Azure Fundamentals

Elasticity

App services web apps can automatically request more computing services during a spike in traffic

Which is likely the best way for Tailwind Traders to identify which billing department each Azure resource belongs to?

Apply a tag to each resource that includes the associated billing department.

Resources in the Dev and Test environments are each paid for by different departments. What's the best way to categorize costs by department?

Apply a tag to each virtual machine that identifies the appropriate billing department.

What's the best way to ensure that the development team doesn't provision too many virtual machines at the same time?

Apply spending limits to the development team's Azure subscription.

You want to be alerted when new recommendations to improve your cloud environment are available. Which service will do this?

Azure Advisor

Which Azure Storage option is better for storing data for backup and restore, disaster recovery, and archiving?

Azure Blob Storage

Which of the following choices would not be used to automate a CI/CD process?

Azure Boards

You need to create a human-computer interface that uses natural language to answer customer questions. Which product option should you select as a candidate?

Azure Bot Service

You need to identify the content of product images to automatically create alt tags for images formatted properly. Which product option is the best candidate?

Azure Cognitive Services

Your development team is interested in writing Graph-based applications that take advantage of the Gremlin API. Which option would be ideal for that scenario?

Azure Cosmos DB

An attacker can bring down your website by sending a large volume of network traffic to your servers. Which Azure service can help Tailwind Traders protect its App Service instance from this kind of attack?

Azure DDoS Protection

Tailwind Traders uses the LAMP stack for several of its websites. Which option would be ideal for migration?

Azure Database for MySQL

Which service could help you manage the VMs that your developers and testers need to ensure that your new app works across various operating systems?

Azure DevTest Labs

Which of the following services should be used when the primary concern is to perform work in response to an event (often via a REST command) that needs a response in a few seconds?

Azure Functions

You need to process messages from a queue, parse them by using some existing imperative logic written in Java, and then send them to a third-party API. Which serverless option should you choose?

Azure Functions

You want to orchestrate a workflow by using APIs from several well-known services. Which is the best option for this scenario?

Azure Logic Apps

Your team has limited experience with writing custom code, but it sees tremendous value in automating several important business processes. Which of the following options is your team's best option?

Azure Logic Apps

You need to predict future behavior based on previous actions. Which product option should you select as a candidate?

Azure Machine Learning

Which service is a platform that powers Application Insights, monitoring for VMs, containers, and Kubernetes?

Azure Monitor

Which service lacks features to assign individual developers tasks to work on?

Azure Pipelines

Which service provides official outage root cause analyses (RCAs) for Azure incidents?

Azure Service Health

A company wants to build a new voting kiosk for sales to governments around the world. Which IoT technologies should the company choose to ensure the highest degree of security?

Azure Sphere

Tailwind Traders has millions of log entries that it wants to analyze. Which option would be ideal for analysis?

Azure Synapse Analytics

Where can the IT department find reference blueprints that it can apply directly to its Azure subscriptions?

Azure compliance documentation

Which of the following is a logical unit of Azure services that links to an Azure account?

Azure subscription

Which of the following statements is not true about cloud computing?

Cloud computing resources are usually limited to specific geographic regions.

What's the easiest way for Tailwind Traders to combine security data from all of its monitoring tools into a single report that it can take action on?

Collect security data in Azure Sentinel.

How can the IT department ensure that employees at the company's retail stores can access company applications only from approved tablet devices?

Conditional Access

How can Tailwind Traders most easily implement a deny by default policy so that VMs can't connect to each other?

Create a network security group rule that prevents access from another VM on the same network.

Which is the best way for Tailwind Traders to ensure that the team deploys only cost-effective virtual machine SKU sizes?

Create a policy in Azure Policy that specifies the allowed SKU sizes.

How can Tailwind Traders allow some users to control the virtual machines in each environment but prevent them from modifying networking and other resources in the same resource group or Azure subscription?

Create a role assignment through Azure role-based access control (Azure RBAC).

Machine Learning Service

Create algorithms by using Python

What is the first step that you would take in order to share an image file as a blob in Azure Storage?

Create an Azure Storage account.

How can Tailwind Traders enforce having only certain applications run on its VMs?

Create an application control rule in Azure Security Center.

What's the best way for Tailwind Traders to limit all outbound traffic from VMs to known hosts?

Create application rules in Azure Firewall.

Which is the most efficient way for the testing team to save costs on virtual machines on weekends, when testers are not at work?

Deallocate virtual machines when they're not in use.

Adding a third virtual machine reduces the composite SLA. How can Tailwind Traders offset this reduction?

Deploy extra instances of the same virtual machines across the different availability zones in the same Azure region.

Azure Advisor can do the following

Detect threats and vulnerabilities, ensure fault tolerance, help reduce spending, protect data from accidental deletion, speed up applications

Which of the following options isn't a type of cloud computing?

Distributed cloud

Which of the following options can you use to link virtual networks?

Encrypted network communication

ARM templates use Azure PowerShell syntax

False

An Azure dedicated host can be shared across multiple Azure subscriptions

False

In a PaaS scenario, the customer manages the OS

False

In an IaaS environment, the cloud tenant is responsible for routine hardware maintenance.

False

Machine learning models created in machine learning studio can be deployed and managed by Azure Machine Learning service

False

Spot VMs use standard SLAs

False

With Operating Expenses (OpEx), you are only responsible for the computing resources that you use.

False

You need to purchase an Azure account before you can use any Azure resources.

False

Which of the following choices isn't a benefit of using cloud services?

Geographic isolation

Tailwind Traders wants to create a secure communication tunnel between its branch offices. Which of the following technologies can't be used?

Implicit FTP over SSL

A company wants to quickly manage its individual IoT devices by using a web-based user interface. Which IoT technology should it choose?

IoT Central

You want to send messages from the IoT device to the cloud and vice versa. Which IoT technology can send and receive messages?

IoT Hub

Azure Government

Is only available in the USA

Which of the following can be used to manage governance across multiple Azure subscriptions?

Management groups

Where can the team access details about the personal data Microsoft processes and how the company processes it, including for Cortana?

Microsoft Privacy Statement

How can the IT department use biometric properties, such as facial recognition, to enable delivery drivers to prove their identities?

Multifactor authentication

Which of the following choices isn't a cloud computing category?

Networking-as-a-Service (NaaS)

Which of the following features doesn't apply to resource groups?

Resource groups can be nested.

Which is the best first step the team should take to compare the cost of running these environments on Azure versus in their datacenter?

Run the Total Cost of Ownership Calculator.

How can Tailwind Traders ensure that certain VM workloads are physically isolated from workloads being run by other Azure customers?

Run the VMs on Azure Dedicated Host.

How can the IT department reduce the number of times users must authenticate to access multiple applications?

SSO

Tailwind Traders wants to use Azure ExpressRoute to connect its on-premises network to the Microsoft cloud. Which of the following choices isn't an ExpressRoute model that Tailwind Traders can use?

Site-to-site virtual private network

Which is the best way for Tailwind Traders to safely store its certificates so that they're accessible to cloud VMs?

Store the certificates in Azure Key Vault.

As an administrator, you need to retrieve the IP address from a particular VM by using Bash. Which of the following tools should you use?

The Azure CLI

You're a developer who needs to set up your first VM to host a process that runs nightly. Which of the following tools is your best choice?

The Azure portal

What approach might the company take in adding the augmented reality (AR) preview service to its architecture?

The development team can create a prototype version of the app that includes the AR service that it tests out with select retail employees.

Azure Files Storage supports Azure Container Instances

True

Azure Monitor scales resources for cost and performance

True

File storage provides access to other VMs and on-premise servers through the use of SMB protocol, REST and native client libraries

True

GDPR is a standard enforced by a government agency

True

ISO is an international standards based, non regulatory agency

True

Web apps must be registered with Azure AD to support authentication and authorization services

True

When a blueprint is unassigned, all resources assigned by the blueprint remain in place, but blueprint locking is removed

True

Windows Virtual Desktop is a free service

True

You can use the Azure mobile app to restart a VM

True

Where can the legal team access information around how the Microsoft cloud helps them secure sensitive data and comply with applicable laws and regulations?

Trust Center

When a resource group is deleted

VMs in that resource group are deleted

Which Azure compute resource can be deployed to manage a set of identical virtual machines?

Virtual machine scale sets

Your company has a team of remote workers that need to use Windows-based software to develop your company's applications, but your team members are using various operating systems like MacOS, Linux, and Windows. Which Azure compute service would help resolve this scenario?

Windows Virtual Desktop

An initiative is

a collection of policies, usually grouped with the aim of achieving a single goal. All policies in an initiative are evaluated and an initiative can only include the policies that are located in the same subscription.

Azure premium subscriptions are required to

allow on-premises users to reset passwords and publish web apps using Azure AD

Azure sentinel can

build a baseline behavioral profile to identify anomalous activity

Azure Functions can

build event driven solutions and you only pay for the time spent running your code

Event Grid

builds event driven architectures that subscribe to Azure resources and route events to different endpoints

Azure app service

deploys a web application using PaaS for scalability and security

Azure pricing calculator

estimates monthly costs of cloud solutions

locks can be applied in the context of specific users and roles

false

99.99% in hours of downtime per year

one hour

Azure Regions are

paired with other regions, contain more than one data center and specify the location of resources

Azure Cloud Shell

runs cmdlet in scripting environments inside a browser

Health alerts

send text messages when planned maintenance is scheduled

Azure Multi Factor Authentication is required when

supporting users located on on-premises Active Directory (AD) only

Azure Powershell

uses cmdlet from laptops

Azure database for PostGreSQL general purpose tier includes

16 TB and uses premium storage

99% in hours of downtime per year

4 days

99.95% in hours of downtime per year

4 hours

What's the new composite SLA? Remember, the new SLA includes a third virtual machine and Azure Maps.

99.58%

What's the SLA for Azure Maps in terms of guaranteed uptime?

99.9%

What is the best infrastructure-as-code option for quickly and reliably setting up your entire cloud infrastructure declaratively?

ARM templates

Which of the following statements is a valid statement about an Azure subscription?

An Azure subscription is a logical unit of Azure services.