Question 320
A design review identifies: An industry regulator requires an Azure SQL database backup retained for multiple years beyond short operational point-in-time restore windows. The failure is: The only retained database backups expire weeks before audit evidence is required. Select TWO distinct decisions that together provide the immediate technical solution AND an ongoing prevention control. A verification-only step does not replace either responsibility.
- Configure an appropriate Azure SQL long-term backup retention policy matching compliance periods.
- Audit backup expiry schedules and long-term restore permissions at compliance reviews.
- Choose Azure SQL Database when its managed single-database compatibility meets workload requirements.
- Review backup redundancy and tested regional restore permissions before business continuity changes.
- Design Azure SQL automated backups and supported point-in-time restore with a retention window covering the incident horizon.
Explanation
Correct Answers
A:The evidence (The only retained database backups expire weeks before audit evidence is required.) identifies the following cause: Short-term PITR retention was mistaken for multiyear long-term backup retention. The design that removes it is: Configure an appropriate Azure SQL long-term backup retention policy matching compliance periods. The acceptance check is: Locate a long-term retained backup and perform a controlled restore into a test environment.
B:The key follow-up control is: Audit backup expiry schedules and long-term restore permissions at compliance reviews. It avoids recurrence of the scenario in which: The only retained database backups expire weeks before audit evidence is required. It addresses: Short-term PITR retention was mistaken for multiyear long-term backup retention.
Incorrect Answers
C:That design instead addresses another observed condition: The company continues to patch an entire Windows Server VM for a small database workload. Its technical cause is: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. The current workload exhibits: The only retained database backups expire weeks before audit evidence is required. Its targeted remedy is: Configure an appropriate Azure SQL long-term backup retention policy matching compliance periods.
D:This is a reasonable safeguard for a different fault: Only locally redundant backups exist when the region is inaccessible. That different mechanism is: Backup redundancy was chosen without aligning regional recovery requirements. The original incident here instead arises from: Short-term PITR retention was mistaken for multiyear long-term backup retention. The directly relevant safeguard is: Audit backup expiry schedules and long-term restore permissions at compliance reviews.
E:The option belongs to a different failure mechanism: Logical corruption and deletes can replicate; there is no independent point-in-time backup plan. That situation exhibits: Operators assume a database geo-replica can replace every accidental deletion recovery need. For the stated case, the remedy is: Configure an appropriate Azure SQL long-term backup retention policy matching compliance periods.
Question 321
A design workshop has this requirement: An Azure Database for PostgreSQL flexible server must remain available after an availability-zone failure in a region supporting zonal HA. Operators currently observe: The database is unavailable until a single-zone host is restored after a zonal incident. Select the ONE design remedy that best addresses the root cause.
- Select Azure Database for MySQL Flexible Server after confirming required version and feature compatibility.
- Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls.
- Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover.
- Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them.
Explanation
Correct Answer
C:The evidence (The database is unavailable until a single-zone host is restored after a zonal incident.) identifies the following cause: High availability was not deployed across suitable availability zones. The design that removes it is: Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover. The acceptance check is: Observe replica/failover status and successful reconnect after a controlled zone failure scenario.
Incorrect Answers
A:The option belongs to a different failure mechanism: A self-managed VM was retained where a compatible managed MySQL service can remove host burden. That situation exhibits: The operations team continues maintaining guest OS and database patch processes for a conventional MySQL service. For the stated case, the remedy is: Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover.
B:That design instead addresses another observed condition: The database accepts connections over an unrestricted public endpoint. Its technical cause is: The network exposure model does not enforce the required private access boundary. The current workload exhibits: The database is unavailable until a single-zone host is restored after a zonal incident. Its targeted remedy is: Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover.
D:The option belongs to a different failure mechanism: Reads were not offloaded to managed replicas and all requests target the writable primary. That situation exhibits: Analytic SELECTs saturate the primary although separate read capacity is available. For the stated case, the remedy is: Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover.
Question 322
The planned architecture is: Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover. Workload context: An Azure Database for PostgreSQL flexible server must remain available after an availability-zone failure in a region supporting zonal HA. Which acceptance test demonstrates that the required behavior works?
- Resolve the server FQDN privately and connect from the designated subnet while an external host cannot.
- Benchmark read query loads on replica endpoints while verifying primary write latency.
- Validate client queries, backup configuration and instance scaling under representative workload.
- Observe replica/failover status and successful reconnect after a controlled zone failure scenario.
Explanation
Correct Answer
D:The decisive evidence is: Observe replica/failover status and successful reconnect after a controlled zone failure scenario. This measures the mechanism of the planned change, not an unrelated Azure service: Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover.
Incorrect Answers
A:The alternative test targets: Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls. The scenario's actual proposed remedy is: Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover. Verify that one by: Observe replica/failover status and successful reconnect after a controlled zone failure scenario.
B:This check validates a different workload: Benchmark read query loads on replica endpoints while verifying primary write latency. Its associated design is: Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them. The required acceptance test here is: Observe replica/failover status and successful reconnect after a controlled zone failure scenario.
C:That observation pertains to a separate failure: The operations team continues maintaining guest OS and database patch processes for a conventional MySQL service. Its cause is: A self-managed VM was retained where a compatible managed MySQL service can remove host burden. It does not confirm the result of this design. The direct proof would be: Observe replica/failover status and successful reconnect after a controlled zone failure scenario.
Question 323
The customer states: An Azure Database for PostgreSQL flexible server must remain available after an availability-zone failure in a region supporting zonal HA. An incident reveals: The database is unavailable until a single-zone host is restored after a zonal incident. What cause best accounts for this evidence?
- High availability was not deployed across suitable availability zones.
- Reads were not offloaded to managed replicas and all requests target the writable primary.
- The network exposure model does not enforce the required private access boundary.
- A self-managed VM was retained where a compatible managed MySQL service can remove host burden.
Explanation
Correct Answer
A:The recorded behavior follows from: High availability was not deployed across suitable availability zones. The appropriate mitigation would be: Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover. Verify with: Observe replica/failover status and successful reconnect after a controlled zone failure scenario.
Incorrect Answers
B:This cause would explain a different symptom: Analytic SELECTs saturate the primary although separate read capacity is available. The mechanism for that event is: Reads were not offloaded to managed replicas and all requests target the writable primary. Here the stated symptom is: The database is unavailable until a single-zone host is restored after a zonal incident. Its cause is: High availability was not deployed across suitable availability zones.
C:The proposed diagnosis fits another scenario: The network exposure model does not enforce the required private access boundary. It would typically be reflected by: The database accepts connections over an unrestricted public endpoint. The current evidence instead supports: High availability was not deployed across suitable availability zones.
D:The alternative weakness is: A self-managed VM was retained where a compatible managed MySQL service can remove host burden. Its associated failure is: The operations team continues maintaining guest OS and database patch processes for a conventional MySQL service. Neither explains the present observation: The database is unavailable until a single-zone host is restored after a zonal incident. The direct cause here is: High availability was not deployed across suitable availability zones.
Question 324
Workload context: An Azure Database for PostgreSQL flexible server must remain available after an availability-zone failure in a region supporting zonal HA. The implemented remedy is: Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover. Which ongoing practice most specifically prevents recurrence of this failure: The database is unavailable until a single-zone host is restored after a zonal incident.?
- Monitor standby health and connection retry patterns after server maintenance.
- Review engine-version upgrade and high availability support before migration windows.
- Check replication lag and consistency expectations for reports after replica scale changes.
- Audit DNS linkage, firewall/network rules and supported networking mode before redeployment.
Explanation
Correct Answer
A:The key follow-up control is: Monitor standby health and connection retry patterns after server maintenance. It avoids recurrence of the scenario in which: The database is unavailable until a single-zone host is restored after a zonal incident. It addresses: High availability was not deployed across suitable availability zones.
Incorrect Answers
B:That safeguard manages another risk: A self-managed VM was retained where a compatible managed MySQL service can remove host burden. Its scenario is: The operations team continues maintaining guest OS and database patch processes for a conventional MySQL service. The present recurring risk is: High availability was not deployed across suitable availability zones. The proper ongoing control is: Monitor standby health and connection retry patterns after server maintenance.
C:This is a reasonable safeguard for a different fault: Analytic SELECTs saturate the primary although separate read capacity is available. That different mechanism is: Reads were not offloaded to managed replicas and all requests target the writable primary. The original incident here instead arises from: High availability was not deployed across suitable availability zones. The directly relevant safeguard is: Monitor standby health and connection retry patterns after server maintenance.
D:The proposed control focuses on: The network exposure model does not enforce the required private access boundary. For the design in the question, recurrence comes from: High availability was not deployed across suitable availability zones. A precise prevention step is: Monitor standby health and connection retry patterns after server maintenance.
Question 325
A solution architect is reviewing a workload: A PostgreSQL flexible-server application receives many read-only reports, but its primary must keep predictable write latency. The observed incident is: Analytic SELECTs saturate the primary although separate read capacity is available. Which architecture choice most directly removes the identified weakness?
- Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover.
- Use supported read scale-out with the read-only application intent connection routing available for the tier.
- Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls.
- Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them.
Explanation
Correct Answer
D:This option addresses the actual design defect: Reads were not offloaded to managed replicas and all requests target the writable primary. The correction is: Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them. Confirm the outcome with: Benchmark read query loads on replica endpoints while verifying primary write latency.
Incorrect Answers
A:That design instead addresses another observed condition: The database is unavailable until a single-zone host is restored after a zonal incident. Its technical cause is: High availability was not deployed across suitable availability zones. The current workload exhibits: Analytic SELECTs saturate the primary although separate read capacity is available. Its targeted remedy is: Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them.
B:This choice mitigates an alternative scenario, where: Reporting queries slow writes because both are directed to the primary read-write endpoint. The underlying issue there is: The application does not use supported read-only replica routing for analytical traffic. Here the root issue is: Reads were not offloaded to managed replicas and all requests target the writable primary. Choose the corresponding action: Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them.
C:The option belongs to a different failure mechanism: The network exposure model does not enforce the required private access boundary. That situation exhibits: The database accepts connections over an unrestricted public endpoint. For the stated case, the remedy is: Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them.
Question 326
An architect proposes this change: Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them. The workload context is: A PostgreSQL flexible-server application receives many read-only reports, but its primary must keep predictable write latency. Which evidence would most directly validate the change?
- Resolve the server FQDN privately and connect from the designated subnet while an external host cannot.
- Benchmark read query loads on replica endpoints while verifying primary write latency.
- Connect with read-only intent and confirm analytics query load routes to an appropriate read replica.
- Observe replica/failover status and successful reconnect after a controlled zone failure scenario.
Explanation
Correct Answer
B:The acceptance test is specific: Benchmark read query loads on replica endpoints while verifying primary write latency. Its purpose is to establish that the proposed architecture works: Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them.
Incorrect Answers
A:This check validates a different workload: Resolve the server FQDN privately and connect from the designated subnet while an external host cannot. Its associated design is: Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls. The required acceptance test here is: Benchmark read query loads on replica endpoints while verifying primary write latency.
C:The alternative test targets: Use supported read scale-out with the read-only application intent connection routing available for the tier. The scenario's actual proposed remedy is: Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them. Verify that one by: Benchmark read query loads on replica endpoints while verifying primary write latency.
D:This check validates a different workload: Observe replica/failover status and successful reconnect after a controlled zone failure scenario. Its associated design is: Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover. The required acceptance test here is: Benchmark read query loads on replica endpoints while verifying primary write latency.
Question 327
During architecture troubleshooting, a team reports: Analytic SELECTs saturate the primary although separate read capacity is available. Context: A PostgreSQL flexible-server application receives many read-only reports, but its primary must keep predictable write latency. Which underlying design mistake explains the observed behavior most precisely?
- High availability was not deployed across suitable availability zones.
- Reads were not offloaded to managed replicas and all requests target the writable primary.
- The network exposure model does not enforce the required private access boundary.
- The application does not use supported read-only replica routing for analytical traffic.
Explanation
Correct Answer
B:This is the failure mechanism rather than an incidental symptom: Reads were not offloaded to managed replicas and all requests target the writable primary. It accounts for: Analytic SELECTs saturate the primary although separate read capacity is available. The architectural repair is: Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them.
Incorrect Answers
A:This cause would explain a different symptom: The database is unavailable until a single-zone host is restored after a zonal incident. The mechanism for that event is: High availability was not deployed across suitable availability zones. Here the stated symptom is: Analytic SELECTs saturate the primary although separate read capacity is available. Its cause is: Reads were not offloaded to managed replicas and all requests target the writable primary.
C:The alternative weakness is: The network exposure model does not enforce the required private access boundary. Its associated failure is: The database accepts connections over an unrestricted public endpoint. Neither explains the present observation: Analytic SELECTs saturate the primary although separate read capacity is available. The direct cause here is: Reads were not offloaded to managed replicas and all requests target the writable primary.
D:This cause would explain a different symptom: Reporting queries slow writes because both are directed to the primary read-write endpoint. The mechanism for that event is: The application does not use supported read-only replica routing for analytical traffic. Here the stated symptom is: Analytic SELECTs saturate the primary although separate read capacity is available. Its cause is: Reads were not offloaded to managed replicas and all requests target the writable primary.
Question 328
The design change is: Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them. The original failure was: Analytic SELECTs saturate the primary although separate read capacity is available. Which ongoing control best prevents recurrence of the same root cause?
- Check replication lag and consistency expectations for reports after replica scale changes.
- Audit DNS linkage, firewall/network rules and supported networking mode before redeployment.
- Monitor replica lag and read-intent connection strings after changing driver versions.
- Monitor standby health and connection retry patterns after server maintenance.
Explanation
Correct Answer
A:The preventive control is: Check replication lag and consistency expectations for reports after replica scale changes. It targets the earlier cause: Reads were not offloaded to managed replicas and all requests target the writable primary. Confirm ongoing effectiveness by: Benchmark read query loads on replica endpoints while verifying primary write latency.
Incorrect Answers
B:This is a reasonable safeguard for a different fault: The database accepts connections over an unrestricted public endpoint. That different mechanism is: The network exposure model does not enforce the required private access boundary. The original incident here instead arises from: Reads were not offloaded to managed replicas and all requests target the writable primary. The directly relevant safeguard is: Check replication lag and consistency expectations for reports after replica scale changes.
C:The proposed control focuses on: The application does not use supported read-only replica routing for analytical traffic. For the design in the question, recurrence comes from: Reads were not offloaded to managed replicas and all requests target the writable primary. A precise prevention step is: Check replication lag and consistency expectations for reports after replica scale changes.
D:That safeguard manages another risk: High availability was not deployed across suitable availability zones. Its scenario is: The database is unavailable until a single-zone host is restored after a zonal incident. The present recurring risk is: Reads were not offloaded to managed replicas and all requests target the writable primary. The proper ongoing control is: Check replication lag and consistency expectations for reports after replica scale changes.
Question 329
A design workshop has this requirement: A public-facing Azure PostgreSQL flexible server must be reachable only from private workloads in a designated VNet. Operators currently observe: The database accepts connections over an unrestricted public endpoint. Select the ONE design remedy that best addresses the root cause.
- Choose Azure SQL Database when its managed single-database compatibility meets workload requirements.
- Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls.
- Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them.
- Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover.
Explanation
Correct Answer
B:The targeted implementation is: Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls. The problem is not generic resource availability: The network exposure model does not enforce the required private access boundary. Verify the result by: Resolve the server FQDN privately and connect from the designated subnet while an external host cannot.
Incorrect Answers
A:This choice mitigates an alternative scenario, where: The company continues to patch an entire Windows Server VM for a small database workload. The underlying issue there is: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. Here the root issue is: The network exposure model does not enforce the required private access boundary. Choose the corresponding action: Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls.
C:That design instead addresses another observed condition: Analytic SELECTs saturate the primary although separate read capacity is available. Its technical cause is: Reads were not offloaded to managed replicas and all requests target the writable primary. The current workload exhibits: The database accepts connections over an unrestricted public endpoint. Its targeted remedy is: Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls.
D:This choice mitigates an alternative scenario, where: The database is unavailable until a single-zone host is restored after a zonal incident. The underlying issue there is: High availability was not deployed across suitable availability zones. Here the root issue is: The network exposure model does not enforce the required private access boundary. Choose the corresponding action: Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls.
Question 330
The planned architecture is: Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls. Workload context: A public-facing Azure PostgreSQL flexible server must be reachable only from private workloads in a designated VNet. Which acceptance test demonstrates that the required behavior works?
- Deploy a compatibility test and verify built-in backup and managed database operations without VM administration.
- Observe replica/failover status and successful reconnect after a controlled zone failure scenario.
- Benchmark read query loads on replica endpoints while verifying primary write latency.
- Resolve the server FQDN privately and connect from the designated subnet while an external host cannot.
Explanation
Correct Answer
D:The acceptance test is specific: Resolve the server FQDN privately and connect from the designated subnet while an external host cannot. Its purpose is to establish that the proposed architecture works: Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls.
Incorrect Answers
A:That observation pertains to a separate failure: The company continues to patch an entire Windows Server VM for a small database workload. Its cause is: An IaaS SQL VM was selected even though no host-level SQL Server feature requires it. It does not confirm the result of this design. The direct proof would be: Resolve the server FQDN privately and connect from the designated subnet while an external host cannot.
B:The alternative test targets: Enable supported zone-redundant high availability for PostgreSQL flexible server and test managed failover. The scenario's actual proposed remedy is: Choose the supported private networking architecture for PostgreSQL flexible server with correct private DNS and access controls. Verify that one by: Resolve the server FQDN privately and connect from the designated subnet while an external host cannot.
C:This check validates a different workload: Benchmark read query loads on replica endpoints while verifying primary write latency. Its associated design is: Configure one or more supported PostgreSQL read replicas and route appropriate read-only traffic to them. The required acceptance test here is: Resolve the server FQDN privately and connect from the designated subnet while an external host cannot.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests