Question 680
A design review identifies: A stateless web API runs on identical Windows VMs and must automatically scale out when CPU remains above a target. The failure is: The API exhausts capacity because two manually provisioned VMs never scale. Select TWO distinct decisions that together provide the immediate technical solution AND an ongoing prevention control. A verification-only step does not replace either responsibility.
- Review autoscale threshold, scale-in rules and image version before peak seasons.
- Review VM image patching and guest configuration when changing OS versions.
- Choose Azure App Service with suitable plan and autoscale features for the supported web runtime.
- Select eligible GPU VM sizes or supported GPU-backed managed compute with compatible drivers and allocation quotas.
- Deploy Azure Virtual Machine Scale Sets with a suitable autoscale rule, image and load-balancing integration.
Explanation
Correct Answers
A:This is an ongoing protection specific to the fault: Review autoscale threshold, scale-in rules and image version before peak seasons. The recurrence risk is: Capacity management lacks automated VM instance scaling and health integration. It should be checked using: Apply controlled CPU load and verify new scale-set instances join the healthy serving pool.
E:The targeted implementation is: Deploy Azure Virtual Machine Scale Sets with a suitable autoscale rule, image and load-balancing integration. The problem is not generic resource availability: Capacity management lacks automated VM instance scaling and health integration. Verify the result by: Apply controlled CPU load and verify new scale-set instances join the healthy serving pool.
Incorrect Answers
B:The proposed control focuses on: The chosen hosting abstraction does not expose the operating system features the app requires. For the design in the question, recurrence comes from: Capacity management lacks automated VM instance scaling and health integration. A precise prevention step is: Review autoscale threshold, scale-in rules and image version before peak seasons.
C:That design instead addresses another observed condition: The team operates unnecessary webserver VMs and manually patches them for routine hosting. Its technical cause is: A full IaaS VM hosting model was retained though managed App Service meets the constraints. The current workload exhibits: The API exhausts capacity because two manually provisioned VMs never scale. Its targeted remedy is: Deploy Azure Virtual Machine Scale Sets with a suitable autoscale rule, image and load-balancing integration.
D:This choice mitigates an alternative scenario, where: Inference falls below performance target on CPU-only VMs. The underlying issue there is: Compute selection does not meet model accelerator requirements. Here the root issue is: Capacity management lacks automated VM instance scaling and health integration. Choose the corresponding action: Deploy Azure Virtual Machine Scale Sets with a suitable autoscale rule, image and load-balancing integration.
Question 681
A design workshop has this requirement: A medical image processing VM tier must remain reachable when an Azure availability zone becomes unavailable. Operators currently observe: All medical analysis workers stop when their single zone fails. Select the ONE design remedy that best addresses the root cause.
- Deploy Azure Virtual Machine Scale Sets with a suitable autoscale rule, image and load-balancing integration.
- Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload.
- Select eligible GPU VM sizes or supported GPU-backed managed compute with compatible drivers and allocation quotas.
- Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies.
Explanation
Correct Answer
D:The targeted implementation is: Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies. The problem is not generic resource availability: VM placement lacks zone-level failure-domain diversity. Verify the result by: Simulate zonal unavailability and confirm remaining instances handle client requests.
Incorrect Answers
A:The option belongs to a different failure mechanism: Capacity management lacks automated VM instance scaling and health integration. That situation exhibits: The API exhausts capacity because two manually provisioned VMs never scale. For the stated case, the remedy is: Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies.
B:That design instead addresses another observed condition: Highly sensitive data are processed without the required isolation boundary for memory in use. Its technical cause is: Ordinary VM encryption at rest alone does not provide the required in-use protection. The current workload exhibits: All medical analysis workers stop when their single zone fails. Its targeted remedy is: Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies.
C:This choice mitigates an alternative scenario, where: Inference falls below performance target on CPU-only VMs. The underlying issue there is: Compute selection does not meet model accelerator requirements. Here the root issue is: VM placement lacks zone-level failure-domain diversity. Choose the corresponding action: Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies.
Question 682
The planned architecture is: Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies. Workload context: A medical image processing VM tier must remain reachable when an Azure availability zone becomes unavailable. Which acceptance test demonstrates that the required behavior works?
- Simulate zonal unavailability and confirm remaining instances handle client requests.
- Apply controlled CPU load and verify new scale-set instances join the healthy serving pool.
- Benchmark inference throughput and verify GPU device use and memory under load.
- Verify eligible confidential-computing capability and attestation expectations in a test workload.
Explanation
Correct Answer
A:The decisive evidence is: Simulate zonal unavailability and confirm remaining instances handle client requests. This measures the mechanism of the planned change, not an unrelated Azure service: Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies.
Incorrect Answers
B:This check validates a different workload: Apply controlled CPU load and verify new scale-set instances join the healthy serving pool. Its associated design is: Deploy Azure Virtual Machine Scale Sets with a suitable autoscale rule, image and load-balancing integration. The required acceptance test here is: Simulate zonal unavailability and confirm remaining instances handle client requests.
C:That observation pertains to a separate failure: Inference falls below performance target on CPU-only VMs. Its cause is: Compute selection does not meet model accelerator requirements. It does not confirm the result of this design. The direct proof would be: Simulate zonal unavailability and confirm remaining instances handle client requests.
D:The alternative test targets: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload. The scenario's actual proposed remedy is: Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies. Verify that one by: Simulate zonal unavailability and confirm remaining instances handle client requests.
Question 683
The customer states: A medical image processing VM tier must remain reachable when an Azure availability zone becomes unavailable. An incident reveals: All medical analysis workers stop when their single zone fails. What cause best accounts for this evidence?
- Capacity management lacks automated VM instance scaling and health integration.
- Ordinary VM encryption at rest alone does not provide the required in-use protection.
- VM placement lacks zone-level failure-domain diversity.
- Compute selection does not meet model accelerator requirements.
Explanation
Correct Answer
C:This is the failure mechanism rather than an incidental symptom: VM placement lacks zone-level failure-domain diversity. It accounts for: All medical analysis workers stop when their single zone fails. The architectural repair is: Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies.
Incorrect Answers
A:The alternative weakness is: Capacity management lacks automated VM instance scaling and health integration. Its associated failure is: The API exhausts capacity because two manually provisioned VMs never scale. Neither explains the present observation: All medical analysis workers stop when their single zone fails. The direct cause here is: VM placement lacks zone-level failure-domain diversity.
B:This cause would explain a different symptom: Highly sensitive data are processed without the required isolation boundary for memory in use. The mechanism for that event is: Ordinary VM encryption at rest alone does not provide the required in-use protection. Here the stated symptom is: All medical analysis workers stop when their single zone fails. Its cause is: VM placement lacks zone-level failure-domain diversity.
D:The alternative weakness is: Compute selection does not meet model accelerator requirements. Its associated failure is: Inference falls below performance target on CPU-only VMs. Neither explains the present observation: All medical analysis workers stop when their single zone fails. The direct cause here is: VM placement lacks zone-level failure-domain diversity.
Question 684
Workload context: A medical image processing VM tier must remain reachable when an Azure availability zone becomes unavailable. The implemented remedy is: Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies. Which ongoing practice most specifically prevents recurrence of this failure: All medical analysis workers stop when their single zone fails.?
- Track per-zone quota/capacity and test readiness of zones added after scale-out.
- Audit GPU driver compatibility and regional SKU quota during scaling.
- Track confidential compute SKU support and attestation policy after platform upgrades.
- Review autoscale threshold, scale-in rules and image version before peak seasons.
Explanation
Correct Answer
A:The key follow-up control is: Track per-zone quota/capacity and test readiness of zones added after scale-out. It avoids recurrence of the scenario in which: All medical analysis workers stop when their single zone fails. It addresses: VM placement lacks zone-level failure-domain diversity.
Incorrect Answers
B:That safeguard manages another risk: Compute selection does not meet model accelerator requirements. Its scenario is: Inference falls below performance target on CPU-only VMs. The present recurring risk is: VM placement lacks zone-level failure-domain diversity. The proper ongoing control is: Track per-zone quota/capacity and test readiness of zones added after scale-out.
C:This is a reasonable safeguard for a different fault: Highly sensitive data are processed without the required isolation boundary for memory in use. That different mechanism is: Ordinary VM encryption at rest alone does not provide the required in-use protection. The original incident here instead arises from: VM placement lacks zone-level failure-domain diversity. The directly relevant safeguard is: Track per-zone quota/capacity and test readiness of zones added after scale-out.
D:The proposed control focuses on: Capacity management lacks automated VM instance scaling and health integration. For the design in the question, recurrence comes from: VM placement lacks zone-level failure-domain diversity. A precise prevention step is: Track per-zone quota/capacity and test readiness of zones added after scale-out.
Question 685
A solution architect is reviewing a workload: A licensed application needs its dedicated physical Azure host placement for licensing and isolation obligations. The observed incident is: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint. Which architecture choice most directly removes the identified weakness?
- Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload.
- Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility.
- Use an appropriate VM temporary/local scratch disk only for disposable files and store durable results on managed disks or services.
- Select Azure Virtual Machines with appropriate VM size, networking and disk configuration rather than a restricted PaaS host.
Explanation
Correct Answer
B:The evidence (A shared VM host does not satisfy the vendor's dedicated-host licensing constraint.) identifies the following cause: The architecture does not provide the required customer-controlled physical-host tenancy. The design that removes it is: Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility. The acceptance check is: Inspect assigned VM physical host placement and verify the licensed workload runs on the dedicated host.
Incorrect Answers
A:That design instead addresses another observed condition: Highly sensitive data are processed without the required isolation boundary for memory in use. Its technical cause is: Ordinary VM encryption at rest alone does not provide the required in-use protection. The current workload exhibits: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint. Its targeted remedy is: Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility.
C:The option belongs to a different failure mechanism: Critical state was stored on nonpersistent temporary local storage. That situation exhibits: The application loses business files after a VM host maintenance event. For the stated case, the remedy is: Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility.
D:That design instead addresses another observed condition: The app cannot install its required host driver on a managed web platform. Its technical cause is: The chosen hosting abstraction does not expose the operating system features the app requires. The current workload exhibits: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint. Its targeted remedy is: Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility.
Question 686
An architect proposes this change: Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility. The workload context is: A licensed application needs its dedicated physical Azure host placement for licensing and isolation obligations. Which evidence would most directly validate the change?
- Verify eligible confidential-computing capability and attestation expectations in a test workload.
- Install the driver on a test VM and validate service startup and OS-level operations.
- Redeploy the worker and confirm business results remain while disposable scratch may disappear.
- Inspect assigned VM physical host placement and verify the licensed workload runs on the dedicated host.
Explanation
Correct Answer
D:This observation directly verifies the intended design: Inspect assigned VM physical host placement and verify the licensed workload runs on the dedicated host. The architecture being tested is: Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility. The original symptom was: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint.
Incorrect Answers
A:This check validates a different workload: Verify eligible confidential-computing capability and attestation expectations in a test workload. Its associated design is: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload. The required acceptance test here is: Inspect assigned VM physical host placement and verify the licensed workload runs on the dedicated host.
B:That observation pertains to a separate failure: The app cannot install its required host driver on a managed web platform. Its cause is: The chosen hosting abstraction does not expose the operating system features the app requires. It does not confirm the result of this design. The direct proof would be: Inspect assigned VM physical host placement and verify the licensed workload runs on the dedicated host.
C:The alternative test targets: Use an appropriate VM temporary/local scratch disk only for disposable files and store durable results on managed disks or services. The scenario's actual proposed remedy is: Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility. Verify that one by: Inspect assigned VM physical host placement and verify the licensed workload runs on the dedicated host.
Question 687
During architecture troubleshooting, a team reports: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint. Context: A licensed application needs its dedicated physical Azure host placement for licensing and isolation obligations. Which underlying design mistake explains the observed behavior most precisely?
- The architecture does not provide the required customer-controlled physical-host tenancy.
- The chosen hosting abstraction does not expose the operating system features the app requires.
- Ordinary VM encryption at rest alone does not provide the required in-use protection.
- Critical state was stored on nonpersistent temporary local storage.
Explanation
Correct Answer
A:The incident is explained by: The architecture does not provide the required customer-controlled physical-host tenancy. The reported symptom is: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint. The corresponding design fix is: Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility.
Incorrect Answers
B:The proposed diagnosis fits another scenario: The chosen hosting abstraction does not expose the operating system features the app requires. It would typically be reflected by: The app cannot install its required host driver on a managed web platform. The current evidence instead supports: The architecture does not provide the required customer-controlled physical-host tenancy.
C:The alternative weakness is: Ordinary VM encryption at rest alone does not provide the required in-use protection. Its associated failure is: Highly sensitive data are processed without the required isolation boundary for memory in use. Neither explains the present observation: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint. The direct cause here is: The architecture does not provide the required customer-controlled physical-host tenancy.
D:This cause would explain a different symptom: The application loses business files after a VM host maintenance event. The mechanism for that event is: Critical state was stored on nonpersistent temporary local storage. Here the stated symptom is: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint. Its cause is: The architecture does not provide the required customer-controlled physical-host tenancy.
Question 688
The design change is: Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility. The original failure was: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint. Which ongoing control best prevents recurrence of the same root cause?
- Track confidential compute SKU support and attestation policy after platform upgrades.
- Reassess host capacity, failure recovery and license inventory during renewal.
- Audit scratch versus persistent paths in application configuration before image changes.
- Review VM image patching and guest configuration when changing OS versions.
Explanation
Correct Answer
B:This is an ongoing protection specific to the fault: Reassess host capacity, failure recovery and license inventory during renewal. The recurrence risk is: The architecture does not provide the required customer-controlled physical-host tenancy. It should be checked using: Inspect assigned VM physical host placement and verify the licensed workload runs on the dedicated host.
Incorrect Answers
A:That safeguard manages another risk: Ordinary VM encryption at rest alone does not provide the required in-use protection. Its scenario is: Highly sensitive data are processed without the required isolation boundary for memory in use. The present recurring risk is: The architecture does not provide the required customer-controlled physical-host tenancy. The proper ongoing control is: Reassess host capacity, failure recovery and license inventory during renewal.
C:The proposed control focuses on: Critical state was stored on nonpersistent temporary local storage. For the design in the question, recurrence comes from: The architecture does not provide the required customer-controlled physical-host tenancy. A precise prevention step is: Reassess host capacity, failure recovery and license inventory during renewal.
D:That safeguard manages another risk: The chosen hosting abstraction does not expose the operating system features the app requires. Its scenario is: The app cannot install its required host driver on a managed web platform. The present recurring risk is: The architecture does not provide the required customer-controlled physical-host tenancy. The proper ongoing control is: Reassess host capacity, failure recovery and license inventory during renewal.
Question 689
A design workshop has this requirement: A research rendering pipeline can tolerate interruption and restart individual tasks, with a strict low-cost compute budget. Operators currently observe: Rendering jobs stop permanently when discounted spot capacity is reclaimed. Select the ONE design remedy that best addresses the root cause.
- Use Azure Spot Virtual Machines with interruption-tolerant queues and checkpointing when suitable.
- Select Azure Virtual Machines with appropriate VM size, networking and disk configuration rather than a restricted PaaS host.
- Use Azure Batch with pools, job/task scheduling and autoscaling for parallel batch workloads.
- Use Azure VMware Solution if supported and economically justified for the required VMware operational model.
Explanation
Correct Answer
A:The evidence (Rendering jobs stop permanently when discounted spot capacity is reclaimed.) identifies the following cause: The workload lacks eviction handling and assumes spot capacity is guaranteed. The design that removes it is: Use Azure Spot Virtual Machines with interruption-tolerant queues and checkpointing when suitable. The acceptance check is: Simulate task eviction and verify unfinished work retries or resumes without data corruption.
Incorrect Answers
B:The option belongs to a different failure mechanism: The chosen hosting abstraction does not expose the operating system features the app requires. That situation exhibits: The app cannot install its required host driver on a managed web platform. For the stated case, the remedy is: Use Azure Spot Virtual Machines with interruption-tolerant queues and checkpointing when suitable.
C:That design instead addresses another observed condition: A single VM serializes thousands of independent jobs and misses the daily SLA. Its technical cause is: The workload lacks managed parallel task scheduling and scalable compute pools. The current workload exhibits: Rendering jobs stop permanently when discounted spot capacity is reclaimed. Its targeted remedy is: Use Azure Spot Virtual Machines with interruption-tolerant queues and checkpointing when suitable.
D:This choice mitigates an alternative scenario, where: The proposed migration requires redesigning all VMware operations that the owner must retain initially. The underlying issue there is: A replacement IaaS platform was chosen despite strict VMware compatibility requirements. Here the root issue is: The workload lacks eviction handling and assumes spot capacity is guaranteed. Choose the corresponding action: Use Azure Spot Virtual Machines with interruption-tolerant queues and checkpointing when suitable.
Question 690
The planned architecture is: Use Azure Spot Virtual Machines with interruption-tolerant queues and checkpointing when suitable. Workload context: A research rendering pipeline can tolerate interruption and restart individual tasks, with a strict low-cost compute budget. Which acceptance test demonstrates that the required behavior works?
- Migrate a pilot VM and validate vSphere management, network extension and application connectivity.
- Submit a representative batch and check task distribution, failures and output aggregation.
- Install the driver on a test VM and validate service startup and OS-level operations.
- Simulate task eviction and verify unfinished work retries or resumes without data corruption.
Explanation
Correct Answer
D:The acceptance test is specific: Simulate task eviction and verify unfinished work retries or resumes without data corruption. Its purpose is to establish that the proposed architecture works: Use Azure Spot Virtual Machines with interruption-tolerant queues and checkpointing when suitable.
Incorrect Answers
A:That observation pertains to a separate failure: The proposed migration requires redesigning all VMware operations that the owner must retain initially. Its cause is: A replacement IaaS platform was chosen despite strict VMware compatibility requirements. It does not confirm the result of this design. The direct proof would be: Simulate task eviction and verify unfinished work retries or resumes without data corruption.
B:The alternative test targets: Use Azure Batch with pools, job/task scheduling and autoscaling for parallel batch workloads. The scenario's actual proposed remedy is: Use Azure Spot Virtual Machines with interruption-tolerant queues and checkpointing when suitable. Verify that one by: Simulate task eviction and verify unfinished work retries or resumes without data corruption.
C:This check validates a different workload: Install the driver on a test VM and validate service startup and OS-level operations. Its associated design is: Select Azure Virtual Machines with appropriate VM size, networking and disk configuration rather than a restricted PaaS host. The required acceptance test here is: Simulate task eviction and verify unfinished work retries or resumes without data corruption.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests