D3 · Business Continuity

Database BCDR

Databases have their own continuity toolkit: , geo-replication, PITR and LTR for SQL; multi-region replicas for Cosmos. The AZ-305 requires distinguishing which mechanism meets each combination of RTO, RPO and application requirement.

Icon-databases-130

Built-in Azure SQL HA (intra-region)

What already comes out of the box

  • • General Purpose: stateless compute + replicated storage — re-provisions on failure ( 99.99%)
  • • Business Critical: 4-node Always On cluster (1 primary + 3 HA replicas), failover in seconds
  • • Zone redundancy: replicas spread across (BC/GP/Hyperscale) → survives a zone outage, SLA up to 99.995%

Design

  • • "The DB must survive a datacenter outage within the region" → enable zone redundancy (does NOT need geo-replication)
  • • Intra-region HA is automatic — the architect only decides tier and zones
Icon-databases-130

Active Geo-Replication vs Failover Groups

AspectActive Geo-ReplicationFailover Groups
UnitIndividual databaseGROUP of databases (they fail over together)
ReplicasUp to 4 readable secondaries, in any region1 secondary (on another logical server)
Connection stringCHANGES on failover (the app must re-point)Does NOT change: listener endpoints (read-write / read-only) redirect automatically
Automatic failoverNo — manual or via your own toolingYes — optional automatic failover policy
MI supportNo (SQL Database only)Yes — failover groups is THE mechanism for Managed Instance
WhenGeo read scale-out + fine per-DB controlFull application DR without touching connection strings — the typical exam answer

Quick rule

"Without changing connection strings" or "automatic failover of several DBs together" → failover group. "Readable replicas across several regions" → active geo-replication. Asynchronous replication in both → RPO of seconds (not zero).

Icon-databases-130

PITR and Long-Term Retention

Point-in-Time Restore (PITR)

  • • Automatic service backups: weekly full + diff + logs (5-10 min)
  • • Restore to ANY point in time within 1-35 days (configurable)
  • • Restores as a NEW DB (recover the table and migrate what's needed)
  • • By default backups go to geo-redundant storage → geo-restore in another region (RPO up to 1h)

Long-Term Retention (LTR)

  • • Weekly/monthly/yearly fulls for up to 10 years
  • • For regulatory compliance — not operational DR
  • • Signal: "retain DB backups for 7 years" → LTR (not Azure Backup, not PITR)

Distinction that always comes up

Geo-restore (from geo-replicated backup): cheap DR, RPO ≤ 1h, restoration RTO — no pre-provisioned infrastructure. Failover group: RPO of seconds, RTO of seconds-minutes — a paid active replica. The RPO/RTO requirement decides.

Icon-databases-121

BCDR in

Availability

  • • Replicas in N regions with one click; automatic service-managed failover of the write region
  • • Multi-region writes: every region accepts writes — RTO≈0 on a regional failure
  • • Availability zones supported within each region

Data recovery

  • • Continuous backup: 7/30-day point-in-time restore (self-service)
  • • Periodic backup: the classic mode, restore via support ticket
  • • Multi-region replication does NOT protect against logical deletions (they get replicated) — backup does
Icon-databases-136

MI, PostgreSQL and MySQL

ServiceHADR
SQL Managed InstanceGP/BC same as SQL DB; zone redundancyFailover groups (with the Link feature, also DR to/from SQL Server on-prem)
PostgreSQL FlexibleZone-redundant HA: SYNCHRONOUS standby in another zone (0 RPO intra-region)Read replicas (asynchronous) in another region + manual promotion; geo-backup
MySQL FlexibleSame zonal HA (synchronous standby)Cross-region read replicas + promotion
SQL Server on VMAlways On Availability Groups across zonesAsynchronous AG to another region, or ASR

Decision table

RequirementDesign
DB survives a zone outage without a geo-replicaTier zone redundancy
Regional failover without changing connection stringsFailover group (listener endpoints)
5 DBs of an app must fail over TOGETHERFailover group with all 5
Readable replicas in 3 regions for global usersActive geo-replication (up to 4 secondaries)
Recover a table deleted 3 days agoPITR (restore as a new DB)
DB backups retained 7 years (compliance)Long-Term Retention
Cheapest possible SQL DR, 1h RPO and hours-long RTO OKGeo-restore from geo-redundant backup
DR for Managed InstanceFailover group (geo-replication doesn't apply to MI)
Cosmos keeps writing if a region goes downMulti-region writes (or service-managed failover)
PostgreSQL with 0 RPO intra-regionFlexible Server zone-redundant HA (synchronous standby)

Did you get this topic?

Test what you just learned

An application uses 4 databases on Azure SQL Database that must fail over to West US as a group if East US goes down, automatically, without the application changing its connection strings. What mechanism do you design?

Ready to test "Database BCDR"?

Put what you learned to the test with original AZ-305 exam questions.

Start AZ-305 mock exam

Unlimited mock exams with the Pro plan

Log in to track your progress.