Question 730
The planned architecture is: Select eligible GPU VM sizes or supported GPU-backed managed compute with compatible drivers and allocation quotas. Workload context: A machine-learning service must run an inference model requiring GPU acceleration at predictable throughput. Which acceptance test demonstrates that the required behavior works?
- Apply controlled CPU load and verify new scale-set instances join the healthy serving pool.
- Verify eligible confidential-computing capability and attestation expectations in a test workload.
- Compare effective costs and coverage reports for baseline VMs against on-demand usage.
- Benchmark inference throughput and verify GPU device use and memory under load.
Explanation
Correct Answer
D:The decisive evidence is: Benchmark inference throughput and verify GPU device use and memory under load. This measures the mechanism of the planned change, not an unrelated Azure service: Select eligible GPU VM sizes or supported GPU-backed managed compute with compatible drivers and allocation quotas.
Incorrect Answers
A:The alternative test targets: Deploy Azure Virtual Machine Scale Sets with a suitable autoscale rule, image and load-balancing integration. The scenario's actual proposed remedy is: Select eligible GPU VM sizes or supported GPU-backed managed compute with compatible drivers and allocation quotas. Verify that one by: Benchmark inference throughput and verify GPU device use and memory under load.
B:This check validates a different workload: Verify eligible confidential-computing capability and attestation expectations in a test workload. Its associated design is: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload. The required acceptance test here is: Benchmark inference throughput and verify GPU device use and memory under load.
C:That observation pertains to a separate failure: Annual compute spending remains on pay-as-you-go rates despite a stable baseline. Its cause is: No committed-use discount decision was evaluated for predictable demand. It does not confirm the result of this design. The direct proof would be: Benchmark inference throughput and verify GPU device use and memory under load.
Question 731
The customer states: A machine-learning service must run an inference model requiring GPU acceleration at predictable throughput. An incident reveals: Inference falls below performance target on CPU-only VMs. What cause best accounts for this evidence?
- Compute selection does not meet model accelerator requirements.
- No committed-use discount decision was evaluated for predictable demand.
- Ordinary VM encryption at rest alone does not provide the required in-use protection.
- Capacity management lacks automated VM instance scaling and health integration.
Explanation
Correct Answer
A:The recorded behavior follows from: Compute selection does not meet model accelerator requirements. The appropriate mitigation would be: Select eligible GPU VM sizes or supported GPU-backed managed compute with compatible drivers and allocation quotas. Verify with: Benchmark inference throughput and verify GPU device use and memory under load.
Incorrect Answers
B:This cause would explain a different symptom: Annual compute spending remains on pay-as-you-go rates despite a stable baseline. The mechanism for that event is: No committed-use discount decision was evaluated for predictable demand. Here the stated symptom is: Inference falls below performance target on CPU-only VMs. Its cause is: Compute selection does not meet model accelerator requirements.
C:The proposed diagnosis fits another scenario: Ordinary VM encryption at rest alone does not provide the required in-use protection. It would typically be reflected by: Highly sensitive data are processed without the required isolation boundary for memory in use. The current evidence instead supports: Compute selection does not meet model accelerator requirements.
D:The alternative weakness is: Capacity management lacks automated VM instance scaling and health integration. Its associated failure is: The API exhausts capacity because two manually provisioned VMs never scale. Neither explains the present observation: Inference falls below performance target on CPU-only VMs. The direct cause here is: Compute selection does not meet model accelerator requirements.
Question 732
Workload context: A machine-learning service must run an inference model requiring GPU acceleration at predictable throughput. The implemented remedy is: Select eligible GPU VM sizes or supported GPU-backed managed compute with compatible drivers and allocation quotas. Which ongoing practice most specifically prevents recurrence of this failure: Inference falls below performance target on CPU-only VMs.?
- Track confidential compute SKU support and attestation policy after platform upgrades.
- Review autoscale threshold, scale-in rules and image version before peak seasons.
- Revisit reservation scope, utilization and savings-plan coverage every quarter.
- Audit GPU driver compatibility and regional SKU quota during scaling.
Explanation
Correct Answer
D:The key follow-up control is: Audit GPU driver compatibility and regional SKU quota during scaling. It avoids recurrence of the scenario in which: Inference falls below performance target on CPU-only VMs. It addresses: Compute selection does not meet model accelerator requirements.
Incorrect Answers
A:The proposed control focuses on: Ordinary VM encryption at rest alone does not provide the required in-use protection. For the design in the question, recurrence comes from: Compute selection does not meet model accelerator requirements. A precise prevention step is: Audit GPU driver compatibility and regional SKU quota during scaling.
B:That safeguard manages another risk: Capacity management lacks automated VM instance scaling and health integration. Its scenario is: The API exhausts capacity because two manually provisioned VMs never scale. The present recurring risk is: Compute selection does not meet model accelerator requirements. The proper ongoing control is: Audit GPU driver compatibility and regional SKU quota during scaling.
C:This is a reasonable safeguard for a different fault: Annual compute spending remains on pay-as-you-go rates despite a stable baseline. That different mechanism is: No committed-use discount decision was evaluated for predictable demand. The original incident here instead arises from: Compute selection does not meet model accelerator requirements. The directly relevant safeguard is: Audit GPU driver compatibility and regional SKU quota during scaling.
Question 733
A solution architect is reviewing a workload: A confidential data processor must minimize exposure of in-use memory to the underlying host and infrastructure operators. The observed incident is: Highly sensitive data are processed without the required isolation boundary for memory in use. Which architecture choice most directly removes the identified weakness?
- Evaluate eligible Azure Reservations or savings plans based on actual steady usage and flexibility needs.
- Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload.
- Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility.
- Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies.
Explanation
Correct Answer
B:The evidence (Highly sensitive data are processed without the required isolation boundary for memory in use.) identifies the following cause: Ordinary VM encryption at rest alone does not provide the required in-use protection. The design that removes it is: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload. The acceptance check is: Verify eligible confidential-computing capability and attestation expectations in a test workload.
Incorrect Answers
A:That design instead addresses another observed condition: Annual compute spending remains on pay-as-you-go rates despite a stable baseline. Its technical cause is: No committed-use discount decision was evaluated for predictable demand. The current workload exhibits: Highly sensitive data are processed without the required isolation boundary for memory in use. Its targeted remedy is: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload.
C:The option belongs to a different failure mechanism: The architecture does not provide the required customer-controlled physical-host tenancy. That situation exhibits: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint. For the stated case, the remedy is: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload.
D:That design instead addresses another observed condition: All medical analysis workers stop when their single zone fails. Its technical cause is: VM placement lacks zone-level failure-domain diversity. The current workload exhibits: Highly sensitive data are processed without the required isolation boundary for memory in use. Its targeted remedy is: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload.
Question 734
An architect proposes this change: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload. The workload context is: A confidential data processor must minimize exposure of in-use memory to the underlying host and infrastructure operators. Which evidence would most directly validate the change?
- Inspect assigned VM physical host placement and verify the licensed workload runs on the dedicated host.
- Verify eligible confidential-computing capability and attestation expectations in a test workload.
- Simulate zonal unavailability and confirm remaining instances handle client requests.
- Compare effective costs and coverage reports for baseline VMs against on-demand usage.
Explanation
Correct Answer
B:The acceptance test is specific: Verify eligible confidential-computing capability and attestation expectations in a test workload. Its purpose is to establish that the proposed architecture works: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload.
Incorrect Answers
A:This check validates a different workload: Inspect assigned VM physical host placement and verify the licensed workload runs on the dedicated host. Its associated design is: Evaluate Azure Dedicated Host with eligible VM families and documented licensing eligibility. The required acceptance test here is: Verify eligible confidential-computing capability and attestation expectations in a test workload.
C:The alternative test targets: Place compatible VMs across supported zones with resilient load distribution and remove single-zone dependencies. The scenario's actual proposed remedy is: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload. Verify that one by: Verify eligible confidential-computing capability and attestation expectations in a test workload.
D:This check validates a different workload: Compare effective costs and coverage reports for baseline VMs against on-demand usage. Its associated design is: Evaluate eligible Azure Reservations or savings plans based on actual steady usage and flexibility needs. The required acceptance test here is: Verify eligible confidential-computing capability and attestation expectations in a test workload.
Question 735
During architecture troubleshooting, a team reports: Highly sensitive data are processed without the required isolation boundary for memory in use. Context: A confidential data processor must minimize exposure of in-use memory to the underlying host and infrastructure operators. Which underlying design mistake explains the observed behavior most precisely?
- The architecture does not provide the required customer-controlled physical-host tenancy.
- No committed-use discount decision was evaluated for predictable demand.
- VM placement lacks zone-level failure-domain diversity.
- Ordinary VM encryption at rest alone does not provide the required in-use protection.
Explanation
Correct Answer
D:The incident is explained by: Ordinary VM encryption at rest alone does not provide the required in-use protection. The reported symptom is: Highly sensitive data are processed without the required isolation boundary for memory in use. The corresponding design fix is: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload.
Incorrect Answers
A:This cause would explain a different symptom: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint. The mechanism for that event is: The architecture does not provide the required customer-controlled physical-host tenancy. Here the stated symptom is: Highly sensitive data are processed without the required isolation boundary for memory in use. Its cause is: Ordinary VM encryption at rest alone does not provide the required in-use protection.
B:The proposed diagnosis fits another scenario: No committed-use discount decision was evaluated for predictable demand. It would typically be reflected by: Annual compute spending remains on pay-as-you-go rates despite a stable baseline. The current evidence instead supports: Ordinary VM encryption at rest alone does not provide the required in-use protection.
C:The alternative weakness is: VM placement lacks zone-level failure-domain diversity. Its associated failure is: All medical analysis workers stop when their single zone fails. Neither explains the present observation: Highly sensitive data are processed without the required isolation boundary for memory in use. The direct cause here is: Ordinary VM encryption at rest alone does not provide the required in-use protection.
Question 736
The design change is: Evaluate Azure confidential VMs or supported confidential compute backed by hardware-based trusted execution appropriate to workload. The original failure was: Highly sensitive data are processed without the required isolation boundary for memory in use. Which ongoing control best prevents recurrence of the same root cause?
- Track confidential compute SKU support and attestation policy after platform upgrades.
- Reassess host capacity, failure recovery and license inventory during renewal.
- Track per-zone quota/capacity and test readiness of zones added after scale-out.
- Revisit reservation scope, utilization and savings-plan coverage every quarter.
Explanation
Correct Answer
A:The preventive control is: Track confidential compute SKU support and attestation policy after platform upgrades. It targets the earlier cause: Ordinary VM encryption at rest alone does not provide the required in-use protection. Confirm ongoing effectiveness by: Verify eligible confidential-computing capability and attestation expectations in a test workload.
Incorrect Answers
B:This is a reasonable safeguard for a different fault: A shared VM host does not satisfy the vendor's dedicated-host licensing constraint. That different mechanism is: The architecture does not provide the required customer-controlled physical-host tenancy. The original incident here instead arises from: Ordinary VM encryption at rest alone does not provide the required in-use protection. The directly relevant safeguard is: Track confidential compute SKU support and attestation policy after platform upgrades.
C:The proposed control focuses on: VM placement lacks zone-level failure-domain diversity. For the design in the question, recurrence comes from: Ordinary VM encryption at rest alone does not provide the required in-use protection. A precise prevention step is: Track confidential compute SKU support and attestation policy after platform upgrades.
D:That safeguard manages another risk: No committed-use discount decision was evaluated for predictable demand. Its scenario is: Annual compute spending remains on pay-as-you-go rates despite a stable baseline. The present recurring risk is: Ordinary VM encryption at rest alone does not provide the required in-use protection. The proper ongoing control is: Track confidential compute SKU support and attestation policy after platform upgrades.
Question 737
A design workshop has this requirement: An enterprise wants to rehost compatible VMware virtual machines into Azure with minimum immediate guest-level changes and familiar vSphere operations. Operators currently observe: The proposed migration requires redesigning all VMware operations that the owner must retain initially. Select the ONE design remedy that best addresses the root cause.
- Use Azure VMware Solution if supported and economically justified for the required VMware operational model.
- Onboard supported machines to Azure Arc-enabled Servers for centralized inventory and eligible governance extensions.
- Select Azure Virtual Machines with appropriate VM size, networking and disk configuration rather than a restricted PaaS host.
- Use Azure Spot Virtual Machines with interruption-tolerant queues and checkpointing when suitable.
Explanation
Correct Answer
A:The evidence (The proposed migration requires redesigning all VMware operations that the owner must retain initially.) identifies the following cause: A replacement IaaS platform was chosen despite strict VMware compatibility requirements. The design that removes it is: Use Azure VMware Solution if supported and economically justified for the required VMware operational model. The acceptance check is: Migrate a pilot VM and validate vSphere management, network extension and application connectivity.
Incorrect Answers
B:The option belongs to a different failure mechanism: Non-Azure machines were not connected to Azure management through Arc. That situation exhibits: Hybrid servers are invisible to Azure governance because only native Azure VMs are inventoried. For the stated case, the remedy is: Use Azure VMware Solution if supported and economically justified for the required VMware operational model.
C:That design instead addresses another observed condition: The app cannot install its required host driver on a managed web platform. Its technical cause is: The chosen hosting abstraction does not expose the operating system features the app requires. The current workload exhibits: The proposed migration requires redesigning all VMware operations that the owner must retain initially. Its targeted remedy is: Use Azure VMware Solution if supported and economically justified for the required VMware operational model.
D:This choice mitigates an alternative scenario, where: Rendering jobs stop permanently when discounted spot capacity is reclaimed. The underlying issue there is: The workload lacks eviction handling and assumes spot capacity is guaranteed. Here the root issue is: A replacement IaaS platform was chosen despite strict VMware compatibility requirements. Choose the corresponding action: Use Azure VMware Solution if supported and economically justified for the required VMware operational model.
Question 738
The planned architecture is: Use Azure VMware Solution if supported and economically justified for the required VMware operational model. Workload context: An enterprise wants to rehost compatible VMware virtual machines into Azure with minimum immediate guest-level changes and familiar vSphere operations. Which acceptance test demonstrates that the required behavior works?
- Install the driver on a test VM and validate service startup and OS-level operations.
- Simulate task eviction and verify unfinished work retries or resumes without data corruption.
- Migrate a pilot VM and validate vSphere management, network extension and application connectivity.
- Inspect one on-prem server resource in Azure and verify extensions/policy results without moving its compute.
Explanation
Correct Answer
C:This observation directly verifies the intended design: Migrate a pilot VM and validate vSphere management, network extension and application connectivity. The architecture being tested is: Use Azure VMware Solution if supported and economically justified for the required VMware operational model. The original symptom was: The proposed migration requires redesigning all VMware operations that the owner must retain initially.
Incorrect Answers
A:That observation pertains to a separate failure: The app cannot install its required host driver on a managed web platform. Its cause is: The chosen hosting abstraction does not expose the operating system features the app requires. It does not confirm the result of this design. The direct proof would be: Migrate a pilot VM and validate vSphere management, network extension and application connectivity.
B:The alternative test targets: Use Azure Spot Virtual Machines with interruption-tolerant queues and checkpointing when suitable. The scenario's actual proposed remedy is: Use Azure VMware Solution if supported and economically justified for the required VMware operational model. Verify that one by: Migrate a pilot VM and validate vSphere management, network extension and application connectivity.
D:That observation pertains to a separate failure: Hybrid servers are invisible to Azure governance because only native Azure VMs are inventoried. Its cause is: Non-Azure machines were not connected to Azure management through Arc. It does not confirm the result of this design. The direct proof would be: Migrate a pilot VM and validate vSphere management, network extension and application connectivity.
Question 739
The customer states: An enterprise wants to rehost compatible VMware virtual machines into Azure with minimum immediate guest-level changes and familiar vSphere operations. An incident reveals: The proposed migration requires redesigning all VMware operations that the owner must retain initially. What cause best accounts for this evidence?
- The chosen hosting abstraction does not expose the operating system features the app requires.
- A replacement IaaS platform was chosen despite strict VMware compatibility requirements.
- Non-Azure machines were not connected to Azure management through Arc.
- The workload lacks eviction handling and assumes spot capacity is guaranteed.
Explanation
Correct Answer
B:The recorded behavior follows from: A replacement IaaS platform was chosen despite strict VMware compatibility requirements. The appropriate mitigation would be: Use Azure VMware Solution if supported and economically justified for the required VMware operational model. Verify with: Migrate a pilot VM and validate vSphere management, network extension and application connectivity.
Incorrect Answers
A:The proposed diagnosis fits another scenario: The chosen hosting abstraction does not expose the operating system features the app requires. It would typically be reflected by: The app cannot install its required host driver on a managed web platform. The current evidence instead supports: A replacement IaaS platform was chosen despite strict VMware compatibility requirements.
C:This cause would explain a different symptom: Hybrid servers are invisible to Azure governance because only native Azure VMs are inventoried. The mechanism for that event is: Non-Azure machines were not connected to Azure management through Arc. Here the stated symptom is: The proposed migration requires redesigning all VMware operations that the owner must retain initially. Its cause is: A replacement IaaS platform was chosen despite strict VMware compatibility requirements.
D:The proposed diagnosis fits another scenario: The workload lacks eviction handling and assumes spot capacity is guaranteed. It would typically be reflected by: Rendering jobs stop permanently when discounted spot capacity is reclaimed. The current evidence instead supports: A replacement IaaS platform was chosen despite strict VMware compatibility requirements.
Question 740
Workload context: An enterprise wants to rehost compatible VMware virtual machines into Azure with minimum immediate guest-level changes and familiar vSphere operations. The implemented remedy is: Use Azure VMware Solution if supported and economically justified for the required VMware operational model. Which ongoing practice most specifically prevents recurrence of this failure: The proposed migration requires redesigning all VMware operations that the owner must retain initially.?
- Review VM image patching and guest configuration when changing OS versions.
- Monitor eviction signals and maintain fallback capacity for urgent deadlines.
- Track Azure Arc agent health and scope of available extensions across operating systems.
- Review AVS node capacity, connectivity and license implications before each migration wave.
Explanation
Correct Answer
D:This is an ongoing protection specific to the fault: Review AVS node capacity, connectivity and license implications before each migration wave. The recurrence risk is: A replacement IaaS platform was chosen despite strict VMware compatibility requirements. It should be checked using: Migrate a pilot VM and validate vSphere management, network extension and application connectivity.
Incorrect Answers
A:This is a reasonable safeguard for a different fault: The app cannot install its required host driver on a managed web platform. That different mechanism is: The chosen hosting abstraction does not expose the operating system features the app requires. The original incident here instead arises from: A replacement IaaS platform was chosen despite strict VMware compatibility requirements. The directly relevant safeguard is: Review AVS node capacity, connectivity and license implications before each migration wave.
B:The proposed control focuses on: The workload lacks eviction handling and assumes spot capacity is guaranteed. For the design in the question, recurrence comes from: A replacement IaaS platform was chosen despite strict VMware compatibility requirements. A precise prevention step is: Review AVS node capacity, connectivity and license implications before each migration wave.
C:That safeguard manages another risk: Non-Azure machines were not connected to Azure management through Arc. Its scenario is: Hybrid servers are invisible to Azure governance because only native Azure VMs are inventoried. The present recurring risk is: A replacement IaaS platform was chosen despite strict VMware compatibility requirements. The proper ongoing control is: Review AVS node capacity, connectivity and license implications before each migration wave.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests