AZ 900 Fundamentals Exam Prep 2023
You work for a private equity firm in Richmond, Virginia. You are planning to deploy a virtual machine (VM) to Azure that allows developers to run a .NET Core web service. The client applications that access the web service are deployed at the firm. The developers inform you that any operating system can be used. You need to use Azure pricing calculator to determine the least expensive cost of the deployed VM. Which settings should you select? -Region a. East US b. Central US c. US Gov Virginia -Tier a. Standard b. Basic c. Premium -Operating System a. Linux b. MacOS c. Windows
-Region a. East US -Tier b. Basic -Operating System a. Linux
- Company A wants its development and QA departments to manage App Services, its IT and development departments to manage virtual machines (VMs), and its IT department to manage SQL Database instances. These departments should manage the corresponding resource in both the production and development environments. - Company B wants it development department to manage its own VMs and storage accounts, and its sales team to manage its own Machine Learning (ML) models. - Company C wants its IT department to manage SQL Server VMs that are in the production environment. It also wants to allow its development department to manage SQL Server VMs that host applications in the development environment. - You need to choose the most appropriate resource group organization for each company. Which resource group organization should you use for each company? To answer, select the appropriate company to each resource group organization. 1. Create a resource group for each department a. Company A b. Company B c. Company C. 2. Create a resource group for each resource type a. Company A b. Company B c. Company C 3. Create a resource group for each environment a. Company A b. Company B c. Company C
1. b. Company B 2. a. Company A 3. c. Company C
An if-then statement of Assignment and Access controls
Azure AD
Compare using Azure PowerShell and Azure CLI for Azure management. Command execution supported in Azure Cloud Shell. a. Azure CLI only b. Azure PowerShell only c. Both d. Neither
Both
Compare using Azure PowerShell and Azure CLI for Azure management. Commands work the same on Mac, Linux and Windows. a. Azure CLI only b. Azure PowerShell only c. Both d. Neither
Both
Compare using Azure PowerShell and Azure CLI for Azure management. Executes commands in an interactive environment. a. Azure CLI only b. Azure PowerShell only c. Both d. Neither
Both
Responsible for Authentication
Conditional Access
A cloud service that can be recovered after a failure occurs
Disaster Recovery
A cloud service that performs quickly when demand increases
Dynamic Scalability
A company is planning on hosting a solution with Microsoft Azure Cloud. They need to implement MFA for identities hosted in Microsoft Azure. There are only two valid ways of authentications for MFA as listed below: -Picture Identification -Passport Number Is the above true or false? True False
False
A company plans on purchasing a Microsoft Azure Support plan. Below is a key requirement for the support plan: Provide an option to contact Microsoft support engineers by phone or email during business hours. A recommendation is made to purchase the Basic Support plan. Would this recommendation fulfill the requirement? True False
False
All Azure services in private preview must be accessed by using a separate Azure portal. True False
False
Availability Zones are used to replicate data and applications to multiple regions True False
False
Azure Files is an example of SaaS. True False
False
Azure key vault can analyze security log files from Azure virtual machines. True False
False
Azure pay-as-you-go pricing is an example of CapEx. True False
False
Azure service in public preview are subject to SLA True False
False
Blob Storage account and a general-purpose storage account, both are the same. True False
False
Building a data center infrastructure is an example of operational expenditure (OpEx) costs. True False
False
DNS server runs on a virtual machine is PaaS. True False
False
Data transfers between Azure service located in different Azure regions are always free True False
False
During Public Preview phase only those with special invite can access the service? True False
False
Every Azure region has multiple datacenters True False
False
Geo-zone-redundant storage (GZRS) includes both general-purpose v1 and general-purpose v2 storage accounts True False
False
If you have Azure resources deployed to every region, you can implement availability zones in all regions. True False
False
North America is represented by a single Azure region. True False
False
SQL Server installed on a virtual machine is SaaS True False
False
You are required to deploy an Artificial Intelligence (AI) solution in Azure. You want to make sure that you are able to build, test, and deploy predictive analytics for the solution. Solution: you should make use of Azure Cosmos DB. Does this solution meet the goal? True False
False
You can always invite guest users in your directory to use Azure AD DS. True False
False
You can create Group Policies in Azure Active Directory (Azure AD). True False
False
You can create multiple managed domains for a single Azure AD directory. True False
False
You can join Android devices to Azure Active Directory (Azure AD). True False
False
You can pause an Azure AD DS managed domain. True False
False
Your company has a private cloud setup, and they want to start using Microsoft Azure Hybrid cloud model. They would need to migrate their entire private cloud model to achieve a hybrid cloud model. Is this true or false? True False
False
A cloud service that remains available after a failure occurs
Fault Tolerance
you can deploy apps and data to regional datacenters around the globe. Thereby you can ensure your customers have the best performance in their region.
Geo-Distribution
enables you to control Governance policies set by the organization.
Isoloation
A cloud service that can be accessed quickly from the internet
Low Latency
Compare using Azure PowerShell and Azure CLI for Azure management. Supports an optional GUI interface. a. Azure CLI only b. Azure PowerShell only c. Both d. Neither
Neither
A Platform as a Service (PaaS) solution that hosts web apps in Azure provides full control of the operating system that hosts applications. Yes No
No
A company is migrating several web apps from an on-premises private cloud deployment to Azure. The company wants to use Azure Active Directory (Azure AD) for authentication and authorization. You need to determine if Azure AD will meet your authentication requirements. Azure AD authentication and authorization support requires integration with an on-premises AD. Yes No
No
A company is planning on moving to Microsoft Azure. Senior management wants to get an idea on the cost that will be incurred if decided to host resources within Azure. Solution: You recommend using the Azure Cost Management to get the required costing of the resources. Would this recommendation fit the requirement? Yes No
No
A company is planning on moving to Microsoft Azure. Senior management wants to get an idea on the cost that will be incurred if decided to host resources within Azure. Solution: You recommend using the Cloudyn service to get the required costing of the resources. Would this recommendation fit the requirement? Yes No
No
A company is planning on using an Azure App Service to host a set of web applications. The company has the Basic tier service plan. Does Microsoft automatically provide professional technical support service with the Basic support plan? Yes No
No
A company plans to setup multiple resources within their Microsoft Azure subscription. They want to implement tagging of resources within Microsoft Azure. But they want to ensure that when resource groups are created, they have to contain a tag with a name of "organization" and value of "montana". You recommend using Azure Key Vault for implementing this requirement. Would this recommendation fulfill the requirement? Yes No
No
A company plans to setup multiple resources within their Microsoft Azure subscription. They want to implement tagging of resources within Microsoft Azure. But they want to ensure that when resource groups are created, they have to contain a tag with a name of "organization" and value of "montana". You recommend using Azure locks for implementing this requirement. Would this recommendation fulfill the requirement? Yes No
No
A resource group can contain resources from the same region as the resource group only. Yes No
No
A shared access signature is required to access Azure Files. Yes No
No
A subscription can only have one license. Yes No
No
A user can only be access to one subscription. Yes No
No
All Azure resources deployed to a single resource group must share the same Azure region. Yes No
No
All Azure resources support tags. Yes No
No
All data that is copied to an Azure Storage account is backed up automatically to another Azure data center. Yes No
No
An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use the run script. Solution: Run the script from a computer that runs MacOS and has PowerShell Core 6.0 installed. Does this meet the goal? Yes No
No
An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use the run the script. Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed. Does this meet the goal? Yes No
No
An Azure storage account can contain up to 2 TB of data and up to one million files. Yes No
No
An Azure virtual machine can be in multiple resource groups. Yes No
No
An initiative is limited to being assigned to resource groups or subscriptions only. Yes No
No
Archive tier provides 99.99% of availability. Yes No
No
Availability Zones are used to replicated data and applications to multiple regions Yes No
No
Availability Zones can be implemented in all Azure Regions Yes No
No
Azure Active Directory (Azure AD) is used to manage API cryptographic keys. Yes No
No
Azure Advisor makes shutdown recommendations based on CPU and memory utilization over the last seven days. Yes No
No
Azure DDoS Protection Standard is enabled automatically. Yes No
No
Azure ExpressRoute is used to secure traffic between virtual networks. Yes No
No
Azure IaaS provides and manages container orchestrators. Yes No
No
Azure PowerShell virtual machine (VM) management is limited to Windows VMs only. Yes No
No
Azure Resource Manager templates use Azure PowerShell syntax. Yes No
No
Configuring VNet peering requires a short downtime for the peered virtual networks. Yes No
No
Creating a virtual machine (VM) running Windows Server 2016 is an example of PaaS. Yes No
No
For organizations with consistent, high utilization, the consumption-based pricing model is the most efficient one. Yes No
No
If you assign a tag to a resource group, all the Azure resources in that resource group are assigned to the same tag. Yes No
No
If you create two Azure virtual machines that use the B2S size, each virtual machine will always generate the same monthly costs. Yes No
No
In a public cloud model, only guest users at your company can access the resources in the cloud. Yes No
No
Locks can be applied in the context of specific users and roles. Yes No
No
Microsoft Defender for Cloud support is limited to Windows only operating system. Yes No
No
Microsoft SQL Server 2019 installed on an Azure virtual machine is an example of Platform as a Service (PaaS). Yes No
No
Only virtual machines that run Windows Server can be created in availability zones Yes No
No
Regarding Azure Dedicated hosts, you are charged per number of virtual machines (VMs) deployed. Yes No
No
Regarding Azure Dedicated hosts, you can share a provided physical server across your multiple Azure subscriptions. Yes No
No
Role-based access control (RBAC) roles take precedence over locks. Yes No
No
Spot virtual machines (VMs) use the standard service level agreement (SLA) for Azure VMs. Yes No
No
Tags can aid in cost management from your subscriptions, and each tag consists of a name, location, and value. Yes No
No
The Archive access tier is set at storage account level Yes No
No
The responsibility for the management of accounts is transferred to the cloud provider. Yes No
No
The responsibility for the operating systems in Platform-as-a-Service (PaaS) is retained by the customer. Yes No
No
To achieve a hybrid cloud model, a company must always migrate from a private cloud model. Yes No
No
To implement a hybrid cloud model, a company must have an internal network. Yes No
No
Traffic between peered virtual networks (VNet) is routed over the public internet. Yes No
No
Using CapEx for infrastructure spending is a good idea when demand fluctuates or is unknown. Yes No
No
When a blueprint is updated and the updated version is published, any assignments of the blueprint are updated automatically. Yes No
No
When running Azure PowerShell with Cloud Shell, both Linux-specific and Windows-specific functionality is available. Yes No
No
With (IaaS) you are responsible for managing applications and middleware while Azure manages operating systems. Yes No
No
With Software as a Service (SaaS), you must apply software updates Yes No
No
You are charged for the use of Azure Virtual Desktop on a monthly basis accordingly by active users. Yes No
No
You are planning on migrating a company to Azure. Each of the company's numerous divisions will have an administrator in place to manage the Azure resources used by their respective division. You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the division, while keeping administrative effort to a minimum. Solution: You plan to make use of several Azure Active Directory (Azure AD) directories. Does the solution meet the goal? Yes No
No
You are planning to move your company's web applications to Azure. You want to use Azure's security features. You need to understand the difference between authentication and authorization in Azure. Authorization can use passwords to identify a person. Yes No
No
You are required to deploy an Artificial Intelligence (AI) solution in Azure. You want to make sure that you are able to build, test, and deploy predictive analytics for the solution. Solution: You should make sure of Azure Cosmos DB. Does this solution meet the goal? Yes No
No
You are tasked with deploy Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Platform as a Service (PaaS). Does this meet the solution goal? Yes No
No
You are tasked with deploy Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Software as a Service (SaaS). Does this meet the solution goal? Yes No
No
You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure. You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible. Solution: You include one virtual machine and two availability zones in your strategy. Does this solution meet the goal? Yes No
No
You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure. You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible. Solution: You include two virtual machines and one availability zone in your strategy. Does this solution meet the goal? Yes No
No
You can copy a virtual machine from one subscription to another Yes No
No
You can create a resource group inside of another resource group. Yes No
No
You can improve SLA by adding more dependent services to your application Yes No
No
You have an Azure subscription named Subscription1. You sign into the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys. You need to create VM1 in Subscription1 by using the command. Solution: From a computer that runs Windows 10, install Azure CLI. From PowerShell, sign into Azure and then run the command. Does this meet the goal? Yes No
No
You have an Azure subscription named Subscription1. You sign into the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys. You need to create VM1 in Subscription1 by using the command. Solution: From a computer that runs Windows 10, install Azure CLI. From a command prompt, sign into Azure and then run the command. Does this meet the goal? Yes No
No
You have been informed by your superiors of the company's intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during the process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure Solution. Solution: You recommend the use of Azure Information Protection. Does the solution meet the goal? Yes No
No
You have been informed by your superiors of the company's intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during the process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure Solution. Solution: You recommend the use of Azure Multi-Factor Authentication (MFA). Does the solution meet the goal? Yes No
No
You need to use Azure Cloud Shell to manage Linux virtual machines (VMs) that are already deployed and in use. Azure Portal. Yes No
No
You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. Solution: You deploy the virtual machines to a scale set. Does this meet the goal? Yes No
No
You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. Solution: You deploy the virtual machines to two or more resource groups. Does this meet the goal? Yes No
No
You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. Solution: You deploy the virtual machines to two or more scale sets. Does this meet the goal? Yes No
No
You work for a cloud solution provider. One of your company's clients considers moving it on-premises infrastructure to the cloud. However, the client wants a better understanding of the different models before it make a decision. A third-party will not be involved. You need to describe the advantages of the different cloud models. The hybrid cloud allows you to deploy resources with no capital expenditure and minimal IT expertise. Yes No
No
You work for a cloud solution provider. One of your company's clients considers moving it on-premises infrastructure to the cloud. However, the client wants a better understanding of the different models before it make a decision. A third-party will not be involved. You need to describe the advantages of the different cloud models. The private cloud allows you to deploy resources by having minimal IT expertise. Yes No
No
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a DDoS protection plan. Does this meet the goal? Yes No
No
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure Traffic Manager profile. Does this meet the goal? Yes No
No
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure firewall. Does this meet the goal? Yes No
No
Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords. Solution: You configure the use of Azure AD Privileged Identity Management. Does this solution meet the goal? Yes No
No
Your company is planning to migrate all their virtual machines to an Azure pay-as-you-go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center. You are required to make sure that the intended Azure solution uses the correct expenditure model. Solution: You should recommend the use of the elastic expenditure model. Does the solution meet the goal? Yes No
No
Your company is planning to migrate all their virtual machines to an Azure pay-as-you-go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center. You are required to make sure that the intended Azure solution uses the correct expenditure model. Solution: You should recommend the use of the scalable expenditure model. Does the solution meet the goal? Yes No
No
Your company is reorganizing after acquiring a new company. Both your company and the new company have their own Azure Active Directory (Azure AD) tenants. You need to determine what happens when you transfer the billing ownership of a subscription from an account in your Azure AD tenant to an account in another Azure AD tenant and associate the subscription with the new directory. System-assigned Managed Identities are re-enabled automatically. Yes No
No
Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: You can create an Azure App Service and Azure Storage accounts. Does this meet the goal? Yes No
No
Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: You create an Azure App Service and Azure virtual machines that have Microsoft SQL server installed. Does this meet the goal? Yes No
No
Your company's Active Directory forest includes thousands of user accounts. You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired. You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed. Solution: You plan to require Azure Multi-Factor Authentication (MFA). Does the solution meet the goal? Yes No
No
Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. 60% of the VMs have Windows Server 2016 installed, while the other 40% has Ubuntu Linux installed. You are required to make sure that the administrative effort needed for this process is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure Reserved Virtual Machines (VM) Instances. Does this solution meet the goal? Yes No
No
Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. 60% of the VMs have Windows Server 2016 installed, while the other 40% has Ubuntu Linux installed. You are required to make sure that the administrative effort needed for this process is reduced by employing a suitable Azure service. Solution: You recommend the use of Microsoft Managed Desktop. Does this solution meet the goal? Yes No
No
Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure Reserved Virtual Machines (VM) Instances. Does this solution meet the goal? Yes No
No
Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: You recommend the use of Microsoft Managed Desktop. Does this solution meet the goal? Yes No
No
Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that management groups be included in the strategy. Does the solution meet the goal? Yes No
No
Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that the Azure API Management service be included in the strategy. Does the solution meet the goal? Yes No
No
Your virtual machine VM1 resides in Resource Group RG1 in Subscription A. You want to copy VM1 to another resource group RG2 in Subscription B. Is this possible? Yes No
No
Your virtual machine VM1 resides in Resource Group RG1. You want to copy VM1 to another resource group RG2. Is this possible? Yes No
No
Responsible for Authorization
RBAC
the ability to group related assets that are a part of (or support) workload operations.
Segmentation
An Azure resource can have multiple locks. True False
True
An Azure resource inherits locks from its resource group (this is the parent level) True False
True
Azure AD DS includes high availability options. True False
True
Azure Active Directory Domain Services is part of Microsoft Entra True False
True
Azure Active directory lets you set dynamic membership rules. True False
True
Azure Key Vault automatically generates a new secret after every use. True False
True
Azure Monitor can monitor the performance of on-premises computers. True False
True
Azure Monitor can send alerts to Azure Active Directory security groups. True False
True
Azure Monitor can trigger alerts based on data in an Azure Log Analytics workspace. True False
True
Azure Reserved VM instances are example of the CapEx pricing model True False
True
Azure SQL database is an example of PaaS. True False
True
Azure provides flexibility between capital expenditure (CapEx) and operational expenditure (OpEx). True False
True
Azure services in public preview can be used in production environments True False
True
Azure web app, Azure logic app and Azure SQL database are all examples of Platform as a Service (PaaS). True False
True
Capital Expenditure is the up-front spending of money on physical infrastructure, and then deducting that up-front expense over time. True False
True
Cloud Computing leverages virtualization to provide services to multiple customers simultaneously True False
True
Data that is copied to an Azure Storage accounting maintained automatically in at least three copies True False
True
Delete and CanNotDelete, both locks achieve the same objective. Users can read only and modify a resource, but they can't delete it. True False
True
Deploying your own datacenter is an example of CapEx. True False
True
Google Apps, Microsoft Office 365, Gmail Yahoo and Facebook are examples of SaaS. True False
True
If an Azure resource has a Read-only Lock, you can add a Delete lock to the resource True False
True
Leasing software is an example of operational expenditures (OpEx) costs. True False
True
Microsoft Customer Support Services will supply support services during public preview True False
True
Monthly salaries for technical personnel are an example of operational expenditure (OpEx) costs True False
True
Operational Expenditure is spending money on services or products now and being billed for them now True False
True
Paying electricity for your datacenter is an example of OpEx. True False
True
Read only means authorized users can read a resource, but they can't delete or update it True False
True
The archive tier is not supported as the default access tier for a storage account. True False
True
When an Azure virtual machine is stopped, you continue to pay storage costs associated to the virtual machine. True False
True
You are required to deploy an Artificial Intelligence (AI) solution in Azure. You want to make sure that you are able to build, test, and deploy predictive analytics for the solution. Solution: You should make use of Azure Machine Learning Studio. Does this meet the goal? True False
True
You can enable Azure AD DS in an Azure Resource Manager virtual network. True False
True
You can join Windows 10 devices to Azure Active Directory (Azure AD). True False
True
You can move VMs to another Azure region. True False
True
Elasticity
When the system is elastic that means it can adjust its processing power to match the demand. This means the system can allocate and deallocate resources dynamically.
A Platform as a Service (PaaS) solution that hosts web apps in Azure Web Apps in Azure provides the ability to scale the platform automatically Yes No
Yes
A Platform as a Service (PaaS) solution that hosts web apps in Azure provides professional development services to continuously add features to customer applications. Yes No
Yes
A VNet is created within the scope of a region Yes No
Yes
A company can extend the capacity of its internal network by using the public cloud. Yes No
Yes
A company can extend the computing resources of its internal network by using a hybrid cloud. Yes No
Yes
A company is migrating several web apps from an on-premises private cloud deployment to Azure. The company wants to use Azure Active Directory (Azure AD) for authentication and authorization. You need to determine if Azure AD will meet your authentication requirements. Azure AD support authorization through the use of role-based access control (RBAC). Yes No
Yes
A company is migrating several web apps from an on-premises private cloud deployment to Azure. The company wants to use Azure Active Directory (Azure AD) for authentication and authorization. You need to determine if Azure AD will meet your authentication requirements. We apps must be registered with Azure AD to support authentication and authorization services. Yes No
Yes
A company is planning on deploying Microsoft Azure resources to a Resource Group (RG1). But the resources would belong to different locations. Can you have resources that belong to the same resource but be in multiple locations? - Resource Group (RG1) location: West US - Storage account, location: West US - Virtual Machine: Central US - Function App: West India - Web App: West Europe - Data Factory: South India Yes No
Yes
A company is planning on moving to Microsoft Azure. Senior management wants to get an idea on the cost that will be incurred if decided to host resources within Azure. Solution: You recommend using the Total Cost of Ownership (TCO) Calculator. Would this recommendation fit the requirement? Yes No
Yes
A company is planning on setting up a Pay-as-you-go subscription within Microsoft Azure. Would the company have access to the support forms? Yes No
Yes
A company plans to setup multiple resources within their Microsoft Azure subscription. They want to implement tagging of resources within Microsoft Azure. But they want to ensure that when resource groups are created, they have to contain a tag with a name of "organization" and value of "montana". You recommend using Azure policies for implementing this requirement. Would this recommendation fulfill the requirement? Yes No
Yes
A lock applies to all of the resources contained in a scope and any new resources added to the scope. Yes No
Yes
A resource group can contain resources from multiple Azure regions. Yes No
Yes
A subscription can contain one or more resource groups. Yes No
Yes
An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use the run script. Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell. Does this meet the goal? Yes No
Yes
An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use the run script. Solution: You use Bash in Azure Cloud Shell. Does this meet the goal? Yes No
Yes
An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use the run script. Solution: You use a computer that runs Windows 10 and has Azure PowerShell module installed. Does this meet the goal? Yes No
Yes
An initiative can only contain policies that are located in the same subscription. Yes No
Yes
Azure AD can save logs in Azure monitor Yes No
Yes
Azure Backup is an example of Platform as a Service (PaaS). Yes No
Yes
Azure Cosmos DB is an example of Platform as a Service (PaaS). Yes No
Yes
Azure Cosmos DB is an example of Serverless Yes No
Yes
Azure DDoS Protection Standard provides protection against volumetric, protocol, and application layer attacks. Yes No
Yes
Azure File Sync enables centralizing your organization's file share in Azure Files, while keeping the flexibility, performance, and compatibility of a Windows file server. Yes No
Yes
Azure Files can be accessed using the Network File System (NFS) protocol Yes No
Yes
Azure Files can be accessed using the Server Message Block (SMB) protocol. Yes No
Yes
Azure PowerShell can be run in a browser in the Azure Cloud Shell. Yes No
Yes
Azure PowerShell can be used to create scripts to automate Azure management tasks. Yes No
Yes
Azure SQL Database is an example of Platform as a Service (PaaS) Yes No
Yes
Azure Storage encryption is enabled by default and cannot be disabled. Yes No
Yes
Azure Virtual Desktop supports Remote Desktop clients on MacOS and iOS. Yes No
Yes
Azure Virtual Desktop users should exist in the same Windows Server Active Directory (AD) that is linked to Azure AD. Yes No
Yes
Azure provides flexibility between capital expenditures (CapEx) and operational (OpEx). Yes No
Yes
CapEx costs are fixed. Yes No
Yes
Cloud Shell provides a way to run Azure Command-Line Interface (CLI) and Azure PowerShell on iOS and Android mobile devices. Yes No
Yes
Cloud Shell times out after 20 minutes of inactivity. Yes No
Yes
Data that is stored in Azure Storage account automatically h as at least three copies. Yes No
Yes
ExpressRoute traffic is routed through a private connection. Yes No
Yes
For each of the following statements regarding Azure virtual network peering, select Yes if the statement is True. Otherwise, select No. Virtual network peering can be used to connect virtual networks across Azure regions. Yes No
Yes
IaaS allows you to rent virtual infrastructure and have control over the operating system (OS). Yes No
Yes
If you set permissions to a resource group, all the Azure resources in that resource group inherit the permissions Yes No
Yes
In the fixed price model, you pay for resources even if you do not use them. Yes No
Yes
Locking a resource group as read-only restricts all resources within the resource group, and users cannot modify or delete a resource. Yes No
Yes
Microsoft Defender for Cloud can automatically discover and assess security for new Azure resources as they are deployed. Yes No
Yes
Microsoft Defender for Cloud provides native integration with Microsoft Defender Antivirus in Windows. Yes No
Yes
Microsoft Defender for Cloud supports monitoring, security recommendations, and advanced threat protection for cloud and on-premises virtual machine (VM) resources. Yes No
Yes
Multiple subscriptions can be owned by a single organization. Yes No
Yes
PaaS allows you to manage applications without controlling the underlying OS. Yes No
Yes
Quotas for resources in Azure Resource Groups are per region and per subscription. Yes No
Yes
Regarding Azure Dedicated hosts, a provided physical server is dedicated to your organization's workload only. Yes No
Yes
Resources (IaaS) can be allocated on a pay-as-you-go basis, whenever needed. Yes No
Yes
Resources can interact with other resources in a different resource group. Yes No
Yes
SaaS allows you to subscribe to software. Yes No
Yes
SaaS gives you a way to give users to sophisticated applications in a pay-as-you-go environment. Yes No
Yes
Spot pricing provides access to discounted Azure compute resources. Yes No
Yes
Tags applied to a resource group are inherited by its resources. Yes No
Yes
Tags are key-value pairs. Yes No
Yes
The Pay-as-you-go consumption model qualifies as an OpEx. Yes No
Yes
The customer always retains the responsibility for the data. Yes No
Yes
The hot access tier is recommended for data that is accessed and modified frequently. Yes No
Yes
The service provider is responsible for all infrastructure hardware in SaaS, PaaS, and IaaS. Yes No
Yes
There are no upfront costs when using the consumption-based model. Yes No
Yes
To read a blob that is in the archive tier, you must first rehydrate the blob to an online tier (hot or cool) tier. Yes No
Yes
Virtual network peering can be used to transfer data between Azure Active Directory (Azure AD) tenants. Yes No
Yes
Virtual networks from multiple subscriptions in your organization can link to the same Azure DDoS Protection plan. Yes No
Yes
When a blueprint is unassigned, all of the resources assigned by the blueprint remain in place, but blueprint resource locking is removed. Yes No
Yes
When an Azure virtual machine is stopped, you continue to pay storage costs associated to the virtual machine. Yes No
Yes
When an initiative assignment is evaluated, all of the policies in that initiative are evaluated. Yes No
Yes
When multiple locks are applied at different scopes, the most restrictive inherited lock applies. Yes No
Yes
When you delete a core blueprint, any blueprint versions of that blueprint, including both Draft and Published blueprints are deleted, except the one that has active assignments. Yes No
Yes
With Infrastructure as a Service (IaaS), you must install the software you want to use. Yes No
Yes
You are planning on migrating a company to Azure. Each of the company's numerous divisions will have an administrator in place to manage the Azure resources used by their respective division. You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the division, while keeping administrative effort to a minimum. Solution: You plan to make use of Azure Resource Manager. Does the solution meet the goal? Yes No
Yes
You are planning to move your company's web applications to Azure. You want to use Azure's security features. You need to understand the difference between authentication and authorization in Azure. Authentication can use certificates to identify a person or service. Yes No
Yes
You are planning to move your company's web applications to Azure. You want to use Azure's security features. You need to understand the difference between authentication and authorization in Azure. Authentication ensure that the user name and password combination is correct. Yes No
Yes
You are planning to move your company's web applications to Azure. You want to use Azure's security features. You need to understand the difference between authentication and authorization in Azure. Authorization ensures that an account has sufficient permissions to access a resource. Yes No
Yes
You are required to deploy an Artificial Intelligence (AI) solution in Azure. You want to make sure that you are able to build, test, and deploy predictive analytics for the solution. Solution: You should make sure of Azure Machine Learning Studio. Does this solution meet the goal? Yes No
Yes
You are tasked with deploy Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Infrastructure as a Service (IaaS). Does this meet the solution goal? Yes No
Yes
You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure. You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible. Solution: You include two virtual machines and two availability zones in your strategy. Does this solution meet the goal? Yes No
Yes
You can add a resource to or remove a resource from a resource group as long as the resource group is not locked. Yes No
Yes
You can improve composite SLA by adding redundant services to your application. Yes No
Yes
You can integrate on-premises Active Directory domains with Azure Active Directory. Yes No
Yes
You can move Azure VMs to another Azure region Yes No
Yes
You can move a Virtual Machine from one subscription to another subscription Yes No
Yes
You can set the maximum price that you agree to pay. Yes No
Yes
You can transfer an existing subscription to a new Azure Active Directory (AD) tenant. Yes No
Yes
You can use Azure Advisor to reduce costs by resizing underutilized virtual machines. Yes No
Yes
You have a subscription SUB1 with a virtual machine VM1. You create a new subscription SUB2 and move VM1 to SUB2. Is this possible? Yes No
Yes
You have an Azure subscription named Subscription1. You sign into the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys. You need to create VM1 in Subscription1 by using the command. Solution: From a computer that runs Windows 10, install Azure CLI. From the Azure portal, launch Azure Cloud Shell and select Bash. Run the command in Cloud Shell. Does this meet the goal? Yes No
Yes
You have been informed by your superiors of the company's intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during the process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure Solution. Solution: You recommend the use of Azure Key Vault. Does the solution meet the goal? Yes No
Yes
You need to use Azure Cloud Shell to manage Linux virtual machines (VMs) that are already deployed and in use. Azure Command-line Interface. Yes No
Yes
You need to use Azure Cloud Shell to manage Linux virtual machines (VMs) that are already deployed and in use. Azure PowerShell. Yes No
Yes
You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. Solution: You deploy the virtual machines to two or more availability zones. Does this meet the goal? Yes No
Yes
You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. Solution: You deploy the virtual machines to two or more regions. Does this meet the goal? Yes No
Yes
You work for a cloud solution provider. One of your company's clients considers moving it on-premises infrastructure to the cloud. However, the client wants a better understanding of the different models before it make a decision. A third-party will not be involved. You need to describe the advantages of the different cloud models. The public cloud allows you to deploy resources without managing the underlying hardware. Yes No
Yes
You work for a small-sized company that hosts its web server running Microsoft Internet Information Services (IIS) and email server running Microsoft Exchange on premises. As demand on the web server increases, you want to add a secondary web server to spread out the traffic. As demand decreases, you want to decommission the web server to save energy and maintenance. You consider moving the current infrastructure to the cloud. You need to determine the benefits of moving the infrastructure to the cloud. You can resize the disk on demand on mail server if e-mail storage demand increases. Yes No
Yes
You work for a small-sized company that hosts its web server running Microsoft Internet Information Services (IIS) and email server running Microsoft Exchange on premises. As demand on the web server increases, you want to add a secondary web server to spread out the traffic. As demand decreases, you want to decommission the web server to save energy and maintenance. You consider moving the current infrastructure to the cloud. You need to determine the benefits of moving the infrastructure to the cloud. You can use horizontal scaling for the web server. Yes No
Yes
You work for a small-sized company that hosts its web server running Microsoft Internet Information Services (IIS) and email server running Microsoft Exchange on premises. As demand on the web server increases, you want to add a secondary web server to spread out the traffic. As demand decreases, you want to decommission the web server to save energy and maintenance. You consider moving the current infrastructure to the cloud. You need to determine the benefits of moving the infrastructure to the cloud. You reduce operational costs of IT staff. Yes No
Yes
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a network security group (NSG). Does this meet the goal? Yes No
Yes
Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords. Solution: You configure the use of Azure AD Identity Protection. Does this solution meet the goal? Yes No
Yes
Your company has multiple Azure Virtual Machines in an Availability Zone in Region A. You are asked to move one Virtual Machine from this Availability Zone to another Availability Zone in Region B. Is this possible? Yes No
Yes
Your company is planning to migrate all their virtual machines to an Azure pay-as-you-go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center. You are required to make sure that the intended Azure solution uses the correct expenditure model. Solution: You should recommend the use of the operational expenditure model. Does the solution meet the goal? Yes No
Yes
Your company is reorganizing after acquiring a new company. Both your company and the new company have their own Azure Active Directory (Azure AD) tenants. You need to determine what happens when you transfer the billing ownership of a subscription from an account in your Azure AD tenant to an account in another Azure AD tenant and associate the subscription with the new directory. All users and groups with role-based access to manage the subscription lose their access. Yes No
Yes
Your company is reorganizing after acquiring a new company. Both your company and the new company have their own Azure Active Directory (Azure AD) tenants. You need to determine what happens when you transfer the billing ownership of a subscription from an account in your Azure AD tenant to an account in another Azure AD tenant and associate the subscription with the new directory. Moving a subscription that owns an Azure Kubernetes Service (AKS) cluster causes the cluster to lose functionality. Yes No
Yes
Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: You create an Azure App Service and Azure SQL databases. Does this meet the goal? Yes No
Yes
Your company plans to purchase Azure support. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to commend a support plan that meets the support policy requirement. Solution: Recommend a Professional Direct support plan. Does this meet the goal? Yes No
Yes
Your company's Active Directory forest includes thousands of user accounts. You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired. You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed. Solution: You plan to sync all the Active Directory users accounts to Azure Active Directory (Azure AD). Does the solution meet the goal? Yes No
Yes
Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. 60% of the VMs have Windows Server 2016 installed, while the other 40% has Ubuntu Linux installed. You are required to make sure that the administrative effort needed for this process is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure DevTest Labs. Does this solution meet the goal? Yes No
Yes
Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure DevTest Labs. Does this meet the goal? Yes No
Yes
Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that the Azure Resource Manager templates be included in the strategy. Does this meet the goal? Yes No
Yes
When deployed with a web application firewall (WAF), Azure DDoS Protection protects both at the network layer and at the application layer. Yes No
Yes- see https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview - DDoS Protection operates on Network Layer (3 and 4, offered by Azure DDoS Protection) and at the application layer (7, offered by a WAF)
How many copies of data are maintained by an Azure Storage account that uses Zone redundant storage (ZRS)? a. 3 b. 4 c. 6 d. 9
a. 3
How many copies of data are maintained by an Azure Storage account that uses locally redundant storage (LRS)? a. 3 b. 4 c. 6 d. 9
a. 3
You plan to deploy several Azure Virtual Machines. You need to control the ports that devices on the Internet can use to access the virtual machines. What should you use? a. A network security group (NSG) b. An Azure Active Directory (Azure AD) c. Network gateway d. An Azure Key vault
a. A Network Security Group (NSG)
You have an Azure environment that contains multiple Azure virtual machines. You plan to implement a solution that enables the client computers on your on-premises network machines. You need to recommend which Azure resources must be created for the planned solution. Which two Azure resources should you include in the recommendation? a. A virtual network gateway b. A load balance c. An application gateway d. A virtual network e. A gateway subnet
a. A virtual network gateway e. A gateway subnet
Which page in Azure portal that you typically use to assign roles to grant access to Azure resources? a. Access Control (IAM) b. Policy hub c. User Access Management d. User Role Management
a. Access Control (IAM)
Speed and flexibility in allocation and deallocation of required resources. a. Agility b. Elasticity c. Scalability d. High Availability
a. Agility
Azure monitoring options - You want to receive an email whenever the number of requests to a web app exceeds 10,000 within an hour. a. Alerts b. Application Insights c. Resource Health d. Metrics
a. Alerts
You deploy two Azure virtual machines (VMs) running Windows Server 2016 and one VM running Ubuntu Linux. All three VMs and their resources are added to the same resource group. The VMs and the resources group are located in the same Azure region. The test plan directs that you need to delete the resource group once the initial test cycle is completed. What it the result of this action? a. All of the VMs contained in the resource group are deleted b. Only resource metadata is deleted and the VMs are shut down c. Only resource metadata is deleted and access to the VMs is disabled d. Only resource metadata is deleted with no impact to the VMs
a. All of the VMs contained in the resource group are deleted
Which two locations are valid destinations for platform logs and metrics collected by Azure Monitor? a. An Azure Log Analytics workspace b. An Azure storage account c. An Azure Advisor monitor d. A Resource Health dashboard
a. An Azure Log Analytics workspace b. An Azure storage account
You plan to provision Platform as a Service (PaaS) resources in Azure. Which resources are an example of PaaS? a. An Azure web app b. An Azure virtual machine c. An Azure logic app d. An Azure SQL database
a. An Azure web app c. An Azure logic app d. An Azure SQL database
What does a customer provide in a Software as a Service (SaaS) model? a. Application data b. Data storage c. Compute resources d. Application Software
a. Application data
In the Infrastructure-as-a-Service (IaaS) cloud service model, the subscriber is responsible for the management of which two components? a. Applications b. Virtualization c. Operating System (OS) d. Storage e. Physical Networking
a. Applications c. Operating System (OS)
Your company create general-purpose v2 storage accounts. You must match each Azure Storage blob access tier your account utilizes with it associated description. To answer, match the appropriate blob access tier to the appropriate feature. Incurs the highest rehydration cost a. Archive b. Cool c. Hot
a. Archive
Your company create general-purpose v2 storage accounts. You must match each Azure Storage blob access tier your account utilizes with it associated description. To answer, match the appropriate blob access tier to the appropriate feature. Is not available at account level a. Archive b. Cool c. Hot
a. Archive
To complete the statement in the answer area, select the appropriate option. Migrating to cloud services enables an organization to budget infrastructure costs _______________. a. As an operational expense b. As a capital expense c. As both a capital and operational expense d. As neither a capital nor operational expense
a. As an operational expense
Which two solutions should you use to transfer an on-premises virtual hard disk (VHD) to Azure? a. AzCopy b. Azure Data Share c. Azure Files d. Azure Storage Explorer
a. AzCopy d. Azure Storage Explorer
You need to use information from Microsoft Defender for Cloud to develop best practices recommendation for optimization. a. Azure Advisor b. Azure Policies c. Role-based access control (RBAC) d. Azure Locks e. Initiative
a. Azure Advisor
You recently signed up for a free Azure subscription. You need to familiarize yourself with the Azure portal UI. Which UI elements best match the descriptions? A service that provides recommendations on high availability. a. Azure Advisor b. Azure Marketplace
a. Azure Advisor
Deploy a web application using Platform-as-a-Service (PaaS) for scalability and security. a. Azure App Service b. Azure Functions c. Azure Virtual Machine (VM) d. Azure Traffic Manager
a. Azure App Service
You want to perform automated deployments from Azure DevOps. Which of the following enables this process? _______________ enables you to perform automated deployments from Azure DevOps. a. Azure App Service b. Azure Data Studio c. Azure SQL
a. Azure App Service
Geo-zone-redundant storage (GZRS) is supported by which of the following Azure storage services: a. Azure Blob storage (hot and cool block blobs, non-disk page blobs) b. Azure Files (all standard tiers: transaction optimized, hot and cool) c. Azure Table storage d. Azure Queue storage
a. Azure Blob storage (hot and cool block blobs, non-disk page blobs) b. Azure Files (all standard tiers: transaction optimized, hot and cool) c. Azure Table storage d. Azure Queue storage
You create an Azure subscription. You need to determine when you should use specific Azure management tools. When should you use each tool? You need to log in to Azure with the following command from your laptop without manually opening a web browser: az login. a. Azure CLI b. Azure Cloud Shell c. Azure PowerShell
a. Azure CLI
Which Azure database product supports key-value and document data models and provides native support for NoSQL? a. Azure Cosmos DB b. SQL Server on Virtual Machines (VMs) c. Azure SQL Database
a. Azure Cosmos DB
You plan to implement an Azure database solution. You need to implement a database solution that meets the following requirements: -Can add data concurrently from multiple regions, -Can store JSON documents. Which database service should you deploy? a. Azure Cosmos DB b. Azure SQL c. Azure Database for MySQL servers d. Azure Database for PostgreSQL servers e. SQL elastic pools f. SQL Server stretch database
a. Azure Cosmos DB
A company is planning on setting up a solution in Microsoft Azure. The solution would have the following key requirement: Gives the ability to host a big data analysis service for machine learning. Which of the following would be best suited for this requirement? a. Azure Databricks b. Azure Logic Apps c. Azure App Service d. Azure Application Insights
a. Azure Databricks
As part of a cloud migration, your Azure cloud implementation has been initially seeded with 100TB of data. As the migration continues, you need to periodically migrate data to Azure using Server Message Block (SMB). Which two solutions should you use to meet this requirement? Each correct answer presents a complete solution. a. Azure Files b. Azure Data Box Heavy c. Azure Data Share d. Azure Data Box Gateway
a. Azure Files d. Azure Data Box Gateway
Includes the abstract of servers, infrastructure, and operating systems. a. Azure Functions b. Azure Virtual Machines c. Container Instances
a. Azure Functions
You need to deploy a serverless solution that meets the following requirements: -Execution is triggered through an HTTP request -You pay only for the time that your code runs -You do not have to manage the application infrastructure. Which Azure service should you use? a. Azure Functions b. Azure Database for PostgreSQL c. Azure Virtual Machine d. Azure SQL Database
a. Azure Functions
Your company plans to automate the deployment of servers to Azure. Your manager is concerned that you may expose administrative credentials during the deployment. You need to recommend an Azure solution that encrypts the administrative credentials during the deployment. What should you include in the recommendation? a. Azure Key Vault b. Azure Information Protection c. Azure Security Center d. Azure Multi-Factor Authentication (MFA)
a. Azure Key Vault
Your company wants to ensure that it meets its internal compliance goals and that Azure resources are compliant with company standards. This will include evaluation for compliance at the identification of non-compliant resources. You need to recommend a solution. What should you use? a. Azure Policy b. Role-based access control (RBAC) c. Azure Advisor d. Azure Monitor
a. Azure Policy
Your company plans to deploy to the Azure cloud three virtual machines (VMs) and a Load Balancer. You want to estimate the cost of using all four resources before you create a subscription. You need to choose the most appropriate cost estimate tool. Which tool should you use? a. Azure Pricing Calculator b. Cost Management c. Azure Advisor d. Total Cost of Ownership (TCO) calculator
a. Azure Pricing Calculator
A company wants to expand its cloud presence by deployed additional resource to Azure. The company plans to use templates based on existing resources to automate the deployment process. Ensuring consistent deployment is critical. What should the company use? a. Azure Resource Manager b. Microsoft Defender for Cloud c. Azure Monitor d. Azure Resource Groups
a. Azure Resource Manager
Cost-effective, serverless database with an intermittent usage pattern and a low compute utilization over time. a. Azure SQL Database b. Azure SQL Managed Instance c. SQL Server on Azure VMs d. Azure Database for PostgreSQL
a. Azure SQL Database
You are planning to use Azure for your company's cloud infrastructure. You just learned that Azure supports Software-as-a-Service (SaaS), Platform-as-a-Service (PaaS), and Infrastructure-as-a-Service (IaaS) offerings. You need to determine the resources that are available for each category. Which resource does each type of infrastructure make available? Select the appropriate resource. - PaaS a. Azure SQL Database b. Outlook c. Virtual Network d. Virtual Machines
a. Azure SQL Database
Which Azure component provides information about planned maintenance and advisories such as deprecated offerings? a. Azure Service Health b. Microsoft Defender for Cloud c. Azure Advisor d. Azure Monitor
a. Azure Service Health
How can Azure lower capital expenditure (CapEx) costs? a. Azure allows you to pay monthly based on usage rather than pay upfront for physical hardware b. Azure allows you to reduce the level of IT staffing that is required to maintain on-premises application and services c. Azure reduces the amount of maintenance that is associated with the configuration of firewalls, which reduces costs. d. Azure allows you to pay annually to reduce overall costs that are associated with its Platform-as-a-Service (PaaS) offerings.
a. Azure allows you to pay monthly based on usage rather than pay upfront for physical hardware
You build a new operational analytics solution in Azure using PostgreSQL as a relational database. The estimated monthly growth of your database is 20GB. You need to ensure that your database can scale horizontally and support query parallelization for faster responses on a large dataset, without your team's involvement in database or operating system management. Which deployment option of PostgreSQL in Azure should you use? a. Azure database for PostgreSQL Hyperscale (Citus) b. Azure database for PostgreSQL Single Server c. PostgreSQL on Azure VMs d. Azure database for PostgreSQL Flexible Server
a. Azure database for PostgreSQL Hyperscale (Citus)
You are planning to use Azure for a cloud solution. You need to choose the most appropriate tool for different scenarios. Which tools should you use? You want to estimate the cost of deploying four virtual machines (VMs) and two SQL database instances to Azure. a. Azure pricing calculator b. Cost Management c. Total Cost of Ownership (TCO) calculator
a. Azure pricing calculator
You company intends to subscribe to an Azure support plan. The support plan must allow for new support requests to be opened. Which of the following are support plans that will allow this? a. Basic d. Developer c. Standard d. Professional Direct e. Premier
a. Basic d. Developer c. Standard d. Professional Direct
You recently signed up for a free Azure subscription. You need to familiarize yourself with the Azure portal UI. Which UI elements best match the descriptions? A panel that slides out in a navigation sequence. a. Blade b. Resource Panel
a. Blade
Datacenter infrastructure, Server cost, storage costs, network cost, backup & archive cost, business continuity and disaster recovery, technical personal costs are example of which type? a. Capital Expenditure (CapEx) b. Operational Expenditure (OpEx)
a. Capital Expenditure (CapEx)
Which of the following refers to spending money upfront and then deduction that expense over time? a. Capital expenditure b. Operational expenditure c. Supply and demand
a. Capital expenditure
To complete the statement in the answer area, select the appropriate option: Creating highly portable, scalable app instances that include the binaries and libraries required to run can be done using _____________. a. Containers b. Virtual desktop infrastructure (VDI) c. Virtual Machines (VMs)
a. Containers
You plan to create an Azure virtual machine. You need to identify which storage service must be used to store the unmanaged data disks of the virtual machine. What should you identify? a. Containers b. File shares c. Tables d. Queues
a. Containers
You are a cloud engineer for a retail company. You need to decide whether to use a public or a private cloud. What is an advantage of using a public cloud over a private cloud? a. Costs are lower and spread among multiple tenants b. The environment supports a higher level of customization for each tenant c. On-demand scalability allows business requirements to be met more efficiently d. Greater security is provided for tenant data.
a. Costs are lower and spread among multiple tenants
Your company is considering using a Platform-as-a-Service (PaaS) environment. You need to determine the responsibilities of customer and provider for several components. Which components would be the responsibility of the customer and which would be the responsibility of the provider? To answer, select the appropriate option: Applications a. Customer b. Provider
a. Customer
Your company is considering using a Platform-as-a-Service (PaaS) environment. You need to determine the responsibilities of customer and provider for several components. Which components would be the responsibility of the customer and which would be the responsibility of the provider? To answer, select the appropriate option: Data a. Customer b. Provider
a. Customer
_______ is the ability to restore a cloud service in the wake of a catastrophic loss. a. Disaster Recovery b. Agility c. High Availability d. Fault tolerance
a. Disaster Recovery
Which of the following describes a benefit of cloud services? a. Economics of scale b. Fixed workloads c. Unpredictable costs
a. Economics of Scale
What are the benefits of cloud computing? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. a. Enables the rapid provisioning of resources b. Has increased administrative complexity c. Has the same configuration as on-premises d. Shifts capital expenditures (CapEx) to operational expenditures (OpEx)
a. Enables the rapid provisioning of resources d. Shifts capital expenditures (CapEx) to operational expenditures (OpEx)
You work for a small college. The college has no more than 250 active students. You consider moving the college's infrastructure to the cloud. You need to determine the type of subscription that you should use for different scenarios. Which subscriptions should you use? You want to purchase Azure virtual machines (VMs) and software licenses under one agreement. a. Enterprise b. Free c. Pay-as-you-go d. Student
a. Enterprise
You are going to start collecting data about your Azure infrastructure with Azure Monitor. Which type of data collection requires you to enable diagnostics? a. Event Logs b. Container Workload performance c. Usage of web applications d. Linux virtual machine (VM) health
a. Event Logs
Which Azure resource can be managed as Software-as-a-Service (SaaS)? a. Exchange Online b. Azure SQL Database c. API Management d. Virtual Machine (VM)
a. Exchange Online
You deploy a new Linux virtual machine (VM) and then manually adjust its configuration in Azure portal to meet the requirements of your Development environment. You need to capture changes made to the Development VM's configuration after the original deployment, so that you can reuse it as a template in the deployment of Test and Production VMs. Which two actions can you perform to achieve your goal? a. Export the Azure Resource Manager (ARM) template from a resource b. Export the Azure Resource Manager (ARM) template from a deployment history c. Export the Azure Resource Manager (ARM) template before deployment d. Replace the Development VM with a VM scale set e. Export the Azure Resource Manager (ARM) template as a resource group
a. Export the Azure Resource Manager (ARM) template from a resource e. Export the Azure Resource Manager (ARM) template as a resource group
A company wants to migrate their current on-premises servers to the cloud utilizing Microsoft Azure. They require that their servers are running even in the event that a single datacenter goes down. Which of the following terms best refers to the concept that needs to be implemented to fulfill this requirement? a. Fault Tolerance b. Elasticity c. Scalability d. Low Latency
a. Fault Tolerance
You have an on-premises network that contains several servers. You plan to migrate all servers to Azure. You need to recommend a solution to ensure that some of the servers are available if a single Azure data center goes offline for an extended period of time. What should you include in the recommendation? a. Fault tolerance b. Elasticity c. Scalability d. Low latency
a. Fault tolerance
You plan to create an Azure subscription and take advantage of its Azure Active Directory (Azure AD) features. You plan to use the subscription for no more than a year. You need to choose the least expensive license for each scenario. Which license should you use? To answer, select the appropriate license to each scenario. You want to use on-premises directory synchronization. a. Free b. Premium
a. Free
You are working on understanding all the key terms when it comes to International Standards, data privacy and data protection policies. Which of the following choices pertain to the following? "A European policy that regulates data privacy and data protection" a. GDPR b. ISO c. NIST d. Azure Government
a. GDPR
Releasing a feature to all Azure customers is called? a. General Availability b. General Preview c. Public Preview
a. General Availability
You need to enable data redundancy for your organization's cloud apps. Depending on the data, redundancy may be local only, or may require multiple copies stored in different locations. Given the redundant storage descriptions below, which redundancy option is being described? It stores three data copies in each of two _____________ regions. a. Geo-redundant storage (GRS) b. Locally redundant storage (LRS) c. Read-access GRS (RA-GRS)
a. Geo-redundant storage (GRS)
You want to view the Azure features that are planned to deprecated. a. Health advisories b. Health alerts c. Health history d. Planned Maintenance e. Service issues
a. Health advisories
Which are Azure Storage access tiers? a. Hot Tier b. Frequent Tier c. Cool Tier d. Cold Tier e. Archive Tier
a. Hot Tier, c. Cool Tier, and e. Archive Tier
An Azure storage access tier has the highest storage costs, but the lowest access cost. a. Hot tier b. Cool tier c. Archive tier
a. Hot tier
You have 50 virtual machines hosted on-premises and 50 virtual machines hosted in Azure. The on-premises virtual machines and the Azure virtual machines connect to each other. Which type of cloud model is this? a. Hybrid b. Private c. Public
a. Hybrid
Which cloud model provides the greatest degree of flexibility a. Hybrid Cloud b. Private Cloud c. Public Cloud
a. Hybrid Cloud
You have 50 virtual machines hosted on-premises and 50 virtual machines hosted in Azure. The on-premises virtual machines and the Azure virtual machines connect to each other. What type of cloud model is this? a. Hybrid Cloud b. Private Cloud c. Public Cloud
a. Hybrid Cloud
A company needs to deploy an Ubuntu Linux virtual machine (VM) to run a resource-intensive data analysis application. a. IaaS b. PaaS c. SaaS
a. IaaS
A company needs to transition an on-premises data center to the cloud with minimal impact on users a. IaaS b. PaaS c. SaaS
a. IaaS
Azure Storage: a. IaaS b. PaaS c. SaaS
a. IaaS
You have been asked to develop cloud migration plans for your organization. As part of this assignment, you need to identify the most cost-effective cloud service type for each department in the organization. The solution should minimize management overhead. Given each department's requirements, which solution should you recommend? Finance - Use provider-managed hardware to run a customized database. a. IaaS b. PaaS c. SaaS
a. IaaS
Which of the following requires the most user management of cloud services? a. Infrastructure as a Service (IaaS) b. Platform as a Service (PaaS) c. Software as a Service (SaaS)
a. Infrastructure as a Service (IaaS)
You are researching the governance methodologies in Azure. You want to understand role-based access security (RBAC), policies, initiatives, and locks. You need to choose the type of resource or feature to use for different scenarios. When should you use each resource or feature? You want to manage a collection of policy definitions. a. Initiative b. Lock c. Policy d. RBAC
a. Initiative
Develop new cloud-native or hybrid solutions. a. Innovate b. Plan c. Ready d. Strategy
a. Innovate
You need a security solution that helps provision, manage, and deploy Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates. What should you use? a. Key Vault b. Microsoft Defender for Identity c. Microsoft Defender for Cloud d. Azure Information Protection (AIP)
a. Key Vault
Which Azure Storage replication is the least expensive replication option? a. Locally redundant storage (LRS) b. Zone-redundant storage (ZRS) c. Geo-redundant storage (GRS) d. Geo-zone-redundant storage (GZRS)
a. Locally redundant storage (LRS)
Which Azure Storage replication comes under "Redundancy in the primary region"? a. Locally redundant storage (LRS) b. Zone-redundant storage (ZRS) c. Geo-redundant storage (GRS) d. Geo-zone-redundant storage (GZRS)
a. Locally redundant storage (LRS) and b. Zone redundant storage (ZRS)
Logs in Azure Monitor are stored in which of the following services: a. Log Analytics workspace b. Azure Event Hub c. Azure Stream d. Azure Cosmos DB
a. Logs Analytics workspace
Azure Advisor integrates with __________ to help to prevent, detect, and respond to threats to Azure resources. a. Microsoft Defender for Cloud b. Azure Information Protection (AIP) c. Azure Advance Threat Protection (Azure ATP) d. Azure Cloud Shell
a. Microsoft Defender for Cloud
You are planning to create a cloud solution in Azure. You need to choose the appropriate networking resources to deploy for certain scenarios. Which resources should you deploy? To answer, select the appropriate resources. You want to allow inbound traffic to an Azure Virtual Machine (VM) from only specific IP Addresses. a. Network Security Group (NSG) b. Traffic Manager c. Azure Firewall d. Azure DDoS Protection
a. Network Security Group (NSG)
This questions requires that you evaluate the underlined text to determine if it is correct. Azure Key Vault is used to store app secrets. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. a. No change is needed b. Azure security center c. Azure Blob Storage d. Azure Repos
a. No change is needed
When planning to migrate a public website to Azure, you must plan to pay monthly usage costs. Instructions: Review the underlined text. If it makes the statement correct, select "No Change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. a. No change is needed b. Deploy a VPN c. Pay to transfer all the website data to Azure d. Reduce the number of connections to the website
a. No change is needed
You need to determine the number of subscriptions that you have to create based on the requirements for each scenario. How many subscriptions should you create? Your company has two divisions and two Azure administrators. Each administrator is responsible for a division. The company must receive one Azure bill. a. One b. Two c. Three
a. One
You have 1,000 virtual machines hosted on the Hyper-V hosts in a data center. You plan to migrate all the virtual machines to an Azure pay-as-you-go subscription. You need to identify which expenditure model to use of the planned Azure solution. Which expenditure model should you identify? a. Operational b. Elastic c. Capital d. Scalable
a. Operational
Which two organization-level insights can you derive from the Regulatory Compliance dashboard of Microsoft Defender for Cloud? a. Overall compliance score b. Overall secure score c. Security alerts ranked by severity d. Number of passing and failing assessments e. Mitigation steps for reported threats
a. Overall compliance score d. Number of passing and failing assessments
Azure Cosmos DB is an example of _________ offering a. Platform as a Service (PaaS) b. Infrastructure as a Service (IaaS) c. Serverless d. Software as a Service (SaaS)
a. Platform as a Service (PaaS)
Which of the following is correct Lifecycle of Azure Services: a. Private preview > Public preview > Generally available (GA) b. Dev preview > Public preview > Generally available (GA)
a. Private preview > Public preview > Generally available (GA)
Cloud resources are owned and operated by a service provider and delivered over the internet. a. Public Cloud b. Hybrid Cloud c. Private Cloud
a. Public Cloud
Your organization hosts its e-commerce solution on a computing infrastructure that is provided by a third-party service provider and shared with other organizations. You only pay for the compute power, storage, and networking resource you use. What type of cloud computing is this an example of? a. Public cloud b. Private cloud c. On-premises datacenter d. Hybrid cloud
a. Public cloud
A company wants to deploy multiple servers that host web applications but wants to keep hardware costs and management costs to a minimum. The solution should be highly scalable. a. Public model b. Private model c. Hybrid model
a. Public model
You are researching the governance methodologies in Azure. You want to understand role-based access security (RBAC), policies, initiatives, locks, and Azure Advisor. You need to choose the type of resource or feature to user for different scenarios. When should you use each resource or feature? You want to control the users who are allowed to create virtual networks (VNets). a. RBAC b. Advisor c. Policy d. Lock e. Initiative
a. RBAC
You are researching governance methodologies in Azure. You want to understand role-based access control security (RBAC), policies, initiatives, and Read-Only locks. You need to choose the type of resource or feature to use for different scenarios. When should you use each resource or feature? You want to prevent new resources from being added to a resource group by anyone. a. Read-only Lock b. RBAC c. Policy d. Initiative
a. Read-only Lock
You deploy a business critical solution in Azure. You need to ensure that your resources are replicated an hosted at least 300 miles away within the same geographic area, to minimize impact on your solution's availability in case of disaster. Which configuration option should you use? a. Region pairs b. Resource groups c. Availability Sets d. Availability zones
a. Region pairs
Your company has an on-premises network that contains multiple servers. The company plans to reduce the following administrative responsibilities of network administrators: Backing up application data, Replacing failed server hardware, Managing physical server security, Updating server operating systems, Managing permissions to shared documents. The company plans to migrate several servers to Azure virtual machines. You need to identify which administrative responsibilities will be eliminated after the planned migration. Which two responsibilities should you identify? a. Replacing failed server hardware b. Backing up application data c. Managing physical server security d. Updating server operating systems e. Managing permissions to shared documents
a. Replacing failed server hardware c. Managing physical server security
A company subscribes to Azure as a platform for developing and deploying web apps. The company wants to keep initial expenses to a minimum. The company cannot use the free edition as it does not support many features required, so the company decides to go with Azure AD premium subscription. You need to determine the features available to the company with Azure Active Directory (Azure AD) Premium P1 edition. Which two features are supported by Azure AD Premium P1 edition? a. Role-based access control (RBAC) b. Identity Protection c. Self-service entitlement management d. Conditional Access e. Privileged Identity Management (PMI), just-in-time access
a. Role-based access control (RBAC) d. Conditional Access
You are running a virtual machine in a public cloud use IaaS. Which model correctly reflects how that resource is managed? a. Shared responsibility model b. Cloud user management model c. User management model
a. Shared responsibility model
The Microsoft Intune product is: a. Software as a Service (SaaS) b. Platform as a Service (PaaS) c. Infrastructure as a Service (IaaS)
a. Software as a Service (SaaS)
From the choices below, what is one of the advantages of moving your infrastructure to Azure? a. The move reduces Capital Expenditures (CapEx) b. The move reduces Operational Expenditures (OpEx) c. The move allows for complete control over infrastructure resources.
a. The move reduces Capital Expenditures (CapEx)
You have an Azure environment. You need to create a new Azure virtual machine from a table that runs the Android operating system. What are three possible solutions? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. a. Use Bash in Azure Cloud Shell b. Use PowerShell in Azure Cloud Shell c. Use the PowerApps portal d. Use the Security & Compliance admin center e. Use the Azure Portal
a. Use Bash in Azure Cloud Shell b. Use PowerShell in Azure Cloud Shell & e. Use the Azure Portal
Your company uses management groups to manage resources in your Azure tenant more efficiently. User1 should be able to assign access and assign policies to management groups. You need to determine which role-based access control (RBAC) role User1 should be added to. Your solution should follow the principle of least privilege. Which role should you add UIser1 to? a. User Access Administrator b. Management Group Contributor c. Owner d. Contributor
a. User Access Administrator
Which Azure resource can be deployed as Infrastructure-as-a-Service (IaaS)? a. Virtual Machine (VM) b. Office 365 c. Azure SQL Database d. API Management
a. Virtual Machine (VM)
A company has an Azure Active Directory (Azure AD) Premium P1 subscription. The company has a hybrid environment that uses both Azure AD and on-premises federated AD using Active Directory Federation Services (AD FS). The company is upgrading its security and must configure Azure AD self-service password reset (SSPR) and Multi-Factor Authentication (MFA). You need to identify the authentication types that are supported by both SSPR and MFA. Which three authentication types are supported by both SSPR and MFA? Each correct answer presents a complete solution. a. Voice Call b. Email address c. SMS d. Security questions e. Microsoft Authenticator App
a. Voice Call c. SMS e. Microsoft Authenticator App
Where does the copies of data maintained in LRS? a. Within a single region b. Across separate availability zones c. Secondary region d. Primary region and Secondary region
a. Within a single region
Which two examples best describe multi-factor authentication (MFA)? a. You insert your debit card into an ATM and then enter your personal identification number (PIN) to access your account b. You specify an email address and password to access online banking c. You receive a text message with a code after you enter a username and password on a moving streaming site. d. You draw a pattern on your phone to unlock it so that you can call your manager.
a. You insert your debit card into an ATM and then enter your personal identification number (PIN) to access your account c. You receive a text message with a code after you enter a username and password on a moving streaming site.
Your company has a hybrid Azure cloud infrastructure in Virginia. It consists of Azure virtual machines, an App Service, a SQL Database instance, and an on-premises web server that hosts a Windows Communication Foundation (WCF) service. You consider using the Azure Service Health feature. You need to determine the use cases for which Service Health is beneficial. In which three use cases is Service Health beneficial? To answer, select the appropriate use cases from the list of possible use cases. a. You want to be notified if your App Service usage exceeds the usage quota b. You want to view App Service performance with Windows Task Manager c. You want to receive an email when an unauthorized user attempts to access a VM d. You want to respond to planned service outages in Virginia e. You want to implement a webhook on your website to display health incidents.
a. You want to be notified if your App Service usage exceeds the usage quota d. You want to respond to planned service outages in Virginia e. You want to implement a webhook on your website to display health incidents.
A company wants to host an application on a set of Virtual Machines. The application must be made available 99.99% of the time. In order to comply with the SLA requirement, what is the number of Virtual Machines required to ensure 99.99% up time to host the application? a. 1 b. 2 c.3 d. As much as possible
b. 2
What is the minimum recommended data retention period for cool access tiers? a. 5 days b. 30 days c. 45 days d. 90 days
b. 30 days
You are considering moving some of your applications to Azure as container instances. However, your manager wants you to explain to them about containers and their benefits first. You need to explain containers to your manager. Which four descriptions of containers are accurate? a. A container requires you to configure the host virtual machine b. A container represents a single app and its dependencies c. A container can run on Windows or Linux d. A container requires you to manually install dependencies e. A container can scale out as needed f. A container can be accessed over the Internet by IP address or domain name
b. A container represents a single app and its dependencies c. A container can run on Windows or Linux e. A container can scale out as needed f. A container can be accessed over the Internet by IP address or domain name
Your company migrates virtual machines (VMs) from an on-premises datacenter to Azure. As a part of the migration, all existing physical servers in your datacenter are decommissioned. The migrated workload runs on Azure VMs. Which are the two possible benefits of this cloud migration? Each correct answer presents part of the solution. a. Reduce Service Level Agreements (SLA) b. Absence of upfront costs for physical infrastructure c. Fixed recurrent costs d. Pay-as-you-go model e. Ownership of physical infrastructure
b. Absence of upfront costs for physical infrastructure d. Pay-as-you-go model
You are researching the governance methodologies in Azure. You want to understand role-based access security (RBAC), policies, initiatives, locks, and Azure Advisor. You need to choose the type of resource or feature to user for different scenarios. When should you use each resource or feature? You want to review security recommendations related to your deployed resources. a. RBAC b. Advisor c. Policy d. Lock e. Initiative
b. Advisor
Single sign-on (SSO) is _______________ method that enables users to sign in the first time and access various applications and resources by using the same password. a. A validation b. An authentication c. A configuration d. An authorization
b. An Authentication
You plan to provision Infrastructure as a Service (IaaS) resources in Azure. Which three resources are examples of IaaS? a. An Azure Web app b. An Azure Virtual Machine c. An Azure Logic App d. Azure Disk Storage e. Azure Virtual Network
b. An Azure Virtual Machine, d. Azure Disk Storage, and e. Azure Virtual Network
You plan to provision Infrastructure as a Service (IaaS) resource in Azure. Which resource is an example of IaaS? a. An Azure web app b. An Azure virtual Machine c. An Azure logic app d. An Azure SQL Database
b. An Azure virtual Machine
Which setup represents a hybrid cloud model? a. An Azure Function that crawls the web for trending news b. An Azure web Application Program Interfaces (API) that connects to an on-premises SQL Server database at an on-premises private datacenter c. An Azure web application that connects to an Azure SQL Database d. An Azure Webjob that makes calls to the Azure Representational State Transfer Application Program Interface (API)
b. An Azure web Application Program Interfaces (API) that connects to an on-premises SQL Server database at an on-premises private datacenter
Azure monitoring options - You want to enable developers to improve app performance and usability. a. Alerts b. Application Insights c. Resource Health c. Metrics
b. Application Insights
To complete the statement in the answer area, select the appropriate option. Azure Monitor begins collecting data ________________. a. As soon as you launch Azure Management Portal b. As soon as you add a resource to a new Azure subscription c. After you enable diagnostics d. Only after you create the metrics and logs data stores
b. As soon as you add a resource to a new Azure subscription
Which Azure feature enhances manageability and reliability by provisioning virtual machine instances based on workload? a. Site Recovery b. Autoscale c. Availability zones d. Serverless compute
b. Autoscale
Which tool enables users to authenticate to multiple applications by using single sign-on (SSO)? a. Azure resource group b. Azure Active Directory (Azure AD) c. Azure advisor d. Azure monitor
b. Azure Active Directory (Azure AD)
You create an Azure subscription. You need to determine when you should use specific Azure management tools. When should you use each tool? You want to run the following cmdlet in a scripting environment inside the browser: New-AzVM. a. Azure CLI b. Azure Cloud Shell c. Azure PowerShell
b. Azure Cloud Shell
Your Azure tenant includes an Azure Virtual Network (VNet) with several internet-facing web servers. The web servers experience attacks that exhaust server resources and make the servers unavailable to legitimate users. You determine that the attacks are being launched from multiple locations. You need to implement an Azure solution that: -Detects and automatically tries to mitigate attacks -Generates alerts when an active attack is underway. What is the best option to implement your solution? a. Azure Application Security Groups (ASGs) b. Azure DDoS Protection Standard c. Azure Firewall d. Azure Information Protection (AIP)
b. Azure DDoS Protection Standard
Your company is considering using Linux-based Azure Container Instances (ACIs) to deploy a simple application. The application runs as a stateful applications. You need to provide storage to retrieve and persist state. What type of storage should you use? a. Azure Disk b. Azure Files c. Azure Archive d. Azure Blob
b. Azure Files
Build an event-driven solution and pay only for the time spent running your code. a. Azure App Service b. Azure Functions c. Azure Virtual Machine (VM) d. Azure Traffic Manager
b. Azure Functions
Which service provides serverless computing in Azure? a. Azure Virtual Machines b. Azure Functions c. Azure Storage Accounts d. Azure Dedicated Hosts
b. Azure Functions
Securely store a database connection string to avoid its accidental exposure in a web site's source code. a. Azure Monitor b. Azure Key Vault c. Azure Firewall d. Microsoft Sentinel
b. Azure Key Vault
Which Azure service should you use to store certificates? a. Azure Information Protection b. Azure Key Vault c. An Azure Storage account d. Azure Security Center
b. Azure Key Vault
A company is looking to help lower cloud-related costs. You need to identify tools and mechanisms to help save money. To answer, select the appropriate cost control mechanism from the options. Your company plans to commit to a three-year plan for virtual machines (VMs) and storage resources to receive a reduction in pay-as-you-go prices. a. Total Cost of Ownership (TCO) Calculator b. Azure Reservations c. Azure Cost Management d. Azure Spending Limits e. Azure Resource Manager (ARM)
b. Azure Reservations
Lift-and-shift of on-premises SQL Server with minimal changes to an Azure Platform-as-a-Service (PaaS) solution. a. Azure SQL Database b. Azure SQL Managed Instance c. SQL Server on Azure VMs d. Azure Database for PostgreSQL
b. Azure SQL Managed Instance
Includes a virtual processor, memory, storage, and networking resources. a. Azure Functions b. Azure Virtual Machines c. Container Instances
b. Azure Virtual Machines
Your company uses Azure Blueprints to assist with its migration to Azure. User1 should be able to assign published blueprints. You need to add User1 to the role-based access control (RBAC) role necessary to provide this permission. Your solution should follow the principle of least privilege. Which role should you assign User1 to? a. Blueprint Contributor b. Blueprint Operator c. Owner d. Contributor
b. Blueprint Operator
To complete the sentence, select the appropriate option. _______________ is the delivery of computing services such as compute power, storage, software and analytics over the internet. a. Capital expenditure (CapEx) b. Cloud computing c. Operational expenditure (OpEx)
b. Cloud computing
You plan to deploy a website to Azure. The website will be accessed by users worldwide and will host large video files. You need to recommend which Azure feature must be used to provide the best video playback experience. What should you recommend? a. Azure Region b. Content delivery network (CDN) c. Azure Cache
b. Content delivery network (CDN)
Your company create general-purpose v2 storage accounts. You must match each Azure Storage blob access tier your account utilizes with it associated description. To answer, match the appropriate blob access tier to the appropriate feature. Incurs penalties for data deleted within 30 days. a. Archive b. Cool c. Hot
b. Cool
You are planning to use Azure for a cloud solution. You need to choose the most appropriate tool for different scenarios. Which tools should you use? You want to set up an alert to send you and your coworker text messages when your Azure resource use 90 percent of your company's month Azure budget. a. Azure pricing calculator b. Cost Management c. Total Cost of Ownership (TCO) calculator
b. Cost Management
You have Multiple virtual machines (VMs) processing each order that comes from a web application that runs the website. These VMs exist on an Azure virtual network, but they need to access the internet. What is the best way to limit all outbound traffic from VMs to known hosts? a. Configure Azure DDoS Protection to limit network access to trusted ports and hosts. b. Create application rules in Azure Firewall c. Ensure that all running applications communicate with only trusted ports and hosts.
b. Create application rules in Azure Firewall
You have multiple Virtual Machines in Azure virtual network. You want to implement a deny by default policy so that VMs can't connect to each other. What is the best way to do the same? a. Configure Azure DDoS Protection to limit network access to trusted ports and hosts b. Create application rules in Azure Firewall c. Ensure that all running applications communicate with only trusted ports and hosts
b. Create application rules in Azure Firewall
You recently signed up for a free Azure subscription. You need to familiarize yourself with the Azure portal UI. Which UI elements best match the descriptions? A collection of customizable tiles that are displayed in the portal. a. Blade b. Dashboard
b. Dashboard
Azure Site Recovery provides fault tolerance for virtual machines. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. a. No change is needed b. Disaster recovery c. Elasticity d. High availability
b. Disaster recovery
Azure site recovery provides __________________ for virtual machines. a. Fault tolerance b. Disaster recovery c. Elasticity d. High availability
b. Disaster recovery
You plan to use the Workspace.from_config() method to connect to your Azure Machine Learning workspace from a Python environment on your local workstation. You have already used pip to install the azureml-sdk package. What else should you do? a. Run pip install azureml-sdk['notebooks'] to install the notebooks extra b. Download the config.json file for your workspace to the folder containing your local Python code files. c. Create a Compute Instance compute target in your workspace.
b. Download the config.json file for your workspace to the folder containing your local Python code files.
A systems ability to scale dynamically is called a. Agility b. Elasticity c. Extendibility
b. Elasticity
Automatically increasing or decreasing resources to meet spikes and drops in demand. a. Agility b. Elasticity c. Scalability d. High Availability
b. Elasticity
Azure policy help organizations to: a. Create security policy b. Enforce organizational standards & to assess compliance at scale c. Create firewall rules
b. Enforce organizational standards & to assess compliance at scale.
You manage an Azure subscription for your company. At a meeting, someone asks you about the Azure pricing calculator. What is the Azure pricing calculator used for? a. Determining the annual costs associated with moving physical infrastructure to the cloud b. Estimating monthly costs associated with using specific Azure resources c. Determining which resources are costing your Azure subscription the most money d. Providing a real-time, up-to-the-minute view of what your Azure resources costs.
b. Estimating monthly costs associated with using specific Azure resources
You work for a small college. The college has no more than 250 active students. You consider moving the college's infrastructure to the cloud. You need to determine the type of subscription that you should use for different scenarios. Which subscriptions should you use? You want to evaluate Azure App Services for six months. a. Enterprise b. Free c. Pay-as-you-go d. Student
b. Free
____________ enables Azure resources to be deployed close to users. a. Elasticity b. Geo-distribution c. High availability d. Scalability
b. Geo-distribution
You want you and your team members to receive a text message when Azure maintenance is planned. a. Health advisories b. Health alerts c. Health history d. Planned Maintenance e. Service issues
b. Health alerts
This is a combination of on-premises infrastructure with a public cloud. a. Public Cloud b. Hybrid Cloud c. Private Cloud
b. Hybrid Cloud
You are working on understanding all the key terms when it comes to International Standards, data privacy and data protection policies. Which of the following choices pertain to the following? "An organization that defines international standards across all industries" a. GDPR b. ISO c. NIST d. Azure Government
b. ISO
Your company deploys resources in Azure. According to the shared responsibility model, which task will you be required to perform? a. Manage access to datacenter resources b. Install critical updates on virtual machines c. Upgrade RAM on virtualization systems d. Configure connectivity between regions
b. Install critical updates on virtual machines
An Azure Initiative ___________. a. Provides a model that is used by Azure Resource Manager to deploy large numbers of identical resources b. Is a collection of Azure policies targeted toward reaching a single overall goal c. Lets you implement detailed granular resources access controls d. Integrates with Azure Advisor to provide best practices for optimization
b. Is a collection of Azure policies targeted toward reaching a single overall goal
Which statement best describes what a resource lock does to a virtual machine (VM)? a. It forces the VM to be deleted within a specific time period b. It prevents the VM from being deleted c. It forces the VM to be deleted immediately d. It allows the VM to be deleted, but not modified.
b. It prevents the VM from being deleted
What is the purpose of a resource group? a. It specifies the subscriptions that are allowed to create Azure resources. b. It serves as a container for Azure resources like virtual machines (VMs) and web apps. c. It is a collection of user and group accounts d. It defines initiatives that allow you to control the type of resources that can be deployed.
b. It serves as a container for Azure resources like virtual machines (VMs) and web apps.
Which property of your storage account should you check to determine which write operations have been replicated to the secondary region? a. Last Modified Time property b. Last Sync Time property c. Last Update Time property
b. Last Sync Time property
At which OSI layer does ExpressRoute operate? a. Layer 2 b. Layer 3 c. Layer 5 d. Layer 7
b. Layer 3
You need to enable data redundancy for your organization's cloud apps. Depending on the data, redundancy may be local only, or may require multiple copies stored in different locations. Given the redundant storage descriptions below, which redundancy option is being described? It stores all replicas in one data center _______________________. a. Geo-redundant storage (GRS) b. Locally redundant storage (LRS) c. Read-access GRS (RA-GRS)
b. Locally redundant storage (LRS)
You are researching the governance methodologies in Azure. You want to understand role-based access security (RBAC), policies, initiatives, and locks. You need to choose the type of resource or feature to use for different scenarios. When should you use each resource or feature? You want to prevent virtual machines (VMs) from being deleted by anyone after they are deployed. a. Initiative b. Lock c. Policy d. RBAC
b. Lock
Resource groups provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. a. No change is needed b. Management groups c. Azure policies d. Azure App Service plans
b. Management groups
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. What are two possible solutions? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. a. Modify an Azure Traffic Manager profile b. Modify a network security group (NSG) c. Modify a DDoS protection plan d. Modify an Azure firewall
b. Modify a network security group (NSG) and d. Modify an Azure firewall
Your billing is based on your usage of Azure resources and is invoiced ___________. a. Annually b. Monthly c. Daily
b. Monthly
You are planning to use Azure for your company's cloud infrastructure. You just learned that Azure supports Software-as-a-Service (SaaS), Platform-as-a-Service (PaaS), and Infrastructure-as-a-Service (IaaS) offerings. You need to determine the resources that are available for each category. Which resource does each type of infrastructure make available? Select the appropriate resource. - SaaS a. Azure SQL Database b. Outlook c. Virtual Network d. Virtual Machines
b. Outlook
A company needs to develop a web app designed to run on both computers and mobile devices and manage the application lifestyle a. IaaS b. PaaS c. SaaS
b. PaaS
Azure Cosmos DB: a. IaaS b. PaaS c. SaaS
b. PaaS
You have been asked to develop cloud migration plans for your organization. As part of this assignment, you need to identify the most cost-effective cloud service type for each department in the organization. The solution should minimize management overhead. Given each department's requirements, which solution should you recommend? Marketing - Use provider-managed business intelligence services to analyze marketing trends. a. IaaS b. PaaS c. SaaS
b. PaaS
Which example best describes authorization? a. Passengers who present their driver's license to prove their identity before boarding a flight b. People who present their birth certificate to prove that they are eligible to receive government age-based benefits c. Banking customers who enter their personal identification number (PIN) to log into an ATM d. Students who enter their password to check their grades at university
b. People who present their birth certificate to prove that they are eligible to receive government age-based benefits
Align actionable adoption plans with business outcomes. a. Innovate b. Plan c. Ready d. Strategy
b. Plan
App Services, Azure Search and Azure CDN are examples of what? a. Software as a Service (SaaS) b. Platform as a Service (PaaS) c. Infrastructure as a Service (IaaS)
b. Platform as a Service (PaaS)
You are developing an application and want to focus on building, testing, and deploying. You don't want to worry about managing the underlying hardware or software. Which cloud service type is best for you? a. Infrastructure as a Service (IaaS) b. Platform as a Service (PaaS) c. Software as a Service (SaaS)
b. Platform as a Service (PaaS)
You plan to migrate a web application to Azure. The web application is accessed by external users. You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application. What should you include in the recommendation? a. Software as a Service (SaaS) b. Platform as a Service (PaaS) c. Infrastructure as a Service (IaaS) d. Database as a Service (DaaS)
b. Platform as a Service (PaaS)
You plan to migrate a web application to Azure. The web application is accessed by external users. You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application. What should you recommend? a. Software as a Service (SaaS) b. Platform as a Service (PaaS) c. Infrastructure as a Service (IaaS) d. Database as a Service (DaaS)
b. Platform as a Service (PaaS)
Which performance option should you choose for low latency scenarios while creating Azure storage account? a. Standard b. Premium
b. Premium
You plan to create an Azure subscription and take advantage of its Azure Active Directory (Azure AD) features. You plan to use the subscription for no more than a year. You need to choose the least expensive license for each scenario. Which license should you use? To answer, select the appropriate license to each scenario. You want on-premises users to be able to reset their own passwords. a. Free b. Premium
b. Premium
You plan to create an Azure subscription and take advantage of its Azure Active Directory (Azure AD) features. You plan to use the subscription for no more than a year. You need to choose the least expensive license for each scenario. Which license should you use? To answer, select the appropriate license to each scenario. You want to publish on-premises web apps using Azure AD. a. Free b. Premium
b. Premium
Your company wants to control the methods used to have a high level of security for its resources. a. Hybrid b. Private c. Public
b. Private
Which cloud model provides the greatest degree of ownership and control? a. Hybrid Cloud b. Private Cloud c. Public Cloud
b. Private Cloud
You have legacy applications that require specialized mainframe hardware, and you have newer shared applications. Which cloud deployment model would be best for you? a. Hybrid Cloud b. Private Cloud c. Public Cloud
b. Private Cloud
A company needs to implement a solution where it maintains management control over hardware and infrastructure. The solution can be physically deployed offsite. a. Public model b. Private model c. Hybrid model
b. Private model
Your company is considering using a Platform-as-a-Service (PaaS) environment. You need to determine the responsibilities of customer and provider for several components. Which components would be the responsibility of the customer and which would be the responsibility of the provider? To answer, select the appropriate option: Operating System a. Customer b. Provider
b. Provider
Your company is considering using a Platform-as-a-Service (PaaS) environment. You need to determine the responsibilities of customer and provider for several components. Which components would be the responsibility of the customer and which would be the responsibility of the provider? To answer, select the appropriate option: Storage a. Customer b. Provider
b. Provider
Your company is considering using a Platform-as-a-Service (PaaS) environment. You need to determine the responsibilities of customer and provider for several components. Which components would be the responsibility of the customer and which would be the responsibility of the provider? To answer, select the appropriate option: Virtualization a. Customer b. Provider
b. Provider
You are researching governance methodologies in Azure. You want to understand role-based access control security (RBAC), policies, initiatives, and Read-Only locks. You need to choose the type of resource or feature to use for different scenarios. When should you use each resource or feature? You want to ensure that only members of the Sales group can access virtual machines (VMs) in the sales-rg resource group. a. Read-only Lock b. RBAC c. Policy d. Initiative
b. RBAC
To complete the sentence, select the appropriate option: With _____________, developers deploy code and pay for its runtime only, without worrying about the provisioning, configuration and management of the underlying infrastructure. a. Infrastructure-as-a-Service b. Serverless computing c. Software-as-a-Service
b. Serverless computing
If you are not using virtual machines and all its resources, what should you do to save cost? a. Stop Virtual Machine b. Shutdown Virtual Machine c. Switch off Virtual Machine
b. Shutdown Virtual Machine
Which resource is required to use Azure Cloud Shell. a. Container b. Storage account c. Virtual Machine (VM) d. App Services web app
b. Storage account
Management groups let you organize multiple ________________. a. Resource groups as a single management entity to facilitate easier management b. Subscriptions as a single management entity to facilitate easier management c. Azure Active Directory (Azure AD) tenants as a single management entity to facilitate easier management d. Resource as a single management entity to facilitate easier management.
b. Subscriptions as a single management entity to facilitate easier management
You deploy three virtual machines (VMs) to Azure as a three-tiered architecture. Once VM hosts a front-end web application, one VM hosts a business application programming interface (API), and the other VM hosts a Microsoft SQL Server database. Only the front-end web application should be publicly accessible, and it should be accessible over HTTP on port 80. All three VMs must be accessible over Remote Desktop Protocol (RDP) on port 222. Only your account should be able to use RDP to access the VMs. You need to determine how Network Security Groups (NSGs) can be used in this scenario. Which two ways can NSG rules be used? Each correct answer presents a complete solution. a. To ensure that only your account can use RDP to access the VMs b. To ensure that only the front-end VM is publicly accessible over port 80 c. To ensure that the front-end VM hosts only web applications d. To ensure that all three VMs are accessible over port 222
b. To ensure that only the front-end VM is publicly accessible over port 80 d. To ensure that all three VMs are accessible over port 222
You need to determine the number of subscriptions that you have to create based on the requirements for each scenario. How many subscriptions should you create? You company has two physical locations and one Azure administrator. The administrator manages both locations. Each location must receive an Azure bill. a. One b. Two c. Three
b. Two
Which of the following describe Platform as a Service (PaaS)? a. Users are responsible for purchasing, installing, configuring, and managing their own software (operating systems, middleware, and applications) b. Users create and deploy applications quickly without having to worry about managing the underlying infrastructure c. Users pay an annual or monthly subscription
b. Users create and deploy applications quickly without having to worry about managing the underlying infrastructure
Which of the following describes Platform as a Service (PaaS)? a. Users are responsible for purchasing, installing, configuring, and managing their own software (OS, middleware, and applications). b. Users create and deploy applications quickly without having to worry about managing the underlying infrastructure. c. Users pay an annual or monthly subscription.
b. Users create and deploy applications quickly without having to worry about managing the underlying infrastructure.
A coworker informs you of a planned Azure maintenance window. You attempt to verify this information using the tool shown in the Exhibit. You are still uncertain whether the maintenance will impact services you use. What should you do to determine how this maintenance might impact your organizations? a. Select the resource types for your account in Resource Health b. Verify and planned maintenance via the Service Health dashboard c. Use Azure Monitor to view maintenance intervals for your resources d. Check the Azure status page for any planned maintenance outages
b. Verify and planned maintenance via the Service Health dashboard
An Availability Zone in Azure has physically separate locations across two continents. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. a. No change is needed b. Within a single Azure region c. Within multiple Azure regions d. Within a single Azure datacenter
b. Within a single Azure region
Your company needs to deploy and manage several Microsoft Azure Web apps using the Azure App service resource. Which of the following URLs would you use to manage the Azure Web Apps? a. https://portal.microsoft.com b. https://portal.azure.com c. https://portal.azurewebsites.net d. https://portal.azurewebsites.com
b. https://portal.azure.com
How many copies of data are maintained by an Azure Storage account that uses Geo-Zone redundant storage (GZRS)/ Read Access - Geo-zone redundant storage (RA-GZRS)? a. 3 b. 4 c. 6 d. 9
c. 6
How many copies of data are maintained by an Azure Storage account that uses Geo-redundant storage (GRS)/Read Access - Geo-redundant storage (RA-GRS)? a. 3 b. 4 c. 6 d. 9
c. 6
You plan to map a network drive from several computers that run Windows 10 to Azure Storage. You need to create a storage solution in Azure for the planned mapped drive. What should you create? a. A blob storage in storage account b. A table in storage account c. A Files service in a storage account
c. A Files service in a storage account
You are tasked with addressing performance issues on an Azure-based web server cluster. You need to configure virtual machines to scale vertically. What should you do to meet this requirement? a. Configure the cluster to burst into a hybrid cloud b. Allow additional virtual machines to be auto-deployed as needed c. Add compute and memory resources to each virtual machine d. Migrate the server cluster to a Kubernetes cluster.
c. Add compute and memory resources to each virtual machine
Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company's migration plan. What should you create? a. Azure virtual machines, Azure SQL databases, and Azure Storage accounts b. An Azure App Service and Azure Virtual Machines that have Microsoft SQL Server installed c. An Azure App Service and Azure SQL Database d. Azure storage and web server in Azure Virtual Machine
c. An Azure App Service and Azure SQL Database
Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. What should you create? a. An Azure Virtual Machine, Azure SQL databases, and Azure Storage accounts b. An Azure App Service and Azure Virtual Machines that have Microsoft SQL Server Installed. c. An Azure App Service and Azure SQL databases. d. An Azure storage account and web server in Azure virtual machines.
c. An Azure App Service and Azure SQL databases
Which feature of Azure Monitor allows you to visually analyze telemetry data? a. Metrics b. Alerts c. Application Insights d. Service Health
c. Application Insights
Your Azure tenant includes several internet-facing web servers. The web servers rely on data stored on Azure SQL Database servers. The web servers are located in different virtual network (VNet) subnets. The database servers have their endpoint exposed to the subnets. You need to implement detailed controls over the types of connections supported between the web servers and database servers. You want to minimize the efforts and costs necessary to implement and maintain your solution. Which two technologies should you include in your solution? a. User Defined Roles (UDRs) b. Azure Traffic Manager c. Application Security Groups (ASGs) d. Azure Firewall e. Network Security Groups (NSGs)
c. Application Security Groups (ASGs) e. Network Security Groups (NSGs)
From Azure Monitor, you can view which user turned off a specific virtual machine during the last 14 days. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. a. No change is needed b. Azure Event Hubs c. Azure Activity Log d. Azure Service Health
c. Azure Activity Log
Which Azure service can use autoscale to add or remove resources as appropriate to minimize costs and ensure optimum performance levels? a. Azure Service Health b. Azure Monitor c. Azure Advisor d. Microsoft Defender for Cloud
c. Azure Advisor
A company is planning on setting up a solution in Microsoft Azure. The solution would have the following key requirements: Allows the hosting of web-based applications. Which of the following would be best suited for this requirement? a. Azure Databricks b. Azure Logic Apps c. Azure App Service d. Azure Application Insights
c. Azure App Service
A company is looking to help lower cloud-related costs. You need to identify tools and mechanisms to help save money. To answer, select the appropriate cost control mechanism from the options. Your company plans to make use of a free SaaS solution that lets your company monitor, allocate, and optimize cloud spending in a multi-cloud environment. a. Total Cost of Ownership (TCO) Calculator b. Azure Reservations c. Azure Cost Management d. Azure Spending Limits e. Azure Resource Manager (ARM)
c. Azure Cost Management
You company has a website that is being threatened by an attacker to bring it down by sending a large volume of network traffic to your servers. Which Azure service can help your company to protect its App Service instance from this kind of attack? a. Azure Policy b. Azure Firewall c. Azure DDoS Protection d. Network Security Groups
c. Azure DDoS Protection
Your company is planning a deployment using Azure Database for PostgreSQL. The deployment should meet the following requirements. -Up to 10 TB storage -Azure Premium Storage -Point-in-time-restore for up to 35 days. You need to select the appropriate deployment and pricing tier to meet these requirements and minimize costs. What should you select? a. Azure Database for PostgreSQL Hyperscale (Citus) b. Azure Database for PostgreSQL Single Server Basic tier c. Azure Database for PostgreSQL Single Server General Purpose tier d. Azure Database for PostgreSQL Single Server Memory Optimized tier
c. Azure Database for PostgreSQL Single Server General Purpose tie
Deny traffic to your Azure Virtual Network resources from known malicious IP addresses. a. Azure Monitor b. Azure Key Vault c. Azure Firewall d. Microsoft Sentinel
c. Azure Firewall
You are planning to create a cloud solution in Azure. You need to choose the appropriate networking resources to deploy for certain scenarios. Which resources should you deploy? To answer, select the appropriate resources. To answer, select the appropriate resources. You want to create a rule that restricts network traffic across subscriptions. a. Network Security Group (NSG) b. Application Gateway c. Azure Firewall d. Azure DDoS Protection
c. Azure Firewall
Which Azure service should you use to store certificates? a. Azure Security Center b. An Azure Storage Account c. Azure Key Vault d. Azure Information Protection
c. Azure Key Vault
Which Azure management tool provides a graphic interface for deploying, managing, and monitoring Azure resources? a. Azure PowerShell b. Azure Command-line interface (CLI) c. Azure Portal d. Azure Resource Manager
c. Azure Portal
You create an Azure subscription. You need to determine when you should use specific Azure management tools. When should you use each tool? You need to log in to Azure with the following cmdlet from your laptop without manually opening a web browser: Connect-AzAccount. a. Azure CLI b. Azure Cloud Shell c. Azure PowerShell
c. Azure PowerShell
What should you use to evaluate whether your company's Azure environment meets regulatory requirements? a. Azure Service Health b. Azure Knowledge Center c. Azure Security Center d. Azure Advisor
c. Azure Security Center
Migrate a workload from an on-premises Hyper-V host to Azure, still retaining full control over the operating system. a. Azure App Service b. Azure Functions c. Azure Virtual Machine (VM) d. Azure Traffic Manager
c. Azure Virtual Machine (VM)
This question requires that you evaluate the underlined text to determine if it is correct. A support plan solution that gives you best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost is a Standard support plan. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. a. No change is needed b. Developer c. Basic d. Premier
c. Basic
A company has a set of Virtual Machines (VMs) defined within Microsoft Azure. One of the machines was down due to issues with the underlying Azure Infrastructure. The server was down for an extended period of time and breached the standard SLA defined by Microsoft. How will Microsoft reimburse the downtime cost? a. By directly sending money to the customer's bank account b. By spinning up another Virtual Machine free of cost for the client c. By providing service credits to the customer d. By providing a service free of cost to use for a specific duration of time.
c. By providing service credits to the customer
What should you use to evaluate whether your company's Azure environment meets regulatory requirements? a. The Knowledge Center website b. The Advisor blade from the Azure portal c. Compliance Manager from the Security Trust Portal d. The Security Center blade from the Azure Portal
c. Compliance Manager from the Security Trust Portal
When you implement a SaaS (Software as a Service) solution, you are responsible for? a. Installing patches on Operating Systems b. Configure High Availability c. Configuring the SaaS solution d. Install SaaS Solution
c. Configuring the SaaS solution
Is a lightweight, virtualized application environment. a. Azure Functions b. Azure Virtual Machines c. Container Instances
c. Container Instances
You need to bring Azure Storage into your virtual network with a dedicated IP address. Which solution should you use? a. Create a private connection with Azure ExpressRoute b. Peer your Azure Virtual network (VNet) with an Azure Storage VNet c. Create a private endpoint with Azure Private Link d. Grate a site-to-site VPN with Azure VPN Gateway
c. Create a private endpoint with Azure Private Link
You manage a development team that needs to focus all its efforts on creating and maintaining application code. Your team does not have the resource to provision and scale the infrastructure you applications require to run. What should you do? a. Automate virtual machine provisioning with Azure Quickstart Templates. b. Configure virtual machines and deploy application updates using Azure command-line interface (CLI). c. Create an Azure Functions subscription and upload your code d. Containerize the apps and deploy a container cluster service.
c. Create an Azure Functions subscription and upload your code
A billing zone is geographical grouping of Azure regions used to determine billing based on: a. Hours of activity b. Peak usage periods or resource deployment c. Data transfers
c. Data transfers
Your company hosts an accounting application named App1 that is used by all the customers of the company. App1 has low usage during the first three weeks of each month and very high usage during the last week of each month. Which benefit of Azure Cloud Services supports cost management for this type of usage pattern? a. High availability b. High latency c. Elasticity d. Load Balancing
c. Elasticity
During which phase Azure services are subject to a Service Level Agreement (SLA) a. Private preview b. Public preview c. Generally available (GA)
c. Generally available (GA)
Which Azure Storage replication comes under "Redundancy in a secondary region"? a. Locally redundant storage (LRS) b. Zone-redundant storage (ZRS) c. Geo-redundant storage (GRS) d. Geo-zone-redundant storage (GZRS)
c. Geo-redundant storage (GRS) and d. Geo-zone-redundant storage (GZRS)
You want to know how many times your web app has been unavailable during the past month. a. Health advisories b. Health alerts c. Health history d. Planned Maintenance e. Service issues
c. Health history
Which of the following terms refer to making a service available with no downtime for an extended period of time? a. Agility b. Fault tolerance c. High Availability
c. High Availability
A _______ cloud is a computing environment that combines a public cloud and a private cloud by allowing data and applications to be shared between them. a. Public Cloud b. Private Cloud c. Hybrid Cloud
c. Hybrid Cloud
Which of the following is a correct statement? a. Private Cloud = Public Cloud + Hybrid Cloud b. Public Cloud = Hybrid Cloud + Private Cloud c. Hybrid Cloud = Private Cloud + Public Cloud
c. Hybrid Cloud = Private Cloud + Public Cloud
A company plans to use a custom Software as a Service (SaaS) application and wants to minimize costs. The company is legally required to maintain and secure all data onsite. a. Public model b. Private model c. Hybrid model
c. Hybrid model
An organization that hosts its infrastructure in a private cloud can close its data center. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. a. No change is needed b. In a hybrid cloud c. In the public cloud d. On a Hyper-V host
c. In the public cloud
Your company plans to deploy several custom applications to Azure. The applications will provide invoicing services to the customers of the company. Each application will have several prerequisite applications and services installed. You need to recommend a cloud deployment solution for all the applications. What should you recommend? a. Software as a Service (SaaS) b. Platform as a Service (PaaS) c. Infrastructure as a Service (IaaS)
c. Infrastructure as a Service (IaaS)
A company has created a Resource Group (RG) - passnexam-resource-group. They want to ensure that resources within the Resource Group do not accidentally get deleted. Which of the following would you use for this purpose? a. Access control b. Policies c. Locks d. Diagnostics settings
c. Locks
What should you use to evaluate whether your company's Azure environment meets regulatory requirements? a. Azure Service Health b. Azure Knowledge Center c. Microsoft Defender for Cloud d. Azure Advisor
c. Microsoft Defender for Cloud
You are working on understanding all the key terms when it comes to International Standards, data privacy and data protection policies. Which of the following choices pertain to the following? "An organization that defines standards used by the United States Government" a. GDPR b. ISO c. NIST d. Azure Government
c. NIST
To complete the statement in the answer area, select the appropriate option. Application Security Groups (ASGs) let you ____________________________. a. Directly allow or block connections to all severs running instances of the same server. b. Define templates for the rapid deployment of application instances in an orchestrated environment. c. Organize similar servers so you can easily define and implement security policies based on those groups. d. Control user access to serverless applications
c. Organize similar servers so you can easily define and implement security policies based on those groups.
You work for a small college. The college has no more than 250 active students. You consider moving the college's infrastructure to the cloud. You need to determine the type of subscription that you should use for different scenarios. Which subscriptions should you use? You want to evaluate virtual machines (VMs) for 18 months. a. Enterprise b. Free c. Pay-as-you-go d. Student
c. Pay-as-you-go
A Microsoft SQL Server Database that is hosted in the cloud and has software updates managed by Azure is an example of __________ a. Disaster recovery as a service (DRaaS) b. Infrastructure as a Service (IaaS) c. Platform as a Service (PaaS) d. Software as a Service (SaaS)
c. Platform as a Service (PaaS)
You're developing an application and want to focus on building, testing, and deploying. You don't want to worry about managing the underlying hardware or software. Which cloud service type is best for you? a. Infrastructure as a Service (IaaS) b. Software as a Service (SaaS) c. Platform as a Service (PaaS)
c. Platform as a Service (PaaS)
You are researching governance methodologies in Azure. You want to understand role-based access control security (RBAC), policies, initiatives, and Read-Only locks. You need to choose the type of resource or feature to use for different scenarios. When should you use each resource or feature? You want to ensure that only SQL Database instances can be added to a resource group name database-rg. a. Read-only Lock b. RBAC c. Policy d. Initiative
c. Policy
You are researching the governance methodologies in Azure. You want to understand role-based access security (RBAC), policies, initiatives, and locks. You need to choose the type of resource or feature to use for different scenarios. When should you use each resource or feature? You want to ensure that only virtual machines (VMs) of a specific size are deployed to a resource group. a. Initiative b. Lock c. Policy d. RBAC
c. Policy
You are researching the governance methodologies in Azure. You want to understand role-based access security (RBAC), policies, initiatives, locks, and Azure Advisor. You need to choose the type of resource or feature to user for different scenarios. When should you use each resource or feature? You want to prevent virtual machines (VMs) from being deployed in a subscription. a. RBAC b. Advisor c. Policy d. Lock e. Initiative
c. Policy
Cloud resources are maintained on a private network and used exclusively by one business or organization. a. Public Cloud b. Hybrid Cloud c. Private Cloud
c. Private Cloud
A company wants to purchase a Microsoft Azure support plan. Below is a key requirement from the support plan: Regular architecture reviews from Microsoft for the Azure environment. Which of the following plans would the company need to purchase to fulfill this requirement? a. Basic b. Developer c. Professional Direct d. Standard
c. Professional Direct
Which of the following describes a public cloud? a. Is owned and operated by the organization that uses the resources from that cloud. b. Let organizations run application in the cloud or on-premises c. Provides resources and services to multiple organizations and users, who connect through a secure network connection.
c. Provides resources and services to multiple organizations and users, who connect through a secure network connection
Your company does not have IT experts or the money to purchase its own servers. a. Hybrid b. Private c. Public
c. Public
Your company wants to create a virtual network with 10 virtual machines (VMs) and no capital expenditure (CapEx) costs. a. Hybrid b. Private c. Public
c. Public
In which type of cloud model are all the hardware resources owned by a third-party and shared between multiple tenants? a. Hybrid Cloud b. Private Cloud c. Public Cloud
c. Public Cloud
You need to enable data redundancy for your organization's cloud apps. Depending on the data, redundancy may be local only, or may require multiple copies stored in different locations. Given the redundant storage descriptions below, which redundancy option is being described? It allows replicated data to be simultaneously _______________ access in two regions. a. Geo-redundant storage (GRS) b. Locally redundant storage (LRS) c. Read-access GRS (RA-GRS)
c. Read-access GRS (RA-GRS)
Prepare the cloud environment for the planned changes. a. Innovate b. Plan c. Ready d. Strategy
c. Ready
You are given approval to move your company's web application to Azure as an App Service. However, your manager wants to know the annual cost for such a move. You decide to use the Azure Pricing Calculator to estimate the cost. You need to determine which factors affect the cost. Which five factors affect the cost of an App Service? a. Type of application framework b. Number for Webjobs c. Region d. Tier e. Operating System f. Instance type g. Number of instances
c. Region d. Tier e. Operating System f. Instance type g. Number of instances
You are interviewing for a job as an entry level Azure administrator. You need to describe regions. Which two descriptions of regions are accurate? a. Regions can span countries b. Regions represent physical datacenters c. Regions contain one or more datacenters d. Region specify the location of resources
c. Regions contain one or more datacenters d. Region specify the location of resources
Azure monitoring options - You want to view the number of virtual machines (VMs) that are currently down. a. Alerts b. Application Insights c. Resource Health d. Metrics
c. Resource Health
Which of the following allows you to assign permissions to users so they can create resources in Azure? a. Policies b. Resource Groups c. Role-based Access Control (RBAC) d. Initiatives
c. Role-based Access Control (RBAC)
Which of the following allows you to assign permissions to users so they can create resources in Azure? a. Initiatives b. Resource groups c. Role-based access control (RBAC) d. Policies
c. Role-based access control (RBAC)
Your company has a new policy to restrict administrative access to resources at the resource group and resource scopes in a detailed, granular way. Access will be granted to various groups and individual users. You need to implement the new policy. What should you use? a. Locks b. Azure Advisor c. Role-based access control (RBAC) d. Azure Policy
c. Role-based access control (RBAC)
Fast migration of SQL Server from on-premises to Azure with retention of operating system access. a. Azure SQL Database b. Azure SQL Managed Instance c. SQL Server on Azure VMs d. Azure Database for PostgreSQL
c. SQL Server on Azure VMs
A company needs to make productivity applications available to all employees, including those that work from home, on a pay-as-you-go basis a. IaaS b. PaaS c. SaaS
c. SaaS
Microsoft 365: a. IaaS b. PaaS c. SaaS
c. SaaS
You have been asked to develop cloud migration plans for your organization. As part of this assignment, you need to identify the most cost-effective cloud service type for each department in the organization. The solution should minimize management overhead. Given each department's requirements, which solution should you recommend? Sales - Use a provider-managed calendar to schedule appointments and meetings. a. IaaS b. PaaS c. SaaS
c. SaaS
Manually increasing or decreasing resources to meet a predictable workload. a. Agility b. Elasticity c. Scalability d. High Availability
c. Scalability
You need to ensure consistent performance for users who access your application, which runs on customized Linux virtual machines. What should you use to provision virtual machines automatically? a. Functions b. Availability Zones c. Scale Sets d. Dedicated hosts
c. Scale Sets
You are running a VM in Azure Cloud. Which model reflects how the resource is managed? a. User responsibility model b. Azure responsibility model c. Shared responsibility model
c. Shared responsibility model
Microsoft Office365 is an example of? a. Infrastructure as a Service (IaaS) b. Platform as a Service (PaaS) c. Software as a Service (SaaS)
c. Software as a Service (SaaS)
A private cloud requires ______________. a. The use of custom developed software b. Data to be stored in an on-premises datacenter c. The infrastructure to be on a private network d. Each tenant to access applications and data through a different URL.
c. The infrastructure to be on a private network
A company wants to ensure that users in their company are authenticated when they access resources defined in their Microsoft Azure account. Which of the following is the correct definition of authentication? a. This specifies the type of service you can use in Azure b. This specifies the type of data you can use in Azure c. This is the act of providing legitimate credentials d. This specifies what you can do in Azure
c. This is the act of providing legitimate credentials
You need to determine the number of subscriptions that you have to create based on the requirements for each scenario. How many subscriptions should you create? You company has three departments and two Azure administrators. Both administrators manage all departments. Each department must receive an Azure bill. a. One b. Two c. Three
c. Three
You are planning to use Azure for a cloud solution. You need to choose the most appropriate tool for different scenarios. Which tools should you use? You want to see how much you can save over five years by moving your company's infrastructure to the Azure cloud. a. Azure pricing calculator b. Cost Management c. Total Cost of Ownership (TCO) calculator
c. Total Cost of Ownership (TCO) calculator
Which built-in role can create and delete management locks a. Owner b. Contributor c. User Access Administrator d. Reader
c. User Access Administrator
Your company has a private cloud setup, and they want to start using Microsoft Azure Public Cloud model. When can an organization decommission its private cloud infrastructure hosted in its datacenter? a. When they have a hybrid solution b. When all of their servers are in the private cloud c. When all of their servers are in the public cloud d. When all of their servers are in the public or private cloud.
c. When all of their servers are in the public cloud
What are two characteristics of the public cloud? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. a. Dedicated hardware b. Unsecured connections c. Limited storage d. Metered pricing - pay as you go pricing available e. Self-service management
d . Metered pricing - pay as you go pricing available & e. Self-service management
What is the minimum recommended data retention period for the archive access tiers? a. 30 days b. 60 days c. 90 days d. 180 days
d. 180 days
What is the maximum length of time you can use the credits from an Azure fee subscription before it expires? a. 24 months b. 12 month c. 6 months d. 30 days
d. 30 days
You have an on-premises network that contains 100 servers. You need to recommend a solution that provides additional resource to your users. The solution must minimize capital and operational expenditure costs. What should you include in the recommendation? a. A complete migration to the public cloud b. An additional datacenter c. A private cloud d. A hybrid cloud
d. A hybrid cloud
SLA in Azure is a formal agreement between Microsoft and customer. Which factor is covered in SLA? a. Durability b. Scalability c. Elasticity d. Availability
d. Availability
A company is planning on setting up a solution in Microsoft Azure. The solution would have the following key requirements: Give the ability to detect and diagnose anomalies in web applications. Which of the following would be best suited for this requirement? a. Azure Databricks b. Azure Logic Apps c. Azure App Service d. Azure Application Insights
d. Azure Application Insights
You plan to implement an Azure database solution. You need to implement a database solution that meets the following requirements: -Can add data concurrently from multiple regions -Can store JSON documents. Which database service should you deploy? a. Azure SQL Database b. Azure Database for PostgreSQL c. Azure Database for MariaDB d. Azure Cosmos DB
d. Azure Cosmos DB
You are planning to create a cloud solution in Azure. You need to choose the appropriate networking resources to deploy for certain scenarios. Which resources should you deploy? To answer, select the appropriate resources. To answer, select the appropriate resources. You want to prevent a malicious flood of HTTP traffic to a VM that hosts Internet Information Services (IIS). a. Network Security Group (NSG) b. Application Gateway c. Traffic Manager d. Azure DDoS Protection
d. Azure DDoS Protection
You need to prevent any users from deleting resources from a subscription with contents spanning multiple resource groups. a. Azure Advisor b. Azure Policies c. Role-based access control (RBAC) d. Azure Locks e. Initiative
d. Azure Locks
Which Azure service is used to send an email to an administrator when a virtual machine (VM) is about to exceed its usage quota for the month? a. Azure Monitor metrics b. Application Insights c. Service Health d. Azure Monitor alerts
d. Azure Monitor alerts
A company needs to create around 50 customized Virtual Machines. Out of these 20 are Windows based Virtual machines and 30 are Ubuntu Machines. Which of the following would help reduce the administrative effort required to deploy the machines? a. Azure Load Balancer b. Azure Web Apps c. Azure Traffic Manager d. Azure Scale Sets
d. Azure Scale Sets
Which two options are examples of Conditional Access policies? a. Enable self-service password reset b. Create dynamic groups c. Enable password writeback to on-premises d. Block access by location e. Require compliant devices
d. Block access by location e. Require compliant devices
To improve performance of a mission-critical application, your organization has implemented cloud bursting. Which statement describes the benefit cloud bursting provides? a. Compute, memory, and storage resources are added to cloud-based servers to increase capacity b. Compute resources are distributed geographically to reduce the impact of power or connectivity failures. c. Additional virtual machines are added to, and removed from, a computer cluster based on workload. d. Cloud-based resources are provisioned when on-premises servers reach 100% resource capacity.
d. Cloud-based resources are provisioned when on-premises servers reach 100% resource capacity.
When you are implementing SaaS solution, you are responsible for: a. Configuring high availability b. Defining scalability rules c. Installing the SaaS solution d. Configuring the SaaS solution
d. Configuring the SaaS solution
You need to give all users in a group the ability to create and manage all types of Azure resources in a subscription. Right granted to the users should be kept to a minimum. Which built-in role-based access control should you assign to the group? a. Owner b. Reader c. User Access Administrator d. Contributor
d. Contributor
________________ is a strategy to implement multiple layers of security to slow down an attack and provide early alert telemetry to act upon. a. Application Insights b. Azure Cognitive Services c. Customer Lockbox d. Defense in Depth
d. Defense in Depth
You need to compare the costs of running an application workload in Azure versus on-premises. What should you do to ensure that you can use the Azure TCO calculator to complete this task? a. Determine the app's compute, storage, and network requirements. b. Create an authorized service account in Azure Active Directory (Azure AD) c. Initiate a paid Azure cloud subscription for your organization d. Define the server, database, storage, and networking workload
d. Define the server, database, storage, and networking workload
Your company suffers a catastrophic web outage due to a misconfigured driver on a database server. You need to find a cloud solution that allows the highly customized web application to run without requiring management of operating system settings or services. However, the company's web developers must be able to maintain customizations. What should you do to meet these requirements? a. Relocate the web app to an infrastructure as a Service (IaaS) provider. b. Migrate the web app to serverless compute. c. Move the web app to a Software as a Service (SaaS) provider d. Deploy the web app functionality using Platform as a Service (PaaS)
d. Deploy the web app functionality using Platform as a Service (PaaS)
You move some Windows Server virtual machines (VMs) from your on-premises datacenter to Azure. Existing on-premises VMs are licensed by your company's active Microsoft Software Assurance agreement. You need to reduce the cost of your Azure VMs. What should you do? a. Create VMs in availability zones b. Deploy your VMs on an Azure Dedicated Host c. Create VMs in availability sets d. Enable the Azure Hybrid Benefit setting
d. Enable the Azure Hybrid Benefit setting
A company wants to host data disks in the Azure cloud. The data disks must be available to other on-premises machines running Windows, Linux and macOS using network sharing via Server Message Block (SMB) protocol. Data must be secure both at rest and in-transit. a. Blob Storage b. Archive Storage c. Disk Storage d. File Storage
d. File Storage
What is a feature of an Azure virtual network? a. Resource costs analysis b. Packet inspection c. Geo-redundancy d. Isolation and segmentation
d. Isolation and segmentation
You plan to extend your company network to Azure. The network requires a VPN appliance that uses an IP address of 131.107.200.1. You need to create an Azure resource that defines the VPN appliance in Azure. Which Azure resource should you create? To answer, select the appropriate resource in the answer area. a. Services b. NAT gateways c. Application gateways d. Local network gateways e. Virtual network gateways f. On-Premises Data Gateways g. Azure Data Box Gateway h. Azure Stack Edge/Data Box Gateway i. Web Application Firewall policies
d. Local network gateways
Which Azure security solution provides general security recommendations and suggests remediations to better secure your resources? a. Azure DDoS Protection Standard b. Key Vault c. Azure Information Protection (AIP) d. Microsoft Defender for Cloud
d. Microsoft Defender for Cloud
Build a baseline behavioral profile of organizational entities to identify anomalous activity. a. Azure Monitor b. Azure Key Vault c. Azure Firewall d. Microsoft Sentinel
d. Microsoft Sentinel
Which two infrastructures are valid hybrid cloud infrastructure? a. Multiple private clouds b. Multiple public clouds c. On-premises infrastructure and private cloud d. On-premises infrastructure and public cloud e. Private and public cloud
d. On-premises infrastructure and public cloud e. Private and public cloud
Which cloud models can you deploy physical servers to? a. Public cloud b. Private cloud, hybrid cloud and public cloud c. Hybrid cloud only d. Private cloud and hybrid cloud
d. Private cloud and hybrid cloud
In which Azure support plans can you open a new support request? a. Premier and Profession Direct only b. Premier, Professional Direct, and Standard Only c. Premier, Professional Direct, Standard, and Developer only d. Professional Direct, Standard, Developer, and Basic
d. Professional Direct, Standard, Developer, and Basic
You organization hosts its e-commerce solution on a computing infrastructure that is provided by a third-party service provider and shared with other organizations. You only pay for the compute power, storage, and networking resources you use. What type of cloud computing is this an example of? a. Hybrid cloud b. Private cloud c. On-premises datacenter d. Public cloud
d. Public cloud
You have completed the migration of your organization's core servers and processes to cloud-based virtual machines. Your final project involves migrating a weekly batch-processing task that relies on operating system drivers to print PDF reports. You need to meet this requirement while minimizing costs. What should you do? a. Execute the batch task on a dedicated virtual machine as needed b. Migrate the batch processing to serverless compute c. Configure virtual machine clusters to scale for batch processing d. Run the batch processing task using spot instance
d. Run the batch processing task using spot instance
A company is deploying a critical business application on two virtual machines (VMs). The deployment needs to support: -Highly available access -Separate fault and update zones -Minimal latency between instances. Most users who need access to the application are in the Azure East US 2 region. Which configuration should the company use to deploy the situation? a.Separate availability sets b. Separate resource groups in the same region c. Separate regions in a regional pair d. Separate availability zones
d. Separate availability zones
This questions requires that you evaluate the underlined text to determine if it is correct. Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user accounts. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. a. No change is needed b. Azure Active Directory (Azure AD) administrative accounts c. Personally Identifiable Information (PII) d. Server applications
d. Server applications
With ______________, users can access all needed applications without being required to authenticate a second time. a. Conditional Access b. Multi-Factor Authentication (MFA) c. Role-Based Access Control (RBAC) d. Single Sign-On (SSO)
d. Single Sign-On (SSO)
A ____________ storage account supports Blob, Queue, and Table Storage services. a. Premium block blobs b. Premium file shares c. Premium page blobs d. Standard general-purpose v2 storage
d. Standard general-purpose v2 storage
Define the business justification and the expected outcomes of adoption. a. Innovate b. Plan c. Ready d. Strategy
d. Strategy
To complete the statement in the answer area, select the appropriate option. You use Azure Cost Management and Billing to create cost reports. To understand the data in a cost report, Microsoft recommends you implement _________. a. Management groups b. Resource groups c. Resource Manager d. Tags
d. Tags
Your company plans to migrate all on-premises data to Azure. You need to identify whether Azure complies with the company's regional requirements. What should you use? a. The Knowledge Center b. Azure Marketplace c. The MyApps Portal d. The Trust Center
d. The Trust Center
What is the advantage or moving your company's infrastructure to Azure by using a public cloud deployment model? a. There are no operational expenditure (OpEx) costs b. The company has complete control of the resources that are used by the operating system c. Legacy applications are easier to support d. The company is able to scale up as needed with no capital expenditure (CapEx) required
d. The company is able to scale up as needed with no capital expenditure (CapEx) required
You plan to migrate several servers from an on-premises network to Azure. What is an advantage of using public cloud service for the servers over an on-premises network? a. The public cloud is owned by the public, NOT a private corporation b. The public cloud is a crowd-sourcing solution that provides corporations with the ability to enhance the cloud c. All public cloud resources can be freely accessed by every member of the public d. The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud.
d. The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud.
Your company plans to migrate applications and services to the cloud. You recommend for a hybrid cloud to be deployed. Why would you make this recommendation? a. To ensure that charges are only incurred when cloud resources are utilized b. To eliminate the need for company-managed compute resources c. To consolidate all cloud resources in a single datacenter d. To augment on-premises resources by providing overflow capacity
d. To augment on-premises resources by providing overflow capacity
Your company is considering moving its on-premises infrastructure to Azure. Before doing so, you want to compare the cost savings, if any. You need to choose the most appropriate cost savings estimate tools. Which tool should you use? a. Azure Pricing Calculator b. Azure Advisor c. Cost Management d. Total Cost of Ownership (TCO) calculator
d. Total Cost of Ownership (TCO) calculator
Which two options can you use to connect to Azure Virtual Networks (VNets) to each other? a. Azure Traffic Manager b. Azure ExpressRoute c. Azure Front Door d. VPN gateways e. VNet peering
d. VPN gateways e. VNet peering
You are planning to use Azure for your company's cloud infrastructure. You just learned that Azure supports Software-as-a-Service (SaaS), Platform-as-a-Service (PaaS), and Infrastructure-as-a-Service (IaaS) offerings. You need to determine the resources that are available for each category. Which resource does each type of infrastructure make available? Select the appropriate resource. - IaaS a. Azure SQL Database b. Outlook c. Virtual Network d. Virtual Machines
d. Virtual Machines
A company is looking to help lower cloud-related costs. You need to identify tools and mechanisms to help save money. To answer, select the appropriate cost control mechanism from the options. Your company wants to increase default limits on how many select resources of each type can be provisioned per Azure Region a. Total Cost of Ownership (TCO) Calculator b. Azure Reservations c. Azure Cost Management d. Azure Spending Limits e. Azure Resource Manager (ARM)
e. Azure Resource Manager (ARM)
You need to define a set of policies to help ensure compliance for resources contained in a resource group. a. Azure Advisor b. Azure Policies c. Role-based access control (RBAC) d. Azure Locks e. Initiative
e. Initiative