Question 520
A design review identifies: An analytics service stores blob objects that change frequently and must recover deleted or modified objects without restoring an entire storage account. The failure is: A developer's bulk overwrite cannot be recovered to an earlier object state. Select TWO distinct decisions that together provide the immediate technical solution AND an ongoing prevention control. A verification-only step does not replace either responsibility.
- Design supported operational backup for Azure Blobs with versioning, soft delete and point-in-time restore prerequisites as applicable.
- Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies.
- Audit backup policy and eligible storage account features after account configuration changes.
- Use Azure SQL point-in-time restore from automated backups to a distinct recovery database.
- Test restore procedures and retention windows as datasets and transaction rates grow.
Explanation
Correct Answers
A:This option addresses the actual design defect: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. The correction is: Design supported operational backup for Azure Blobs with versioning, soft delete and point-in-time restore prerequisites as applicable. Confirm the outcome with: Delete a sample blob and execute an eligible point-in-time restore within the configured supported window.
C:The key follow-up control is: Audit backup policy and eligible storage account features after account configuration changes. It avoids recurrence of the scenario in which: A developer's bulk overwrite cannot be recovered to an earlier object state. It addresses: Object-level restore prerequisites such as change feed/versioning/retention were not enabled.
Incorrect Answers
B:This choice mitigates an alternative scenario, where: Deleting the source storage account compromises every local operational restore point. The underlying issue there is: Backups were kept solely in the data source's operational protection boundary. Here the root issue is: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. Choose the corresponding action: Design supported operational backup for Azure Blobs with versioning, soft delete and point-in-time restore prerequisites as applicable.
D:That design instead addresses another observed condition: Engineers fail to recover because all replicas contain the same mistaken data. Its technical cause is: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. The current workload exhibits: A developer's bulk overwrite cannot be recovered to an earlier object state. Its targeted remedy is: Design supported operational backup for Azure Blobs with versioning, soft delete and point-in-time restore prerequisites as applicable.
E:This is a reasonable safeguard for a different fault: The database's HA standby contains the accidental delete and cannot restore an earlier state. That different mechanism is: High availability was mistaken for a point-in-time data recovery solution. The original incident here instead arises from: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. The directly relevant safeguard is: Audit backup policy and eligible storage account features after account configuration changes.
Question 521
A design workshop has this requirement: A compliance application needs offsite protected long-term blob backups independent of the source storage account's primary-region lifecycle. Operators currently observe: Deleting the source storage account compromises every local operational restore point. Select the ONE design remedy that best addresses the root cause.
- Configure Azure SQL long-term retention backup policy appropriate for the required years.
- Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required.
- Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies.
- Design supported operational backup for Azure Blobs with versioning, soft delete and point-in-time restore prerequisites as applicable.
Explanation
Correct Answer
C:This option addresses the actual design defect: Backups were kept solely in the data source's operational protection boundary. The correction is: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies. Confirm the outcome with: Restore sample protected data from the backup vault into a supported recovery destination.
Incorrect Answers
A:This choice mitigates an alternative scenario, where: Mandatory audit-year records are unavailable because operational backups expired. The underlying issue there is: Only short-term PITR was configured instead of long-term backup retention. Here the root issue is: Backups were kept solely in the data source's operational protection boundary. Choose the corresponding action: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies.
B:The option belongs to a different failure mechanism: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. That situation exhibits: Every restore copy remains dependent on the primary region's availability. For the stated case, the remedy is: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies.
D:This choice mitigates an alternative scenario, where: A developer's bulk overwrite cannot be recovered to an earlier object state. The underlying issue there is: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. Here the root issue is: Backups were kept solely in the data source's operational protection boundary. Choose the corresponding action: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies.
Question 522
The planned architecture is: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies. Workload context: A compliance application needs offsite protected long-term blob backups independent of the source storage account's primary-region lifecycle. Which acceptance test demonstrates that the required behavior works?
- Delete a sample blob and execute an eligible point-in-time restore within the configured supported window.
- Locate an old LTR backup in a test and validate that restore operations and approvals work.
- Verify cross-region restore entitlement and successfully test an eligible secondary-region VM restore.
- Restore sample protected data from the backup vault into a supported recovery destination.
Explanation
Correct Answer
D:The acceptance test is specific: Restore sample protected data from the backup vault into a supported recovery destination. Its purpose is to establish that the proposed architecture works: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies.
Incorrect Answers
A:That observation pertains to a separate failure: A developer's bulk overwrite cannot be recovered to an earlier object state. Its cause is: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. It does not confirm the result of this design. The direct proof would be: Restore sample protected data from the backup vault into a supported recovery destination.
B:The alternative test targets: Configure Azure SQL long-term retention backup policy appropriate for the required years. The scenario's actual proposed remedy is: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies. Verify that one by: Restore sample protected data from the backup vault into a supported recovery destination.
C:This check validates a different workload: Verify cross-region restore entitlement and successfully test an eligible secondary-region VM restore. Its associated design is: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required. The required acceptance test here is: Restore sample protected data from the backup vault into a supported recovery destination.
Question 523
The customer states: A compliance application needs offsite protected long-term blob backups independent of the source storage account's primary-region lifecycle. An incident reveals: Deleting the source storage account compromises every local operational restore point. What cause best accounts for this evidence?
- Object-level restore prerequisites such as change feed/versioning/retention were not enabled.
- Only short-term PITR was configured instead of long-term backup retention.
- Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement.
- Backups were kept solely in the data source's operational protection boundary.
Explanation
Correct Answer
D:This is the failure mechanism rather than an incidental symptom: Backups were kept solely in the data source's operational protection boundary. It accounts for: Deleting the source storage account compromises every local operational restore point. The architectural repair is: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies.
Incorrect Answers
A:The proposed diagnosis fits another scenario: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. It would typically be reflected by: A developer's bulk overwrite cannot be recovered to an earlier object state. The current evidence instead supports: Backups were kept solely in the data source's operational protection boundary.
B:The alternative weakness is: Only short-term PITR was configured instead of long-term backup retention. Its associated failure is: Mandatory audit-year records are unavailable because operational backups expired. Neither explains the present observation: Deleting the source storage account compromises every local operational restore point. The direct cause here is: Backups were kept solely in the data source's operational protection boundary.
C:This cause would explain a different symptom: Every restore copy remains dependent on the primary region's availability. The mechanism for that event is: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. Here the stated symptom is: Deleting the source storage account compromises every local operational restore point. Its cause is: Backups were kept solely in the data source's operational protection boundary.
Question 524
Workload context: A compliance application needs offsite protected long-term blob backups independent of the source storage account's primary-region lifecycle. The implemented remedy is: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies. Which ongoing practice most specifically prevents recurrence of this failure: Deleting the source storage account compromises every local operational restore point.?
- Verify backup-vault protection/restore eligibility and separation-of-duties access.
- Audit backup policy and eligible storage account features after account configuration changes.
- Review availability and eligibility of cross-region restore before changing redundancy settings.
- Track LTR expiry and restore permissions for compliance audits.
Explanation
Correct Answer
A:This is an ongoing protection specific to the fault: Verify backup-vault protection/restore eligibility and separation-of-duties access. The recurrence risk is: Backups were kept solely in the data source's operational protection boundary. It should be checked using: Restore sample protected data from the backup vault into a supported recovery destination.
Incorrect Answers
B:The proposed control focuses on: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. For the design in the question, recurrence comes from: Backups were kept solely in the data source's operational protection boundary. A precise prevention step is: Verify backup-vault protection/restore eligibility and separation-of-duties access.
C:That safeguard manages another risk: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. Its scenario is: Every restore copy remains dependent on the primary region's availability. The present recurring risk is: Backups were kept solely in the data source's operational protection boundary. The proper ongoing control is: Verify backup-vault protection/restore eligibility and separation-of-duties access.
D:This is a reasonable safeguard for a different fault: Mandatory audit-year records are unavailable because operational backups expired. That different mechanism is: Only short-term PITR was configured instead of long-term backup retention. The original incident here instead arises from: Backups were kept solely in the data source's operational protection boundary. The directly relevant safeguard is: Verify backup-vault protection/restore eligibility and separation-of-duties access.
Question 525
A solution architect is reviewing a workload: A finance database's erroneous update was copied to read replicas, but the team needs its state just before the transaction. The observed incident is: Engineers fail to recover because all replicas contain the same mistaken data. Which architecture choice most directly removes the identified weakness?
- Use Azure SQL point-in-time restore from automated backups to a distinct recovery database.
- Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server.
- Design supported operational backup for Azure Blobs with versioning, soft delete and point-in-time restore prerequisites as applicable.
- Use Azure Backup for VM recovery points through an appropriate Recovery Services vault and backup policy.
Explanation
Correct Answer
A:The targeted implementation is: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database. The problem is not generic resource availability: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. Verify the result by: Restore to the pre-update timestamp and verify rows while production remains unaffected.
Incorrect Answers
B:That design instead addresses another observed condition: The database's HA standby contains the accidental delete and cannot restore an earlier state. Its technical cause is: High availability was mistaken for a point-in-time data recovery solution. The current workload exhibits: Engineers fail to recover because all replicas contain the same mistaken data. Its targeted remedy is: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database.
C:This choice mitigates an alternative scenario, where: A developer's bulk overwrite cannot be recovered to an earlier object state. The underlying issue there is: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. Here the root issue is: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. Choose the corresponding action: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database.
D:The option belongs to a different failure mechanism: A periodic backup/retention policy was not established for recovery from logical damage. That situation exhibits: Operations rely on one copied VM image that cannot return to an earlier date. For the stated case, the remedy is: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database.
Question 526
An architect proposes this change: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database. The workload context is: A finance database's erroneous update was copied to read replicas, but the team needs its state just before the transaction. Which evidence would most directly validate the change?
- Restore a nonproduction VM from a selected restore point and verify critical application data.
- Delete a sample blob and execute an eligible point-in-time restore within the configured supported window.
- Restore to the pre-update timestamp and verify rows while production remains unaffected.
- Perform a restore to just before the bad transaction and confirm the recovered dataset.
Explanation
Correct Answer
C:The acceptance test is specific: Restore to the pre-update timestamp and verify rows while production remains unaffected. Its purpose is to establish that the proposed architecture works: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database.
Incorrect Answers
A:The alternative test targets: Use Azure Backup for VM recovery points through an appropriate Recovery Services vault and backup policy. The scenario's actual proposed remedy is: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database. Verify that one by: Restore to the pre-update timestamp and verify rows while production remains unaffected.
B:This check validates a different workload: Delete a sample blob and execute an eligible point-in-time restore within the configured supported window. Its associated design is: Design supported operational backup for Azure Blobs with versioning, soft delete and point-in-time restore prerequisites as applicable. The required acceptance test here is: Restore to the pre-update timestamp and verify rows while production remains unaffected.
D:The alternative test targets: Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server. The scenario's actual proposed remedy is: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database. Verify that one by: Restore to the pre-update timestamp and verify rows while production remains unaffected.
Question 527
During architecture troubleshooting, a team reports: Engineers fail to recover because all replicas contain the same mistaken data. Context: A finance database's erroneous update was copied to read replicas, but the team needs its state just before the transaction. Which underlying design mistake explains the observed behavior most precisely?
- Object-level restore prerequisites such as change feed/versioning/retention were not enabled.
- Readable replicas reproduce logical changes and are not substitutes for independent historic backups.
- A periodic backup/retention policy was not established for recovery from logical damage.
- High availability was mistaken for a point-in-time data recovery solution.
Explanation
Correct Answer
B:The incident is explained by: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. The reported symptom is: Engineers fail to recover because all replicas contain the same mistaken data. The corresponding design fix is: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database.
Incorrect Answers
A:The alternative weakness is: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. Its associated failure is: A developer's bulk overwrite cannot be recovered to an earlier object state. Neither explains the present observation: Engineers fail to recover because all replicas contain the same mistaken data. The direct cause here is: Readable replicas reproduce logical changes and are not substitutes for independent historic backups.
C:The proposed diagnosis fits another scenario: A periodic backup/retention policy was not established for recovery from logical damage. It would typically be reflected by: Operations rely on one copied VM image that cannot return to an earlier date. The current evidence instead supports: Readable replicas reproduce logical changes and are not substitutes for independent historic backups.
D:The alternative weakness is: High availability was mistaken for a point-in-time data recovery solution. Its associated failure is: The database's HA standby contains the accidental delete and cannot restore an earlier state. Neither explains the present observation: Engineers fail to recover because all replicas contain the same mistaken data. The direct cause here is: Readable replicas reproduce logical changes and are not substitutes for independent historic backups.
Question 528
The design change is: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database. The original failure was: Engineers fail to recover because all replicas contain the same mistaken data. Which ongoing control best prevents recurrence of the same root cause?
- Audit backup policy and eligible storage account features after account configuration changes.
- Run periodic point-in-time drills with realistic accidental update scenarios.
- Test restore procedures and retention windows as datasets and transaction rates grow.
- Monitor backup job success and test restore points each quarter.
Explanation
Correct Answer
B:The preventive control is: Run periodic point-in-time drills with realistic accidental update scenarios. It targets the earlier cause: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. Confirm ongoing effectiveness by: Restore to the pre-update timestamp and verify rows while production remains unaffected.
Incorrect Answers
A:The proposed control focuses on: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. For the design in the question, recurrence comes from: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. A precise prevention step is: Run periodic point-in-time drills with realistic accidental update scenarios.
C:This is a reasonable safeguard for a different fault: The database's HA standby contains the accidental delete and cannot restore an earlier state. That different mechanism is: High availability was mistaken for a point-in-time data recovery solution. The original incident here instead arises from: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. The directly relevant safeguard is: Run periodic point-in-time drills with realistic accidental update scenarios.
D:The proposed control focuses on: A periodic backup/retention policy was not established for recovery from logical damage. For the design in the question, recurrence comes from: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. A precise prevention step is: Run periodic point-in-time drills with realistic accidental update scenarios.
Question 529
A design workshop has this requirement: A regulated SQL workload needs backups for seven years, despite day-to-day restore windows of only weeks. Operators currently observe: Mandatory audit-year records are unavailable because operational backups expired. Select the ONE design remedy that best addresses the root cause.
- Use Azure Backup Policy and Azure Policy-based backup configuration where supported to enforce vault enrollment.
- Use supported immutable blob retention or backup vault immutability rather than rely on soft-delete alone.
- Configure Azure SQL long-term retention backup policy appropriate for the required years.
- Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies.
Explanation
Correct Answer
C:The targeted implementation is: Configure Azure SQL long-term retention backup policy appropriate for the required years. The problem is not generic resource availability: Only short-term PITR was configured instead of long-term backup retention. Verify the result by: Locate an old LTR backup in a test and validate that restore operations and approvals work.
Incorrect Answers
A:That design instead addresses another observed condition: New VMs routinely run for months without a backup schedule. Its technical cause is: Backup enrollment depends on manual provisioning rather than policy-driven governance. The current workload exhibits: Mandatory audit-year records are unavailable because operational backups expired. Its targeted remedy is: Configure Azure SQL long-term retention backup policy appropriate for the required years.
B:This choice mitigates an alternative scenario, where: An administrator removes evidence before the required minimum retention date. The underlying issue there is: Soft-delete recovery does not itself enforce irreversible time-based immutability. Here the root issue is: Only short-term PITR was configured instead of long-term backup retention. Choose the corresponding action: Configure Azure SQL long-term retention backup policy appropriate for the required years.
D:That design instead addresses another observed condition: Deleting the source storage account compromises every local operational restore point. Its technical cause is: Backups were kept solely in the data source's operational protection boundary. The current workload exhibits: Mandatory audit-year records are unavailable because operational backups expired. Its targeted remedy is: Configure Azure SQL long-term retention backup policy appropriate for the required years.
Question 530
The planned architecture is: Configure Azure SQL long-term retention backup policy appropriate for the required years. Workload context: A regulated SQL workload needs backups for seven years, despite day-to-day restore windows of only weeks. Which acceptance test demonstrates that the required behavior works?
- Try deleting or changing an eligible protected recovery object and verify its immutable retention boundary.
- Locate an old LTR backup in a test and validate that restore operations and approvals work.
- Deploy a newly tagged test VM and verify expected backup policy assignment and first recovery point.
- Restore sample protected data from the backup vault into a supported recovery destination.
Explanation
Correct Answer
B:The acceptance test is specific: Locate an old LTR backup in a test and validate that restore operations and approvals work. Its purpose is to establish that the proposed architecture works: Configure Azure SQL long-term retention backup policy appropriate for the required years.
Incorrect Answers
A:This check validates a different workload: Try deleting or changing an eligible protected recovery object and verify its immutable retention boundary. Its associated design is: Use supported immutable blob retention or backup vault immutability rather than rely on soft-delete alone. The required acceptance test here is: Locate an old LTR backup in a test and validate that restore operations and approvals work.
C:The alternative test targets: Use Azure Backup Policy and Azure Policy-based backup configuration where supported to enforce vault enrollment. The scenario's actual proposed remedy is: Configure Azure SQL long-term retention backup policy appropriate for the required years. Verify that one by: Locate an old LTR backup in a test and validate that restore operations and approvals work.
D:This check validates a different workload: Restore sample protected data from the backup vault into a supported recovery destination. Its associated design is: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies. The required acceptance test here is: Locate an old LTR backup in a test and validate that restore operations and approvals work.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests