instances to specific Azure regions during deployment</li></ul>

The correct solution is <strong>Azure Policy</strong>:

<ul><li><strong>Pre-deployment enforcement:</strong> Prevents creation of resources that don't comply with policies</li><li><strong>Region restriction:</strong> Can enforce policies requiring App Service instances and related resources to deploy only to approved regions</li><li><strong>Regulatory compliance:</strong> Implements custom policies to meet specific regulatory location requirements</li><li><strong>Proactive control:</strong> Blocks non-compliant deployments before resources are created</li></ul>

Azure Policy is the governance tool for enforcing deployment constraints, while Defender for Cloud assesses compliance after deployment.

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

US East and US West are in the same geopolitical region so there is no need for enabling ExpressRoute premium add-on https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about#basicstandard

The current config of virtual WAN is only Basic as given, so it can connect to only site to site VPN, to connect to express route it needs to be upgraded from basic to standard. https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about

https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about

Much like the most popular Kubernetes Ingress Controllers, the Application Gateway Ingress Controller provides several features, leveraging Azure's native Application Gateway L7 load balancer. To name a few:

URL routing

Cookie-based affinity

Secure Sockets Layer (SSL) termination

End-to-end SSL

Support for public, private, and hybrid web sites

Integrated support of Azure web application firewall

Application Gateway redirection support isn't limited to HTTP to HTTPS redirection alone. This is a generic redirection mechanism, so you can redirect from and to any port you define using rules. It also supports redirection to an external site as well.

https://docs.microsoft.com/en-us/azure/application-gateway/features

To maximize availability for managed disks replicated across availability zones using Azure Site Recovery, you should recommend <strong>Premium SSD with zone-redundant storage (ZRS)</strong>. Zone-redundant storage automatically replicates your managed disks across multiple availability zones within the same region, providing redundancy even if an entire availability zone fails. Combined with Site Recovery's cross-zone replication, this dual-layered redundancy approach maximizes data availability and resilience. Premium SSD-ZRS disks ensure that even if one zone is lost, your data remains accessible through the built-in zone redundancy, in addition to the Site Recovery replica in another zone.