exam questions

Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam

Exam AZ-305 topic 3 question 11 discussion

Actual exam question from Microsoft's AZ-305
Question #: 11
Topic #: 3
[All AZ-305 Questions]

HOTSPOT -
You have an Azure web app named App1 and an Azure key vault named KV1.
App1 stores database connection strings in KV1.
App1 performs the following types of requests to KV1:
✑ Get
✑ List
✑ Wrap
✑ Delete

Unwrap -

✑ Backup
✑ Decrypt
✑ Encrypt
You are evaluating the continuity of service for App1.
You need to identify the following if the Azure region that hosts KV1 becomes unavailable:
✑ To where will KV1 fail over?
✑ During the failover, which request type will be unavailable?
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: A server in the paired region
The contents of your key vault are replicated within the region and to a secondary region at least 150 miles away, but within the same geography to maintain high durability of your keys and secrets.
Regions are paired for cross-region replication based on proximity and other factors.

Box 2: Delete -
During failover, your key vault is in read-only mode. Requests that are supported in this mode are:

List certificates -

Get certificates -

List secrets -

Get secrets -

List keys -

Get (properties of) keys -

Encrypt -

Decrypt -

Wrap -

Unwrap -

Verify -

Sign -

Backup -
Reference:
https://docs.microsoft.com/en-us/azure/key-vault/general/disaster-recovery-guidance

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Gowind2
Highly Voted 2 years, 2 months ago
Correct. https://docs.microsoft.com/en-us/azure/key-vault/general/disaster-recovery-guidance In the rare event that an entire Azure region is unavailable, the requests that you make of Azure Key Vault in that region are automatically routed (failed over) to a secondary region except in the case of the Brazil South and Qatar Central region. During failover, your key vault is in read-only mode. Requests that are supported in this mode are: List certificates Get certificates List secrets Get secrets List keys Get (properties of) keys Encrypt Decrypt Wrap Unwrap Verify Sign Backup
upvoted 34 times
...
Darkx
Highly Voted 2 years, 1 month ago
appeared on 11th Oct 2022
upvoted 14 times
...
SeMo0o0o0o
Most Recent 3 weeks, 2 days ago
CORRECT
upvoted 1 times
...
MiniLa92
10 months, 1 week ago
Got this ques in my exam on 29th Jan 2024 and scored 950. I chose given answer.
upvoted 5 times
...
yonie
1 year, 7 months ago
Correct The contents of your key vault are replicated within the region and to a secondary region at least 150 miles away During failover, your key vault is in read-only mode https://learn.microsoft.com/en-us/azure/key-vault/general/disaster-recovery-guidance
upvoted 2 times
...
jj22222
1 year, 9 months ago
1. kv - failover to server in paired region 2. during failover, delete is unaviailable
upvoted 3 times
...
zellck
1 year, 9 months ago
1. Server in paired region 2. Delete https://learn.microsoft.com/en-us/azure/key-vault/general/disaster-recovery-guidance The contents of your key vault are replicated within the region and to a secondary region at least 150 miles away, but within the same geography to maintain high durability of your keys and secrets. https://learn.microsoft.com/en-us/azure/key-vault/general/disaster-recovery-guidance#failover During failover, your key vault is in read-only mode. During failover, you won't be able to make changes to key vault properties. You won't be able to change access policy or firewall configurations and settings. After a failover is failed back, all request types (including read and write requests) are available.
upvoted 8 times
zellck
1 year, 9 months ago
Got this in Feb 2023 exam.
upvoted 8 times
...
...
VBK8579
1 year, 10 months ago
Answer: A server in the paired region Delete
upvoted 1 times
...
Born_Again
2 years ago
During failover, your key vault is in read-only mode. Requests that are supported in this mode are: List certificates Get certificates List secrets Get secrets List keys Get (properties of) keys Encrypt Decrypt Wrap Unwrap Verify Sign Backup
upvoted 2 times
...
most_lenyora
2 years, 3 months ago
Correct!
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...