Question 550
An architect proposes this change: Use supported failback/reprotect procedures and validate reverse replication and recovery plans. The workload context is: After a test failover with Azure Site Recovery, engineers need to return protected VMs to the original region safely. Which evidence would most directly validate the change?
- Run a test failover and verify recovered services while production users remain on the primary system.
- Execute an isolated recovery rehearsal and verify reverse replication health before failback cutover.
- Restore a nonproduction VM from a selected restore point and verify critical application data.
- Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.
Explanation
Correct Answer
B:This observation directly verifies the intended design: Execute an isolated recovery rehearsal and verify reverse replication health before failback cutover. The architecture being tested is: Use supported failback/reprotect procedures and validate reverse replication and recovery plans. The original symptom was: Operations stop replication after failover and cannot return when the original site recovers.
Incorrect Answers
A:The alternative test targets: Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources. The scenario's actual proposed remedy is: Use supported failback/reprotect procedures and validate reverse replication and recovery plans. Verify that one by: Execute an isolated recovery rehearsal and verify reverse replication health before failback cutover.
C:That observation pertains to a separate failure: Operations rely on one copied VM image that cannot return to an earlier date. Its cause is: A periodic backup/retention policy was not established for recovery from logical damage. It does not confirm the result of this design. The direct proof would be: Execute an isolated recovery rehearsal and verify reverse replication health before failback cutover.
D:The alternative test targets: Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan. The scenario's actual proposed remedy is: Use supported failback/reprotect procedures and validate reverse replication and recovery plans. Verify that one by: Execute an isolated recovery rehearsal and verify reverse replication health before failback cutover.
Question 551
During architecture troubleshooting, a team reports: Operations stop replication after failover and cannot return when the original site recovers. Context: After a test failover with Azure Site Recovery, engineers need to return protected VMs to the original region safely. Which underlying design mistake explains the observed behavior most precisely?
- Test failover networking was not isolated from production routes and DNS.
- A periodic backup/retention policy was not established for recovery from logical damage.
- The DR design lacks a reprotection and reverse-replication workflow.
- Regional DR replication and orchestrated recovery were not configured for the workloads.
Explanation
Correct Answer
C:This is the failure mechanism rather than an incidental symptom: The DR design lacks a reprotection and reverse-replication workflow. It accounts for: Operations stop replication after failover and cannot return when the original site recovers. The architectural repair is: Use supported failback/reprotect procedures and validate reverse replication and recovery plans.
Incorrect Answers
A:The alternative weakness is: Test failover networking was not isolated from production routes and DNS. Its associated failure is: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment. Neither explains the present observation: Operations stop replication after failover and cannot return when the original site recovers. The direct cause here is: The DR design lacks a reprotection and reverse-replication workflow.
B:This cause would explain a different symptom: Operations rely on one copied VM image that cannot return to an earlier date. The mechanism for that event is: A periodic backup/retention policy was not established for recovery from logical damage. Here the stated symptom is: Operations stop replication after failover and cannot return when the original site recovers. Its cause is: The DR design lacks a reprotection and reverse-replication workflow.
D:The alternative weakness is: Regional DR replication and orchestrated recovery were not configured for the workloads. Its associated failure is: After a regional outage, engineers have only VM snapshots in the unavailable primary region. Neither explains the present observation: Operations stop replication after failover and cannot return when the original site recovers. The direct cause here is: The DR design lacks a reprotection and reverse-replication workflow.
Question 552
The design change is: Use supported failback/reprotect procedures and validate reverse replication and recovery plans. The original failure was: Operations stop replication after failover and cannot return when the original site recovers. Which ongoing control best prevents recurrence of the same root cause?
- Audit DR test VNets and teardown of temporary test resources after drills.
- Schedule non-disruptive test failovers and monitor replication health and recovery plans.
- Include failback tests and network address planning in every recovery exercise.
- Monitor backup job success and test restore points each quarter.
Explanation
Correct Answer
C:This is an ongoing protection specific to the fault: Include failback tests and network address planning in every recovery exercise. The recurrence risk is: The DR design lacks a reprotection and reverse-replication workflow. It should be checked using: Execute an isolated recovery rehearsal and verify reverse replication health before failback cutover.
Incorrect Answers
A:The proposed control focuses on: Test failover networking was not isolated from production routes and DNS. For the design in the question, recurrence comes from: The DR design lacks a reprotection and reverse-replication workflow. A precise prevention step is: Include failback tests and network address planning in every recovery exercise.
B:That safeguard manages another risk: Regional DR replication and orchestrated recovery were not configured for the workloads. Its scenario is: After a regional outage, engineers have only VM snapshots in the unavailable primary region. The present recurring risk is: The DR design lacks a reprotection and reverse-replication workflow. The proper ongoing control is: Include failback tests and network address planning in every recovery exercise.
D:The proposed control focuses on: A periodic backup/retention policy was not established for recovery from logical damage. For the design in the question, recurrence comes from: The DR design lacks a reprotection and reverse-replication workflow. A precise prevention step is: Include failback tests and network address planning in every recovery exercise.
Question 553
A design workshop has this requirement: A DR test must validate VM recovery without changing live production DNS, IP paths or application traffic. Operators currently observe: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment. Select the ONE design remedy that best addresses the root cause.
- Use supported failback/reprotect procedures and validate reverse replication and recovery plans.
- Use Azure Backup for VM recovery points through an appropriate Recovery Services vault and backup policy.
- Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
- Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources.
Explanation
Correct Answer
D:This option addresses the actual design defect: Test failover networking was not isolated from production routes and DNS. The correction is: Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources. Confirm the outcome with: Run a test failover and verify recovered services while production users remain on the primary system.
Incorrect Answers
A:That design instead addresses another observed condition: Operations stop replication after failover and cannot return when the original site recovers. Its technical cause is: The DR design lacks a reprotection and reverse-replication workflow. The current workload exhibits: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment. Its targeted remedy is: Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources.
B:This choice mitigates an alternative scenario, where: Operations rely on one copied VM image that cannot return to an earlier date. The underlying issue there is: A periodic backup/retention policy was not established for recovery from logical damage. Here the root issue is: Test failover networking was not isolated from production routes and DNS. Choose the corresponding action: Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources.
C:The option belongs to a different failure mechanism: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. That situation exhibits: Replicated VMs start in the backup region but are unreachable from the corporate data center. For the stated case, the remedy is: Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources.
Question 554
The planned architecture is: Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources. Workload context: A DR test must validate VM recovery without changing live production DNS, IP paths or application traffic. Which acceptance test demonstrates that the required behavior works?
- Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path.
- Restore a nonproduction VM from a selected restore point and verify critical application data.
- Run a test failover and verify recovered services while production users remain on the primary system.
- Execute an isolated recovery rehearsal and verify reverse replication health before failback cutover.
Explanation
Correct Answer
C:The decisive evidence is: Run a test failover and verify recovered services while production users remain on the primary system. This measures the mechanism of the planned change, not an unrelated Azure service: Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources.
Incorrect Answers
A:This check validates a different workload: Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path. Its associated design is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources. The required acceptance test here is: Run a test failover and verify recovered services while production users remain on the primary system.
B:That observation pertains to a separate failure: Operations rely on one copied VM image that cannot return to an earlier date. Its cause is: A periodic backup/retention policy was not established for recovery from logical damage. It does not confirm the result of this design. The direct proof would be: Run a test failover and verify recovered services while production users remain on the primary system.
D:This check validates a different workload: Execute an isolated recovery rehearsal and verify reverse replication health before failback cutover. Its associated design is: Use supported failback/reprotect procedures and validate reverse replication and recovery plans. The required acceptance test here is: Run a test failover and verify recovered services while production users remain on the primary system.
Question 555
The customer states: A DR test must validate VM recovery without changing live production DNS, IP paths or application traffic. An incident reveals: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment. What cause best accounts for this evidence?
- The DR design lacks a reprotection and reverse-replication workflow.
- A periodic backup/retention policy was not established for recovery from logical damage.
- Test failover networking was not isolated from production routes and DNS.
- The DR plan replicated compute without replicating connectivity, routes and DNS dependencies.
Explanation
Correct Answer
C:The recorded behavior follows from: Test failover networking was not isolated from production routes and DNS. The appropriate mitigation would be: Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources. Verify with: Run a test failover and verify recovered services while production users remain on the primary system.
Incorrect Answers
A:This cause would explain a different symptom: Operations stop replication after failover and cannot return when the original site recovers. The mechanism for that event is: The DR design lacks a reprotection and reverse-replication workflow. Here the stated symptom is: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment. Its cause is: Test failover networking was not isolated from production routes and DNS.
B:The proposed diagnosis fits another scenario: A periodic backup/retention policy was not established for recovery from logical damage. It would typically be reflected by: Operations rely on one copied VM image that cannot return to an earlier date. The current evidence instead supports: Test failover networking was not isolated from production routes and DNS.
D:This cause would explain a different symptom: Replicated VMs start in the backup region but are unreachable from the corporate data center. The mechanism for that event is: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. Here the stated symptom is: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment. Its cause is: Test failover networking was not isolated from production routes and DNS.
Question 556
Workload context: A DR test must validate VM recovery without changing live production DNS, IP paths or application traffic. The implemented remedy is: Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources. Which ongoing practice most specifically prevents recurrence of this failure: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment.?
- Monitor backup job success and test restore points each quarter.
- Include failback tests and network address planning in every recovery exercise.
- Audit DR test VNets and teardown of temporary test resources after drills.
- Test DR connectivity routes, gateways and private DNS for failover regions.
Explanation
Correct Answer
C:The key follow-up control is: Audit DR test VNets and teardown of temporary test resources after drills. It avoids recurrence of the scenario in which: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment. It addresses: Test failover networking was not isolated from production routes and DNS.
Incorrect Answers
A:That safeguard manages another risk: A periodic backup/retention policy was not established for recovery from logical damage. Its scenario is: Operations rely on one copied VM image that cannot return to an earlier date. The present recurring risk is: Test failover networking was not isolated from production routes and DNS. The proper ongoing control is: Audit DR test VNets and teardown of temporary test resources after drills.
B:This is a reasonable safeguard for a different fault: Operations stop replication after failover and cannot return when the original site recovers. That different mechanism is: The DR design lacks a reprotection and reverse-replication workflow. The original incident here instead arises from: Test failover networking was not isolated from production routes and DNS. The directly relevant safeguard is: Audit DR test VNets and teardown of temporary test resources after drills.
D:That safeguard manages another risk: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. Its scenario is: Replicated VMs start in the backup region but are unreachable from the corporate data center. The present recurring risk is: Test failover networking was not isolated from production routes and DNS. The proper ongoing control is: Audit DR test VNets and teardown of temporary test resources after drills.
Question 557
A solution architect is reviewing a workload: A business has an ExpressRoute connection to its region but disaster recovery must preserve connectivity to the secondary region. The observed incident is: Replicated VMs start in the backup region but are unreachable from the corporate data center. Which architecture choice most directly removes the identified weakness?
- Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
- Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.
- Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources.
- Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required.
Explanation
Correct Answer
A:The evidence (Replicated VMs start in the backup region but are unreachable from the corporate data center.) identifies the following cause: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. The design that removes it is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources. The acceptance check is: Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path.
Incorrect Answers
B:The option belongs to a different failure mechanism: Regional DR replication and orchestrated recovery were not configured for the workloads. That situation exhibits: After a regional outage, engineers have only VM snapshots in the unavailable primary region. For the stated case, the remedy is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
C:That design instead addresses another observed condition: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment. Its technical cause is: Test failover networking was not isolated from production routes and DNS. The current workload exhibits: Replicated VMs start in the backup region but are unreachable from the corporate data center. Its targeted remedy is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
D:This choice mitigates an alternative scenario, where: Every restore copy remains dependent on the primary region's availability. The underlying issue there is: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. Here the root issue is: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. Choose the corresponding action: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
Question 558
An architect proposes this change: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources. The workload context is: A business has an ExpressRoute connection to its region but disaster recovery must preserve connectivity to the secondary region. Which evidence would most directly validate the change?
- Execute an isolated test failover and confirm VM boot, network reachability and documented RPO/RTO expectations.
- Verify cross-region restore entitlement and successfully test an eligible secondary-region VM restore.
- Run a test failover and verify recovered services while production users remain on the primary system.
- Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path.
Explanation
Correct Answer
D:The acceptance test is specific: Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path. Its purpose is to establish that the proposed architecture works: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
Incorrect Answers
A:That observation pertains to a separate failure: After a regional outage, engineers have only VM snapshots in the unavailable primary region. Its cause is: Regional DR replication and orchestrated recovery were not configured for the workloads. It does not confirm the result of this design. The direct proof would be: Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path.
B:The alternative test targets: Choose supported geo-redundant Azure Backup vault storage and cross-region restore if eligible and required. The scenario's actual proposed remedy is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources. Verify that one by: Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path.
C:This check validates a different workload: Run a test failover and verify recovered services while production users remain on the primary system. Its associated design is: Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources. The required acceptance test here is: Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path.
Question 559
During architecture troubleshooting, a team reports: Replicated VMs start in the backup region but are unreachable from the corporate data center. Context: A business has an ExpressRoute connection to its region but disaster recovery must preserve connectivity to the secondary region. Which underlying design mistake explains the observed behavior most precisely?
- Regional DR replication and orchestrated recovery were not configured for the workloads.
- Test failover networking was not isolated from production routes and DNS.
- The DR plan replicated compute without replicating connectivity, routes and DNS dependencies.
- Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement.
Explanation
Correct Answer
C:The incident is explained by: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. The reported symptom is: Replicated VMs start in the backup region but are unreachable from the corporate data center. The corresponding design fix is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
Incorrect Answers
A:The proposed diagnosis fits another scenario: Regional DR replication and orchestrated recovery were not configured for the workloads. It would typically be reflected by: After a regional outage, engineers have only VM snapshots in the unavailable primary region. The current evidence instead supports: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies.
B:The alternative weakness is: Test failover networking was not isolated from production routes and DNS. Its associated failure is: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment. Neither explains the present observation: Replicated VMs start in the backup region but are unreachable from the corporate data center. The direct cause here is: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies.
D:The proposed diagnosis fits another scenario: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. It would typically be reflected by: Every restore copy remains dependent on the primary region's availability. The current evidence instead supports: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies.
Question 560
A design review identifies: A business has an ExpressRoute connection to its region but disaster recovery must preserve connectivity to the secondary region. The failure is: Replicated VMs start in the backup region but are unreachable from the corporate data center. Select TWO distinct decisions that together provide the immediate technical solution AND an ongoing prevention control. A verification-only step does not replace either responsibility.
- Review availability and eligibility of cross-region restore before changing redundancy settings.
- Test DR connectivity routes, gateways and private DNS for failover regions.
- Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources.
- Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
- Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.
Explanation
Correct Answers
B:The key follow-up control is: Test DR connectivity routes, gateways and private DNS for failover regions. It avoids recurrence of the scenario in which: Replicated VMs start in the backup region but are unreachable from the corporate data center. It addresses: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies.
D:The evidence (Replicated VMs start in the backup region but are unreachable from the corporate data center.) identifies the following cause: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. The design that removes it is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources. The acceptance check is: Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path.
Incorrect Answers
A:This is a reasonable safeguard for a different fault: Every restore copy remains dependent on the primary region's availability. That different mechanism is: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. The original incident here instead arises from: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. The directly relevant safeguard is: Test DR connectivity routes, gateways and private DNS for failover regions.
C:That design instead addresses another observed condition: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment. Its technical cause is: Test failover networking was not isolated from production routes and DNS. The current workload exhibits: Replicated VMs start in the backup region but are unreachable from the corporate data center. Its targeted remedy is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
E:The option belongs to a different failure mechanism: Regional DR replication and orchestrated recovery were not configured for the workloads. That situation exhibits: After a regional outage, engineers have only VM snapshots in the unavailable primary region. For the stated case, the remedy is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests