AZ-305 Practice Test 24 — 15 Questions

Question 1

A company uses Azure Site Recovery to replicate VMs from the primary region to the secondary region. During a disaster, they want to ensure that the failover process is automated and includes runbooks to perform post-failover actions. Which TWO components are required? (Choose two.)

Accepted Answer

Azure Automation runbooks. Options B and D are correct. Azure Automation runbooks can be integrated into recovery plans to execute tasks after failover. Recovery Plans in Azure Site Recovery allow you to sequence the failover of VMs and include runbooks. Option A is wrong because Azure Backup is not involved in failover. Option C is wrong because Azure Logic Apps is not the standard way; Automation is used. Option E is wrong because Azure Monitor is for monitoring, not failover automation.

Answer

Azure Monitor alerts

Answer

Azure Logic Apps

Answer

Azure Backup

Question 2

Refer to the exhibit. This ARM template configures backup for an Azure App Service web app. The backup is scheduled daily. What is the primary limitation of this backup strategy in meeting a disaster recovery RPO of 4 hours?

Accepted Answer

The backup frequency is 1 day, resulting in an RPO of up to 24 hours. Option B is correct because the backup schedule is daily, leading to an RPO of up to 24 hours, which exceeds the 4-hour requirement. Option A is wrong because storage account location does not affect RPO. Option C is wrong because retention period does not affect RPO. Option D is wrong because the backup includes the app content, but the frequency is the issue.

Answer

The backup storage account is in the same region as the web app

Answer

The retention period of 30 days is too short

Answer

The backup does not include the web app configuration

Question 3

Which TWO actions should you take to ensure business continuity for an Azure Functions app that processes messages from an Azure Service Bus queue?

Accepted Answer

Implement the event source pattern to replay messages in case of failure.. Option A (geo-replication) and Option C (event source pattern) ensure messages are not lost and can be replayed. Option B (single region) not resilient. Option D (backup) not needed. Option E (single namespace) not resilient.

Answer

Use a single Service Bus namespace to simplify management.

Answer

Deploy the Functions app in a single region.

Answer

Configure Azure Backup for the Functions app.

Question 4

A retail company runs its e-commerce platform on Azure VMs. The application uses Azure SQL Database. You are designing a business continuity plan. The company wants to minimize recovery time for a regional outage. Which Azure service should you use to replicate the VMs to a secondary region?

Accepted Answer

Azure Site Recovery. Option B is correct because Azure Site Recovery is designed for VM replication to a secondary region, providing RTO in minutes. Option A (Azure Backup) is for backup and restore, not replication. Option C (Azure Traffic Manager) is for traffic routing. Option D (Azure Load Balancer) is for distributing traffic within a region.

Answer

Azure Traffic Manager

Answer

Azure Backup

Answer

Azure Load Balancer

Question 5

Refer to the exhibit. The JSON snippet shows the properties of a replication-protected item in Azure Site Recovery. What is the MOST LIKELY reason for the replication health being 'Critical'?

Accepted Answer

A planned failover was completed, stopping replication. Option B is correct because the 'currentProtectionState' is 'PlannedFailoverCompleted', which means a planned failover has been executed and the replication from on-premises to Azure has stopped. After a planned failover, replication is no longer active, leading to a critical health state. Option A is wrong because a pending test failover would show a different state (e.g., 'TestFailoverInitiated' or 'TestFailoverCompleted'). Option C is wrong because network connectivity issues would likely show a different state like 'InitialReplicationPending' or 'ReplicationNotStarting'. Option D is wrong because a storage account misconfiguration would cause replication errors, not a completed planned failover state.

Answer

The replication storage account is misconfigured

Answer

There is a network connectivity issue between the on-premises site and Azure

Answer

A test failover was initiated but not cleaned up

Question 6

Which TWO of the following are requirements for using Azure Site Recovery to protect Azure VMs? (Choose two.)

Accepted Answer

VMs must be using managed disks. Options A and D are correct. VMs must be in a region that supports Azure Site Recovery (A). VMs must be using managed disks (D). Option B is wrong because unmanaged disks are not supported. Option C is wrong because VMs can be any size, but there are some limitations. Option E is wrong because Site Recovery does not require a VPN connection for Azure-to-Azure replication; it uses the Azure backbone.

Answer

VMs must use unmanaged disks

Answer

VMs must be connected to a virtual network that has a VPN gateway to the target region

Answer

VMs must be at least Standard_D2s_v3 size

Question 7

A company runs a stateless web application on multiple Azure VMs behind a load balancer. They want to ensure that if a VM fails, traffic is automatically redirected to healthy VMs. Which Azure service provides this functionality with health probes?

Accepted Answer

Azure Load Balancer. Option A is correct because Azure Load Balancer uses health probes to detect unhealthy backend instances and stops sending traffic to them. Option B is wrong because Azure Traffic Manager is DNS-based and does not use health probes in the same way. Option C is wrong because Azure Front Door is an application delivery controller but is more suited for global scenarios. Option D is wrong because Azure Application Gateway also supports health probes, but the question specifies 'load balancer' and the simplest correct answer is Azure Load Balancer.

Answer

Azure Traffic Manager

Answer

Azure Front Door

Answer

Azure Application Gateway

Question 8

A company runs an application on Azure VMs that uses Azure SQL Database. They need a disaster recovery solution that ensures the application can fail over to a secondary region with minimal data loss. The solution must include automatic failover for the database and manual failover for the VMs. Which TWO Azure services should they use? (Choose two.)

Accepted Answer

Azure SQL Database auto-failover groups. Options B and D are correct. Azure SQL Database auto-failover groups provide automatic failover for the database. Azure Site Recovery replicates the VMs to the secondary region and allows manual failover. Option A is wrong because Azure SQL active geo-replication does not automatically failover; it requires manual action. Option C is wrong because Azure Traffic Manager is for routing, not VM replication. Option E is wrong because Azure Front Door is for global load balancing.

Answer

Azure Traffic Manager

Answer

Azure Front Door

Answer

Azure SQL Database active geo-replication

Question 9

You are designing a business continuity solution for a mission-critical Azure Kubernetes Service (AKS) cluster. The cluster hosts a stateful application that uses Azure Disks for persistent volumes. You need to ensure that the application can be recovered in a secondary region within 1 hour of a regional failure. What should you use to replicate the persistent volumes?

Accepted Answer

Azure Site Recovery with replication of the AKS node VMs and attached disks. Option A is correct because Azure Site Recovery can replicate Azure Disks (via VM replication) to a secondary region. Velero can back up AKS resources, but for stateful disks, ASR is more appropriate for DR. Option B is wrong because Azure Backup is for file/VM backup, not disk replication. Option C is wrong because Azure File Sync is for file shares, not disks. Option D is wrong because Azure Disk Backup is for backup, not replication for DR.

Answer

Azure Disk Backup with geo-redundant storage

Answer

Azure Backup with disk snapshot policies

Answer

Azure File Sync to replicate the disk content

Question 10

Which THREE components are required to implement a disaster recovery solution for Azure Virtual Desktop (AVD) using active-passive model?

Accepted Answer

Configure Azure Files geo-replication for the profile share.. Options A (FSLogix profile container replication), C (AVD host pool in secondary region), and E (Azure Files geo-replication) are required. Option B (single region) not. Option D (Azure Backup) not primary.

Answer

Deploy AVD host pool in the primary region only.

Answer

Configure Azure Backup for the AVD session hosts.

Question 11

Your organization has a hybrid identity infrastructure using Microsoft Entra ID (formerly Azure AD) and Active Directory Domain Services (AD DS) on-premises. You plan to deploy a critical application on Azure VMs that must remain available even if the on-premises network connection fails. The application authenticates users via on-premises AD DS. You need to design an identity disaster recovery solution that works during a network outage. What should you implement?

Accepted Answer

Deploy Microsoft Entra Domain Services and join the Azure VMs to the managed domain.. Option C is correct because deploying Microsoft Entra Domain Services in Azure provides managed domain services independent of on-premises connectivity. The application can authenticate using Entra Domain Services. Option A (Azure AD Connect) does not provide authentication if on-premises is unreachable. Option B (VPN gateway) does not help if the on-premises network is down. Option D (Azure AD Application Proxy) is for remote access, not authentication.

Answer

Create a site-to-site VPN connection with a secondary on-premises data center.

Answer

Configure Azure AD Connect with password hash synchronization and enable seamless single sign-on.

Answer

Use Azure AD Application Proxy to publish the application and authenticate via Azure AD.

Question 12

A company uses Azure Backup to protect on-premises Windows servers and Azure VMs. They need to restore a file from a backup of an Azure VM that was deleted three months ago. The backup policy retains daily backups for 30 days and weekly backups for 12 months. What is the CORRECT way to restore the file?

Accepted Answer

Use the file-level recovery option to mount the recovery point as a drive and copy the file. Option C is correct because Azure Backup allows file-level recovery from Azure VM backups. You can mount the recovery point as a drive and copy the file. Option A is wrong because you cannot restore a file from a backup of a deleted VM by restoring the entire VM; that would be overkill and may not be possible if the VM is deleted. Option B is wrong because Azure Backup does not directly support restoring to a different VM without first restoring the disk. Option D is wrong because file-level restore is supported for Azure VMs.

Answer

Azure Backup does not support file-level restore for Azure VMs; restore the entire disk

Answer

Restore the entire VM from a weekly recovery point and then copy the file

Answer

Use the 'Restore to a new VM' option and select the file during the restore process

Question 13

Which THREE of the following are best practices for designing a business continuity solution using Azure Backup? (Choose three.)

Accepted Answer

Enable soft delete to protect backup data from accidental deletion. Options A, C, and D are correct. Using a Recovery Services vault per workload or per region helps with isolation (A). Enabling soft delete protects against accidental deletion (C). Using geo-redundant storage (GRS) for backup data provides cross-region protection (D). Option B is wrong because backup policies should be based on RPO, not a fixed number of policies. Option E is wrong because RBAC should be used to restrict access, not grant everyone access.

Answer

Configure a single backup policy for all resources to simplify management

Answer

Grant all users 'Backup Contributor' role to ensure backups are taken

Question 14

Your company has a critical application that uses Azure Kubernetes Service (AKS) in a single region. You need to design a disaster recovery solution that can automatically fail over to a secondary region in the event of a regional outage. The application data is stored in Azure Cosmos DB. What should you do?

Accepted Answer

Deploy a secondary AKS cluster in another region, use Azure Traffic Manager for global load balancing, and enable Cosmos DB multi-region writes.. Option A is correct because AKS can be deployed in multiple regions, and Azure Traffic Manager can direct traffic to the secondary region. Cosmos DB multi-region writes ensure data availability. Option B is wrong because Azure Front Door does not provide AKS failover capability. Option C is wrong because Azure Site Recovery does not support AKS. Option D is wrong because Azure Backup does not provide failover.

Answer

Use Azure Front Door to route traffic to the primary AKS cluster and enable Cosmos DB automatic failover.

Answer

Use Azure Backup for AKS with cross-region restore and Cosmos DB geo-redundancy.

Answer

Replicate the AKS cluster to another region using Azure Site Recovery.

Question 15

Refer to the exhibit. An administrator configured Azure Site Recovery for a VM. The replication is ongoing but the health shows a warning. What is the most likely cause?

Accepted Answer

The Azure Site Recovery service does not have sufficient permissions to access the source VM or storage account.. Option B is correct because the error code 0x80070005 indicates an access denied error, typically caused by insufficient permissions on the source VM or storage account. Option A is wrong because the replication frequency is set to 300 seconds, which means a 5-minute RPO, not 15 minutes. Option C is wrong because the recovery point retention is set to 1440 minutes (24 hours), not 5 days. Option D is wrong because the provisioning state is Succeeded, so there is no provisioning failure.

Answer

The recovery point retention is set to 5 days, causing storage issues.

Answer

The replication provisioning state failed.

Answer

The replication interval is set to 15 minutes, exceeding the required RPO.