Question 530
The planned architecture is: Configure Azure SQL long-term retention backup policy appropriate for the required years. Workload context: A regulated SQL workload needs backups for seven years, despite day-to-day restore windows of only weeks. Which acceptance test demonstrates that the required behavior works?
- Try deleting or changing an eligible protected recovery object and verify its immutable retention boundary.
- Locate an old LTR backup in a test and validate that restore operations and approvals work.
- Deploy a newly tagged test VM and verify expected backup policy assignment and first recovery point.
- Restore sample protected data from the backup vault into a supported recovery destination.
Explanation
Correct Answer
B:The acceptance test is specific: Locate an old LTR backup in a test and validate that restore operations and approvals work. Its purpose is to establish that the proposed architecture works: Configure Azure SQL long-term retention backup policy appropriate for the required years.
Incorrect Answers
A:This check validates a different workload: Try deleting or changing an eligible protected recovery object and verify its immutable retention boundary. Its associated design is: Use supported immutable blob retention or backup vault immutability rather than rely on soft-delete alone. The required acceptance test here is: Locate an old LTR backup in a test and validate that restore operations and approvals work.
C:The alternative test targets: Use Azure Backup Policy and Azure Policy-based backup configuration where supported to enforce vault enrollment. The scenario's actual proposed remedy is: Configure Azure SQL long-term retention backup policy appropriate for the required years. Verify that one by: Locate an old LTR backup in a test and validate that restore operations and approvals work.
D:This check validates a different workload: Restore sample protected data from the backup vault into a supported recovery destination. Its associated design is: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies. The required acceptance test here is: Locate an old LTR backup in a test and validate that restore operations and approvals work.
Question 531
The customer states: A regulated SQL workload needs backups for seven years, despite day-to-day restore windows of only weeks. An incident reveals: Mandatory audit-year records are unavailable because operational backups expired. What cause best accounts for this evidence?
- Backups were kept solely in the data source's operational protection boundary.
- Only short-term PITR was configured instead of long-term backup retention.
- Soft-delete recovery does not itself enforce irreversible time-based immutability.
- Backup enrollment depends on manual provisioning rather than policy-driven governance.
Explanation
Correct Answer
B:This is the failure mechanism rather than an incidental symptom: Only short-term PITR was configured instead of long-term backup retention. It accounts for: Mandatory audit-year records are unavailable because operational backups expired. The architectural repair is: Configure Azure SQL long-term retention backup policy appropriate for the required years.
Incorrect Answers
A:This cause would explain a different symptom: Deleting the source storage account compromises every local operational restore point. The mechanism for that event is: Backups were kept solely in the data source's operational protection boundary. Here the stated symptom is: Mandatory audit-year records are unavailable because operational backups expired. Its cause is: Only short-term PITR was configured instead of long-term backup retention.
C:The alternative weakness is: Soft-delete recovery does not itself enforce irreversible time-based immutability. Its associated failure is: An administrator removes evidence before the required minimum retention date. Neither explains the present observation: Mandatory audit-year records are unavailable because operational backups expired. The direct cause here is: Only short-term PITR was configured instead of long-term backup retention.
D:This cause would explain a different symptom: New VMs routinely run for months without a backup schedule. The mechanism for that event is: Backup enrollment depends on manual provisioning rather than policy-driven governance. Here the stated symptom is: Mandatory audit-year records are unavailable because operational backups expired. Its cause is: Only short-term PITR was configured instead of long-term backup retention.
Question 532
Workload context: A regulated SQL workload needs backups for seven years, despite day-to-day restore windows of only weeks. The implemented remedy is: Configure Azure SQL long-term retention backup policy appropriate for the required years. Which ongoing practice most specifically prevents recurrence of this failure: Mandatory audit-year records are unavailable because operational backups expired.?
- Verify backup-vault protection/restore eligibility and separation-of-duties access.
- Track LTR expiry and restore permissions for compliance audits.
- Run daily discovery for unprotected VMs and investigate failed backup assignments.
- Audit retention/lock configurations and required legal holds with separation of duties.
Explanation
Correct Answer
B:This is an ongoing protection specific to the fault: Track LTR expiry and restore permissions for compliance audits. The recurrence risk is: Only short-term PITR was configured instead of long-term backup retention. It should be checked using: Locate an old LTR backup in a test and validate that restore operations and approvals work.
Incorrect Answers
A:That safeguard manages another risk: Backups were kept solely in the data source's operational protection boundary. Its scenario is: Deleting the source storage account compromises every local operational restore point. The present recurring risk is: Only short-term PITR was configured instead of long-term backup retention. The proper ongoing control is: Track LTR expiry and restore permissions for compliance audits.
C:The proposed control focuses on: Backup enrollment depends on manual provisioning rather than policy-driven governance. For the design in the question, recurrence comes from: Only short-term PITR was configured instead of long-term backup retention. A precise prevention step is: Track LTR expiry and restore permissions for compliance audits.
D:That safeguard manages another risk: Soft-delete recovery does not itself enforce irreversible time-based immutability. Its scenario is: An administrator removes evidence before the required minimum retention date. The present recurring risk is: Only short-term PITR was configured instead of long-term backup retention. The proper ongoing control is: Track LTR expiry and restore permissions for compliance audits.
Question 533
A solution architect is reviewing a workload: An Azure Database for PostgreSQL Flexible Server needs protection from a destructive user SQL statement with a specified recovery timestamp. The observed incident is: The database's HA standby contains the accidental delete and cannot restore an earlier state. Which architecture choice most directly removes the identified weakness?
- Use Azure SQL point-in-time restore from automated backups to a distinct recovery database.
- Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server.
- Design Azure Backup protection for Azure Files or supported share snapshots with required retention policy.
- Design supported operational backup for Azure Blobs with versioning, soft delete and point-in-time restore prerequisites as applicable.
Explanation
Correct Answer
B:The targeted implementation is: Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server. The problem is not generic resource availability: High availability was mistaken for a point-in-time data recovery solution. Verify the result by: Perform a restore to just before the bad transaction and confirm the recovered dataset.
Incorrect Answers
A:This choice mitigates an alternative scenario, where: Engineers fail to recover because all replicas contain the same mistaken data. The underlying issue there is: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. Here the root issue is: High availability was mistaken for a point-in-time data recovery solution. Choose the corresponding action: Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server.
C:That design instead addresses another observed condition: Deleting a folder removes the only copy of its files immediately. Its technical cause is: No Azure Files share snapshot/backup recovery policy was applied. The current workload exhibits: The database's HA standby contains the accidental delete and cannot restore an earlier state. Its targeted remedy is: Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server.
D:This choice mitigates an alternative scenario, where: A developer's bulk overwrite cannot be recovered to an earlier object state. The underlying issue there is: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. Here the root issue is: High availability was mistaken for a point-in-time data recovery solution. Choose the corresponding action: Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server.
Question 534
An architect proposes this change: Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server. The workload context is: An Azure Database for PostgreSQL Flexible Server needs protection from a destructive user SQL statement with a specified recovery timestamp. Which evidence would most directly validate the change?
- Delete a sample blob and execute an eligible point-in-time restore within the configured supported window.
- Restore a test folder version from a historical recovery point to a nonproduction share.
- Restore to the pre-update timestamp and verify rows while production remains unaffected.
- Perform a restore to just before the bad transaction and confirm the recovered dataset.
Explanation
Correct Answer
D:The acceptance test is specific: Perform a restore to just before the bad transaction and confirm the recovered dataset. Its purpose is to establish that the proposed architecture works: Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server.
Incorrect Answers
A:That observation pertains to a separate failure: A developer's bulk overwrite cannot be recovered to an earlier object state. Its cause is: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. It does not confirm the result of this design. The direct proof would be: Perform a restore to just before the bad transaction and confirm the recovered dataset.
B:The alternative test targets: Design Azure Backup protection for Azure Files or supported share snapshots with required retention policy. The scenario's actual proposed remedy is: Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server. Verify that one by: Perform a restore to just before the bad transaction and confirm the recovered dataset.
C:This check validates a different workload: Restore to the pre-update timestamp and verify rows while production remains unaffected. Its associated design is: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database. The required acceptance test here is: Perform a restore to just before the bad transaction and confirm the recovered dataset.
Question 535
During architecture troubleshooting, a team reports: The database's HA standby contains the accidental delete and cannot restore an earlier state. Context: An Azure Database for PostgreSQL Flexible Server needs protection from a destructive user SQL statement with a specified recovery timestamp. Which underlying design mistake explains the observed behavior most precisely?
- Object-level restore prerequisites such as change feed/versioning/retention were not enabled.
- High availability was mistaken for a point-in-time data recovery solution.
- Readable replicas reproduce logical changes and are not substitutes for independent historic backups.
- No Azure Files share snapshot/backup recovery policy was applied.
Explanation
Correct Answer
B:The recorded behavior follows from: High availability was mistaken for a point-in-time data recovery solution. The appropriate mitigation would be: Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server. Verify with: Perform a restore to just before the bad transaction and confirm the recovered dataset.
Incorrect Answers
A:The proposed diagnosis fits another scenario: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. It would typically be reflected by: A developer's bulk overwrite cannot be recovered to an earlier object state. The current evidence instead supports: High availability was mistaken for a point-in-time data recovery solution.
C:This cause would explain a different symptom: Engineers fail to recover because all replicas contain the same mistaken data. The mechanism for that event is: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. Here the stated symptom is: The database's HA standby contains the accidental delete and cannot restore an earlier state. Its cause is: High availability was mistaken for a point-in-time data recovery solution.
D:The proposed diagnosis fits another scenario: No Azure Files share snapshot/backup recovery policy was applied. It would typically be reflected by: Deleting a folder removes the only copy of its files immediately. The current evidence instead supports: High availability was mistaken for a point-in-time data recovery solution.
Question 536
The design change is: Design a PostgreSQL Flexible Server point-in-time restore and retention strategy for an eligible server. The original failure was: The database's HA standby contains the accidental delete and cannot restore an earlier state. Which ongoing control best prevents recurrence of the same root cause?
- Run periodic point-in-time drills with realistic accidental update scenarios.
- Test restore procedures and retention windows as datasets and transaction rates grow.
- Audit file-share backup health and retention after storage account migrations.
- Audit backup policy and eligible storage account features after account configuration changes.
Explanation
Correct Answer
B:The key follow-up control is: Test restore procedures and retention windows as datasets and transaction rates grow. It avoids recurrence of the scenario in which: The database's HA standby contains the accidental delete and cannot restore an earlier state. It addresses: High availability was mistaken for a point-in-time data recovery solution.
Incorrect Answers
A:This is a reasonable safeguard for a different fault: Engineers fail to recover because all replicas contain the same mistaken data. That different mechanism is: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. The original incident here instead arises from: High availability was mistaken for a point-in-time data recovery solution. The directly relevant safeguard is: Test restore procedures and retention windows as datasets and transaction rates grow.
C:That safeguard manages another risk: No Azure Files share snapshot/backup recovery policy was applied. Its scenario is: Deleting a folder removes the only copy of its files immediately. The present recurring risk is: High availability was mistaken for a point-in-time data recovery solution. The proper ongoing control is: Test restore procedures and retention windows as datasets and transaction rates grow.
D:This is a reasonable safeguard for a different fault: A developer's bulk overwrite cannot be recovered to an earlier object state. That different mechanism is: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. The original incident here instead arises from: High availability was mistaken for a point-in-time data recovery solution. The directly relevant safeguard is: Test restore procedures and retention windows as datasets and transaction rates grow.
Question 537
A design workshop has this requirement: A protected VM requires a backup stored away from a regional disaster even if the primary backup vault region is inaccessible. Operators currently observe: Every restore copy remains dependent on the primary region's availability. Select the ONE design remedy that best addresses the root cause.
- Use Azure Backup for VM recovery points through an appropriate Recovery Services vault and backup policy.
- Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies.
- Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required.
- Enable supported Azure Backup soft delete and vault security protections, considering immutable vault support.
Explanation
Correct Answer
C:The evidence (Every restore copy remains dependent on the primary region's availability.) identifies the following cause: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. The design that removes it is: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required. The acceptance check is: Verify cross-region restore entitlement and successfully test an eligible secondary-region VM restore.
Incorrect Answers
A:The option belongs to a different failure mechanism: A periodic backup/retention policy was not established for recovery from logical damage. That situation exhibits: Operations rely on one copied VM image that cannot return to an earlier date. For the stated case, the remedy is: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required.
B:That design instead addresses another observed condition: Deleting the source storage account compromises every local operational restore point. Its technical cause is: Backups were kept solely in the data source's operational protection boundary. The current workload exhibits: Every restore copy remains dependent on the primary region's availability. Its targeted remedy is: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required.
D:The option belongs to a different failure mechanism: Backup vault deletion safeguards and retention controls are insufficient. That situation exhibits: A compromised operator can erase every backup after obtaining routine vault permissions. For the stated case, the remedy is: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required.
Question 538
The planned architecture is: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required. Workload context: A protected VM requires a backup stored away from a regional disaster even if the primary backup vault region is inaccessible. Which acceptance test demonstrates that the required behavior works?
- Restore a nonproduction VM from a selected restore point and verify critical application data.
- Verify cross-region restore entitlement and successfully test an eligible secondary-region VM restore.
- Try a controlled deletion and confirm protected recovery data remain recoverable for the configured safety period.
- Restore sample protected data from the backup vault into a supported recovery destination.
Explanation
Correct Answer
B:This observation directly verifies the intended design: Verify cross-region restore entitlement and successfully test an eligible secondary-region VM restore. The architecture being tested is: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required. The original symptom was: Every restore copy remains dependent on the primary region's availability.
Incorrect Answers
A:The alternative test targets: Use Azure Backup for VM recovery points through an appropriate Recovery Services vault and backup policy. The scenario's actual proposed remedy is: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required. Verify that one by: Verify cross-region restore entitlement and successfully test an eligible secondary-region VM restore.
C:That observation pertains to a separate failure: A compromised operator can erase every backup after obtaining routine vault permissions. Its cause is: Backup vault deletion safeguards and retention controls are insufficient. It does not confirm the result of this design. The direct proof would be: Verify cross-region restore entitlement and successfully test an eligible secondary-region VM restore.
D:The alternative test targets: Use a supported Azure Backup vaulted backup strategy for Azure Blobs with eligible account types and policies. The scenario's actual proposed remedy is: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required. Verify that one by: Verify cross-region restore entitlement and successfully test an eligible secondary-region VM restore.
Question 539
The customer states: A protected VM requires a backup stored away from a regional disaster even if the primary backup vault region is inaccessible. An incident reveals: Every restore copy remains dependent on the primary region's availability. What cause best accounts for this evidence?
- Backups were kept solely in the data source's operational protection boundary.
- A periodic backup/retention policy was not established for recovery from logical damage.
- Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement.
- Backup vault deletion safeguards and retention controls are insufficient.
Explanation
Correct Answer
C:This is the failure mechanism rather than an incidental symptom: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. It accounts for: Every restore copy remains dependent on the primary region's availability. The architectural repair is: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required.
Incorrect Answers
A:The alternative weakness is: Backups were kept solely in the data source's operational protection boundary. Its associated failure is: Deleting the source storage account compromises every local operational restore point. Neither explains the present observation: Every restore copy remains dependent on the primary region's availability. The direct cause here is: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement.
B:This cause would explain a different symptom: Operations rely on one copied VM image that cannot return to an earlier date. The mechanism for that event is: A periodic backup/retention policy was not established for recovery from logical damage. Here the stated symptom is: Every restore copy remains dependent on the primary region's availability. Its cause is: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement.
D:The alternative weakness is: Backup vault deletion safeguards and retention controls are insufficient. Its associated failure is: A compromised operator can erase every backup after obtaining routine vault permissions. Neither explains the present observation: Every restore copy remains dependent on the primary region's availability. The direct cause here is: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement.
Question 540
Workload context: A protected VM requires a backup stored away from a regional disaster even if the primary backup vault region is inaccessible. The implemented remedy is: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required. Which ongoing practice most specifically prevents recurrence of this failure: Every restore copy remains dependent on the primary region's availability.?
- Monitor backup job success and test restore points each quarter.
- Review availability and eligibility of cross-region restore before changing redundancy settings.
- Verify backup-vault protection/restore eligibility and separation-of-duties access.
- Review privileged deletion controls, soft delete policy and vault immutability change procedures.
Explanation
Correct Answer
B:The preventive control is: Review availability and eligibility of cross-region restore before changing redundancy settings. It targets the earlier cause: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. Confirm ongoing effectiveness by: Verify cross-region restore entitlement and successfully test an eligible secondary-region VM restore.
Incorrect Answers
A:The proposed control focuses on: A periodic backup/retention policy was not established for recovery from logical damage. For the design in the question, recurrence comes from: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. A precise prevention step is: Review availability and eligibility of cross-region restore before changing redundancy settings.
C:This is a reasonable safeguard for a different fault: Deleting the source storage account compromises every local operational restore point. That different mechanism is: Backups were kept solely in the data source's operational protection boundary. The original incident here instead arises from: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. The directly relevant safeguard is: Review availability and eligibility of cross-region restore before changing redundancy settings.
D:The proposed control focuses on: Backup vault deletion safeguards and retention controls are insufficient. For the design in the question, recurrence comes from: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. A precise prevention step is: Review availability and eligibility of cross-region restore before changing redundancy settings.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests