Microsoft AZ-305 Practice Test 53
Question 520
A cloud backup estate needs detection of suspicious backup deletion activity. Which Azure architecture choice best meets this requirement?
- Forward vault audit or security events to a monitored security workspace.
- Keep the only backup on the same VM with writable administrator shares.
- Give the compromised account unlimited purge rights and disable alerts.
- Rely on end-user application uptime probes as the only backup tampering alert.
Explanation
Correct Answer
A:Monitoring administrative backup actions gives early investigation signals.
Incorrect Answers
B:Malware controlling the VM could corrupt both primary and backup copies. In the present requirement, a cloud backup estate needs detection of suspicious backup deletion activity. The needed design instead works because monitoring administrative backup actions gives early investigation signals.
C:The attacker could destroy recovery points and evade detection. In the present requirement, a cloud backup estate needs detection of suspicious backup deletion activity. The needed design instead works because monitoring administrative backup actions gives early investigation signals.
D:Application probes may stay green while recovery protection is degraded. This proposal contradicts the stated architecture constraint.
Question 521
An architecture proposal for backup protection against ransomware relies on the following approach: Rely on end-user application uptime probes as the only backup tampering alert. Which specific failure or mismatch should the design reviewer identify?
- Malware controlling the VM could corrupt both primary and backup copies.
- The attacker could destroy recovery points and evade detection.
- Live replicas may contain the same erroneous write.
- Application probes may stay green while recovery protection is degraded.
Explanation
Correct Answer
D:Rely on end-user application uptime probes as the only backup tampering alert. Application probes may stay green while recovery protection is degraded.
Incorrect Answers
A:That assessment refers to the separate proposal 'Keep the only backup on the same VM with writable administrator shares.' not to the recommendation under review. Here, Application probes may stay green while recovery protection is degraded.
B:That assessment refers to the separate proposal 'Give the compromised account unlimited purge rights and disable alerts.' not to the recommendation under review. Here, Application probes may stay green while recovery protection is degraded.
C:This concern applies to Use only geo-replicated live databases as the sole immutable recovery source. in another design solutions for backup and disaster recovery design. The current proposal specifically fails because application probes may stay green while recovery protection is degraded.
Question 522
Acceptance testing must establish the following operational result: Recorded admin events verify monitoring coverage. Which verification action most directly establishes that outcome?
- Inject a test bad update and restore from a pre-change backup.
- Review the immutability lock state and perform a safe restore.
- Simulate an authorized test backup policy change and review alert evidence.
- Attempt a protected-item destructive operation in an isolated vault.
Explanation
Correct Answer
C:Recorded admin events verify monitoring coverage.
Incorrect Answers
A:This is a test for An operations team expects active geo-replication to protect against a malicious data update. The requirement here is instead demonstrated by simulate an authorized test backup policy change and review alert evidence.
B:That verification addresses the different requirement: Critical VMs must keep recovery copies that cannot be modified during a ransomware event. It does not directly establish recorded admin events verify monitoring coverage.
D:That verification addresses the different requirement: A compromised backup operator should not be able to immediately destroy protected recovery points. It does not directly establish recorded admin events verify monitoring coverage.
Question 523
A payment service allows fifteen minutes of data loss but must restore transactions within an hour. Which TWO measurements are required during a disaster test? (Select TWO.)
- Measure data loss relative to the last recoverable committed transaction for RPO.
- Measure elapsed time until the service passes a business transaction for RTO.
- Interpret RTO as permission to discard one hour of business data.
- Use only the time needed for a VM power-on as application RTO.
- Treat a recent architecture diagram as empirical DR test evidence.
Explanation
Correct Answers
A:RPO limits the acceptable historical gap.
B:RTO measures elapsed time until the full business service has recovered.
Incorrect Answers
C:Recovery time is not recovery point.
D:The business transaction may depend on databases and DNS.
E:A diagram does not measure actual recovery.
Question 524
An architecture proposal for rpo and rto engineering relies on the following approach: Interpret one-hour recovery time as permission to lose one hour of data. Which specific failure or mismatch should the design reviewer identify?
- A single recent recovery point cannot satisfy historic retention.
- A single point of failure invalidates the proposed service objective.
- RTO does not define how much committed data may be lost.
- Constant standby costs may exceed the recovery benefit.
Explanation
Correct Answer
C:Interpret one-hour recovery time as permission to lose one hour of data. RTO does not define how much committed data may be lost.
Incorrect Answers
A:This concern applies to Keep only the newest daily backup and call it long-term archive. in another design solutions for backup and disaster recovery design. The current proposal specifically fails because rTO does not define how much committed data may be lost.
B:That assessment refers to the separate proposal 'Accept the vendor's guarantee without dependency or failure-mode analysis.' not to the recommendation under review. Here, RTO does not define how much committed data may be lost.
D:That assessment refers to the separate proposal 'Deploy permanent duplicate hot compute in every region without business need.' not to the recommendation under review. Here, RTO does not define how much committed data may be lost.
Question 525
Acceptance testing must establish the following operational result: Both metrics show whether the contract is met. Which verification action most directly establishes that outcome?
- Run destructive failover exercises including upstream dependencies.
- Model annual standby cost against observed restore time and data loss.
- Measure last recoverable transaction and service restoration time in a drill.
- List points from the requested years in the vault.
Explanation
Correct Answer
C:Both metrics show whether the contract is met.
Incorrect Answers
A:That verification addresses the different requirement: A vendor promises zero RPO and zero RTO for a single-region single-VM application. It does not directly establish both metrics show whether the contract is met.
B:That verification addresses the different requirement: A low-priority archive application tolerates a 24-hour outage and a day of lost writes. It does not directly establish both metrics show whether the contract is met.
D:This is a test for An audit demands monthly recovery points retained for several years. The requirement here is instead demonstrated by measure last recoverable transaction and service restoration time in a drill.
Question 526
A low-priority archive application tolerates a 24-hour outage and a day of lost writes. Which Azure architecture choice best meets this requirement?
- Interpret one-hour recovery time as permission to lose one hour of data.
- Deploy permanent duplicate hot compute in every region without business need.
- Select cost-appropriate periodic backup rather than active-active regional compute.
- Accept the vendor's guarantee without dependency or failure-mode analysis.
Explanation
Correct Answer
C:Large RPO and RTO can justify lower-cost recovery infrastructure.
Incorrect Answers
A:RTO does not define how much committed data may be lost. In the present requirement, a low-priority archive application tolerates a 24-hour outage and a day of lost writes. The needed design instead works because large RPO and RTO can justify lower-cost recovery infrastructure.
B:Constant standby costs may exceed the recovery benefit. This proposal contradicts the stated architecture constraint.
D:A single point of failure invalidates the proposed service objective. In the present requirement, a low-priority archive application tolerates a 24-hour outage and a day of lost writes. The needed design instead works because large RPO and RTO can justify lower-cost recovery infrastructure.
Question 527
An architecture proposal for rpo and rto engineering relies on the following approach: Deploy permanent duplicate hot compute in every region without business need. Which specific failure or mismatch should the design reviewer identify?
- Constant standby costs may exceed the recovery benefit.
- A single point of failure invalidates the proposed service objective.
- Live replicas may contain the same erroneous write.
- RTO does not define how much committed data may be lost.
Explanation
Correct Answer
A:Deploy permanent duplicate hot compute in every region without business need. Constant standby costs may exceed the recovery benefit.
Incorrect Answers
B:That assessment refers to the separate proposal 'Accept the vendor's guarantee without dependency or failure-mode analysis.' not to the recommendation under review. Here, Constant standby costs may exceed the recovery benefit.
C:This concern applies to Use only geo-replicated live databases as the sole immutable recovery source. in another design solutions for backup and disaster recovery design. The current proposal specifically fails because constant standby costs may exceed the recovery benefit.
D:That assessment refers to the separate proposal 'Interpret one-hour recovery time as permission to lose one hour of data.' not to the recommendation under review. Here, Constant standby costs may exceed the recovery benefit.
Question 528
Acceptance testing must establish the following operational result: The comparison supports rational recovery spend. Which verification action most directly establishes that outcome?
- Model annual standby cost against observed restore time and data loss.
- Inject a test bad update and restore from a pre-change backup.
- Run destructive failover exercises including upstream dependencies.
- Measure last recoverable transaction and service restoration time in a drill.
Explanation
Correct Answer
A:The comparison supports rational recovery spend.
Incorrect Answers
B:This is a test for An operations team expects active geo-replication to protect against a malicious data update. The requirement here is instead demonstrated by model annual standby cost against observed restore time and data loss.
C:That verification addresses the different requirement: A vendor promises zero RPO and zero RTO for a single-region single-VM application. It does not directly establish the comparison supports rational recovery spend.
D:That verification addresses the different requirement: A payments service permits fifteen minutes of data loss but must recover within one hour. It does not directly establish the comparison supports rational recovery spend.
Question 529
A vendor promises zero RPO and zero RTO for a single-region single-VM application. Which Azure architecture choice best meets this requirement?
- Challenge the unsupported objectives and design suitable multi-zone or multi-region architecture.
- Interpret one-hour recovery time as permission to lose one hour of data.
- Deploy permanent duplicate hot compute in every region without business need.
- Accept the vendor's guarantee without dependency or failure-mode analysis.
Explanation
Correct Answer
A:Instant recovery with no data loss demands more than one VM and a single failure domain.
Incorrect Answers
B:RTO does not define how much committed data may be lost. In the present requirement, a vendor promises zero RPO and zero RTO for a single-region single-VM application. The needed design instead works because instant recovery with no data loss demands more than one VM and a single failure domain.
C:Constant standby costs may exceed the recovery benefit. In the present requirement, a vendor promises zero RPO and zero RTO for a single-region single-VM application. The needed design instead works because instant recovery with no data loss demands more than one VM and a single failure domain.
D:A single point of failure invalidates the proposed service objective. This proposal contradicts the stated architecture constraint.
Question 530
An architecture proposal for rpo and rto engineering relies on the following approach: Accept the vendor's guarantee without dependency or failure-mode analysis. Which specific failure or mismatch should the design reviewer identify?
- A single point of failure invalidates the proposed service objective.
- Constant standby costs may exceed the recovery benefit.
- RTO does not define how much committed data may be lost.
- The attacker could destroy recovery points and evade detection.
Explanation
Correct Answer
A:Accept the vendor's guarantee without dependency or failure-mode analysis. A single point of failure invalidates the proposed service objective.
Incorrect Answers
B:That assessment refers to the separate proposal 'Deploy permanent duplicate hot compute in every region without business need.' not to the recommendation under review. Here, A single point of failure invalidates the proposed service objective.
C:That assessment refers to the separate proposal 'Interpret one-hour recovery time as permission to lose one hour of data.' not to the recommendation under review. Here, A single point of failure invalidates the proposed service objective.
D:This concern applies to Give the compromised account unlimited purge rights and disable alerts. in another design solutions for backup and disaster recovery design. The current proposal specifically fails because a single point of failure invalidates the proposed service objective.