You mentioned your design will protect even if the MCU is off? Can you elaborate how? IF 2.5V is applied wouldn't it still run into the MCU?
I know the resistor can limit current, is it that the current protection alone and not necessarily a voltage protection would be sufficient? Or is it that the current would be limited enough so the internal diodes won't be over burdened?
Here it is best to know the your processor board loads. The input "clamping diodes" have some current capability. The current specification of these diodes is not in the Atmel specification. I've read current capabilities from 1 ma to 10 ma. If your board takes less than this, then you don't need the upper diode MarkT suggested. If you board takes more current then the upper diode is recommended.
With this diode in place, the processor board will be powered through this upper diode and not the internal clamping diode.
Note: If you have a 3.3v board the zener should be lowered accordingly.
With that resistor can it accurately read a 0-5V input?
From the Atmel Specification:
The ADC is optimized for analog signals with an output impedance of approximately 10 k or less. If such a
source is used, the sampling time will be negligible. If a source with higher impedance is used, the sampling
time will depend on how long time the source needs to charge the S/H capacitor, with can vary widely. The user
is recommended to only use low impedance sources with slowly varying signals, since this minimizes the
required charge transfer to the S/H capacitor.
UPDATE (didn't catch the above posts as I was in the process of writing this one).
So we see there is no one "ideal" solution. A 10k in place of the 470 ohm resistor and the addition of two diodes will work fine. However I strongly recommend some resistance between the diodes and the processor input and the addition of a capacitor at the diodes. The capacitor of course is not for static voltages but spikes and noise, in general it is a good practice to add it to your circuit.