Question 830
An architect proposes this change: Use deployment slots with intentional sticky slot settings, smoke testing and a tested swap-back plan. The workload context is: An App Service team must release a new version while retaining an immediate rollback option and preventing staging secrets from swapping accidentally. Which evidence would most directly validate the change?
- Run an ARM/Bicep what-if and deployment against staging; compare resulting resources with the approved source.
- Shift test traffic to the canary revision and confirm the configured percentage and rollback.
- Rotate a test secret in Key Vault and verify the app resolves the new value after supported refresh behavior.
- Deploy to staging, verify slot-specific settings remain attached and perform controlled swap and rollback.
Explanation
Correct Answer
D:This observation directly verifies the intended design: Deploy to staging, verify slot-specific settings remain attached and perform controlled swap and rollback. The architecture being tested is: Use deployment slots with intentional sticky slot settings, smoke testing and a tested swap-back plan. The original symptom was: A slot swap exposes the staging database connection string to production.
Incorrect Answers
A:This check validates a different workload: Run an ARM/Bicep what-if and deployment against staging; compare resulting resources with the approved source. Its associated design is: Use version-controlled Bicep/ARM deployments through a CI/CD pipeline with parameterized environment configuration. The required acceptance test here is: Deploy to staging, verify slot-specific settings remain attached and perform controlled swap and rollback.
B:That observation pertains to a separate failure: Every user immediately receives an untested new container image. Its cause is: Deployment has no revision-level incremental traffic control. It does not confirm the result of this design. The direct proof would be: Deploy to staging, verify slot-specific settings remain attached and perform controlled swap and rollback.
C:The alternative test targets: Use Azure Key Vault references in App Service settings with a managed identity authorized to read the referenced secrets. The scenario's actual proposed remedy is: Use deployment slots with intentional sticky slot settings, smoke testing and a tested swap-back plan. Verify that one by: Deploy to staging, verify slot-specific settings remain attached and perform controlled swap and rollback.
Question 831
During architecture troubleshooting, a team reports: A slot swap exposes the staging database connection string to production. Context: An App Service team must release a new version while retaining an immediate rollback option and preventing staging secrets from swapping accidentally. Which underlying design mistake explains the observed behavior most precisely?
- Infrastructure-as-code and environment parameterization were not enforced.
- Secrets were embedded in deployed app settings without vault-backed lifecycle management.
- Deployment has no revision-level incremental traffic control.
- Slot-sticky configuration was not used for environment-specific settings.
Explanation
Correct Answer
D:The incident is explained by: Slot-sticky configuration was not used for environment-specific settings. The reported symptom is: A slot swap exposes the staging database connection string to production. The corresponding design fix is: Use deployment slots with intentional sticky slot settings, smoke testing and a tested swap-back plan.
Incorrect Answers
A:This cause would explain a different symptom: Production app dependencies differ from staging because operators manually provisioned each resource. The mechanism for that event is: Infrastructure-as-code and environment parameterization were not enforced. Here the stated symptom is: A slot swap exposes the staging database connection string to production. Its cause is: Slot-sticky configuration was not used for environment-specific settings.
B:The proposed diagnosis fits another scenario: Secrets were embedded in deployed app settings without vault-backed lifecycle management. It would typically be reflected by: The application fails after a manually copied connection password expires. The current evidence instead supports: Slot-sticky configuration was not used for environment-specific settings.
C:The alternative weakness is: Deployment has no revision-level incremental traffic control. Its associated failure is: Every user immediately receives an untested new container image. Neither explains the present observation: A slot swap exposes the staging database connection string to production. The direct cause here is: Slot-sticky configuration was not used for environment-specific settings.
Question 832
The design change is: Use deployment slots with intentional sticky slot settings, smoke testing and a tested swap-back plan. The original failure was: A slot swap exposes the staging database connection string to production. Which ongoing control best prevents recurrence of the same root cause?
- Require template review and deployment validation before each release.
- Recheck slot setting flags and protected connection strings before release.
- Monitor Key Vault reference errors and managed identity access after app slot swaps.
- Monitor canary health and revision deactivation policy after full rollout.
Explanation
Correct Answer
B:This is an ongoing protection specific to the fault: Recheck slot setting flags and protected connection strings before release. The recurrence risk is: Slot-sticky configuration was not used for environment-specific settings. It should be checked using: Deploy to staging, verify slot-specific settings remain attached and perform controlled swap and rollback.
Incorrect Answers
A:That safeguard manages another risk: Infrastructure-as-code and environment parameterization were not enforced. Its scenario is: Production app dependencies differ from staging because operators manually provisioned each resource. The present recurring risk is: Slot-sticky configuration was not used for environment-specific settings. The proper ongoing control is: Recheck slot setting flags and protected connection strings before release.
C:The proposed control focuses on: Secrets were embedded in deployed app settings without vault-backed lifecycle management. For the design in the question, recurrence comes from: Slot-sticky configuration was not used for environment-specific settings. A precise prevention step is: Recheck slot setting flags and protected connection strings before release.
D:That safeguard manages another risk: Deployment has no revision-level incremental traffic control. Its scenario is: Every user immediately receives an untested new container image. The present recurring risk is: Slot-sticky configuration was not used for environment-specific settings. The proper ongoing control is: Recheck slot setting flags and protected connection strings before release.
Question 833
A design workshop has this requirement: A container service wants to direct 5% of live traffic to a new revision while keeping rollback available without changing DNS endpoints. Operators currently observe: Every user immediately receives an untested new container image. Select the ONE design remedy that best addresses the root cause.
- Use Azure Event Hubs with partitioned event streams, independent consumer groups and checkpointed readers.
- Use Azure Container Apps revision traffic splitting with an appropriate multiple-revision mode and routing.
- Use deployment slots with intentional sticky slot settings, smoke testing and a tested swap-back plan.
- Evaluate Azure Container Apps Dapr integration with compatible sidecar components for application APIs.
Explanation
Correct Answer
B:The targeted implementation is: Use Azure Container Apps revision traffic splitting with an appropriate multiple-revision mode and routing. The problem is not generic resource availability: Deployment has no revision-level incremental traffic control. Verify the result by: Shift test traffic to the canary revision and confirm the configured percentage and rollback.
Incorrect Answers
A:This choice mitigates an alternative scenario, where: An ordinary business-command queue cannot supply the sustained streaming and replay pattern. The underlying issue there is: A competing-consumer queue was used instead of an append-style partitioned event stream. Here the root issue is: Deployment has no revision-level incremental traffic control. Choose the corresponding action: Use Azure Container Apps revision traffic splitting with an appropriate multiple-revision mode and routing.
C:That design instead addresses another observed condition: A slot swap exposes the staging database connection string to production. Its technical cause is: Slot-sticky configuration was not used for environment-specific settings. The current workload exhibits: Every user immediately receives an untested new container image. Its targeted remedy is: Use Azure Container Apps revision traffic splitting with an appropriate multiple-revision mode and routing.
D:This choice mitigates an alternative scenario, where: Teams repeatedly hard-code broker URLs into every service and create configuration drift. The underlying issue there is: Common sidecar messaging/state integration components were not used where supported. Here the root issue is: Deployment has no revision-level incremental traffic control. Choose the corresponding action: Use Azure Container Apps revision traffic splitting with an appropriate multiple-revision mode and routing.
Question 834
The planned architecture is: Use Azure Container Apps revision traffic splitting with an appropriate multiple-revision mode and routing. Workload context: A container service wants to direct 5% of live traffic to a new revision while keeping rollback available without changing DNS endpoints. Which acceptance test demonstrates that the required behavior works?
- Invoke a Dapr service and confirm scoped access to the configured state or pub/sub component.
- Shift test traffic to the canary revision and confirm the configured percentage and rollback.
- Run two consumer groups and verify each can independently replay and checkpoint a known event batch.
- Deploy to staging, verify slot-specific settings remain attached and perform controlled swap and rollback.
Explanation
Correct Answer
B:The decisive evidence is: Shift test traffic to the canary revision and confirm the configured percentage and rollback. This measures the mechanism of the planned change, not an unrelated Azure service: Use Azure Container Apps revision traffic splitting with an appropriate multiple-revision mode and routing.
Incorrect Answers
A:That observation pertains to a separate failure: Teams repeatedly hard-code broker URLs into every service and create configuration drift. Its cause is: Common sidecar messaging/state integration components were not used where supported. It does not confirm the result of this design. The direct proof would be: Shift test traffic to the canary revision and confirm the configured percentage and rollback.
C:This check validates a different workload: Run two consumer groups and verify each can independently replay and checkpoint a known event batch. Its associated design is: Use Azure Event Hubs with partitioned event streams, independent consumer groups and checkpointed readers. The required acceptance test here is: Shift test traffic to the canary revision and confirm the configured percentage and rollback.
D:That observation pertains to a separate failure: A slot swap exposes the staging database connection string to production. Its cause is: Slot-sticky configuration was not used for environment-specific settings. It does not confirm the result of this design. The direct proof would be: Shift test traffic to the canary revision and confirm the configured percentage and rollback.
Question 835
The customer states: A container service wants to direct 5% of live traffic to a new revision while keeping rollback available without changing DNS endpoints. An incident reveals: Every user immediately receives an untested new container image. What cause best accounts for this evidence?
- Deployment has no revision-level incremental traffic control.
- Common sidecar messaging/state integration components were not used where supported.
- A competing-consumer queue was used instead of an append-style partitioned event stream.
- Slot-sticky configuration was not used for environment-specific settings.
Explanation
Correct Answer
A:This is the failure mechanism rather than an incidental symptom: Deployment has no revision-level incremental traffic control. It accounts for: Every user immediately receives an untested new container image. The architectural repair is: Use Azure Container Apps revision traffic splitting with an appropriate multiple-revision mode and routing.
Incorrect Answers
B:The alternative weakness is: Common sidecar messaging/state integration components were not used where supported. Its associated failure is: Teams repeatedly hard-code broker URLs into every service and create configuration drift. Neither explains the present observation: Every user immediately receives an untested new container image. The direct cause here is: Deployment has no revision-level incremental traffic control.
C:This cause would explain a different symptom: An ordinary business-command queue cannot supply the sustained streaming and replay pattern. The mechanism for that event is: A competing-consumer queue was used instead of an append-style partitioned event stream. Here the stated symptom is: Every user immediately receives an untested new container image. Its cause is: Deployment has no revision-level incremental traffic control.
D:The proposed diagnosis fits another scenario: Slot-sticky configuration was not used for environment-specific settings. It would typically be reflected by: A slot swap exposes the staging database connection string to production. The current evidence instead supports: Deployment has no revision-level incremental traffic control.
Question 836
Workload context: A container service wants to direct 5% of live traffic to a new revision while keeping rollback available without changing DNS endpoints. The implemented remedy is: Use Azure Container Apps revision traffic splitting with an appropriate multiple-revision mode and routing. Which ongoing practice most specifically prevents recurrence of this failure: Every user immediately receives an untested new container image.?
- Monitor partitions, throughput, consumer lag and checkpoint storage after scaling devices.
- Review Dapr component scopes, secret stores and service identity as applications evolve.
- Monitor canary health and revision deactivation policy after full rollout.
- Recheck slot setting flags and protected connection strings before release.
Explanation
Correct Answer
C:The preventive control is: Monitor canary health and revision deactivation policy after full rollout. It targets the earlier cause: Deployment has no revision-level incremental traffic control. Confirm ongoing effectiveness by: Shift test traffic to the canary revision and confirm the configured percentage and rollback.
Incorrect Answers
A:This is a reasonable safeguard for a different fault: An ordinary business-command queue cannot supply the sustained streaming and replay pattern. That different mechanism is: A competing-consumer queue was used instead of an append-style partitioned event stream. The original incident here instead arises from: Deployment has no revision-level incremental traffic control. The directly relevant safeguard is: Monitor canary health and revision deactivation policy after full rollout.
B:The proposed control focuses on: Common sidecar messaging/state integration components were not used where supported. For the design in the question, recurrence comes from: Deployment has no revision-level incremental traffic control. A precise prevention step is: Monitor canary health and revision deactivation policy after full rollout.
D:This is a reasonable safeguard for a different fault: A slot swap exposes the staging database connection string to production. That different mechanism is: Slot-sticky configuration was not used for environment-specific settings. The original incident here instead arises from: Deployment has no revision-level incremental traffic control. The directly relevant safeguard is: Monitor canary health and revision deactivation policy after full rollout.
Question 837
A solution architect is reviewing a workload: A business API needs to decouple interactive request acknowledgments from time-consuming asynchronous invoice processing. The observed incident is: Client HTTP requests frequently time out because processing runs synchronously for several minutes. Which architecture choice most directly removes the identified weakness?
- Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers.
- Design Azure Front Door with origin groups, routes and WAF policy as appropriate.
- Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design.
- Bind an Azure Functions Service Bus trigger with a compatible hosting plan and idempotent processing.
Explanation
Correct Answer
A:The targeted implementation is: Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers. The problem is not generic resource availability: Application processing and frontend request lifetime are tightly coupled. Verify the result by: Post a test command, observe fast 202/acknowledgment and eventual idempotent worker completion.
Incorrect Answers
B:That design instead addresses another observed condition: A client lands on one failed regional endpoint because no global HTTP front end exists. Its technical cause is: Global application entry routing and edge filtering were not implemented. The current workload exhibits: Client HTTP requests frequently time out because processing runs synchronously for several minutes. Its targeted remedy is: Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers.
C:This choice mitigates an alternative scenario, where: The checkout API returns success but business commands disappear on transient worker failures. The underlying issue there is: The integration lacks durable command messaging and failure handling. Here the root issue is: Application processing and frontend request lifetime are tightly coupled. Choose the corresponding action: Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers.
D:The option belongs to a different failure mechanism: The integration omitted an event-triggered compute consumer. That situation exhibits: A 24/7 virtual machine polls a queue inefficiently while the managed function is idle. For the stated case, the remedy is: Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers.
Question 838
An architect proposes this change: Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers. The workload context is: A business API needs to decouple interactive request acknowledgments from time-consuming asynchronous invoice processing. Which evidence would most directly validate the change?
- Post a test command, observe fast 202/acknowledgment and eventual idempotent worker completion.
- Send requests to defined paths and confirm origin selection and WAF blocking in logs.
- Send a test invoice command and confirm the function consumes and settles it according to retry settings.
- Publish a sample command, force one processing failure and verify controlled retry or dead-letter behavior.
Explanation
Correct Answer
A:The decisive evidence is: Post a test command, observe fast 202/acknowledgment and eventual idempotent worker completion. This measures the mechanism of the planned change, not an unrelated Azure service: Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers.
Incorrect Answers
B:This check validates a different workload: Send requests to defined paths and confirm origin selection and WAF blocking in logs. Its associated design is: Design Azure Front Door with origin groups, routes and WAF policy as appropriate. The required acceptance test here is: Post a test command, observe fast 202/acknowledgment and eventual idempotent worker completion.
C:That observation pertains to a separate failure: A 24/7 virtual machine polls a queue inefficiently while the managed function is idle. Its cause is: The integration omitted an event-triggered compute consumer. It does not confirm the result of this design. The direct proof would be: Post a test command, observe fast 202/acknowledgment and eventual idempotent worker completion.
D:The alternative test targets: Use Azure Service Bus queue with appropriate lock, retry, dead-letter and idempotency design. The scenario's actual proposed remedy is: Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers. Verify that one by: Post a test command, observe fast 202/acknowledgment and eventual idempotent worker completion.
Question 839
During architecture troubleshooting, a team reports: Client HTTP requests frequently time out because processing runs synchronously for several minutes. Context: A business API needs to decouple interactive request acknowledgments from time-consuming asynchronous invoice processing. Which underlying design mistake explains the observed behavior most precisely?
- Global application entry routing and edge filtering were not implemented.
- The integration omitted an event-triggered compute consumer.
- The integration lacks durable command messaging and failure handling.
- Application processing and frontend request lifetime are tightly coupled.
Explanation
Correct Answer
D:The recorded behavior follows from: Application processing and frontend request lifetime are tightly coupled. The appropriate mitigation would be: Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers. Verify with: Post a test command, observe fast 202/acknowledgment and eventual idempotent worker completion.
Incorrect Answers
A:The alternative weakness is: Global application entry routing and edge filtering were not implemented. Its associated failure is: A client lands on one failed regional endpoint because no global HTTP front end exists. Neither explains the present observation: Client HTTP requests frequently time out because processing runs synchronously for several minutes. The direct cause here is: Application processing and frontend request lifetime are tightly coupled.
B:This cause would explain a different symptom: A 24/7 virtual machine polls a queue inefficiently while the managed function is idle. The mechanism for that event is: The integration omitted an event-triggered compute consumer. Here the stated symptom is: Client HTTP requests frequently time out because processing runs synchronously for several minutes. Its cause is: Application processing and frontend request lifetime are tightly coupled.
C:The proposed diagnosis fits another scenario: The integration lacks durable command messaging and failure handling. It would typically be reflected by: The checkout API returns success but business commands disappear on transient worker failures. The current evidence instead supports: Application processing and frontend request lifetime are tightly coupled.
Question 840
A design review identifies: A business API needs to decouple interactive request acknowledgments from time-consuming asynchronous invoice processing. The failure is: Client HTTP requests frequently time out because processing runs synchronously for several minutes. Select TWO distinct decisions that together provide the immediate technical solution AND an ongoing prevention control. A verification-only step does not replace either responsibility.
- Bind an Azure Functions Service Bus trigger with a compatible hosting plan and idempotent processing.
- Monitor dead-letter count and duplicate processing attempts under worker changes.
- Design Azure Front Door with origin groups, routes and WAF policy as appropriate.
- Monitor queue age and retry backlog separately from frontend latency.
- Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers.
Explanation
Correct Answers
D:The key follow-up control is: Monitor queue age and retry backlog separately from frontend latency. It avoids recurrence of the scenario in which: Client HTTP requests frequently time out because processing runs synchronously for several minutes. It addresses: Application processing and frontend request lifetime are tightly coupled.
E:This option addresses the actual design defect: Application processing and frontend request lifetime are tightly coupled. The correction is: Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers. Confirm the outcome with: Post a test command, observe fast 202/acknowledgment and eventual idempotent worker completion.
Incorrect Answers
A:The option belongs to a different failure mechanism: The integration omitted an event-triggered compute consumer. That situation exhibits: A 24/7 virtual machine polls a queue inefficiently while the managed function is idle. For the stated case, the remedy is: Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers.
B:That safeguard manages another risk: The integration lacks durable command messaging and failure handling. Its scenario is: The checkout API returns success but business commands disappear on transient worker failures. The present recurring risk is: Application processing and frontend request lifetime are tightly coupled. The proper ongoing control is: Monitor queue age and retry backlog separately from frontend latency.
C:This choice mitigates an alternative scenario, where: A client lands on one failed regional endpoint because no global HTTP front end exists. The underlying issue there is: Global application entry routing and edge filtering were not implemented. Here the root issue is: Application processing and frontend request lifetime are tightly coupled. Choose the corresponding action: Use an API frontend to accept validated commands into a durable Service Bus queue, with independent scalable workers.
Designing Microsoft Azure Infrastructure Solutions (AZ-305) Practice Tests