Question 270
An architect proposes this change: Assign governance policies and allow auditors Reader/Policy Insights access for compliance reporting at an appropriate scope. The workload context is: A company needs central evidence that new subscriptions have encryption controls and documented exceptions without granting auditors write privileges. Which evidence would most directly validate the change?
- Deploy a test subscription under the branch and confirm its inherited policy is evaluated.
- Inspect initiative compliance showing the evaluations of each included policy definition.
- Have an auditor view noncompliant resources and approved exemptions but fail to alter the policies.
- Inspect compliance controls and drill into a recommendation affecting a known subscription.
Explanation
Correct Answer
C:This observation directly verifies the intended design: Have an auditor view noncompliant resources and approved exemptions but fail to alter the policies. The architecture being tested is: Assign governance policies and allow auditors Reader/Policy Insights access for compliance reporting at an appropriate scope. The original symptom was: Compliance reviewers are made subscription Owners solely to view policy state.
Incorrect Answers
A:That observation pertains to a separate failure: A newly created subscription bypasses enterprise restrictions because it was never attached to governance scope. Its cause is: Policy inheritance was not applied through the correct management-group hierarchy. It does not confirm the result of this design. The direct proof would be: Have an auditor view noncompliant resources and approved exemptions but fail to alter the policies.
B:The alternative test targets: Create and assign an Azure Policy initiative grouping the required definitions and parameters at appropriate scope. The scenario's actual proposed remedy is: Assign governance policies and allow auditors Reader/Policy Insights access for compliance reporting at an appropriate scope. Verify that one by: Have an auditor view noncompliant resources and approved exemptions but fail to alter the policies.
D:That observation pertains to a separate failure: Risk owners cannot correlate failing Azure resources to the applicable compliance standard. Its cause is: Security posture controls were not mapped and monitored through a common regulatory assessment view. It does not confirm the result of this design. The direct proof would be: Have an auditor view noncompliant resources and approved exemptions but fail to alter the policies.
Question 271
During architecture troubleshooting, a team reports: Compliance reviewers are made subscription Owners solely to view policy state. Context: A company needs central evidence that new subscriptions have encryption controls and documented exceptions without granting auditors write privileges. Which underlying design mistake explains the observed behavior most precisely?
- Visibility role separation was not designed; policy reporting does not require resource ownership.
- Policy inheritance was not applied through the correct management-group hierarchy.
- Security posture controls were not mapped and monitored through a common regulatory assessment view.
- Separate definitions were never grouped into a compliance initiative with a common assignment.
Explanation
Correct Answer
A:This is the failure mechanism rather than an incidental symptom: Visibility role separation was not designed; policy reporting does not require resource ownership. It accounts for: Compliance reviewers are made subscription Owners solely to view policy state. The architectural repair is: Assign governance policies and allow auditors Reader/Policy Insights access for compliance reporting at an appropriate scope.
Incorrect Answers
B:The alternative weakness is: Policy inheritance was not applied through the correct management-group hierarchy. Its associated failure is: A newly created subscription bypasses enterprise restrictions because it was never attached to governance scope. Neither explains the present observation: Compliance reviewers are made subscription Owners solely to view policy state. The direct cause here is: Visibility role separation was not designed; policy reporting does not require resource ownership.
C:This cause would explain a different symptom: Risk owners cannot correlate failing Azure resources to the applicable compliance standard. The mechanism for that event is: Security posture controls were not mapped and monitored through a common regulatory assessment view. Here the stated symptom is: Compliance reviewers are made subscription Owners solely to view policy state. Its cause is: Visibility role separation was not designed; policy reporting does not require resource ownership.
D:The proposed diagnosis fits another scenario: Separate definitions were never grouped into a compliance initiative with a common assignment. It would typically be reflected by: Auditors see unrelated policies and cannot report on a consistent controls package. The current evidence instead supports: Visibility role separation was not designed; policy reporting does not require resource ownership.
Question 272
The design change is: Assign governance policies and allow auditors Reader/Policy Insights access for compliance reporting at an appropriate scope. The original failure was: Compliance reviewers are made subscription Owners solely to view policy state. Which ongoing control best prevents recurrence of the same root cause?
- Version initiative definitions and test new parameter defaults before rollout.
- Review governance access and exemption approvers during each audit cycle.
- Review standard applicability, exemptions and recommendation owners on a recurring cadence.
- Audit subscriptions without the required management-group parent after onboarding.
Explanation
Correct Answer
B:The key follow-up control is: Review governance access and exemption approvers during each audit cycle. It avoids recurrence of the scenario in which: Compliance reviewers are made subscription Owners solely to view policy state. It addresses: Visibility role separation was not designed; policy reporting does not require resource ownership.
Incorrect Answers
A:This is a reasonable safeguard for a different fault: Auditors see unrelated policies and cannot report on a consistent controls package. That different mechanism is: Separate definitions were never grouped into a compliance initiative with a common assignment. The original incident here instead arises from: Visibility role separation was not designed; policy reporting does not require resource ownership. The directly relevant safeguard is: Review governance access and exemption approvers during each audit cycle.
C:That safeguard manages another risk: Security posture controls were not mapped and monitored through a common regulatory assessment view. Its scenario is: Risk owners cannot correlate failing Azure resources to the applicable compliance standard. The present recurring risk is: Visibility role separation was not designed; policy reporting does not require resource ownership. The proper ongoing control is: Review governance access and exemption approvers during each audit cycle.
D:This is a reasonable safeguard for a different fault: A newly created subscription bypasses enterprise restrictions because it was never attached to governance scope. That different mechanism is: Policy inheritance was not applied through the correct management-group hierarchy. The original incident here instead arises from: Visibility role separation was not designed; policy reporting does not require resource ownership. The directly relevant safeguard is: Review governance access and exemption approvers during each audit cycle.
Question 273
A design workshop has this requirement: A SaaS company runs a SQL Server database that requires managed backups and automatic patching without operating the SQL Server operating system. Operators currently observe: The company continues to patch an entire Windows Server VM for a small database workload. Select the ONE design remedy that best addresses the root cause.
- Choose Azure SQL Database when its managed single-database compatibility meets workload requirements.
- Select Azure Database for MySQL Flexible Server after confirming required version and feature compatibility.
- Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities.
- Run SQL Server on Azure Virtual Machines with supported backups, patch policy and availability design.
Explanation
Correct Answer
A:The targeted implementation is: Choose Azure SQL Database when its managed single-database compatibility meets workload requirements. The problem is not generic resource availability: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. Verify the result by: Deploy a compatibility test and verify built-in backup and managed database operations without VM administration.
Incorrect Answers
B:That design instead addresses another observed condition: The operations team continues maintaining guest OS and database patch processes for a conventional MySQL service. Its technical cause is: A self-managed VM was retained where a compatible managed MySQL service can remove host burden. The current workload exhibits: The company continues to patch an entire Windows Server VM for a small database workload. Its targeted remedy is: Choose Azure SQL Database when its managed single-database compatibility meets workload requirements.
C:This choice mitigates an alternative scenario, where: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies. The underlying issue there is: A single managed database model was selected despite the application's SQL Server instance feature requirements. Here the root issue is: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. Choose the corresponding action: Choose Azure SQL Database when its managed single-database compatibility meets workload requirements.
D:The option belongs to a different failure mechanism: PaaS database abstraction cannot satisfy requirements for full server/OS access. That situation exhibits: A fully managed database offering cannot load a mandatory host-level SQL extension. For the stated case, the remedy is: Choose Azure SQL Database when its managed single-database compatibility meets workload requirements.
Question 274
The planned architecture is: Choose Azure SQL Database when its managed single-database compatibility meets workload requirements. Workload context: A SaaS company runs a SQL Server database that requires managed backups and automatic patching without operating the SQL Server operating system. Which acceptance test demonstrates that the required behavior works?
- Test the required OS extension and SQL Server configuration in the VM after migration.
- Validate required instance-level features and connection behavior from the target VNet.
- Validate client queries, backup configuration and instance scaling under representative workload.
- Deploy a compatibility test and verify built-in backup and managed database operations without VM administration.
Explanation
Correct Answer
D:The decisive evidence is: Deploy a compatibility test and verify built-in backup and managed database operations without VM administration. This measures the mechanism of the planned change, not an unrelated Azure service: Choose Azure SQL Database when its managed single-database compatibility meets workload requirements.
Incorrect Answers
A:The alternative test targets: Run SQL Server on Azure Virtual Machines with supported backups, patch policy and availability design. The scenario's actual proposed remedy is: Choose Azure SQL Database when its managed single-database compatibility meets workload requirements. Verify that one by: Deploy a compatibility test and verify built-in backup and managed database operations without VM administration.
B:This check validates a different workload: Validate required instance-level features and connection behavior from the target VNet. Its associated design is: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities. The required acceptance test here is: Deploy a compatibility test and verify built-in backup and managed database operations without VM administration.
C:That observation pertains to a separate failure: The operations team continues maintaining guest OS and database patch processes for a conventional MySQL service. Its cause is: A self-managed VM was retained where a compatible managed MySQL service can remove host burden. It does not confirm the result of this design. The direct proof would be: Deploy a compatibility test and verify built-in backup and managed database operations without VM administration.
Question 275
The customer states: A SaaS company runs a SQL Server database that requires managed backups and automatic patching without operating the SQL Server operating system. An incident reveals: The company continues to patch an entire Windows Server VM for a small database workload. What cause best accounts for this evidence?
- A single managed database model was selected despite the application's SQL Server instance feature requirements.
- An IaaS SQL VM was selected even though no host-level SQL Server feature requires it.
- A self-managed VM was retained where a compatible managed MySQL service can remove host burden.
- PaaS database abstraction cannot satisfy requirements for full server/OS access.
Explanation
Correct Answer
B:The incident is explained by: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. The reported symptom is: The company continues to patch an entire Windows Server VM for a small database workload. The corresponding design fix is: Choose Azure SQL Database when its managed single-database compatibility meets workload requirements.
Incorrect Answers
A:The alternative weakness is: A single managed database model was selected despite the application's SQL Server instance feature requirements. Its associated failure is: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies. Neither explains the present observation: The company continues to patch an entire Windows Server VM for a small database workload. The direct cause here is: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it.
C:The proposed diagnosis fits another scenario: A self-managed VM was retained where a compatible managed MySQL service can remove host burden. It would typically be reflected by: The operations team continues maintaining guest OS and database patch processes for a conventional MySQL service. The current evidence instead supports: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it.
D:The alternative weakness is: PaaS database abstraction cannot satisfy requirements for full server/OS access. Its associated failure is: A fully managed database offering cannot load a mandatory host-level SQL extension. Neither explains the present observation: The company continues to patch an entire Windows Server VM for a small database workload. The direct cause here is: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it.
Question 276
Workload context: A SaaS company runs a SQL Server database that requires managed backups and automatic patching without operating the SQL Server operating system. The implemented remedy is: Choose Azure SQL Database when its managed single-database compatibility meets workload requirements. Which ongoing practice most specifically prevents recurrence of this failure: The company continues to patch an entire Windows Server VM for a small database workload.?
- Track Managed Instance version compatibility and validate legacy SQL features after migrations.
- Document VM patching, backups and SQL high-availability ownership instead of assuming PaaS responsibilities.
- Review engine-version upgrade and high availability support before migration windows.
- Reassess database compatibility and PaaS feature availability before expanding server fleets.
Explanation
Correct Answer
D:The key follow-up control is: Reassess database compatibility and PaaS feature availability before expanding server fleets. It avoids recurrence of the scenario in which: The company continues to patch an entire Windows Server VM for a small database workload. It addresses: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it.
Incorrect Answers
A:The proposed control focuses on: A single managed database model was selected despite the application's SQL Server instance feature requirements. For the design in the question, recurrence comes from: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. A precise prevention step is: Reassess database compatibility and PaaS feature availability before expanding server fleets.
B:That safeguard manages another risk: PaaS database abstraction cannot satisfy requirements for full server/OS access. Its scenario is: A fully managed database offering cannot load a mandatory host-level SQL extension. The present recurring risk is: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. The proper ongoing control is: Reassess database compatibility and PaaS feature availability before expanding server fleets.
C:This is a reasonable safeguard for a different fault: The operations team continues maintaining guest OS and database patch processes for a conventional MySQL service. That different mechanism is: A self-managed VM was retained where a compatible managed MySQL service can remove host burden. The original incident here instead arises from: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. The directly relevant safeguard is: Reassess database compatibility and PaaS feature availability before expanding server fleets.
Question 277
A solution architect is reviewing a workload: A legacy enterprise SQL Server application relies on SQL Agent and cross-database capabilities and wants a managed instance with minimal code changes. The observed incident is: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies. Which architecture choice most directly removes the identified weakness?
- Run SQL Server on Azure Virtual Machines with supported backups, patch policy and availability design.
- Design a compatibility-tested migration with appropriate instance sizing, connectivity, application dependencies and rollback plan.
- Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities.
- Choose Azure SQL Database when its managed single-database compatibility meets workload requirements.
Explanation
Correct Answer
C:The targeted implementation is: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities. The problem is not generic resource availability: A single managed database model was selected despite the application's SQL Server instance feature requirements. Verify the result by: Validate required instance-level features and connection behavior from the target VNet.
Incorrect Answers
A:That design instead addresses another observed condition: A fully managed database offering cannot load a mandatory host-level SQL extension. Its technical cause is: PaaS database abstraction cannot satisfy requirements for full server/OS access. The current workload exhibits: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies. Its targeted remedy is: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities.
B:This choice mitigates an alternative scenario, where: Each database is migrated in isolation and dependent cross-database workflows fail in production. The underlying issue there is: Migration scope ignores instance-level dependencies and target service compatibility. Here the root issue is: A single managed database model was selected despite the application's SQL Server instance feature requirements. Choose the corresponding action: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities.
D:That design instead addresses another observed condition: The company continues to patch an entire Windows Server VM for a small database workload. Its technical cause is: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. The current workload exhibits: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies. Its targeted remedy is: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities.
Question 278
An architect proposes this change: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities. The workload context is: A legacy enterprise SQL Server application relies on SQL Agent and cross-database capabilities and wants a managed instance with minimal code changes. Which evidence would most directly validate the change?
- Validate required instance-level features and connection behavior from the target VNet.
- Deploy a compatibility test and verify built-in backup and managed database operations without VM administration.
- Run a cutover rehearsal including cross-database queries, jobs and external connection strings.
- Test the required OS extension and SQL Server configuration in the VM after migration.
Explanation
Correct Answer
A:This observation directly verifies the intended design: Validate required instance-level features and connection behavior from the target VNet. The architecture being tested is: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities. The original symptom was: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies.
Incorrect Answers
B:That observation pertains to a separate failure: The company continues to patch an entire Windows Server VM for a small database workload. Its cause is: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. It does not confirm the result of this design. The direct proof would be: Validate required instance-level features and connection behavior from the target VNet.
C:The alternative test targets: Design a compatibility-tested migration with appropriate instance sizing, connectivity, application dependencies and rollback plan. The scenario's actual proposed remedy is: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities. Verify that one by: Validate required instance-level features and connection behavior from the target VNet.
D:This check validates a different workload: Test the required OS extension and SQL Server configuration in the VM after migration. Its associated design is: Run SQL Server on Azure Virtual Machines with supported backups, patch policy and availability design. The required acceptance test here is: Validate required instance-level features and connection behavior from the target VNet.
Question 279
During architecture troubleshooting, a team reports: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies. Context: A legacy enterprise SQL Server application relies on SQL Agent and cross-database capabilities and wants a managed instance with minimal code changes. Which underlying design mistake explains the observed behavior most precisely?
- PaaS database abstraction cannot satisfy requirements for full server/OS access.
- A single managed database model was selected despite the application's SQL Server instance feature requirements.
- An IaaS SQL VM was selected even though no host-level SQL Server feature requires it.
- Migration scope ignores instance-level dependencies and target service compatibility.
Explanation
Correct Answer
B:This is the failure mechanism rather than an incidental symptom: A single managed database model was selected despite the application's SQL Server instance feature requirements. It accounts for: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies. The architectural repair is: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities.
Incorrect Answers
A:This cause would explain a different symptom: A fully managed database offering cannot load a mandatory host-level SQL extension. The mechanism for that event is: PaaS database abstraction cannot satisfy requirements for full server/OS access. Here the stated symptom is: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies. Its cause is: A single managed database model was selected despite the application's SQL Server instance feature requirements.
C:The alternative weakness is: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. Its associated failure is: The company continues to patch an entire Windows Server VM for a small database workload. Neither explains the present observation: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies. The direct cause here is: A single managed database model was selected despite the application's SQL Server instance feature requirements.
D:This cause would explain a different symptom: Each database is migrated in isolation and dependent cross-database workflows fail in production. The mechanism for that event is: Migration scope ignores instance-level dependencies and target service compatibility. Here the stated symptom is: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies. Its cause is: A single managed database model was selected despite the application's SQL Server instance feature requirements.
Question 280
A design review identifies: A legacy enterprise SQL Server application relies on SQL Agent and cross-database capabilities and wants a managed instance with minimal code changes. The failure is: A migration to Azure SQL Database fails due to unsupported instance-level application dependencies. Select TWO distinct decisions that together provide the immediate technical solution AND an ongoing prevention control. A verification-only step does not replace either responsibility.
- Track Managed Instance version compatibility and validate legacy SQL features after migrations.
- Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities.
- Run SQL Server on Azure Virtual Machines with supported backups, patch policy and availability design.
- Reassess database compatibility and PaaS feature availability before expanding server fleets.
- Design a compatibility-tested migration with appropriate instance sizing, connectivity, application dependencies and rollback plan.
Explanation
Correct Answers
A:The preventive control is: Track Managed Instance version compatibility and validate legacy SQL features after migrations. It targets the earlier cause: A single managed database model was selected despite the application's SQL Server instance feature requirements. Confirm ongoing effectiveness by: Validate required instance-level features and connection behavior from the target VNet.
B:The evidence (A migration to Azure SQL Database fails due to unsupported instance-level application dependencies.) identifies the following cause: A single managed database model was selected despite the application's SQL Server instance feature requirements. The design that removes it is: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities. The acceptance check is: Validate required instance-level features and connection behavior from the target VNet.
Incorrect Answers
C:The option belongs to a different failure mechanism: PaaS database abstraction cannot satisfy requirements for full server/OS access. That situation exhibits: A fully managed database offering cannot load a mandatory host-level SQL extension. For the stated case, the remedy is: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities.
D:That safeguard manages another risk: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. Its scenario is: The company continues to patch an entire Windows Server VM for a small database workload. The present recurring risk is: A single managed database model was selected despite the application's SQL Server instance feature requirements. The proper ongoing control is: Track Managed Instance version compatibility and validate legacy SQL features after migrations.
E:This choice mitigates an alternative scenario, where: Each database is migrated in isolation and dependent cross-database workflows fail in production. The underlying issue there is: Migration scope ignores instance-level dependencies and target service compatibility. Here the root issue is: A single managed database model was selected despite the application's SQL Server instance feature requirements. Choose the corresponding action: Use Azure SQL Managed Instance where SQL Server instance compatibility requirements exceed Azure SQL Database capabilities.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests