Microsoft Certified: Azure Fundamentals
What can you use to define the resources you want to provision in a declarative JSON format?
By using ARM templates, you can describe the resources you want to use in a declarative JSON format. Azure Resource Manager (ARM) templates
What can you use to create resources in Azure and includes a validation step to ensure all resources are created in a specific order based on dependencies, in parallel and idempotent?
ARM templates define an application's infrastructure requirements for a repeatable deployment that is done in a consistent manner. A validation step ensures that all resources can be created in the proper order based on dependencies, in parallel and idempotent. Azure resource manager
Deploying and configuring cloud-based resources quickly as business requirements change is called [answer choice].
Agility means that you can deploy and configure cloud-based resources quickly as app requirements change. Scalability means that you can add RAM, CPU, or entire virtual machines to a configuration. Elasticity means that you can configure cloud-based apps to take advantage of autoscaling, so apps always have the resources they need. High availability means that cloud-based apps can provide a continuous user experience with no apparent downtime, even when things go wrong. Agility
Which two services are provided by Azure AD? Each correct answer presents a complete solution.
Azure AD provides services for verifying identity and access to applications and resources. SSO enables you to remember a single username and password to access multiple applications and is available in Azure AD. authentication single sign on
Which two tools are accessible via Azure Cloud Shell and allows you to write Bash scripts to manage an Azure environment?
Azure CLI is an executable program with which a user can execute commands in Bash that call the Azure REST API. Azure Cloud Shell also supports Azure PowerShell as an executable program. Azure Powershell Azure CLI
Which two protocols are used to access Azure file shares? Each correct answer presents a complete solution.
Azure Files offers fully managed file shares in the cloud that are accessible via industry-standard SMB and NFS protocols. Network file system server message block
Which Azure service can generate an alert if virtual machine utilization is over 80% for five minutes?
Azure Monitor is a platform for collecting, analyzing, visualizing, and alerting based on metrics. Azure Monitor can log data from an entire Azure and on-premises environment. Azure monitor
What can you use to ensure that new and existing Azure resources stay in compliance with corporate standards?
Azure Policy is a service in Azure that enables you to create, assign, and manage policies that control or audit resources. These policies enforce different rules across all resource configurations so that the configurations stay compliant with corporate standards. Azure Policy
Which Azure Blob storage tier stores data offline and offers the lowest storage costs and the highest costs to access data?
The Archive storage tier stores data offline and offers the lowest storage costs, but also the highest costs to rehydrate and access data. The Hot storage tier is optimized for storing data that is accessed frequently. Data in the Cool access tier can tolerate slightly lower availability, but still requires high durability, retrieval latency, and throughput characteristics similar to hot data. Archive
You plan to build a new solution in Azure that will use platform as a service (PaaS) products. What should you use to estimate the monthly costs?
The Azure Pricing calculator allows you to estimate and configure according to your specific requirements. You will then receive a consolidated estimated price and a detailed breakdown of the costs associated with each resource you added to your solution. Azure Pricing Calculator
Which two tools can you use to create a new Azure virtual machine from a mobile device that runs Android? Each correct answer presents complete solution.
The Azure portal can run on devices that have the Android operating system installed. The browser can be any type, such as Internet Explorer 11, Chrome, Firefox, or Safari (all the latest versions). When you visit the portal, you will see Cloud Shell. Users can then access Bash and PowerShell from within Cloud Shell. You can use Bash and PowerShell to create Azure virtual machines. The azure Portal PowerShell in azure cloud shell
[Answer choice] are physically separate datacenters within an Azure region.
Availability zones are physically separate datacenters within an Azure region. Each availability zone is made up of one or more datacenters equipped with independent power, cooling, and networking. Availability zones
What can you use to execute code in a serverless environment?
Azure Functions allows you to run code as a service without having to manage the underlying platform or infrastructure. Azure Logic Apps is similar to Azure Functions, but uses predefined workflows instead of developing your own code. Azure functions
Which scenario is a use case for a VPN gateway?
A VPN gateway is a type of virtual network gateway. Azure VPN Gateway instances are deployed to a dedicated subnet of a virtual network. You can use them to connect on-premises datacenters to virtual networks through a Site-to-Site (S2S) VPN connection. connecting on premises datacenters
[Answer choice] is the deployment and management service for Azure.
ARM is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in an Azure subscription. You use management features, such as access control, resource locks, and resource tags, to secure and organize resources after deployment. Azure resource manager
What are two basic services provided by all cloud providers? Each correct answer presents a complete solution.
All cloud providers provide compute and storage services. Colocation is when a business rents space in a shared physical datacenter. Application development is the responsibility of the customer and is typically done either in-house or through a third party. Compute/storage
To which object or level is an Azure role-based access control (RBAC) role applied?
An Azure RBAC role is applied to a scope, which is a resource or set of resources that the access applies to. Resource locks prevent the accidental change or deletion of a resource. Resource tags are used to locate and act on resources associated with specific workloads, environments, business units, and owners. Policies enforce different rules across resource configurations so that the configurations stay compliant with corporate standards. scope
Which two features are available by using Azure Cost Management + Billing? Each correct answer presents a complete solution.
Azure Cost Management allows you to create and manage cost and usage budgets by monitoring resource demand trends, consumption rates, and cost patterns. It also allows you to use historical data to generate reports and forecast future usage and expenditures. Create and manage budgets. generate historical reports and forecast future usage
Which storage service offers fully managed file shares in the cloud that are accessible by using Server Message Block (SMB) protocol?
Azure Files offers fully managed file shares in the cloud with shares that are accessible by using Server Message Block (SMB) protocol. Mounting Azure file shares is just like connecting to shares on a local network. Azure files
You need to create a custom solution that uses thresholds to trigger autoscaling functionality to scale an app up or down to meet user demand. What should you include in the solution?
Azure Monitor is a platform that collects metric and logging data, such as CPU percentages. The data can be used to trigger autoscaling. Azure monitor
What can you use to allow a user to manage all the resources in a resource group?
Azure RBAC allows you to assign a set of permissions to a user or group. Resource tags are used to locate and act on resources associated with specific workloads, environments, business units, and owners. Resource locks prevent the accidental change or deletion of a resource. Key Vault is a centralized cloud service for storing an application secrets in a single, central location. Azure role based access control
Which cloud service model is used by Azure SQL Database?
Azure SQL Database is a PaaS database engine. platform as a service (PaaS)
You need to recommend a solution for Azure virtual machine deployments. The solution must enforce company standards on the virtual machines. What should you include in the recommendation?
Azure policies will allow you to enforce company standards on new virtual machines when combined with Azure VM Image Builder and Azure Compute Gallery. By using Azure Policy and role-based access control (RBAC) assignments, enterprises can enforce standards on Azure resources. But on virtual machines, these mechanisms only affect the control plane or the route to the virtual machine. Azure Policy
What is an advantage of cloud computing compared to on-premises deployments?
Cloud computing allows you to scale more quickly. Owning your own CPUs and having full access in the event of an internet outage are not features of cloud computing. Working from multiple workstations is not specific to cloud computing compared to an on-premises deployment. You can scale more quickly
Which two characteristics are common advantages of cloud computing? Each correct answer presents a complete solution.
Cloud-based apps can provide a continuous user experience with no apparent downtime, even when things go wrong. You can deploy apps and data to regional datacenters around the globe, thereby ensuring that your customers always have the best performance in their region. Apps in cloud computing can scale vertically and horizontally. In a public cloud model, you do not get physical access to servers, as they are managed by the cloud provider. high availability geo-distribution
What Azure AD feature can you use to ensure that users can only access Microsoft Office 365 applications from approved client applications?
Conditional Access allows administrators to control, allow, or deny access to resources based on certain signals. You can require that access to certain applications only be allowed if the users are using an approved client application. MFA is a process whereby a user is prompted during the sign-in process for an additional form of identification. Examples include a code on their mobile phone or a fingerprint scan. Conditional access
What can you use to ensure that users authenticate by using multi-factor authentication (MFA) when they attempt to sign in from a specific location?
Conditional Access can use signals to determine information about authentication attempts, and then determine whether to block access or require additional verifications, such as MFA. Conditional Access
What can you use to ensure that a user can only access applications from compliant devices?
Conditional Access is a tool that Azure AD uses to allow or deny access to resources based on identity signals, such as the device being used. SSO enables a user to sign in one time and use that credential to access multiple resources and applications from different providers. MFA is a process whereby a user is prompted during the sign-in process for an additional form of identification. Hybrid identity solutions create a common user identity for authentication and authorization to all resources, regardless of location. Conditional Access
An example of [answer choice] is automatically scaling an application to ensure that the application has the resources needed to meet customer demands.
Elasticity refers to the ability to scale resources as needed, such as during business hours, to ensure that an application can keep up with demand, and then reducing the available resources during off-peak hours. Agility refers to the ability to deploy new applications and services quickly. High availability refers to the ability to ensure that a service or application remains available in the event of a failure. Geo-distribution makes a service or application available in multiple geographic locations that are typically close to your users. Elasticity
Which two services can you use to establish network connectivity between an on-premises network and Azure resources? Each correct answer presents a complete solution.
ExpressRoute connections and Azure VPN Gateway are two services that you can use to connect an on-premises network to Azure. Bastion provides a web interface to remotely administer Azure virtual machines by using SSH/RDP. Azure Firewall is a stateful firewall service used to protect virtual networks. Azure VPN gateway/Express route
What should you proactively review and act on to avoid service interruptions, such as service retirements and breaking changes?
Health advisories are issues that require that you take proactive action to avoid service interruptions, such as service retirements and breaking changes. Service issues are problems such as outages that require immediate actions. Health advisories
Which cloud service model provides you with the most control over the hardware that runs applications?
IaaS is the most flexible category of cloud services. It aims to give you complete control over the hardware that runs applications. Users do not control the operating system and do not configure the underlying servers in PaaS. With SaaS, you are using as-is software hosted in the cloud, instead of creating a platform to host a software yourself. infrastructure as a service
What are two characteristics of a consumption-based model? Each correct answer presents a complete solution.
In a consumption-based model, you do not pay for anything until you start using resources, and you only pay for what you use. If you stop using a resource, you stop paying for it. High expenditures are usually associated with the purchase of the physical infrastructure, which is not needed in a consumption-based model. no upfront costs the ability to stop paying for resources that are no longer needed
Which two attributes are characteristics of the private cloud deployment model? Each correct answer presents a complete solution.
In a private cloud, hardware must be purchased for start up and maintenance. In a private cloud, organizations control resources and security. Quick provisioning is a characteristic of the public cloud deployment model. Paying only for what is used is a characteristic of the public cloud deployment model. Hardware must be purchased The company has complete control over physical resources and security
What are two characteristics of the public cloud deployment model? Each correct answer presents a complete solution.
In a public cloud, services are offered over the internet and are available to anyone who wants to purchase them. A private cloud is limited to a single organization. Cloud resources, such as servers and storage, are owned and operated by a third-party cloud service provider and delivered over the internet. A private cloud consists of computing resources used exclusively by users from one business or organization. Services are offered over the internet and are available to anyone who wants to purchase them. Servers and storage are owned and operated by a third-party cloud service provider.
Which two scenarios are common use cases for Azure Blob storage? Each correct answer presents a complete solution.
Low storage costs and unlimited file formats make blob storage a good location to store backups and archives. Blob storage can be reached from anywhere by using an internet connection. Azure Disk Storage provides disks for Azure virtual machines. Azure Files supports mounting file storage shares. storing data for backup and restore serving images or documents directly to a browser
What Azure AD feature can you use to configure security authentication that requires users to use their mobile phone to sign in?
MFA is the concept of requiring something more than only a password to sign in to an application. You can use the mobile phone to receive a phone call, text, or a code to get authenticated. Multi factor authentication
Which resource can you use to manage access, policies, and compliance across multiple subscriptions?
Management groups can be used in environments that have multiple subscriptions to streamline the application of governance conditions. Resource groups can be used to organize Azure resources. Administrative units are used to delegate the administration of Azure AD resources, such as users and groups. Accounts are used to provide access to resources Management Groups
In which two deployment models are customers responsible for managing operating systems that host applications? Each correct answer presents a complete solution.
Operating systems are managed by customers when using IaaS or an on-premises deployments. The operating systems are not accessible in PaaS and SaaS deployments. Infrastructure as a service on premises
Which Azure component allows you to replicate resources across a geography to ensure business continuity during a natural disaster at the primary site?
Region pairs allow the replication of Azure resources across geographies to help ensure that a secondary region is available in case of any disaster at the primary region. region pairs
Why is cloud computing often less expensive than on-premises datacenters? Each correct answer presents a complete solution.
Renting compute and storage services and being billed for only what you use often lowers operating expenses. Depending on the service and the type of network bandwidth, charges can be incurred. Cloud service offerings often provide functionality that can be difficult or cost-prohibitive to deploy on-premises, especially for smaller organizations. Major cloud providers offer services around the world. Making it easy and relatively inexpensive to deploy services close to where your users reside. You are only billed for what you use
You need to associate the costs of resources to different groups within an organization without changing the location of the resources.
Resource tags can be used to group billing data and categorize costs by runtime environment, such as billing usage for virtual machines running in a production environment. Resource Tags
Which two components are created in an Azure subscription? Each correct answer presents a complete solution.
Resources can only be associated with a single subscription. Subscriptions may be grouped into management groups. An account may be associated with multiple subscriptions. Resources/resources groups
Which cloud service model is used by Microsoft Office 365?
SaaS allows users to connect to and use cloud-based apps over the internet. Common examples are email, calendaring, and Office tools, such as Office 365. Software as a service
Which type of cloud service model is typically licensed through a monthly or annual subscription?
SaaS is software that is centrally hosted and managed for you and your users or customers. Usually, one version of the application is used for all customers, and it is licensed through a monthly or annual subscription. PaaS and IaaS use a consumption-based model, so you only pay for what you use. Software as a service
Increasing compute capacity for an app by adding instances of resources such as virtual machines is called [answer choice].
Scaling horizontally increases compute capacity by adding instances of resources, such as adding virtual machines to the configuration. You scale vertically by adding RAM or CPUs to a virtual machine. Disaster recovery keeps data and other assets safe in the event of a disaster. High availability minimizes downtime when things go wrong. Horizontal Scaling
What can you use to connect Azure resources, such as Azure SQL databases, to an Azure virtual network?
Service endpoints are used to expose Azure services to a virtual network, providing communication between the two. ExpressRoute is used to connect an on-premises network to Azure. NSGs allow you to configure inbound and outbound rules for virtual networks and virtual machines. Peering allows you to connect virtual networks together. Service endpoints
Which two actions can be performed by using the graphical user interface (GUI) in the Azure portal? Each correct answer presents a complete solution.
The Azure portal provides a GUI to view all the services you are using, create new services, configure your services, and view reports. Create new resources review a graphical view of all services you are using
You need to compare the costs of running an application in an on-premises datacenter with the costs of running the application in Azure. What should you use to assist you?You need to compare the costs of running an application in an on-premises datacenter with the costs of running the application in Azure. What should you use to assist you?
The TCO Calculator helps you estimate the cost savings over time of operating a solution in Azure compared to operating in an on-premises datacenter. Total cost of ownership
You need to identify which Azure services are compliant with ISO 27001 Information Security Management Standards. Where should you go to locate the information?
The Trust Center showcases the Microsoft principles for maintaining data integrity in the cloud and how Microsoft implements and supports security, privacy, compliance, and transparency in all Microsoft cloud products and services. Microsoft trust center
Which Azure compute service can you use to deploy and manage a set of identical virtual machines?
Virtual Machine Scale Sets are an Azure compute resource that you can use to deploy and manage and scale a set of identical virtual machines. Azure Virtual scale sets
Which Azure resource is a software emulation of a physical computer that includes a virtual processor, memory, storage, and networking resources?
Virtual machines are software emulations of physical computers. They include a virtual processor, memory, storage, and networking resources. Virtual machines host an operating system, and you can install and run software just like on a physical computer. Virtual machines
In cloud computing, [answer choice] allows you to deploy applications to regional datacenters around the world.
You can deploy apps and data to regional datacenters around the globe, thereby ensuring that your customers always have the best performance in their region. This is referred to as geo-distribution. Geo Location
What can you use to find information about planned maintenance for Azure services that are critical to your organization?
You can drill down to the affected services, regions, and details to show how an event will affect you and what you must do. Most of these events occur without any impact to you and will not be shown. In a rare case that a reboot is required, Service Health allows you to choose when to perform the maintenance to minimize the downtime Azure service health
You need to allow resources on two different Azure virtual networks to communicate with each other.
You can link virtual networks together by using virtual network peering. Peering enables resources in each virtual network to communicate with each other. Peering
What can you use to get notification about an outage in a specific Azure region?
Service Health notifies you of Azure-related service issues, such as region-wide downtime. Azure service health
Which type of strategy uses a series of mechanisms to slow the advancement of an attack that aims to gain unauthorized access to data?
A defense in depth strategy uses a series of mechanisms to slow the advancement of an attack that aims to gain unauthorized access to data. The principle of least privilege means restricting access to information to only the level that users need to perform their work. A DDoS attack attempts to overwhelm and exhaust an application's resources. The perimeter layer is about protecting an organization's resources from network-based attacks. Defense in depth
What can you use to automatically detect performance anomalies for web apps?
Application Insights is a feature of Azure Monitor that allows you to monitor running applications, automatically detect performance anomalies, and use built-in analytics tools to see what users do on an app. Azure application insights
Which two Azure resources can make use of availability zones? Each correct answer presents a complete solution.
Availability zones are primarily for virtual machines, managed disks, load balancers, and SQL databases. AZure SQL databases virtual machines
You need to be notified when there are new recommendations for reducing Azure costs. Which tool should you use?
Azure Advisor evaluates Azure resources and makes recommendations to help improve reliability, security, and performance, achieve operational excellence, and reduce costs. Azure Advisor
What can you use to manage servers across cloud platforms and on-premises environments?
Azure Arc simplifies governance and management by delivering a consistent multi-cloud and on-premises management platform. Azure Arc
Which Azure Storage service should you use to store unstructured files, such as images, that will be served on webpages?
Azure Blob storage is an object storage solution that you can use to store massive amounts of unstructured data, such as text or binary data. Azure blob storage
Which storage service should you use to store thousands of files containing text and images?
Azure Blob storage is an object storage solution that you can use to store massive amounts of unstructured data, such as text or binary data. Azure blob storage
What can you use to restrict the deployment of a virtual machine to a specific location?
Azure Policy can help to create a policy for allowed regions, which enables you to restrict the deployment of virtual machines to a specific location. Azure Policy
You need to ensure that multi-factor authentication (MFA) is enabled on accounts with write permissions in an Azure subscription. What should you implement?
Azure Policy is a service in Azure that enables you to create, assign, and manage policies that control or audit resources. Azure Policy
What uses the infrastructure as a service (IaaS) cloud service model?
Azure Virtual Machines is an IaaS offering. The customer is responsible for the configuration of the virtual machine as well as all operating system configurations. Azure App Services and Azure Cosmos DB are PaaS offerings. Microsoft Office 365 is a SaaS offering. Azure virtual machines
Select the answer that correctly completes the sentence. [Answer choice] refers to upfront costs incurred one time, such as hardware purchases.
Capital expenditures are one-time expenses that can be deducted over time. Operational expenditures are billed as you use services and a do not have upfront costs. Capital expenditures
What are two services that allow you to run applications in containers? Each correct answer presents a complete solution.
Containers are a virtualization environment. Much like running multiple virtual machines on a single physical host, you can run multiple containers on a single physical or virtual host. Unlike virtual machines, you do not manage the operating system for a container. Azure containers instances/ Azure kurbenetes service
What is high availability in a public cloud environment dependent on?
Different services have different SLAs. Sometimes different tiers of the same service will offer different SLAs, which can increase or decrease the promised availability. the service level agreement
In a region pair, a region is paired with another region in the same [answer choice].
Each Azure region is always paired with another region within the same geography, such as US, Europe, or Asia, at least 300 miles away. Geography
You need to review the root cause analysis (RCA) report for a service outage that occurred last week. Where should you look for the report?
After an outage, Service Health provides official incident reports called root cause analysis (RCA), which you can share with stakeholders. Azure service health
What can you use to sync identities from an on-premises Active Directory Domain Services (AD DS) domain to Azure AD?
Azure AD Connect syncs user identities from an on-premises Active Directory Domain Services (AD DS) domain to Azure AD. Azure AD Connect allows you to use features such as single sign-on (SSO), MFA, and self-service password reset (SSPR) in both systems. SSPR prevents users from using known compromised passwords. Azure AD connect.
You need to allow resources on two different Azure virtual networks to communicate with each other. What should you configure? Select only one answer. a network security grou
You can link virtual networks together by using virtual network peering. Peering enables resources in each virtual network to communicate with each other. Peering
Increasing compute capacity for an app by adding RAM or CPUs to a virtual machine is called [answer choice].
You scale vertically to increase compute capacity by adding RAM or CPUs to a virtual machine. Scaling horizontally increases compute capacity by adding instances of resources, such as adding virtual machines to the configuration. Disaster recovery keeps data and other assets safe in the event of a disaster. High availability minimizes downtime when things go wrong. Vertical scaling
What can be applied to a resource to prevent accidental deletion?What can be applied to a resource to prevent accidental deletion?What can be applied to a resource to prevent accidental deletion?What can be applied to a resource to prevent accidental deletion?What can be applied to a resource to prevent accidental deletion?
A resource lock prevents resources from being accidentally deleted or changed. Resource tags offer the custom grouping of resources. Policies enforce different rules across all resource configurations so that the configurations stay compliant with corporate standards. An initiative is a way of grouping related policies together. Resource Lock
[Answer choice] is the logical container used to combine and organize Azure resources.
Resources are combined into resource groups, which act as a logical container into which Azure resources like web apps, databases, and storage accounts, are deployed and managed. A resource group
In which cloud service model is the customer responsible for managing the operating system?
IaaS consists of virtual machines and networking provided by the cloud provider. The customer is responsible for the OS and applications. The cloud provider is responsible for the OS in PaaS and SaaS. Infrastructure as a service
Which type of cloud service are virtual networks?
IaaS helps you reduce the cost and complexity of maintaining a physical server and its datacenter infrastructure. Virtual networks are part of the IaaS cloud service. Infrastructure as a service
In a platform as a service (PaaS) model, which two components are the responsibility of the cloud service provider? Each correct answer presents a complete solution.
In PaaS, the cloud provider is responsible for the operating system, physical datacenter, physical hosts, and physical network. In PaaS, the customer is responsible for accounts and identities. operating system physical network
Which two factors affect Azure costs? Each correct answer presents a complete solution.
Usage meters, such as CPU time, disk size, and write operations, are used to calculate your bill for an Azure resource. Deleting or deallocating a resource means that you will no longer be billed for it. Different regions can have different associated prices. Resources cost the same no matter the time of day or the day of the week. Resource usage/resource location
