AZ-305 Azure Business Continuity and Disaster Recovery Design 1 — Questions and Answers
Question 1: Your organization requires an RTO of less than 1 hour and an RPO of less than 15 minutes for a critical Azure VM workload. Which Azure service helps achieve this?
- Azure Backup with daily snapshots
- Azure Site Recovery (ASR) with replication to a secondary region (Correct answer)
- Azure VM snapshot policies
- Azure Managed Disks ZRS replication
Correct answer: Azure Site Recovery (ASR) with replication to a secondary region
Azure Site Recovery continuously replicates VMs to a secondary region with RPO as low as 30 seconds, enabling failover within minutes to meet aggressive RTO targets.
Question 2: An Azure SQL Database is configured with geo-replication to a secondary region. Which action must you take to promote the secondary to primary during a regional failure?
- Stop the primary database and restart the secondary
- Initiate a failover from the secondary database in the Azure portal or via PowerShell (Correct answer)
- Delete the primary and rename the secondary
- Re-create the geo-replication link from the secondary
Correct answer: Initiate a failover from the secondary database in the Azure portal or via PowerShell
Initiating a planned or forced failover promotes the geo-secondary to become the new read-write primary with minimal data loss.
Question 3: You need to design a solution where your application continues operating with zero downtime and zero data loss even if an entire Azure region becomes unavailable. Which deployment model achieves this?
- Active-passive with Azure Site Recovery and manual failover
- Active-active multi-region deployment with Azure Traffic Manager or Front Door (Correct answer)
- Single region with Availability Zones
- Geo-redundant storage with read-only secondary
Correct answer: Active-active multi-region deployment with Azure Traffic Manager or Front Door
An active-active multi-region deployment serves live traffic from multiple regions simultaneously; if one region fails, Traffic Manager or Front Door routes all traffic to the remaining healthy region with no downtime.
Question 4: Which Azure Backup feature ensures that backups cannot be deleted for a specified retention period, protecting against ransomware or malicious administrators?
- Soft delete for Azure Backup
- Immutable vault with locked policy (Correct answer)
- Resource lock on the Recovery Services vault
- Azure Backup geo-redundancy
Correct answer: Immutable vault with locked policy
Immutable vault with a locked policy prevents any modification or deletion of backup data and policies for the configured retention window, even by subscription administrators.
Question 5: Your application's SLA requires 99.99% availability. You are deploying to Azure VMs. Which configuration is required to achieve the 99.99% compute SLA from Microsoft?
- Single VM with Premium SSD
- Two or more VMs in an Availability Set
- Two or more VMs deployed across two or more Availability Zones (Correct answer)
- Three VMs in a Proximity Placement Group
Correct answer: Two or more VMs deployed across two or more Availability Zones
Microsoft guarantees 99.99% VM SLA only when two or more VMs are deployed across two or more Availability Zones in the same region.
Question 6: You need to design a disaster recovery test plan for Azure VMs protected by Azure Site Recovery that does not impact production workloads. Which ASR capability supports this?
- Planned failover to the secondary region
- Test failover using an isolated Azure VNet (Correct answer)
- Unplanned failover with commit
- Reprotection after failover
Correct answer: Test failover using an isolated Azure VNet
ASR Test Failover spins up replicated VMs in an isolated VNet without disrupting replication to the primary, allowing full DR validation without production impact.
Your organization requires an RTO of less than 1 hour and an RPO of less than 15 minutes for a critical Azure VM workload.
Which Azure service helps achieve this?