Question 660
Workload context: A business relies on Service Bus queues in two regions and needs to plan a regional failover without assuming all message payloads replicate by magic. The implemented remedy is: Choose a supported Service Bus cross-region disaster-recovery strategy and explicitly account for message-data replication semantics of the selected feature. Which ongoing practice most specifically prevents recurrence of this failure: The new region lacks expected queued messages after an alias configuration failover.?
- Monitor queue depths and backend availability after namespace scaling.
- Monitor replication lag and exercise listener failover after major releases.
- Review the tier and region's zone support before database scaling or migration.
- Test recovery runbooks and document message loss/replay obligations for selected features.
Explanation
Correct Answer
D:The key follow-up control is: Test recovery runbooks and document message loss/replay obligations for selected features. It avoids recurrence of the scenario in which: The new region lacks expected queued messages after an alias configuration failover. It addresses: Metadata-only disaster-recovery features were assumed to replicate message content as well.
Incorrect Answers
A:The proposed control focuses on: The messaging service tier/configuration does not meet zonal resilience requirements. For the design in the question, recurrence comes from: Metadata-only disaster-recovery features were assumed to replicate message content as well. A precise prevention step is: Test recovery runbooks and document message loss/replay obligations for selected features.
B:That safeguard manages another risk: Client connection configuration bypasses the service's failover-group listener. Its scenario is: Users remain connected to a decommissioned fixed-region SQL server hostname. The present recurring risk is: Metadata-only disaster-recovery features were assumed to replicate message content as well. The proper ongoing control is: Test recovery runbooks and document message loss/replay obligations for selected features.
C:This is a reasonable safeguard for a different fault: Single-zone database deployment becomes unavailable during a zonal outage. That different mechanism is: Zone redundancy was not enabled for an eligible database deployment. The original incident here instead arises from: Metadata-only disaster-recovery features were assumed to replicate message content as well. The directly relevant safeguard is: Test recovery runbooks and document message loss/replay obligations for selected features.
Question 661
A solution architect is reviewing a workload: A high-volume telemetry service ingests events into Azure Event Hubs and must survive failures of infrastructure inside the same region. The observed incident is: A single producer instance stops permanently after its first broker connection fails. Which architecture choice most directly removes the identified weakness?
- Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR.
- Enable and design around Service Bus Premium availability zone resilience with redundant consumers.
- Enable the supported zone-redundant configuration for the Azure SQL tier and region.
- Choose an eligible Event Hubs service tier and available availability-zone behavior with appropriate client retry/partition handling.
Explanation
Correct Answer
D:This option addresses the actual design defect: The app lacks resilient producer/consumer behavior for a zone-resilient event stream. The correction is: Choose an eligible Event Hubs service tier and available availability-zone behavior with appropriate client retry/partition handling. Confirm the outcome with: Stress an event producer during a transient zone incident and confirm reliable reconnect and consumer offset recovery.
Incorrect Answers
A:That design instead addresses another observed condition: Routine host outages cause long interruptions while region recovery replication remains healthy. Its technical cause is: Disaster recovery orchestration does not substitute for continuous local high availability. The current workload exhibits: A single producer instance stops permanently after its first broker connection fails. Its targeted remedy is: Choose an eligible Event Hubs service tier and available availability-zone behavior with appropriate client retry/partition handling.
B:This choice mitigates an alternative scenario, where: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. The underlying issue there is: The messaging service tier/configuration does not meet zonal resilience requirements. Here the root issue is: The app lacks resilient producer/consumer behavior for a zone-resilient event stream. Choose the corresponding action: Choose an eligible Event Hubs service tier and available availability-zone behavior with appropriate client retry/partition handling.
C:The option belongs to a different failure mechanism: Zone redundancy was not enabled for an eligible database deployment. That situation exhibits: Single-zone database deployment becomes unavailable during a zonal outage. For the stated case, the remedy is: Choose an eligible Event Hubs service tier and available availability-zone behavior with appropriate client retry/partition handling.
Question 662
An architect proposes this change: Choose an eligible Event Hubs service tier and available availability-zone behavior with appropriate client retry/partition handling. The workload context is: A high-volume telemetry service ingests events into Azure Event Hubs and must survive failures of infrastructure inside the same region. Which evidence would most directly validate the change?
- Validate zone redundancy setting and failover behavior under the service's supported test methods.
- Stress an event producer during a transient zone incident and confirm reliable reconnect and consumer offset recovery.
- Disable a processing node or zone in tests and confirm queues and receivers remain serviceable within the regional SLA.
- Simulate a host failure and verify service continues without manual recovery orchestration.
Explanation
Correct Answer
B:The acceptance test is specific: Stress an event producer during a transient zone incident and confirm reliable reconnect and consumer offset recovery. Its purpose is to establish that the proposed architecture works: Choose an eligible Event Hubs service tier and available availability-zone behavior with appropriate client retry/partition handling.
Incorrect Answers
A:This check validates a different workload: Validate zone redundancy setting and failover behavior under the service's supported test methods. Its associated design is: Enable the supported zone-redundant configuration for the Azure SQL tier and region. The required acceptance test here is: Stress an event producer during a transient zone incident and confirm reliable reconnect and consumer offset recovery.
C:The alternative test targets: Enable and design around Service Bus Premium availability zone resilience with redundant consumers. The scenario's actual proposed remedy is: Choose an eligible Event Hubs service tier and available availability-zone behavior with appropriate client retry/partition handling. Verify that one by: Stress an event producer during a transient zone incident and confirm reliable reconnect and consumer offset recovery.
D:This check validates a different workload: Simulate a host failure and verify service continues without manual recovery orchestration. Its associated design is: Deploy application-level high availability or availability-zone/VM redundancy for routine failures, with ASR reserved for DR. The required acceptance test here is: Stress an event producer during a transient zone incident and confirm reliable reconnect and consumer offset recovery.
Question 663
During architecture troubleshooting, a team reports: A single producer instance stops permanently after its first broker connection fails. Context: A high-volume telemetry service ingests events into Azure Event Hubs and must survive failures of infrastructure inside the same region. Which underlying design mistake explains the observed behavior most precisely?
- Disaster recovery orchestration does not substitute for continuous local high availability.
- Zone redundancy was not enabled for an eligible database deployment.
- The messaging service tier/configuration does not meet zonal resilience requirements.
- The app lacks resilient producer/consumer behavior for a zone-resilient event stream.
Explanation
Correct Answer
D:The incident is explained by: The app lacks resilient producer/consumer behavior for a zone-resilient event stream. The reported symptom is: A single producer instance stops permanently after its first broker connection fails. The corresponding design fix is: Choose an eligible Event Hubs service tier and available availability-zone behavior with appropriate client retry/partition handling.
Incorrect Answers
A:This cause would explain a different symptom: Routine host outages cause long interruptions while region recovery replication remains healthy. The mechanism for that event is: Disaster recovery orchestration does not substitute for continuous local high availability. Here the stated symptom is: A single producer instance stops permanently after its first broker connection fails. Its cause is: The app lacks resilient producer/consumer behavior for a zone-resilient event stream.
B:The proposed diagnosis fits another scenario: Zone redundancy was not enabled for an eligible database deployment. It would typically be reflected by: Single-zone database deployment becomes unavailable during a zonal outage. The current evidence instead supports: The app lacks resilient producer/consumer behavior for a zone-resilient event stream.
C:The alternative weakness is: The messaging service tier/configuration does not meet zonal resilience requirements. Its associated failure is: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. Neither explains the present observation: A single producer instance stops permanently after its first broker connection fails. The direct cause here is: The app lacks resilient producer/consumer behavior for a zone-resilient event stream.
Question 664
The design change is: Choose an eligible Event Hubs service tier and available availability-zone behavior with appropriate client retry/partition handling. The original failure was: A single producer instance stops permanently after its first broker connection fails. Which ongoing control best prevents recurrence of the same root cause?
- Monitor queue depths and backend availability after namespace scaling.
- Review the tier and region's zone support before database scaling or migration.
- Test routine fault tolerance independently of regional DR recovery plans.
- Monitor producer errors, consumer checkpoints and regional support for availability zones.
Explanation
Correct Answer
D:The preventive control is: Monitor producer errors, consumer checkpoints and regional support for availability zones. It targets the earlier cause: The app lacks resilient producer/consumer behavior for a zone-resilient event stream. Confirm ongoing effectiveness by: Stress an event producer during a transient zone incident and confirm reliable reconnect and consumer offset recovery.
Incorrect Answers
A:That safeguard manages another risk: The messaging service tier/configuration does not meet zonal resilience requirements. Its scenario is: A single-zone dependent messaging tier becomes unavailable during zonal maintenance. The present recurring risk is: The app lacks resilient producer/consumer behavior for a zone-resilient event stream. The proper ongoing control is: Monitor producer errors, consumer checkpoints and regional support for availability zones.
B:This is a reasonable safeguard for a different fault: Single-zone database deployment becomes unavailable during a zonal outage. That different mechanism is: Zone redundancy was not enabled for an eligible database deployment. The original incident here instead arises from: The app lacks resilient producer/consumer behavior for a zone-resilient event stream. The directly relevant safeguard is: Monitor producer errors, consumer checkpoints and regional support for availability zones.
C:The proposed control focuses on: Disaster recovery orchestration does not substitute for continuous local high availability. For the design in the question, recurrence comes from: The app lacks resilient producer/consumer behavior for a zone-resilient event stream. A precise prevention step is: Monitor producer errors, consumer checkpoints and regional support for availability zones.
Question 665
A design workshop has this requirement: A MySQL Flexible Server already has a healthy managed HA standby, but a business application stays offline long after an automatic primary failover because connection sessions break. Operators currently observe: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. Select the ONE design remedy that best addresses the root cause.
- Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication.
- Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment.
- Choose an eligible Event Hubs service tier and available availability-zone behavior with appropriate client retry/partition handling.
- Enable supported zone-redundant high availability with managed standby and compatible compute/region selection.
Explanation
Correct Answer
B:The targeted implementation is: Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment. The problem is not generic resource availability: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. Verify the result by: Trigger a controlled failover and confirm database clients reconnect and restore successful transactions without manually replacing server IPs.
Incorrect Answers
A:This choice mitigates an alternative scenario, where: Users remain connected to a decommissioned fixed-region SQL server hostname. The underlying issue there is: Client connection configuration bypasses the service's failover-group listener. Here the root issue is: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. Choose the corresponding action: Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment.
C:That design instead addresses another observed condition: A single producer instance stops permanently after its first broker connection fails. Its technical cause is: The app lacks resilient producer/consumer behavior for a zone-resilient event stream. The current workload exhibits: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. Its targeted remedy is: Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment.
D:This choice mitigates an alternative scenario, where: The server stays unavailable while a single-zone host is repaired. The underlying issue there is: No eligible zone-redundant PostgreSQL standby was provisioned. Here the root issue is: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. Choose the corresponding action: Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment.
Question 666
The planned architecture is: Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment. Workload context: A MySQL Flexible Server already has a healthy managed HA standby, but a business application stays offline long after an automatic primary failover because connection sessions break. Which acceptance test demonstrates that the required behavior works?
- Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
- Inspect HA role, observe reconnect after a controlled test and validate data consistency.
- Trigger a controlled failover and confirm database clients reconnect and restore successful transactions without manually replacing server IPs.
- Stress an event producer during a transient zone incident and confirm reliable reconnect and consumer offset recovery.
Explanation
Correct Answer
C:This observation directly verifies the intended design: Trigger a controlled failover and confirm database clients reconnect and restore successful transactions without manually replacing server IPs. The architecture being tested is: Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment. The original symptom was: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted.
Incorrect Answers
A:That observation pertains to a separate failure: Users remain connected to a decommissioned fixed-region SQL server hostname. Its cause is: Client connection configuration bypasses the service's failover-group listener. It does not confirm the result of this design. The direct proof would be: Trigger a controlled failover and confirm database clients reconnect and restore successful transactions without manually replacing server IPs.
B:The alternative test targets: Enable supported zone-redundant high availability with managed standby and compatible compute/region selection. The scenario's actual proposed remedy is: Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment. Verify that one by: Trigger a controlled failover and confirm database clients reconnect and restore successful transactions without manually replacing server IPs.
D:That observation pertains to a separate failure: A single producer instance stops permanently after its first broker connection fails. Its cause is: The app lacks resilient producer/consumer behavior for a zone-resilient event stream. It does not confirm the result of this design. The direct proof would be: Trigger a controlled failover and confirm database clients reconnect and restore successful transactions without manually replacing server IPs.
Question 667
The customer states: A MySQL Flexible Server already has a healthy managed HA standby, but a business application stays offline long after an automatic primary failover because connection sessions break. An incident reveals: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. What cause best accounts for this evidence?
- Client connection configuration bypasses the service's failover-group listener.
- The app lacks resilient producer/consumer behavior for a zone-resilient event stream.
- The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover.
- No eligible zone-redundant PostgreSQL standby was provisioned.
Explanation
Correct Answer
C:The incident is explained by: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. The reported symptom is: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. The corresponding design fix is: Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment.
Incorrect Answers
A:The proposed diagnosis fits another scenario: Client connection configuration bypasses the service's failover-group listener. It would typically be reflected by: Users remain connected to a decommissioned fixed-region SQL server hostname. The current evidence instead supports: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover.
B:The alternative weakness is: The app lacks resilient producer/consumer behavior for a zone-resilient event stream. Its associated failure is: A single producer instance stops permanently after its first broker connection fails. Neither explains the present observation: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted. The direct cause here is: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover.
D:The proposed diagnosis fits another scenario: No eligible zone-redundant PostgreSQL standby was provisioned. It would typically be reflected by: The server stays unavailable while a single-zone host is repaired. The current evidence instead supports: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover.
Question 668
Workload context: A MySQL Flexible Server already has a healthy managed HA standby, but a business application stays offline long after an automatic primary failover because connection sessions break. The implemented remedy is: Implement application-side retry and reconnect using the stable MySQL flexible-server hostname with suitable timeouts/backoff, while keeping the managed HA deployment. Which ongoing practice most specifically prevents recurrence of this failure: A MySQL failover finishes but the API continues failing with stale database connections until every application instance is restarted.?
- Include client reconnection timing and error-budget recovery checks in planned MySQL high-availability drills.
- Monitor replication lag and exercise listener failover after major releases.
- Monitor standby health and application retries after engine maintenance.
- Monitor producer errors, consumer checkpoints and regional support for availability zones.
Explanation
Correct Answer
A:This is an ongoing protection specific to the fault: Include client reconnection timing and error-budget recovery checks in planned MySQL high-availability drills. The recurrence risk is: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. It should be checked using: Trigger a controlled failover and confirm database clients reconnect and restore successful transactions without manually replacing server IPs.
Incorrect Answers
B:The proposed control focuses on: Client connection configuration bypasses the service's failover-group listener. For the design in the question, recurrence comes from: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. A precise prevention step is: Include client reconnection timing and error-budget recovery checks in planned MySQL high-availability drills.
C:That safeguard manages another risk: No eligible zone-redundant PostgreSQL standby was provisioned. Its scenario is: The server stays unavailable while a single-zone host is repaired. The present recurring risk is: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. The proper ongoing control is: Include client reconnection timing and error-budget recovery checks in planned MySQL high-availability drills.
D:This is a reasonable safeguard for a different fault: A single producer instance stops permanently after its first broker connection fails. That different mechanism is: The app lacks resilient producer/consumer behavior for a zone-resilient event stream. The original incident here instead arises from: The client connection pool lacks robust reconnect and DNS refresh behavior after a managed database failover. The directly relevant safeguard is: Include client reconnection timing and error-budget recovery checks in planned MySQL high-availability drills.
Question 669
A solution architect is reviewing a workload: A two-region application needs resilient login and DNS dependencies as well as redundant web app servers. The observed incident is: The secondary web app serves static pages but authentication and configuration retrieval fail. Which architecture choice most directly removes the identified weakness?
- Use Azure Front Door with health-based global endpoint routing and suitable backend origin groups.
- Use Azure Application Gateway v2 with supported zone redundancy and WAF policy, plus healthy backend pools.
- Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region.
- Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication.
Explanation
Correct Answer
C:The evidence (The secondary web app serves static pages but authentication and configuration retrieval fail.) identifies the following cause: Regional failover planning omitted shared identity/configuration dependencies and allowed network paths. The design that removes it is: Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region. The acceptance check is: Deactivate primary DNS/routing and verify secondary web login and Key Vault configuration still function.
Incorrect Answers
A:The option belongs to a different failure mechanism: There is no global HTTP edge entry point with origin health-based routing. That situation exhibits: Regional failure leaves global browsers stuck on the dead web endpoint. For the stated case, the remedy is: Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region.
B:That design instead addresses another observed condition: A single self-managed reverse-proxy VM fails and all regional web routes stop. Its technical cause is: L7 regional routing was deployed without managed gateway zone resilience. The current workload exhibits: The secondary web app serves static pages but authentication and configuration retrieval fail. Its targeted remedy is: Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region.
D:The option belongs to a different failure mechanism: Client connection configuration bypasses the service's failover-group listener. That situation exhibits: Users remain connected to a decommissioned fixed-region SQL server hostname. For the stated case, the remedy is: Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region.
Question 670
An architect proposes this change: Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region. The workload context is: A two-region application needs resilient login and DNS dependencies as well as redundant web app servers. Which evidence would most directly validate the change?
- Verify connections follow the failover-group listener after planned failover, with read-only workloads on intended replicas.
- Disable one regional origin and verify global clients are routed to a healthy origin over HTTPS.
- Test URI-path routing and zone outage behavior while WAF inspects requests.
- Deactivate primary DNS/routing and verify secondary web login and Key Vault configuration still function.
Explanation
Correct Answer
D:The decisive evidence is: Deactivate primary DNS/routing and verify secondary web login and Key Vault configuration still function. This measures the mechanism of the planned change, not an unrelated Azure service: Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region.
Incorrect Answers
A:The alternative test targets: Use Azure SQL failover group endpoints and supported read-only listener routing with region-appropriate replication. The scenario's actual proposed remedy is: Design multi-region entry routing, compatible identity dependencies and replicated application configuration/secrets for the failover region. Verify that one by: Deactivate primary DNS/routing and verify secondary web login and Key Vault configuration still function.
B:This check validates a different workload: Disable one regional origin and verify global clients are routed to a healthy origin over HTTPS. Its associated design is: Use Azure Front Door with health-based global endpoint routing and suitable backend origin groups. The required acceptance test here is: Deactivate primary DNS/routing and verify secondary web login and Key Vault configuration still function.
C:That observation pertains to a separate failure: A single self-managed reverse-proxy VM fails and all regional web routes stop. Its cause is: L7 regional routing was deployed without managed gateway zone resilience. It does not confirm the result of this design. The direct proof would be: Deactivate primary DNS/routing and verify secondary web login and Key Vault configuration still function.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests