Azure 900

how should you calculate the monthly uptime percentage? To answer, select the appropriate options in the answer area: - Downtime in Minutes - Maximum available minutes - (Maximum available minutes- Downtime in minutes) Divided By - 60 -1,440 -Max available Minutes Times - 100 - 99.9 -1.440

- (Maximum available minutes- Downtime in minutes) Divided by -Max available Minutes Times 100 Equals Monthly uptime percentage

which two locations are valid destinations for platform logs and metrics collected by azure monitor? Each correct answer presents a complete solution. - An azure storage account - An Azure log analytics workspace - A resource health dashboard - An Azure advisor monitor

- An azure storage account - An Azure log analytics workspace

Match the following: - Azure SQL Database - Azure HD Insight - Azure Data Lake analytics - Azure SQL Synapse Analytics A managed relational cloud database service A cloud based service that leverages massively parallel processing (Mpp) to quickly run complex queries across petabytes of data in a relational database Can Run massively parallel data transformation and processing programs across petabytes of data An open source framework for the distributed processing and analysis of big data sets in clusters

- Azure SQL Database A managed relational cloud database service - Azure SQL Synapse Analytics A cloud based service that leverages massively parallel processing (Mpp) to quickly run complex queries across petabytes of data in a relational database - Azure Data Lake analytics Can Run massively parallel data transformation and processing programs across petabytes of data - Azure HD Insight An open source framework for the distributed processing and analysis of big data sets in clusters

Monitor threats by using sensors : (blank) - Azure monitor - Azure security Center - Azure active directory (azure AD) identity protection - Azure advanced threat protection ATP

- Azure advanced threat protection ATP

enforce threat detection MFA based on a condition: (Blank) - Azure monitor - Azure security Center - Azure active directory (azure AD) identity protection - Azure advanced threat protection ATP

- Azure advanced threat protection ATP

your company implements ________________ to automatically add a watermark to Microsoft word documents that contain credit card information. - Azure policies - DDos Protection - Azure information protection Azure active directory (azure AD) identity protection

- Azure information protection

__________ provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions - Resource groups - Management groups - Azure policies - Azure App Service Plans

- Azure policies

you can view your company's regulatory compliance report from - Azure advisor - Azure Analysis Services - Azure Monitor - Azure security Center

- Azure security Center The advanced monitoring capabilities in Security Center lets you track and manage compliance and governance over time. The overall compliance provides you with a measure of how much your subscriptions are compliant with policies associated with your workload.

you can use ___________ in azure to send email alerts when the cost of the current billing period for an azure subscription exceeds a specific limit - Advisor recommendation - access control - budget alerts - compliance

- Budget alerts

An Azure Policy initiative is a .......... . - Collection of policy definitions - collection of Azure policy definition assignments - Group of Azure blueprints definitions - Group of role-based access control (RBAC) role assignments

- Collection of policy definitions

You deploy an Azure resource. The resource becomes unavailable for an extended period due to a service outage. Microsoft will.... - Refund your bank account - migrate the resources to another subscription - Credit your azure account - Send you a coupon code that you can redeem for azure credits

- Credit your azure account

you are going to start collecting data about your Azure infrastructure with Azure Monitor. Which type of data collection requires you to enable diagnostics? - Usage of web applications - Linux Virtual machine (VM) health - Container workload performance - Event logs

- Event logs

all azure services that are in public view are - provided without any documentation - only configurable from azure CLI - Excluded from the service level agreements - only configurable from the azure portal

- Excluded from the service level agreements

you deploy a new Linux virtual machine (VM) and then manually adjust its configuration in Azure portal to meet the requirements of your development environment. You need to capture changes made to develop VM's configuration after the original development, so that you can use it as a template in deployment of Test and Production VM's. Which two actions can you perform to achieve your goal? - Export the azure resource manager ARM template before deployment - Export the azure resource manager ARM template from deployment history - Export the azure resource manager ARM template from a resource group. - Replace development VM with a VM scale set - Export the Azure resource manager (arm) template from a resource

- Export the azure resource manager ARM template from a resource group. - Export the Azure resource manager (arm) template from a resource

You create a resource group named RG1 in Azure Resource Manager. You need to prevent the deletion of the resources in RG1. Which setting should you use? To answer, select the appropriate setting in the answer area. - Qucikstart - Resources - Deployments - Policies - Properties - Locks - Automation Script

- Locks

The _________ explains what data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data. - MS Online services privacy statement - MS Online Services terms - MS online Services Level Agreement - Online subscription Agreement for MS Azure

- MS Online services privacy statement

which statement accurately describes the modern life cycle policy for Azure services? - Microsoft provides mainstream support for a service for 5 years - Microsoft provides a minimum of 12 months notice before ending support for a service - After a service is made generally available, Microsoft provides support for the service for minimum of four years. - When a service is eliminated, you can purchase extended support for the service for up to 5 years

- Microsoft provides a minimum of 12 months notice before ending support for a service

After you create a virtual machine, you need to modify the (blank) to allow connections to TCP port 8080 on the virtual machine - Network Security Group NSG - Virtual Network Gateway - Virtual Network - Route table

- Network Security Group NSG

your azure tenant included several internet-facing web services. The web servers rely on data stored on Azure SQL database servers. The web servers are located in different virtual network (Vnet) subnets. The database servers have their endpoint exposed to the subnets. You need to implement detailed controls over the types of connections supported between the web servers and database servers. You want to minimize the efforts ands costs necessary to implement and maintain your solution. Which two technologies should you include in your solution? - Network Security Groups NSG - Azure firewall - Application Security groups ASG's - Azure traffic manager - User defined routes UDRS

- Network Security Groups NSG - Application Security groups ASG's

your company has an on premises network that contains multiple servers. The company plans to reduce the following administrative responsibilities of network administrators: - Backing up application Data - Replacing failed server hardware - Managing physical server security - Updating Server operating systems - Managing Permissions to shared documents The company plans to migrate several servers to Azure virtual machine. You need to identify which administrative responsibilities will be eliminated after the planned migration. Which two responsibilities should you identify?

- Replacing failed server hardware - Managing physical server Security -Azure virtual machines run on Hyper-V physical servers. The physical servers are owned and managed by Microsoft. As an Azure customer, you have no access to the physical servers. Microsoft manage the replacement of failed server hardware and the security of the physical servers so you donג€™t need to.

You have several virtual machines in an Azure subscription. You can create new subscriptions. - The virtual machines cannot be moved to the new subscription. - The virtual Machines can be moved to the new subscription. - The virtual machines can be moved to the new subscription only if they are all in the same resource group. - The virtual machines can be moved to the new subscription only if they run windows server 2016.

- The virtual Machines can be moved to the new subscription. You can move a VM and its associated resources to a different subscription by using the Azure portal.

an availability zone in azure has physically separate locations ______. - Across two continents - within a single azure region - with multiple azure regions - within a single azure datacenter

- Within a single Azure region

you are tasked with addressing performance issues on an Azure web based server cluster. You need to configure virtual machines to scale vertically. What should you do to meet this requirement? - Configure the cluster to burst into a hybrid cloud - add compute and memory resources to each virtual machine - allow additional virtual machines to be auto deployed as needed - Migrate the server cluster to a kubernetes cluster

- add compute and memory resources to each virtual machine

as part of a cloud migration, your azure cloud implementation has been initially seeded with 100TB of Data. As the migration continues, you need to periodically migrate data to azure using server message block SMB. Which two solutions should you use to meet this requirement? Each correct answer parents a complete solution. -Azure Data Share - Azure data box heavy - azure files - azure databox gateway

- azure files - azure databox gateway

your company uses azure blueprints to assist with its migration to Azure. User1 should be able to assign published blueprints. You need to add User1 to the role-based access control (RBAC) role necessary to provide this permission. Your solution should follow the principle of least privilege. Which role should you assign User1 to? -Owner -Blueprint contributor - contributor - blueprint operator

- blueprint operator

When you are implementing a software as a service (Saas) solution, you are responsible for: (which one). - Configuring High availability - defining scalability rules - installing the Saas solution - configuring the Saas solution

- configuring the Saas Solution When you are implementing a Software as a Service (SaaS) solution, you are responsible for configuring the SaaS solution. Everything else is managed by the cloud provider.

your company resources in azure. According to the shared responsibility model, which task will you be required to perform? - Upgrade RAM on virtualization systems - Manage access to a data center resource - configure connectivity between regions - install critical updates on virtual machines

- install critical updates on virtual machines

you deploy a business critical solution in Azure. You need to ensure that your resources are replicated and hosted at least 200 miles away within the same geographical area, to minimize impact on your solutions availability in case of disaster. Which configuration should you choose? - Resource groups - Availability sets - Availability zones - Region pairs

- region pairs

you have an application that is comprised of an azure web app that has a service level agreement SLA of 99.95% and an azure SQL database that has an SLA of 99.99 %. The composite SLA for the application is: - the product of both SLAs, which equals 99.94% - the lowest SLA associated to the application, which is 99.95% - the highest SLA associated to the application, which is 99.99% - The difference between the two SLA's, which is .05%

- the product of both SLAs, which equals 99.94%

-Azure machine learning -Azure Synapse Analytics - Azure Iot Hub - Azure functions - Provides A cloud-based enterprise data warehouse -uses past trainings to provide predictions that have high probability - provides server less computing functionalities - Processes data from millions of sensors

-Azure Synapse Analytics Provides A cloud-based enterprise data warehouse Azure machine learning -uses past trainings to provide predictions that have high probability Azure functions - provides server less computing functionalities Azure Iot Hub - Processes data from millions of sensors

Match the following 1. build a baseline behavioral profile of organizational entities to identify anomalous activity. 2. Securely store database connection string to avoid its accidental exposure in a web sites source code. 3. Deny traffic of your azure virtual network resource from known malicious IP addresses -Microsoft Sentinel - Azure key vault - Azure firewall - Azure monitor

1. build a baseline behavioral profile of organizational entities to identify anomalous activity. - Microsoft Sentinel 2. Securely store database connection string to avoid its accidental exposure in a web sites source code. - Azure Key Vault 3. Deny traffic of your azure virtual network resource from known malicious IP addresses - Azure firewall

you need to manage azure by using Azure cloud shell, which portal Icon should you select? (+) >_ << +Create a resource

>_ Sign

GDPR

A European policy that regulates data privacy and data protection

An Azure service is available to all Azure customers when it is in <____>. A. Public preview B. Private preview C. Development D. An Enterprise Agreement (EA) subscription

A Public Preview

Azure Government

A dedicated public cloud for federal and state agencies in the US

An Azure region contains one or more data centers that <are connected by using a low-latency network>. A. No change is needed B. Is found in each country where Microsoft has a subsidiary office C. Can be found in every country in Europe and the Americas only D. Contains one or more data centers that are connect by using a high-latency network

A no change is needed A region is a set of data centers deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network.

Azure Cognitive Services

A simplified tool to build intelligent Artificial Intelligence (AI) applications

Azure Sphere

A software and hardware solution that provides communication and security features for Iot Devices.

azure advisor

A tool that provides guidance and recommendations to improve an Azure environment

An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Which three computers can run the script? Each correct answer resents a complete solution. A. A computer that runs MacOS and has PowerShell core 6.0 installed B. A computer that runs windows 10 and has azure powershell module installed. C. A computer that runs Linux and has the azure powershell module installed. D. A computer that runs Linux and has the Azure CLI tools installed. E. A computer that runs Chrome OS and uses Azure cloud shell

A. A computer that runs MacOS and has PowerShell core 6.0 installed B. A computer that runs windows 10 and has azure powershell module installed. E. A computer that runs Chrome OS and uses Azure cloud shell

You plan to deploy several Azure virtual machines. You need to control the ports that devices on the internet can use to access the virtual machines. What should you use? A. A network Security Group ( NSG) B. An Azure active directory (Azure AD) role C. an azure active directory group D. An Azure key vauly

A. A network Security Group ( NSG)

your company plans to migrate all its network resources to Azure. You need to start the planning process by exploring Azure. What should you create first? A. A subscription B. A resource groups C. A virtual Network D. A management group

A. A subscription

you have an azure environment that contains multiple Azure virtual machines. you plan to implement a solution that enables the client computers on your on-premise network to communicate to the azure virtual machines. You need to recommend which azure resources must be created for the planned solution. Which two Azure resources should you include in the recommendation? Each choice is a point: A. A virtual network gateway B. A loader balance C. An application gateway D. A virtual network E. A gateway subnet

A. A virtual network gateway E. a gateway Subnet To implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines, you need to configure aVPN (Virtual Private Network) to connect the on-premises network to the Azure virtual network.The Azure VPN device is known as a Virtual Network Gateway. The virtual network gateway needs to be located in a dedicated subnet in the Azure virtual network. This dedicated subnet is known as a gateway subnet and must be named ג€˜GatewaySubnetג€™

your company plans to deploy several million sensors that will upload data to Azure. You need to identify which Azure resources must be created to support the planned solution. Which two Azure resources must be created to support the planned solution. Which two azure resources should you identify? Each correct answer presents part of the solution. A. Azure Data Lake B. Azure Que Storage C. Azure File storage D. Azure IoT Hub E. Azure notifications hub

A. Azure Data Lake D. Azure IoT Hub IoT Hub (Internet of things Hub) provides data from millions of sensors. There are two storage services IoT Hub can route messages to -- Azure Blob Storage and Azure Data Lake Storage Gen2 (ADLS Gen2) accounts. Azure DataLake Storage accounts are hierarchical namespace-enabled storage accounts built on top of blob storage. Both of these use blobs for their storage.

You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized by using Microsoft Power BI. You need to recommend a storage solution for the data. Which two solutions should you recommend? A. Azure data Lake B. Azure cosmos DB C. Azure SQL Data Warehouse D. Azure SQL database E. Azure database for PostreSQL

A. Azure Data lake C. Azure SQL Data Warehouse You can use Power BI to analyze and visualize data stored in Azure Data Lake and Azure SQL Data Warehouse. Azure Data Lake includes all of the capabilities required to make it easy for developers, data scientists and analysts to store data of any size and shape and at any speed, and do all types of processing and analytics across platforms and languages. It removes the complexities of ingesting and storing all your data while making it faster to get up and running with batch, streaming and interactive analytics. It also integrates seamlessly with operational stores and data warehouses so that you can extend current data applications.

your company plans to automate the deployment of servers to azure. Your manager is concerned that you may expose administrative credentials during the deployment. You need to recommend an azure solution that encrypts the administrative credentials during the deployment. What should you include in the recommendation? A. Azure Key Vault B. Azure information Protection C. Azure security Center D. Azure multi factor Authentication MFA

A. Azure Key Vault

which azure service should you use to collect events from multiple resources into a centralized repository? A. Azure event hubs B. Azure analysis Services C. Azure monitor D. Azure stream analytics

A. Azure event hubs Azure Event Hubs is a big data streaming platform and event ingestion service. It can receive and process millions of events per second.

which services provides network traffic filtering across multiple Azure subscriptions and virtual networks? A. Azure firewall B. An application security group C. Azure DDos protection D. A network security group (NSG)

A. Azure firewall

your company has several business units. Each business unit requires 20 different Azure resources for daily operation. All the business Units require the same type of Azure resource. You need to recommend a soltuion to automate the creation of the Azure resources. What should you include in the recommendation? A. Azure resource manager templates B. Virtual machine scale sets C. The azure API Management service D. Management groups

A. Azure resource manager templates You can use Azure Resource Manager templates to automate the creation of the Azure resources. Deploying resource through templates is known asג€˜Infrastructure as codeג€™.

You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. What are two possible solutions? A. Deploy the virtual machines to two or more availability zones B. Deploy the virtual machines to two or more resource groups C. Deploy the virtual machines to a scale set. D. Deploy the virtual machines to two or more regions

A. Deploy the virtual machines to two or more availability zones D. Deploy the virtual machines to two or more regions

You have an on- premise network that contains several servers. You plan to migrate all the servers to Azure. You need to recommend a solution to ensure that some of the servers are available if a single azure data center goes offline for an extended period. What should you include in the recommendation? A. Fault tolerance B. Elasticity C. Scalability D. Low latency

A. Fault tolerance Fault tolerance is the ability of a system to continue to function in the event of a failure of some of its components.

Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation? A. Network security groups (NSGs) B. Azure Service Bus C. A local network gateway D. A route filter

A. Network security groups (NSGs)

The azure <standard support plan> is the lowest cost option to receive 24x7 access to support engineers by phone. A. No change is needed B. Developer C. Basic D. Professional

A. No change

If Microsoft plans to end support for an Azure service that does NOT have a successor service, Microsoft will provide notification at least 12 months before. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. A. No change is needed. B. 6 months C. 90 days D. 30 days

A. No change is needed

One of the benefits of Azure SQL Data Warehouse is that <high availability> is built into the platform. A. No change is needed B. Automatic scaling C. Data compression D. Versioning

A. No changes needed Azure Data Warehouse (now known as Azure Synapse Analytics) is a PaaS offering from Microsoft. As with all PaaS services from Microsoft, SQL DataWarehouse offers an availability SLA of 99.9%. Microsoft can offer 99.9% availability because it has high availability features built into the platform.

Your company plans to request an architectural review of an Azure environment from Microsoft. The company currently has a Basic support plan. You need to recommend a new support plan for the company. The solution must minimize costs. Which support plan should you recommend? A. Premier B. Developer C. Professional Direct D. Standard

A. Premier

to which cloud models can you deploy physical servers? A. Private cloud and hybrid cloud only B. Private cloud only C. Private cloud, hybrid cloud and public cloud D. Hybrid cloud only

A. Private cloud and Hybrid cloud only

what is guaranteed in an azure service level agreement (SLA) for virtual machines? A. Uptime B. Feature Availability C. Bandwidth D. Performance

A. Uptime

You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the android operating system. What are three possible solutions? Each answer presents a complete solution. A. Use Bach in Azure Cloud Shell B. Use PowerShell in Azure Cloud Shell C. Use power apps portal D. Use the security and compliance admin center E. use the azure portal

A. Use Bash in Azure cloud shell B. Use PowerShell in Azure Cloud Shell E. use the azure portal

your company plans to purchase an azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirements. Solution: recommend a professional Direct support plan Does this meet the goal? A. Yes B. No

A. Yes

You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. Solution: You deploy the virtual machines to two or more availability zones. Does this meet the goal? A. Yes B. No

A. Yes Availability zones expand the level of control you have to maintain the availability of the applications and data on your VMs. An Availability Zone is a physically separate zone, within an Azure region. There are three Availability Zones per supported Azure region. Each Availability Zone has a distinct power source, network, and cooling. By architecting your solutions to use replicated VMs in zones, you can protect your apps and data from the loss of a datacenter. If one zone is compromised, then replicated apps and data are instantly available in another zone.

You have an Azure environment. You need to create a new Azure virtual machine from an tablet that runs the android operating system. . Solution: You use PowerShell in Azure Cloud Shell. Does this meet the goal? A. Yes B. No

A. Yes Azure Cloud Shell is a browser-based shell experience to manage and develop Azure resources.Cloud Shell offers a browser-accessible, pre-configured shell experience for managing Azure resources without the overhead of installing, versioning, and maintaining a machine yourself.Being browser-based, Azure Cloud Shell can be run on a browser from a tablet that runs the Android operating system.

your company plans to migrate azure. The company has several departments. All the azure resources used by each department will be managed by a department administrator. What are two possible techniques to segment Azure for the departments? Each selection is one point: A. multiple subscriptions B. multiple Azure Active Directory (Azure AD) directories C. multiple regions D. multiple resource groups

A. multiple subscriptions D. multiple resource groups An Azure subscription is a container for Azure resources. It is also a boundary for permissions to resources and for billing. You are charged monthly for all resources in a subscription. A single Azure tenant (Azure Active Directory) can contain multiple Azure subscriptions. A resource group is a container that holds related resources for an Azure solution. The resource group can include all the resources for the solution, or only those resources that you want to manage as a group.

your company has 10 offices. You plan to generate several billing reports from the azure portal. Each report will contain the Azure resource utilization of each office. Which azure resource manager feature should you use before you generate the reports? A. Tags B. Templates C. Locks D. Policies

A. tags You can use resource tags to ג€˜labelג€™ Azure resources. Tags are metadata elements attached to resources. Tags consist of pairs of key/value strings. In this question, we would tag each resource with a tag to identify each office. For example: Location = Office1. When all Azure resources are tagged, you can generate reports to list all resources based on the value of the tag. For example: All resources used by Office1.

A support engineer plans to perform several azure management tasks by using Azure CLI. You install CLI on a computer. You need to tell the support engineer which tools to use to run the CLI. Which two tools should you instruct the support engineer to use? Each selection is one point: A: Command Prompt B. Azure Resource explorer C. Windows PowerShell D. Windows defender firewall E. Network and Sharing center.

A: Command Prompt C. Windows PowerShell For Windows the Azure CLI is installed via an MSI, which gives you access to the CLI through the Windows Command Prompt (CMD) or PowerShell.

You need to identify which blades in the Azure portal must be used to perform the following tasks:✑ View security recommendations.✑ Monitor the health of Azure services.✑ Browse available virtual machine images.Which blade should you identify for each task? View security recommendations - Monitor -Subscriptions -Marketplace - Advisor

Advisor

Name: Operating System: Computer1 Windows 10 Computer 2 Ubuntu COmputer3 MacOS Mojave You need to identify which azure management tools can be used from each computer. What should you identify for each computer? To answer, select the appropriate options in the answer area Computer1: - The Azure CLI and Azure Portal - The axure portal and azure powershell - the azure CLI and Azure Powershell - The azure CLI, the azure portal, and azure powershell Computer2: - The Azure CLI and Azure Portal - The axure portal and azure powershell - the azure CLI and Azure Powershell - The azure CLI, the azure portal, and azure powershell Computer3: -The Azure CLI and Azure Portal - The axure portal and azure powershell - the azure CLI and Azure Powershell - The azure CLI, the azure portal, and azure powershell

All 3 computers: - The azure CLI, the azure portal, and azure PowerShell

Azure HDInsight

An open-source framework for the distributed processing and analysis of big data sets in clusters.

NIST

An organization that defines standards used by the US government

which feature of azure monitor allows you to visually analyze telemetry data? - Service health -Application insights -alerts - metrics

Application insights

Hosts web app

Azure App Service Azure App Service hosts web apps.Azure App Service is an HTTP-based service for hosting web applications, REST APIs, and mobile back ends. You can develop in your favorite language, be it.NET, .NET Core, Java, Ruby, Node.js, PHP, or Python. Applications run and scale with ease on both Windows and Linux-based environments.References:

Detects and diagnoses anomalies in web apps

Azure Application Insights Azure Application Insights detects and diagnoses anomalies in web apps. Application Insights, a feature of Azure Monitor, is an extensible Application Performance Management (APM) service for developers and DevOps professionals. Use it to monitor your live applications. It will automatically detect performance anomalies, and includes powerful analytics tools to help you diagnose issues and to understand what users actually do with your app.

You plan to implement an Azure database solution. You need to implement a database solution that meets the following requirements: Can add data concurrently from multiple regions Can store JSON documents Which database service should you deploy?

Azure Cosmos DB

___________is an Apache Spark-based analytics service Azure databricks Azure data factory Azure DevOps Azure HDInsight

Azure Databricks

A big data analysis service for machine learning

Azure Databricks Azure Databricks is a big analysis service for machine learning.Azure Databricks is an Apache Spark-based analytics platform. The platform consists of several components including ג€˜MLibג€™. Mlib is a Machine Learning library consisting of common learning algorithms and utilities, including classification, regression, clustering, collaborative filtering, dimensionality reduction, as well as underlying optimization primitives.

Match the Azure service to the correct definition A. Azure advisor B. Azure cognitive Services C. Azure Application Insights D. Azure DevOps - An integrated solution for the deployment of Code - a tool that provides guidance and recommendations to improve an Azure environment - A simplified tool to build intelligent artificial intelligence (AI) applications - Monitors web applications

Azure DevOps - An integrated solution for the deployment of Code Azure advisor - a tool that provides guidance and recommendations to improve an Azure environment Azure cognitive Services - A simplified tool to build intelligent artificial intelligence (AI) applications Azure Application Insights - Monitors web applications

Azure functions Azure App Service Azure Virtual Machines Azure container instances provide operating system virtualization Provide portable environment for virtualized applications Used to build, deploy, and scale web apps Provide a platform for server less code

Azure Virtual Machines- provide operating system virtualization Azure container instances- Provide portable environment for virtualized applications Azure App Service- Used to build, deploy, and scale web apps Azure functions- Provide a platform for serverless code

From ______ you can view which user turned off a specific virtual machine during the last 14 days. Azure Access control IAM Azure event hubs Azure activity Log Azure service health

Azure activity Log

which service provides serverless computing in azure A. Azure virtual machines B. Azure functions C. Azure storage account D. Azure dedicated hosts

Azure functions

- Provides the platform for server less code - A big data analysis service for machine learning - Detects and diagnosis anomalies in web apps - hosts web apps Azure databricks Azure functions Azure app service Azure application insights

Azure functions - Provides the platform for server less code Azure databricks- A big data analysis service for machine learning Azure application insights- Detects and diagnosis anomalies in web apps Azure app service- hosts web apps

What can you use to automatically send an alert if an administrator stops an Azure virtual machine? A. Azure Advisor B. Azure service Health C. Azure monitor D. Azure network watcher

Azure monitor

you can access compliance manager from the : Azure active directory admin center Azure portal Microsoft 365 admin center Microsoft service trust portal

Azure portal

which azure service provides a set of version control tools to manage code? A. Azure repos B. Azure Devtest C. Azure storage D. Azure cosmos DB

Azure repos

(Blank) a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the azure environment. - Azure Policies provide - Resource groups provide - Azure resource manager templates provide - Management groups provide

Azure resource manager templates provide

You can enable just in time (JIT) VM access by using .......... Pick one: Azure Bastion Azure firewall Azure front door Azure security Center

Azure security Center

you need to collect and automatically analyze security events from Azure Active Directory (Azure Ad) What should you use? A. Azure Sentinel B. Azure Synapse Analytics C. Azure Ad Connect D. Azure Key Vault

Azure sentinel

Which cloud deployment solution is used for Azure virtual machines and Azure SQL databases? To answer, select the appropriate options in the answer area. Azure virtual machines: - IaaS, - PaaS, - SaaS Azure SQL databases: - IaaS -PaaS -SaaS

Azure virtual Machines: Iaas Azure SQL database: Paas

your company has 10 departments. The company plans to implement an azure environment. You need to ensure that each department can use a different payment option for the azure services it consumes. What should you create for each department? A. A reservation B. A subscription C. A resource group D. A container instance

B. A subscription

Your company plans to move several servers to azure. The companies compliance policy states that a server named FinServer must be on a separate network segment. You are evaluating which azure services can be used to meet the compliance policy requirements. Which Azure solution should you recommend? A. A resource group for FinServer and another resource group for all the other servers B. A virtual network for FinServer and another virtual network for all the other servers. C. A VPN for FinServer and a virtual network gateway for each other server D. One resource group for all the servers and resource lock for FinServer

B. A virtual network for FinServer and another virtual network for all the other servers.

your company has an azure subscription that contains resources in several regions. A company policy states that administrators must only be allowed to create additional Azure resources in a region in the country where their office is located. You need to create the Azure resource that must be used to meet the policy requirement. What should you create? A. A read only lock B. An Azure Policy C. A management group D. a reservation

B. An Azure Policy

your company has an azure subscription that contains resources in several regions. You need to ensure that administrators can only create resources in those regions. What should you use? A. Read-only Lock B. An Azure policy C. A management group D. A reservation

B. An Azure policy

You plan to provision Infrastructure as a Service (IaaS) resources in Azure. Which resource is an example of IaaS? A. An Azure web app B. An Azure virtual machine C. An Azure logic app D. An Azure SQL database

B. An azure virtual machine

to what should an application connect to retrieve security tokens? A. An Azure Storage Account B. Azure Active Directory (Azure AD) C. A certificate Store D. An Azure Key Vault

B. Azure Active Directory (Azure AD) Azure AD authenticates users and provides access tokens. An access token is a security token that is issued by an authorization server. It contains information about the user and the app for which the token is intended, which can be used to access Web APIs and other protected resources.

A team of developers at your company plans to deploy, and then remove, 50 virtual machines each week. All the virtual machines are configured by using Azure resource manager templates. You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines. What should you recommend? A. Azure reserved virtual machine (VM) Instance B. Azure Devtest Labs C. Azure virtual machine scale sets DMicrosft Managed desktop

B. Azure Devtest Labs DevTest Labs creates labs consisting of pre-configured bases or Azure Resource Manager templates.

your company plans to deploy an Artificial intelligence (AI) solution in Azure. What should the company use to build, test, and deploy predictive analytic solutions? A. Azure Logic Apps B. Azure machine learning Designer C. Azure Batch D. Azure Cosmos DB

B. Azure machine learning Designer Azure Machine Learning designer lets you visually connect datasets and modules on an interactive canvas to create machine learning models.

which azure service can you use as a security information and event management (SEIM) solution? A. Azure analysis Services B. Azure sentinel C. Azure information protection D. Azure cognitive services

B. Azure sentinel

You need to be notified when Microsoft plans to perform maintenance that can affect the resources deployed to an Azure subscription. What should you use? A. Azure Monitor B. Azure Service Health C. Azure Advisor D. Microsoft Trust Center

B. Azure service health

you azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the internet over Http. What are two possible solutions? A. Modify an Azure traffic manager profile B. Modify network security group (NSG) C. Modify DDos protection plan D. Modify Azure firewall

B. Modify network security group (NSG) D. Modify Azure firewall

When Planning to Migrate a public website to azure, you must plan to A. Deploy a VPN B. Pay monthly usage costs C. pay to transfer all the website data to azure D. reduce number of connections to the website

B. Pay monthly usage costs This is because Azure uses the pay-as-you-go model

You plan to migrate a web application to Azure. The web application is accessed by external users. You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application. What should you include in the recommendation? A. software as a service (SaaS) B. platform as a service (PaaS) C. infrastructure as a service (IaaS) D. database as a service (DaaS)

B. Platform as A service (Paas) Azure App service is a platform as a service offering that lets you create web and mobile apps for any platform or device and connects to data anywhere in the cloud or on premises. App service includes the web and mobile capabilities that were previously delivered separately as Azure websites and Azure modules.

Your Azure trial account expired last week. You are now unable to... A. Create additional Azure Active Directory (Azure AD) user accounts B. Start an existing Azure virtual machine C. Access your data stored in Azure D. Access the Azure portal

B. Start an existing Azure virtual machine A stopped (deallocated) VM is offline and not mounted on an Azure host server. Starting a VM mounts the VM on a host server before the VM starts. As soon as the VM is mounted, it becomes chargeable. For this reason, you are unable to start a VM after a trial has expired.

Your network contains an Active Directory forest. The forest contains 5,000 user accounts. Your company plans to migrate all network resources to Azure and to decommission the on-premises data center. You need to recommend a solution to minimize the impact on users after the planned migration. What should you recommend? A. Implement Azure Multi-Factor Authentication (MFA) B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD) C. Instruct all users to change their password D. Create a guest user account in Azure Active Directory (Azure AD) for each user

B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)

you can create an azure support request from support.microsft.com A. No change needed B. The Azure Portal C. The knowledge center D. the security & compliance admin center

B. The Azure Portal You can create an Azure support request from the Help and Support blade in the Azure portal or from the context menu of an Azure resource in the Support +Troubleshooting section.

If a resource group named RG1 has a delete lock, ______________ can delete RG1. A. No change is needed B. The delete lock must be removed before an administrator C. An Azure policy must be modified before an administrator D. An Azure tag must be added before an administrator

B. The delete lock must be removed before an administrator You can configure a lock on a resource group to prevent the accidental deletion of the resource group. The lock applies to everyone, including global administrators. If you want to delete the resource group, the lock must be removed first.As an administrator, you may need to lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. You can set the lock level to CanNotDelete or ReadOnly. In the portal, the locks are called Delete and Read-only respectively.

Your company has a software assurance agreement that includes Microsoft SQL server on Azure virtual machines. What should you do to minimize licensing costs for the developer? A. Deallocate the virtual machines during off hours B. Use azure Hybrid Benefit C. Configure Azure costs management budgets D. Use azure reservations

B. Use azure Hybrid Benefit Azure Hybrid Benefit is a licensing benefit that helps you to significantly reduce the costs of running your workloads in the cloud.

What can Azure Information Protection encrypt? A. network traffic B. documents and email messages C. an Azure Storage account D. an Azure SQL database

B. documents and email messages

you have an azure web app. You need to manage the settings of the web app from an i phone. What are two Azure management tools that you can use? Each correct answer presents a complete solution. A. Azure CLI B. The Azure Portal C. Azure cloud shell D. Windows Powershell E. Azure storage explorer

B. the azure portal C. Azure cloud shell The Azure portal is the web-based portal for managing Azure. Being web-based, you can use the Azure portal on an iPhone. Azure Cloud Shell is a web-based command line for managing Azure. You access the Azure Cloud Shell from the Azure portal. Being web-based, you can use the Azure Cloud Shell on an iPhone.

You plan to deploy a website to Azure. The website will be accessed by users worldwide and will host large video files. You need to recommend which Azure feature must be used to provide the best video playback experience. What should you recommend? A. An application gateway B. An Azure ExpressRoute circuit C. A content delivery network (CDN) D. An Azure Traffic Manager profile

C. A content delivery network

You plan to map a network drive from several computers that run Windows 10 to Azure Storage. You need to create a storage solution in Azure for the planned mapped drive. What should you create? A. an Azure SQL database B. a virtual machine data disk C. a Files service in a storage account D. a Blobs service in a storage account

C. A files service in a storage account

You have an on-premises application that sends email notifications automatically based on a rule. You plan to migrate the application to Azure. You need to recommend a serverless computing solution for the application. What should you include in the recommendation? A. A web app B. A server image in Azure Marketplace C. A logic app D. An API app

C. A logical App Azure Logic Apps is a cloud service that helps you schedule, automate, and orchestrate tasks, business processes, and workflows when you need to integrate apps, data, systems, and services across enterprises or organizations.

which two types of customers are eligible to use Azure government to develop a cloud solution? A. A Canadian government contractor B. A European government contractor C. A united states government entity D. A United states government contractor E. A European Government Entity

C. A united states government entity D. A United states government contractor Azure Government is a cloud environment specifically built to meet compliance and security requirements for US government.

The companies migration plan states that only platform as a service solution must be used in Azure. You need to deploy an Azure environment that meets the companies migration plan. What should you create? A. Azure virtual machines. Azure SQL databases, and Azure storage accounts B. An azure App service and Azure virtual machines that have Microsoft SQL server installed C. An Azure App Service and Azure SQL database D. Azure storage account and web server in Azure virtual machines.

C. An Azure App Service and Azure SQL database

what is required to use azure cost management? A. A dev/test subscription B. Software assurance C. An enterprise agreement EA D. a Pay-as-you0go subscription

C. An enterprise agreement EA Azure customers with an Azure Enterprise Agreement (EA), Microsoft Customer Agreement (MCA), or Microsoft Partner Agreement (MPA) can use Azure CostManagement.Cost management is the process of effectively planning and controlling costs involved in your business.

Which Azure service should you use to store certificates? A. Azure Security Center B. an Azure Storage account C. Azure Key Vault D. Azure Information Protection

C. Azure Key Vault

what should you use to evaluate whether your company's Azure environment meets regulatory requirements? A. Azure Service Health B. Azure Knowledge Center C. Azure Security Center D. Azure Advisor

C. Azure Security Center

a team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week. Thirty of the virtual machines run windows server 2016 and 20 of the virtual machines run Ubuntu Linux. You need to recommend which azure service will minimize the administrative effort required to deploy and remove the virtual machines. What should you recommend? A. Azure reserved Virtual machines instances B. Azure virtual machines scale sets C. Azure devtest labs D. Microsoft managed Desktop

C. Azure devtest labs DevTest Labs creates labs consisting of pre-configured bases or Azure Resource Manager templates.By using DevTest Labs, you can test the latest versions of your applications by doing the following tasks:✑ Quickly provision Windows and Linux environments by using reusable templates and artifacts.✑ Easily integrate your deployment pipeline with DevTest Labs to provision on-demand environments.✑ Scale up your load testing by provisioning multiple test agents and create pre-provisioned environments for training and demos.

<Resource groups> provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions. A. No change is needed B. Management groups C. Azure policies D. Azure App Service plans

C. Azure policies Azure policies can be used to define requirements for resource properties during deployment and for already existing resources. Azure Policy controls properties such as the types or locations of resources.

You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region. Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1? A. Azure Service Fabric B. Azure Monitor C. Azure virtual machines D. Azure Advisor

C. Azure virtual machines In the Azure virtual machines page in the Azure portal, there is a named Maintenance Status.

A support plan solution that gives you best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost is a <standard> support plan. A. No change B. Developer C. Basic D. Premier

C. Basic A basic support plan provides:✑ 24x7 access to billing and subscription support, online self-help, documentation, whitepapers, and support forums✑ Best practices: Access to full set of Azure Advisor recommendations✑ Health Status and Notifications: Access to personalized Service Health Dashboard & Health API

Read underlying text to determine if correct: From Azure Cloud Shell, you can track your company's regulatory standards and regulations, such as ISO 27001. A. No change is needed. B. the Microsoft Cloud Partner Portal C. Compliance Manager D. the Trust Center

C. Compliance Manager

Your company hosts an accounting application named App1 that is used by all the customers of the company. App1 has low usage during the first three weeks of each month and very high usage during the last week of each month. Which benefit of Azure Cloud Services supports cost management for this type of usage pattern? A. high availability B. high latency C. elasticity D. load balancing

C. Elasticity

Your company plans several customer applications to Azure. The application will provide invoicing services to the customers of the company. Each application will have several prerequisite applications and services installed. You need to recommend a cloud deployment solution for all the applications. What should you recommend? A: software as a service B. Platform as a service C Infrastructure as a service

C. Infrastructure as a service Infrastructure as a service (IaaS) is an instant computing infrastructure, provisioned and managed over the internet. The IaaS service provider manages the infrastructure, while you purchase, install, configure, and manage your own software

In which azure support plans can you open a new support request A. Premiere and professional direct only B Premiere, Professional Direct, and standard only C. Premiere, professional direct, standard, and developer only D. Premiere, professional direct, standard, developer, and basic

C. Premiere, professional direct, standard, and developer only

in which type of cloud models are all the hardware resources owned by a third party and shared between multiple tenants? A. Private B. Hybrid C. Public

C. Public - Microsoft Azure, Amazon Web Services and Google Cloud are three examples of public cloud services. Microsoft, Amazon and Google own the hardware. The tenants are the customers who use the public cloud services.

When you need to delegate permissions to several Azure virtual machines simultaneously, you must deploy the Azure virtual machines A. No change is needed B. By using the same Azure Resource Manager template C. To the same resource group D. To the same availability zone

C. To the same resource group A resource group is a logical container for Azure resources. Resource groups make the management of Azure resources easier.

You plan to deploy 20 virtual machines to an Azure environment. To ensure that a virtual machine named VM1 cannot connect to the other virtual machines, VM1 must: A. No change is needed B. run a different operating system than the other virtual machines C. be deployed to a separate resource group D. have two network interfaces

C. be deployed to a separate resource group Azure automatically routes traffic between subnets in a virtual network. Therefore, all virtual machines in a virtual network can connect to the other virtual machines in the same virtual network. Even if the virtual machines are on separate subnets within the virtual network, they can still communicate with each other. To ensure that a virtual machine cannot connect to the other virtual machines, the virtual machine must be deployed to a separate virtual network.

what should you use to evaluate whether your company's azure environment meets regulatory requirements? A. The knowledge center website B. The advisor blade from the azure portal C. compliance manager from the service trust portal D. the solutions blade from the azure portal

C. compliance manager from the service trust portal Compliance Manager in the Service Trust Portal is a workflow-based risk assessment tool that helps you track, assign, and verify your organization's regulatory compliance activities related to Microsoft Cloud services, such as Microsoft 365, Dynamics 365, and Azure.

An organization that hosts its infrastructure (blank) no longer requires a Data center. A. In a private cloud B. In a hybrid cloud C. In the public cloud D. on a Hyper- V Host

C. in the Public Cloud

Azure Data Lake Analytics

Can run massively parallel data transformation and processing programs across petabytes of data

You have an on-premises network that contains 100 servers. You need to recommend a solution that provides additional resources to your users. The solution must minimize capital and operational expenditure costs. What should you include in the recommendation? A. a complete migration to the public cloud B. an additional data center C. a private cloud D. a hybrid cloud

D. A hybrid Cloud A hybrid cloud is a combination of a private cloud and a public cloud. Capital expenditure is the spending of money up-front for infrastructure such as new servers. With a hybrid cloud, you can continue to use the on-premises servers while adding new servers in the public cloud (Azure for example). Adding new servers in Azure minimizes the capital expenditure costs as you are not paying for new servers as you would if you deployed new server on-premises.

you need to identify the type of failure for which an Azure Availability Zone can be used to protect access to Azure services. What should you identify? A. A Physical Server B. An Azure region failure C. A storage Failure D. An Azure data center failure

D. An Azure data center failure Availability zones expand the level of control you have to maintain the availability of the applications and data on your VMs. An Availability Zone is a physically separate zone, within an Azure region. There are three Availability Zones per supported Azure region. Each Availability Zone has a distinct power source, network, and cooling. By architecting your solutions to use replicated VMs in zones, you can protect your apps and data from the loss of a datacenter. If one zone is compromised, then replicated apps and data are instantly available in another zone.

You have a resource group named RG1. You plan to create virtual machines only in RG1. The solution must ensure that other objects can be created in RG1. What should you use? A. A lock B. An Azure role C. A tag D. An Azure policy

D. An Azure policy

Azure Germany can be used by <legal residents of Germany only>. A. No change is needed B. Only enterprises that are registered in Germany C. Only enterprises that purchase their azure licenses from a partner based in Germany D. Any user or enterprise that requires its data to reside in Germany

D. Any user or enterprise that requires its data to reside in Germany Azure Germany is available to eligible customers and partners globally who intend to do business in the EU/EFTA, including the United Kingdom. Azure Germany offers a separate instance of Microsoft Azure services from within German datacenters. The datacenters are in two locations, Frankfurt/Main and Magdeburg.

You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password. Which Azure service should you use? A. Azure AD Connect Health B. Azure AD Privileged Identity Management C. Azure Advanced Threat Protection (ATP) D. Azure AD Identity Protection

D. Azure AD Identity Protection Azure AD Identity Protection includes two risk policies: sign-in risk policy and user risk policy. A sign-in risk represents the probability that a given authentication request isnג€™t authorized by the identity owner. There are several types of risk detection. One of them is Anonymous IP Address

You attempt to create several managed Microsoft SQL Server instances in an Azure environment and receive a message that you must increase your Azure subscription limits. What should you do to increase the limits? A. Create a service health alert B. Upgrade your support plan C. Modify an Azure policy D. Create a new support request

D. Create a new support request Many Azure resource have quote limits. The purpose of the quota limits is to help you control your Azure costs. However, it is common to require an increase to the default quota.You can request a quota limit increase by opening a support request.

you need to configure an azure solution that meets the following requirements: - Secures websites from attacks, generates reports that contain details of attempted attacks. What should you include in the solution? A. Azure firewall B. A network security group NSG C. Azure information protection D. DDoS protection

D. DDoS protection

What are two characteristics of the public cloud? Each correct answer presets a complete solution. Note: Each correction selection is worth one point. A. Dedicated Hardware B. Unsecured connections C. limited storage D. Metered Pricing E. Self- Service management

D. Metered Pricing E. Self-Service Management With the public cloud, you get pay-as-you-go pricing ג€" you pay only for what you use, no CapEx costs.With the public cloud, you have self-service management. You are responsible for the deployment and configuration of the cloud resources such as virtual machines or web sites. The underlying hardware that hosts the cloud resources is managed by the cloud provider.

Data that is stored in the Archive access tier of an Azure Storage account A. Can be accessed at any time by using azcopy.exe. B. Can only be read by using Azure Backup C. Must be restored before the data can be accessed D. Must be rehydrated before the data can be accessed

D. Must be rehydrated before the data can be accessed

This questions requires that you evaluate the underlying text to determine if it is correct. Azure Key vault is used to store secrets for azure Active Directory (azure AD) user accounts. Instructions: Review the underlined text . If it makes the statement correct, select no change needed. A. No change is needed B. Azure Active directory Azure AD administrative accounts C. Personally identifiable information PII D. Server applications.

D. Server applications.

You plan to migrate several servers from an on-premises network to Azure. What is an advantage of using Public Cloud services for the servers over an on-premise network? A. The Public Cloud is owned by the public, Not a private corporation. B. The public cloud is a crowd-sourcing solution that provides corporation with the ability to enhance the cloud C. All public cloud resources can be freely accessed by every member of the public. D. The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud.

D. The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud. - The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud. The hardware resources (servers, infrastructure etc.) are managed by the cloud provider. Multiple companies create resources such as virtual machines and virtual networks on the hardware resources.

your company plans to migrate all on premises data to Azure. You need to identify whether Azure complies with the companies regional requirements. What should you use? A. Knowledge Center B. Azure Marketplace C. The My apps Portal D. The trust center

D. The trust center Azure has more than 90 compliance certifications, including over 50 specific to global regions and countries, such as the US, the European Union, Germany,Japan, the United Kingdom, India and China.You can view a list of compliance certifications in the Trust Center to determine whether Azure meets your regional requirements.

You have an Azure environment that contains 10 virtual networks and 100 virtual machines. You need to limit the amount of inbound traffic to all the Azure virtual networks. What should you create? A. one network security group (NSG) B. 10 virtual network gateways C. 10 Azure ExpressRoute circuits D. one Azure firewall

D. one Azure firewall

A cloud service that can be recovered after a failure occurs - Fault tolerance - Disaster recovery - Dynamic Scalability - Low latency

Disaster Recovery Disaster recovery is the recovery of a service after a failure. For example, restoring a virtual machine from backup after a virtual machine failure.

A cloud service that performs quickly when demand increases - Fault tolerance - Disaster recovery - Dynamic Scalability - Low latency

Dynamic Scalability Dynamic scalability is the ability for compute resources to be added to a service when the service is under heavy load. For example, in a virtual machine scale set, additional instances of the virtual machine are added when the existing virtual machines are under heavy load.

Azure site recovery provides (blank) for virtual machines: - Fault tolerance - disaster recovery - elasticity - high availability

Fault tolerance - Azure Site Recovery helps ensure business continuity by keeping business apps and workloads running during outages. Site Recovery replicates workloads running on physical and virtual machines (VMs) from a primary site to a secondary location.

Cloud Services that remains available after a failure occurs - Fault tolerance - Disaster recovery - Dynamic Scalability - Low latency

Fault tolerance -Fault tolerance is the ability of a service to remain available after a failure of one of the components of the service. For example, a service running on multiple servers can withstand the failure of one of the servers.

you have an azure environment that contains 10 web apps. To which URL should you connect to manage all the Azure resources? Https:// (Blank) (Blank) .com - Admin - Azure. - Portal. - Azurewebsites. - www. - Microsoft.

Https://portal.Azure.com

An azure web app that queries an on-premise Microsoft SQL server is an example of: - Hybrid - Multi-vendor - Private - Public

Hybrid

You have 50 virtual machines hosted on-premises and 50 virtual machines hosted in Azure. The on-premises virtual machines and the Azure virtual machines connect to each other. Which type of cloud model is this?

Hybrid

Azure Government GDPR ISO NIST an organization that defines international standards across al industries. An organization that defines standards used by the united states government A European policy that regulates data privacy and data protection A dedicated public cloud for federal and state agencies in the united states.

ISO- an organization that defines international standards across al industries. NIST- An organization that defines standards used by the united states government GDPR- A European policy that regulates data privacy and data protection Azure Government- A dedicated public cloud for federal and state agencies in the united states.

IoT Hub IOT Central Azure Sphere - a managed service that provides bidirectional communication between Iot Devices and Azure A software and hardware solution that provides communication and security features for Iot Devices A fully managed software as a service solution to connect, monitor, and manage Iot devices at scale

IoT Hub- a managed service that provides bidirectional communication between Iot Devices and Azure - IOT Central- A fully managed software as a service solution to connect, monitor, and manage Iot devices at scale - Azure Sphere- A software and hardware solution that provides communication and security features for Iot Devices

You plan to extend your companys network to Azure. The network contains a VPN appliance that uses an IP address of 131.107.200.1. You need to create an Azure resource that identifies the VPN appliance. Which Azure resource should you create? To answer, select the appropriate resource in the answer area.

Local Network Gateways A Local Network Gateway is an object in Azure that represents your on-premise VPN device. A Virtual Network Gateway is the VPN object at the Azure end of theVPN. A ג€˜connectionג€™ is what connects the Local Network Gateway an the Virtual Network Gateway to bring up the VPN.

A cloud service that can be accessed quickly from the internet: - Fault tolerance - Disaster recovery - Dynamic Scalability - Low latency

Low latency Latency is the time a service to respond to requests. For example, the time it takes for a web page to be returned from a web server. Low latency means low response time which means a quicker response.

You need to identify which blades in the Azure portal must be used to perform the following tasks:✑ View security recommendations.✑ Monitor the health of Azure services.✑ Browse available virtual machine images.Which blade should you identify for each task? Browse available virtual machine images - Monitor - Subscriptions - Marketplace - Advisor

Marketplace

you plan to deploy a critical line of business application to azure. The application will not run on Azure virtual machine. You need to recommend a deployment solution for the application. The solution must provide a guaranteed availability of 99.99%. What is the minimum number of virtual machines and the minimum number of availability zones you should recommend for the deployment?

Min # of Virtual machines: 2 Min # of Availability zones: 2

You need to identify which blades in the Azure portal must be used to perform the following tasks:✑ View security recommendations.✑ Monitor the health of Azure services.✑ Browse available virtual machine images. Which blade should you identify for each task? monitor the health of azure services: - Monitor - Subscriptions - Marketplace - Advisor

Monitor

Azure Application Insights

Monitors web applications

( Yes or no) In a public cloud Model, only guest users at your company can access the resources in the cloud

NO

(Yes or no) A platform as a service (paas) solution provides additional memory to apps by changing pricing tiers.

NO

(yes or no) As a platform as a service (paas) solution provides full control of operating systems that host applications

NO

Azure Pay-As-You-Go pricing is an example of CapEx. A. Yes B. No

NO

paying electricity for your datacenter is an example of OpEx. -Yes -No

NO

(yes or No) To achieve a hybrid cloud model, a company must always migrate from a private cloud model.

NO It is not true that a company must always migrate from a private cloud model to implement a hybrid cloud. You could start with a public cloud and then combine that with an on-premise infrastructure to implement a hybrid cloud.

(yes or No) To implement a hybrid cloud, a company must have an internal network.

NO It is not true that a company must always migrate from an internal network to implement a hybrid cloud. You could start with a public cloud and then combine that with an on-premise infrastructure to implement a hybrid cloud.

An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs linux and has Azure CLI tools installed. Does this meet the goal? A. Yes B. No

NO PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell script needs to be run in PowerShell.PowerShell can now be installed on Linux. However, the question states that the computer has Azure CLI tools, not PowerShell installed.

In a public cloud model, only guest users at your company can access the resource in the cloud.

NO You can give anyone with an account in Azure Active Directory access to the cloud resources.

(yes or no) If you Create two Azure virtual machines that use B2B size, each virtual machine will always generate the same monthly costs.

No

A resource group can have the owner role assigned to multiple users Y or n

No

An Azure free account can contain an unlimited number of web apps. A. Yes B. No

No

An Azure service in general availability is released to a subset of Azure customers

No

An azure service in private view is released to all azure customers Y or N

No

Building a data center infrastructure is an example of operational expenditure (OpEx) costs. Yes or no

No

Copying 10 GB of data to Azure from an on premises network over a VPN generates additional azure data transfer costs

No

Each user account in Azure Active Directory (Azure AD) can be assigned only one license. A. Yes B. No

No

Microsoft SQL server 2019 installed on an azure virtual machine is an example of platform as a service Yes or no

No

Storing 1 TB of data in Azure Blob storage will always cost the same, regardless of the Azure region in which the data is located. A. Yes B. No

No

The service level agreement (SLA) for Azure Active directory Premium P2 is the same as the SLA for Azure Active Directory free. Y or N

No

To maintain Microsoft support, you must implement the security recommendations provided by Azure Advisor within a period of 30 days.

No

Two Azure subscriptions can be merged into a single subscription. A. Yes B. No

No

Two valid methods for Azure Multi-Factor Authentication (MFA) are picture and passport number. Y or N

No

You can assign an Azure blueprint to a resource group y or n

No

You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. Solution: You deploy the virtual machines to two or more scale sets. Does this meet the goal? A. Yes B. No

No

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a DDos protection plan. Does this meet the goal? Y or n

No

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure traffic manager profile Does this meet the goal? y or n

No

adding resource groups in an azure subscription generates additional costs Y or N

No

an azure free account has a limit of 2TB of data that can be uploaded to azure Y or N

No

from azure service health, an administrator can prevent a service failure.

No

transferring data between Azure storage accounts in different Azure regions is free Y or N

No

with a consumption-based plan, you pay a fixed rate for all data sent to or from virtual machines hosted in the cloud. Y or N

No

your company plans to purchase an azure subscription. The company's support policy states that the sure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirements. Solution: Recommend Basic Support plan Does this meet the goal? Y or N

No

a network security group NSG will encrypt all the network traffic sent from azure to the internet. Y or n

No A network security group does not encrypt network traffic. It works in a similar way to a firewall in that it is used to block or allow traffic based on source/ destination IP address, source/destination ports and protocol.

A resource can only access other resources in the same resource group. Yes or no

No A resource can interact with resources in other resource groups.

You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. Solution: You deploy the virtual machines to two or more resource groups. Does this meet the goal? A. Yes B. No

No A resource group is a logical container for Azure resources. When you create a resource group, you specify which location to create the resource group in. However, when you create a virtual machine and place it in the resource group, the virtual machine can still be in a different location (different datacenter).Therefore, creating multiple resource groups, even if they are in separate datacenters does not ensure that the services running on the virtual machines are available if a single data center fails.

An Azure subscription can be associated to multiple Azure Active Directory (Azure AD) tenants.

No An Azure AD tenant can have multiple subscriptions but an Azure subscription can only be associated with one Azure AD tenant.

a standard support plan is included in an azure free account Y or N

No An Azure free account comes with a ג€˜basicג€™ support plan, not a ג€˜standardג€™ support plan.

Authorization to Access azure resources can be provided only to an Azure active directory users. Y or N

No Authorization to access Azure resources can be provided by other identity providers by using federation. A commonly used example of this is to federate your on- premises Active Directory environment with Azure AD and use this federation for authentication and authorization.

You can join android devised to Azure active directory Y or N

No Azure AD join only applies to Windows 10 devices.

azure active directory (azure AD) requires the implementation of domain controllers on Azure virtual machines Y or N

No Azure Active Directory (Azure AD) is a cloud-based service. It does not require domain controllers on virtual machines.

Azure advisors can generate a list of Azure virtual Machines that are protected by Azure Backup. Y or N

No Azure Advisor does not generate a list of virtual machines that ARE protected by Azure Backup. Azure Advisor does however, generate a list of virtual that ARENOT protected by Azure Backup.

if your company uses an azure free account, you will only be able to use a subset of Azure services

No Azure Free Account gives you 12 months access to the most popular free services. It also gives you a credit (150 GBP or 200 USD) to use on any Azure service for up to 30 days.

Azure services in public preview can be managed only by using Azure CLI

No Azure services in public preview can be managed using the regular management tools: Azure Portal, Azure CLI and PowerShell.

An Azure virtual machine can be in multiple resource groups Yes or no

No Each resource can exist in only one resource group.

If you implement the security recommendations provided by Azure Advisor, your company's secure score will decrease.

No If you implement the security recommendations, you companyג€™s score will increase, not decrease.

When an Azure subscription expires, the associated Azure active directory tenant is deleted automatically.

No If your subscription expires, you lose access to all the other resources associated with the subscription. However, the Azure AD directory remains in Azure. You can associate and manage the directory using a different Azure subscription.

A private cloud must be disconnected from the internet

No It is not true that a private cloud must be disconnected from the Internet. Private clouds can be and most commonly are connected to the Internet. ג€Private cloudג€ means that the physical servers are managed by you. It does not mean that it is disconnected from the Internet.

To implement an Azure Multi-Factor Authentication (MFA) solution, you must sync on-premises identities to the cloud. Y or N

No It is not true that you must deploy a federation solution or sync on-premises identities to the cloud. You can have a cloud-only environment and use MFA.

you plan to deploy several azure virtual machines. You need to ensure that the services running on the virtual machines are available if a a single datacenter fails. Solution: you deploy the virtual machines to a scale set. Does this meet the goal?

No This answer does not specify that the scale set will be configured across multiple data centers so this solution does not meet the goal.Azure virtual machine scale sets let you create and manage a group of load balanced VMs. The number of VM instances can automatically increase or decrease in response to demand or a defined schedule. Scale sets provide high availability to your applications, and allow you to centrally manage, configure, and update many VMs.Virtual machines in a scale set can be deployed across multiple update domains and fault domains to maximize availability and resilience to outages due to data center outages, and planned or unplanned maintenance events.

Support from MSDN forums is only provided to companies that have a pay-as-you-go subscription

No Users with any type of Azure subscription (pay-as-you-go, Enterprise Agreement, Microsoft Customer Agreement etc.) can get support from the MSDN forums.

When you use a general-purpose v2 Azure Storage account, you are only charged for the amount of data that is stored. All read and write operations are free. A. Yes B. No

No You are charged for read and write operations in general-purpose v2 storage accounts.

your company has an azure subscription that contains the following unused resources: - 20 user accounts in Azure Active Directory (Azure AD) - Five groups in Azure AD - 10 Public IP addressed - 10 Network interfaces You need to reduce the Azure costs for the company. Solution : you remove the unused network interfaces. Does this meet the goal? Y or N

No You are not charged for unused network interfaces. Therefore, deleting unused network interfaces will not reduce the Azure costs for the company.

your company has an azure subscription that contains the following unused resources: - 20 user accounts in Azure Active Directory (Azure AD) - Five groups in Azure AD - 10 Public IP addressed - 10 Network interfaces You need to reduce the Azure costs for the company. Solution : you remove the unused user counts. Does this meet the goal? Y or N

No You are not charged for user accounts. Therefore, deleting unused user accounts will not reduce the Azure costs for the company.

Azure Advisor provides recommendations on how to improve the security of an Azure Active Directory (Azure AD) environment.

No You can get security recommendations from the Security tab on the Advisor dashboard

A company can extend a private cloud by adding its own physical servers to the public. -Yes -No

No You cannot add physical servers to the public cloud. You can only deploy virtual servers in the public cloud. You can extend a private cloud by deploying virtual servers in a public cloud. This would create a hybrid cloud.

Each Azure subscription can be managed by using a Microsoft account only. Yes or no

No You need an Azure Active Directory account to manage a subscription, not a Microsoft account.

A user who is assigned the Owner role can transfer ownership of an Azure subscription. Y or N

No You need to be an administrator of the billing account that has the subscription to be able to transfer the subscription.

The companies migration plan states that only platform as a service solution must be used in Azure. You need to deploy an Azure environment that meets the company Migration plan. Solution: you create Azure virtual machines. Azure SQL databases, and Azure storage accounts. Does this meet the goal?

No virtual machines are examples of Infrastructure as a service (IaaS)

you can create up to 10 azure free accounts by using the same Microsoft account

No You can only create one free Azure account per Microsoft account.

(Yes or No) A platform as a service (Paas) solution that hosts web apps in Azure provides full control of the operating system that hosts applications.

No - A PaaS solution does not provide access to the operating system. The Azure Web Apps service provides an environment for you to host your web applications.

The company's migration plan states that only Platform as a service (Paas) solution must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: You create an Azure App service and Azure Storage accounts. (Yes or No)

No, Azure App as a service. However, Azure storage accounts are an Iaas (infrastructure as a service). Therefore, this solution does not meet the goal.

The company's migration plan states that only Platform as a service (Paas) solution must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: You Create an Azure App Service and Azure Virtual Machines that have Microsoft SQL Server installed. Does this meet the goal? (Yes or No)

No- Azure App service is a Paas (platform as service). However, Azure virtual machines are an Iaas (infrastructure as a service). Therefore, this solution does not meet the goal.

You have 1,000 virtual machines hosted on the Hyper-V hosts in a data center. You plan to migrate all the virtual machines to an Azure pay-as-you-go subscription. You need to identify which expenditure model to use for the planned Azure solution. Which expenditure model should you identify? A. Operational B. Elastic C. Capital D. Scalable

Operational One of the major changes that you will face when you move from on-premises cloud to the public cloud is the switch from capital expenditure (buying hardware) to operating expenditure (paying for service as you use it). This switch also requires more careful management of your costs.

A Microsoft SQL server database that is hosted in the cloud and has software updates managed by Azure is an example of: - Disaster recovery as a service - Infrastructure as a service - Platform as a service - Software as a service

Platform as a service

Azure Cosmos DB is an example of: - Platform as a service - Infrastructure as a service - Serverless - Software as a service

Platform as a service Azure Cosmos DB is an example of a platform as a service (PaaS) cloud database provider.

Azure IoT Hub

Processes data from millions of sensors

Azure Iot hub

Processes data from millions of sensors

Azure Functions

Provides serverless computing functionalities

Azure Functions

Provides the platform for serverless code

Match the following: - No required Capital - Provides complete control over security - Provides a choice to use on premise or cloud based resources. A. Hybrid Cloud B. Public Cloud C. Private cloud

Public Cloud- No required Capital Private cloud-Provides complete control over security Hybrid Cloud- Provides a choice to use on premise or cloud based resources.

you need to ensure performance for users who access your application, which runs on customized Linux virtual machines. What should you use to provision virtual machines automatically. - Functions - Scale Sets - Dedicated hosts - Availability zones

Scale sets

______________________ can calculate cost savings due to reduce electricity consumption as a result of migrating on- premises Microsoft SQL servers to Azure. - The azure Migrate server assessment tool - the azure total cost of ownership (TCO) calculator. - The database Migration assistant. - The pricing calculator in azure

The Azure total cost of ownership (TCO) calculator

Azure machine learning

Uses past trainings to provide predictions that have high probability

azure machine learning

Uses past trainings to provide predictions that have high probability

Deploying your own datacenter is an example of CapEx. A. Yes B. No

YES

(Y or N) A platform as a service solution that hosts web apps in Azure can be configured to automatically scale the number of instances based on demand.

Yes

(Yes Or No) Azure Provides flexibility between capital expenditure (CapEx) and Operational expenditure (OpEx).

Yes

(Yes or No) A company can extend the computing resources of its internal network by using hybrid cloud

Yes

(y or N)A platform as a service that hosts web apps in Azure can be provided with additional memory by changing their pricing tier.

Yes

(yes or no) A platform as a service ( Paas) solution can automatically scale the number of instances.

Yes

A single Microsoft account can be used to manage multiple azure subscriptions.

Yes

A user account can be assigned to Multiple Azure roles. Y or n

Yes

An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs Windows 10 and has Azure Powershell module installed. Does this meet the goal? A. Yes B. No

Yes

An Azure free account has a spending limit. Y or N

Yes

An Azure service in public preview is released to all Azure customers. A. Yes B. No

Yes

An azure reservation is used to reserve capacity at a specific data center y or n

Yes

Azure Advisor provides recommendations on how to reduce the cost of running Azure virtual machines.

Yes

Azure Government is operated by Microsoft Y or N

Yes

Azure Multi-Factor Authentication (MFA) can be required for administrative and non-administrative user accounts. Y or N

Yes

Azure backup is an example of platform as a service Yes or no

Yes

Azure can be used to build a General Data Protection Regulation (GDPR) - compliant infrastructure Y or N

Yes

Copying 10 GB of data from azure to an on premise network over a VPN generates additional azure data transfer costs Y or n

Yes

From the Azure portal, you can distinguish between services that are generally available and services that are in public preview. Y or N

Yes

General Data Protection Regulation (GDPR) defines data protection and privacy rules. y or n

Yes

Monthly Salaries for technical personnel are an example of operational expenditure (OpEx) costs. Yes or no

Yes

To build a hybrid cloud, you must deploy resources to the public cloud.

Yes

You can add an Azure resource Manager template to an Azure blueprint Y or n

Yes

You can associate a network security group NSG to a network interface Y or n

Yes

You can associate a network security group NSG to a virtual network Y or n

Yes

You can join windows 10 devices to Azure Active directory Y or N

Yes

You can use Availability Zones in Azure to protect Azure virtual machines from a datacenter failure

Yes

You can use Azure blueprints to grant permissions to a resource Y or n

Yes

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a Network security group ( NSG ) Does this meet the goal? A. Yes B. No

Yes

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure firewall Does this meet the goal? A. Yes B. No

Yes

an administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: run the script from a computer that runs MacOS and has a PowerShell Core 6.0 installed. Does this meet the goal?

Yes

azure active directory (azure AD) provides authentication for resources hosted in Azure and M365 Y or N

Yes

azure active directory groups support dynamic membership rules.

Yes

azure security center can monitor azure resources and on-premises resources

Yes

in azure active directory premium P2, at least 99.9 percent availability is guaranteed. Y or N

Yes

serverless computing is an example of consumption based plan Y or N

Yes

the cost of azure resources can vary between regions y or n

Yes

to use azure directory credentials to sign in to a computer that runs windows 10, the computer must be joined to Azure AD.

Yes

when using an azure EXPRESSROUTE connection, inbound data traffic from an on-premises network to azure is always free y or n

Yes

you can associate a network security group (NSG) to a virtual network subnet. Y or n

Yes

you can change the azure active directory tenant to which an Azure subscription is associated.

Yes

you can convert the azure subscription of your company from the free trial to Pay-as-you-go y or n

Yes

you can create group policies in Azure Active Directory Y or N

Yes

you have an azure subscription named Subscription 1. You sign into azure portal and create a resource group RG1. From azure documentations, you have the following command that creates a virtual machine name VM1. Az-VM create--Resource-group-RG1-Name-Vm1-Image-UbuntuLTS-generate-ssh-keys. You need to create VM1 in Subscription1 by using the command. Solution: from the azure portal launch azure cloud shell and select PowerShell. Run the command in cloud shell, Does this meet the goal? Yes or no

Yes

your company plans to purchase an azure subscription. The company's support policy states that the sure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirements. Solution: Recommend Standard Support plan Does this meet the goal?

Yes

(Yes or no) A company can Extend the capacity of its internal network by using the public cloud.

Yes A company can extend the capacity of its internal network by using the public cloud. This is very common. When you need more capacity, rather than pay out for new on-premises infrastructure, you can configure a cloud environment and connect your on-premises network to the cloud environment by using a VPN.

A company can use resources from multiple subscriptions

Yes A company can have multiple subscriptions and store resources in the different subscriptions. However, a resource instance can exist in only one subscription.

with azure reservations, you pay less for virtual machines that with pay-as-you-go pricing y or n

Yes A reservation is where you commit to pay for a resource (for example a virtual machine) for one or three years. This gives you a discounted price on the resource for the reservation period.

Azure monitor can send alerts to Azure directory security groups.

Yes Alerts in Azure Monitor proactively notify you of critical conditions and potentially attempt to take corrective action.

The company's migration plan states that only Platform as a service (Paas) solution must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: you create an Azure App Service and Azure SQL database. Does this meet the goal? (Yes or No)

Yes Azure App Service and Azure SQL databases are examples of Azure PaaS solutions. Therefore, this solution does meet the goal.

From Azure Monitor, you can monitor resources across multiple azure subscriptions. Y or N

Yes Azure Monitor can consolidate log entries from multiple Azure resources, subscriptions, and tenants into one location for analysis together

azure monitor can monitor the performance of on-premises computers

Yes Azure Monitor maximizes the availability and performance of your applications and services by delivering a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments.

you need to deploy several azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single datacenter fails. Solution: You deploy the virtual machines to two or more regions. Does this meet the goal? Yes or no

Yes By deploying the virtual machines to two or more regions, you are deploying the virtual machines to multiple datacenters. This will ensure that the services running on the virtual machines are available if a single data center fails.

If you delete a resource group, all the resources in the resource group will be deleted. Yes or no

Yes Deleting the resource group will remove the resource group as well as all the resources in that resource group. This can be useful for the management of resources

Leasing software is an example operational expenditure (OpEx) costs. Yes or no

Yes OpEx is ongoing costs (costs of operations) such as leasing software. If you purchased software as a one-off purchase, that would be CapEx, but leasing software is ongoing so its OpEx.

When an Azure virtual machine is stopped, you continue to pay storage costs associated to the virtual machine. Y or N

Yes When a virtual machine is stopped (deallocated), the virtual machine is unloaded/dismounted from the physical server in Azure. In this state, you are not charged for the virtual machine itself. However, you are still charged for the storage costs of the virtual hard disks attached to the virtual machine.

You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the android operating system . Solution: You use Bash in Azure Cloud Shell. Does this meet your goal? A. Yes B. No

Yes With Azure Cloud Shell, you can create virtual machines using Bash or PowerShell.

Each Azure subscription can contain multiple account administrators. Yes or no

Yes You can assign additional account administrators in the Azure Portal.

From Azure monitor, you can create alerts Y or N

Yes You can create alerts in Azure Monitor. Alerts in Azure Monitor proactively notify you of critical conditions and potentially attempt to take corrective action.

A premier support plan can only be purchased by companies that have an enterprise agreement (EA)

Yes You can purchase the Professional Direct, Standard, and Developer support plans with the Microsoft Customer Agreement.

you can configure the azure active directory (Azure AD) activity logs to appear in Azure Monitor Y or N

Yes You can send Azure AD activity logs to Azure Monitor logs to enable rich visualizations, monitoring and alerting on the connected data.

you have an azure subscription named Subscription 1. You sign into the Azure portal and create a resource group named RG1. From Azure documentation you have the following command that creates a virtual machine named VM1. az vm create--resource group-RG1-- image Ubuntul TS-- generate-ssh-keys. You need to create VM1 in subscription 1 by using the command. Solution: from the azure portal launch azure cloud shell and select Bash.run the command in cloud shell. Does this meet the goal?

Yes he command can be run in the Azure Cloud Shell.The Azure Cloud Shell is a free interactive shell. It has common Azure tools preinstalled and configured to use with your account.To open the Cloud Shell, just select Try it from the upper right corner of a code block. You can also launch Cloud Shell in a separate browser tab by going to https://shell.azure.com/bash.

(Yes or No) A platform as a service (Paas) solution that hosts web apps in Azure provides the ability to scale the platform automatically.

Yes- A PaaS solution that hosts web apps in Azure does provide the ability to scale the platform automatically. This is known as autoscaling

(Yes or No) A platform as a service (Paas) solution that hosts Webb apps in Azure provides professional development services to continuously add features to customer applications.

Yes- PaaS provides a framework that developers can build upon to develop or customize cloud-based applications. PaaS development tools can cut the time it takes to code new apps with pre-coded application components built into the platform, such as workflow, directory services, security features, search and so on

Match: You want to know how many time's your web app has been unavailable during the past month. you want you and your team members to receive a text message when azure maintenance is planned you want to view the Azure features that are planned to be depreciated. -Health Advisories -Health alerts - health history -planned maintenance - service issues

You want to know how many time's your web app has been unavailable during the past month. - Health history you want you and your team members to receive a text message when azure maintenance is planned - Health alerts you want to view the Azure features that are planned to be depreciated. - Health advisories

Premium or Free You want to publish on-premise web apps using Azure AD you want to use on-premises directory synchronization You want on-premises users to be able to reset their own passwords

You want to publish on-premise web apps using Azure AD - premium you want to use on-premises directory synchronization - free You want on-premises users to be able to reset their own passwords - premium

Azure SQL Synapse Analytics

a cloud-based service that leverages massively parallel processing (MPP) to quickly run complex queries across petabytes of data in a relational database.

IoT Central

a fully managed software as a service (Saas) solution to connect, monitor, and manage IoT devices at a scale.

creating highly portable, scalable app instances that include the binaries and libraries required to run can be done using .....

containers

you plan to create an azure virtual machine. You need to identify which storage service must be used to store the unmanaged data disks of the virtual machine. What should you identify? to answer, select the appropriate service in the answer area: - Containers - File shares - tables - queues

containers Azure containers are the backbone of the virtual disks platform for Azure IaaS. Both Azure OS and data disks are implemented as virtual disks where data is durably persisted in the Azure Storage platform and then delivered to the virtual machines for maximum performance

(yes or no) A platform as a service (paas) solution that hosts web apps in Azure provides full control of the operating system that hosts the application.

no

A windows virtual desktop host pool that includes 20 session hosts supports a maximum of 20 simultaneously user connections

no

A windows virtual desktop session host can run windows 10 only

no

After an Azure service becomes generally available, the service is no longer updated with new features. y or n

no

All Azure Security Center features are free. y or n

no

All Azure services in private preview must be accessed by using a separate Azure portal. Y or n

no

All the Azure resources deployed to a single resource group must share the same Azure region.

no

Azure Advisor provides recommendations on how to configure the network settings on Azure virtual machines.

no

Azure China is operated by Microsoft y or n

no

Azure comsos DB is an example of software as a service Yes or no

no

By copying several gigabits of data to Azure from an on-premises network over a VPN, additional data transfer costs are incurred.

no

If you assign a tag to a resource group, all the Azure resources in that resource group are assigned to the same tag.

no

Users in Azure Active Directory (Azure AD) are organized by using resource groups.

no

With software as a (Saas), you must apply software updates. Yes or no

no

You can create a resource group inside of another resource group. Yes or no

no

You can stop an azure SQL database instance to decrease costs y or n

no

companies can increase the service level agreement SLA guaranteed uptime by purchasing multiple subscriptions Y or N

no

outbound data traffic to an on-premises network is always free y or n

no

when you create azure resources for a service in public preview, you must recreate the resources once the service becomes generally available y or n

no

you company has an azure subscription that contains the following unused resources: - 20 user accounts in Azure active Directory -Five groups is Azure AD - 10 Public IP Addresses - 10 network interfaces You need to reduce the azure costs for the company. Solution: you remove the unused Groups. Does this meet the goal? Y or N

no

you have an azure subscription named Subscription 1. You sign into azure portal and create a resource group RG1. From azure documentations, you have the following command that creates a virtual machine name VM1. Az-VM create--Resource-group-RG1-Name-Vm1-Image-UbuntuLTS-generate-ssh-keys. You need to create VM1 in Subscription1 by using the command. Solution: From a computer that runs windows 10, install Azure CLI. From a command prompt, sign into Azure then run the command. Does this reach your goal?

no

you have an azure subscription named Subscription 1. You sign into azure portal and create a resource group RG1. From azure documentations, you have the following command that creates a virtual machine name VM1. Az-VM create--Resource-group-RG1-Name-Vm1-Image-UbuntuLTS-generate-ssh-keys. You need to create VM1 in Subscription1 by using the command. Solution: from a computer that runs windows 10, install azure CLIO. From PowerShell, sign into azure and then run the command. Does this reach your goal? Yes or no

no

An azure resource group can contain multiple Azure subscriptions.

no A subscription can contain multiple resource groups but a resource group can only belong to one subscription.

an azure subscription can have multiple account administrators.

no A subscription can have multiple administrators, but there can only be one account administrator.

Availability zones are used to replicate data and applications to multiple regions.

no Availability Zones are unique physical locations within a single Azure region.

availability zones are used to replicate data and applications to multiple regions

no Availability Zones is a high-availability offering that protects your applications and data from datacenter failures. Availability Zones are unique physical locations within an Azure region. Each zone is made up of one or more datacenters equipped with independent power, cooling, and networking. To ensure resiliency, thereג€™s a minimum of three separate zones in all enabled regions.

Only virtual machines that run Windows Server can be created in availability zones. Yes or no

no Availability zones can be used with many Azure services, not just VMs.

You can use Availability Zones in Azure to protect Azure virtual machines from a region failure

no Availability zones expand the level of control you have to maintain the availability of the applications and data on your VMs. Availability Zones are unique physical locations within an Azure region

Azure Firewall will encrypt all the network traffic sent from Azure to the Internet Y or n

no Azure firewall does not encrypt network traffic. It is used to block or allow traffic based on source/destination IP address, source/destination ports and protocol.

All data that is copied to an azure storage account is backed up automatically to another azure data center

no Data is not backed up automatically to another Azure Data Center although it can be depending on the replication option configured for the account.

north America is represented by a single region

no North America has several Azure regions, including West US, Central US, South Central US, East Us, and Canada East.

availability zones can be implemented in all azure regions

no Not all Azure regions support availability zones.

Data transfers between Azure services located in different Azure regions are always free.

no Outbound data transfer is charged at the normal rate and inbound data transfer is free.

You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs Android operating system. Solution: You use the PowerApps portal . Does this meet the goal? A. Yes B. No

no PowerApps lets you quickly build business applications with little or no code. It is not used to create Azure virtual machines.

Only virtual machines that run Windows Server can be created in availability zones.

no Regions that support availability zones support Linux virtual machines.

An Azure resource group contains multiple Azure subscriptions Yes or no

no Resource groups are logical containers for Azure resources. However, resource groups do not contain subscriptions. Subscriptions contain resource groups

By creating additional resource groups in an Azure subscription, additional costs are incurred. A. Yes B. No

no Resource groups are logical containers for Azure resources. You do not pay for resource groups.

The cost of an Azure service in private preview decreases when the service becomes generally available. A. Yes B. No

no Services in private or public preview are usually offered at reduced costs. However, the costs increase, not decrease when the services are released to general availability.

An Azure Storage account can contain up to 2 TB of data and up to one million files

no The limits are much higher than that. The current storage limit is 2 PB for US and Europe, and 500 TB for all other regions (including the UK) with no limit on the number of files.

Azure virtual machines that run Windows Server 2016 can encrypt the network traffic sent from the virtual machines to a host on the Internet y or n

no The question is rather vague as it would depend on the configuration of the host on the Internet.

Two azure virtual machines that use the B2S size have the same monthly costs Y or n

no There are other factors that influence the cost of a virtual machine such as the virtual hard disks attached to the virtual machine. You could have multiple virtual machines with the same ג€˜sizeג€™ (B2S in this case) but with different virtual hard disk configurations.

If you have Azure resources deployed to every region, you can implement availability zones in all the regions

no Not all Azure regions support availability zones.

azure services in public preview are subject to a service level agreement (SLA)

no- You can use services in public preview in production environments. However, you should be aware that the service may have faults, is not subject to an SLA and may be withdrawn without notice.

Azure container instances

provide portable environment for virtualized applications

Azure Bot Service

provides a digital online assistant that provides speech support.

Azure App Service

used to build, deploy, and scale web apps

(yes or no) When an Azure virtual machine is stopped, you continue to pay storage costs associated to the virtual machine.

yes

An Azure resource can have multiple delete locks. y or n

yes

An Azure resource inherits locks from its resource group. y or n

yes

An Azure subscription can be managed by using a Microsoft account only

yes

An azure subscription can be managed by using a Microsoft account only.

yes

Azure SQL database is an example of platform as a service Yes or no

yes

Azure government is available only to US government agencies and their partners y or n

yes

Azure has built-in authentication and authorization services that provide secure access to Azure resources

yes

Azure services in public preview can be used in production environments. y or n

yes

By copying several gigabits of data From Azure to an on-premises network over a VPN, additional data transfer costs are incurred. A. Yes B. No

yes

Data traffic between Azure services within the same Azure region is always free. y or n

yes

From Azure Security Center, you can download a Regulatory Compliance report.

yes

From Azure Service Health, an administrator can create a rule to be alerted if an Azure service fails.

yes

From Azure Service Health, you can view the health of all the services deployed in your Azure environment.

yes

General Data Protection Regulation (GDPR) applies to companies that offer goods or services to individuals in the EDU y or n

yes

Identities stored in an on-premises Active Directory can be synchronized to Azure Active Directory (Azure AD). A. Yes B. No

yes

If an Azure resource has a Read-only lock, you can add a Delete lock to the resource. Y or n

yes

If you assign permissions for a user to manage a resource group, the user can manage all the Azure resources in that resource group.

yes

The service level agreement guaranteed uptime is at least 99.9 % y or n

yes

Windows virtual desktop supports desktop and app virtualization.

yes

With infrastructure as a service (iaas), you must install the software that you want to use. Yes or no

yes

You can customize azure roles to control access to resources Y or n

yes

You can use Availability Zones in Azure to protect Azure managed disks from a datacenter failure

yes

companies can increase the service level agreement SLA guaranteed uptime by adding azure resources to multiple regions Y or N

yes

data that is stored in an azure storage account automatically has at least three copies.

yes

with consumption based plan, you reduce overall costs by paying only for extra capacity when its required. Y or N

yes

your company plans to purchase an azure subscription. The company's support policy states that the sure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirements. Solution: Recommend Premiere Support plan Does this meet the goal? y or n

yes

An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell. Does this meet the goal? A. Yes B. No

yes A PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell script needs to be run in PowerShell.With the Azure Cloud Shell, you can run PowerShell cmdlets and scripts in a Web browser. You log in to the Azure Portal and select the Azure Cloud Shell option.This will open a PowerShell session in the Web browser. The Azure Cloud Shell has the necessary Azure PowerShell module installed.

Every Azure region has multiple datacenters

yes A region is a set of datacenters deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network.

All Azure free accounts expire after a specific period y or n

yes All free accounts expire after 12 months.

Identities stored in Azure Active Directory (Azure AD), third-party cloud services and on-premises Active Directory can be used to access Azure resources. y or n

yes As described above, third-party cloud services and on-premises Active Directory can be used to access Azure resources. This is known as ג€˜federationג€™.

Azure has built-in authentication and authorization services that provide secure access to Azure resources Y or n

yes Azure Active Directory (Azure AD) is a centralized identity provider in the cloud. This is the primary built-in authentication and authorization service to provide secure access to Azure resources.

Azure Monitor can trigger alerts based on data in an Azure Log Analytics workspace.

yes Azure Monitor uses Target Resource, which is the scope and signals available for alerting. A target can be any Azure resource. Example targets: a virtual machine, a storage account, a virtual machine scale set, a Log Analytics workspace, or an Application Insights resource.

Most Azure services are introduces in private preview before being introduces in public preview and then in general availability. A. Yes B. No

yes Most services go to private preview then public preview before being released to general availability. The private preview is only available to certain Azure customers for evaluation purposes. The public preview is available to all Azure customers.

A resource group can contain resources from multiple Azure regions Yes or no

yes Resources from multiple different regions can be placed in a resource group. The resource group only contains metadata about the resources it contains.

You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs Android operating system. Solution: You use the azure portal. Does this meet the goal? A. Yes B. No

yes The Azure portal is a web-based, unified console that provides an alternative to command-line tools. With the Azure portal, you can manage your Azure subscription using a graphical user interface. You can build, manage, and monitor everything from simple web apps to complex cloud deployments. Create custom dashboards for an organized view of resources. Configure accessibility options for an optimal experience.Being web-based, the Azure portal can be run on a browser from a tablet that runs the Android operating system.

your company has an azure subscription that contains the following unused resources: - 20 user accounts in Azure Active Directory (Azure AD) - Five groups in Azure AD - 10 Public IP addressed - 10 Network interfaces You need to reduce the Azure costs for the company. Solution : you remove the unused Public IP addresses. Does this meet the goal? y or n

yes You are charged for public IP addresses. Therefore, deleting unused public IP addresses will reduce the Azure costs.

All paying Azure customers can claim a credit if their monthly uptime percentage is below the guaranteed amount in the SLA Yes or No

yes You can claim credit if the availability falls below the SLA. The amount of credit depends on the availability. For example: You can claim 25% credit if the availability is less than 99.9%, 50% credit for less than 99% and 100% for less than 95% availability.

The Azure spending limit is fixed and cannot be increased or decreased. y or n

yes You can remove the spending limit, but you canג€™t increase or decrease it.