Question 560
A design review identifies: A business has an ExpressRoute connection to its region but disaster recovery must preserve connectivity to the secondary region. The failure is: Replicated VMs start in the backup region but are unreachable from the corporate data center. Select TWO distinct decisions that together provide the immediate technical solution AND an ongoing prevention control. A verification-only step does not replace either responsibility.
- Review availability and eligibility of cross-region restore before changing redundancy settings.
- Test DR connectivity routes, gateways and private DNS for failover regions.
- Use Azure Site Recovery test failover with an isolated test virtual network and disposable recovery resources.
- Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
- Design Azure Site Recovery replication for supported VMs, target networking and a tested recovery plan.
Explanation
Correct Answers
B:The key follow-up control is: Test DR connectivity routes, gateways and private DNS for failover regions. It avoids recurrence of the scenario in which: Replicated VMs start in the backup region but are unreachable from the corporate data center. It addresses: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies.
D:The evidence (Replicated VMs start in the backup region but are unreachable from the corporate data center.) identifies the following cause: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. The design that removes it is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources. The acceptance check is: Disconnect the primary link in a test and verify on-prem to secondary workloads over the documented backup path.
Incorrect Answers
A:This is a reasonable safeguard for a different fault: Every restore copy remains dependent on the primary region's availability. That different mechanism is: Vault storage redundancy and cross-region recovery capabilities do not meet the regional RTO requirement. The original incident here instead arises from: The DR plan replicated compute without replicating connectivity, routes and DNS dependencies. The directly relevant safeguard is: Test DR connectivity routes, gateways and private DNS for failover regions.
C:That design instead addresses another observed condition: A disaster-recovery rehearsal accidentally redirects real customer traffic to the test environment. Its technical cause is: Test failover networking was not isolated from production routes and DNS. The current workload exhibits: Replicated VMs start in the backup region but are unreachable from the corporate data center. Its targeted remedy is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
E:The option belongs to a different failure mechanism: Regional DR replication and orchestrated recovery were not configured for the workloads. That situation exhibits: After a regional outage, engineers have only VM snapshots in the unavailable primary region. For the stated case, the remedy is: Design secondary-region networking, appropriate on-prem routing connectivity and secure failover paths independent of primary-only resources.
Question 561
A design workshop has this requirement: A service owner specifies a maximum of fifteen minutes of lost writes and two hours to restore operation following a region loss. Operators currently observe: An annual backup is approved despite a fifteen-minute maximum data-loss requirement. Select the ONE design remedy that best addresses the root cause.
- Add appropriate cross-region replication and failover design in addition to zone-level high availability.
- Use Azure Backup for VM recovery points through an appropriate Recovery Services vault and backup policy.
- Design Azure SQL failover groups or appropriate geo-replication with an explicit application-level RPO and listener behavior.
- Use the declared RPO and RTO to select a realistic continuous replication, backup or multi-region architecture.
Explanation
Correct Answer
D:The targeted implementation is: Use the declared RPO and RTO to select a realistic continuous replication, backup or multi-region architecture. The problem is not generic resource availability: Recovery-point frequency was not assessed against the business RPO. Verify the result by: Inject a controlled failure and measure last committed recoverable write and time to restore service.
Incorrect Answers
A:The option belongs to a different failure mechanism: Availability zones are failure domains inside one region rather than independent geographic sites. That situation exhibits: All zonally redundant resources become unavailable when the full Azure region fails. For the stated case, the remedy is: Use the declared RPO and RTO to select a realistic continuous replication, backup or multi-region architecture.
B:That design instead addresses another observed condition: Operations rely on one copied VM image that cannot return to an earlier date. Its technical cause is: A periodic backup/retention policy was not established for recovery from logical damage. The current workload exhibits: An annual backup is approved despite a fifteen-minute maximum data-loss requirement. Its targeted remedy is: Use the declared RPO and RTO to select a realistic continuous replication, backup or multi-region architecture.
C:This choice mitigates an alternative scenario, where: Applications remain pinned to a lost primary server endpoint after SQL recovery. The underlying issue there is: The database regional failover and application endpoint strategy were not designed together. Here the root issue is: Recovery-point frequency was not assessed against the business RPO. Choose the corresponding action: Use the declared RPO and RTO to select a realistic continuous replication, backup or multi-region architecture.
Question 562
The planned architecture is: Use the declared RPO and RTO to select a realistic continuous replication, backup or multi-region architecture. Workload context: A service owner specifies a maximum of fifteen minutes of lost writes and two hours to restore operation following a region loss. Which acceptance test demonstrates that the required behavior works?
- Restore a nonproduction VM from a selected restore point and verify critical application data.
- Initiate regional failover in staging and compare latest replicated transactions with primary commit history.
- Inject a controlled failure and measure last committed recoverable write and time to restore service.
- Test regional dependency removal and verify service can operate from the secondary region.
Explanation
Correct Answer
C:The acceptance test is specific: Inject a controlled failure and measure last committed recoverable write and time to restore service. Its purpose is to establish that the proposed architecture works: Use the declared RPO and RTO to select a realistic continuous replication, backup or multi-region architecture.
Incorrect Answers
A:The alternative test targets: Use Azure Backup for VM recovery points through an appropriate Recovery Services vault and backup policy. The scenario's actual proposed remedy is: Use the declared RPO and RTO to select a realistic continuous replication, backup or multi-region architecture. Verify that one by: Inject a controlled failure and measure last committed recoverable write and time to restore service.
B:This check validates a different workload: Initiate regional failover in staging and compare latest replicated transactions with primary commit history. Its associated design is: Design Azure SQL failover groups or appropriate geo-replication with an explicit application-level RPO and listener behavior. The required acceptance test here is: Inject a controlled failure and measure last committed recoverable write and time to restore service.
D:The alternative test targets: Add appropriate cross-region replication and failover design in addition to zone-level high availability. The scenario's actual proposed remedy is: Use the declared RPO and RTO to select a realistic continuous replication, backup or multi-region architecture. Verify that one by: Inject a controlled failure and measure last committed recoverable write and time to restore service.
Question 563
The customer states: A service owner specifies a maximum of fifteen minutes of lost writes and two hours to restore operation following a region loss. An incident reveals: An annual backup is approved despite a fifteen-minute maximum data-loss requirement. What cause best accounts for this evidence?
- Availability zones are failure domains inside one region rather than independent geographic sites.
- The database regional failover and application endpoint strategy were not designed together.
- A periodic backup/retention policy was not established for recovery from logical damage.
- Recovery-point frequency was not assessed against the business RPO.
Explanation
Correct Answer
D:The recorded behavior follows from: Recovery-point frequency was not assessed against the business RPO. The appropriate mitigation would be: Use the declared RPO and RTO to select a realistic continuous replication, backup or multi-region architecture. Verify with: Inject a controlled failure and measure last committed recoverable write and time to restore service.
Incorrect Answers
A:The alternative weakness is: Availability zones are failure domains inside one region rather than independent geographic sites. Its associated failure is: All zonally redundant resources become unavailable when the full Azure region fails. Neither explains the present observation: An annual backup is approved despite a fifteen-minute maximum data-loss requirement. The direct cause here is: Recovery-point frequency was not assessed against the business RPO.
B:This cause would explain a different symptom: Applications remain pinned to a lost primary server endpoint after SQL recovery. The mechanism for that event is: The database regional failover and application endpoint strategy were not designed together. Here the stated symptom is: An annual backup is approved despite a fifteen-minute maximum data-loss requirement. Its cause is: Recovery-point frequency was not assessed against the business RPO.
C:The proposed diagnosis fits another scenario: A periodic backup/retention policy was not established for recovery from logical damage. It would typically be reflected by: Operations rely on one copied VM image that cannot return to an earlier date. The current evidence instead supports: Recovery-point frequency was not assessed against the business RPO.
Question 564
Workload context: A service owner specifies a maximum of fifteen minutes of lost writes and two hours to restore operation following a region loss. The implemented remedy is: Use the declared RPO and RTO to select a realistic continuous replication, backup or multi-region architecture. Which ongoing practice most specifically prevents recurrence of this failure: An annual backup is approved despite a fifteen-minute maximum data-loss requirement.?
- Monitor backup job success and test restore points each quarter.
- Measure both RPO and RTO during every recovery exercise rather than assuming vendor defaults.
- Rehearse the secondary listener and replication lag under representative load.
- Evaluate zone and region failure scenarios separately during reliability reviews.
Explanation
Correct Answer
B:The preventive control is: Measure both RPO and RTO during every recovery exercise rather than assuming vendor defaults. It targets the earlier cause: Recovery-point frequency was not assessed against the business RPO. Confirm ongoing effectiveness by: Inject a controlled failure and measure last committed recoverable write and time to restore service.
Incorrect Answers
A:The proposed control focuses on: A periodic backup/retention policy was not established for recovery from logical damage. For the design in the question, recurrence comes from: Recovery-point frequency was not assessed against the business RPO. A precise prevention step is: Measure both RPO and RTO during every recovery exercise rather than assuming vendor defaults.
C:This is a reasonable safeguard for a different fault: Applications remain pinned to a lost primary server endpoint after SQL recovery. That different mechanism is: The database regional failover and application endpoint strategy were not designed together. The original incident here instead arises from: Recovery-point frequency was not assessed against the business RPO. The directly relevant safeguard is: Measure both RPO and RTO during every recovery exercise rather than assuming vendor defaults.
D:The proposed control focuses on: Availability zones are failure domains inside one region rather than independent geographic sites. For the design in the question, recurrence comes from: Recovery-point frequency was not assessed against the business RPO. A precise prevention step is: Measure both RPO and RTO during every recovery exercise rather than assuming vendor defaults.
Question 565
A solution architect is reviewing a workload: An application uses App Service and needs a recoverable deployment/version and database backup plan rather than relying on scale-out instances. The observed incident is: A bad deployment corrupts site state and all scale-out replicas exhibit the same defect. Which architecture choice most directly removes the identified weakness?
- Design supported operational backup for Azure Blobs with versioning, soft delete and point-in-time restore prerequisites as applicable.
- Design Azure Backup protection for Azure Files or supported share snapshots with required retention policy.
- Use Azure SQL point-in-time restore from automated backups to a distinct recovery database.
- Design App Service backup or deployment versioning and compatible database backup protection where supported.
Explanation
Correct Answer
D:This option addresses the actual design defect: Instance redundancy cannot replace application and database backup/version recovery. The correction is: Design App Service backup or deployment versioning and compatible database backup protection where supported. Confirm the outcome with: Restore a test application release and associated data to a staging endpoint.
Incorrect Answers
A:That design instead addresses another observed condition: A developer's bulk overwrite cannot be recovered to an earlier object state. Its technical cause is: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. The current workload exhibits: A bad deployment corrupts site state and all scale-out replicas exhibit the same defect. Its targeted remedy is: Design App Service backup or deployment versioning and compatible database backup protection where supported.
B:This choice mitigates an alternative scenario, where: Deleting a folder removes the only copy of its files immediately. The underlying issue there is: No Azure Files share snapshot/backup recovery policy was applied. Here the root issue is: Instance redundancy cannot replace application and database backup/version recovery. Choose the corresponding action: Design App Service backup or deployment versioning and compatible database backup protection where supported.
C:The option belongs to a different failure mechanism: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. That situation exhibits: Engineers fail to recover because all replicas contain the same mistaken data. For the stated case, the remedy is: Design App Service backup or deployment versioning and compatible database backup protection where supported.
Question 566
An architect proposes this change: Design App Service backup or deployment versioning and compatible database backup protection where supported. The workload context is: An application uses App Service and needs a recoverable deployment/version and database backup plan rather than relying on scale-out instances. Which evidence would most directly validate the change?
- Delete a sample blob and execute an eligible point-in-time restore within the configured supported window.
- Restore a test folder version from a historical recovery point to a nonproduction share.
- Restore to the pre-update timestamp and verify rows while production remains unaffected.
- Restore a test application release and associated data to a staging endpoint.
Explanation
Correct Answer
D:This observation directly verifies the intended design: Restore a test application release and associated data to a staging endpoint. The architecture being tested is: Design App Service backup or deployment versioning and compatible database backup protection where supported. The original symptom was: A bad deployment corrupts site state and all scale-out replicas exhibit the same defect.
Incorrect Answers
A:This check validates a different workload: Delete a sample blob and execute an eligible point-in-time restore within the configured supported window. Its associated design is: Design supported operational backup for Azure Blobs with versioning, soft delete and point-in-time restore prerequisites as applicable. The required acceptance test here is: Restore a test application release and associated data to a staging endpoint.
B:That observation pertains to a separate failure: Deleting a folder removes the only copy of its files immediately. Its cause is: No Azure Files share snapshot/backup recovery policy was applied. It does not confirm the result of this design. The direct proof would be: Restore a test application release and associated data to a staging endpoint.
C:The alternative test targets: Use Azure SQL point-in-time restore from automated backups to a distinct recovery database. The scenario's actual proposed remedy is: Design App Service backup or deployment versioning and compatible database backup protection where supported. Verify that one by: Restore a test application release and associated data to a staging endpoint.
Question 567
During architecture troubleshooting, a team reports: A bad deployment corrupts site state and all scale-out replicas exhibit the same defect. Context: An application uses App Service and needs a recoverable deployment/version and database backup plan rather than relying on scale-out instances. Which underlying design mistake explains the observed behavior most precisely?
- Readable replicas reproduce logical changes and are not substitutes for independent historic backups.
- Object-level restore prerequisites such as change feed/versioning/retention were not enabled.
- No Azure Files share snapshot/backup recovery policy was applied.
- Instance redundancy cannot replace application and database backup/version recovery.
Explanation
Correct Answer
D:The incident is explained by: Instance redundancy cannot replace application and database backup/version recovery. The reported symptom is: A bad deployment corrupts site state and all scale-out replicas exhibit the same defect. The corresponding design fix is: Design App Service backup or deployment versioning and compatible database backup protection where supported.
Incorrect Answers
A:This cause would explain a different symptom: Engineers fail to recover because all replicas contain the same mistaken data. The mechanism for that event is: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. Here the stated symptom is: A bad deployment corrupts site state and all scale-out replicas exhibit the same defect. Its cause is: Instance redundancy cannot replace application and database backup/version recovery.
B:The proposed diagnosis fits another scenario: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. It would typically be reflected by: A developer's bulk overwrite cannot be recovered to an earlier object state. The current evidence instead supports: Instance redundancy cannot replace application and database backup/version recovery.
C:The alternative weakness is: No Azure Files share snapshot/backup recovery policy was applied. Its associated failure is: Deleting a folder removes the only copy of its files immediately. Neither explains the present observation: A bad deployment corrupts site state and all scale-out replicas exhibit the same defect. The direct cause here is: Instance redundancy cannot replace application and database backup/version recovery.
Question 568
The design change is: Design App Service backup or deployment versioning and compatible database backup protection where supported. The original failure was: A bad deployment corrupts site state and all scale-out replicas exhibit the same defect. Which ongoing control best prevents recurrence of the same root cause?
- Audit file-share backup health and retention after storage account migrations.
- Run periodic point-in-time drills with realistic accidental update scenarios.
- Audit backup policy and eligible storage account features after account configuration changes.
- Retain deployment artifacts and validate data restore consistency across app and database tiers.
Explanation
Correct Answer
D:The preventive control is: Retain deployment artifacts and validate data restore consistency across app and database tiers. It targets the earlier cause: Instance redundancy cannot replace application and database backup/version recovery. Confirm ongoing effectiveness by: Restore a test application release and associated data to a staging endpoint.
Incorrect Answers
A:That safeguard manages another risk: No Azure Files share snapshot/backup recovery policy was applied. Its scenario is: Deleting a folder removes the only copy of its files immediately. The present recurring risk is: Instance redundancy cannot replace application and database backup/version recovery. The proper ongoing control is: Retain deployment artifacts and validate data restore consistency across app and database tiers.
B:This is a reasonable safeguard for a different fault: Engineers fail to recover because all replicas contain the same mistaken data. That different mechanism is: Readable replicas reproduce logical changes and are not substitutes for independent historic backups. The original incident here instead arises from: Instance redundancy cannot replace application and database backup/version recovery. The directly relevant safeguard is: Retain deployment artifacts and validate data restore consistency across app and database tiers.
C:The proposed control focuses on: Object-level restore prerequisites such as change feed/versioning/retention were not enabled. For the design in the question, recurrence comes from: Instance redundancy cannot replace application and database backup/version recovery. A precise prevention step is: Retain deployment artifacts and validate data restore consistency across app and database tiers.
Question 569
A design workshop has this requirement: A VM operator wants a quick consistent-time copy of an Azure managed disk before a risky operating system patch. Operators currently observe: A failed patch cannot be undone because there is no independent disk recovery point. Select the ONE design remedy that best addresses the root cause.
- Design Azure Backup protection for Azure Files or supported share snapshots with required retention policy.
- Create an eligible managed disk snapshot and verify its supported incremental or point-in-time semantics.
- Use Azure Backup with an appropriate supported application-consistent backup mechanism for the guest workload.
- Define application-aware recovery orchestration and compatible backup/replication checkpoints across dependent tiers.
Explanation
Correct Answer
B:The targeted implementation is: Create an eligible managed disk snapshot and verify its supported incremental or point-in-time semantics. The problem is not generic resource availability: No premaintenance disk snapshot or supported backup point was taken. Verify the result by: Create a new disk from the snapshot and boot a disposable test VM with the expected data.
Incorrect Answers
A:This choice mitigates an alternative scenario, where: Deleting a folder removes the only copy of its files immediately. The underlying issue there is: No Azure Files share snapshot/backup recovery policy was applied. Here the root issue is: No premaintenance disk snapshot or supported backup point was taken. Choose the corresponding action: Create an eligible managed disk snapshot and verify its supported incremental or point-in-time semantics.
C:That design instead addresses another observed condition: A recovered SQL-backed workload has corrupted transaction state after crash-only snapshots. Its technical cause is: The backup strategy ignored application-level consistency prerequisites. The current workload exhibits: A failed patch cannot be undone because there is no independent disk recovery point. Its targeted remedy is: Create an eligible managed disk snapshot and verify its supported incremental or point-in-time semantics.
D:This choice mitigates an alternative scenario, where: VM recovery succeeds but dependent databases reflect inconsistent transaction timestamps. The underlying issue there is: Recovery plans were created per resource without application-level consistency and dependency order. Here the root issue is: No premaintenance disk snapshot or supported backup point was taken. Choose the corresponding action: Create an eligible managed disk snapshot and verify its supported incremental or point-in-time semantics.
Question 570
The planned architecture is: Create an eligible managed disk snapshot and verify its supported incremental or point-in-time semantics. Workload context: A VM operator wants a quick consistent-time copy of an Azure managed disk before a risky operating system patch. Which acceptance test demonstrates that the required behavior works?
- Create a new disk from the snapshot and boot a disposable test VM with the expected data.
- Restore all tiers to a tested coordinated recovery scenario and validate business transactions.
- Restore a backup point and validate application transaction state rather than only VM boot.
- Restore a test folder version from a historical recovery point to a nonproduction share.
Explanation
Correct Answer
A:The acceptance test is specific: Create a new disk from the snapshot and boot a disposable test VM with the expected data. Its purpose is to establish that the proposed architecture works: Create an eligible managed disk snapshot and verify its supported incremental or point-in-time semantics.
Incorrect Answers
B:The alternative test targets: Define application-aware recovery orchestration and compatible backup/replication checkpoints across dependent tiers. The scenario's actual proposed remedy is: Create an eligible managed disk snapshot and verify its supported incremental or point-in-time semantics. Verify that one by: Create a new disk from the snapshot and boot a disposable test VM with the expected data.
C:This check validates a different workload: Restore a backup point and validate application transaction state rather than only VM boot. Its associated design is: Use Azure Backup with an appropriate supported application-consistent backup mechanism for the guest workload. The required acceptance test here is: Create a new disk from the snapshot and boot a disposable test VM with the expected data.
D:That observation pertains to a separate failure: Deleting a folder removes the only copy of its files immediately. Its cause is: No Azure Files share snapshot/backup recovery policy was applied. It does not confirm the result of this design. The direct proof would be: Create a new disk from the snapshot and boot a disposable test VM with the expected data.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests