Question 620
Workload context: A global Azure SQL application needs regional failover while preserving a stable write endpoint and offering read-only secondary connections. The implemented remedy is: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication. Which ongoing practice most specifically prevents recurrence of this failure: Users remain connected to a decommissioned fixed-region SQL server hostname.?
- Include client reconnection timing and error-budget recovery checks in planned MySQL high-availability drills.
- Test DNS caching and probe behavior for client resolvers during drills.
- Monitor replication lag and exercise listener failover after major releases.
- Review Front Door health probes and origin priority before application releases.
Explanation
Correct Answer
C:The preventive control is: Monitor replication lag and exercise listener failover after major releases. It targets the earlier cause: Client connection configuration bypasses the service's failover-group listener. Confirm ongoing effectiveness by: Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
Incorrect Answers
A:This is a reasonable safeguard for a different fault: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. That different mechanism is: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. The original incident here instead arises from: Client connection configuration bypasses the service's failover-group listener. The directly relevant safeguard is: Monitor replication lag and exercise listener failover after major releases.
B:The proposed control focuses on: DNS-based endpoint health/priority policy was not configured to handle region loss. For the design in the question, recurrence comes from: Client connection configuration bypasses the service's failover-group listener. A precise prevention step is: Monitor replication lag and exercise listener failover after major releases.
D:This is a reasonable safeguard for a different fault: Regional failure leaves global browsers stuck on the dead web endpoint. That different mechanism is: There is no global HTTP edge entry point with origin health-based routing. The original incident here instead arises from: Client connection configuration bypasses the service's failover-group listener. The directly relevant safeguard is: Monitor replication lag and exercise listener failover after major releases.
Question 621
A solution architect is reviewing a workload: A product catalog is read and written from two continents and requires low latency plus explicit conflict-handling. The observed incident is: Writes from one continent must synchronously cross the ocean to the only active write region. Which architecture choice most directly removes the identified weakness?
- Enable the supported zone-redundant configuration for the Azure SQL tier and region.
- Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region.
- Configure Azure Cosmos DB multi-region writes with appropriate conflict resolution and consistency design.
- Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication.
Explanation
Correct Answer
C:The evidence (Writes from one continent must synchronously cross the ocean to the only active write region.) identifies the following cause: The document database is configured for one write region despite active-active demand. The design that removes it is: Configure Azure Cosmos DB multi-region writes with appropriate conflict resolution and consistency design. The acceptance check is: Simultaneously update a test document from two writable regions and verify defined conflict handling.
Incorrect Answers
A:The option belongs to a different failure mechanism: Zone redundancy was not enabled for an eligible database deployment. That situation exhibits: Single-zone database deployment becomes unavailable during a zonal outage. For the stated case, the remedy is: Configure Azure Cosmos DB multi-region writes with appropriate conflict resolution and consistency design.
B:That design instead addresses another observed condition: The secondary web app serves static pages but authentication and configuration retrieval fail. Its technical cause is: Regional failover planning omitted shared identity/configuration dependencies and allowed network paths. The current workload exhibits: Writes from one continent must synchronously cross the ocean to the only active write region. Its targeted remedy is: Configure Azure Cosmos DB multi-region writes with appropriate conflict resolution and consistency design.
D:The option belongs to a different failure mechanism: Client connection configuration bypasses the service's failover-group listener. That situation exhibits: Users remain connected to a decommissioned fixed-region SQL server hostname. For the stated case, the remedy is: Configure Azure Cosmos DB multi-region writes with appropriate conflict resolution and consistency design.
Question 622
An architect proposes this change: Configure Azure Cosmos DB multi-region writes with appropriate conflict resolution and consistency design. The workload context is: A product catalog is read and written from two continents and requires low latency plus explicit conflict-handling. Which evidence would most directly validate the change?
- Simultaneously update a test document from two writable regions and verify defined conflict handling.
- Deactivate primary DNS/routing and verify secondary web login and Key Vault configuration still function.
- Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
- Validate zone redundancy setting and failover behavior under the service's supported test methods.
Explanation
Correct Answer
A:The decisive evidence is: Simultaneously update a test document from two writable regions and verify defined conflict handling. This measures the mechanism of the planned change, not an unrelated Azure service: Configure Azure Cosmos DB multi-region writes with appropriate conflict resolution and consistency design.
Incorrect Answers
B:This check validates a different workload: Deactivate primary DNS/routing and verify secondary web login and Key Vault configuration still function. Its associated design is: Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region. The required acceptance test here is: Simultaneously update a test document from two writable regions and verify defined conflict handling.
C:That observation pertains to a separate failure: Users remain connected to a decommissioned fixed-region SQL server hostname. Its cause is: Client connection configuration bypasses the service's failover-group listener. It does not confirm the result of this design. The direct proof would be: Simultaneously update a test document from two writable regions and verify defined conflict handling.
D:The alternative test targets: Enable the supported zone-redundant configuration for the Azure SQL tier and region. The scenario's actual proposed remedy is: Configure Azure Cosmos DB multi-region writes with appropriate conflict resolution and consistency design. Verify that one by: Simultaneously update a test document from two writable regions and verify defined conflict handling.
Question 623
During architecture troubleshooting, a team reports: Writes from one continent must synchronously cross the ocean to the only active write region. Context: A product catalog is read and written from two continents and requires low latency plus explicit conflict-handling. Which underlying design mistake explains the observed behavior most precisely?
- Regional failover planning omitted shared identity/configuration dependencies and allowed network paths.
- Zone redundancy was not enabled for an eligible database deployment.
- The document database is configured for one write region despite active-active demand.
- Client connection configuration bypasses the service's failover-group listener.
Explanation
Correct Answer
C:This is the failure mechanism rather than an incidental symptom: The document database is configured for one write region despite active-active demand. It accounts for: Writes from one continent must synchronously cross the ocean to the only active write region. The architectural repair is: Configure Azure Cosmos DB multi-region writes with appropriate conflict resolution and consistency design.
Incorrect Answers
A:The alternative weakness is: Regional failover planning omitted shared identity/configuration dependencies and allowed network paths. Its associated failure is: The secondary web app serves static pages but authentication and configuration retrieval fail. Neither explains the present observation: Writes from one continent must synchronously cross the ocean to the only active write region. The direct cause here is: The document database is configured for one write region despite active-active demand.
B:This cause would explain a different symptom: Single-zone database deployment becomes unavailable during a zonal outage. The mechanism for that event is: Zone redundancy was not enabled for an eligible database deployment. Here the stated symptom is: Writes from one continent must synchronously cross the ocean to the only active write region. Its cause is: The document database is configured for one write region despite active-active demand.
D:The alternative weakness is: Client connection configuration bypasses the service's failover-group listener. Its associated failure is: Users remain connected to a decommissioned fixed-region SQL server hostname. Neither explains the present observation: Writes from one continent must synchronously cross the ocean to the only active write region. The direct cause here is: The document database is configured for one write region despite active-active demand.
Question 624
The design change is: Configure Azure Cosmos DB multi-region writes with appropriate conflict resolution and consistency design. The original failure was: Writes from one continent must synchronously cross the ocean to the only active write region. Which ongoing control best prevents recurrence of the same root cause?
- Monitor replication lag and exercise listener failover after major releases.
- Run complete synthetic login and settings tests against each region during continuity reviews.
- Review the tier and region's zone support before database scaling or migration.
- Observe region replication, failover and conflict metrics after geography expansion.
Explanation
Correct Answer
D:The key follow-up control is: Observe region replication, failover and conflict metrics after geography expansion. It avoids recurrence of the scenario in which: Writes from one continent must synchronously cross the ocean to the only active write region. It addresses: The document database is configured for one write region despite active-active demand.
Incorrect Answers
A:The proposed control focuses on: Client connection configuration bypasses the service's failover-group listener. For the design in the question, recurrence comes from: The document database is configured for one write region despite active-active demand. A precise prevention step is: Observe region replication, failover and conflict metrics after geography expansion.
B:That safeguard manages another risk: Regional failover planning omitted shared identity/configuration dependencies and allowed network paths. Its scenario is: The secondary web app serves static pages but authentication and configuration retrieval fail. The present recurring risk is: The document database is configured for one write region despite active-active demand. The proper ongoing control is: Observe region replication, failover and conflict metrics after geography expansion.
C:This is a reasonable safeguard for a different fault: Single-zone database deployment becomes unavailable during a zonal outage. That different mechanism is: Zone redundancy was not enabled for an eligible database deployment. The original incident here instead arises from: The document database is configured for one write region despite active-active demand. The directly relevant safeguard is: Observe region replication, failover and conflict metrics after geography expansion.
Question 625
A design workshop has this requirement: An Azure Blob Storage account must remain writable if one primary-region zone becomes unavailable. Operators currently observe: Blob writes stop because copies were confined to one data-center failure domain. Select the ONE design remedy that best addresses the root cause.
- Enable the supported zone-redundant configuration for the Azure SQL tier and region.
- Choose ZRS or GZRS for the supported blob workload depending on geographic DR requirements.
- Enable supported zone-redundant high availability with managed standby and compatible compute/region selection.
- Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer.
Explanation
Correct Answer
B:The evidence (Blob writes stop because copies were confined to one data-center failure domain.) identifies the following cause: Locally redundant storage was used without synchronous cross-zone copies. The design that removes it is: Choose ZRS or GZRS for the supported blob workload depending on geographic DR requirements. The acceptance check is: Inspect account redundancy and test primary service access under zonal impairment conditions.
Incorrect Answers
A:That design instead addresses another observed condition: Single-zone database deployment becomes unavailable during a zonal outage. Its technical cause is: Zone redundancy was not enabled for an eligible database deployment. The current workload exhibits: Blob writes stop because copies were confined to one data-center failure domain. Its targeted remedy is: Choose ZRS or GZRS for the supported blob workload depending on geographic DR requirements.
C:The option belongs to a different failure mechanism: No eligible zone-redundant PostgreSQL standby was provisioned. That situation exhibits: The server stays unavailable while a single-zone host is repaired. For the stated case, the remedy is: Choose ZRS or GZRS for the supported blob workload depending on geographic DR requirements.
D:That design instead addresses another observed condition: All stateless app instances are placed in one zone and fail together. Its technical cause is: The compute deployment lacks redundant zonal placement and health-based load balancing. The current workload exhibits: Blob writes stop because copies were confined to one data-center failure domain. Its targeted remedy is: Choose ZRS or GZRS for the supported blob workload depending on geographic DR requirements.
Question 626
The planned architecture is: Choose ZRS or GZRS for the supported blob workload depending on geographic DR requirements. Workload context: An Azure Blob Storage account must remain writable if one primary-region zone becomes unavailable. Which acceptance test demonstrates that the required behavior works?
- Inspect HA role, observe reconnect after a controlled test and validate data consistency.
- Validate zone redundancy setting and failover behavior under the service's supported test methods.
- Fail one zone in a resilience test and confirm probes keep routing to healthy instances.
- Inspect account redundancy and test primary service access under zonal impairment conditions.
Explanation
Correct Answer
D:This observation directly verifies the intended design: Inspect account redundancy and test primary service access under zonal impairment conditions. The architecture being tested is: Choose ZRS or GZRS for the supported blob workload depending on geographic DR requirements. The original symptom was: Blob writes stop because copies were confined to one data-center failure domain.
Incorrect Answers
A:This check validates a different workload: Inspect HA role, observe reconnect after a controlled test and validate data consistency. Its associated design is: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. The required acceptance test here is: Inspect account redundancy and test primary service access under zonal impairment conditions.
B:That observation pertains to a separate failure: Single-zone database deployment becomes unavailable during a zonal outage. Its cause is: Zone redundancy was not enabled for an eligible database deployment. It does not confirm the result of this design. The direct proof would be: Inspect account redundancy and test primary service access under zonal impairment conditions.
C:The alternative test targets: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer. The scenario's actual proposed remedy is: Choose ZRS or GZRS for the supported blob workload depending on geographic DR requirements. Verify that one by: Inspect account redundancy and test primary service access under zonal impairment conditions.
Question 627
The customer states: An Azure Blob Storage account must remain writable if one primary-region zone becomes unavailable. An incident reveals: Blob writes stop because copies were confined to one data-center failure domain. What cause best accounts for this evidence?
- Zone redundancy was not enabled for an eligible database deployment.
- Locally redundant storage was used without synchronous cross-zone copies.
- The compute deployment lacks redundant zonal placement and health-based load balancing.
- No eligible zone-redundant PostgreSQL standby was provisioned.
Explanation
Correct Answer
B:This is the failure mechanism rather than an incidental symptom: Locally redundant storage was used without synchronous cross-zone copies. It accounts for: Blob writes stop because copies were confined to one data-center failure domain. The architectural repair is: Choose ZRS or GZRS for the supported blob workload depending on geographic DR requirements.
Incorrect Answers
A:This cause would explain a different symptom: Single-zone database deployment becomes unavailable during a zonal outage. The mechanism for that event is: Zone redundancy was not enabled for an eligible database deployment. Here the stated symptom is: Blob writes stop because copies were confined to one data-center failure domain. Its cause is: Locally redundant storage was used without synchronous cross-zone copies.
C:The alternative weakness is: The compute deployment lacks redundant zonal placement and health-based load balancing. Its associated failure is: All stateless app instances are placed in one zone and fail together. Neither explains the present observation: Blob writes stop because copies were confined to one data-center failure domain. The direct cause here is: Locally redundant storage was used without synchronous cross-zone copies.
D:This cause would explain a different symptom: The server stays unavailable while a single-zone host is repaired. The mechanism for that event is: No eligible zone-redundant PostgreSQL standby was provisioned. Here the stated symptom is: Blob writes stop because copies were confined to one data-center failure domain. Its cause is: Locally redundant storage was used without synchronous cross-zone copies.
Question 628
Workload context: An Azure Blob Storage account must remain writable if one primary-region zone becomes unavailable. The implemented remedy is: Choose ZRS or GZRS for the supported blob workload depending on geographic DR requirements. Which ongoing practice most specifically prevents recurrence of this failure: Blob writes stop because copies were confined to one data-center failure domain.?
- Review the tier and region's zone support before database scaling or migration.
- Monitor zonal capacity and load balancer health probes during scale changes.
- Monitor standby health and application retries after engine maintenance.
- Validate regional redundancy compatibility before storage account tier changes.
Explanation
Correct Answer
D:The preventive control is: Validate regional redundancy compatibility before storage account tier changes. It targets the earlier cause: Locally redundant storage was used without synchronous cross-zone copies. Confirm ongoing effectiveness by: Inspect account redundancy and test primary service access under zonal impairment conditions.
Incorrect Answers
A:That safeguard manages another risk: Zone redundancy was not enabled for an eligible database deployment. Its scenario is: Single-zone database deployment becomes unavailable during a zonal outage. The present recurring risk is: Locally redundant storage was used without synchronous cross-zone copies. The proper ongoing control is: Validate regional redundancy compatibility before storage account tier changes.
B:This is a reasonable safeguard for a different fault: All stateless app instances are placed in one zone and fail together. That different mechanism is: The compute deployment lacks redundant zonal placement and health-based load balancing. The original incident here instead arises from: Locally redundant storage was used without synchronous cross-zone copies. The directly relevant safeguard is: Validate regional redundancy compatibility before storage account tier changes.
C:The proposed control focuses on: No eligible zone-redundant PostgreSQL standby was provisioned. For the design in the question, recurrence comes from: Locally redundant storage was used without synchronous cross-zone copies. A precise prevention step is: Validate regional redundancy compatibility before storage account tier changes.
Question 629
A solution architect is reviewing a workload: An AKS application must tolerate node and availability-zone failures while scaling independently across node pools. The observed incident is: Every application replica is scheduled onto nodes in one availability zone. Which architecture choice most directly removes the identified weakness?
- Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity.
- Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer.
- Enable the supported zone-redundant configuration for the Azure SQL tier and region.
- Enable and design around Service Bus Premium availability zone resilience with redundant consumers.
Explanation
Correct Answer
A:The evidence (Every application replica is scheduled onto nodes in one availability zone.) identifies the following cause: Workload scheduling and node-pool placement lack zonal diversity. The design that removes it is: Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity. The acceptance check is: Drain one zonal node pool and confirm healthy replicas remain available from other zones.
Incorrect Answers
B:The option belongs to a different failure mechanism: The compute deployment lacks redundant zonal placement and health-based load balancing. That situation exhibits: All stateless app instances are placed in one zone and fail together. For the stated case, the remedy is: Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity.
C:That design instead addresses another observed condition: Single-zone database deployment becomes unavailable during a zonal outage. Its technical cause is: Zone redundancy was not enabled for an eligible database deployment. The current workload exhibits: Every application replica is scheduled onto nodes in one availability zone. Its targeted remedy is: Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity.
D:This choice mitigates an alternative scenario, where: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. The underlying issue there is: The messaging service tier/configuration does not meet zonal resilience requirements. Here the root issue is: Workload scheduling and node-pool placement lack zonal diversity. Choose the corresponding action: Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity.
Question 630
An architect proposes this change: Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity. The workload context is: An AKS application must tolerate node and availability-zone failures while scaling independently across node pools. Which evidence would most directly validate the change?
- Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA.
- Drain one zonal node pool and confirm healthy replicas remain available from other zones.
- Fail one zone in a resilience test and confirm probes keep routing to healthy instances.
- Validate zone redundancy setting and failover behavior under the service's supported test methods.
Explanation
Correct Answer
B:The decisive evidence is: Drain one zonal node pool and confirm healthy replicas remain available from other zones. This measures the mechanism of the planned change, not an unrelated Azure service: Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity.
Incorrect Answers
A:That observation pertains to a separate failure: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Its cause is: The messaging service tier/configuration does not meet zonal resilience requirements. It does not confirm the result of this design. The direct proof would be: Drain one zonal node pool and confirm healthy replicas remain available from other zones.
C:This check validates a different workload: Fail one zone in a resilience test and confirm probes keep routing to healthy instances. Its associated design is: Deploy instances across supported availability zones behind a zone-redundant Standard Load Balancer. The required acceptance test here is: Drain one zonal node pool and confirm healthy replicas remain available from other zones.
D:That observation pertains to a separate failure: Single-zone database deployment becomes unavailable during a zonal outage. Its cause is: Zone redundancy was not enabled for an eligible database deployment. It does not confirm the result of this design. The direct proof would be: Drain one zonal node pool and confirm healthy replicas remain available from other zones.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests