Azure Admin
Which of the following is NOT true about backup vault in an Azure environment?
A user needs to enable or disable encryption specifically
Azure provides features like availability zones, availability sets, and load-balancers. What are the main benefits of using these features in your organization?
b. High availability and resilience
You have a database in the on-premises environment, and a web app in the Azure environment, which of the following types of connectivity should you use to communicate with the web app?
b. Hybrid connections
Which of the following is true about the Azure policy?
b. It uses the default allow method but with an explicit deny system
Which type of replication should you select when creating an Azure storage account, if your data is non-critical?
b. Locally-redundant storage
You want to retain files in your Azure storage if they are older than 180 days, which lifecycle management rule should you apply to your Azure storage?
b. Move it to archive storage
You want to assign tags to resources using Azure portal in an Azure environment, which one of the following roles you must have to achieve this task?
b. Owner role
What is the pre-requisite to add an extension to a virtual machine in an Azure environment?
b. The virtual machine must be up and running
You have created a recovery service vault in an Azure environment, which of the following is the default backup entity?
b. Virtual machine
Suppose a user is part of a group with WRITE permissions. The same user is also a member of another group with READ permissions. What permissions rights will the user actually have?
b. WRITE
You have deployed an application in an Azure environment and would like to monitor it, which of the following tools you should use to monitor your application?
c. Application Insights
You want to implement an identity and access management service like Azure AD in your organization, providing features to your users like user and group management, multi-factor authentication, identity protection, and conditional access. Which of the following Azure AD licenses you should go for?
c. Azure Active Directory Premium 2
In order to manage virtual machine in an Azure environment, what is a secure way to connect to the machine that would not expose any ports?
c. Azure Bastion
The Self-service Password Reset (SSPR) feature of Azure AD allows users to do which of the following tasks?
c. Change password
If you want to connect to your virtual machine using its private IP address, which of the following is NOT a correct way to achieve this task?
c. Configure Point-to-point VPN
What level of access should you grant to the Blob storage to give users access to the container, and its blobs, using storage account?
c. Container
Which of the following is NOT a task performed by virtual machine scale set in an Azure environment?
c. Create and manage virtual machines with different configuration
You are given access keys of a storage account name, which of the following operations you can perform with those access keys?
c. Delete a table in the storage account
You have created an access key for accessing a storage account, which of the following operations you can perform through this access key?
c. Delete files in the storage account
You want to monitor end-to-end connectivity between your Azure and the on-premises networks, which of the following features of NPM tool will you use to achieve this task?
c. ExpressRoute
Why is it a best practice to assign permissions to groups on different resources instead of the resource itself?
c. For ease of administration
Which of the following attribute is non-editable in a group?
c. Group type
You want to perform batch processing and big data operations on a virtual machine in an Azure environment, what category of VM should you chose to achieve this task?
c. High-performance Compute
For the automatic deployment of nodes in an AKS cluster, which of the following tools are provided by the Kubernetes?
c. Horizontal pod autoscaler (HPA) and Cluster autoscaler
Which of the following is NOT true about resource groups in Azure environment?
c. It is not possible to move resources from one to another resource group
If you are facing issues with your virtual machine's remote connection and would like to troubleshoot it, what should you do to solve this issue?
c. Move your virtual machine to another host using Redeploy option
You want to ensure that the data in the data disk attached to a virtual machine is encrypted, how do you achieve this task?
c. Nothing to be done as the data at rest in Azure is already encrypted.
You have deployed a virtual machine and now would like to save its deployment as a template for future use, which of the following is NOT a correct option to save a deployment as a template?
c. REST API
Which of the following can NOT be implemented by an Organization as an Azure Site Recovery solution?
c. Replicate virtual machines in Azure environment to on-premises site
Which protocol does Azure Files use for file sharing in an Azure environment?
c. SMB
What type of object should you create if you want to store structured data in an Azure storage account?
c. Tables
You have created a virtual machine from Azure resource manager and now want to create its template. What should you do to achieve this task?
c. The template is created by default when you create a virtual machine.
Which of the following is NOT allowed to be performed as a bulk user operation in Azure AD?
c. Update
What are the logs collected when using Log Analytics in an Azure environment?
c. Workspace
If you are using the Tag Contributor role to assign tags, which of the following statement is TRUE about assigning such tags in an Azure environment?
c. You can only assign tags to subscriptions
If you want to configure the virtual hard disk in a virtual machine template, which element needs to be edited to achieve this task?
c. imageReference
How many Virtual Networks (VNets) you can create under an Azure subscirption?
c.1000
How many Azure groups can you create in a single Azure Active Directory (AD)?
d. 10000
When a network security group (NSG) is created, it is typically assigned to which of the following components to filter the traffic?
d. A or B
Backup reports can be generated for which of the following Azure resources?
d. All of the above
Connection Troubleshoot is a feature of Network Watcher which can test the connectivity between two endpoints, which of the following can be the possible endpoints for connection troubleshoot?
d. All of the above
To create a custom role, which of the following Azure services do you use?
d. All of the above
What are the benefits of implementing Azure File Sync in your organization?
d. All of the above
What benefits are provided by the Azure Firewall?
d. All of the above
Which of the following is a correct method to deploying a resource using a template in Azure environment?
d. All of the above
Which of the following is a mandatory field in a template to perform automatic resource creation?
d. All of the above
Which of the following statements is TRUE about Azure backup in an Azure environment?
d. All of the above
You have added a custom script extension to a virtual machine but you want the script to run every time the virtual machine boots up, what should you do to achieve this task?
d. All of the above
You want to configure file share in the Azure environment, for this purpose, you can configure authorization at which of the following levels?
d. All of the above
You want to set up Azure AD and provide features to your users like user and group management, mult-factor authentication, conditional access and SharePoint limited access, which of the following Azure AD licenses should you sign up for?
d. All of the above
You want to troubleshoot an external network, which of the following tools/resources can NOT be used with VPN troubleshoot?
d. All of the above
Using Role-based access control (RBAC), you can assign permissions to different security principals. Which of the following entities does not belong to the security principals?
d. Devices
In order to enable, disable or delete a device in an Azure AD, which of the following roles must you have?
d. None of the above
The template zip file that is downloaded when you export the existing template that was used for deployment containes which of the following files?
d. None of the above
When moving a virtual machine from one resource group to another, which of the following resources is NOT moved along with the virtual machine?
d. None of the above
Which of the following is NOT a correct method to deploy a container instance in an Azure environment?
d. None of the above
Which of the following is NOT a correct method to deploy a resource using a template?
d. None of the above
Which of the following is NOT a valid way to grant access to Azure AD resources?
d. None of the above
Which of the following is NOT true about queries for interacting data in Log Analytics?
d. Query when executed alters the original data
Which of the following actions is NOT a valid action when updating a device?
d. Secure a device
Which of the following is NOT a valid object that can be stored in a storage account?
d. Stacks
Which of the following is NOT a valid condition to meet when creating a storage account in the Azure environment?
d. The name must contain at least one special character
Which of the following is an optional element in a template to perform automatic resource creation?
b. Functions
You want to give access to one of your objects in a storage account, what is the best way to achieve this task?
b. Generate SAS token
You want to connect devices to Azure AD which are not part of the Active Directory in the on-premises environment, which of the following features of Azure AD would you use to achieve this?
b. Azure AD join
Which of the following tools will be used to monitor and troubleshoot the infrastructure-as-a-Service (IaaS) issues in an Azure environment?
b. Azure Network Watcher
Which of the following is NOT a correct way to create a user in Azure AD?
b. Azure Script
Which Azure feature is used to set up alerts and their respective actions in an Azure environment?
b. AzureMonitor
Which blob type should you use to store media files in an Azure environment?
b. Block Blobs
Suppose you want to ensure users don't not make accidental or unauthorized changes to a resource in the Azure environment, what would you do to achieve this?
b. Configure resource lock
Which of the following is NOT a correct way to create a user in Azure AD?
Azure CLI D. None of the above
What should you do to monitor the current utilization of the resources and configure a forecast based on this current utilization?
b. Create a budget
Which of the following is NOT a type of blob in an Azure environment?
b. Disk Blobs
You have created a storage account and stored some data objects in it, Which of the following is NOT a valid protocol to access data objects in a storage account?
b. FTP
What is the maximum number of disks that you can send when you create an export job in Azure portal?
b. 10
How many co-administrator accounts can you create in a subscription in an Azure environment?
b. 200
You have selected Locally Redundant Storage as the redundancy type of your storage account, in how many disks will the data be replicated within the same datacenter?
b. 3
Which of the following is NOT a valid resource in an administrative unit?
Roles
You have created a container but when you access it, it shows an error saying the request is not authorized to perform this operation, what could be a possible reason for this message?
b. Access to the container is disabled from public networks
Which tool would you use to copy large amount of data online to and from Azure storage account?
b. AzCopy
Which of the following is the default interval for collecting metrics in an Azure environment?
a. 1 min
How many blob lifecycle management rules can you create in an Azure storage account?
a. 100
You have applied a resource lock to a resource group, which of the following statement is true about this action?
a. All resources within the group will inherit the lock
Suppose you want to ensure that all or any created resource should have a tag assigned to it, what would you do to achieve this?
a. Assign an Azure policy
What type of copy method does the AzCopy command line tool use?
a. Asynchronous
What is the difference between Azure policy and Azure RBAC?
a. Azure RBAC uses a default deny method as opposed to Azure policy which uses a default allow method
How would you process the data in one region and replicate the results in another region to save the cost of data processing across different regions?
a. Configure blob object replication
You want to process a blob data in one region and replicate it in another region in an Azure environment, how would you go about implementing this task?
a. Configure blob object replication
An organization with multiple departments wants to create an administrative unit against each of its department, how would you restrict permission to users in these administrative units?
a. Create a role and attach to administrative unit
You want to create a custom role for your users, how would you achieve this task?
a. Create using a JSON file
Which of the following statements is NOT true about ExpressRoute in an Azure environment?
a. ExpressRoute uses a private connection for communication b. ExressRoute connects an on-premises network with the Azure cloud environment c. ExpressRoute uses a public connection for communication d. ExpressRoute offers secure and high-speed connectivity with low latency
What type of data is supported when you want to import data in an Azure environment?
a. Files
You want to create a site-to-site connection between your on-premises network and Azure network, which of the following options will you choose while configuring the Azure Virtual WAN?
a. Hubs
The template zip file that is downloaded when you export the existing template that was used for deployment contains which of the following files?
a. Parameters.json and Template.json
Which of the following is NOT a type of VPN gateway in an Azure environment?
a. Point-to-Site VPN connections b. Site-to-Site VPN connections c. Point-to-Point VPN connections d. Co-existing ExpressRoute
Azure AD authentication supports what type of object in the storage account?
a. Queues
You want to export data in the Azure storage to physical disks and have created an export job for this, which of the following is the next step after the job creation?
a. Send the drives to Azure
What is the pre-requisite to evaluate NSG rules applied to a virtual machine in an Azure environment?
a. The virtual machine must be up and running
Which of the following is NOT allowed when creating a resource group in an Azure environment?
a. You can nest a resource group into another group
You want to delete a resource group, but when you execute the delete command, it does not delete all the resources within the group and also does not delete the group, what could be the possible reason for this behavior?
a. You may have applied resource lock to a resource in that group
You created a web app by the name "myAPP", which of the following is a valid APP URL to access it?
a. https://myAPP.azurewebsites.net
