Question 640
A design review identifies: A high-throughput Azure Functions workload must stay responsive with prewarmed instances and VNet integration under variable demand. The failure is: Critical function executions time out after large cold starts and lack required networking features. Select TWO distinct decisions that together provide the immediate technical solution AND an ongoing prevention control. A verification-only step does not replace either responsibility.
- Enable and design around Service Bus Premium availability zone resilience with redundant consumers.
- Use App Service zone redundancy with a supporting plan and region where available, then configure sufficient instances.
- Test plan scaling, zone support and function retry semantics after runtime upgrades.
- Use a supported Functions hosting plan such as Elastic Premium with appropriate warm instances and zone capabilities where required.
- Monitor zonal capacity and load balancer health probes during scale changes.
Explanation
Correct Answers
C:The key follow-up control is: Test plan scaling, zone support and function retry semantics after runtime upgrades. It avoids recurrence of the scenario in which: Critical function executions time out after large cold starts and lack required networking features. It addresses: The hosting plan does not meet warm-instance and networking requirements.
D:This option addresses the actual design defect: The hosting plan does not meet warm-instance and networking requirements. The correction is: Use a supported Functions hosting plan such as Elastic Premium with appropriate warm instances and zone capabilities where required. Confirm the outcome with: Send burst traffic and validate cold-start/latency and VNet connectivity under scale changes.
Incorrect Answers
A:That design instead addresses another observed condition: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Its technical cause is: The messaging service tier/configuration does not meet zonal resilience requirements. The current workload exhibits: Critical function executions time out after large cold starts and lack required networking features. Its targeted remedy is: Use a supported Functions hosting plan such as Elastic Premium with appropriate warm instances and zone capabilities where required.
B:This choice mitigates an alternative scenario, where: Both instances are unavailable when their single shared zone has an incident. The underlying issue there is: Scale-out count was confused with physical availability-zone placement. Here the root issue is: The hosting plan does not meet warm-instance and networking requirements. Choose the corresponding action: Use a supported Functions hosting plan such as Elastic Premium with appropriate warm instances and zone capabilities where required.
E:This is a reasonable safeguard for a different fault: All stateless app instances are placed in one zone and fail together. That different mechanism is: The compute deployment lacks redundant zonal placement and health-based load balancing. The original incident here instead arises from: The hosting plan does not meet warm-instance and networking requirements. The directly relevant safeguard is: Test plan scaling, zone support and function retry semantics after runtime upgrades.
Question 641
A design workshop has this requirement: A globally distributed app needs Redis-like caching for availability across regional outages without treating cache as the authoritative database. Operators currently observe: A cache outage causes irreversible loss of authoritative session/customer records. Select the ONE design remedy that best addresses the root cause.
- Design an eligible managed Redis caching solution with documented replication/failover, plus resilient data-source fallback.
- Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region.
- Enable the supported zone-redundant configuration for the Azure SQL tier and region.
- Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR.
Explanation
Correct Answer
A:The evidence (A cache outage causes irreversible loss of authoritative session/customer records.) identifies the following cause: Ephemeral cache was treated as the only durable data system. The design that removes it is: Design an eligible managed Redis caching solution with documented replication/failover, plus resilient data-source fallback. The acceptance check is: Fail the primary cache and confirm the application can miss and rehydrate from its source of truth.
Incorrect Answers
B:The option belongs to a different failure mechanism: Regional failover planning omitted shared identity/configuration dependencies and allowed network paths. That situation exhibits: The secondary web app serves static pages but authentication and configuration retrieval fail. For the stated case, the remedy is: Design an eligible managed Redis caching solution with documented replication/failover, plus resilient data-source fallback.
C:That design instead addresses another observed condition: Single-zone database deployment becomes unavailable during a zonal outage. Its technical cause is: Zone redundancy was not enabled for an eligible database deployment. The current workload exhibits: A cache outage causes irreversible loss of authoritative session/customer records. Its targeted remedy is: Design an eligible managed Redis caching solution with documented replication/failover, plus resilient data-source fallback.
D:This choice mitigates an alternative scenario, where: Routine host outages cause long interruptions while region recovery replication remains healthy. The underlying issue there is: Disaster recovery orchestration does not substitute for continuous local high availability. Here the root issue is: Ephemeral cache was treated as the only durable data system. Choose the corresponding action: Design an eligible managed Redis caching solution with documented replication/failover, plus resilient data-source fallback.
Question 642
The planned architecture is: Design an eligible managed Redis caching solution with documented replication/failover, plus resilient data-source fallback. Workload context: A globally distributed app needs Redis-like caching for availability across regional outages without treating cache as the authoritative database. Which acceptance test demonstrates that the required behavior works?
- Deactivate primary DNS/routing and verify secondary web login and Key Vault configuration still function.
- Validate zone redundancy setting and failover behavior under the service's supported test methods.
- Simulate a host failure and verify service continues without manual recovery orchestration.
- Fail the primary cache and confirm the application can miss and rehydrate from its source of truth.
Explanation
Correct Answer
D:The acceptance test is specific: Fail the primary cache and confirm the application can miss and rehydrate from its source of truth. Its purpose is to establish that the proposed architecture works: Design an eligible managed Redis caching solution with documented replication/failover, plus resilient data-source fallback.
Incorrect Answers
A:That observation pertains to a separate failure: The secondary web app serves static pages but authentication and configuration retrieval fail. Its cause is: Regional failover planning omitted shared identity/configuration dependencies and allowed network paths. It does not confirm the result of this design. The direct proof would be: Fail the primary cache and confirm the application can miss and rehydrate from its source of truth.
B:The alternative test targets: Enable the supported zone-redundant configuration for the Azure SQL tier and region. The scenario's actual proposed remedy is: Design an eligible managed Redis caching solution with documented replication/failover, plus resilient data-source fallback. Verify that one by: Fail the primary cache and confirm the application can miss and rehydrate from its source of truth.
C:This check validates a different workload: Simulate a host failure and verify service continues without manual recovery orchestration. Its associated design is: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR. The required acceptance test here is: Fail the primary cache and confirm the application can miss and rehydrate from its source of truth.
Question 643
The customer states: A globally distributed app needs Redis-like caching for availability across regional outages without treating cache as the authoritative database. An incident reveals: A cache outage causes irreversible loss of authoritative session/customer records. What cause best accounts for this evidence?
- Zone redundancy was not enabled for an eligible database deployment.
- Regional failover planning omitted shared identity/configuration dependencies and allowed network paths.
- Disaster recovery orchestration does not substitute for continuous local high availability.
- Ephemeral cache was treated as the only durable data system.
Explanation
Correct Answer
D:This is the failure mechanism rather than an incidental symptom: Ephemeral cache was treated as the only durable data system. It accounts for: A cache outage causes irreversible loss of authoritative session/customer records. The architectural repair is: Design an eligible managed Redis caching solution with documented replication/failover, plus resilient data-source fallback.
Incorrect Answers
A:The proposed diagnosis fits another scenario: Zone redundancy was not enabled for an eligible database deployment. It would typically be reflected by: Single-zone database deployment becomes unavailable during a zonal outage. The current evidence instead supports: Ephemeral cache was treated as the only durable data system.
B:The alternative weakness is: Regional failover planning omitted shared identity/configuration dependencies and allowed network paths. Its associated failure is: The secondary web app serves static pages but authentication and configuration retrieval fail. Neither explains the present observation: A cache outage causes irreversible loss of authoritative session/customer records. The direct cause here is: Ephemeral cache was treated as the only durable data system.
C:This cause would explain a different symptom: Routine host outages cause long interruptions while region recovery replication remains healthy. The mechanism for that event is: Disaster recovery orchestration does not substitute for continuous local high availability. Here the stated symptom is: A cache outage causes irreversible loss of authoritative session/customer records. Its cause is: Ephemeral cache was treated as the only durable data system.
Question 644
Workload context: A globally distributed app needs Redis-like caching for availability across regional outages without treating cache as the authoritative database. The implemented remedy is: Design an eligible managed Redis caching solution with documented replication/failover, plus resilient data-source fallback. Which ongoing practice most specifically prevents recurrence of this failure: A cache outage causes irreversible loss of authoritative session/customer records.?
- Run complete synthetic login and settings tests against each region during continuity reviews.
- Review cache failover behavior and app fallback under simulated disconnection.
- Test routine fault tolerance independently of regional DR recovery plans.
- Review the tier and region's zone support before database scaling or migration.
Explanation
Correct Answer
B:The key follow-up control is: Review cache failover behavior and app fallback under simulated disconnection. It avoids recurrence of the scenario in which: A cache outage causes irreversible loss of authoritative session/customer records. It addresses: Ephemeral cache was treated as the only durable data system.
Incorrect Answers
A:This is a reasonable safeguard for a different fault: The secondary web app serves static pages but authentication and configuration retrieval fail. That different mechanism is: Regional failover planning omitted shared identity/configuration dependencies and allowed network paths. The original incident here instead arises from: Ephemeral cache was treated as the only durable data system. The directly relevant safeguard is: Review cache failover behavior and app fallback under simulated disconnection.
C:That safeguard manages another risk: Disaster recovery orchestration does not substitute for continuous local high availability. Its scenario is: Routine host outages cause long interruptions while region recovery replication remains healthy. The present recurring risk is: Ephemeral cache was treated as the only durable data system. The proper ongoing control is: Review cache failover behavior and app fallback under simulated disconnection.
D:This is a reasonable safeguard for a different fault: Single-zone database deployment becomes unavailable during a zonal outage. That different mechanism is: Zone redundancy was not enabled for an eligible database deployment. The original incident here instead arises from: Ephemeral cache was treated as the only durable data system. The directly relevant safeguard is: Review cache failover behavior and app fallback under simulated disconnection.
Question 645
A solution architect is reviewing a workload: An Azure Database for PostgreSQL flexible-server production database must fail over within the region after a zone loss. The observed incident is: The server stays unavailable while a single-zone host is repaired. Which architecture choice most directly removes the identified weakness?
- Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment.
- Enable and design around Service Bus Premium availability zone resilience with redundant consumers.
- Enable supported zone-redundant high availability with managed standby and compatible compute/region selection.
- Enable the supported zone-redundant configuration for the Azure SQL tier and region.
Explanation
Correct Answer
C:The evidence (The server stays unavailable while a single-zone host is repaired.) identifies the following cause: No eligible zone-redundant PostgreSQL standby was provisioned. The design that removes it is: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. The acceptance check is: Inspect HA role, observe reconnect after a controlled test and validate data consistency.
Incorrect Answers
A:The option belongs to a different failure mechanism: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. That situation exhibits: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. For the stated case, the remedy is: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection.
B:That design instead addresses another observed condition: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Its technical cause is: The messaging service tier/configuration does not meet zonal resilience requirements. The current workload exhibits: The server stays unavailable while a single-zone host is repaired. Its targeted remedy is: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection.
D:The option belongs to a different failure mechanism: Zone redundancy was not enabled for an eligible database deployment. That situation exhibits: Single-zone database deployment becomes unavailable during a zonal outage. For the stated case, the remedy is: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection.
Question 646
An architect proposes this change: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. The workload context is: An Azure Database for PostgreSQL flexible-server production database must fail over within the region after a zone loss. Which evidence would most directly validate the change?
- Trigger a controlled failover and confirm database clients reconnect and restore successful transactions without manually replacing server IPs.
- Inspect HA role, observe reconnect after a controlled test and validate data consistency.
- Validate zone redundancy setting and failover behavior under the service's supported test methods.
- Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA.
Explanation
Correct Answer
B:This observation directly verifies the intended design: Inspect HA role, observe reconnect after a controlled test and validate data consistency. The architecture being tested is: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. The original symptom was: The server stays unavailable while a single-zone host is repaired.
Incorrect Answers
A:The alternative test targets: Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment. The scenario's actual proposed remedy is: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. Verify that one by: Inspect HA role, observe reconnect after a controlled test and validate data consistency.
C:That observation pertains to a separate failure: Single-zone database deployment becomes unavailable during a zonal outage. Its cause is: Zone redundancy was not enabled for an eligible database deployment. It does not confirm the result of this design. The direct proof would be: Inspect HA role, observe reconnect after a controlled test and validate data consistency.
D:The alternative test targets: Enable and design around Service Bus Premium availability zone resilience with redundant consumers. The scenario's actual proposed remedy is: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. Verify that one by: Inspect HA role, observe reconnect after a controlled test and validate data consistency.
Question 647
During architecture troubleshooting, a team reports: The server stays unavailable while a single-zone host is repaired. Context: An Azure Database for PostgreSQL flexible-server production database must fail over within the region after a zone loss. Which underlying design mistake explains the observed behavior most precisely?
- The messaging service tier/configuration does not meet zonal resilience requirements.
- The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover.
- Zone redundancy was not enabled for an eligible database deployment.
- No eligible zone-redundant PostgreSQL standby was provisioned.
Explanation
Correct Answer
D:The recorded behavior follows from: No eligible zone-redundant PostgreSQL standby was provisioned. The appropriate mitigation would be: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. Verify with: Inspect HA role, observe reconnect after a controlled test and validate data consistency.
Incorrect Answers
A:The alternative weakness is: The messaging service tier/configuration does not meet zonal resilience requirements. Its associated failure is: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Neither explains the present observation: The server stays unavailable while a single-zone host is repaired. The direct cause here is: No eligible zone-redundant PostgreSQL standby was provisioned.
B:This cause would explain a different symptom: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. The mechanism for that event is: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. Here the stated symptom is: The server stays unavailable while a single-zone host is repaired. Its cause is: No eligible zone-redundant PostgreSQL standby was provisioned.
C:The proposed diagnosis fits another scenario: Zone redundancy was not enabled for an eligible database deployment. It would typically be reflected by: Single-zone database deployment becomes unavailable during a zonal outage. The current evidence instead supports: No eligible zone-redundant PostgreSQL standby was provisioned.
Question 648
The design change is: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. The original failure was: The server stays unavailable while a single-zone host is repaired. Which ongoing control best prevents recurrence of the same root cause?
- Monitor queue depths and backend availability after namespace scaling.
- Review the tier and region's zone support before database scaling or migration.
- Include client reconnection timing and error-budget recovery checks in planned MySQL high-availability drills.
- Monitor standby health and application retries after engine maintenance.
Explanation
Correct Answer
D:The key follow-up control is: Monitor standby health and application retries after engine maintenance. It avoids recurrence of the scenario in which: The server stays unavailable while a single-zone host is repaired. It addresses: No eligible zone-redundant PostgreSQL standby was provisioned.
Incorrect Answers
A:The proposed control focuses on: The messaging service tier/configuration does not meet zonal resilience requirements. For the design in the question, recurrence comes from: No eligible zone-redundant PostgreSQL standby was provisioned. A precise prevention step is: Monitor standby health and application retries after engine maintenance.
B:That safeguard manages another risk: Zone redundancy was not enabled for an eligible database deployment. Its scenario is: Single-zone database deployment becomes unavailable during a zonal outage. The present recurring risk is: No eligible zone-redundant PostgreSQL standby was provisioned. The proper ongoing control is: Monitor standby health and application retries after engine maintenance.
C:This is a reasonable safeguard for a different fault: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. That different mechanism is: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. The original incident here instead arises from: No eligible zone-redundant PostgreSQL standby was provisioned. The directly relevant safeguard is: Monitor standby health and application retries after engine maintenance.
Question 649
A design workshop has this requirement: Operations considers Azure Site Recovery alone sufficient for a five-nines availability target during ordinary VM host failures. Operators currently observe: Routine host outages cause long interruptions while region recovery replication remains healthy. Select the ONE design remedy that best addresses the root cause.
- Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity.
- Enable supported zone-redundant high availability with managed standby and compatible compute/region selection.
- Deploy an availability set with suitable fault and update domains where availability zones aren't used.
- Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR.
Explanation
Correct Answer
D:This option addresses the actual design defect: Disaster recovery orchestration does not substitute for continuous local high availability. The correction is: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR. Confirm the outcome with: Simulate a host failure and verify service continues without manual recovery orchestration.
Incorrect Answers
A:That design instead addresses another observed condition: Every application replica is scheduled onto nodes in one availability zone. Its technical cause is: Workload scheduling and node-pool placement lack zonal diversity. The current workload exhibits: Routine host outages cause long interruptions while region recovery replication remains healthy. Its targeted remedy is: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR.
B:This choice mitigates an alternative scenario, where: The server stays unavailable while a single-zone host is repaired. The underlying issue there is: No eligible zone-redundant PostgreSQL standby was provisioned. Here the root issue is: Disaster recovery orchestration does not substitute for continuous local high availability. Choose the corresponding action: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR.
C:The option belongs to a different failure mechanism: The VMs were not distributed across suitable update/fault domains. That situation exhibits: Both VMs restart for one planned host-maintenance event. For the stated case, the remedy is: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR.
Question 650
The planned architecture is: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR. Workload context: Operations considers Azure Site Recovery alone sufficient for a five-nines availability target during ordinary VM host failures. Which acceptance test demonstrates that the required behavior works?
- Inspect VM fault/update domain placement and test the expected maintenance/failure behavior.
- Simulate a host failure and verify service continues without manual recovery orchestration.
- Inspect HA role, observe reconnect after a controlled test and validate data consistency.
- Drain one zonal node pool and confirm healthy replicas remain available from other zones.
Explanation
Correct Answer
B:The acceptance test is specific: Simulate a host failure and verify service continues without manual recovery orchestration. Its purpose is to establish that the proposed architecture works: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR.
Incorrect Answers
A:This check validates a different workload: Inspect VM fault/update domain placement and test the expected maintenance/failure behavior. Its associated design is: Deploy an availability set with suitable fault and update domains where availability zones aren't used. The required acceptance test here is: Simulate a host failure and verify service continues without manual recovery orchestration.
C:The alternative test targets: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. The scenario's actual proposed remedy is: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR. Verify that one by: Simulate a host failure and verify service continues without manual recovery orchestration.
D:This check validates a different workload: Drain one zonal node pool and confirm healthy replicas remain available from other zones. Its associated design is: Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity. The required acceptance test here is: Simulate a host failure and verify service continues without manual recovery orchestration.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests