Microsoft AZ-305 Practice Test 66
Question 650
An architecture proposal for container instances short-lived compute relies on the following approach: Create a full production AKS platform only for an isolated short job. Which specific failure or mismatch should the design reviewer identify?
- Kubernetes operational overhead is unnecessary for this short-lived job.
- Image distribution exposes the secret to unauthorized readers.
- One-off container primitives do not provide a full application rollout controller.
- Eviction risks violate the steady mission-critical capacity requirement.
Explanation
Correct Answer
A:Create a full production AKS platform only for an isolated short job. Kubernetes operational overhead is unnecessary for this short-lived job.
Incorrect Answers
B:That assessment refers to the separate proposal 'Bake an administrative API token into a public container image.' not to the recommendation under review. Here, Kubernetes operational overhead is unnecessary for this short-lived job.
C:That assessment refers to the separate proposal 'Manually recreate every ACI instance for each release.' not to the recommendation under review. Here, Kubernetes operational overhead is unnecessary for this short-lived job.
D:This concern applies to Run the only production database on Spot with no eviction protection. in another design compute solutions design. The current proposal specifically fails because kubernetes operational overhead is unnecessary for this short-lived job.
Question 651
Acceptance testing must establish the following operational result: A successful short execution proves the design fits. Which verification action most directly establishes that outcome?
- Execute the container and inspect its exit code and logs.
- Demonstrate rolling updates and automatic service replacement on the target platform.
- Scan the deployed image and check secret access at runtime.
- Model actual 24/7 consumption and pricing commitments.
Explanation
Correct Answer
A:A successful short execution proves the design fits.
Incorrect Answers
B:That verification addresses the different requirement: A company wants stable autoscaling, rolling deployments and service discovery across hundreds of container instances. It does not directly establish a successful short execution proves the design fits.
C:That verification addresses the different requirement: A container task needs secrets but operators should not put passwords in the image. It does not directly establish a successful short execution proves the design fits.
D:This is a test for A production database needs stable always-on capacity for the next three years. The requirement here is instead demonstrated by execute the container and inspect its exit code and logs.
Question 652
A container task needs secrets but operators should not put passwords in the image. Which Azure architecture choice best meets this requirement?
- Bake an administrative API token into a public container image.
- Create a full production AKS platform only for an isolated short job.
- Supply authorized runtime secrets via a supported secret integration or secured configuration.
- Manually recreate every ACI instance for each release.
Explanation
Correct Answer
C:Separating secrets from container artifacts limits leakage.
Incorrect Answers
A:Image distribution exposes the secret to unauthorized readers. This proposal contradicts the stated architecture constraint.
B:Kubernetes operational overhead is unnecessary for this short-lived job. In the present requirement, a container task needs secrets but operators should not put passwords in the image. The needed design instead works because separating secrets from container artifacts limits leakage.
D:One-off container primitives do not provide a full application rollout controller. In the present requirement, a container task needs secrets but operators should not put passwords in the image. The needed design instead works because separating secrets from container artifacts limits leakage.
Question 653
An architecture proposal for container instances short-lived compute relies on the following approach: Bake an administrative API token into a public container image. Which specific failure or mismatch should the design reviewer identify?
- Image distribution exposes the secret to unauthorized readers.
- One-off container primitives do not provide a full application rollout controller.
- Kubernetes operational overhead is unnecessary for this short-lived job.
- A zonal outage could remove the whole fleet.
Explanation
Correct Answer
A:Bake an administrative API token into a public container image. Image distribution exposes the secret to unauthorized readers.
Incorrect Answers
B:That assessment refers to the separate proposal 'Manually recreate every ACI instance for each release.' not to the recommendation under review. Here, Image distribution exposes the secret to unauthorized readers.
C:That assessment refers to the separate proposal 'Create a full production AKS platform only for an isolated short job.' not to the recommendation under review. Here, Image distribution exposes the secret to unauthorized readers.
D:This concern applies to Put every scale set instance in one zone and claim regional zone resilience. in another design compute solutions design. The current proposal specifically fails because image distribution exposes the secret to unauthorized readers.
Question 654
Acceptance testing must establish the following operational result: Absence of baked credentials validates separation. Which verification action most directly establishes that outcome?
- Simulate loss of an instance group in one zone and inspect serving capacity.
- Execute the container and inspect its exit code and logs.
- Demonstrate rolling updates and automatic service replacement on the target platform.
- Scan the deployed image and check secret access at runtime.
Explanation
Correct Answer
D:Absence of baked credentials validates separation.
Incorrect Answers
A:This is a test for An availability-critical VMSS must spread instances among multiple availability zones. The requirement here is instead demonstrated by scan the deployed image and check secret access at runtime.
B:That verification addresses the different requirement: A developer needs a one-off Linux container for a 15-minute data validation with no cluster. It does not directly establish absence of baked credentials validates separation.
C:That verification addresses the different requirement: A company wants stable autoscaling, rolling deployments and service discovery across hundreds of container instances. It does not directly establish absence of baked credentials validates separation.
Question 655
A company wants stable autoscaling, rolling deployments and service discovery across hundreds of container instances. Which Azure architecture choice best meets this requirement?
- Manually recreate every ACI instance for each release.
- Bake an administrative API token into a public container image.
- Prefer an orchestration service such as AKS or Container Apps to standalone ACI.
- Create a full production AKS platform only for an isolated short job.
Explanation
Correct Answer
C:Large managed fleets benefit from deployment control and application routing primitives.
Incorrect Answers
A:One-off container primitives do not provide a full application rollout controller. This proposal contradicts the stated architecture constraint.
B:Image distribution exposes the secret to unauthorized readers. In the present requirement, a company wants stable autoscaling, rolling deployments and service discovery across hundreds of container instances. The needed design instead works because large managed fleets benefit from deployment control and application routing primitives.
D:Kubernetes operational overhead is unnecessary for this short-lived job. In the present requirement, a company wants stable autoscaling, rolling deployments and service discovery across hundreds of container instances. The needed design instead works because large managed fleets benefit from deployment control and application routing primitives.
Question 656
An architecture proposal for container instances short-lived compute relies on the following approach: Manually recreate every ACI instance for each release. Which specific failure or mismatch should the design reviewer identify?
- One-off container primitives do not provide a full application rollout controller.
- CPU-based settings cannot fix denied message-source authentication.
- Image distribution exposes the secret to unauthorized readers.
- Kubernetes operational overhead is unnecessary for this short-lived job.
Explanation
Correct Answer
A:Manually recreate every ACI instance for each release. One-off container primitives do not provide a full application rollout controller.
Incorrect Answers
B:This concern applies to Increase CPU thresholds instead of verifying queue scaler access. in another design compute solutions design. The current proposal specifically fails because one-off container primitives do not provide a full application rollout controller.
C:That assessment refers to the separate proposal 'Bake an administrative API token into a public container image.' not to the recommendation under review. Here, One-off container primitives do not provide a full application rollout controller.
D:That assessment refers to the separate proposal 'Create a full production AKS platform only for an isolated short job.' not to the recommendation under review. Here, One-off container primitives do not provide a full application rollout controller.
Question 657
Acceptance testing must establish the following operational result: Lifecycle tests establish required orchestration. Which verification action most directly establishes that outcome?
- Execute the container and inspect its exit code and logs.
- Scan the deployed image and check secret access at runtime.
- Verify a controlled queue event causes a scale rule activation.
- Demonstrate rolling updates and automatic service replacement on the target platform.
Explanation
Correct Answer
D:Lifecycle tests establish required orchestration.
Incorrect Answers
A:That verification addresses the different requirement: A developer needs a one-off Linux container for a 15-minute data validation with no cluster. It does not directly establish lifecycle tests establish required orchestration.
B:That verification addresses the different requirement: A container task needs secrets but operators should not put passwords in the image. It does not directly establish lifecycle tests establish required orchestration.
C:This is a test for A Container Apps worker fails to scale because its queue authorization is invalid. The requirement here is instead demonstrated by demonstrate rolling updates and automatic service replacement on the target platform.
Question 658
A short-lived Functions-based workflow handles storage events but some jobs run for hours and require private downstream access. Which THREE architecture decisions are appropriate? (Select THREE.)
- Enqueue or durably orchestrate the long-running work rather than block one HTTP request.
- Select a Functions hosting plan compatible with required VNet access and latency targets.
- Keep the caller's HTTP request open indefinitely as the only job state.
- Choose any entry-level plan assuming identical private networking on all plans.
- Use a supported Azure Functions event trigger for the short processing entry point.
- Embed cloud administrator passwords into function source code.
Explanation
Correct Answers
A:Durable asynchronous processing survives client disconnection.
B:Networking and cold-start capabilities vary by hosting plan.
E:Serverless event triggers fit sporadic notifications.
Incorrect Answers
C:HTTP and platform timeouts limit synchronous execution.
D:Hosting plans differ in networking, scaling and latency capabilities.
F:Credentials in code contradict managed secure access.
Question 659
An architecture proposal for azure functions triggers and hosting relies on the following approach: Maintain a dedicated VM that polls storage every second despite low traffic. Which specific failure or mismatch should the design reviewer identify?
- A zonal outage could remove the whole fleet.
- Continuous polling adds idle infrastructure and operational cost.
- Hosting capabilities differ by plan and platform generation.
- Client and platform timeouts still constrain synchronous reliability.
Explanation
Correct Answer
B:Maintain a dedicated VM that polls storage every second despite low traffic. Continuous polling adds idle infrastructure and operational cost.
Incorrect Answers
A:This concern applies to Put every scale set instance in one zone and claim regional zone resilience. in another design compute solutions design. The current proposal specifically fails because continuous polling adds idle infrastructure and operational cost.
C:That assessment refers to the separate proposal 'Assume all entry-level serverless plans have identical networking and no cold start behavior.' not to the recommendation under review. Here, Continuous polling adds idle infrastructure and operational cost.
D:That assessment refers to the separate proposal 'Increase an arbitrary HTTP timeout indefinitely with no durable state.' not to the recommendation under review. Here, Continuous polling adds idle infrastructure and operational cost.
Question 660
Acceptance testing must establish the following operational result: Event-to-execution proof validates the integration. Which verification action most directly establishes that outcome?
- Submit long jobs and verify completion after client disconnects.
- Simulate loss of an instance group in one zone and inspect serving capacity.
- Measure cold-to-warm latency while testing private resource access.
- Publish a test event and confirm function execution with correlated telemetry.
Explanation
Correct Answer
D:Event-to-execution proof validates the integration.
Incorrect Answers
A:That verification addresses the different requirement: An HTTP-triggered function takes hours to process jobs and regularly times out on synchronous calls. It does not directly establish event-to-execution proof validates the integration.
B:This is a test for An availability-critical VMSS must spread instances among multiple availability zones. The requirement here is instead demonstrated by publish a test event and confirm function execution with correlated telemetry.
C:That verification addresses the different requirement: A payment function requires VNet access and predictable latency under bursty demand. It does not directly establish event-to-execution proof validates the integration.