Question 750
An architect proposes this change: Use Azure Container Registry with appropriate AKS managed-identity pull authorization and network access. The workload context is: A deployment platform stores many container images and needs access-controlled registry pulls from AKS without placing registry admin passwords in manifests. Which evidence would most directly validate the change?
- Launch an ephemeral container group and verify exit code and log retrieval after the test.
- Install the driver on a test VM and validate service startup and OS-level operations.
- Deploy a signed image tag to AKS and confirm pull succeeds while unauthorized identities are blocked.
- Access a test blob from the bound service account while an unbound pod is denied.
Explanation
Correct Answer
C:This observation directly verifies the intended design: Deploy a signed image tag to AKS and confirm pull succeeds while unauthorized identities are blocked. The architecture being tested is: Use Azure Container Registry with appropriate AKS managed-identity pull authorization and network access. The original symptom was: AKS pods remain in ImagePullBackOff with registry authentication errors.
Incorrect Answers
A:That observation pertains to a separate failure: A dedicated AKS cluster remains running for a single sporadic one-container test. Its cause is: The workload's simple short-lived lifecycle did not require a full orchestration control plane. It does not confirm the result of this design. The direct proof would be: Deploy a signed image tag to AKS and confirm pull succeeds while unauthorized identities are blocked.
B:The alternative test targets: Select Azure Virtual Machines with appropriate VM size, networking and disk configuration rather than a restricted PaaS host. The scenario's actual proposed remedy is: Use Azure Container Registry with appropriate AKS managed-identity pull authorization and network access. Verify that one by: Deploy a signed image tag to AKS and confirm pull succeeds while unauthorized identities are blocked.
D:That observation pertains to a separate failure: Containers fail when a hard-coded client secret expires. Its cause is: The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization. It does not confirm the result of this design. The direct proof would be: Deploy a signed image tag to AKS and confirm pull succeeds while unauthorized identities are blocked.
Question 751
During architecture troubleshooting, a team reports: AKS pods remain in ImagePullBackOff with registry authentication errors. Context: A deployment platform stores many container images and needs access-controlled registry pulls from AKS without placing registry admin passwords in manifests. Which underlying design mistake explains the observed behavior most precisely?
- The chosen hosting abstraction does not expose the operating system features the app requires.
- The workload's simple short-lived lifecycle did not require a full orchestration control plane.
- The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization.
- Cluster identity lacks the necessary ACR pull permission or registry connectivity.
Explanation
Correct Answer
D:This is the failure mechanism rather than an incidental symptom: Cluster identity lacks the necessary ACR pull permission or registry connectivity. It accounts for: AKS pods remain in ImagePullBackOff with registry authentication errors. The architectural repair is: Use Azure Container Registry with appropriate AKS managed-identity pull authorization and network access.
Incorrect Answers
A:The proposed diagnosis fits another scenario: The chosen hosting abstraction does not expose the operating system features the app requires. It would typically be reflected by: The app cannot install its required host driver on a managed web platform. The current evidence instead supports: Cluster identity lacks the necessary ACR pull permission or registry connectivity.
B:The alternative weakness is: The workload's simple short-lived lifecycle did not require a full orchestration control plane. Its associated failure is: A dedicated AKS cluster remains running for a single sporadic one-container test. Neither explains the present observation: AKS pods remain in ImagePullBackOff with registry authentication errors. The direct cause here is: Cluster identity lacks the necessary ACR pull permission or registry connectivity.
C:This cause would explain a different symptom: Containers fail when a hard-coded client secret expires. The mechanism for that event is: The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization. Here the stated symptom is: AKS pods remain in ImagePullBackOff with registry authentication errors. Its cause is: Cluster identity lacks the necessary ACR pull permission or registry connectivity.
Question 752
The design change is: Use Azure Container Registry with appropriate AKS managed-identity pull authorization and network access. The original failure was: AKS pods remain in ImagePullBackOff with registry authentication errors. Which ongoing control best prevents recurrence of the same root cause?
- Review image tag immutability and pull permissions after rotating node pools.
- Review VM image patching and guest configuration when changing OS versions.
- Audit service account federation subjects and Storage RBAC roles during deployments.
- Monitor container group time limits, network and image pull authentication.
Explanation
Correct Answer
A:This is an ongoing protection specific to the fault: Review image tag immutability and pull permissions after rotating node pools. The recurrence risk is: Cluster identity lacks the necessary ACR pull permission or registry connectivity. It should be checked using: Deploy a signed image tag to AKS and confirm pull succeeds while unauthorized identities are blocked.
Incorrect Answers
B:The proposed control focuses on: The chosen hosting abstraction does not expose the operating system features the app requires. For the design in the question, recurrence comes from: Cluster identity lacks the necessary ACR pull permission or registry connectivity. A precise prevention step is: Review image tag immutability and pull permissions after rotating node pools.
C:That safeguard manages another risk: The deployment lacks supported workload-to-Azure-identity federation and data-plane authorization. Its scenario is: Containers fail when a hard-coded client secret expires. The present recurring risk is: Cluster identity lacks the necessary ACR pull permission or registry connectivity. The proper ongoing control is: Review image tag immutability and pull permissions after rotating node pools.
D:This is a reasonable safeguard for a different fault: A dedicated AKS cluster remains running for a single sporadic one-container test. That different mechanism is: The workload's simple short-lived lifecycle did not require a full orchestration control plane. The original incident here instead arises from: Cluster identity lacks the necessary ACR pull permission or registry connectivity. The directly relevant safeguard is: Review image tag immutability and pull permissions after rotating node pools.
Question 753
A design workshop has this requirement: A purchase checkout API must enqueue a payment command that one worker processes reliably with retry and dead-letter handling. Operators currently observe: The checkout API returns success but business commands disappear on transient worker failures. Select the ONE design remedy that best addresses the root cause.
- Bind an Azure Functions Service Bus trigger with a compatible hosting plan and idempotent processing.
- Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design.
- Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers.
- Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies.
Explanation
Correct Answer
B:This option addresses the actual design defect: The integration lacks durable command messaging and failure handling. The correction is: Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design. Confirm the outcome with: Publish a sample command, force one processing failure and verify controlled retry or dead-letter behavior.
Incorrect Answers
A:The option belongs to a different failure mechanism: The integration omitted an event-triggered compute consumer. That situation exhibits: A 24/7 virtual machine polls a queue inefficiently while the managed function is idle. For the stated case, the remedy is: Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design.
C:This choice mitigates an alternative scenario, where: Client HTTP requests frequently time out because processing runs synchronously for several minutes. The underlying issue there is: Application processing and frontend request lifetime are tightly coupled. Here the root issue is: The integration lacks durable command messaging and failure handling. Choose the corresponding action: Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design.
D:The option belongs to a different failure mechanism: A queue's single-consumer semantics were selected where publish-subscribe fanout is required. That situation exhibits: Only one of the three systems receives an event from a shared competing-consumer queue. For the stated case, the remedy is: Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design.
Question 754
The planned architecture is: Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design. Workload context: A purchase checkout API must enqueue a payment command that one worker processes reliably with retry and dead-letter handling. Which acceptance test demonstrates that the required behavior works?
- Publish a sample command, force one processing failure and verify controlled retry or dead-letter behavior.
- Publish one order event and verify all three intended subscriptions receive independent deliveries.
- Post a test command, observe fast 202/acknowledgment and eventual idempotent worker completion.
- Send a test invoice command and confirm the function consumes and settles it according to retry settings.
Explanation
Correct Answer
A:The decisive evidence is: Publish a sample command, force one processing failure and verify controlled retry or dead-letter behavior. This measures the mechanism of the planned change, not an unrelated Azure service: Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design.
Incorrect Answers
B:This check validates a different workload: Publish one order event and verify all three intended subscriptions receive independent deliveries. Its associated design is: Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies. The required acceptance test here is: Publish a sample command, force one processing failure and verify controlled retry or dead-letter behavior.
C:That observation pertains to a separate failure: Client HTTP requests frequently time out because processing runs synchronously for several minutes. Its cause is: Application processing and frontend request lifetime are tightly coupled. It does not confirm the result of this design. The direct proof would be: Publish a sample command, force one processing failure and verify controlled retry or dead-letter behavior.
D:The alternative test targets: Bind an Azure Functions Service Bus trigger with a compatible hosting plan and idempotent processing. The scenario's actual proposed remedy is: Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design. Verify that one by: Publish a sample command, force one processing failure and verify controlled retry or dead-letter behavior.
Question 755
The customer states: A purchase checkout API must enqueue a payment command that one worker processes reliably with retry and dead-letter handling. An incident reveals: The checkout API returns success but business commands disappear on transient worker failures. What cause best accounts for this evidence?
- The integration lacks durable command messaging and failure handling.
- A queue's single-consumer semantics were selected where publish-subscribe fanout is required.
- Application processing and frontend request lifetime are tightly coupled.
- The integration omitted an event-triggered compute consumer.
Explanation
Correct Answer
A:The recorded behavior follows from: The integration lacks durable command messaging and failure handling. The appropriate mitigation would be: Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design. Verify with: Publish a sample command, force one processing failure and verify controlled retry or dead-letter behavior.
Incorrect Answers
B:This cause would explain a different symptom: Only one of the three systems receives an event from a shared competing-consumer queue. The mechanism for that event is: A queue's single-consumer semantics were selected where publish-subscribe fanout is required. Here the stated symptom is: The checkout API returns success but business commands disappear on transient worker failures. Its cause is: The integration lacks durable command messaging and failure handling.
C:The proposed diagnosis fits another scenario: Application processing and frontend request lifetime are tightly coupled. It would typically be reflected by: Client HTTP requests frequently time out because processing runs synchronously for several minutes. The current evidence instead supports: The integration lacks durable command messaging and failure handling.
D:The alternative weakness is: The integration omitted an event-triggered compute consumer. Its associated failure is: A 24/7 virtual machine polls a queue inefficiently while the managed function is idle. Neither explains the present observation: The checkout API returns success but business commands disappear on transient worker failures. The direct cause here is: The integration lacks durable command messaging and failure handling.
Question 756
Workload context: A purchase checkout API must enqueue a payment command that one worker processes reliably with retry and dead-letter handling. The implemented remedy is: Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design. Which ongoing practice most specifically prevents recurrence of this failure: The checkout API returns success but business commands disappear on transient worker failures.?
- Monitor dead-letter count and duplicate processing attempts under worker changes.
- Monitor queue age and retry backlog separately from frontend latency.
- Inspect poison/dead-letter handling and Function concurrency during bursts.
- Audit subscription rules, dead letters and independent consumer lag.
Explanation
Correct Answer
A:The key follow-up control is: Monitor dead-letter count and duplicate processing attempts under worker changes. It avoids recurrence of the scenario in which: The checkout API returns success but business commands disappear on transient worker failures. It addresses: The integration lacks durable command messaging and failure handling.
Incorrect Answers
B:That safeguard manages another risk: Application processing and frontend request lifetime are tightly coupled. Its scenario is: Client HTTP requests frequently time out because processing runs synchronously for several minutes. The present recurring risk is: The integration lacks durable command messaging and failure handling. The proper ongoing control is: Monitor dead-letter count and duplicate processing attempts under worker changes.
C:This is a reasonable safeguard for a different fault: A 24/7 virtual machine polls a queue inefficiently while the managed function is idle. That different mechanism is: The integration omitted an event-triggered compute consumer. The original incident here instead arises from: The integration lacks durable command messaging and failure handling. The directly relevant safeguard is: Monitor dead-letter count and duplicate processing attempts under worker changes.
D:The proposed control focuses on: A queue's single-consumer semantics were selected where publish-subscribe fanout is required. For the design in the question, recurrence comes from: The integration lacks durable command messaging and failure handling. A precise prevention step is: Monitor dead-letter count and duplicate processing attempts under worker changes.
Question 757
A solution architect is reviewing a workload: A single order event must be independently consumed by billing, analytics and inventory without making consumers compete for one queue message. The observed incident is: Only one of the three systems receives an event from a shared competing-consumer queue. Which architecture choice most directly removes the identified weakness?
- Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies.
- Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design.
- Bind an Azure Functions Service Bus trigger with a compatible hosting plan and idempotent processing.
- Use Azure Event Hubs with partitioned event streams, independent consumer groups and checkpointed readers.
Explanation
Correct Answer
A:This option addresses the actual design defect: A queue's single-consumer semantics were selected where publish-subscribe fanout is required. The correction is: Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies. Confirm the outcome with: Publish one order event and verify all three intended subscriptions receive independent deliveries.
Incorrect Answers
B:This choice mitigates an alternative scenario, where: The checkout API returns success but business commands disappear on transient worker failures. The underlying issue there is: The integration lacks durable command messaging and failure handling. Here the root issue is: A queue's single-consumer semantics were selected where publish-subscribe fanout is required. Choose the corresponding action: Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies.
C:The option belongs to a different failure mechanism: The integration omitted an event-triggered compute consumer. That situation exhibits: A 24/7 virtual machine polls a queue inefficiently while the managed function is idle. For the stated case, the remedy is: Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies.
D:That design instead addresses another observed condition: An ordinary business-command queue cannot supply the sustained streaming and replay pattern. Its technical cause is: A competing-consumer queue was used instead of an append-style partitioned event stream. The current workload exhibits: Only one of the three systems receives an event from a shared competing-consumer queue. Its targeted remedy is: Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies.
Question 758
An architect proposes this change: Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies. The workload context is: A single order event must be independently consumed by billing, analytics and inventory without making consumers compete for one queue message. Which evidence would most directly validate the change?
- Publish a sample command, force one processing failure and verify controlled retry or dead-letter behavior.
- Run two consumer groups and verify each can independently replay and checkpoint a known event batch.
- Publish one order event and verify all three intended subscriptions receive independent deliveries.
- Send a test invoice command and confirm the function consumes and settles it according to retry settings.
Explanation
Correct Answer
C:The decisive evidence is: Publish one order event and verify all three intended subscriptions receive independent deliveries. This measures the mechanism of the planned change, not an unrelated Azure service: Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies.
Incorrect Answers
A:This check validates a different workload: Publish a sample command, force one processing failure and verify controlled retry or dead-letter behavior. Its associated design is: Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design. The required acceptance test here is: Publish one order event and verify all three intended subscriptions receive independent deliveries.
B:That observation pertains to a separate failure: An ordinary business-command queue cannot supply the sustained streaming and replay pattern. Its cause is: A competing-consumer queue was used instead of an append-style partitioned event stream. It does not confirm the result of this design. The direct proof would be: Publish one order event and verify all three intended subscriptions receive independent deliveries.
D:This check validates a different workload: Send a test invoice command and confirm the function consumes and settles it according to retry settings. Its associated design is: Bind an Azure Functions Service Bus trigger with a compatible hosting plan and idempotent processing. The required acceptance test here is: Publish one order event and verify all three intended subscriptions receive independent deliveries.
Question 759
During architecture troubleshooting, a team reports: Only one of the three systems receives an event from a shared competing-consumer queue. Context: A single order event must be independently consumed by billing, analytics and inventory without making consumers compete for one queue message. Which underlying design mistake explains the observed behavior most precisely?
- A queue's single-consumer semantics were selected where publish-subscribe fanout is required.
- The integration omitted an event-triggered compute consumer.
- The integration lacks durable command messaging and failure handling.
- A competing-consumer queue was used instead of an append-style partitioned event stream.
Explanation
Correct Answer
A:The incident is explained by: A queue's single-consumer semantics were selected where publish-subscribe fanout is required. The reported symptom is: Only one of the three systems receives an event from a shared competing-consumer queue. The corresponding design fix is: Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies.
Incorrect Answers
B:The proposed diagnosis fits another scenario: The integration omitted an event-triggered compute consumer. It would typically be reflected by: A 24/7 virtual machine polls a queue inefficiently while the managed function is idle. The current evidence instead supports: A queue's single-consumer semantics were selected where publish-subscribe fanout is required.
C:The alternative weakness is: The integration lacks durable command messaging and failure handling. Its associated failure is: The checkout API returns success but business commands disappear on transient worker failures. Neither explains the present observation: Only one of the three systems receives an event from a shared competing-consumer queue. The direct cause here is: A queue's single-consumer semantics were selected where publish-subscribe fanout is required.
D:This cause would explain a different symptom: An ordinary business-command queue cannot supply the sustained streaming and replay pattern. The mechanism for that event is: A competing-consumer queue was used instead of an append-style partitioned event stream. Here the stated symptom is: Only one of the three systems receives an event from a shared competing-consumer queue. Its cause is: A queue's single-consumer semantics were selected where publish-subscribe fanout is required.
Question 760
A design review identifies: A single order event must be independently consumed by billing, analytics and inventory without making consumers compete for one queue message. The failure is: Only one of the three systems receives an event from a shared competing-consumer queue. Select TWO distinct decisions that together provide the immediate technical solution AND an ongoing prevention control. A verification-only step does not replace either responsibility.
- Audit subscription rules, dead letters and independent consumer lag.
- Bind an Azure Functions Service Bus trigger with a compatible hosting plan and idempotent processing.
- Use Azure Event Hubs with partitioned event streams, independent consumer groups and checkpointed readers.
- Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies.
- Monitor dead-letter count and duplicate processing attempts under worker changes.
Explanation
Correct Answers
A:The preventive control is: Audit subscription rules, dead letters and independent consumer lag. It targets the earlier cause: A queue's single-consumer semantics were selected where publish-subscribe fanout is required. Confirm ongoing effectiveness by: Publish one order event and verify all three intended subscriptions receive independent deliveries.
D:This option addresses the actual design defect: A queue's single-consumer semantics were selected where publish-subscribe fanout is required. The correction is: Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies. Confirm the outcome with: Publish one order event and verify all three intended subscriptions receive independent deliveries.
Incorrect Answers
B:This choice mitigates an alternative scenario, where: A 24/7 virtual machine polls a queue inefficiently while the managed function is idle. The underlying issue there is: The integration omitted an event-triggered compute consumer. Here the root issue is: A queue's single-consumer semantics were selected where publish-subscribe fanout is required. Choose the corresponding action: Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies.
C:The option belongs to a different failure mechanism: A competing-consumer queue was used instead of an append-style partitioned event stream. That situation exhibits: An ordinary business-command queue cannot supply the sustained streaming and replay pattern. For the stated case, the remedy is: Use Azure Service Bus topics and separate subscriptions with appropriate filters and retry policies.
E:This is a reasonable safeguard for a different fault: The checkout API returns success but business commands disappear on transient worker failures. That different mechanism is: The integration lacks durable command messaging and failure handling. The original incident here instead arises from: A queue's single-consumer semantics were selected where publish-subscribe fanout is required. The directly relevant safeguard is: Audit subscription rules, dead letters and independent consumer lag.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests