Configure and manage virtual networks for Azure administrators & Monitor and back up Azure resources

What happens if a health probe isn't configured and a VM fails?

Azure Load Balancer won't notice the failure and continues to route traffic to the failed VM. This issue causes requests to time out.

What data does Azure Monitor collect?

Data from a variety of sources, such as the application event log, the operating system (Windows and Linux), Azure resources, and custom data sources

An SLA is important to define for your service because:

It helps you determine the availability of your service that you will commit to for your customers.

What are some of the typical components involved in a network design?

A VM, subnet, firewall, and load balancer

What is an ExpressRoute circuit?

A circuit provides a physical connection for transmitting data through the ExpressRoute provider's edge routers to the Microsoft edge routers.

Which protocol provides dynamic routing for Azure ExpressRoute?

Border Gateway Protocol (BGP)

What type of DNS record should you create to map one or more IP addresses against a single domain?

A or AAAA

Which of the following is not used in a highly available architecture?

A recovery service vault

What is the schema?

A series of tables logically grouped together, which allow for an easy understanding behind how Log Analytics stores logs

Which of the following resources can you assign a public IP address to?

A virtual machine

You want to make sure that admins know as soon as a web app becomes overloaded. Which feature of Application Insights should you use?

Alerts

What do you have to install or create to store simple boot diagnostics in Azure?

An Azure storage account.

Which connection type supports connectivity to Office 365?

An ExpressRoute connection.

Which load balancing strategy does Application Gateway implement?

Application Gateway follows a round-robin approach, distributing requests to each available server in a backend pool in turn.

You want to add an extra layer of security to Azure Bastion. Where can you start?

Apply role-based access control (RBAC) and the least privilege to use and manage Azure Bastion

How are smart groups created?

Automatically, using machine learning algorithms.

Which Azure capability offers operations teams a pre-defined monitoring experience across multiple resources?

Azure Monitor Insights

How does Azure Monitor organize log data for queries?

Azure Monitor organizes log data into tables.

Where can IT Operations teams find a topology view with network connection details of their VMs and scale sets?

Azure Monitor virtual machine insights

You have a Linux-based web app that runs in the Azure App Service. You want to display basic performance data in an Application Insights dashboard. Which method should you use to instrument your app?

Build-time instrumentation

Which peering configuration would you use for your Express route circuit where you need to allow direct connections to Azure compute resources?

Azure private peering

To resolve latency issues on the network, which Azure Network Watcher features can you use?

Connection troubleshoot

How do you set up Azure Sentinel on Azure?

Create a workspace, and then add that workspace to Azure Sentinel.

Which four ways does Site Recovery protect virtual machine infrastructure?

Creates snapshots and recovery points, replicates VMs to a secondary region, supports DR drills, and enables flexible failover/failback.

Where should DevOps teams implement application monitoring to improve application health and performance?

During development and while in production

Which of the following is not a benefit of ExpressRoute?

Encrypted network communication

What is the main advantage of an availability set?

It allows virtual machines to be available across physical server failures.

What is Microsoft peering?

It enables you to connect your on-premises network to Office 365 services and Dynamics 365.

What security benefits does Azure ExpressRoute provide?

ExpressRoute uses a dedicated, private network to connect to the Microsoft cloud. Traffic doesn't traverse the public internet, so it's difficult to intercept.

Which of the following is NOT a state of a smart group alert?

Failed

True or false: all Azure data storage options include automatic backup of data?

False

True or false: data replication and data backup are the same thing.

False

What is the default distribution type for traffic through a load balancer?

Five-tuple hash

When should you use Azure ExpressRoute instead of Azure site-to-site connectivity?

For handling enterprise-class and mission-critical workloads

For a point-to-site Azure VPN gateway, what are the key parameters that you must specify when you create it?

Gateway type is Vpn, vpn type is RouteBased, and you need to specify a gateway sku.

Which of the following is an example of a log data type?

HTTP response records

You closed a port in a network security group used by a virtual network that hosts the VMs in the Load Balancer pool. How might this affect load balancing?

If the port is used to send traffic to the VMs in the pool, then this traffic is blocked. All requests time out and eventually fail. If this port was a probe port, the VM is removed from rotation

You've enabled Application Insights for your web app. In which of the following Azure resources will telemetry data be stored for the app?

In the Application Insights resource.

What is the Azure ExpressRoute service?

It's a service that provides a direct connection from your on-premises datacenter to the Microsoft cloud.

What does Azure DNS allow you to do?

Manage and host your registered domain and associated records.

What two fundamental types of data does Azure Monitor collect?

Metrics and logs

To capture traffic on a VM, Azure Network Watcher requires:

Network Watcher Agent VM Extension

What must a virtual machine have to communicate with the other resources in the same virtual network?

Network interface

Which of the following can be excluded from your recovery steps in your recovery plan?

None of the above should be excluded in a recovery plan.

You're monitoring the average packet count metric for a load balancer. The average packet count suddenly increases by a significant amount, although the number of clients doesn't appear to have changed. What is the most probable cause?

One or more virtual machines in the back-end pool are no longer responding to health probe requests and are no longer participating in load balancing

What does Azure Monitor for VMs provide?

Provides access to log data without exposing the user to underlying queries.

You create a custom chart and pin it to an Application Insights dashboard. Other users of the dashboard can't see the new chart. What should you do to resolve the problem?

Re-publish the Application Insights dashboard.

How does Site Recovery support grouping of machines and workloads?

Recovery plans.

Which restore type should you select if you want to replace a disk on an existing virtual machine?

Replace existing

What's the composition of an alert rule?

Resource, condition, actions, alert details

You start out by talking to individual business units about monitoring wants and needs at the start of your assignment. You determine each business unit only needs to query logs generated from their resources. Which access model would you select for your Log Analytics deployment?

Resource-context

What security features does Azure DNS provide?

Role-based access control, activity logs, and resource locking

How are storage accounts used by Site Recovery to store data backups?

Site Recovery creates recovery services vaults.

You decide to deploy Azure Bastion to an existing virtual network by using the Azure CLI. What resources do you need to create?

Subnet named AzureBastionSubnet, public IP, and Azure Bastion

You want to replace a disk on an existing VM but receive an error. What's the possible reason?

The existing VM has been deleted and is no longer available

Which criteria does Application Gateway use to route requests to a web server?

The hostname, port, and path in the URL of the request

An organization has set up virtual machines (VMs) to act as jumpboxes in each of its six virtual networks. Why should the organization consider using Azure Bastion?

The organization can simplify the management of its VMs.

What does the average Health Probe Status metric indicate?

The percentage of virtual machines in the back-end pool that are responding to health probe requests.

Several of your peers are having trouble connecting to VMs by using Azure Bastion. What isn't likely to cause the problem?

The public IP address of the destination VM

Which of the following statement about external load balancers is correct?

They have a public IP address.

Why might you use virtual network peering?

To connect virtual networks together in the same region or across regions

Why would you use a custom route in a virtual network?

To control the flow of traffic within your Azure virtual network.

How can you continuously monitor your applications from different geographic locations?

Use availability tests to continuously monitor your application from different geographic locations.

How can you prevent persistent access to your virtual machines by using Azure Security Center?

Use just-in-time access to prevent persistent access.

Which tool allows you to automate your responses to alerts?

Use playbooks to automate your response to alerts.

Sentinel has raised an incident. How can you investigate which users have been affected?

Use the investigation map, drill down into the incident, and look for user entities affected by the alert

What aspect of application performance can be monitored by DevOps teams when using Azure Monitor Application Insights?

User behavior and usage patterns for your application

You want to track the average CPU usage of your Azure virtual machine over the last seven days. What is the most straightforward way to do this?

View the metrics for the virtual machine on the Overview page and set the range to the last seven days

Which configuration is required to configure an internal load balancer?

Virtual machines should be in the same virtual network

At what resource level or scope does an Azure Bastion connection apply to?

Virtual network or peered virtual networks

You need to connect Azure resources like Azure virtual machines across geographical regions. Which Azure networking option should you use?

Virtual network peering

Why would you use Azure Sentinel?

You want a detailed overview of your enterprise, potentially across multiple clouds, and on-premises locations.

Why would you use Azure Application Insights?

You want to analyze and address problems that affect your application's health.

Why would you use Azure Security Center?

You want to secure an infrastructure that consists of on-premises and cloud resources.