AZ900 Core Azure Services
You need t analyze large volumes of streaming data being collected from Internet of Things (IoT) devices
HDInsight HDInsight is an open-source enterprise-level analytics service that provides for fast-cost effective processing of massive amount of data. Can be used to analyze streaming or historic data
Develop new cloud native or hybrid solution
Innovate
Which factors affect the cost
Instance type Number of Instances OS Region Tier
allow vehicles to send on-board diagnostic sensory and vehicle telemetry data to the cloud for analysis
IoT Central The solution supports device-to-cloud messaging and per-device identity. You can also use it to analyze telemetry data
Prepare the cloud environment for the planned changes
Ready
Regions
Regions are always paired with other regions. The paired regions is always in the same geography but at least 300 miles away. Regions contain one or more datacenters Regions specify the location of resources. Cannot choose datacenter but yes region Regions cannot span countries. Tied to a single country or geographical area Regions do not represent physical datacenter. They represent an area within a geographical area
Azure monitoring options You want to view the number of VM that are currently down
Resource Health
Your company has a new policy to be able to limit access to resources at the resource group and resource scope in detailed, granular way. Access will be granted to various groups and individual users
Role-based access control Supports granular control required
Resources
A resource group can contain resources from any region, not just the region in which the resource group is located You can add a resource to or remove a resource from a resource group, except when the resource group is locked. You can also move resources between resource groups. A resource can reside in only one resource group at a time. Deleting a resource group will delete all resources contained in that group Resources can interact with other resources in a different resource group. The resource group creates a logical resource grouping primarily for management purposes and does not impact access between resources
Replace VM with a VM scale set
A scale set can provide high availability to your application, automatically increasing and decreasing the number of VMs in response to demand or as per a defined schedule. It cannot captures the desired state of your Development VM and reuse of for deployment of the Test and production instances.
EventGrid
A solution for building event-driven architectures that subscribe to Azure resources and route events to different endpoints
Azure monitoring options You want to receive an e-mail whenever the number of requests to a web app exceeds 10000 within an hour
Alerts receive an email whenever the number of requests to a web apps exceeds
Which feaute of Azure Monitor allows you to visualize telemetry data
Application Insight
Azure monitoring options You want to allow developers to send telemetry data to Azure
Application Insights Allow developers to send telemetry data to Azure.
Application Insights
Application insight is a feature of Azure Monitor that allows you to visually analyze telemetry data. It is an Application Performance Management (APM) SERVICE THAT DETECTS PERFORMANCE IN REAL TIME. Developers can install a small instrumention package in their web app to send telemetry data to Azure
Your company plans to make use of a free SaaS solution that lets your company monitor, allocate and optimize cloud spend in a multi-cloud enviroment
Azure Cost Management This the role of Azure Cost Manager, which is provided at no cost to Azure customers and partners. It supports a multi-cloud environment to include Azure and more
Your company is planning a deployment using Azure Database for PostgreSQL. The deployment should meet the reqs Up to 10TB storage Azure Premium Storage Point-in-time-restore for up to 35 days
Azure Database for PostgreSQL Single Server General Purpose tier This is the most cost-effective option. Supports data storage of up to 16 TB and uses Azure Premium storage
Development requires them to deploy and periodically remove and redeploy 100 vms What devops solution?
Azure DevTest Labs DevTest Labs lets developers directly manage VMs and PaaS resources and lets them quickly provision a development and test environment
Your company is considering using Linux based Azure Container Instance to deploy a single app. The app runs as a statefl app You need to provide storage to retrieve and persist state
Azure Files. This is the only storage option that supports persistent storage for ACI. You would need to create the share and then create a container
You want to create a rule that restricts network traffic across subscriptions
Azure Firewall
Which Azure service can use autoscale to add or remove resources as appropriate to minimize costs and ensure optimum performance levels
Azure Monitor Azure Monitor can use autoscale to add or remove resources as appropriate to minimize costs and ensure performance. You can create rules based on metrics collected by Azure Monitor to match resources to an application load
Your company plans to a three-year plan for virtual machines and storage resources to receive a reduction in pay-as-you-go prices
Azure Reservations
Your company wants to increase default limits on how many select resources of each type can be provisioned per Azure region
Azure Resource Manager This lets you increase default limits nut does not let you exceed hard limits
lift-and-shift of on-premises SQL Server with minimal changes to an Azure Platform-as-a-Service (PaaS)
Azure SQL Managed Instances
You need to make sure your database can scale horizontally and support query parallelization for faster response on a large dataset, without your team's involvement in database or operating system management
Azure database PostgreSQL Hyperscale(Citus). It is deployment option offered as a PaaS that can scale horizontally by breaking up large data tables into smaller chunks. query parallelization across multiple servers and performance on dataset of 100gb and above
Your company uses Azure Blueprint to assist with its migration to Azure. User1 should be able to assign published blueprints You need to add User1 to the role-based access control role necessary to provide this permission
Blueprint Operator They can assign existing published blueprints, but they can not create the blueprint definitions
Compare using Azure Powershell and Azure CLI for Azure management Command execution supported in Azure Cloud Shell
Both
You can to give all users in a group the ability to create and manage al type of resource to a minimum
Contributor You have access to all resources but cannot grant permissions
You want to prevent a malicious flood of HTTP traffic to a VM that hosts Internet Information Services
DDoS protector
Azure Traffic Manager
DNS based traffic load balancer that allows optimal distribution of traffic to Azure services spread across global Azure regions
Data Lake Analytics
Data Lake Analytics is used to rapidly process big data jobs from large data stored referred to as Data Lakes.
You deploy a new VM and then manually adjust its configuration in Azure portal to meet the requirements of your Development environment You need to capture changes made to the development VMs configuration after the original deployment, so you can reuse it as a template in the deployment of Test and Production VMs.
Export Azure Resource Manager (ARM) template from a resource Export the Azure Resource Manager (ARM) template from a resource group You should either export the ARM template from a resource or from a resource group. ARM templates can be used to represent the desired state of your Azure resources. They can be repeatedly and consistently deployed throughout the development lifecycle, so you can create the Test and Production instances
Least expensive
Linux
Which Azure services provides for serverless workflow orchestration to let you integrate apps, data, systems, and services across enterprise or organizations
Logic Apps you can use Logic Apps to avoid needing to write complex code for coordination between disparate systems
Machine Learning service
ML service is a data science technique that enables computers to predict customer outcomes and trends without being explicitly programmed. It is a cloud service to train, deploy, automate and manage ml models It is designated to let you star training on a local computer and then scale out to the cloud
Metrics
Metrics simply tell you how a resource is performing and what it is consuming
Cn you restrict user account to a VM with NSG?
NO An NSG cannot ensure that only your account can use RDP to access the VMs. You cannot use an NSG restrict user account access to a VM. You must use role-based access control (RBAC) to accomplish this
Virtual machines deployed on its hybrid cloud Azure Security Center support is limited to Windows operating systems
No
NSG protects from several subscriptions?
No An NSG does not allow you to create a policy that restricts network traffic across subscriptions. An NSG can only protect resources in a single subscription
Authorization can use a password to identify a person
No Authorization cannot use password to identify a person. This is called authentication
DevTest Labs includes tools to support monitoring, managing actionable alerts, and gaining insights from logs and telemetry
No Does not include tools to support monitoring, managing actionable alerts, and gaining insights from logs and telemetry. This is provided through Azure Monitor
Traffic between peered virtual networks is routed over public internet
No It is routed through Microsoft backcone infrastructure without involvement of the pubic internet
Spot VMs use the standard service level agreement for Azure VMs
No Spot VMs do not use the standard SLA for Azure VMs.
You are charged for the use of Windows Virtual Desktop on a monthly basis accordingly by active users
No WVD is a service that does not require any additional licenses. You can use it with your existing Microsoft 365
Azure PowerShell VM management is limited to Windows VM only
No can be used to manage Linux and Mac OS VIM
Azure Resources Manager templates use Azure PowerShell syntax
No use basic Json syntax
Azure AD
Self-service password change for cloud users user and group management
Define the business justification and the expected outcomes of adoption
Strategy
You deploy 3 VMs to Azure as a three-tieded architecture. One VM hosts a front-end web app, on WM hosts an API, and the other hosts Microsoft SQL Server database Only the fron end web application should be publicly accessible, and it should be accessible over HTTP on port 80. All three VMs must be accessible over Remote Desktop Protocol(RDP) on port 222. Only you can use RDP to access VMs You need to determine how Network Security Groups (NSGs) can be used in this scenario.
To ensure that all three VMs are accessible over port 222 To ensure that only the front-end VM id publicly accessible over port 80 A Network Security Groups can ensure that all three VMs are accessible over port 222. An NSG acts like a firewall. A nsg can ensure that only the front-edn VM is publicly accessible over port 80.
You want to compare the cost savings to moving into the cloud
Total Cost of Ownership TCO calculator
Which two options can you use to connect Azure VNets to each other
VPN gateaways Vnet peering
Authentication can use certificates to identify a person or a service
YES A certification has an embedded key that identifies a person or service
Transfer Billing ownership of a subscription from an Azure AD to another Moving subscription that owns a Azure Kubernetes Service cluster causes that cluster to lose functionality
YES Moving a subscription that owns an Azure Kuberneters Service cluster causes the cluster to lose functionality. This is due to lost service principal rights and role assignments
Quotas for resources in Azure Resource Groups are per region rather than per subscription
YES Quotas are per regions
ExpressRoute traffic is routed through a private connection
YES Routed over a private connection. lets you link on-premise networks to MS cloud services
When a blueprint is unassigned, all resources assigned by the blueprint remain in place, but blueprint resource locking is removed
YES This also results in the deletion of the blueprint assignment object
Windows Virtual Desktop should exist in the same Windows Server Active Directory that is linked to Azure AD
YES WVD users should exist in the same Windows Server AD that is linked to Azure AD. WVD does not support the use of Ms accounts or Azure AD when users are from a separate Azure AD tenant
You can transfer an existing subscription to a new Azure AD tenant
YES When you transfer a subscription, all role based access control role assignment are deleted from the source tenant. RBAC role assignment are not migrated to the destination tenant
Spot pricing provides access to discounted Azure compute resources
YES spot pricing provides access to Azure compute resources at deep discounts when unused Azure capacity is available
DevTest Labs can be used to quickly provision Windows, Linux virtual machines
Yes
You deploy a web app and a Cosmos DB instance to Azure web app SLA 99.95 Cosmos DB SLA 99.99 The combined SLA is lower than each individual SLA
Yes 99.95 * 99.99 = 99.94
A VNet is created within the scope of a region
Yes A Vnet is created within the scope of a region. VNet is a regional reserve
You need to use Azure Cloud Shell to manage Linux VMs. Select yes if you can use Azure Command-line interface
Yes Azure Cloud Shell supports the use of Azure CLI, PowerShell and Bsh to manage Linus, windows, mac os
Machine Learning Studio provides a collaborative drag-and-drop visual workspace to work with machine learning solutions
Yes It allows you to create solutions without the need for coding
Machine Learning Studio publishes machine learning models as web services
Yes Machine Learning Studio publishes machine learning models as web services. This makes the model you create accessible to others
PaaS allows you to manage applications without controlling underlying OS
Yes You only control the application. OS is taken care of
You can set the maximum price that you agree to pay on spot VMs
Yes spot vms prices vary based on available capacity
Can you connect different regions?
Yes you can use Global VNet peering using internal MS connectivity in Azure or via VPN gateways using public internet
Traffic manager
allows users to access Azure resources from a datacenter that is nearest to them by using DNS
Logic Apps
building scalable solutions for app integration, data integration, system integration, enterprise application integration, business-to-business communication
Company B wants to development department to manage its own VMs and storage accounts. It wants the sales team to manage its own Machine Learning models
create a resource group for each department
Company C wants the IT department to manage SQL server VMs that are in the production environment. It also wants to allow the development department to manage SQL Servers VMS that host app in the development environment
create a resource group for each environment
Company A wants the development and QA departments to manage App Services, the IT and development department to manage virtual machines and the IT department to manage SQL Database instances. These departments should manage the corresponding resources in both production and development environments
create a resource group for each resource type
An Azure MFA server is required when
for authentication when supporting users located on on-premises AD only Azure MFA cloud does not support this configuration
Azure Front Door
global endpoint that works at Layer 7 HTTP/HTTPS to enable fast, secure, and widely scalable web apps
Application Security groups
let you group VMs and define network security policies based on those groups. ASG let you organize similar servers so you can easily define and implement security policies based on those groups
Application Gateway
load balancing solution that uses routing to send HTTP traffic to a pool of backend instances
Microsoft Marketplace
provides purchase and subscription links to certified cloud app and solutions from Microsoft and tech partners
Azure Functions
serverless apps that support programming languages
Azure ExpressRoute
service that enables private connectivity between on-premises network and MS Azure or MS 365
Compare using Azure Powershell and Azure CLI for Azure management Commands work the same on Mac, Linux, and Windows
Both
Compare using Azure Powershell and Azure CLI for Azure management Executes commands in an interactive environment
Both
Application Insights
It is used to monitor serverless applications, detect performance anomalies and diagnose issues.
A user can be given access to only one subscription, and resources can belong to only one subscription, and resources can belong to only one subscription
NO A user can be given access to multiple subscriptions and access resources in those subscription. A resource can belong to only one subscription
When running Azure PowerShell with cloud shell, both Linux-specific and windows-specific functionality is available
NO Azure Cloud Shell is an interactive, browser-accessible shell env. When launching Cloud Shell, you need to select PowerShell to execute Azure PowerShell commands or Bash to execute Azure CLI commands. When running Azure PowerShell with Cloud Shell, Linux-specific functionality is available but Windows-specific is not.
Transfer Billing ownership of a subscription from an Azure AD to another System-assigned Managed Identities are re-enabled automatically
NO RABC lose their access. RBAC aaignments do not carry over when you associate the subscription with a new tenant
Azure Dedicated Hosts You can share a provided physical server across your multiple Azure subscription
NO You cannot share provided physical servers across your multiple Azure subscriptions. The underlying physical hosts are single-tenant, so they are dedicated to one Azure subscription only
Can a NSG restrict applications on a VM?
NO You cannot use an NSG to restrict apps on a VM
You need to use Azure Cloud Shell to manage Linux VMs. Select yes if you can use Azure portal
NO you cannot access Azure portal inside the cloud shell
Compare using Azure Powershell and Azure CLI for Azure management Supports an optional GUI interface
Neither
You want to allow inbound traffic to an Azure VM from only one specific IP address
Network Security Group
Machine learning models created in Machine Learning Studio can be deployed and managed by Azure Machine Learning service
No cannot be deployed or managed by Azure Machine Learning service. Machine Learning Studio solutions are managed in Machine Learning Studio and are only deployed as web services
Align actionable adoption plans with business outcomes
Plan
You deploy a web app and a Cosmos DB instance to Azure web app SLA 99.95 Cosmos DB SLA 99.99 You can increase the composite SLA by having the web app access a fallback queue
YES You can increase a composite SLA BY having the web app access a fallback queue. We have the OR instance. If the Cosmos DB is not available for storing data. the wen app can add messages to a queue.
Transfer Billing ownership of a subscription from an Azure AD to another All users and groups with role based access to manage the subscription lose their access
YES when you transfer billing ownership from an account in Azure AD to an account in another Azure AD tenant, you are not required to associate the sub with the new directory
DevTest Labs can provision environment based on Azure Resource Manager templates and pre-configured based
Yes
Virtual machines deployed on its hybrid cloud Azure Security Center provides native integration with Windows Defender
Yes
Windows Virtual Desktop supports Remote Desktop clients on MacOS nad iOs
Yes
Export ARM templates before deployment
You should not export ARM templates before deployment or export the ARM template from the deployment history. These two options only capture the state of the resource at the time of deployment. DO not include any manuel changes made after the original deployment
User Access Administrator
this role grants permissions to assign access and assign policies only
