AZ set 2

You can reduce the cost of your virtual machines running in Azure by following Azure Advisor recommendations.​

"Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments.

Azure Advisor provides many recommendations including virtual machines' network setting configurations.

"Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. The Advisor dashboard displays personalized recommendations for all your subscriptions. You can apply filters to display recommendations for specific subscriptions and resource types." - microsoft.com Azure Advisor provides recommendations and these are split into the following five categories:

You are currently working in an Azure virtual network named AZ-900-VNET in a resource group named AZ-900-RG. You receive an email from your manager and you assign an Azure policy specifying that virtual networks are not an allowed resource type in AZ-900-RG. What happens with your AZ-900-VNET ?

After applying the policy to your AZ-900-RG, the AZ-900-VNET will be marked as "Non-compliant". This means that this resource group is not compliant with the applied policy. The key point to understand is that, for example, you will not be allowed to deploy new virtual networks inside AZ-900-RG resource group, but existing resources will continue to function normally. Simply put, Azure Policy effects are not retroactive, they count only for new resources that you may want to deploy.

While working in Azure portal, you can generate a list of Azure VMs that are protected by Azure Backup using Azure Advisor service.

Azure Advisor is a powerful tool that can help you optimize your Azure environment. Also, Azure Advisor provides guidance and recommendations than can help you follow current best practices.

You have an Azure subscription named AZ-900-Subscription. You sign in to the Azure portal and create a resource group named RG-AZ-900. You intend to use the following command that creates a virtual machine named VirtualMachine01: az vm create --resource-group RG-AZ-900 --name VirtualMachine01 --image UbuntuLTS --generate-ssh-keys You need to create VirtualMachine01 in AZ-900-Subscription by using the command. Solution: Launch Azure Cloud Shell in Azure Portal, select Bash and run the command in Cloud Shell. Does this meet the goal?

Azure Cloud Shell is a very powerful tool available in Azure Portal. Within Azure Cloud Shell, you can choose either Bash or PowerShell to configure or manage your Azure subscription. Very important to note and understand is that in order to access Azure Cloud Shell (Bash or PowerShell), you only need a valid internet connection to connect to Azure Portal. Once you connect and authenticate with Azure Portal, you can then launch Azure Cloud Shell, choose either Bash or PowerShell and deploy whatever Azure services you want or need. The command presented is technically correct, you only need to validate where exactly you can run this command. The command is Azure CLI specific, so you can run it either in Bash, in Azure Cloud Shell, or maybe locally on your laptop or PC, if you have all necessary prerequisites installed.

You have an Azure subscription named AZ-900-Subscription. You sign in to the Azure portal and create a resource group named RG-AZ-900. You intend to use the following command that creates a virtual machine named VirtualMachine01. az vm create --resource-group RG-AZ-900 --name VirtualMachine01 --image UbuntuLTS --generate-ssh-keys You need to create VirtualMachine01 in AZ-900-Subscription by using the command. Solution: Launch Azure Cloud Shell from Azure Portal, select PowerShell and run the command in Cloud Shell. Does this meet the goal?

Azure Cloud Shell is a very powerful tool available in Azure Portal. Within Azure Cloud Shell, you can choose either Bash or PowerShell to configure or manage your Azure subscription. Very important to note and understand is that in order to access Azure Cloud Shell (Bash or PowerShell), you only need a valid internet connection to connect to Azure Portal. Once you connect and authenticate with Azure Portal, you can then launch Azure Cloud Shell, choose either Bash or PowerShell and deploy whatever Azure services you want or need. The command presented is technically correct, you only need to validate where exactly you can run this command. The command is Azure CLI specific, so you can run it either in Bash, in Azure Cloud Shell, or maybe locally on your laptop or PC, if you have all necessary prerequisites installed. Although the presented command is Azure CLI specific, it will run in PowerShell as well. This is simply because Azure has implemented this functionality, but again, the command is Azure CLI specific.

Which of the following services provides a cloud-based Enterprise Data Warehouse (EDW) ?

Azure Data Warehouse has been rebranded under a new name - Azure Synapse Analytics. Azure Synapse service combines Big Data analytics and data warehousing.

Azure Databricks is a big data analysis Azure service used for machine learning.

Azure Databricks is a data analytics platform optimized for the Microsoft Azure cloud services platform. The main use case for Azure Databricks is big data analysis.

Which of the following statements best describes the Modern Lifecycle Policy related to Azure services?

Before ending support for a service, Microsoft provides a minimum of 12 months' notice.

Your manager wants to receive an alert if an Azure service fails. Please evaluate if the following statement is True or False: You can use Azure Service Health to accomplish this task.​

Explanation Azure Service Health actually includes three services: Azure Status, Service Health and Resource Health.

Azure virtual machines provide operating system virtualization.

Explanation Azure virtual machines provide hardware virtualization. Microsoft documentation states the following: "Azure Virtual Machines (VM) is one of several types of on-demand, scalable computing resources that Azure offers. Typically, you choose a VM when you need more control over the comp

You can improve your Azure Active Directory (Azure AD) security if you follow Azure Advisor recommendations.

Explanation Microsoft documentation states the following: "Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. The Advisor dashboard displays personalized recommendations for all your subscriptions. You can apply filters to display recommendations for specific subscriptions and resource types." - microsoft.com However, Azure Advisor doesn't include recommendations targeting Azure Active Directory (Azure AD). Azure Advisor provides recommendations and these are split into the following five categories: Reliability (formerly called High Availability): "To ensure and improve the continuity of your business-critical applications." (microsoft.com) Security: "To detect threats and vulnerabilities that might lead to security breaches." (microsoft.com) Performance: "To improve the speed of your applications." (microsoft.com) Cost: "To optimize and reduce your overall Azure spending." (microsoft.com) Operational Excellence: "To help you achieve process and workflow efficiency, resource manageability and deployment best practices." (microsoft.com)

You are designing in Azure a new weather app that needs to be able to process data coming from millions of sensors. Which of the following Azure services is able to perform this task?

For this specific scenario you would use Azure IoT Hub. Azure IoT Hub service is able to receive and process Data from millions of IoT devices. For example, think of agriculture use cases, where you could have all kind of sensors and devices literally deployed on the field and sending data to your IoT hub. Or maybe you are managing a fleet of trucks, and all the data is received and processed by Azure IoT Hub service.

You have an Azure subscription named AZ-900-Subscription. You sign in to the Azure portal and create a resource group named RG-AZ-900. You intend to use the following command that creates a virtual machine named VirtualMachine01. az vm create --resource-group RG-AZ-900 --name VirtualMachine01 --image UbuntuLTS --generate-ssh-keys You need to create VirtualMachine01 in AZ-900-Subscription by using the command. Solution: Install Azure CLI on your Windows 10 laptop, open Command Prompt, sign in to Azure and then run the command. Does this meet the goal?

If you don't want to use Azure Cloud Shell and prefer working on your own laptop, you first need to install Azure CLI module on your laptop or PC. Once this process is complete, you can start running commands directly on your laptop, either in Command Prompt application or PowerShell application. Since the proposed solution mentions installing the CLI module in the first place, and then running the command, the proposed solution will technically meet the goal.

You are working on a project in Azure and multiple departments from your company are involved. Each department uses the same 30+ Azure resources on a daily basis. Your manager has asked you to implement a solution to automate the deployment of the Azure resources. Which of the following options should you use?

In Azure, Azure Resource Manager templates can help you automate Azure resources deployment.

Your company is currently running two Azure subscriptions: Production and Production_2.0. Your manager has asked you to find a way to merge the two subscriptions into a single subscription. Please evaluate the second statement and select Yes if the statement is true, otherwise select No. You can merge Production and Production_2.0 subscriptions into a single subscription by opening an Azure service request. ​ Yes (Incorrect)

Merging or combining two or multiple Azure subscriptions into a single subscription is simply not possible. For this specific scenario, what you could do is migrate all resources deployed in one subscription to the other subscription. This way, you could be running all your resources inside a single subscription, but again merging or combining subscriptions into a single one is not possible.

All outbound traffic sent from Azure Windows server virtual machines is encrypted by default.

The question is rather vague as it would depend on the configuration of the host on the Internet. Windows Server does come with a VPN client and it also supports other encryption methods such IPSec encryption or SSL/TLS, so it could encrypt the traffic if the Internet host was configured to require or accept the encryption. However, the VM could not encrypt the traffic to an Internet host that is not configured to require the encryption. Anyway, some configuration needs to be done, outbound traffic encryption doesn't happen by default.

All Azure customers can use services in public preview.​

The statement is definitely true. Usually, when Microsoft releases a new service, the service is released in private preview phase. During private preview, Microsoft will invite a few customers to test the new service and provide feedback. Also during private preview phase, regular support services are not available.

All Azure customers can use services in private preview.​

Usually, when Microsoft releases a new service, the service is released in private preview phase. During private preview, Microsoft will invite a few customers to test the new service and provide feedback. Also during private preview phase, regular support services are not available. When the service is mature and considered ready for production environments testin, Microsoft will transition the service to public preview phase. During this phase, any customer can run and test the service. As opposed to private preview, Microsoft teams will provide formal support services in this phase. The last step is migrating the service to generally available (GA) phase. During public preview phase, there may be functionalities or features fixing as well, but once the service is transitioned to GA, the new service is considered stable and ready for real production workloads. Also, the service is covered by support via all official Microsoft support channels.