AZ-305 Design business continuity solutions Practice Test 10 — 15 Questions

Question 1

Refer to the exhibit. An administrator runs the PowerShell script to enable replication for a VM. The script fails with an error that the VM is not found. What is the most likely cause?

Accepted Answer

The Azure PowerShell context is not set to the subscription that contains the VM.. The PowerShell script uses `Get-AzRecoveryServicesBackupItem` and `Enable-AzRecoveryServicesBackupProtection` to enable replication for a VM. If the Azure PowerShell context (set via `Set-AzContext` or `Connect-AzAccount`) is not targeting the subscription containing the VM, the cmdlets will not find the VM resource, resulting in a 'VM not found' error. This is the most likely cause because the script otherwise references a valid vault, container, and policy.

Answer

The Recovery Services vault does not exist.

Answer

The protection container is not available.

Answer

The replication policy is not valid.

Question 2

A company runs a critical application on Azure VMs. They need a backup strategy that meets the following requirements:
- Daily backups retained for 35 days
- Weekly backups retained for 12 weeks
- Monthly backups retained for 36 months
- Yearly backups retained for 10 years
- Backups must be stored in a geo-redundant storage account
Which THREE items must be configured? (Choose three.)

Accepted Answer

A backup policy with GFS retention. Option B is correct because the required retention scheme (daily 35 days, weekly 12 weeks, monthly 36 months, yearly 10 years) is exactly the Grandfather-Father-Son (GFS) retention pattern, which Azure Backup implements through a backup policy configured with daily, weekly, monthly, and yearly retention rules. Option C is correct because the requirement to store backups in geo-redundant storage is satisfied by setting the Recovery Services vault's storage replication type to Geo-Redundant Storage (GRS), which replicates backup data to the Azure paired region. Option E is correct because a Recovery Services vault must be created in the same region as the VMs it protects; the vault is a regional resource and cannot directly back up VMs located in a different region. Option A is incorrect because a simple daily backup policy only provides daily retention and cannot express weekly, monthly, and yearly GFS retention tiers. Option D is incorrect because the vault itself is created in the VMs' region, not the paired region; geo-redundancy is achieved via the GRS storage setting, which asynchronously replicates data to the paired region.

Answer

A simple daily backup policy

Answer

A Recovery Services vault in the paired region

Question 3

A company uses Azure Site Recovery to replicate VMs from the primary region to the secondary region. During a disaster, they want to ensure that the failover process is automated and includes runbooks to perform post-failover actions. Which TWO components are required? (Choose two.)

Accepted Answer

Azure Automation runbooks. Azure Automation runbooks are required because they contain the PowerShell or Python scripts that execute post-failover actions, such as updating DNS records, reconfiguring network settings, or starting dependent services. Azure Site Recovery Recovery Plans are required because they orchestrate the failover sequence, including grouping VMs into ordered groups and invoking runbooks at specific steps. Together, they enable automated, scripted post-failover tasks within a structured failover workflow.

Answer

Azure Monitor alerts

Answer

Azure Logic Apps

Answer

Azure Backup

Question 4

A company runs an application on Azure VMs that uses Azure SQL Database. They need a disaster recovery solution that ensures the application can fail over to a secondary region with minimal data loss. The solution must include automatic failover for the database and manual failover for the VMs. Which TWO Azure services should they use? (Choose two.)

Accepted Answer

Azure SQL Database auto-failover groups. Azure SQL Database auto-failover groups (option A) are correct because they provide automatic failover of the database to a secondary region with a defined RPO/RTO, satisfying the requirement for automatic database failover with minimal data loss. Azure Site Recovery (option D) is correct because it orchestrates replication and recovery of Azure VMs to a secondary region, and it supports manual (planned/unplanned) failover, matching the requirement for manual VM failover. Azure Traffic Manager (option B) and Azure Front Door (option C) are traffic-routing and load-balancing services that can direct users to a healthy endpoint, but they do not themselves provide database failover or VM replication/recovery. Azure SQL Database active geo-replication (option E) enables replicas and manual failover of the database, but it does not provide the automatic failover capability required, so it does not meet the scenario.

Answer

Azure Traffic Manager

Answer

Azure Front Door

Answer

Azure SQL Database active geo-replication

Question 5

Refer to the exhibit. An administrator reviews the backup status of a VM. The last backup failed. What is the most likely cause?

Accepted Answer

The VM was deallocated at the time of backup.. When a VM is deallocated (stopped and deallocated in Azure), the Azure Backup service cannot create a VM-consistent snapshot because the VM is not running. Backup attempts for deallocated VMs will fail with an error indicating that the VM is not in a running state. This is a common cause of backup failures in Azure.

Answer

The Recovery Services vault is in a different region.

Answer

The backup policy does not exist.

Answer

The source resource ID is missing.

Question 6

A company runs a critical application on Azure VMs. They need to ensure that if an entire Azure region fails, the application can be recovered in another region with minimal data loss. They have a recovery point objective (RPO) of 1 hour and a recovery time objective (RTO) of 4 hours. What should they implement?

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) orchestrates replication, failover, and failback of Azure VMs to a secondary region, meeting the RPO of 1 hour (typically 30 seconds to 15 minutes for Azure-to-Azure replication) and RTO of 4 hours (failover can be completed in minutes to a few hours, depending on VM count and data size). It is the correct service for full disaster recovery with minimal data loss across regions.

Answer

Azure Traffic Manager

Answer

Azure Front Door

Answer

Azure Backup

Question 7

Your company runs a critical e-commerce application on Azure Virtual Machines (VMs) in a single region. You need to design a disaster recovery (DR) solution that meets a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 1 hour for the application tier. The application uses Azure SQL Database (single database). Which combination of Azure services should you recommend to meet the RPO and RTO?

Accepted Answer

Use Azure Site Recovery for VM replication to a secondary region and Azure SQL Database active geo-replication. Azure Site Recovery provides VM replication to a secondary region with RPO as low as 15 seconds and RTO typically under 1 hour, meeting the 15-minute RPO and 1-hour RTO. Azure SQL Database active geo-replication creates a readable secondary database in another region with an RPO of 5 seconds or less and supports manual failover within minutes, satisfying the stated RPO and RTO. This combination ensures both compute and database tiers can be recovered in the secondary region within the required timeframes.

Answer

Use Azure Site Recovery for VMs and Azure SQL Database read-scale replicas

Answer

Use Azure Backup for VM replication and Azure SQL Database auto-failover groups

Answer

Use Azure Front Door with regional load balancing and Azure SQL Database geo-restore

Question 8

Which TWO Azure services can be used to provide cross-region disaster recovery for Azure App Service web applications with a custom domain? (Select TWO.)

Accepted Answer

Azure Front Door. Azure Front Door (B) provides global load balancing and traffic routing based on latency or priority, enabling cross-region failover for App Service web applications. It supports custom domains with TLS termination and health probes to automatically redirect traffic to a secondary region during a disaster. Azure Traffic Manager (E) also offers DNS-based traffic routing with priority or performance profiles, allowing failover to a secondary App Service instance in another region, and works with custom domains via CNAME records.

Answer

Azure DNS

Answer

Azure CDN

Answer

Azure Application Gateway

Question 9

Refer to the exhibit. You deploy this ARM template to create a storage account in the West US region. The business continuity requirement states that if the primary region becomes unavailable, the storage account must be readable within 1 hour. What is the most important limitation of this configuration?

Accepted Answer

The storage account does not support read access in the secondary region, so manual failover is required, which may exceed the 1-hour RTO. The ARM template configures GRS (Geo-Redundant Storage), which replicates data to a secondary region but does not provide read access to that data unless a manual failover is initiated. Without read-access geo-redundant storage (RA-GRS), the storage account cannot be read in the secondary region within 1 hour of a primary region outage, as manual failover requires user intervention and may take longer than the RTO. The business continuity requirement demands readability within 1 hour, which is not guaranteed with standard GRS.

Answer

The storage account uses GRS, which replicates data only to a secondary region within the same geography, not to a different region

Answer

The storage account only supports HTTPS traffic, which blocks replication

Answer

The storage account is configured with the Hot access tier, which prevents failover

Question 10

Your company has a hybrid identity solution with Microsoft Entra ID Connect syncing on-premises Active Directory to Microsoft Entra ID. You need to design a business continuity solution for the identity service in case of an on-premises outage. The solution must allow users to authenticate and access cloud applications even if the on-premises domain controllers are unavailable. Which feature should you enable?

Accepted Answer

Password hash synchronization. Password hash synchronization (PHS) is the correct choice because it synchronizes password hashes from on-premises Active Directory to Microsoft Entra ID, enabling cloud authentication even when on-premises domain controllers are unavailable. During an on-premises outage, users can still authenticate against Entra ID using their synced credentials, ensuring continued access to cloud applications without dependency on local infrastructure.

Answer

Federation with AD FS in a secondary on-premises site

Answer

Seamless Single Sign-On

Answer

Pass-through authentication with an agent in a secondary on-premises site

Question 11

Which THREE Azure services can be used to implement a disaster recovery plan for Azure Virtual Desktop (AVD) that meets an RTO of 2 hours and an RPO of 30 minutes? (Select THREE.)

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) orchestrates replication and failover of Azure Virtual Desktop (AVD) session hosts and their workloads to a secondary Azure region, enabling RTO of 2 hours and RPO of 30 minutes when configured with replication policies set to 30-minute frequency. It supports multi-VM consistency groups to ensure application-consistent recovery points for AVD infrastructure components.

Answer

Azure Database for MySQL

Answer

Azure Migrate

Question 12

Refer to the exhibit. This ARM template configures backup for an Azure App Service web app. The backup is scheduled daily. What is the primary limitation of this backup strategy in meeting a disaster recovery RPO of 4 hours?

Accepted Answer

The backup frequency is 1 day, resulting in an RPO of up to 24 hours. The backup frequency is set to 1 day, meaning the most recent backup could be up to 24 hours old. To meet a Recovery Point Objective (RPO) of 4 hours, you need backups taken at least every 4 hours. Azure App Service backup does not support sub-daily scheduling natively; you would need to use Azure Backup or custom logic to achieve a 4-hour RPO.

Answer

The backup storage account is in the same region as the web app

Answer

The retention period of 30 days is too short

Answer

The backup does not include the web app configuration

Question 13

You are designing a business continuity solution for a mission-critical Azure Kubernetes Service (AKS) cluster. The cluster hosts a stateful application that uses Azure Disks for persistent volumes. You need to ensure that the application can be recovered in a secondary region within 1 hour of a regional failure. What should you use to replicate the persistent volumes?

Accepted Answer

Azure Site Recovery with replication of the AKS node VMs and attached disks. Azure Site Recovery (ASR) can replicate Azure VMs and their attached managed disks to a secondary region. For an AKS cluster, replicating the node VMs and their attached Azure Disks ensures that the persistent volumes (backed by Azure Disks) are available in the secondary region. Combined with AKS cluster deployment in the secondary region, this meets the 1-hour recovery time objective (RTO) for a stateful application.

Answer

Azure Disk Backup with geo-redundant storage

Answer

Azure Backup with disk snapshot policies

Answer

Azure File Sync to replicate the disk content

Question 14

Refer to the exhibit. You are reviewing an Azure Site Recovery replicated item for a VM. The replication health is Normal, and the last recovery point is at 10:30 AM. The primary region experiences a failure at 10:35 AM. You initiate a failover at 10:40 AM. What is the maximum potential data loss?

Accepted Answer

5 minutes of data. The last recovery point was at 10:30 AM, and the failover was initiated at 10:40 AM. Since the failure occurred at 10:35 AM, any data written between 10:30 AM and 10:35 AM (5 minutes) that was not yet replicated to the recovery point is lost. Azure Site Recovery replicates asynchronously, so the maximum potential data loss equals the time between the last successful recovery point and the failure event.

Answer

15 minutes of data

Answer

0 minutes of data

Answer

10 minutes of data

Question 15

Your company uses Azure Backup to protect on-premises file servers and Azure VMs. The compliance team requires that backup data be stored in a secondary region to protect against regional disasters. Which Azure Backup feature should you enable?

Accepted Answer

Enable geo-redundant storage (GRS) for the Recovery Services vault. Azure Backup uses the Recovery Services vault as its management and storage container. By enabling geo-redundant storage (GRS) on the vault, backup data is automatically replicated to a paired secondary Azure region, meeting the compliance requirement for off-site disaster recovery without any additional configuration or separate vault.

Answer

Use Azure Site Recovery to replicate the backup data

Answer

Configure backup policies to back up directly to the secondary region

Answer

Use a Recovery Services vault in the secondary region