Azure Foundations Exam

A developer building a service on Microsoft Azure - has a requirement to create complex workflows coordinating a number of different Azure services and user driven events. Which Azure service should they use to best meet this requirement?

Logic Apps. Azure Logic Apps is a cloud service that helps you schedule, automate, and orchestrate tasks, business processes, and workflows when you need to integrate apps, data, systems, and services across enterprises or organizations

A company wants to have the ability to efficiently manage access, policies, and compliance for their subscriptions in a hierarchal structure. Which of the following can help you achieve this requirement?

Management groups

A developer with an application running in a virtual machine environment is planning a migration to Microsoft Azure hosting. Which Azure service will provide them with a platform to host their application?

App services

What are the two aspects of Public Cloud?

Metered pricing (Metered pricing means a pricing model in which you pay for a service only based on the level of usage. Azure calls this Pay-As-You-Go (PAYG)) & Self-service management (Using Public Cloud is self-serve, because you create an account and in the Azure Portal you can launch whatever cloud service you want without picking up the phone and having someone else perform the action.)

Which of the following compliance programs deals with how cryptographic keys should be stored and handled?

FIPS 140-2. The Federal Information Processing Standard (FIPS) 140-2 specifies the security requirements that will be satisfied by a cryptographic module utilized within a security system protecting protected information.

Which of the following cloud concepts describes the ability for a cloud environment to remain available, even in the event of a catastrophic physical failure at a data center?

Fault Tolerance

A company is planning on hosting an application across multiple Virtual Machines on Azure and want to ensure that the application survives a region-wide failure within Azure. What concept needs to be considered to fulfill this requirement?

Fault tolerance. Fault tolerance is the property that enables a system to continue operating properly in the event of the failure

Which of the following Azure Support Plans provides access to a guidance manager who can assist you with architectural guidance?

Professional direct

Which type of Cloud Computing would Azure Kubernetes Service (EKS) fall under?

Infrastructure as a Service. Azure Kubernetes Service (AKS) is Azure's managed container offering that uses the Kubernetes open-source container orchestration software. It would be considered an Infrastructure as a Service because it allows you to configure the virtual servers, networking settings.

A company wants to monitor and control billions of Internet of Things (IoT) assets. What Azure cloud service will meet the requirement?

IoT Central. IoT Central is an IoT application platform that reduces the burden and cost of developing, managing, and maintaining enterprise-grade IoT solutions. The web UI lets you monitor device conditions, create rules, and manage millions of devices and their data throughout their life cycle

A company needs a VPN site-to-site connection from their on-premise network to Azure account. Which of the following network components represents the VPN device in your local network and used to set up a site-to-site VPN connection?

Local Network Gateway. A local network gateway represents the hardware or software VPN device in your local network. Use this with a connection to set up a site-to-site VPN connection between an Azure virtual network and your local network.

A company wants to ensure that no one accidentally deletes the Virtual Machine. What would you modify to effectively implement this requirement?

Locks. Locks provide a way for administrators to lock down Azure resources to prevent deletion or changing a resource.

Which compliance programs is an organization that defines standards used by the United States government?

The National Institute of Standards and Technology (NIST)

What is a dataset CSV file?

The dataset file is a CSV file that contains a list of directories and/or a list of files to be copied to target drives.

What's a driveset CSV file?

The driveset file is a CSV file that contains the list of disks to which the drive letters are mapped so that the tool can correctly pick the list of disks to be prepared.

A company is planning on hosting a web-application on Azure. Management wants to know the Capital Expenditure (CapEx) and Operational Expenditure (OpEx) costs that would incur after they migrate.

There would a decrease in Capital Expenditure and a possible increase in Operational Expenditure

What does Azure guarantee in their Service Level Agreement (SLA)?

Uptime

A company with an on-premise data center is required to implement a secure site-to-site connection from their premise to an Azure Virtual Network. What Azure component must be created as part of this connection?

Virtual Private Network Gateway. A VPN gateway is a specific type of virtual network gateway that is used to send encrypted traffic between an Azure virtual network and an on-premises location over the public Internet. You can also use a VPN gateway to send encrypted traffic between Azure virtual networks over the Microsoft network. Each virtual network can have only one VPN gateway. However, you can create multiple connections to the same VPN gateway. When you create multiple connections to the same VPN gateway, all VPN tunnels share the available gateway bandwidth.

A company wants to securely move large amounts of data to Azure by shipping the drives using Azure Import/Export service. What two things does the company need to do prepare their drives for an import job?

A driveset CSV file and a dataset CSV file. The data on the drive is encrypted using AES 256-bit BitLocker Drive Encryption and so it requires a driveset and dataset CSV file.

Which metric usually presented as a percentage, does Azure use to guarantee their service quality in the Service Level Agreement (SLA) for most services?

Availability

A company wants to ensure that whenever users authenticate to Azure, they have to make use of Multi-Factor Authentication (MFA). Which of the following services can enforce this security protocol?

Azure AD Identity Protection

A company has a requirement that if users try to login from an anonymous IP address, they are then prompted to reset their password. How can a company enforce this security protocol?

Azure AD Identity Protection Azure Active Directory (Azure AD) Identity Protection allows you to detect potential vulnerabilities affecting your organization's identities, configure automated responses, and investigate incidents. This article describes how to use Azure AD Identity Protection to view the analysis of your test environment accounts. Identity Protection can prompt users to reset their passwords.

A company has a set of Virtual Machines on Azure running Windows 10 Servers. What management tools can be used to manage these Virtual Machines?

Azure API, Azure CLI, Azure SDK, Azure Powershell and Azure Portal

A company with developers primarily working on Mac OS and Linux based machines is considering adopting Microsoft Azure cloud infrastructure. What Azure management tools are supported for Mac & Linux developers to manage cloud resources with?

Azure CLI, Azure Powershell and Azure Portal

A company needs a way to run analytics on terabytes to petabytes of data. Which of the following would be best suited for this requirement?

Azure Data Lake Analytics

A company is planning to migrate their web application environment to Microsoft Azure. Their code base is currently stored inside of a Github repository. Which Azure service can provide them with a continuous integration and delivery toolset, and can integrate directly with their existing repository?

Azure DevOps

A developer is planning to create an event driven application hosted on Microsoft Azure. Which Azure services provides a platform for collecting events from multiple sources and easily relaying them to an application?

Azure Event Grid. Azure Event Grid allows you to easily build applications with event-based architectures. First, select the Azure resource you would like to subscribe to, and then give the event handler or WebHook endpoint to send the event to. Event Grid has built-in support for events coming from Azure services, like storage blobs and resource groups. Event Grid also has support for your own events, using custom topics.

A company is working with sensitive workloads on Azure. They are concerned that multiple sets of administrative credentials used during deployments may potentially be exposed to attackers. Which Azure service will allow them to store these credentials as encrypted secrets that can be read securely during deployment?

Azure Key Vault

A company wants a cloud solution that can be used to build, train, and deploy predictive analytics solutions. Which of the following solutions would meet their requirements?

Azure Machine Learning. The Azure Machine Learning service empowers developers and data scientists with a wide range of productive experiences for building, training, and deploying machine learning models faster. Accelerate time to market and foster team collaboration with industry-leading MLOps - DevOps for machine learning. Innovate on a secure, trusted platform, designed for responsible machine learning.

A developer is planning to create a Wordpress based website hosted on Microsoft Azure. Which Azure service could they use to quickly launch a pre-configured virtual machine environment optimized for Wordpress?

Azure Marketplace

A company is deciding whether to move their on-premise datacenter to Azure and the want to determine the cost of Azure VMs. Which Azure service could be used to determine the cost?

Azure Pricing Calculator. The Pricing Calculator is used to determine the exact costs of specific Azure services. Since they want to specifically know about Azure VMs then is the correct tool

A company working with Azure services has a requirement to automate the process of provisioning their cloud environments in a repeatable way. Which Azure service would allow them to implement their cloud resources using infrastructure-as-code?

Azure Resource Manager Templates. To implement infrastructure as code for your Azure solutions, use Azure Resource Manager (ARM) templates. The template is a JavaScript Object Notation (JSON) file that defines the infrastructure and configuration for your project. The template uses declarative syntax, which lets you state what you intend to deploy without having to write the sequence of programming commands to create it. In the template, you specify the resources to deploy and the properties for those resources.

An organization is migrating their on-premise web-application to Azure Cloud. The company is looking to save money by only running the right amount of servers to meet the demand of traffic for this web-application while in production. Which Azure service would allow them to save costs based on traffic capacity?

Azure ScaleSets. ScaleSets allow you to manage identical sets of servers, and it will automatically add or remove servers to meet the demand for traffic. A ScaleSet would be used in combination with a load balancer. The ScalSet helps reduce costs since it only runs the required amount of servers so you're never paying for underutilized servers.

A large company has several departments all working with resources on Microsoft Azure. There is a requirement that all billing for cloud resources in their account should be grouped per department for budgetary reasons. Which Azure features should they implement to help meet this requirement?

Azure Tags. You apply tags to your Azure resources, resource groups, and subscriptions to logically organize them into a taxonomy. Each tag consists of a name and a value pair. For example, you can apply the name "Team" and the value "Accounts" to all the resources related to the accounts team.

A company needs the ability to detect and diagnose anomalies in web applications. Which of the following Azure cloud services would be suited for this requirement?

Azure application insights. Application Insights, a feature of Azure Monitor, is an extensible Application Performance Management (APM) service for developers and DevOps professionals. Use it to monitor your live applications. It will automatically detect performance anomalies and includes powerful analytics tools to help you diagnose issues and to understand what users actually do with your app.

Microsoft Azure services normally follow which life-cycle?

Azure release their apps as Private preview, Public preview and then General availability

A company is planning to migrate their existing web application environment to Microsoft Azure. Based on previous user activity, they already know the approximate memory and bandwidth usage they expect to see in the coming months in their environment. Which of the following should they consider when creating their Azure Virtual Machine environments to help optimize costs?

Azure reservations. Azure Reservations help you save money by committing to one-year or three-year plans for multiple products. Committing allows you to get a discount on the resources you use. Reservations can significantly reduce your resource costs up to 72% on pay-as-you-go prices. Reservations provide a billing discount and don't affect the runtime state of your resources. After you purchase a reservation, the discount automatically applies to matching resources.

A company wants access to raw data about their Azure expenditures so they can visualize it in their own Business Intelligence tool. Which Azure Cost Management service allows them to view and download this data?

Azure usage and charges reports. Azure usage and charges reports allow you to download raw data so you can perform your own analytics on your spend.

A company needs a way to isolate their networking environments for hosting of Virtual Machines Which of the following would be best suited for this requirement?

Azure vNet. Azure Virtual Network (VNet) is the fundamental building block for your private network in Azure. VNet enables many types of Azure resources, such as Azure Virtual Machines (VM), to securely communicate with each other, the internet, and on-premises networks. VNet is similar to a traditional network that you'd operate in your own data center, but brings with it additional benefits of Azure's infrastructure such as scale, availability, and isolation.

A developer recently signed-up for a Free tier Azure account. Which Azure support subscription is automatically included with their account?

Basic

Which of the following are advantages of using a hybrid cloud model?

Better Control, More Flexibility

A company recently migrated to Azure services and are concerned that their new account may be configured incorrectly, potentially leaving it vulnerable to attackers. Which Azure service will automatically provide them a list of recommended changes to implement on their account to help make it more secure?

Security center and Advisor

A company with an on-premise file server is planning a migration to Azure services. Currently they access their data through mapped SMB network drives on their Windows based computers, and there is a requirement that they maintain this functionality going forward. Which of the following Azure services should they use to meet this requirement?

Storage Account - FileStorage. FileStorage storage accounts allow you to deploy Azure file shares on premium/solid-state disk-based (SSD-based) hardware. FileStorage accounts can only be used to store Azure file shares; no other storage resources (blob containers, queues, tables, etc.) can be deployed in a FileStorage account.

A company wants to host an application on a set of Virtual Machines (VMs). The application must be made available 99.99% of the time. In order to comply with the SLA requirement, what is the minimum number of Virtual Machines required to ensure 99.99% uptime to host the application?

You would only 2. In case the primary virtual machine failed, all traffic would be routed to the existing running instance. In practice, you would generally want to 3 Virtual Machines across 3 Availability Zones (AZs)