Microsoft AZ-305 Practice Test 60
Question 590
An architecture proposal for health-based load balancing relies on the following approach: Check only TCP socket acceptance and declare user transactions healthy. Which specific failure or mismatch should the design reviewer identify?
- Transport-layer routing does not provide HTTP path inspection or WAF.
- LRS copies do not provide the same zonal failure boundary.
- An open socket can coexist with a failed application dependency.
- Static records cannot react immediately to application failure.
Explanation
Correct Answer
C:Check only TCP socket acceptance and declare user transactions healthy. An open socket can coexist with a failed application dependency.
Incorrect Answers
A:That assessment refers to the separate proposal 'Choose a basic Layer 4 load balancer for URL path rewrite and WAF.' not to the recommendation under review. Here, An open socket can coexist with a failed application dependency.
B:This concern applies to Use only LRS and promise it has zonal distribution. in another design for high availability design. The current proposal specifically fails because an open socket can coexist with a failed application dependency.
D:That assessment refers to the separate proposal 'Use static DNS records with no endpoint health evaluation as the only failover.' not to the recommendation under review. Here, An open socket can coexist with a failed application dependency.
Question 591
Acceptance testing must establish the following operational result: Application-aware probing verifies real readiness. Which verification action most directly establishes that outcome?
- Exercise path routing, certificate and WAF test rules.
- Return HTTP 500 from one test backend and inspect traffic routing.
- Break a test login dependency and observe health-probe removal.
- Review account redundancy and simulate a zonal dependency failure.
Explanation
Correct Answer
C:Application-aware probing verifies real readiness.
Incorrect Answers
A:That verification addresses the different requirement: A service requires TLS termination, path-based routing and web application security. It does not directly establish application-aware probing verifies real readiness.
B:That verification addresses the different requirement: Two zonal web instances should receive traffic only while their HTTP health checks succeed. It does not directly establish application-aware probing verifies real readiness.
D:This is a test for A service must keep serving storage reads during one availability zone outage. The requirement here is instead demonstrated by break a test login dependency and observe health-probe removal.
Question 592
A service requires TLS termination, path-based routing and web application security. Which Azure architecture choice best meets this requirement?
- Check only TCP socket acceptance and declare user transactions healthy.
- Use static DNS records with no endpoint health evaluation as the only failover.
- Use an eligible Application Gateway with WAF and appropriate backend health.
- Choose a basic Layer 4 load balancer for URL path rewrite and WAF.
Explanation
Correct Answer
C:Application Gateway supports HTTP-aware routing and regional web protection.
Incorrect Answers
A:An open socket can coexist with a failed application dependency. In the present requirement, a service requires TLS termination, path-based routing and web application security. The needed design instead works because application Gateway supports HTTP-aware routing and regional web protection.
B:Static records cannot react immediately to application failure. In the present requirement, a service requires TLS termination, path-based routing and web application security. The needed design instead works because application Gateway supports HTTP-aware routing and regional web protection.
D:Transport-layer routing does not provide HTTP path inspection or WAF. This proposal contradicts the stated architecture constraint.
Question 593
An architecture proposal for health-based load balancing relies on the following approach: Choose a basic Layer 4 load balancer for URL path rewrite and WAF. Which specific failure or mismatch should the design reviewer identify?
- Static records cannot react immediately to application failure.
- Transport-layer routing does not provide HTTP path inspection or WAF.
- An open socket can coexist with a failed application dependency.
- Regular GRS protects copies without exposing the ordinary read endpoint.
Explanation
Correct Answer
B:Choose a basic Layer 4 load balancer for URL path rewrite and WAF. Transport-layer routing does not provide HTTP path inspection or WAF.
Incorrect Answers
A:That assessment refers to the separate proposal 'Use static DNS records with no endpoint health evaluation as the only failover.' not to the recommendation under review. Here, Transport-layer routing does not provide HTTP path inspection or WAF.
C:That assessment refers to the separate proposal 'Check only TCP socket acceptance and declare user transactions healthy.' not to the recommendation under review. Here, Transport-layer routing does not provide HTTP path inspection or WAF.
D:This concern applies to Assume GRS without RA grants direct secondary reads automatically. in another design for high availability design. The current proposal specifically fails because transport-layer routing does not provide HTTP path inspection or WAF.
Question 594
Acceptance testing must establish the following operational result: Policy tests validate the layer 7 design. Which verification action most directly establishes that outcome?
- Return HTTP 500 from one test backend and inspect traffic routing.
- Break a test login dependency and observe health-probe removal.
- Exercise path routing, certificate and WAF test rules.
- Query the secondary endpoint and inspect object replication timing.
Explanation
Correct Answer
C:Policy tests validate the layer 7 design.
Incorrect Answers
A:That verification addresses the different requirement: Two zonal web instances should receive traffic only while their HTTP health checks succeed. It does not directly establish policy tests validate the layer 7 design.
B:That verification addresses the different requirement: An HTTP gateway sees a healthy VM heartbeat while the app's login endpoint is broken. It does not directly establish policy tests validate the layer 7 design.
D:This is a test for A service must read data from a standby region before failover of storage write authority. The requirement here is instead demonstrated by exercise path routing, certificate and WAF test rules.
Question 595
A public web service operates in two Azure regions and requires one global hostname with failover. Which TWO controls are fundamental? (Select TWO.)
- Use one regional internal Load Balancer as the only global public entry.
- Assume Front Door automatically synchronizes SQL transaction logs between regions.
- Store all required shared secrets solely in the failed region without a recovery plan.
- Ensure critical data and identity dependencies have their own suitable regional recovery paths.
- Configure Azure Front Door with appropriate regional origins and health checks.
Explanation
Correct Answers
D:Global frontend failover alone does not preserve every backend dependency.
E:Front Door supplies global HTTP origin routing and failover.
Incorrect Answers
A:A regional private Layer 4 service cannot provide global HTTP routing.
B:HTTP routing does not implement database replication.
C:A shared single-region dependency can disable both frontends.
Question 596
An architecture proposal for multi-region application resilience relies on the following approach: Depend only on one regional VM load balancer to survive an entire Azure region outage. Which specific failure or mismatch should the design reviewer identify?
- Front Door handles application routing, not database transactional replication.
- Regional distribution cannot cover loss of its own region.
- Loss of shared secrets or configuration can disable both frontends.
- Manual remediation delays recovery under load.
Explanation
Correct Answer
B:Depend only on one regional VM load balancer to survive an entire Azure region outage. Regional distribution cannot cover loss of its own region.
Incorrect Answers
A:That assessment refers to the separate proposal 'Claim Front Door alone replicates SQL transactions to all regions.' not to the recommendation under review. Here, Regional distribution cannot cover loss of its own region.
C:That assessment refers to the separate proposal 'Count two web regions and ignore their common single-region secret store.' not to the recommendation under review. Here, Regional distribution cannot cover loss of its own region.
D:This concern applies to Manually provision each VM and detect failure only through user complaints. in another design for high availability design. The current proposal specifically fails because regional distribution cannot cover loss of its own region.
Question 597
Acceptance testing must establish the following operational result: Health-based failover demonstrates regional continuity. Which verification action most directly establishes that outcome?
- Generate load and terminate a test instance while observing replacement.
- Disable one test origin and inspect global route selection.
- Test a regional frontend outage independently from database failover.
- Run a primary-region dependency outage drill while tracing transactions.
Explanation
Correct Answer
B:Health-based failover demonstrates regional continuity.
Incorrect Answers
A:This is a test for A regional stateless web fleet must replace failed instances and scale on aggregate CPU. The requirement here is instead demonstrated by disable one test origin and inspect global route selection.
C:That verification addresses the different requirement: A mission-critical app must write data in one region but serve stateless frontend traffic worldwide. It does not directly establish health-based failover demonstrates regional continuity.
D:That verification addresses the different requirement: An active-active regional design uses a shared external service that exists only in the primary region. It does not directly establish health-based failover demonstrates regional continuity.
Question 598
A mission-critical app must write data in one region but serve stateless frontend traffic worldwide. Which Azure architecture choice best meets this requirement?
- Count two web regions and ignore their common single-region secret store.
- Separate global frontend routing from the database's supported replication and write topology.
- Claim Front Door alone replicates SQL transactions to all regions.
- Depend only on one regional VM load balancer to survive an entire Azure region outage.
Explanation
Correct Answer
B:Global routing does not automatically make the data tier multi-writer.
Incorrect Answers
A:Loss of shared secrets or configuration can disable both frontends. In the present requirement, a mission-critical app must write data in one region but serve stateless frontend traffic worldwide. The needed design instead works because global routing does not automatically make the data tier multi-writer.
C:Front Door handles application routing, not database transactional replication. This proposal contradicts the stated architecture constraint.
D:Regional distribution cannot cover loss of its own region. In the present requirement, a mission-critical app must write data in one region but serve stateless frontend traffic worldwide. The needed design instead works because global routing does not automatically make the data tier multi-writer.
Question 599
An architecture proposal for multi-region application resilience relies on the following approach: Claim Front Door alone replicates SQL transactions to all regions. Which specific failure or mismatch should the design reviewer identify?
- Simultaneous restarts cause avoidable full-service downtime.
- Regional distribution cannot cover loss of its own region.
- Front Door handles application routing, not database transactional replication.
- Loss of shared secrets or configuration can disable both frontends.
Explanation
Correct Answer
C:Claim Front Door alone replicates SQL transactions to all regions. Front Door handles application routing, not database transactional replication.
Incorrect Answers
A:This concern applies to Reboot all production instances at exactly the same instant. in another design for high availability design. The current proposal specifically fails because front Door handles application routing, not database transactional replication.
B:That assessment refers to the separate proposal 'Depend only on one regional VM load balancer to survive an entire Azure region outage.' not to the recommendation under review. Here, Front Door handles application routing, not database transactional replication.
D:That assessment refers to the separate proposal 'Count two web regions and ignore their common single-region secret store.' not to the recommendation under review. Here, Front Door handles application routing, not database transactional replication.
Question 600
Acceptance testing must establish the following operational result: Layered exercises identify which component supplies each recovery guarantee. Which verification action most directly establishes that outcome?
- Test a regional frontend outage independently from database failover.
- Disable one test origin and inspect global route selection.
- Run a primary-region dependency outage drill while tracing transactions.
- Perform a staged update and monitor healthy capacity throughout.
Explanation
Correct Answer
A:Layered exercises identify which component supplies each recovery guarantee.
Incorrect Answers
B:That verification addresses the different requirement: A public web application needs one global hostname with rapid regional failover based on health. It does not directly establish layered exercises identify which component supplies each recovery guarantee.
C:That verification addresses the different requirement: An active-active regional design uses a shared external service that exists only in the primary region. It does not directly establish layered exercises identify which component supplies each recovery guarantee.
D:This is a test for A company wants uniform VM OS updates across a large instance fleet without taking the whole site down. The requirement here is instead demonstrated by test a regional frontend outage independently from database failover.