Question 590
An architect proposes this change: Define application-aware recovery orchestration and compatible backup/replication checkpoints across dependent tiers. The workload context is: A cloud architect must combine database, compute and storage backups so dependent systems can restart at a mutually consistent recovery point. Which evidence would most directly validate the change?
- Restore all tiers to a tested coordinated recovery scenario and validate business transactions.
- Restore a backup point and validate application transaction state rather than only VM boot.
- Restore a nonproduction VM from a selected restore point and verify critical application data.
- Create a new disk from the snapshot and boot a disposable test VM with the expected data.
Explanation
Correct Answer
A:This observation directly verifies the intended design: Restore all tiers to a tested coordinated recovery scenario and validate business transactions. The architecture being tested is: Define application-aware recovery orchestration and compatible backup/replication checkpoints across dependent tiers. The original symptom was: VM recovery succeeds but dependent databases reflect inconsistent transaction timestamps.
Incorrect Answers
B:That observation pertains to a separate failure: A recovered SQL-backed workload has corrupted transaction state after crash-only snapshots. Its cause is: The backup strategy ignored application-level consistency prerequisites. It does not confirm the result of this design. The direct proof would be: Restore all tiers to a tested coordinated recovery scenario and validate business transactions.
C:The alternative test targets: Use Azure Backup for VM recovery points through an appropriate Recovery Services vault and backup policy. The scenario's actual proposed remedy is: Define application-aware recovery orchestration and compatible backup/replication checkpoints across dependent tiers. Verify that one by: Restore all tiers to a tested coordinated recovery scenario and validate business transactions.
D:This check validates a different workload: Create a new disk from the snapshot and boot a disposable test VM with the expected data. Its associated design is: Create an eligible managed disk snapshot and verify its supported incremental or point-in-time semantics. The required acceptance test here is: Restore all tiers to a tested coordinated recovery scenario and validate business transactions.
Question 591
During architecture troubleshooting, a team reports: VM recovery succeeds but dependent databases reflect inconsistent transaction timestamps. Context: A cloud architect must combine database, compute and storage backups so dependent systems can restart at a mutually consistent recovery point. Which underlying design mistake explains the observed behavior most precisely?
- A periodic backup/retention policy was not established for recovery from logical damage.
- The backup strategy ignored application-level consistency prerequisites.
- Recovery plans were created per resource without application-level consistency and dependency order.
- No premaintenance disk snapshot or supported backup point was taken.
Explanation
Correct Answer
C:The recorded behavior follows from: Recovery plans were created per resource without application-level consistency and dependency order. The appropriate mitigation would be: Define application-aware recovery orchestration and compatible backup/replication checkpoints across dependent tiers. Verify with: Restore all tiers to a tested coordinated recovery scenario and validate business transactions.
Incorrect Answers
A:This cause would explain a different symptom: Operations rely on one copied VM image that cannot return to an earlier date. The mechanism for that event is: A periodic backup/retention policy was not established for recovery from logical damage. Here the stated symptom is: VM recovery succeeds but dependent databases reflect inconsistent transaction timestamps. Its cause is: Recovery plans were created per resource without application-level consistency and dependency order.
B:The proposed diagnosis fits another scenario: The backup strategy ignored application-level consistency prerequisites. It would typically be reflected by: A recovered SQL-backed workload has corrupted transaction state after crash-only snapshots. The current evidence instead supports: Recovery plans were created per resource without application-level consistency and dependency order.
D:This cause would explain a different symptom: A failed patch cannot be undone because there is no independent disk recovery point. The mechanism for that event is: No premaintenance disk snapshot or supported backup point was taken. Here the stated symptom is: VM recovery succeeds but dependent databases reflect inconsistent transaction timestamps. Its cause is: Recovery plans were created per resource without application-level consistency and dependency order.
Question 592
The design change is: Define application-aware recovery orchestration and compatible backup/replication checkpoints across dependent tiers. The original failure was: VM recovery succeeds but dependent databases reflect inconsistent transaction timestamps. Which ongoing control best prevents recurrence of the same root cause?
- Rehearse recoveries including database consistency checks after guest-agent upgrades.
- Document snapshot lifecycle and avoid treating snapshots alone as full regional DR.
- Monitor backup job success and test restore points each quarter.
- Run integrated restore drills covering identity, DNS and data consistency across tiers.
Explanation
Correct Answer
D:The preventive control is: Run integrated restore drills covering identity, DNS and data consistency across tiers. It targets the earlier cause: Recovery plans were created per resource without application-level consistency and dependency order. Confirm ongoing effectiveness by: Restore all tiers to a tested coordinated recovery scenario and validate business transactions.
Incorrect Answers
A:That safeguard manages another risk: The backup strategy ignored application-level consistency prerequisites. Its scenario is: A recovered SQL-backed workload has corrupted transaction state after crash-only snapshots. The present recurring risk is: Recovery plans were created per resource without application-level consistency and dependency order. The proper ongoing control is: Run integrated restore drills covering identity, DNS and data consistency across tiers.
B:This is a reasonable safeguard for a different fault: A failed patch cannot be undone because there is no independent disk recovery point. That different mechanism is: No premaintenance disk snapshot or supported backup point was taken. The original incident here instead arises from: Recovery plans were created per resource without application-level consistency and dependency order. The directly relevant safeguard is: Run integrated restore drills covering identity, DNS and data consistency across tiers.
C:The proposed control focuses on: A periodic backup/retention policy was not established for recovery from logical damage. For the design in the question, recurrence comes from: Recovery plans were created per resource without application-level consistency and dependency order. A precise prevention step is: Run integrated restore drills covering identity, DNS and data consistency across tiers.
Question 593
A design workshop has this requirement: A stateless web platform must continue serving traffic if one Azure data-center availability zone fails. Operators currently observe: All stateless app instances are placed in one zone and fail together. Select the ONE design remedy that best addresses the root cause.
- Enable the supported zone-redundant configuration for the Azure SQL tier and region.
- Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer.
- Use App Service zone redundancy with a supporting plan and region where available, then configure sufficient instances.
- Enable supported zone-redundant high availability with managed standby and compatible compute/region selection.
Explanation
Correct Answer
B:The targeted implementation is: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer. The problem is not generic resource availability: The compute deployment lacks redundant zonal placement and health-based load balancing. Verify the result by: Fail one zone in a resilience test and confirm probes keep routing to healthy instances.
Incorrect Answers
A:This choice mitigates an alternative scenario, where: Single-zone database deployment becomes unavailable during a zonal outage. The underlying issue there is: Zone redundancy was not enabled for an eligible database deployment. Here the root issue is: The compute deployment lacks redundant zonal placement and health-based load balancing. Choose the corresponding action: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer.
C:That design instead addresses another observed condition: Both instances are unavailable when their single shared zone has an incident. Its technical cause is: Scale-out count was confused with physical availability-zone placement. The current workload exhibits: All stateless app instances are placed in one zone and fail together. Its targeted remedy is: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer.
D:This choice mitigates an alternative scenario, where: The server stays unavailable while a single-zone host is repaired. The underlying issue there is: No eligible zone-redundant PostgreSQL standby was provisioned. Here the root issue is: The compute deployment lacks redundant zonal placement and health-based load balancing. Choose the corresponding action: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer.
Question 594
The planned architecture is: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer. Workload context: A stateless web platform must continue serving traffic if one Azure data-center availability zone fails. Which acceptance test demonstrates that the required behavior works?
- Fail one zone in a resilience test and confirm probes keep routing to healthy instances.
- Verify distribution across zones and sustained service under one-zone failure test conditions.
- Validate zone redundancy setting and failover behavior under the service's supported test methods.
- Inspect HA role, observe reconnect after a controlled test and validate data consistency.
Explanation
Correct Answer
A:The acceptance test is specific: Fail one zone in a resilience test and confirm probes keep routing to healthy instances. Its purpose is to establish that the proposed architecture works: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer.
Incorrect Answers
B:The alternative test targets: Use App Service zone redundancy with a supporting plan and region where available, then configure sufficient instances. The scenario's actual proposed remedy is: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer. Verify that one by: Fail one zone in a resilience test and confirm probes keep routing to healthy instances.
C:This check validates a different workload: Validate zone redundancy setting and failover behavior under the service's supported test methods. Its associated design is: Enable the supported zone-redundant configuration for the Azure SQL tier and region. The required acceptance test here is: Fail one zone in a resilience test and confirm probes keep routing to healthy instances.
D:That observation pertains to a separate failure: The server stays unavailable while a single-zone host is repaired. Its cause is: No eligible zone-redundant PostgreSQL standby was provisioned. It does not confirm the result of this design. The direct proof would be: Fail one zone in a resilience test and confirm probes keep routing to healthy instances.
Question 595
The customer states: A stateless web platform must continue serving traffic if one Azure data-center availability zone fails. An incident reveals: All stateless app instances are placed in one zone and fail together. What cause best accounts for this evidence?
- No eligible zone-redundant PostgreSQL standby was provisioned.
- Zone redundancy was not enabled for an eligible database deployment.
- Scale-out count was confused with physical availability-zone placement.
- The compute deployment lacks redundant zonal placement and health-based load balancing.
Explanation
Correct Answer
D:This is the failure mechanism rather than an incidental symptom: The compute deployment lacks redundant zonal placement and health-based load balancing. It accounts for: All stateless app instances are placed in one zone and fail together. The architectural repair is: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer.
Incorrect Answers
A:The proposed diagnosis fits another scenario: No eligible zone-redundant PostgreSQL standby was provisioned. It would typically be reflected by: The server stays unavailable while a single-zone host is repaired. The current evidence instead supports: The compute deployment lacks redundant zonal placement and health-based load balancing.
B:The alternative weakness is: Zone redundancy was not enabled for an eligible database deployment. Its associated failure is: Single-zone database deployment becomes unavailable during a zonal outage. Neither explains the present observation: All stateless app instances are placed in one zone and fail together. The direct cause here is: The compute deployment lacks redundant zonal placement and health-based load balancing.
C:This cause would explain a different symptom: Both instances are unavailable when their single shared zone has an incident. The mechanism for that event is: Scale-out count was confused with physical availability-zone placement. Here the stated symptom is: All stateless app instances are placed in one zone and fail together. Its cause is: The compute deployment lacks redundant zonal placement and health-based load balancing.
Question 596
Workload context: A stateless web platform must continue serving traffic if one Azure data-center availability zone fails. The implemented remedy is: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer. Which ongoing practice most specifically prevents recurrence of this failure: All stateless app instances are placed in one zone and fail together.?
- Monitor standby health and application retries after engine maintenance.
- Monitor plan eligibility and zonal capacity when changing app service plans.
- Review the tier and region's zone support before database scaling or migration.
- Monitor zonal capacity and load balancer health probes during scale changes.
Explanation
Correct Answer
D:This is an ongoing protection specific to the fault: Monitor zonal capacity and load balancer health probes during scale changes. The recurrence risk is: The compute deployment lacks redundant zonal placement and health-based load balancing. It should be checked using: Fail one zone in a resilience test and confirm probes keep routing to healthy instances.
Incorrect Answers
A:This is a reasonable safeguard for a different fault: The server stays unavailable while a single-zone host is repaired. That different mechanism is: No eligible zone-redundant PostgreSQL standby was provisioned. The original incident here instead arises from: The compute deployment lacks redundant zonal placement and health-based load balancing. The directly relevant safeguard is: Monitor zonal capacity and load balancer health probes during scale changes.
B:The proposed control focuses on: Scale-out count was confused with physical availability-zone placement. For the design in the question, recurrence comes from: The compute deployment lacks redundant zonal placement and health-based load balancing. A precise prevention step is: Monitor zonal capacity and load balancer health probes during scale changes.
C:That safeguard manages another risk: Zone redundancy was not enabled for an eligible database deployment. Its scenario is: Single-zone database deployment becomes unavailable during a zonal outage. The present recurring risk is: The compute deployment lacks redundant zonal placement and health-based load balancing. The proper ongoing control is: Monitor zonal capacity and load balancer health probes during scale changes.
Question 597
A solution architect is reviewing a workload: A stateful application runs across two Azure VMs in a region without support for availability zones and needs separation from host update domains. The observed incident is: Both VMs restart for one planned host-maintenance event. Which architecture choice most directly removes the identified weakness?
- Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity.
- Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR.
- Deploy an availability set with suitable fault and update domains where availability zones aren't used.
- Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer.
Explanation
Correct Answer
C:The evidence (Both VMs restart for one planned host-maintenance event.) identifies the following cause: The VMs were not distributed across suitable update/fault domains. The design that removes it is: Deploy an availability set with suitable fault and update domains where availability zones aren't used. The acceptance check is: Inspect VM fault/update domain placement and test the expected maintenance/failure behavior.
Incorrect Answers
A:The option belongs to a different failure mechanism: Workload scheduling and node-pool placement lack zonal diversity. That situation exhibits: Every application replica is scheduled onto nodes in one availability zone. For the stated case, the remedy is: Deploy an availability set with suitable fault and update domains where availability zones aren't used.
B:That design instead addresses another observed condition: Routine host outages cause long interruptions while region recovery replication remains healthy. Its technical cause is: Disaster recovery orchestration does not substitute for continuous local high availability. The current workload exhibits: Both VMs restart for one planned host-maintenance event. Its targeted remedy is: Deploy an availability set with suitable fault and update domains where availability zones aren't used.
D:The option belongs to a different failure mechanism: The compute deployment lacks redundant zonal placement and health-based load balancing. That situation exhibits: All stateless app instances are placed in one zone and fail together. For the stated case, the remedy is: Deploy an availability set with suitable fault and update domains where availability zones aren't used.
Question 598
An architect proposes this change: Deploy an availability set with suitable fault and update domains where availability zones aren't used. The workload context is: A stateful application runs across two Azure VMs in a region without support for availability zones and needs separation from host update domains. Which evidence would most directly validate the change?
- Fail one zone in a resilience test and confirm probes keep routing to healthy instances.
- Drain one zonal node pool and confirm healthy replicas remain available from other zones.
- Simulate a host failure and verify service continues without manual recovery orchestration.
- Inspect VM fault/update domain placement and test the expected maintenance/failure behavior.
Explanation
Correct Answer
D:The decisive evidence is: Inspect VM fault/update domain placement and test the expected maintenance/failure behavior. This measures the mechanism of the planned change, not an unrelated Azure service: Deploy an availability set with suitable fault and update domains where availability zones aren't used.
Incorrect Answers
A:The alternative test targets: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer. The scenario's actual proposed remedy is: Deploy an availability set with suitable fault and update domains where availability zones aren't used. Verify that one by: Inspect VM fault/update domain placement and test the expected maintenance/failure behavior.
B:This check validates a different workload: Drain one zonal node pool and confirm healthy replicas remain available from other zones. Its associated design is: Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity. The required acceptance test here is: Inspect VM fault/update domain placement and test the expected maintenance/failure behavior.
C:That observation pertains to a separate failure: Routine host outages cause long interruptions while region recovery replication remains healthy. Its cause is: Disaster recovery orchestration does not substitute for continuous local high availability. It does not confirm the result of this design. The direct proof would be: Inspect VM fault/update domain placement and test the expected maintenance/failure behavior.
Question 599
During architecture troubleshooting, a team reports: Both VMs restart for one planned host-maintenance event. Context: A stateful application runs across two Azure VMs in a region without support for availability zones and needs separation from host update domains. Which underlying design mistake explains the observed behavior most precisely?
- The compute deployment lacks redundant zonal placement and health-based load balancing.
- Workload scheduling and node-pool placement lack zonal diversity.
- The VMs were not distributed across suitable update/fault domains.
- Disaster recovery orchestration does not substitute for continuous local high availability.
Explanation
Correct Answer
C:This is the failure mechanism rather than an incidental symptom: The VMs were not distributed across suitable update/fault domains. It accounts for: Both VMs restart for one planned host-maintenance event. The architectural repair is: Deploy an availability set with suitable fault and update domains where availability zones aren't used.
Incorrect Answers
A:The alternative weakness is: The compute deployment lacks redundant zonal placement and health-based load balancing. Its associated failure is: All stateless app instances are placed in one zone and fail together. Neither explains the present observation: Both VMs restart for one planned host-maintenance event. The direct cause here is: The VMs were not distributed across suitable update/fault domains.
B:This cause would explain a different symptom: Every application replica is scheduled onto nodes in one availability zone. The mechanism for that event is: Workload scheduling and node-pool placement lack zonal diversity. Here the stated symptom is: Both VMs restart for one planned host-maintenance event. Its cause is: The VMs were not distributed across suitable update/fault domains.
D:The alternative weakness is: Disaster recovery orchestration does not substitute for continuous local high availability. Its associated failure is: Routine host outages cause long interruptions while region recovery replication remains healthy. Neither explains the present observation: Both VMs restart for one planned host-maintenance event. The direct cause here is: The VMs were not distributed across suitable update/fault domains.
Question 600
Consider this Azure design: A stateful application runs across two Azure VMs in a region without support for availability zones and needs separation from host update domains. To address the recurring incident (Both VMs restart for one planned host-maintenance event.), select THREE complementary actions: the direct design remedy, a direct acceptance test, and one ongoing protective control. Do not count a remedy for another workload as equivalent.
- Inspect VM fault/update domain placement and test the expected maintenance/failure behavior.
- Deploy an availability set with suitable fault and update domains where availability zones aren't used.
- Simulate a host failure and verify service continues without manual recovery orchestration.
- Review placement constraints when VM SKUs or region capabilities change.
- Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer.
- Audit topology-spread rules and capacity reservations after node pool upgrades.
Explanation
Correct Answers
A:The decisive evidence is: Inspect VM fault/update domain placement and test the expected maintenance/failure behavior. This measures the mechanism of the planned change, not an unrelated Azure service: Deploy an availability set with suitable fault and update domains where availability zones aren't used.
B:This option addresses the actual design defect: The VMs were not distributed across suitable update/fault domains. The correction is: Deploy an availability set with suitable fault and update domains where availability zones aren't used. Confirm the outcome with: Inspect VM fault/update domain placement and test the expected maintenance/failure behavior.
D:The key follow-up control is: Review placement constraints when VM SKUs or region capabilities change. It avoids recurrence of the scenario in which: Both VMs restart for one planned host-maintenance event. It addresses: The VMs were not distributed across suitable update/fault domains.
Incorrect Answers
C:That observation pertains to a separate failure: Routine host outages cause long interruptions while region recovery replication remains healthy. Its cause is: Disaster recovery orchestration does not substitute for continuous local high availability. It does not confirm the result of this design. The direct proof would be: Inspect VM fault/update domain placement and test the expected maintenance/failure behavior.
E:That design instead addresses another observed condition: All stateless app instances are placed in one zone and fail together. Its technical cause is: The compute deployment lacks redundant zonal placement and health-based load balancing. The current workload exhibits: Both VMs restart for one planned host-maintenance event. Its targeted remedy is: Deploy an availability set with suitable fault and update domains where availability zones aren't used.
F:This is a reasonable safeguard for a different fault: Every application replica is scheduled onto nodes in one availability zone. That different mechanism is: Workload scheduling and node-pool placement lack zonal diversity. The original incident here instead arises from: The VMs were not distributed across suitable update/fault domains. The directly relevant safeguard is: Review placement constraints when VM SKUs or region capabilities change.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests