AZ-305 Design business continuity solutions Practice Test 4 — 15 Questions

Question 1

Match each Azure security service to its purpose.

Accepted Answer

Azure Sentinel: Provides intelligent security analytics and threat intelligence across the enterprise.. Correct matches: Azure Sentinel (intelligent security analytics), Azure Firewall (network firewall). Common confusions: Security Center with Key Vault (secret management), Key Vault with DDoS Protection, DDoS Protection with Security Center.

Answer

Azure Security Center: Manages secrets, keys, and certificates used by cloud applications.

Answer

Azure Key Vault: Protects against distributed denial-of-service (DDoS) attacks.

Answer

Azure DDoS Protection: Provides unified security management and threat protection for hybrid workloads.

Question 2

Your company runs a mission-critical application on Azure VMs. You need to design a cross-region disaster recovery solution that meets a recovery time objective (RTO) of 15 minutes and a recovery point objective (RPO) of 5 minutes. The solution must minimize costs. What should you recommend?

Accepted Answer

Use Azure Site Recovery with replication frequency set to 30 seconds.. Azure Site Recovery (ASR) can replicate Azure VMs to a secondary region with a replication frequency as low as 30 seconds, enabling an RPO of 5 minutes and an RTO of 15 minutes when combined with a planned failover. This meets the mission-critical requirements while minimizing costs compared to always-on active-active solutions, as ASR only incurs costs for replication traffic and storage in the secondary region.

Answer

Use Azure SQL Database active geo-replication with a failover group.

Answer

Use Azure Storage with read-access geo-redundant storage (RA-GRS) and Azure Traffic Manager.

Answer

Use Azure Backup with geo-redundant storage.

Question 3

You manage a globally distributed application using Azure Cosmos DB. You need to design a business continuity strategy that ensures zero data loss and automatic failover in case of a regional outage. The application must continue to serve reads and writes during a region failure. What should you recommend?

Accepted Answer

Configure multi-region writes with eventual consistency and enable automatic failover.. Azure Cosmos DB multi-region writes with automatic failover ensure zero data loss and continuous availability for both reads and writes during a regional outage. Writes are accepted in multiple regions and asynchronously replicated, eliminating a single point of failure. Option A is incorrect because a single write region with service-managed failover may lose writes that were not replicated before the failover. Option B is incorrect because disabling automatic failover requires manual intervention, which does not meet the automatic failover requirement and can still result in data loss. Option C is incorrect because single-region writes, even with strong consistency, will lose writes if the region fails before replication completes.

Answer

Use Azure Cosmos DB accounts with a single write region and enable service-managed failover.

Answer

Use Azure Cosmos DB accounts with multi-region writes but disable automatic failover and rely on manual failover.

Answer

Configure single-region writes with strong consistency and enable automatic failover.

Question 4

A company has an Azure SQL Database instance that is used by a critical application. They need to ensure business continuity with an RPO of 0 (zero data loss) and an RTO of less than 1 minute in case of a regional outage. The solution must be cost-effective. What should you recommend?

Accepted Answer

Use Azure SQL Database failover groups with active geo-replication.. Active geo-replication with failover groups (Option D) is the only solution that meets both an RPO of 0 and an RTO of less than 1 minute for a regional outage. It synchronously replicates data to a secondary region, ensuring no data loss, and allows automatic or manual failover within seconds. This is cost-effective compared to always-on synchronous replication across regions, as you pay only for the secondary database compute during active use.

Answer

Use Azure SQL Database automatic failover groups with manual failover.

Answer

Use Azure SQL Database zone-redundant configuration.

Answer

Use Azure SQL Database geo-restore from geo-redundant backups.

Question 5

Your company runs a stateless web application on Azure Kubernetes Service (AKS). You need to design a disaster recovery solution that ensures the application is available in another Azure region within 30 minutes of a regional failure. The solution must balance cost and complexity. What should you recommend?

Accepted Answer

Use Azure Traffic Manager to distribute traffic across two AKS clusters in different regions.. Azure Traffic Manager can distribute traffic across two AKS clusters in different regions using DNS-based routing, such as priority or performance routing, enabling failover within the required 30-minute RTO. This approach balances cost and complexity by avoiding the need for active-active replication or complex multi-region pod configurations, while still meeting the stateless application's DR requirements.

Answer

Use Azure SQL Database active geo-replication for the application's database.

Answer

Use Azure Front Door to route traffic to a single AKS cluster with pods running in multiple regions.

Answer

Deploy a single AKS cluster with nodes in multiple availability zones.

Question 6

You are designing a backup strategy for Azure VMs that host a file server. The backup must support daily backups with a retention of 30 days, and the ability to restore individual files quickly. The solution must minimize backup storage costs. What backup policy should you configure?

Accepted Answer

Use Azure Backup with daily backup, retention of 30 days, and use locally redundant storage (LRS) for backup data.. It meets all requirements: daily backups for a 24-hour RPO, 30-day retention, and locally redundant storage (LRS) to minimize backup storage costs. File-level recovery in Azure Backup is achieved through the built-in instant restore snapshot feature, which is automatically enabled and does not require separate configuration. Options B, C, and D are incorrect: B fails to specify storage redundancy, potentially leading to higher costs if GRS is used; C uses GRS, increasing cost unnecessarily; D uses weekly backups, violating the daily RPO requirement.

Answer

Use Azure Backup with daily backup, retention of 30 days, and enable instant restore snapshot for file-level recovery.

Answer

Use Azure Backup with daily backup, retention of 30 days, and use geo-redundant storage (GRS) for backup data.

Answer

Use Azure Backup with weekly backup, retention of 30 days, and use geo-redundant storage (GRS) for backup data.

Question 7

Your company runs a critical application on Azure App Service. You need to design a disaster recovery solution that ensures the application is available in another region within 5 minutes of a regional failure. The application uses Azure SQL Database as its backend. The solution must minimize data loss and cost. What should you recommend?

Accepted Answer

Deploy App Service in two regions with Azure Traffic Manager. Use Azure SQL Database failover groups with active geo-replication.. It combines multi-region App Service deployment with Azure Traffic Manager for DNS-based traffic routing, enabling failover within minutes. Azure SQL Database failover groups with active geo-replication provide automatic, synchronous or asynchronous data replication to a secondary region, with an RPO of seconds and an RTO typically under 5 minutes during automatic failover. This meets the 5-minute availability target while minimizing data loss and cost through a managed, pay-per-use model.

Answer

Deploy App Service in one region with multiple instances. Use Azure SQL Database failover groups with manual failover.

Answer

Deploy App Service in two regions with Azure Front Door. Use Azure SQL Database with zone-redundant configuration.

Answer

Deploy App Service in two regions with Azure Traffic Manager. Use Azure SQL Database geo-restore for the database.

Question 8

You are designing a backup strategy for Azure Files shares that contain critical data. The backup must support snapshot-based backups and allow restoration to a specific point in time. The solution must also protect against accidental deletion. What should you use?

Accepted Answer

Use Azure Backup for Azure Files with soft delete enabled.. Azure Backup for Azure Files provides snapshot-based backups that support point-in-time restoration, and when combined with soft delete, it protects against accidental deletion by retaining deleted data for a configurable retention period (default 14 days). This meets all stated requirements: snapshot backups, point-in-time restore, and deletion protection.

Answer

Use Azure File Sync with cloud tiering.

Answer

Use Azure Storage account geo-redundant storage (GRS) with versioning.

Answer

Use Azure Backup for Azure Files without soft delete.

Question 9

A company has a disaster recovery plan that requires testing failover of Azure VMs regularly without impacting the production environment. Which feature of Azure Site Recovery should they use?

Accepted Answer

Test failover. Test failover (Option B) is the correct feature for validating disaster recovery readiness without affecting the production environment. Azure Site Recovery's test failover creates an isolated copy of the replicated VMs in a separate virtual network, allowing you to run validation exercises, perform application testing, and verify recovery plans without any impact on the production VMs or ongoing replication. This ensures that the failover process works correctly while maintaining production continuity.

Answer

Planned failover

Answer

Unplanned failover

Answer

Failback

Question 10

Which TWO actions should you take to ensure business continuity for an Azure App Service web app that uses Azure SQL Database? (Choose two.)

Accepted Answer

Configure Azure SQL Database failover groups with automatic failover.. To ensure business continuity for an Azure App Service web app using Azure SQL Database, you need redundancy for both the compute tier and the database tier. Option A is correct because Azure SQL Database failover groups with automatic failover provide database redundancy and enable automatic failover across regions. Option C is correct because deploying the App Service plan in two regions and using Azure Traffic Manager for load balancing provides geographic redundancy for the web app, ensuring traffic is redirected to a healthy region during an outage. Option B is incorrect because auto-healing only recovers the current instance and does not provide regional failover. Option D is incorrect because Azure Front Door with a single instance does not provide compute redundancy. Option E is incorrect because Azure Backup and geo-restore are for backup/restore scenarios, not for real-time failover.

Answer

Enable auto-healing in the App Service and modify the application code to handle retries.

Answer

Use Azure Front Door with a single App Service instance.

Answer

Configure Azure Backup for the App Service and enable geo-restore.

Question 11

Which THREE components are required to implement a disaster recovery solution for Azure SQL Database using failover groups? (Choose three.)

Accepted Answer

A failover group that includes both servers. A failover group is the core orchestration component that manages the replication and automatic or manual failover of multiple databases between a primary and secondary Azure SQL Database server. It requires both a primary server in one region and a secondary server in another region to be included in the group, enabling a coordinated disaster recovery plan with a defined failover policy.

Answer

Zone-redundant configuration on the primary database

Answer

Active geo-replication configured on the primary database

Question 12

Which TWO Azure services can be used to automatically redirect traffic to an alternate region in the event of a regional outage? (Choose two.)

Accepted Answer

Azure Traffic Manager. Azure Traffic Manager is a DNS-based traffic load balancer that can automatically redirect traffic to an alternate region by using DNS responses. It monitors endpoint health via HTTP/HTTPS probes and, upon detecting a regional outage, returns the DNS record for a healthy endpoint in another region, enabling global failover. Azure Front Door is a global, scalable entry point that uses anycast to route traffic to the closest or healthiest backend. It supports automatic failover across regions based on health probes, thus also redirecting traffic during a regional outage.

Answer

Azure Application Gateway

Answer

Azure Load Balancer

Answer

Azure DNS

Question 13

You are reviewing a recovery plan for Azure Site Recovery. The exhibit shows a snippet of the recovery plan configuration. What is the purpose of the script action defined in the exhibit?

Accepted Answer

To run a custom script on the recovered VMs after they boot up during test and unplanned failover.. The script action in an Azure Site Recovery recovery plan is configured to run after the VMs have booted up, allowing custom tasks such as installing software, modifying configurations, or verifying connectivity. This is supported during both test failover and unplanned failover, as the script executes post-boot on the recovered VMs.

Answer

To run a script before the VMs shut down during failover.

Answer

To update the Azure DNS records after failover.

Answer

To run a script only during planned failover from the primary to the recovery region.

Question 14

You are reviewing a Bicep template that deploys two App Service Environments (ASE) and an Azure Traffic Manager profile. The exhibit shows the template snippet. What is the expected behavior when the primary ASE becomes unhealthy?

Accepted Answer

Traffic is automatically routed to the secondary ASE with priority 2.. Azure Traffic Manager uses priority routing, which directs all traffic to the primary endpoint (priority 1) as long as it is healthy. When the primary ASE becomes unhealthy, Traffic Manager automatically fails over to the next priority endpoint (priority 2), ensuring continuous availability without manual intervention.

Answer

Traffic is stopped until an administrator updates the DNS manually.

Answer

Traffic is load-balanced between both ASEs based on performance.

Answer

Traffic continues to be sent to the primary ASE because priority routing only uses the primary.

Question 15

A company runs a critical web application on Azure VMs in two availability zones. They need to ensure the application remains available during a regional outage with an RPO of 5 minutes and an RTO of 15 minutes. What should they implement?

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) is the correct choice because it provides automated replication of Azure VMs from one region to another, enabling failover during a regional outage. With continuous replication, ASR can achieve an RPO of as low as 30 seconds (well within the 5-minute requirement) and, when combined with a well-tested recovery plan, can meet the 15-minute RTO by orchestrating the startup of replicated VMs in the secondary region.

Answer

Azure Backup

Answer

Azure Traffic Manager

Answer

Azure Front Door