Az900

You plan to deploy a critical line - of - business application to Azure . The application will run on an Azure virtual machine . You need to recommend a deployment solution for the application . The solution must provide a guaranteed availability of 99.99 percent . What is the minimum number of virtual machines and the minimum number of availability zones you should recommend for the deployment ? Min number of virtual machines

2

You plan to deploy a critical line - of - business application to Azure The application will run on Azure virtual machine . You need to recommend a deployment solution for the application . The solution must provide a guaranteed availability of 99.99 percent . What is the minimum number of virtual machines and the minimum number of availability zones you should recommend for the deployment Minimum number of availability zones :

2

GDPR

A European policy that regulates data privacy and data protection .

The company would like to develop a cloud solution by making use of Azure Government . Azure Government can only be used by certain types of clients to develop cloud solutions . Which of the following are the types of customers that can make use of Azure Government in this situation ?

A United States government contractor . A United States government entity .

Azure Databricks

A big data analysis service for machine learning

Azure SQL Synapse Analytics

A cloud - based service that leverage massively parallel processing ( MPP ) to quickly run complex queries across petabytes of data in a relational database .

Azure Government

A dedicated public cloud for federal and state agencies in the United States .

Azure Synapse Analytics

A fully managed data warehouse that has integral security at every level of scale at no extra cost .

loT Central

A fully managed software as a service ( SaaS ) solution to connect , monitor , and manage loT devices at scale

Azure Cosmos DB

A globally distributed database that supports NoSQL

Azure SQL Database

A managed relational cloud database service .

loT Hub

A managed service that provides bidirectional communication between loT devices and Azure

Azure Cognitive Services

A simplified tool to build intelligent Artificial Intelligence ( Al ) applications

Azure Advisor

A tool that provides guidance and recommendations to improve an Azure environment

You plan to store 20 TB of data in Azure . The data will be accessed infrequently and visualized by using Microsoft Power Bl . You need to recommend a storage solution for the data . Which two solution should you recommend ?

A. Azure Data Lake

Which Azure service should you use to collect events from multiple resources into a centralized repository ?

A. Azure Event Hubs

Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks ?

A. Azure Firewall

Which Azure service provides a set of version control tools to manage code ?

A. Azure Repos

Your company has several business units . Each business unit requires 20 different Azure resources for daily operation . All the business units require the same type of Azure resource . You need to recommend a solution to auto mate the creation of the Azure resources What should you include in the recommendations ?

A. Azure Resource Manager templates

A support engineer plans to perform several Azure management tasks by using the Azure CLI . You Install the CLI on a computer . You need to tell the support engineer which tools to use to run the CLI . Which tow tools should you instruct the support engineer to use ?

A. Command Prompt C. Windows PowerShell

You plan to deploy several Azure virtual machines . You need to ensure that the services running on the virtual machines remain available if a single data center fails . What are two possible solutions .

A. Deploy the virtual machines to two or more availability zones D. Deploy the virtual machines to two or more regions

One of the benefits of Azure SQL Data Warehouse is that high availability is built into the platform .

A. No change is needed

If Microsoft plans to end support for an Azure service that does NOT have a successor service , Microsoft will provide notification at least 12 months before .

A. No change is needed .

Your company has an on - premises network that contains multiple servers The company plans to reduce the following administrative responsibilities . Backing up application data . Replacing failed server hardware . Managing physical server security . Updating server operating systems ● Managing permissions to shared documents The company plans to migrate servers to Azure virtual machines . You need to identify which administrative responsibilities will be eliminated after the planned migration . Which two responsibilities should you identify ?

A. Replacing failed server hardware C. Managing physical server security systems

What is guaranteed in an Azure Service Level Agreement ( SLA ) for virtual machines ?

A. Uptime

244. You have an Azure environment . You need to create a new Azure virtual machine from a tablet that runs the Android operating system . What are three possible solution ?

A. Use Bash in Azure Cloud Shell . B. Use PowerShell in Azure Cloud Shell E. Use the Azure portal .

265. An Azure administrator plans to run a PowerShell script that creates Azure resources . You need to recommend which computer configuration to use to run the script . Which three computers can run the script ?

A. a computer that runs macOS and has PowerShell Core 6.0 installed . B. a computer that runs Windows 10 and has the Azure PowerShell module installed . C. a computer that runs Linux and has the Azure PowerShell module installed .

You plan to deploy several Azure virtual machines . You need to control the ports that devices on the internet can use to access the virtual machines . What should you use ?

A. a network security group ( NSG )

You have an Azure environment that contains multiple Azure virtual machines . You plan to implement a solution that enables the computers on your on - premises network to communicate to the Azure virtual machines . You need to recommend which Azure resources must be created for the planned solution . Which two Azure resources should you include in the recommendation ? Each correct answer presents part of the solution .

A. a virtual network gateway E. a gateway subnet Accessibility

You have an on - premises network that contains several to Azure . You need to recommend the solution to ensure that some of the servers are available if a servers . You plan to migrate all the servers single Azure date center goes offline for an extended period . What should you include in the recommendation ?

A. fault tolerance

You have 50 virtual machines hosted on - premises and 50 virtual machines hosted in Azure . The on premises virtual machines and the Azure virtual machines connect to each other . Which type of cloud modes is this ?

A. hybrid

Your company plans to migrate to Azure . The company has several departments . All the Azure resources used by each department will be managed by a department administrator . What are two possible techniques to segment Azure for the departments ?

A. multiple subscriptions D. multiple resource groups

Your company plans to deploy several web servers and several database servers to Azure . You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers . What should you include in the recommendation ?

A. network security groups ( NSGs )

To which cloud models can you deploy physical severs ?

A. private cloud and hybrid cloud only

You company has 10 offices You plan to generate several billing reports from the Azure portal . Each report will contain the Azure resource utilization of each office . Which Azure Resource Manager feature should you use before you generate the reports ?

A. tags

Your company plans to migrate all its data and resources to Azure . The company's migration plan states that only Platform as a Service ( PaaS ) solutions must be used in Azure . You need to deploy an Azure environment that meets the company's migration plan . What should you create ?

An Azure App Service and Azure SQL databases .

Azure DevOps

An integrated solution for the deployment of code

Azure HDInsight

An open - source framework for the distributed processing and analysis of bid data sets in clusters .

ISO

An organization that defines international standards across all industries .

NIST

An organization that defines standards used by the United States government .

Azure Sentinel

Analyze security log files from Azure virtual machines

is the process of verifying a user's credentials .

Authentication

Azure Sentinel uses playbooks to

Automatically respond to threats .

enables used to authenticate to multiple application by using single sign - on ( SSO ) security groups

Azure Active Directory ( Azure AD )

From _____you can view which user turned off a specific virtual machine during the last 14 days .

Azure Activity Log

You plan to implement several security services for an Azure environment . You need to identify which Azure services must be used to meet the following security requirements Monitor threats by using sensors

Azure Advanced Threat Protection ATP )

You company plans to deploy several million sensors that will upload data to Azure . You need to identify which Azure resources must be created to support the planned solution . Which two resources should you identify ? Each correct answer presents part of the solution .

Azure Data Lake Azure loT Hub

______ is an Apache Spark - based analytics service . Azure Databricks

Azure Databricks

Your company implements to automatically add a watermark to Microsoft Word documents that contain credit card information .

Azure Information Protection

Which Azure service should you used to store certificates ?

Azure Key Vault

Your company plans to automate the deployment of servers to Azure Your manager is concerned that you may expose administrative credentials during the deployment You need to recommend an Azure solution that encrypts the administrative credentials during the deployment What should you include the recommendation

Azure Key Vault

Your company plans to deploy an Artificial Intelligence ( Al ) solution in Azure . What should the company use to build test and deploy predictive analytics solutions ?

Azure Machine Learning Designer

a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment

Azure Resource Manger templates provide

You can enable just in time ( JIT ) VM access by using

Azure Security Center

You can view your company's regulatory compliance report from

Azure Security Center

What Azure service can you use as a security information and event management ( SIEM ) solution

Azure Sentinel

Enforce Azure MFA based on a condition :

Azure active directory Azure AD identify Protection

You can access Compliance Manager from the

Azure portal

You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region . Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1 ?

Azure virtual machines

Which service provides serverless computing in Azure ?

B. Azure Functions

You need to be notified when Microsoft plans to perform maintenance that can affect the resources deployed to an Azure subscription . What should you use ?

B. Azure Service Health

Which statement accurately describes the Modern Lifecycle Policy for Azure services ?

B. Microsoft provides a minimum of 12 months ' notice before ending support for a service .

89. Your Azure environment contains multiple Azure virtual machines . You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP . What are two possible solutions ?

B. Modify a network security group NSG ) D. Modify an Azure firewall

Your company has a Software Assurance agreement that includes Microsoft SQL Server licenses . You plan to deploy SQL Server on Azure virtual machines . What should you do to minimize licensing costs for the deployment ?

B. Use Azure Hybrid Benefit .

Your company has 10 departments The company plans to implement an Azure environment . You need to ensure that each department can use a different payment option for the Azure service it consumes .

B. a subscription

Your company has an Azure subscription that contains resources in several regions . You need to create the Azure resource that must be used to meet the policy requirement . What should you create ?

B. an Azure policy

What can Azure Information Protection encrypt ?

B. documents and email messages

You have an Azure web app . You need to manage the settings of the web app from an iPhone . What are two Azure management tools that you can use ?

B. the Azure portal C. Azure Cloud Shell

A support plan solution that give you best practice information , health status and notifications , and 24/7 access to billing information at the lowest possible cost is a Standard support plan . Review the underlined text . If it makes the statement correct , select No change is needed ' . If the statement is incorrect , select the answer choice that makes the statement correct .

Basic

You plan to deploy 20 virtual machines to an Azure environment . To ensure that a virtual machine . named VM1 cannot connect to the other virtual machines . VM1 must

Be deployed to a separate virtual network

You can use ____ in Azure to send email alerts when the cost of the current billing period for an Azure subscription exceeds a specified limit

Budget alerts

Who can use the Azure Total Cost of Ownership ( TCO ) calculator ?

C. Anyone

A team of developers at your company plans to deploy , and then remove 50 customized virtual machines each week . Thirty of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux . You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the ritual machines . What should you recommend ?

C. Azure DevTest Labs

What can you use to automatically send an alert if an administrator stops an Azure virtual machine ?

C. Azure Monitor

What should you use to evaluate whether your company's Azure environment meets regulatory requirements ?

C. Azure Security Center

Resource groups provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions .

C. Azure policies

You can use Advisor recommendation in Azure to send email billing period for an Azure subscription exceeds a specified limit . alerts when the cost of the current

C. Budget alerts

From Azure CloudShell , you can track your company's regulations , such as ISO 27001 .

C. Compliance Manager

What should you use to evaluate whether your company's Azure environment meets regulatory requirements ?

C. Compliance Manger from the Service Trust Portal

On which layer is DDOS protection applied ?

C. Perimeter layer

You have an Azure subscription . Where will you find details on the personal data collected by Microsoft , how Microsoft uses the data , and what the data is used for ?

C. The Microscope Privacy Statement

Which two types of customers are eligible to use Azure Government to develop a cloud solution ?

C. a United States government entity D. a United States government contractor

263. You plan to deploy a website to Azure . The website will be accessed by users worldwide and will host large video files . You need to recommend which Azure feature must be used to provide the best . video playback experience . What should you recommend ?

C. a content delivery network ( CDN )

In which type of cloud model are all the hardware resources owned by a third - party and shared between multiple tenants ?

C. public

Azure Data Lake Analytics

Can run massively parallel data transformation and processing programs across petabytes of data .

Your company has virtual machines ( VMs ) hosted in Microsoft Azure The VMs are located in a single Azure virtual network named VNet1 The company has users that work remotely The remote workers require access to the VM on VNet1 You need to provide access for the remote workers .

Configure a Point - to - Site ( P2S VPN

You plan to create an Azure virtual machine . You need to identify which storage service must be used to store the unmanaged data disks of the virtual machine . What should you identify ?

Containers: tables File shares: Queues

You attempt to create several managed Microsoft SQL Server instances in an Azure environment and receive a message that you must increase your Azure subscription limits . What should you do to increase the limits ?

Create a new support request

205. You need to ensure that when Azure Active Directory ( Azure AD ) users connect to Azure AD from the Internet by using an anonymous IP address , the users are prompted automatically to change their password . Which Azure service should you use ?

D. Azure AD Identity Protection

You need to ensure that when Azure Active Directory ( Azure AD ) users connect to Azure AD from the Internet by using an anonymous IP address , the users are prompted automatically to change their password . Which Azure service should you use ?

D. Azure AD Identity Protection

Your company is planning a deployment using Azure Database for PostgreSQL . The deployment should meet the following requirements : ● Up to 10 TB storage . Azure Premium Storage ● Point - in - time restore for up to 35 days You need to select the appropriate deployment and pricing tier to meet these requirements and minimize costs . What should you select ?

D. Azure Database for PostgreSQL Single Server General Purpose tier

You need to configure an Azure solution that meets the following requirements : Secures websites from attacks Generates reports that contain details of attempted attacks What should you include in the solution ?

D. DDoS protection

You plan to migrate several servers from an on - premises network to Azure . What is an advantage of using a public cloud service for the servers over an on - premises network ?

D. The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud

You have an on - premises network that contains 100 servers . You that provides additional resources to your users . The solution must minimize capital and operational need to recommend a solution expenditure costs . What should you include int eh recommendation ?

D. a hybrid cloud

You need to identify the type of failure for which an Azure Availability Zone can be used to protect access to Azure services . What should you identify ?

D. an Azure data center failure

You need to identify the type of failure for which an Azure Availability Zone can be used to protect access to Azure services . What should you identify ?

D. an Azure data center failure .

Azure Germany can be used by legal residents of Germany only .

D. any user or enterprise that requires it data to reside in Germany

What are two characteristics of the public cloud ? Each correct answer presents a complete solution .

D. metered pricing E. Self - service management

You have an Azure environment that contains 10 virtual networks and 100 virtual machines You need to limit the amount of inbound traffic to all the Azure virtual networks .

D. one Azure firewall

You company plans to migrate all on premises data to Azure . You need to identify whether Azure complies with the company's regional requirements .

D. the Trust Center

What is the first stage in the Microsoft Cloud Adoption Framework for Azure ?

Define your strategy

Azure Application Insights

Detects and diagnoses anomalies in web apps

Your company intends to subscribe to an Azure support plan . The support gam must allow for new support requests to be opened . Which of the following are support plans that will allow this ? Answer by dragging the correct option from the list to the answer area .

Developer Standard Professional Direct Premier

A cloud service that can be recovered after a failure occurs

Disaster recovery

Azure Security Center

Display the secure score for an Azure subscription

Aav Internal How should you calculate the monthly uptime percentage ?

Downtime in min: 60 Maximium minutes: 1440 Maximum available min- downtime in minutes: maximum availablr minutes Downtime in min: 60 Maximium minutes: 1440 Maximum available min: 1440

A cloud service that performs quickly when demand increases

Dynamic scalability

117. Your company hosts an accounting application named App1 that is used by all the customers of the company . App1 has low usage during the first three weeks of each month and very high usage during the last week of each month . Which benefit of Azure Cloud Services supports cost management for this type of usage pattern ?

Elasticity

Which task can you perform by using Azure Advisor ?

Estimate the costs of an Azure solution

A cloud service that remains available after a failure occurs

Fault tolerance

Azure Site Recovery provides _____for virtual machines

Fault tolernace

You plan to map a network drive from several computers that run Windows 10 to Azure Storage . You need to create a storage solution in Azure for the planned mapped drive . What should you create ?

File service in a storage account

You need to request that Microsoft increased a subscription quota limit for your company . Which blade should you use from the Azure portal ?

Help + Support

You need to view a list of planned maintenance events that can affect the availability of an Azure subscription . Which blade should you use from the Azure portal ?

Help + Support

Azure App Service

Hosts web apps

Match the cloud model to the correct advantage Provides a choice to use on - premises or cloud - based resources

Hybrid Cloud

You company plans to deploy several custom applications to Azure . The applications will provide invoicing services to the customers of the company . Each application will have several prerequisite applications and services installed You need to recommend a cloud deployment solution for all the applications recommend

Infrastructure as a Service ( IaaS )

Which cloud deployment solution is used for Azure virtual machines and Azure SQL databases ? Azure virtual machines

Infrastructure as a service ( IaaS )

152. You create a resource group named RG1 in Azure Resource Manager . You need to prevent he accidental deletion of the resources in RG1 . Which setting should you used ?

Locks

A cloud service that can be accessed quickly from the internet

Low latency

Azure HDInsight

Managed Apache Hadoop clusters in the cloud that enable you to process massive amounts of data .

You need to identify which blades in the Azure portal must be used to perform the following tasks : Browse available virtual machines images :

Marketplace

The explains what data Microsoft processes , how Microsoft processes the data , and the purpose of processing the data .

Microsoft Online Services Privacy Statement

You need to identify which blades in the Azure portal must be used to perform the following tasks : Which blade should you identify for each task ) Monitor the health of Azure services :

Monitor

Azure Application Insights

Monitors web applications .

Azure distributed denial of service ( DDoS ) protection is an example of protection that is implemented at the

Networking layer .

A Platform as a Service ( PaaS ) solution provides full control of operating systems that host applications

No

A Windows Virtual Desktop host poll that includes 20 session host support a maximum of 20 simultaneous user connections .

No

A Windows Virtual Desktop session host can run Windows 10 only

No

A company can extend a private cloud by adding its own physical servers to the public cloud .

No

A network security group ( NSG ) will encrypt all the network traffic sent from Azure to the Internet

No

A platform as a service PaaS ) solution that hosts web apps in Azure provides full control of the operating systems that host application

No

A private cloud must be disconnected from the internet

No

A resource group can have the Owner role assigned to multiple users

No

Adding resource groups in an Azure subscription generates additional costs .

No

After an Azure service becomes generally available , the service is no longer updated with new features .

No

All Azure Security Center features are free .

No

All Azure services in private preview must be accessed by using separate Azure portal .

No

All data that is copied to an Azure Storage account is backed up automatically to another Azure data center

No

All the Azure resources deployed to a resource group must use the same Azure region .

No

An Azure Storage account can contain up to 2 TB of data and up to one million files I

No

An Azure free account can contain an unlimited number of web apps

No

An Azure free account has a limit of 2TB of data that be uploaded to Azure

No

An Azure resource group contains multiple Azure subscriptions

No

An Azure service in general availability is released to a subset of Azure customers

No

An Azure service in private preview is released to all Azure customers

No

An Azure subscription can be associated to multiple Azure Active Directory ( Azure AD ) tenants .

No

An Azure virtual machine can be in multiple resource groups .

No

As user who is assigned the Owner role can transfer ownership of an Azure subscription

No

Authorization to access Azure resources can be provided only to Azure Active Directory ( Azure AD ) users .

No

Availability zones are used to replicate data and applications to multiple regions .

No

Availability zones can be implemented in all Azure regions .

No

Azure Active Directory Azure AD ) requires the implementation of domain . controllers on Azure virtual machines .

No

Azure Advisor can generate a list of Azure virtual machines that are protected by Azure Backup .

No

Azure Advisor provides recommendation on how to configure the network settings on

No

Azure Advisor provides recommendations on how to improve the security of an Azure Active DirectorAzure AD ) environment . running

No

Azure China is operated by Microsoft .

No

Azure Cosmos DB is an example of software as a service SaaS )

No

Azure Firewall will encrypt all the network traffic sent from Azur to the Internet

No

Azure Monitor can send alerts to Azure Active Directory security groups .

No

Azure Pay - As - You - Go pricing is an example of CapEx .

No

Azure resources can only access other resources in the same resource group .

No

Azure service in public preview can be manage only by using the Azure CLI .

No

Azure services in public preview are subject to a Service level Agreement ( SLA ) .

No

Azure virtual machines that run Windows Server 2016 can encrypt network traffic sent to the Internet

No

Building a data center infrastructure is an example of operational expenditure ( OpEx ) costs .

No

By copying several gigabits of data to Azure from an on - premises network over a VPN , additional data transfer costs are incurred .

No

By creating additional resource groups in an Azure subscription , additional costs are incurred

No

Companies can increase the Service Level Agreement ( SLA ) guaranteed uptime by purchasing multiple subscriptions

No

Copying 10 GB of data to Azure from an on - premises network over a VPN generates additional Azure data transfer costs .

No

Data transfers between Azure services located in different Azure regions are always free

No

Each Azure subscription can be managed by using a Microsoft account only .

No

Each Azure subscription can contain multiple account administrators .

No

Each user account in Azure Active Directory ( Azure AD ) can be assigned only one license

No

From Azure Service Health , an administrator can prevent a service failure

No

If you assign a tag to a resource group , all the Azure resources group are assigned to the same tag .

No

If you create two Azure virtual machines that use the B2S size , each virtual machine will always generate the same monthly costs .

No

If you implement the security recommendations provided by Azure Advisor , your company's secure score will decrease .

No

If your company uses an Azure free account , you will only be only be able to use a subset of Azure services .

No

In a public cloud model , only guest users at your company can access the resources in the cloud

No

In the public cloud model , only quest users at your company can access the resources in the cloud .

No

Microsoft SQL Server 2019 installed on an Azure virtual machine is an example of platform as a service ( PaaS )

No

North America is represented by a single Azure region .

No

Only virtual machines that run Windows Server can be created in availability zones .

No

Outbound data traffic from Azure to an on- [ remises network is always free .

No

Paying electricity for your datacenter is an example of OpEx .

No

Storing 1 TB of data in Azure Blob storage will always cost the same , regardless of the Azure region in which the data is located .

No

Support from MSDN forums is only provided to companies that have a pay - as - you - go subscription

No

The Archive access tier is set at the storage account level .

No

The Cool access tier is recommended for long term backups

No

The Service Level Agreement ( SLA ) for Azure Active Directory Premium P2 is the same as the SLA for Azure Active Directory Free .

No

The cost of an Azure service in private preview decreases when the service becomes generally available .

No

To achieve a hybrid cloud mode , a company must always migrate from a private cloud model .

No

To implement an Azure Multi - Factor Authentication ( MFA ) solution , you must sync on premises identities to the cloud

No

To maintain Microsoft support , you must implement the security recommendations provided by Azure Advisor within a period of 30 days .

No

Transferring data between Azure Storage accounts if different Azure regions is free .

No

Two Azure subscriptions can be merged into a single subscription

No

Two valid methods for Azure Multi - Factor Authentication ( MFA ) are picture identification and a passport number .

No

Users in Azure Active Directory ( Azur AD ) are organized by using resource groups .

No

When an Azure subscription expires , the associated Azure Active Directory ( Azure AD ) tenant is deleted automatically

No

When you create Azure resources for a service in public preview , you must recreate the resources once the service become generally available .

No

When you used a general - purpose v2 Azure Storage account , you are only charged for the amount of data that is stored . All read and write operations are free .

No

With a consumption based plan , you pay a fixed rate for all data sent to or from virtual machines hosted in the cloud .

No

With software as a service ( SaaS ) , you must apply software updates .

No

You can assign an Azure blueprint to a resource group .

No

You can associate a network security group ( NSG ) to a virtual network .

No

You can create Group Policies in Azure Active Directory ( Azure AD ) .

No

You can create a resource group inside of another resource group .

No

You can create up to 10 Azure free accounts by using the same Microsoft account

No

You can join Android devices to Azure Active Director ( Azure AD ) .

No

You can stop an Azure SQL Database instance to decrease cost .

No

You can use Availability Zones in Azure to protect Azure virtual machines from a region

No

This question requires that you evaluate the underlined text to determine if it is correct The Azure Standard support plan is the lowest cost option to receive 24x7 access to support engineers by phone . Review the underlined text . If it makes the statement correct select No change is needed If the statement is incorrect , select the answer choice that makes the statement correct

No Change is needed

A Standard support plan is included in an Azure free account .

No.

You need to complete the defense - in - depth strategy used in a datacenter . What should you do ?

Physical Security Perimeter Application

You plan to migrate a web application to Azure . The web application is accessed by external users You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application What should you include in the recommendation ?

Platform as a Service ( PaaS )

Which cloud deployment solution is used for Azure virtual machines and Azure SQL databases ? Azure SQL databases

Platform as a service ( PaaS )

Your company plans to request an architectural review of an Azure environment from Microsoft . The company currently has a Basic support plan . You need to recommend a new support plan for the company . The solution must minimize costs .

Premier

In which Azure support plan can you open a new support request ?

Premier , Professional Direct Standard , and Developer only

Match the cloud model to the correct advantage Provides complete control over security .

Private Cloud

Azure loT Hub

Processes data from millions of sensors

Azure loT Hub

Processes data from millions of sensors .

Azure virtual machines

Provide Operating system virtualization

Azure Functions

Provide a platform for serverless code

Azure Container Instances

Provided portable environment for virtualized applications

Azure Synapse Analytics

Provides a cloud - based Enterprise Data Warehouse ( EDW ) .

Azure Bot Services

Provides a digital online assistant that provides speech support

Azure Functions

Provides serverless computing functionalities

Azure Functions

Provides the platform for serverless code .

Match the cloud model to the correct advantage No required capital expenditure

Public Cloud

Your company has datacenters in Los Angeles and New York . The company has a Azure subscription . You are configuring the two datacenters as geo - clustered sites for site resiliency . You need to recommend an Azure storage redundancy option . You have the following data storage requirements . Data must be stored on multiple nodes . Data must be stored on nodes in separate geographic locations Data must be read from the secondary location as well as from the primary location

Read Access geo - redundant storage

Your developers have created 10 web applications that must be hosted on Azure . You need to determine which Azure web tier plan to host the web apps . The web tier plan must meet the following requirements The web apps will use custom domains . The web apps each require 10 GB of storage . The web apps must each run in dedicated compute instances . Load balancing between instance must be included . Costs must be minimized .

Standard

If an Azure virtual machine has a status of Stopped ( deallocated ) you will continue to pay for

Storage

Azure Key Vault

Store passwords for use by Azure Function applications

Your network contains an Active Directory forest The forest contains 5,000 user accounts Your company plans to migrate all network resources to Azure and to decommission the on - premises data center You need to recommend a solution to minin the impact on users after the planned ation . What should you recommend ?

Sync all the Active Directory user accounts to Azure Active Directory Azure AD )

Several support engineers plan to manage Azure by using thr computers Computer 2: Ubuntu

The Azure CLI , the Azure portal , and Azure PowerShell

Several support engineers plan to manage azure by using Computer 3 MACOS Mojave

The Azure CLI , the Azure portal , and Azure PowerShell

Several support engineers plan to manager Azure by using thr computers: Computer 1: Windows 10

The Azure CLI , the Azure portal , and Azure PowerShell

can calculate cost saving due to reduce electricity consumption as a result of migrating on - premises Microsoft SQL servers to Azure .

The Azure Total Cost of Ownership TCO ) calculator

You can create an Azure support request from support.microsoft.com

The Azure portal

You have several virtual machines in an Azure subscription . You create a new subscription .

The virtual machines can be moved to the new subscription .

Azure App Service

Used to build , deploy , and scale web apps

Azure Machine Learning

Uses past trainings to provide predictions that have high probability

A DNS server that runs on an Azure virtual machine is an example of platform as a service ( PaaS )

Yes

A Platform as a Service ( PaaS ) solution can automatically scale the number of instances

Yes

A Platform as a Service ( PaaS ) solution provides additional memory to apps by changing pricing tiers

Yes

A Premier support plan can only be purchased by companies that have an Enterprise Agreement ( EA ) .

Yes

A company can extend the capacity of its internal network by using the public cloud

Yes

A company can extend the computing resources of its internal network by using a hybrid cloud .

Yes

A company can use resources from multiple subscriptions .

Yes

A platform as a service ( PaaS ) solution that hosts web apps in Azure provides professional development services to continuously add features to custom applications .

Yes

A platform as a service PaaS ) solution that hosts web apps in Azure provides the ability to scale the platform automatically .

Yes

A resource group can contain resources from multiple Azure regions .

Yes

A resource group can have the Owner role assigned to multiple users .

Yes

A single Microsoft account can be used to manage multiple Azure subscriptions .

Yes

A user account can be assigned to multiple Azure roles .

Yes

All Azure free accounts expire after a specific period .

Yes

All paying Azure customers receive a credit if their monthly uptime percentage is below the guaranteed amount in the Service Level Agreement SLA ) .

Yes

An Azure free account has spending limit

Yes

An Azure reservation is used to reserve server capacity at a specific data center

Yes

An Azure service in public preview is released to all Azure customers

Yes

An azure resource can have multiple delete locks.

Yes

An azure resource inherits locks from its resource group .

Yes

Azure Active Directory ( Azure AD ) groups support dynamic membership rules .

Yes

Azure Active Directory Azure AD ) provides single sign - on ( SSO )

Yes

Azure Advisor provides recommendations on how to reduce the cost of running Azure virtual machines .

Yes

Azure Backup is an example of platform as a service ( PaaS ) .

Yes

Azure Files is an example of infrastructure as a service ( laaS )

Yes

Azure Government is available only to US government is available only to US government agencies and their partners .

Yes

Azure Government is operated by Microsoft .

Yes

Azure Monitor can monitor the performance of on - premises computers .

Yes

Azure Monitor can trigger alerts based on data in an Azure Log Analytics workspace .

Yes

Azure Multi - Factor Authentication ( MFA ) can be required for administrative and non administrative user accounts .

Yes

Azure SQL Database is an example of platform as a service ( PaaS ) .

Yes

Azure Security Center can monitor Azure resources and on - premises resources .

Yes

Azure Sentinel can collect Window Defender Firewall logs from Azure virtual machines .

Yes

Azure Sentinel can remediate incidents automatically

Yes

Azure Sentinel stores collected events in an Azure Storage account

Yes

Azure can be used to build a General Data Protection Regulation ( GDPR ) compliant infrastructure .

Yes

Azure has built - in authentication and authorization service that provide secure access to Azure resources .

Yes

Azure has built - in authentication and authorization services that provide secure access to Azure resources

Yes

Azure provides flexibility between capital expenditure ( CapEx ) and operational expenditure OpEx .

Yes

By copying several GB of data from Azure to an on premises network over a VPN additional data transfer costs are incurred

Yes

Cloud computing provides elastic scalability .

Yes

Companies can increase the Service Level Agreement ( SLA ) guaranteed uptime by adding Azure resources to multiple regions

Yes

Copying 10 GB of data from Azure to an on - premises network over a VPN generates additional Azure data transfer costs .

Yes

Customers can minimize capital expenditure ( CapEx ) by using a public cloud .

Yes

Data that is stored in an Azure Storage account automatically has at least three copies .

Yes

Data traffic between Azure services within the same Azure region is always free

Yes

Deploying your own datacenter is an example of CapEx .

Yes

Every Azure region has multiple datacenters .

Yes

From Azure Monitor , you can create alerts .

Yes

From Azure Monitor you can monitor resources across multiple Azure subscriptions .

Yes

From Azure Security Center , you can download a Regulatory Compliance report

Yes

From Azure Service Health , an administrator can create a rule to be alerted if an Azure service fails .

Yes

From Azure Service Health , an administrator can view the health of all the services in an Azure environment

Yes

From the Azure portal , you can distinguish between services that are generally available and services that are in public preview .

Yes

General Data Protection Regulation ( GDPR ) applies to companies that offer goods or services to individuals in the EU .

Yes

General Data Protection Regulation GDPR defines data protection and privacy rules .

Yes

Identities stored in Azure Active Directory ( Azure AD ) , third - party cloud services , and on - premises Active Directory can be used to access Azure resources

Yes

Identities stored in Azure Active Directory Azure AD ) , third - party cloud services , and on - premises Active Directory can be used to access Azure resource .

Yes

Identities stored in an on - premises Active Directory can by synchronized to Azure Active Directory ( Azure AD ) .

Yes

If an azure resource has read only lock , you can add a delete lock to the resource .

Yes

If you assign permissions for a user to manage a resource group , the user can manage all the Azure resources in that resource group .

Yes

If you delete a resource group , all the resources in the resource group will be deleted

Yes

In Azure Active Directory Premium P2 , at least 99.9 percent availability is guaranteed .

Yes

Leasing software is an example of operational expenditure ( OpEx ) costs .

Yes

Microsoft Intune is an example of software as a service ( SaaS )

Yes

Monthly salaries for technical personnel are an example of operational expenditure ( OpEx ) costs .

Yes

Most Azure service are introduced in private preview before being introduced in public preview , and then in general availability .

Yes

Serverless computing is an example of a consumption - based plan .

Yes

The Azure spending limit is fixed and cannot be increased or decreased

Yes

The Hot access tier is recommended for data that is accessed and modified frequently .

Yes

The Service Level Agreement ( SLA ) guaranteed uptime for paid Azure services is at least 99.9 percent .

Yes

The cost of Azure resources can vary between regions

Yes

To build a hybrid cloud , you must deploy resources to the public cloud .

Yes

To implement a hybrid cloud model , a company must have an internal network .

Yes

To use Azure Active Directory ( Azure AD ) credentials to sign into a computer that runs Windows 10 , the computer must be joined to Azure AD .

Yes

When an Azure virtual machine is stopped , you continue to pay storage costs associated to the virtual machine .

Yes

When an Azure virtual machine is stopped , you continue to pay storage costs associated to the virtual machines .

Yes

When using an Azure ExpressRoute Connection , inbound data traffic from an on premises network to Azure is always free .

Yes

Windows Virtual Desktop supports desktop and app virtualization .

Yes

With Azure Reservations , you pay less for virtual machines than with pay - a - you - go pricing .

Yes

With a consumption - based plan , you reduce overall costs by paying only for extra capacity when it is required .

Yes

With infrastructure as a service ( laaS ) , you must install the software that you want to use .

Yes

You can add an Azure Resource Manager template to an Azure blueprint

Yes

You can associate a network security group ( NSG ) to a network interface .

Yes

You can associate a network security group NSG to a virtual network subnet .

Yes

You can change the Azure Active Directory ( Azure AD ) tenant to which an Azure subscription is associated .

Yes

You can configure the Azure Active Directory ( Azure AD ) activity logs to appear in Azure Monitor .

Yes

You can convert the Azure subscription of your company from Free Trial to Pay - As - You Go

Yes

You can create custom Azure roles to control access to resources

Yes

You can join Windows 10 devices to Azure Active Directory Azure AD ) .

Yes

You can use Availability Zones in Azure to protect Azure managed disks from a datacenter failure .

Yes

You can use Azure Blueprints to grant permissions to a resource .

Yes

You can use Azure Cost Management to view costs associated to management groups .

Yes

You can use Azure Cost Management to view costs associated to resource groups .

Yes

iOS devices can be registered in Azure Active Directory ( Azure AD )

Yes

Azure service in public preview can be used in production environments .

Yes .

Azure Active Directory ( Azure AD ) can be used to manage access to on - premises applications .

Yes X

Azure Active Directory Azure AD ) provides authentication services for resources hosted in Azure and Microsoft 365 .

Yes X

You can use Availability Zones in Azure to protect Azure virtual machines from a datacenter failure

Yes X

You can use Azure Cost Management to view the usage of virtual machines during the last three months .

Yes X

Cloud computing leverages virtualization to provide services to multiple customers simultaneously

Yes X X

Azure Sphere

a Software and hardware solution that provides communication and security features for loT devices

You have an Azure subscription of 100 Windows 10 devices . You need to ensure that only users whose devices have the latest security patches installed can access Azure Active Directory ( Azure AD ) integrated applications .

a conditional access policy

You have an on - premises application that sends email notifications automatically based on a rule . You plan to migrate the application to Azure . You need to recommend a serverless computing solution for the application . What should you include in the recommendation ?

a logic app

Your company plans to start using Azure and will migrate all its network resource to Azure . You need to start the planning process by exploring Azure .

a subscription

Your company plans to move several servers to Azure . The company's compliance policy states that a server named FinServer must be on a separate network segment . You are evaluating which Azure services can be used to meet the compliance policy requirements . Which Azure solution should you recommend?

a virtual network for FinServer and another virtual network for all the other servers

You have an Azure virtual machine named VM1 . You plan to encrypt VM1 by using Azure Disk Encryption . Which Azure resource must you create first ?

an Azure Key Vault

To what should an application connect to retrieve security tokens

an Azure key vault

You have a resource group name RG1 . You need to prevent the creation of virtual machines in RG1 . The solution must ensure that other objects can be created in RG1 .

an Azure policy

You plan to provision Infrastructure as a Service ( laaS ) resources in Azure Which resource is an example of laas ? A. an

an Azure virtual machine

What is required to use Azure Cost Management ?

an Enterprise Agreement ( EA )

What does a customer provide in a software as a service ( SaaS ) model ?

application data

An Azure Policy initiative definition is a

collection of policy definitions

When you are implementing a Software as a Service SaaS solution you are responsible for _____ .

configuring the SaaS solution .

An Azure region

contains one or more data centers that are connected by using a low - latency network .

You have an Azure virtual network named VNET 1 in a resource group named RG1 . You assign the Azure Policy definition of Not allowed source Type and specify that virtual networks are not allowed resource type in RG1 . VNET1

continues to function normally .

You deploy an Azure resource . The resource becomes unavailable for an extended period due to a service outage . Microsoft will

credit your Azure account .

All Azure services that are in public preview are

excluded from the Service Level Agreements

An Azure web app that queries an on - premises Microsoft SQL server is an example of a cloud .

hybrid

An organization that hosts its infrastructure _________no longer requires a data center .

in the public cloud

Data that is stored in the Archive access tier of an Azure Storage account :

must be rehydrated before the data can be accessed

You have 1,000 virtual machines hosted on the Hyper - V hosts in a data center You plan to migrate all the virtual machines to an Azure pay - as - you- go subscription . You need to identify which expenditure model to use for the planned Azure solution .

operational

When planning to migrate a public website to Azure , you must plan to

pay monthly usage costs

Azure Cosmos DB is an example of a ____ offering.

platform as a Service ( PaaS )

A Microsoft SQL Server database that is hosted in the cloud and has software updates managed by Azure is an example of :

platform as a service ( PaaS )

You have an Azure environment that contains 10 web apps . To which URL should you connect to manage all the Azure resources ?

portal.azure.com

An Azure service is available to all Azure customers when it is in

public preview

This question required that you evaluate the underlined test to determine if it is correct Azure Key Vault is used to store secrets for Azure Active Directory ( Azure AD ) user accounts .

server applications

Your Azure trial account expired last week . You are now unable to

start an existing Azure virtual machine

If a resource group named RG1 has a delete lock ,

the delete lock must be removed before an administrator

You have an application that is comprised of an Azure web app that has a Service Level Agreement ( SLA ) of 99.95 percent and an Azure SQL database that has an SLA of 99.99 percent . The composite SLA for the application is

the product of both SLAS , which equals 99.94 percent

Which unused resources should you remove ?

the public IP addresses

When you need to delegate permissions to several Azure virtual machines simultaneously , you must deploy the Azure virtual machines

to the same resource group

An availability Zone in Azure has physically separate locations across two continents

within a single Azure region .