Question 490
The planned architecture is: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported. Workload context: A data integration process needs secure connection secrets without embedding storage keys in ADF linked service JSON. Which acceptance test demonstrates that the required behavior works?
- Send old, new and malformed event payloads and verify accepted versus quarantined behavior.
- Run a Spark transformation, inspect output parquet partitions and compare row counts to input.
- Rotate a test secret and verify the pipeline continues with approved identity and network access.
- Run the pipeline and compare source/target counts and integration-runtime activity logs.
Explanation
Correct Answer
C:The acceptance test is specific: Rotate a test secret and verify the pipeline continues with approved identity and network access. Its purpose is to establish that the proposed architecture works: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported.
Incorrect Answers
A:The alternative test targets: Add validated event schema/version handling and a quarantine path to the ingestion pipeline before writing curated tables. The scenario's actual proposed remedy is: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported. Verify that one by: Rotate a test secret and verify the pipeline continues with approved identity and network access.
B:This check validates a different workload: Run a Spark transformation, inspect output parquet partitions and compare row counts to input. Its associated design is: Use Azure Databricks or supported managed Spark compute with storage access through managed identities where supported. The required acceptance test here is: Rotate a test secret and verify the pipeline continues with approved identity and network access.
D:The alternative test targets: Use Azure Data Factory with supported linked services, self-hosted integration runtime and a scheduled copy pipeline. The scenario's actual proposed remedy is: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported. Verify that one by: Rotate a test secret and verify the pipeline continues with approved identity and network access.
Question 491
The customer states: A data integration process needs secure connection secrets without embedding storage keys in ADF linked service JSON. An incident reveals: The integration pipeline fails when a hard-coded database password expires. What cause best accounts for this evidence?
- Schema evolution and invalid-event handling were not designed into ingestion.
- A suitable self-hosted connectivity runtime was not provided for private data movement.
- The compute framework does not match parallel data-lake transformation scale.
- Credential management was not separated from pipeline definitions and access scopes.
Explanation
Correct Answer
D:The recorded behavior follows from: Credential management was not separated from pipeline definitions and access scopes. The appropriate mitigation would be: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported. Verify with: Rotate a test secret and verify the pipeline continues with approved identity and network access.
Incorrect Answers
A:The alternative weakness is: Schema evolution and invalid-event handling were not designed into ingestion. Its associated failure is: A new optional field breaks a downstream transformation and all streaming ingestion stops. Neither explains the present observation: The integration pipeline fails when a hard-coded database password expires. The direct cause here is: Credential management was not separated from pipeline definitions and access scopes.
B:This cause would explain a different symptom: The pipeline cannot access a private on-prem SQL instance using only Azure-hosted integration runtime. The mechanism for that event is: A suitable self-hosted connectivity runtime was not provided for private data movement. Here the stated symptom is: The integration pipeline fails when a hard-coded database password expires. Its cause is: Credential management was not separated from pipeline definitions and access scopes.
C:The proposed diagnosis fits another scenario: The compute framework does not match parallel data-lake transformation scale. It would typically be reflected by: Analysts attempt to process terabytes of distributed data in one small VM process. The current evidence instead supports: Credential management was not separated from pipeline definitions and access scopes.
Question 492
Workload context: A data integration process needs secure connection secrets without embedding storage keys in ADF linked service JSON. The implemented remedy is: Use Data Factory managed identity and Key Vault-backed linked service secret references or identity-based access where supported. Which ongoing practice most specifically prevents recurrence of this failure: The integration pipeline fails when a hard-coded database password expires.?
- Keep contract tests and versioned schema validation for each upstream producer release.
- Monitor cluster/job compute costs, access permissions and data quality checks.
- Monitor integration runtime health, pipeline retries and schema drift for scheduled loads.
- Review Key Vault access and runtime network connectivity after credential rotation.
Explanation
Correct Answer
D:The key follow-up control is: Review Key Vault access and runtime network connectivity after credential rotation. It avoids recurrence of the scenario in which: The integration pipeline fails when a hard-coded database password expires. It addresses: Credential management was not separated from pipeline definitions and access scopes.
Incorrect Answers
A:The proposed control focuses on: Schema evolution and invalid-event handling were not designed into ingestion. For the design in the question, recurrence comes from: Credential management was not separated from pipeline definitions and access scopes. A precise prevention step is: Review Key Vault access and runtime network connectivity after credential rotation.
B:That safeguard manages another risk: The compute framework does not match parallel data-lake transformation scale. Its scenario is: Analysts attempt to process terabytes of distributed data in one small VM process. The present recurring risk is: Credential management was not separated from pipeline definitions and access scopes. The proper ongoing control is: Review Key Vault access and runtime network connectivity after credential rotation.
C:This is a reasonable safeguard for a different fault: The pipeline cannot access a private on-prem SQL instance using only Azure-hosted integration runtime. That different mechanism is: A suitable self-hosted connectivity runtime was not provided for private data movement. The original incident here instead arises from: Credential management was not separated from pipeline definitions and access scopes. The directly relevant safeguard is: Review Key Vault access and runtime network connectivity after credential rotation.
Question 493
A solution architect is reviewing a workload: An enterprise receives batch exports from several departments and wants a governed central analytics zone with separate raw, cleansed and curated data layers. The observed incident is: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Which architecture choice most directly removes the identified weakness?
- Use Azure Databricks or supported managed Spark compute with storage access through managed identities where supported.
- Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.
- Use Azure Data Factory with supported linked services, self-hosted integration runtime and a scheduled copy pipeline.
- Design a staged ingestion and transformation pipeline with a data lake and an appropriate SQL analytics serving layer.
Explanation
Correct Answer
B:The evidence (A reporting client accidentally reads unvalidated raw data mixed with production-ready tables.) identifies the following cause: The lake lacks layered data-quality boundaries and separate access scopes. The design that removes it is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines. The acceptance check is: Move a sample batch from raw to curated and verify users cannot access unapproved raw files.
Incorrect Answers
A:That design instead addresses another observed condition: Analysts attempt to process terabytes of distributed data in one small VM process. Its technical cause is: The compute framework does not match parallel data-lake transformation scale. The current workload exhibits: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Its targeted remedy is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.
C:The option belongs to a different failure mechanism: A suitable self-hosted connectivity runtime was not provided for private data movement. That situation exhibits: The pipeline cannot access a private on-prem SQL instance using only Azure-hosted integration runtime. For the stated case, the remedy is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.
D:That design instead addresses another observed condition: Dashboards query raw operational SQL tables directly and cause transaction contention. Its technical cause is: Operational OLTP and heavy analytical serving duties were not isolated. The current workload exhibits: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Its targeted remedy is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.
Question 494
An architect proposes this change: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines. The workload context is: An enterprise receives batch exports from several departments and wants a governed central analytics zone with separate raw, cleansed and curated data layers. Which evidence would most directly validate the change?
- Run the pipeline and compare source/target counts and integration-runtime activity logs.
- Reconcile source-row counts, curated output and downstream query latency before cutover.
- Move a sample batch from raw to curated and verify users cannot access unapproved raw files.
- Run a Spark transformation, inspect output parquet partitions and compare row counts to input.
Explanation
Correct Answer
C:The decisive evidence is: Move a sample batch from raw to curated and verify users cannot access unapproved raw files. This measures the mechanism of the planned change, not an unrelated Azure service: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.
Incorrect Answers
A:This check validates a different workload: Run the pipeline and compare source/target counts and integration-runtime activity logs. Its associated design is: Use Azure Data Factory with supported linked services, self-hosted integration runtime and a scheduled copy pipeline. The required acceptance test here is: Move a sample batch from raw to curated and verify users cannot access unapproved raw files.
B:That observation pertains to a separate failure: Dashboards query raw operational SQL tables directly and cause transaction contention. Its cause is: Operational OLTP and heavy analytical serving duties were not isolated. It does not confirm the result of this design. The direct proof would be: Move a sample batch from raw to curated and verify users cannot access unapproved raw files.
D:This check validates a different workload: Run a Spark transformation, inspect output parquet partitions and compare row counts to input. Its associated design is: Use Azure Databricks or supported managed Spark compute with storage access through managed identities where supported. The required acceptance test here is: Move a sample batch from raw to curated and verify users cannot access unapproved raw files.
Question 495
During architecture troubleshooting, a team reports: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Context: An enterprise receives batch exports from several departments and wants a governed central analytics zone with separate raw, cleansed and curated data layers. Which underlying design mistake explains the observed behavior most precisely?
- The lake lacks layered data-quality boundaries and separate access scopes.
- The compute framework does not match parallel data-lake transformation scale.
- A suitable self-hosted connectivity runtime was not provided for private data movement.
- Operational OLTP and heavy analytical serving duties were not isolated.
Explanation
Correct Answer
A:The incident is explained by: The lake lacks layered data-quality boundaries and separate access scopes. The reported symptom is: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. The corresponding design fix is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines.
Incorrect Answers
B:The proposed diagnosis fits another scenario: The compute framework does not match parallel data-lake transformation scale. It would typically be reflected by: Analysts attempt to process terabytes of distributed data in one small VM process. The current evidence instead supports: The lake lacks layered data-quality boundaries and separate access scopes.
C:The alternative weakness is: A suitable self-hosted connectivity runtime was not provided for private data movement. Its associated failure is: The pipeline cannot access a private on-prem SQL instance using only Azure-hosted integration runtime. Neither explains the present observation: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. The direct cause here is: The lake lacks layered data-quality boundaries and separate access scopes.
D:This cause would explain a different symptom: Dashboards query raw operational SQL tables directly and cause transaction contention. The mechanism for that event is: Operational OLTP and heavy analytical serving duties were not isolated. Here the stated symptom is: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Its cause is: The lake lacks layered data-quality boundaries and separate access scopes.
Question 496
The design change is: Design an Azure Data Lake storage-zone architecture with explicit ACLs and documented transform pipelines. The original failure was: A reporting client accidentally reads unvalidated raw data mixed with production-ready tables. Which ongoing control best prevents recurrence of the same root cause?
- Monitor integration runtime health, pipeline retries and schema drift for scheduled loads.
- Audit data lifecycle and data access policies across raw and curated layers.
- Monitor cluster/job compute costs, access permissions and data quality checks.
- Monitor refresh lineage and data-lake transformation completion before reports run.
Explanation
Correct Answer
B:This is an ongoing protection specific to the fault: Audit data lifecycle and data access policies across raw and curated layers. The recurrence risk is: The lake lacks layered data-quality boundaries and separate access scopes. It should be checked using: Move a sample batch from raw to curated and verify users cannot access unapproved raw files.
Incorrect Answers
A:That safeguard manages another risk: A suitable self-hosted connectivity runtime was not provided for private data movement. Its scenario is: The pipeline cannot access a private on-prem SQL instance using only Azure-hosted integration runtime. The present recurring risk is: The lake lacks layered data-quality boundaries and separate access scopes. The proper ongoing control is: Audit data lifecycle and data access policies across raw and curated layers.
C:The proposed control focuses on: The compute framework does not match parallel data-lake transformation scale. For the design in the question, recurrence comes from: The lake lacks layered data-quality boundaries and separate access scopes. A precise prevention step is: Audit data lifecycle and data access policies across raw and curated layers.
D:That safeguard manages another risk: Operational OLTP and heavy analytical serving duties were not isolated. Its scenario is: Dashboards query raw operational SQL tables directly and cause transaction contention. The present recurring risk is: The lake lacks layered data-quality boundaries and separate access scopes. The proper ongoing control is: Audit data lifecycle and data access policies across raw and curated layers.
Question 497
A design workshop has this requirement: A manufacturing business runs Azure VMs in one region and needs orchestrated recovery in a second region if the primary region fails. Operators currently observe: After a regional outage, engineers have only VM snapshots in the unavailable primary region. Select the ONE design remedy that best addresses the root cause.
- Design Azure SQL failover groups or appropriate geo-replication with an explicit application-level RPO and listener behavior.
- Use supported failback/reprotect procedures and validate reverse replication and recovery plans.
- Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
- Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.
Explanation
Correct Answer
D:The evidence (After a regional outage, engineers have only VM snapshots in the unavailable primary region.) identifies the following cause: Regional DR replication and orchestrated recovery were not configured for the workloads. The design that removes it is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan. The acceptance check is: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.
Incorrect Answers
A:This choice mitigates an alternative scenario, where: Applications remain pinned to a lost primary server endpoint after SQL recovery. The underlying issue there is: The database regional failover and application endpoint strategy were not designed together. Here the root issue is: Regional DR replication and orchestrated recovery were not configured for the workloads. Choose the corresponding action: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.
B:The option belongs to a different failure mechanism: The DR design lacks a reprotection and reverse-replication workflow. That situation exhibits: Operations stop replication after failover and cannot return when the original site recovers. For the stated case, the remedy is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.
C:That design instead addresses another observed condition: Replicated VMs start in the backup region but are unreachable from the corporate data center. Its technical cause is: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. The current workload exhibits: After a regional outage, engineers have only VM snapshots in the unavailable primary region. Its targeted remedy is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.
Question 498
The planned architecture is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan. Workload context: A manufacturing business runs Azure VMs in one region and needs orchestrated recovery in a second region if the primary region fails. Which acceptance test demonstrates that the required behavior works?
- Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path.
- Initiate regional failover in staging and compare latest replicated transactions with primary commit history.
- Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.
- Execute an isolated recovery rehearsal and verify reverse replication health before failback cutover.
Explanation
Correct Answer
C:This observation directly verifies the intended design: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations. The architecture being tested is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan. The original symptom was: After a regional outage, engineers have only VM snapshots in the unavailable primary region.
Incorrect Answers
A:That observation pertains to a separate failure: Replicated VMs start in the backup region but are unreachable from the corporate data center. Its cause is: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. It does not confirm the result of this design. The direct proof would be: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.
B:The alternative test targets: Design Azure SQL failover groups or appropriate geo-replication with an explicit application-level RPO and listener behavior. The scenario's actual proposed remedy is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan. Verify that one by: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.
D:That observation pertains to a separate failure: Operations stop replication after failover and cannot return when the original site recovers. Its cause is: The DR design lacks a reprotection and reverse-replication workflow. It does not confirm the result of this design. The direct proof would be: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.
Question 499
The customer states: A manufacturing business runs Azure VMs in one region and needs orchestrated recovery in a second region if the primary region fails. An incident reveals: After a regional outage, engineers have only VM snapshots in the unavailable primary region. What cause best accounts for this evidence?
- Regional DR replication and orchestrated recovery were not configured for the workloads.
- The DR plan replicated compute without replicating connectivity, routes and DNS dependencies.
- The DR design lacks a reprotection and reverse-replication workflow.
- The database regional failover and application endpoint strategy were not designed together.
Explanation
Correct Answer
A:This is the failure mechanism rather than an incidental symptom: Regional DR replication and orchestrated recovery were not configured for the workloads. It accounts for: After a regional outage, engineers have only VM snapshots in the unavailable primary region. The architectural repair is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.
Incorrect Answers
B:The alternative weakness is: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. Its associated failure is: Replicated VMs start in the backup region but are unreachable from the corporate data center. Neither explains the present observation: After a regional outage, engineers have only VM snapshots in the unavailable primary region. The direct cause here is: Regional DR replication and orchestrated recovery were not configured for the workloads.
C:This cause would explain a different symptom: Operations stop replication after failover and cannot return when the original site recovers. The mechanism for that event is: The DR design lacks a reprotection and reverse-replication workflow. Here the stated symptom is: After a regional outage, engineers have only VM snapshots in the unavailable primary region. Its cause is: Regional DR replication and orchestrated recovery were not configured for the workloads.
D:The proposed diagnosis fits another scenario: The database regional failover and application endpoint strategy were not designed together. It would typically be reflected by: Applications remain pinned to a lost primary server endpoint after SQL recovery. The current evidence instead supports: Regional DR replication and orchestrated recovery were not configured for the workloads.
Question 500
Workload context: A manufacturing business runs Azure VMs in one region and needs orchestrated recovery in a second region if the primary region fails. The implemented remedy is: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan. Which ongoing practice most specifically prevents recurrence of this failure: After a regional outage, engineers have only VM snapshots in the unavailable primary region.?
- Schedule non-disruptive test failovers and monitor replication health and recovery plans.
- Test DR connectivity routes, gateways and private DNS for failover regions.
- Include failback tests and network address planning in every recovery exercise.
- Rehearse the secondary listener and replication lag under representative load.
Explanation
Correct Answer
A:This is an ongoing protection specific to the fault: Schedule non-disruptive test failovers and monitor replication health and recovery plans. The recurrence risk is: Regional DR replication and orchestrated recovery were not configured for the workloads. It should be checked using: Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.
Incorrect Answers
B:The proposed control focuses on: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. For the design in the question, recurrence comes from: Regional DR replication and orchestrated recovery were not configured for the workloads. A precise prevention step is: Schedule non-disruptive test failovers and monitor replication health and recovery plans.
C:That safeguard manages another risk: The DR design lacks a reprotection and reverse-replication workflow. Its scenario is: Operations stop replication after failover and cannot return when the original site recovers. The present recurring risk is: Regional DR replication and orchestrated recovery were not configured for the workloads. The proper ongoing control is: Schedule non-disruptive test failovers and monitor replication health and recovery plans.
D:This is a reasonable safeguard for a different fault: Applications remain pinned to a lost primary server endpoint after SQL recovery. That different mechanism is: The database regional failover and application endpoint strategy were not designed together. The original incident here instead arises from: Regional DR replication and orchestrated recovery were not configured for the workloads. The directly relevant safeguard is: Schedule non-disruptive test failovers and monitor replication health and recovery plans.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests