Question 650
The planned architecture is: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR. Workload context: Operations considers Azure Site Recovery alone sufficient for a five-nines availability target during ordinary VM host failures. Which acceptance test demonstrates that the required behavior works?
- Inspect VM fault/update domain placement and test the expected maintenance/failure behavior.
- Simulate a host failure and verify service continues without manual recovery orchestration.
- Inspect HA role, observe reconnect after a controlled test and validate data consistency.
- Drain one zonal node pool and confirm healthy replicas remain available from other zones.
Explanation
Correct Answer
B:The acceptance test is specific: Simulate a host failure and verify service continues without manual recovery orchestration. Its purpose is to establish that the proposed architecture works: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR.
Incorrect Answers
A:This check validates a different workload: Inspect VM fault/update domain placement and test the expected maintenance/failure behavior. Its associated design is: Deploy an availability set with suitable fault and update domains where availability zones aren't used. The required acceptance test here is: Simulate a host failure and verify service continues without manual recovery orchestration.
C:The alternative test targets: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. The scenario's actual proposed remedy is: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR. Verify that one by: Simulate a host failure and verify service continues without manual recovery orchestration.
D:This check validates a different workload: Drain one zonal node pool and confirm healthy replicas remain available from other zones. Its associated design is: Distribute supported AKS node pools across zones with multiple replicas and appropriate topology spread/anti-affinity. The required acceptance test here is: Simulate a host failure and verify service continues without manual recovery orchestration.
Question 651
The customer states: Operations considers Azure Site Recovery alone sufficient for a five-nines availability target during ordinary VM host failures. An incident reveals: Routine host outages cause long interruptions while region recovery replication remains healthy. What cause best accounts for this evidence?
- Workload scheduling and node-pool placement lack zonal diversity.
- The VMs were not distributed across suitable update/fault domains.
- No eligible zone-redundant PostgreSQL standby was provisioned.
- Disaster recovery orchestration does not substitute for continuous local high availability.
Explanation
Correct Answer
D:The incident is explained by: Disaster recovery orchestration does not substitute for continuous local high availability. The reported symptom is: Routine host outages cause long interruptions while region recovery replication remains healthy. The corresponding design fix is: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR.
Incorrect Answers
A:This cause would explain a different symptom: Every application replica is scheduled onto nodes in one availability zone. The mechanism for that event is: Workload scheduling and node-pool placement lack zonal diversity. Here the stated symptom is: Routine host outages cause long interruptions while region recovery replication remains healthy. Its cause is: Disaster recovery orchestration does not substitute for continuous local high availability.
B:The proposed diagnosis fits another scenario: The VMs were not distributed across suitable update/fault domains. It would typically be reflected by: Both VMs restart for one planned host-maintenance event. The current evidence instead supports: Disaster recovery orchestration does not substitute for continuous local high availability.
C:The alternative weakness is: No eligible zone-redundant PostgreSQL standby was provisioned. Its associated failure is: The server stays unavailable while a single-zone host is repaired. Neither explains the present observation: Routine host outages cause long interruptions while region recovery replication remains healthy. The direct cause here is: Disaster recovery orchestration does not substitute for continuous local high availability.
Question 652
Workload context: Operations considers Azure Site Recovery alone sufficient for a five-nines availability target during ordinary VM host failures. The implemented remedy is: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR. Which ongoing practice most specifically prevents recurrence of this failure: Routine host outages cause long interruptions while region recovery replication remains healthy.?
- Audit topology-spread rules and capacity reservations after node pool upgrades.
- Test routine fault tolerance independently of regional DR recovery plans.
- Review placement constraints when VM SKUs or region capabilities change.
- Monitor standby health and application retries after engine maintenance.
Explanation
Correct Answer
B:This is an ongoing protection specific to the fault: Test routine fault tolerance independently of regional DR recovery plans. The recurrence risk is: Disaster recovery orchestration does not substitute for continuous local high availability. It should be checked using: Simulate a host failure and verify service continues without manual recovery orchestration.
Incorrect Answers
A:That safeguard manages another risk: Workload scheduling and node-pool placement lack zonal diversity. Its scenario is: Every application replica is scheduled onto nodes in one availability zone. The present recurring risk is: Disaster recovery orchestration does not substitute for continuous local high availability. The proper ongoing control is: Test routine fault tolerance independently of regional DR recovery plans.
C:The proposed control focuses on: The VMs were not distributed across suitable update/fault domains. For the design in the question, recurrence comes from: Disaster recovery orchestration does not substitute for continuous local high availability. A precise prevention step is: Test routine fault tolerance independently of regional DR recovery plans.
D:That safeguard manages another risk: No eligible zone-redundant PostgreSQL standby was provisioned. Its scenario is: The server stays unavailable while a single-zone host is repaired. The present recurring risk is: Disaster recovery orchestration does not substitute for continuous local high availability. The proper ongoing control is: Test routine fault tolerance independently of regional DR recovery plans.
Question 653
A solution architect is reviewing a workload: A financial enterprise uses Service Bus Premium messaging in one region and must withstand an availability zone failure where supported. The observed incident is: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Which architecture choice most directly removes the identified weakness?
- Enable supported zone-redundant high availability with managed standby and compatible compute/region selection.
- Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature.
- Enable the supported zone-redundant configuration for the Azure SQL tier and region.
- Enable and design around Service Bus Premium availability zone resilience with redundant consumers.
Explanation
Correct Answer
D:The evidence (A single-zone dependent messaging tier becomes unavailable during zonal maintenance.) identifies the following cause: The messaging service tier/configuration does not meet zonal resilience requirements. The design that removes it is: Enable and design around Service Bus Premium availability zone resilience with redundant consumers. The acceptance check is: Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA.
Incorrect Answers
A:This choice mitigates an alternative scenario, where: The server stays unavailable while a single-zone host is repaired. The underlying issue there is: No eligible zone-redundant PostgreSQL standby was provisioned. Here the root issue is: The messaging service tier/configuration does not meet zonal resilience requirements. Choose the corresponding action: Enable and design around Service Bus Premium availability zone resilience with redundant consumers.
B:The option belongs to a different failure mechanism: Metadata-only disaster-recovery features were assumed to replicate message content as well. That situation exhibits: The new region lacks expected queued messages after an alias configuration failover. For the stated case, the remedy is: Enable and design around Service Bus Premium availability zone resilience with redundant consumers.
C:That design instead addresses another observed condition: Single-zone database deployment becomes unavailable during a zonal outage. Its technical cause is: Zone redundancy was not enabled for an eligible database deployment. The current workload exhibits: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Its targeted remedy is: Enable and design around Service Bus Premium availability zone resilience with redundant consumers.
Question 654
An architect proposes this change: Enable and design around Service Bus Premium availability zone resilience with redundant consumers. The workload context is: A financial enterprise uses Service Bus Premium messaging in one region and must withstand an availability zone failure where supported. Which evidence would most directly validate the change?
- Validate zone redundancy setting and failover behavior under the service's supported test methods.
- Inspect HA role, observe reconnect after a controlled test and validate data consistency.
- Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA.
- Test endpoint alias or disaster-recovery failover and verify what configuration and data were retained.
Explanation
Correct Answer
C:This observation directly verifies the intended design: Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA. The architecture being tested is: Enable and design around Service Bus Premium availability zone resilience with redundant consumers. The original symptom was: A single-zone dependent messaging tier becomes unavailable during zonal maintenance.
Incorrect Answers
A:That observation pertains to a separate failure: Single-zone database deployment becomes unavailable during a zonal outage. Its cause is: Zone redundancy was not enabled for an eligible database deployment. It does not confirm the result of this design. The direct proof would be: Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA.
B:The alternative test targets: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. The scenario's actual proposed remedy is: Enable and design around Service Bus Premium availability zone resilience with redundant consumers. Verify that one by: Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA.
D:That observation pertains to a separate failure: The new region lacks expected queued messages after an alias configuration failover. Its cause is: Metadata-only disaster-recovery features were assumed to replicate message content as well. It does not confirm the result of this design. The direct proof would be: Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA.
Question 655
During architecture troubleshooting, a team reports: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Context: A financial enterprise uses Service Bus Premium messaging in one region and must withstand an availability zone failure where supported. Which underlying design mistake explains the observed behavior most precisely?
- Zone redundancy was not enabled for an eligible database deployment.
- No eligible zone-redundant PostgreSQL standby was provisioned.
- Metadata-only disaster-recovery features were assumed to replicate message content as well.
- The messaging service tier/configuration does not meet zonal resilience requirements.
Explanation
Correct Answer
D:This is the failure mechanism rather than an incidental symptom: The messaging service tier/configuration does not meet zonal resilience requirements. It accounts for: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. The architectural repair is: Enable and design around Service Bus Premium availability zone resilience with redundant consumers.
Incorrect Answers
A:The proposed diagnosis fits another scenario: Zone redundancy was not enabled for an eligible database deployment. It would typically be reflected by: Single-zone database deployment becomes unavailable during a zonal outage. The current evidence instead supports: The messaging service tier/configuration does not meet zonal resilience requirements.
B:The alternative weakness is: No eligible zone-redundant PostgreSQL standby was provisioned. Its associated failure is: The server stays unavailable while a single-zone host is repaired. Neither explains the present observation: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. The direct cause here is: The messaging service tier/configuration does not meet zonal resilience requirements.
C:This cause would explain a different symptom: The new region lacks expected queued messages after an alias configuration failover. The mechanism for that event is: Metadata-only disaster-recovery features were assumed to replicate message content as well. Here the stated symptom is: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Its cause is: The messaging service tier/configuration does not meet zonal resilience requirements.
Question 656
The design change is: Enable and design around Service Bus Premium availability zone resilience with redundant consumers. The original failure was: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Which ongoing control best prevents recurrence of the same root cause?
- Monitor queue depths and backend availability after namespace scaling.
- Test recovery runbooks and document message loss/replay obligations for selected features.
- Review the tier and region's zone support before database scaling or migration.
- Monitor standby health and application retries after engine maintenance.
Explanation
Correct Answer
A:This is an ongoing protection specific to the fault: Monitor queue depths and backend availability after namespace scaling. The recurrence risk is: The messaging service tier/configuration does not meet zonal resilience requirements. It should be checked using: Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA.
Incorrect Answers
B:The proposed control focuses on: Metadata-only disaster-recovery features were assumed to replicate message content as well. For the design in the question, recurrence comes from: The messaging service tier/configuration does not meet zonal resilience requirements. A precise prevention step is: Monitor queue depths and backend availability after namespace scaling.
C:That safeguard manages another risk: Zone redundancy was not enabled for an eligible database deployment. Its scenario is: Single-zone database deployment becomes unavailable during a zonal outage. The present recurring risk is: The messaging service tier/configuration does not meet zonal resilience requirements. The proper ongoing control is: Monitor queue depths and backend availability after namespace scaling.
D:This is a reasonable safeguard for a different fault: The server stays unavailable while a single-zone host is repaired. That different mechanism is: No eligible zone-redundant PostgreSQL standby was provisioned. The original incident here instead arises from: The messaging service tier/configuration does not meet zonal resilience requirements. The directly relevant safeguard is: Monitor queue depths and backend availability after namespace scaling.
Question 657
A design workshop has this requirement: A business relies on Service Bus queues in two regions and needs to plan a regional failover without assuming all message payloads replicate by magic. Operators currently observe: The new region lacks expected queued messages after an alias configuration failover. Select the ONE design remedy that best addresses the root cause.
- Enable the supported zone-redundant configuration for the Azure SQL tier and region.
- Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature.
- Enable and design around Service Bus Premium availability zone resilience with redundant consumers.
- Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication.
Explanation
Correct Answer
B:This option addresses the actual design defect: Metadata-only disaster-recovery features were assumed to replicate message content as well. The correction is: Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature. Confirm the outcome with: Test endpoint alias or disaster-recovery failover and verify what configuration and data were retained.
Incorrect Answers
A:The option belongs to a different failure mechanism: Zone redundancy was not enabled for an eligible database deployment. That situation exhibits: Single-zone database deployment becomes unavailable during a zonal outage. For the stated case, the remedy is: Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature.
C:This choice mitigates an alternative scenario, where: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. The underlying issue there is: The messaging service tier/configuration does not meet zonal resilience requirements. Here the root issue is: Metadata-only disaster-recovery features were assumed to replicate message content as well. Choose the corresponding action: Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature.
D:The option belongs to a different failure mechanism: Client connection configuration bypasses the service's failover-group listener. That situation exhibits: Users remain connected to a decommissioned fixed-region SQL server hostname. For the stated case, the remedy is: Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature.
Question 658
The planned architecture is: Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature. Workload context: A business relies on Service Bus queues in two regions and needs to plan a regional failover without assuming all message payloads replicate by magic. Which acceptance test demonstrates that the required behavior works?
- Validate zone redundancy setting and failover behavior under the service's supported test methods.
- Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA.
- Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
- Test endpoint alias or disaster-recovery failover and verify what configuration and data were retained.
Explanation
Correct Answer
D:The decisive evidence is: Test endpoint alias or disaster-recovery failover and verify what configuration and data were retained. This measures the mechanism of the planned change, not an unrelated Azure service: Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature.
Incorrect Answers
A:The alternative test targets: Enable the supported zone-redundant configuration for the Azure SQL tier and region. The scenario's actual proposed remedy is: Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature. Verify that one by: Test endpoint alias or disaster-recovery failover and verify what configuration and data were retained.
B:This check validates a different workload: Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA. Its associated design is: Enable and design around Service Bus Premium availability zone resilience with redundant consumers. The required acceptance test here is: Test endpoint alias or disaster-recovery failover and verify what configuration and data were retained.
C:That observation pertains to a separate failure: Users remain connected to a decommissioned fixed-region SQL server hostname. Its cause is: Client connection configuration bypasses the service's failover-group listener. It does not confirm the result of this design. The direct proof would be: Test endpoint alias or disaster-recovery failover and verify what configuration and data were retained.
Question 659
The customer states: A business relies on Service Bus queues in two regions and needs to plan a regional failover without assuming all message payloads replicate by magic. An incident reveals: The new region lacks expected queued messages after an alias configuration failover. What cause best accounts for this evidence?
- Metadata-only disaster-recovery features were assumed to replicate message content as well.
- Zone redundancy was not enabled for an eligible database deployment.
- Client connection configuration bypasses the service's failover-group listener.
- The messaging service tier/configuration does not meet zonal resilience requirements.
Explanation
Correct Answer
A:The recorded behavior follows from: Metadata-only disaster-recovery features were assumed to replicate message content as well. The appropriate mitigation would be: Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature. Verify with: Test endpoint alias or disaster-recovery failover and verify what configuration and data were retained.
Incorrect Answers
B:This cause would explain a different symptom: Single-zone database deployment becomes unavailable during a zonal outage. The mechanism for that event is: Zone redundancy was not enabled for an eligible database deployment. Here the stated symptom is: The new region lacks expected queued messages after an alias configuration failover. Its cause is: Metadata-only disaster-recovery features were assumed to replicate message content as well.
C:The proposed diagnosis fits another scenario: Client connection configuration bypasses the service's failover-group listener. It would typically be reflected by: Users remain connected to a decommissioned fixed-region SQL server hostname. The current evidence instead supports: Metadata-only disaster-recovery features were assumed to replicate message content as well.
D:The alternative weakness is: The messaging service tier/configuration does not meet zonal resilience requirements. Its associated failure is: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Neither explains the present observation: The new region lacks expected queued messages after an alias configuration failover. The direct cause here is: Metadata-only disaster-recovery features were assumed to replicate message content as well.
Question 660
Workload context: A business relies on Service Bus queues in two regions and needs to plan a regional failover without assuming all message payloads replicate by magic. The implemented remedy is: Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature. Which ongoing practice most specifically prevents recurrence of this failure: The new region lacks expected queued messages after an alias configuration failover.?
- Monitor queue depths and backend availability after namespace scaling.
- Monitor replication lag and exercise listener failover after major releases.
- Review the tier and region's zone support before database scaling or migration.
- Test recovery runbooks and document message loss/replay obligations for selected features.
Explanation
Correct Answer
D:The key follow-up control is: Test recovery runbooks and document message loss/replay obligations for selected features. It avoids recurrence of the scenario in which: The new region lacks expected queued messages after an alias configuration failover. It addresses: Metadata-only disaster-recovery features were assumed to replicate message content as well.
Incorrect Answers
A:The proposed control focuses on: The messaging service tier/configuration does not meet zonal resilience requirements. For the design in the question, recurrence comes from: Metadata-only disaster-recovery features were assumed to replicate message content as well. A precise prevention step is: Test recovery runbooks and document message loss/replay obligations for selected features.
B:That safeguard manages another risk: Client connection configuration bypasses the service's failover-group listener. Its scenario is: Users remain connected to a decommissioned fixed-region SQL server hostname. The present recurring risk is: Metadata-only disaster-recovery features were assumed to replicate message content as well. The proper ongoing control is: Test recovery runbooks and document message loss/replay obligations for selected features.
C:This is a reasonable safeguard for a different fault: Single-zone database deployment becomes unavailable during a zonal outage. That different mechanism is: Zone redundancy was not enabled for an eligible database deployment. The original incident here instead arises from: Metadata-only disaster-recovery features were assumed to replicate message content as well. The directly relevant safeguard is: Test recovery runbooks and document message loss/replay obligations for selected features.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests