IT 217 Quiz 2
Your company has 10 departments. The company plans to implement an Azure environment. You need to ensure that each department can use a different payment option for the Azure service it consumes. What should you create for each department? O a reservation O a resource group O a container instance O a subscription
a subscription
Your company has an Azure subscription that contains resources in several regions. A company policy states that admins must only be allows to create additional Azure resources in a region in the country where their office is located. You need to create the Azure resource that must be used to meet the policy requirement. What should you create? O an Azure policy O a reservation O a read-only lock O a management group
an Azure policy
What is required to use Azure Cost Management? O a pay-as-you-go subscription O an Enterprise Agreement O Software Assurance O a Dev/Test subscription
an Enterprise Agreement
Eval the underlined text: Azure Germany can be used by __legal residents of Germany only.__ O any user or enterprise that requires its data to reside in Germany O only enterprises that purchase their azure licenses from a partner based in Germany O only enterprises that are registered in Germany O no change is needed
any user or enterprise that requires its data to reside in Germany
What can Azure Information Protection encrypt? O network traffic O documents and email messages O an Azure Storage account O an Azure SQL database
documents and email messages
You have an Azure environment that contains 10 virtual networks and 100 virtual machines. You need to limit the amount of inbound traffic to all the Azure virtual networks. What should you create? O 10 Azure ExpressRoute circuits O one Azure firewall O 10 virtual network gateways O one application security group
one Azure firewall
Evaluate the underlined text: Azure Key Vault is used to store secrets for __Azure AD user accounts. O server applications O Azure AD administrative accounts O No change is needed O Personally Identifiable Information
server applications
Your company plans to migrate all on-premises data to Azure. You need to identify whether Azure complies with the company's regional requirements. What should you use? O Azure Marketplace O the Azure portal O the Trust Center O the Knowledge Center
the Trust Center
What is guaranteed in an Azure Service Level Agreement for virtual machines? O feature availability O performance O uptime O bandwidth
uptime
You need to ensure that when Azure AD users connect to Azure AD from the internet by using an anonymous IP address, the users are prompted automatically to change their password. Which Azure service should you use? O Azure Advanced Threat Protection O Azure AD Identity Protection O Azure AD Connect Health O Azure AD Privileged Identity Management
Azure AD Identity Protection
Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks? O a network security group O Azure DDoS protection O an application security group O Azure Firewall
Azure Firewall
Which Azure service should you use to store certificates? O Azure Security Center O Azure Key Vault O Azure Information Protection O an Azure Storage account
Azure Key Vault
Your company plans to automate the deployment of servers to Azure. Your manager is concerned that you may expose administrative credentials during the deployment. You need to recommend an Azure solution that encrypts the administrative credentials during the deployment. What should you include in the recommendation? O Azure Security Center O Azure Multi-Factor Authentication O Azure Information Protection O Azure Key Vault
Azure Key Vault
What should you use to evaluate whether your company's Azure environment meets regulatory requirements? O Azure Security Center O Azure Service Health O Azure Advisor O Azure Knowledge Center
Azure Security Center
You need to collect and automatically analyze security events from Azure Active Directory. O Azure Key Vault O Azure AD Connect O Azure Sentinel O Azure Synapse Analytics
Azure Sentinel
Evaluate the under lined text: __Resource groups__ provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions. O Management groups O No change is needed O Azure App Service Plans O Azure policies
Azure policies
Eval the underlined text: A support plan solution that fives you best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost is a __standard__ support plan. O Premier O No change is needed O Basic O Developer
Basic
Your developers have created 10 web applications that must be host on Azure. You need to determine which Azure web tier plan to host the web apps. The web tier plan must meet the following requirements: * The web apps will use custom domains. + The web apps each require 10 GB of storage. * The web apps must each run in dedicated compute instances. + Load balancing between instances must be included. + Costs must be minimized. Which web tier plan should you use? O Standard O Basic O Free O Shared
Basic
Eval the underlined text: You can use __Advisor recommendations__ in Azure to send email alerts when the cost of the current billing period for an Azure subscription exceeds a specified limit. O Compliance O Access control O Budget alerts O No change is needed
Budget alerts
What should you use to evaluate whether your company's Azure environment meets regulatory requirements? O the Knowledge Center websitre O the Solution blade from the Azure Portal O the Advisor blade from the azure portal O Compliance Manager from the Service Trust Portal
Compliance Manager from the Service Trust Portal
You need to configure an Azure solution that meets the following requirements: - Secures websites from attacks - Generates reports that contain details of attempted attacks What should you include in the solution? O Azure Firewall O DDoS protection O a network security group O Azure Information Protection
DDoS protection
What is the first stage in the Microsoft Cloud Adoption Framework for Azure? O Make a plan O Define your strategy O Adopt the cloud O Ready your organization
Define your strategy
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. What are two possible solutions? O Modify a network security group O Modify an Azure Traffic Manager profile O Modify an Azure firewall O Modify a DDoS protection plan
Modify a network security group Modify an Azure firewall
You are planning to migrate a company to Azure. Each of the company's numerous divisions will have an administrator in place to manage the Azure resources used by their respective division. You want to make sure that the Azure deployment you employ allows for Azure to be segments for the divisions, while keeping administrative effort to a minimum. Solution: You plan to make use of several azure active directory directories Does the solution meet the goal?
No
You have been informed by your superiors of the company's intentions to automate server deployment to Azure. There is, however some concern that administrative credentials could be uncovered during this process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution. Solution: You recommend the use of Azure Information Protection. Does this meet the goal?
No
Your Azure environment contains multiple Azure VMs. You need to ensure that a vm named VM1 is accessible from the internet over HTTP. Solution: You modify an Azure Traffic Manager profile. Does this meet the goal?
No
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a DDoS protection plan. Does this meet the goal?
No
Your companies active directory forest includes thousands of user accounts. You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired. You are required to employ a strategy that reduces the effect on uses, once the planned migration has been completed. Solution: You plan to require Azure MFA. Does this meet the goal?
No
Your company has an Azure subscription that contains the following unused resources: - 20 user accounts in Azure AD - Five groups in Azure AD - 10 public IP addresses - 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused groups. Does this meet the goal?
No
Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Basic support plan. Does this meet the goal?
No
Your company's active directory forest includes thousands of user accounts. You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired. You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed. Solution: You plan to require Azure Multi-Factor Authentication. Does the solution meet the goal?
No
Select yes or no: A platform as a service solution that hosts web apps in Azure provides full control of the operation systems that host applications. - A platform as a service solution provides additional memory to apps by changing pricing tiers. - A platform as a service solution can automatically scale the number of instances based on demand. -
No No Yes
Eval the underlined text: The Azure __Standard__ support plan is the lowest cost option to receive 24x7 access to support engineers by phone. O Basic O Professional Direct O No change is needed O Developer
No change is needed
Your company plans to request an architectural review of an Azure environment from Microsoft. The company currently has a Basic support plan. You need to recommend a new support plan for the company. The solution must minimize costs. Which support plan should you recommend? O Premier O Standard O Developer O Professional Direct
Premier
In which Azure support plans can you open a new support request? O Premier and Professional Direct only O Premier, Professional Direct, and Standard only O Premier, Professional Direct, Standard, and Developer only O Premier, Professional Direct, Standard, Developer, and Basic
Premier, Professional Direct, Standard, and Developer only
In which Azure support plans can you open a new support request? O Professional Direct O Standard O Developer O Basic O Premier
Professional Direct Standard Developer Premier
Your Azure trial account expired last week. You are now unable to ____. O Start an existing Azure virtual machine O Access your data stored in Azure O Access the Azure portal O Create additional Azure Active Directory user accounts
Start an existing Azure virtual machine
Your network contains an Active Directory forest. The forest contains 5,000 user accounts. Your company plans to migrate all network resources to Azure and to decommission the on-premises data center. You need to recommend a solution to minimize the impact on users after the planned migration. What should you recommend? O Implement Azure Multi-Factor Authentication (MFA) O Sync all the Active Directory user accounts to Azure Active Directory (Azure AD) O Instruct all users to change their password O Create a guest user account in Azure Active Directory (Azure AD) for each user
Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)
Your company has a Software Assurance agreement that includes Microsoft SQL Server Licenses. You plan to deploy SQL Server on Azure virtual machines. What should you do to minimize licensing costs for the deployment? O Configure Azure Cost Management budgets. O Use Azure reservations O Deallocate the virtual machines during off hours. O Use Azure Hybrid Benefit
Use Azure Hybrid Benefit
Your Azure environment contains multiple Azure VMs. You need to ensure that a vm named VM1 is accessible from the internet over HTTP. Solution: You modify an Azure firewall. Does this meet the goal?
Yes
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a network security group. Does this meet the goal?
Yes
Your company has an Azure AD environment. Users occasionally connect to Azure AD via the internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords. Solution: You configure the use of Azure AD Identity Protection. Does this meet the goal?
Yes
Your company has an Azure subscription that contains the following unused resources: - 20 user accounts in Azure AD - Five groups in Azure AD - 10 public IP addresses - 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused public IP addresses. Does this meet the goal?
Yes
Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Premier support plan. Does this meet the goal?
Yes
Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Professional Direct support plan. Does this meet the goal?
Yes
Select yes or no: Most Azure services are introduced in private preview before begin introduced in public preview, and then in general availability - Azure services in public preview can be managed only by using the Azure CLI - The cost of an Azure service in private preview decreases when the service becomes generally available -
Yes No No
Select yes or no: Azure provides flexibility between capital expenditures and operational expenditures. - If you create two Azure virtual machines that use B2S size, each virtual machine will always generate the same monthly costs. - When an Azure virtual machine is stopped, you continue to pay storage costs associated to the virtual machine. -
Yes No Yes
To what should an application connect to retrieve security tokens? O an Azure key vault O a certificate store O an azure storage account O Azure Active directory
Azure Active directory
Evaluate the underlined text: From __Azure Cloud Shell__ you can track your company's regulatory standards and regulations such as ISO 27001. O no change is need O the Trust Center O the Microsoft Partner Portal O Compliance Manager NOT completed
Compliance Manager
Which statement accurately describes the Modern Lifecycle Policy for Azure services? O Microsoft provides mainstream support for a service for five years. O After a service is made generally available, Microsoft provides support for the service for a minimum of four years. O Microsoft provides a minimum of 12 months' notice before ending support for a service. O When a service is retired, you can purchase extended support for the service for up to five years.
Microsoft provides a minimum of 12 months' notice before ending support for a service.
Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation? O Network security groups (NSGs) O Azure Service Bus O A local network gateway O A route filter
Network security groups (NSGs)
You have been informed by your superiors of the company's intentions to automate server deployment to Azure. There is, however some concern that administrative credentials could be uncovered during this process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution. Solution: You recommend the use of Azure Multi-Factor Authentication (MFA). Does this meet the goal?
No
Your company has an Azure AD environment. Users occasionally connect to Azure AD via the internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords. Solution: You configure the use of Azure AD Privileged Identity Management. Does this meet the goal?
No
Your company has an Azure subscription that contains the following unused resources: - 20 user accounts in Azure AD - Five groups in Azure AD - 10 public IP addresses - 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused network interfaces. Does this meet the goal?
No
You are planning a strategy to deploy numerous web servers and database servers to Azure. This strategy should allow for connection types between the web servers and database servers to be controlled. Solution: You include network security groups in your strategy. Does this solution meet the goal?
Yes
Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Standard support plan. Does this meet the goal?
Yes
Which two types of customer are eligible to use Azure government to develop a cloud solution? Choose two O a United States government contractor O a European government contractor O a European government entity O a United States government entity O a Canadian government contractor
a United States government contractor a United States government entity
You plan to deploy several Azure virtual machines. You need to control the ports that devices on the internet can use to access the vms. What should you use? O a network security group O An Azure key vault O an Azure Active Directory role O An Azure Active Directory group
a network security group
You have a resource group named RG1. You need to prevent the creation of virtual machines only in RG1. The solution must ensure that other objects can be created in RG1. What should you use? O a lock O an Azure role O a tag O an Azure policy
an Azure policy
Your company has an Azure subscription that contains resources in several regions. You need to ensure that admins can only create resources in those regions. What should you use? O a management group O an Azure policy O a reservation O a read-only lock
an Azure policy
Your developers have created a portal web app for users in the Miami branch office. The web app will be publicly accessible and used by the Miami users to retrieve customer and product information. The web app is currently running in an on-premises test environment. You plan to host the web app on Azure. You need to determine which Azure web tier plan to host the web app. The web tier plan must meet the following requirements: + The website will use the miami.weyland.com URL. + The website will be deployed to two instances. + SSL support must be included. + The website requires 12 GB of storage. * Costs must be minimized. Which web tier plan should you use? O shared O free O standard O basic
standard
Eval the underlined text: You can create an Azure support request from __support.microsoft.com__. O the Azure portal O No change is needed O the Knowledge Center O the Security & Compliance admin center
the Azure portal