Question 610
The planned architecture is: Use Azure Traffic Manager priority routing with appropriate endpoint health probes and DNS TTL expectations. Workload context: A service uses non-HTTP TCP endpoints and needs DNS-based priority failover between independent regional endpoints. Which acceptance test demonstrates that the required behavior works?
- Deactivate primary DNS/routing and verify secondary web login and Key Vault configuration still function.
- Disable one regional origin and verify global clients are routed to a healthy origin over HTTPS.
- Fail the primary endpoint and observe DNS resolution transition to the secondary according to TTL.
- Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
Explanation
Correct Answer
C:The acceptance test is specific: Fail the primary endpoint and observe DNS resolution transition to the secondary according to TTL. Its purpose is to establish that the proposed architecture works: Use Azure Traffic Manager priority routing with appropriate endpoint health probes and DNS TTL expectations.
Incorrect Answers
A:The alternative test targets: Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region. The scenario's actual proposed remedy is: Use Azure Traffic Manager priority routing with appropriate endpoint health probes and DNS TTL expectations. Verify that one by: Fail the primary endpoint and observe DNS resolution transition to the secondary according to TTL.
B:This check validates a different workload: Disable one regional origin and verify global clients are routed to a healthy origin over HTTPS. Its associated design is: Use Azure Front Door with health-based global endpoint routing and suitable backend origin groups. The required acceptance test here is: Fail the primary endpoint and observe DNS resolution transition to the secondary according to TTL.
D:The alternative test targets: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication. The scenario's actual proposed remedy is: Use Azure Traffic Manager priority routing with appropriate endpoint health probes and DNS TTL expectations. Verify that one by: Fail the primary endpoint and observe DNS resolution transition to the secondary according to TTL.
Question 611
The customer states: A service uses non-HTTP TCP endpoints and needs DNS-based priority failover between independent regional endpoints. An incident reveals: Clients resolve the former primary indefinitely despite a healthy secondary endpoint. What cause best accounts for this evidence?
- Client connection configuration bypasses the service's failover-group listener.
- Regional failover planning omitted shared identity/configuration dependencies and allowed network paths.
- DNS-based endpoint health/priority policy was not configured to handle region loss.
- There is no global HTTP edge entry point with origin health-based routing.
Explanation
Correct Answer
C:This is the failure mechanism rather than an incidental symptom: DNS-based endpoint health/priority policy was not configured to handle region loss. It accounts for: Clients resolve the former primary indefinitely despite a healthy secondary endpoint. The architectural repair is: Use Azure Traffic Manager priority routing with appropriate endpoint health probes and DNS TTL expectations.
Incorrect Answers
A:The alternative weakness is: Client connection configuration bypasses the service's failover-group listener. Its associated failure is: Users remain connected to a decommissioned fixed-region SQL server hostname. Neither explains the present observation: Clients resolve the former primary indefinitely despite a healthy secondary endpoint. The direct cause here is: DNS-based endpoint health/priority policy was not configured to handle region loss.
B:This cause would explain a different symptom: The secondary web app serves static pages but authentication and configuration retrieval fail. The mechanism for that event is: Regional failover planning omitted shared identity/configuration dependencies and allowed network paths. Here the stated symptom is: Clients resolve the former primary indefinitely despite a healthy secondary endpoint. Its cause is: DNS-based endpoint health/priority policy was not configured to handle region loss.
D:The alternative weakness is: There is no global HTTP edge entry point with origin health-based routing. Its associated failure is: Regional failure leaves global browsers stuck on the dead web endpoint. Neither explains the present observation: Clients resolve the former primary indefinitely despite a healthy secondary endpoint. The direct cause here is: DNS-based endpoint health/priority policy was not configured to handle region loss.
Question 612
Workload context: A service uses non-HTTP TCP endpoints and needs DNS-based priority failover between independent regional endpoints. The implemented remedy is: Use Azure Traffic Manager priority routing with appropriate endpoint health probes and DNS TTL expectations. Which ongoing practice most specifically prevents recurrence of this failure: Clients resolve the former primary indefinitely despite a healthy secondary endpoint.?
- Run complete synthetic login and settings tests against each region during continuity reviews.
- Review Front Door health probes and origin priority before application releases.
- Monitor replication lag and exercise listener failover after major releases.
- Test DNS caching and probe behavior for client resolvers during drills.
Explanation
Correct Answer
D:The key follow-up control is: Test DNS caching and probe behavior for client resolvers during drills. It avoids recurrence of the scenario in which: Clients resolve the former primary indefinitely despite a healthy secondary endpoint. It addresses: DNS-based endpoint health/priority policy was not configured to handle region loss.
Incorrect Answers
A:The proposed control focuses on: Regional failover planning omitted shared identity/configuration dependencies and allowed network paths. For the design in the question, recurrence comes from: DNS-based endpoint health/priority policy was not configured to handle region loss. A precise prevention step is: Test DNS caching and probe behavior for client resolvers during drills.
B:That safeguard manages another risk: There is no global HTTP edge entry point with origin health-based routing. Its scenario is: Regional failure leaves global browsers stuck on the dead web endpoint. The present recurring risk is: DNS-based endpoint health/priority policy was not configured to handle region loss. The proper ongoing control is: Test DNS caching and probe behavior for client resolvers during drills.
C:This is a reasonable safeguard for a different fault: Users remain connected to a decommissioned fixed-region SQL server hostname. That different mechanism is: Client connection configuration bypasses the service's failover-group listener. The original incident here instead arises from: DNS-based endpoint health/priority policy was not configured to handle region loss. The directly relevant safeguard is: Test DNS caching and probe behavior for client resolvers during drills.
Question 613
A solution architect is reviewing a workload: A production Azure SQL database must tolerate an availability zone outage inside a supported region without a cross-region manual recovery. The observed incident is: Single-zone database deployment becomes unavailable during a zonal outage. Which architecture choice most directly removes the identified weakness?
- Enable and design around Service Bus Premium availability zone resilience with redundant consumers.
- Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer.
- Enable the supported zone-redundant configuration for the Azure SQL tier and region.
- Enable supported zone-redundant high availability with managed standby and compatible compute/region selection.
Explanation
Correct Answer
C:The targeted implementation is: Enable the supported zone-redundant configuration for the Azure SQL tier and region. The problem is not generic resource availability: Zone redundancy was not enabled for an eligible database deployment. Verify the result by: Validate zone redundancy setting and failover behavior under the service's supported test methods.
Incorrect Answers
A:That design instead addresses another observed condition: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Its technical cause is: The messaging service tier/configuration does not meet zonal resilience requirements. The current workload exhibits: Single-zone database deployment becomes unavailable during a zonal outage. Its targeted remedy is: Enable the supported zone-redundant configuration for the Azure SQL tier and region.
B:This choice mitigates an alternative scenario, where: All stateless app instances are placed in one zone and fail together. The underlying issue there is: The compute deployment lacks redundant zonal placement and health-based load balancing. Here the root issue is: Zone redundancy was not enabled for an eligible database deployment. Choose the corresponding action: Enable the supported zone-redundant configuration for the Azure SQL tier and region.
D:That design instead addresses another observed condition: The server stays unavailable while a single-zone host is repaired. Its technical cause is: No eligible zone-redundant PostgreSQL standby was provisioned. The current workload exhibits: Single-zone database deployment becomes unavailable during a zonal outage. Its targeted remedy is: Enable the supported zone-redundant configuration for the Azure SQL tier and region.
Question 614
An architect proposes this change: Enable the supported zone-redundant configuration for the Azure SQL tier and region. The workload context is: A production Azure SQL database must tolerate an availability zone outage inside a supported region without a cross-region manual recovery. Which evidence would most directly validate the change?
- Fail one zone in a resilience test and confirm probes keep routing to healthy instances.
- Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA.
- Validate zone redundancy setting and failover behavior under the service's supported test methods.
- Inspect HA role, observe reconnect after a controlled test and validate data consistency.
Explanation
Correct Answer
C:The decisive evidence is: Validate zone redundancy setting and failover behavior under the service's supported test methods. This measures the mechanism of the planned change, not an unrelated Azure service: Enable the supported zone-redundant configuration for the Azure SQL tier and region.
Incorrect Answers
A:This check validates a different workload: Fail one zone in a resilience test and confirm probes keep routing to healthy instances. Its associated design is: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer. The required acceptance test here is: Validate zone redundancy setting and failover behavior under the service's supported test methods.
B:That observation pertains to a separate failure: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Its cause is: The messaging service tier/configuration does not meet zonal resilience requirements. It does not confirm the result of this design. The direct proof would be: Validate zone redundancy setting and failover behavior under the service's supported test methods.
D:This check validates a different workload: Inspect HA role, observe reconnect after a controlled test and validate data consistency. Its associated design is: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. The required acceptance test here is: Validate zone redundancy setting and failover behavior under the service's supported test methods.
Question 615
During architecture troubleshooting, a team reports: Single-zone database deployment becomes unavailable during a zonal outage. Context: A production Azure SQL database must tolerate an availability zone outage inside a supported region without a cross-region manual recovery. Which underlying design mistake explains the observed behavior most precisely?
- Zone redundancy was not enabled for an eligible database deployment.
- The messaging service tier/configuration does not meet zonal resilience requirements.
- No eligible zone-redundant PostgreSQL standby was provisioned.
- The compute deployment lacks redundant zonal placement and health-based load balancing.
Explanation
Correct Answer
A:The incident is explained by: Zone redundancy was not enabled for an eligible database deployment. The reported symptom is: Single-zone database deployment becomes unavailable during a zonal outage. The corresponding design fix is: Enable the supported zone-redundant configuration for the Azure SQL tier and region.
Incorrect Answers
B:The proposed diagnosis fits another scenario: The messaging service tier/configuration does not meet zonal resilience requirements. It would typically be reflected by: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. The current evidence instead supports: Zone redundancy was not enabled for an eligible database deployment.
C:The alternative weakness is: No eligible zone-redundant PostgreSQL standby was provisioned. Its associated failure is: The server stays unavailable while a single-zone host is repaired. Neither explains the present observation: Single-zone database deployment becomes unavailable during a zonal outage. The direct cause here is: Zone redundancy was not enabled for an eligible database deployment.
D:This cause would explain a different symptom: All stateless app instances are placed in one zone and fail together. The mechanism for that event is: The compute deployment lacks redundant zonal placement and health-based load balancing. Here the stated symptom is: Single-zone database deployment becomes unavailable during a zonal outage. Its cause is: Zone redundancy was not enabled for an eligible database deployment.
Question 616
The design change is: Enable the supported zone-redundant configuration for the Azure SQL tier and region. The original failure was: Single-zone database deployment becomes unavailable during a zonal outage. Which ongoing control best prevents recurrence of the same root cause?
- Monitor zonal capacity and load balancer health probes during scale changes.
- Monitor standby health and application retries after engine maintenance.
- Monitor queue depths and backend availability after namespace scaling.
- Review the tier and region's zone support before database scaling or migration.
Explanation
Correct Answer
D:The preventive control is: Review the tier and region's zone support before database scaling or migration. It targets the earlier cause: Zone redundancy was not enabled for an eligible database deployment. Confirm ongoing effectiveness by: Validate zone redundancy setting and failover behavior under the service's supported test methods.
Incorrect Answers
A:That safeguard manages another risk: The compute deployment lacks redundant zonal placement and health-based load balancing. Its scenario is: All stateless app instances are placed in one zone and fail together. The present recurring risk is: Zone redundancy was not enabled for an eligible database deployment. The proper ongoing control is: Review the tier and region's zone support before database scaling or migration.
B:This is a reasonable safeguard for a different fault: The server stays unavailable while a single-zone host is repaired. That different mechanism is: No eligible zone-redundant PostgreSQL standby was provisioned. The original incident here instead arises from: Zone redundancy was not enabled for an eligible database deployment. The directly relevant safeguard is: Review the tier and region's zone support before database scaling or migration.
C:The proposed control focuses on: The messaging service tier/configuration does not meet zonal resilience requirements. For the design in the question, recurrence comes from: Zone redundancy was not enabled for an eligible database deployment. A precise prevention step is: Review the tier and region's zone support before database scaling or migration.
Question 617
A design workshop has this requirement: A global Azure SQL application needs regional failover while preserving a stable write endpoint and offering read-only secondary connections. Operators currently observe: Users remain connected to a decommissioned fixed-region SQL server hostname. Select the ONE design remedy that best addresses the root cause.
- Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment.
- Use Azure Traffic Manager priority routing with appropriate endpoint health probes and DNS TTL expectations.
- Use Azure Front Door with health-based global endpoint routing and suitable backend origin groups.
- Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication.
Explanation
Correct Answer
D:The evidence (Users remain connected to a decommissioned fixed-region SQL server hostname.) identifies the following cause: Client connection configuration bypasses the service's failover-group listener. The design that removes it is: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication. The acceptance check is: Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
Incorrect Answers
A:This choice mitigates an alternative scenario, where: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. The underlying issue there is: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. Here the root issue is: Client connection configuration bypasses the service's failover-group listener. Choose the corresponding action: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication.
B:The option belongs to a different failure mechanism: DNS-based endpoint health/priority policy was not configured to handle region loss. That situation exhibits: Clients resolve the former primary indefinitely despite a healthy secondary endpoint. For the stated case, the remedy is: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication.
C:That design instead addresses another observed condition: Regional failure leaves global browsers stuck on the dead web endpoint. Its technical cause is: There is no global HTTP edge entry point with origin health-based routing. The current workload exhibits: Users remain connected to a decommissioned fixed-region SQL server hostname. Its targeted remedy is: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication.
Question 618
The planned architecture is: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication. Workload context: A global Azure SQL application needs regional failover while preserving a stable write endpoint and offering read-only secondary connections. Which acceptance test demonstrates that the required behavior works?
- Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
- Fail the primary endpoint and observe DNS resolution transition to the secondary according to TTL.
- Disable one regional origin and verify global clients are routed to a healthy origin over HTTPS.
- Trigger a controlled failover and confirm database clients reconnect and restore successful transactions without manually replacing server IPs.
Explanation
Correct Answer
A:The acceptance test is specific: Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas. Its purpose is to establish that the proposed architecture works: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication.
Incorrect Answers
B:The alternative test targets: Use Azure Traffic Manager priority routing with appropriate endpoint health probes and DNS TTL expectations. The scenario's actual proposed remedy is: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication. Verify that one by: Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
C:This check validates a different workload: Disable one regional origin and verify global clients are routed to a healthy origin over HTTPS. Its associated design is: Use Azure Front Door with health-based global endpoint routing and suitable backend origin groups. The required acceptance test here is: Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
D:That observation pertains to a separate failure: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. Its cause is: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. It does not confirm the result of this design. The direct proof would be: Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
Question 619
The customer states: A global Azure SQL application needs regional failover while preserving a stable write endpoint and offering read-only secondary connections. An incident reveals: Users remain connected to a decommissioned fixed-region SQL server hostname. What cause best accounts for this evidence?
- Client connection configuration bypasses the service's failover-group listener.
- DNS-based endpoint health/priority policy was not configured to handle region loss.
- There is no global HTTP edge entry point with origin health-based routing.
- The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover.
Explanation
Correct Answer
A:This is the failure mechanism rather than an incidental symptom: Client connection configuration bypasses the service's failover-group listener. It accounts for: Users remain connected to a decommissioned fixed-region SQL server hostname. The architectural repair is: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication.
Incorrect Answers
B:The alternative weakness is: DNS-based endpoint health/priority policy was not configured to handle region loss. Its associated failure is: Clients resolve the former primary indefinitely despite a healthy secondary endpoint. Neither explains the present observation: Users remain connected to a decommissioned fixed-region SQL server hostname. The direct cause here is: Client connection configuration bypasses the service's failover-group listener.
C:This cause would explain a different symptom: Regional failure leaves global browsers stuck on the dead web endpoint. The mechanism for that event is: There is no global HTTP edge entry point with origin health-based routing. Here the stated symptom is: Users remain connected to a decommissioned fixed-region SQL server hostname. Its cause is: Client connection configuration bypasses the service's failover-group listener.
D:The proposed diagnosis fits another scenario: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. It would typically be reflected by: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. The current evidence instead supports: Client connection configuration bypasses the service's failover-group listener.
Question 620
Workload context: A global Azure SQL application needs regional failover while preserving a stable write endpoint and offering read-only secondary connections. The implemented remedy is: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication. Which ongoing practice most specifically prevents recurrence of this failure: Users remain connected to a decommissioned fixed-region SQL server hostname.?
- Include client reconnection timing and error-budget recovery checks in planned MySQL high-availability drills.
- Test DNS caching and probe behavior for client resolvers during drills.
- Monitor replication lag and exercise listener failover after major releases.
- Review Front Door health probes and origin priority before application releases.
Explanation
Correct Answer
C:The preventive control is: Monitor replication lag and exercise listener failover after major releases. It targets the earlier cause: Client connection configuration bypasses the service's failover-group listener. Confirm ongoing effectiveness by: Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
Incorrect Answers
A:This is a reasonable safeguard for a different fault: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. That different mechanism is: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. The original incident here instead arises from: Client connection configuration bypasses the service's failover-group listener. The directly relevant safeguard is: Monitor replication lag and exercise listener failover after major releases.
B:The proposed control focuses on: DNS-based endpoint health/priority policy was not configured to handle region loss. For the design in the question, recurrence comes from: Client connection configuration bypasses the service's failover-group listener. A precise prevention step is: Monitor replication lag and exercise listener failover after major releases.
D:This is a reasonable safeguard for a different fault: Regional failure leaves global browsers stuck on the dead web endpoint. That different mechanism is: There is no global HTTP edge entry point with origin health-based routing. The original incident here instead arises from: Client connection configuration bypasses the service's failover-group listener. The directly relevant safeguard is: Monitor replication lag and exercise listener failover after major releases.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests