Question 710
An architect proposes this change: Use Azure Functions with an appropriate trigger and hosting plan that meets latency and network constraints. The workload context is: A service processes BlobCreated events as small functions; idle intervals are long and no persistent application server is required. Which evidence would most directly validate the change?
- Redeploy the worker and confirm business results remain while disposable scratch may disappear.
- Deploy the portal and verify managed HTTPS, health checks and horizontal scaling.
- Submit a representative batch and check task distribution, failures and output aggregation.
- Upload a test blob and verify one idempotent execution records the expected result.
Explanation
Correct Answer
D:This observation directly verifies the intended design: Upload a test blob and verify one idempotent execution records the expected result. The architecture being tested is: Use Azure Functions with an appropriate trigger and hosting plan that meets latency and network constraints. The original symptom was: An always-on VM is maintained solely to poll object storage for new files.
Incorrect Answers
A:This check validates a different workload: Redeploy the worker and confirm business results remain while disposable scratch may disappear. Its associated design is: Use an appropriate VM temporary/local scratch disk only for disposable files and store durable results on managed disks or services. The required acceptance test here is: Upload a test blob and verify one idempotent execution records the expected result.
B:That observation pertains to a separate failure: The team operates unnecessary webserver VMs and manually patches them for routine hosting. Its cause is: A full IaaS VM hosting model was retained though managed App Service meets the constraints. It does not confirm the result of this design. The direct proof would be: Upload a test blob and verify one idempotent execution records the expected result.
C:The alternative test targets: Use Azure Batch with pools, job/task scheduling and autoscaling for parallel batch workloads. The scenario's actual proposed remedy is: Use Azure Functions with an appropriate trigger and hosting plan that meets latency and network constraints. Verify that one by: Upload a test blob and verify one idempotent execution records the expected result.
Question 711
During architecture troubleshooting, a team reports: An always-on VM is maintained solely to poll object storage for new files. Context: A service processes BlobCreated events as small functions; idle intervals are long and no persistent application server is required. Which underlying design mistake explains the observed behavior most precisely?
- Critical state was stored on nonpersistent temporary local storage.
- The compute model does not use event-driven managed function triggers.
- A full IaaS VM hosting model was retained though managed App Service meets the constraints.
- The workload lacks managed parallel task scheduling and scalable compute pools.
Explanation
Correct Answer
B:This is the failure mechanism rather than an incidental symptom: The compute model does not use event-driven managed function triggers. It accounts for: An always-on VM is maintained solely to poll object storage for new files. The architectural repair is: Use Azure Functions with an appropriate trigger and hosting plan that meets latency and network constraints.
Incorrect Answers
A:This cause would explain a different symptom: The application loses business files after a VM host maintenance event. The mechanism for that event is: Critical state was stored on nonpersistent temporary local storage. Here the stated symptom is: An always-on VM is maintained solely to poll object storage for new files. Its cause is: The compute model does not use event-driven managed function triggers.
C:The alternative weakness is: A full IaaS VM hosting model was retained though managed App Service meets the constraints. Its associated failure is: The team operates unnecessary webserver VMs and manually patches them for routine hosting. Neither explains the present observation: An always-on VM is maintained solely to poll object storage for new files. The direct cause here is: The compute model does not use event-driven managed function triggers.
D:This cause would explain a different symptom: A single VM serializes thousands of independent jobs and misses the daily SLA. The mechanism for that event is: The workload lacks managed parallel task scheduling and scalable compute pools. Here the stated symptom is: An always-on VM is maintained solely to poll object storage for new files. Its cause is: The compute model does not use event-driven managed function triggers.
Question 712
The design change is: Use Azure Functions with an appropriate trigger and hosting plan that meets latency and network constraints. The original failure was: An always-on VM is maintained solely to poll object storage for new files. Which ongoing control best prevents recurrence of the same root cause?
- Review function retry, idempotency and scaling when event volume changes.
- Test runtime support and plan scale settings when application frameworks change.
- Audit scratch versus persistent paths in application configuration before image changes.
- Review task retries and pool scaling quotas before peak runs.
Explanation
Correct Answer
A:The preventive control is: Review function retry, idempotency and scaling when event volume changes. It targets the earlier cause: The compute model does not use event-driven managed function triggers. Confirm ongoing effectiveness by: Upload a test blob and verify one idempotent execution records the expected result.
Incorrect Answers
B:This is a reasonable safeguard for a different fault: The team operates unnecessary webserver VMs and manually patches them for routine hosting. That different mechanism is: A full IaaS VM hosting model was retained though managed App Service meets the constraints. The original incident here instead arises from: The compute model does not use event-driven managed function triggers. The directly relevant safeguard is: Review function retry, idempotency and scaling when event volume changes.
C:The proposed control focuses on: Critical state was stored on nonpersistent temporary local storage. For the design in the question, recurrence comes from: The compute model does not use event-driven managed function triggers. A precise prevention step is: Review function retry, idempotency and scaling when event volume changes.
D:That safeguard manages another risk: The workload lacks managed parallel task scheduling and scalable compute pools. Its scenario is: A single VM serializes thousands of independent jobs and misses the daily SLA. The present recurring risk is: The compute model does not use event-driven managed function triggers. The proper ongoing control is: Review function retry, idempotency and scaling when event volume changes.
Question 713
A design workshop has this requirement: A team deploys microservice containers but wants managed HTTP ingress, revisions and event-driven scaling without direct Kubernetes API administration. Operators currently observe: Operators spend excessive time maintaining cluster nodes for simple container services. Select the ONE design remedy that best addresses the root cause.
- Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules.
- Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements.
- Use Azure Container Instances for the supported short-lived container group workload.
- Use supported Kubernetes workload identity federation with a scoped Azure managed identity and Storage Blob Data permissions.
Explanation
Correct Answer
A:The evidence (Operators spend excessive time maintaining cluster nodes for simple container services.) identifies the following cause: The hosting choice exposes unnecessary Kubernetes cluster management obligations. The design that removes it is: Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules. The acceptance check is: Deploy two revisions and send load to validate traffic split and scaling behavior.
Incorrect Answers
B:The option belongs to a different failure mechanism: The hosting choice does not expose necessary Kubernetes orchestration APIs. That situation exhibits: A container platform without Kubernetes API prevents the required operator and custom controller deployment. For the stated case, the remedy is: Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules.
C:That design instead addresses another observed condition: A dedicated AKS cluster remains running for a single sporadic one-container test. Its technical cause is: The workload's simple short-lived lifecycle did not require a full orchestration control plane. The current workload exhibits: Operators spend excessive time maintaining cluster nodes for simple container services. Its targeted remedy is: Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules.
D:This choice mitigates an alternative scenario, where: Containers fail when a hard-coded client secret expires. The underlying issue there is: The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization. Here the root issue is: The hosting choice exposes unnecessary Kubernetes cluster management obligations. Choose the corresponding action: Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules.
Question 714
The planned architecture is: Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules. Workload context: A team deploys microservice containers but wants managed HTTP ingress, revisions and event-driven scaling without direct Kubernetes API administration. Which acceptance test demonstrates that the required behavior works?
- Deploy two revisions and send load to validate traffic split and scaling behavior.
- Access a test blob from the bound service account while an unbound pod is denied.
- Deploy a custom resource and admission policy and confirm cluster API behavior under controlled changes.
- Launch an ephemeral container group and verify exit code and log retrieval after the test.
Explanation
Correct Answer
A:The acceptance test is specific: Deploy two revisions and send load to validate traffic split and scaling behavior. Its purpose is to establish that the proposed architecture works: Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules.
Incorrect Answers
B:The alternative test targets: Use supported Kubernetes workload identity federation with a scoped Azure managed identity and Storage Blob Data permissions. The scenario's actual proposed remedy is: Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules. Verify that one by: Deploy two revisions and send load to validate traffic split and scaling behavior.
C:This check validates a different workload: Deploy a custom resource and admission policy and confirm cluster API behavior under controlled changes. Its associated design is: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements. The required acceptance test here is: Deploy two revisions and send load to validate traffic split and scaling behavior.
D:That observation pertains to a separate failure: A dedicated AKS cluster remains running for a single sporadic one-container test. Its cause is: The workload's simple short-lived lifecycle did not require a full orchestration control plane. It does not confirm the result of this design. The direct proof would be: Deploy two revisions and send load to validate traffic split and scaling behavior.
Question 715
The customer states: A team deploys microservice containers but wants managed HTTP ingress, revisions and event-driven scaling without direct Kubernetes API administration. An incident reveals: Operators spend excessive time maintaining cluster nodes for simple container services. What cause best accounts for this evidence?
- The hosting choice exposes unnecessary Kubernetes cluster management obligations.
- The hosting choice does not expose necessary Kubernetes orchestration APIs.
- The workload's simple short-lived lifecycle did not require a full orchestration control plane.
- The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization.
Explanation
Correct Answer
A:This is the failure mechanism rather than an incidental symptom: The hosting choice exposes unnecessary Kubernetes cluster management obligations. It accounts for: Operators spend excessive time maintaining cluster nodes for simple container services. The architectural repair is: Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules.
Incorrect Answers
B:The alternative weakness is: The hosting choice does not expose necessary Kubernetes orchestration APIs. Its associated failure is: A container platform without Kubernetes API prevents the required operator and custom controller deployment. Neither explains the present observation: Operators spend excessive time maintaining cluster nodes for simple container services. The direct cause here is: The hosting choice exposes unnecessary Kubernetes cluster management obligations.
C:This cause would explain a different symptom: A dedicated AKS cluster remains running for a single sporadic one-container test. The mechanism for that event is: The workload's simple short-lived lifecycle did not require a full orchestration control plane. Here the stated symptom is: Operators spend excessive time maintaining cluster nodes for simple container services. Its cause is: The hosting choice exposes unnecessary Kubernetes cluster management obligations.
D:The proposed diagnosis fits another scenario: The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization. It would typically be reflected by: Containers fail when a hard-coded client secret expires. The current evidence instead supports: The hosting choice exposes unnecessary Kubernetes cluster management obligations.
Question 716
Workload context: A team deploys microservice containers but wants managed HTTP ingress, revisions and event-driven scaling without direct Kubernetes API administration. The implemented remedy is: Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules. Which ongoing practice most specifically prevents recurrence of this failure: Operators spend excessive time maintaining cluster nodes for simple container services.?
- Monitor container group time limits, network and image pull authentication.
- Monitor app revisions, scale-to-zero caveats and secrets as services evolve.
- Audit service account federation subjects and Storage RBAC roles during deployments.
- Review Kubernetes version, node pool upgrades and admission policies for compatibility.
Explanation
Correct Answer
B:The key follow-up control is: Monitor app revisions, scale-to-zero caveats and secrets as services evolve. It avoids recurrence of the scenario in which: Operators spend excessive time maintaining cluster nodes for simple container services. It addresses: The hosting choice exposes unnecessary Kubernetes cluster management obligations.
Incorrect Answers
A:This is a reasonable safeguard for a different fault: A dedicated AKS cluster remains running for a single sporadic one-container test. That different mechanism is: The workload's simple short-lived lifecycle did not require a full orchestration control plane. The original incident here instead arises from: The hosting choice exposes unnecessary Kubernetes cluster management obligations. The directly relevant safeguard is: Monitor app revisions, scale-to-zero caveats and secrets as services evolve.
C:That safeguard manages another risk: The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization. Its scenario is: Containers fail when a hard-coded client secret expires. The present recurring risk is: The hosting choice exposes unnecessary Kubernetes cluster management obligations. The proper ongoing control is: Monitor app revisions, scale-to-zero caveats and secrets as services evolve.
D:This is a reasonable safeguard for a different fault: A container platform without Kubernetes API prevents the required operator and custom controller deployment. That different mechanism is: The hosting choice does not expose necessary Kubernetes orchestration APIs. The original incident here instead arises from: The hosting choice exposes unnecessary Kubernetes cluster management obligations. The directly relevant safeguard is: Monitor app revisions, scale-to-zero caveats and secrets as services evolve.
Question 717
A solution architect is reviewing a workload: A regulated microservice platform needs Kubernetes-native custom resource definitions, advanced admission policy and direct control over Kubernetes API. The observed incident is: A container platform without Kubernetes API prevents the required operator and custom controller deployment. Which architecture choice most directly removes the identified weakness?
- Choose Azure App Service with suitable plan and autoscale features for the supported web runtime.
- Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules.
- Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements.
- Use supported Kubernetes workload identity federation with a scoped Azure managed identity and Storage Blob Data permissions.
Explanation
Correct Answer
C:The evidence (A container platform without Kubernetes API prevents the required operator and custom controller deployment.) identifies the following cause: The hosting choice does not expose necessary Kubernetes orchestration APIs. The design that removes it is: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements. The acceptance check is: Deploy a custom resource and admission policy and confirm cluster API behavior under controlled changes.
Incorrect Answers
A:The option belongs to a different failure mechanism: A full IaaS VM hosting model was retained though managed App Service meets the constraints. That situation exhibits: The team operates unnecessary webserver VMs and manually patches them for routine hosting. For the stated case, the remedy is: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements.
B:That design instead addresses another observed condition: Operators spend excessive time maintaining cluster nodes for simple container services. Its technical cause is: The hosting choice exposes unnecessary Kubernetes cluster management obligations. The current workload exhibits: A container platform without Kubernetes API prevents the required operator and custom controller deployment. Its targeted remedy is: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements.
D:The option belongs to a different failure mechanism: The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization. That situation exhibits: Containers fail when a hard-coded client secret expires. For the stated case, the remedy is: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements.
Question 718
An architect proposes this change: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements. The workload context is: A regulated microservice platform needs Kubernetes-native custom resource definitions, advanced admission policy and direct control over Kubernetes API. Which evidence would most directly validate the change?
- Deploy a custom resource and admission policy and confirm cluster API behavior under controlled changes.
- Access a test blob from the bound service account while an unbound pod is denied.
- Deploy two revisions and send load to validate traffic split and scaling behavior.
- Deploy the portal and verify managed HTTPS, health checks and horizontal scaling.
Explanation
Correct Answer
A:The decisive evidence is: Deploy a custom resource and admission policy and confirm cluster API behavior under controlled changes. This measures the mechanism of the planned change, not an unrelated Azure service: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements.
Incorrect Answers
B:This check validates a different workload: Access a test blob from the bound service account while an unbound pod is denied. Its associated design is: Use supported Kubernetes workload identity federation with a scoped Azure managed identity and Storage Blob Data permissions. The required acceptance test here is: Deploy a custom resource and admission policy and confirm cluster API behavior under controlled changes.
C:That observation pertains to a separate failure: Operators spend excessive time maintaining cluster nodes for simple container services. Its cause is: The hosting choice exposes unnecessary Kubernetes cluster management obligations. It does not confirm the result of this design. The direct proof would be: Deploy a custom resource and admission policy and confirm cluster API behavior under controlled changes.
D:The alternative test targets: Choose Azure App Service with suitable plan and autoscale features for the supported web runtime. The scenario's actual proposed remedy is: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements. Verify that one by: Deploy a custom resource and admission policy and confirm cluster API behavior under controlled changes.
Question 719
During architecture troubleshooting, a team reports: A container platform without Kubernetes API prevents the required operator and custom controller deployment. Context: A regulated microservice platform needs Kubernetes-native custom resource definitions, advanced admission policy and direct control over Kubernetes API. Which underlying design mistake explains the observed behavior most precisely?
- The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization.
- The hosting choice exposes unnecessary Kubernetes cluster management obligations.
- The hosting choice does not expose necessary Kubernetes orchestration APIs.
- A full IaaS VM hosting model was retained though managed App Service meets the constraints.
Explanation
Correct Answer
C:This is the failure mechanism rather than an incidental symptom: The hosting choice does not expose necessary Kubernetes orchestration APIs. It accounts for: A container platform without Kubernetes API prevents the required operator and custom controller deployment. The architectural repair is: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements.
Incorrect Answers
A:The alternative weakness is: The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization. Its associated failure is: Containers fail when a hard-coded client secret expires. Neither explains the present observation: A container platform without Kubernetes API prevents the required operator and custom controller deployment. The direct cause here is: The hosting choice does not expose necessary Kubernetes orchestration APIs.
B:This cause would explain a different symptom: Operators spend excessive time maintaining cluster nodes for simple container services. The mechanism for that event is: The hosting choice exposes unnecessary Kubernetes cluster management obligations. Here the stated symptom is: A container platform without Kubernetes API prevents the required operator and custom controller deployment. Its cause is: The hosting choice does not expose necessary Kubernetes orchestration APIs.
D:The alternative weakness is: A full IaaS VM hosting model was retained though managed App Service meets the constraints. Its associated failure is: The team operates unnecessary webserver VMs and manually patches them for routine hosting. Neither explains the present observation: A container platform without Kubernetes API prevents the required operator and custom controller deployment. The direct cause here is: The hosting choice does not expose necessary Kubernetes orchestration APIs.
Question 720
A design review identifies: A regulated microservice platform needs Kubernetes-native custom resource definitions, advanced admission policy and direct control over Kubernetes API. The failure is: A container platform without Kubernetes API prevents the required operator and custom controller deployment. Select TWO distinct decisions that together provide the immediate technical solution AND an ongoing prevention control. A verification-only step does not replace either responsibility.
- Choose Azure Container Apps with proper environment, ingress and KEDA-based scaling rules.
- Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements.
- Test runtime support and plan scale settings when application frameworks change.
- Review Kubernetes version, node pool upgrades and admission policies for compatibility.
- Use supported Kubernetes workload identity federation with a scoped Azure managed identity and Storage Blob Data permissions.
Explanation
Correct Answers
B:This option addresses the actual design defect: The hosting choice does not expose necessary Kubernetes orchestration APIs. The correction is: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements. Confirm the outcome with: Deploy a custom resource and admission policy and confirm cluster API behavior under controlled changes.
D:The key follow-up control is: Review Kubernetes version, node pool upgrades and admission policies for compatibility. It avoids recurrence of the scenario in which: A container platform without Kubernetes API prevents the required operator and custom controller deployment. It addresses: The hosting choice does not expose necessary Kubernetes orchestration APIs.
Incorrect Answers
A:The option belongs to a different failure mechanism: The hosting choice exposes unnecessary Kubernetes cluster management obligations. That situation exhibits: Operators spend excessive time maintaining cluster nodes for simple container services. For the stated case, the remedy is: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements.
C:This is a reasonable safeguard for a different fault: The team operates unnecessary webserver VMs and manually patches them for routine hosting. That different mechanism is: A full IaaS VM hosting model was retained though managed App Service meets the constraints. The original incident here instead arises from: The hosting choice does not expose necessary Kubernetes orchestration APIs. The directly relevant safeguard is: Review Kubernetes version, node pool upgrades and admission policies for compatibility.
E:That design instead addresses another observed condition: Containers fail when a hard-coded client secret expires. Its technical cause is: The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization. The current workload exhibits: A container platform without Kubernetes API prevents the required operator and custom controller deployment. Its targeted remedy is: Use Azure Kubernetes Service with appropriate node pools, networking and governance for Kubernetes-native requirements.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests