IT 217 Quiz 2

Your company has 10 departments. The company plans to implement an Azure environment. You need to ensure that each department can use a different payment option for the Azure service it consumes. What should you create for each department? O a reservation O a resource group O a container instance O a subscription

a subscription

Your company has an Azure subscription that contains resources in several regions. A company policy states that admins must only be allows to create additional Azure resources in a region in the country where their office is located. You need to create the Azure resource that must be used to meet the policy requirement. What should you create? O an Azure policy O a reservation O a read-only lock O a management group

an Azure policy

What is required to use Azure Cost Management? O a pay-as-you-go subscription O an Enterprise Agreement O Software Assurance O a Dev/Test subscription

an Enterprise Agreement

Eval the underlined text: Azure Germany can be used by __legal residents of Germany only.__ O any user or enterprise that requires its data to reside in Germany O only enterprises that purchase their azure licenses from a partner based in Germany O only enterprises that are registered in Germany O no change is needed

any user or enterprise that requires its data to reside in Germany

What can Azure Information Protection encrypt? O network traffic O documents and email messages O an Azure Storage account O an Azure SQL database

documents and email messages

You have an Azure environment that contains 10 virtual networks and 100 virtual machines. You need to limit the amount of inbound traffic to all the Azure virtual networks. What should you create? O 10 Azure ExpressRoute circuits O one Azure firewall O 10 virtual network gateways O one application security group

one Azure firewall

Evaluate the underlined text: Azure Key Vault is used to store secrets for __Azure AD user accounts. O server applications O Azure AD administrative accounts O No change is needed O Personally Identifiable Information

server applications

Your company plans to migrate all on-premises data to Azure. You need to identify whether Azure complies with the company's regional requirements. What should you use? O Azure Marketplace O the Azure portal O the Trust Center O the Knowledge Center

the Trust Center

What is guaranteed in an Azure Service Level Agreement for virtual machines? O feature availability O performance O uptime O bandwidth

uptime

You need to ensure that when Azure AD users connect to Azure AD from the internet by using an anonymous IP address, the users are prompted automatically to change their password. Which Azure service should you use? O Azure Advanced Threat Protection O Azure AD Identity Protection O Azure AD Connect Health O Azure AD Privileged Identity Management

Azure AD Identity Protection

Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks? O a network security group O Azure DDoS protection O an application security group O Azure Firewall

Azure Firewall

Which Azure service should you use to store certificates? O Azure Security Center O Azure Key Vault O Azure Information Protection O an Azure Storage account

Azure Key Vault

Your company plans to automate the deployment of servers to Azure. Your manager is concerned that you may expose administrative credentials during the deployment. You need to recommend an Azure solution that encrypts the administrative credentials during the deployment. What should you include in the recommendation? O Azure Security Center O Azure Multi-Factor Authentication O Azure Information Protection O Azure Key Vault

Azure Key Vault

What should you use to evaluate whether your company's Azure environment meets regulatory requirements? O Azure Security Center O Azure Service Health O Azure Advisor O Azure Knowledge Center

Azure Security Center

You need to collect and automatically analyze security events from Azure Active Directory. O Azure Key Vault O Azure AD Connect O Azure Sentinel O Azure Synapse Analytics

Azure Sentinel

Evaluate the under lined text: __Resource groups__ provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions. O Management groups O No change is needed O Azure App Service Plans O Azure policies

Azure policies

Eval the underlined text: A support plan solution that fives you best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost is a __standard__ support plan. O Premier O No change is needed O Basic O Developer

Basic

Your developers have created 10 web applications that must be host on Azure. You need to determine which Azure web tier plan to host the web apps. The web tier plan must meet the following requirements: * The web apps will use custom domains. + The web apps each require 10 GB of storage. * The web apps must each run in dedicated compute instances. + Load balancing between instances must be included. + Costs must be minimized. Which web tier plan should you use? O Standard O Basic O Free O Shared

Basic

Eval the underlined text: You can use __Advisor recommendations__ in Azure to send email alerts when the cost of the current billing period for an Azure subscription exceeds a specified limit. O Compliance O Access control O Budget alerts O No change is needed

Budget alerts

What should you use to evaluate whether your company's Azure environment meets regulatory requirements? O the Knowledge Center websitre O the Solution blade from the Azure Portal O the Advisor blade from the azure portal O Compliance Manager from the Service Trust Portal

Compliance Manager from the Service Trust Portal

You need to configure an Azure solution that meets the following requirements: - Secures websites from attacks - Generates reports that contain details of attempted attacks What should you include in the solution? O Azure Firewall O DDoS protection O a network security group O Azure Information Protection

DDoS protection

What is the first stage in the Microsoft Cloud Adoption Framework for Azure? O Make a plan O Define your strategy O Adopt the cloud O Ready your organization

Define your strategy

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. What are two possible solutions? O Modify a network security group O Modify an Azure Traffic Manager profile O Modify an Azure firewall O Modify a DDoS protection plan

Modify a network security group Modify an Azure firewall

You are planning to migrate a company to Azure. Each of the company's numerous divisions will have an administrator in place to manage the Azure resources used by their respective division. You want to make sure that the Azure deployment you employ allows for Azure to be segments for the divisions, while keeping administrative effort to a minimum. Solution: You plan to make use of several azure active directory directories Does the solution meet the goal?

No

You have been informed by your superiors of the company's intentions to automate server deployment to Azure. There is, however some concern that administrative credentials could be uncovered during this process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution. Solution: You recommend the use of Azure Information Protection. Does this meet the goal?

No

Your Azure environment contains multiple Azure VMs. You need to ensure that a vm named VM1 is accessible from the internet over HTTP. Solution: You modify an Azure Traffic Manager profile. Does this meet the goal?

No

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a DDoS protection plan. Does this meet the goal?

No

Your companies active directory forest includes thousands of user accounts. You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired. You are required to employ a strategy that reduces the effect on uses, once the planned migration has been completed. Solution: You plan to require Azure MFA. Does this meet the goal?

No

Your company has an Azure subscription that contains the following unused resources: - 20 user accounts in Azure AD - Five groups in Azure AD - 10 public IP addresses - 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused groups. Does this meet the goal?

No

Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Basic support plan. Does this meet the goal?

No

Your company's active directory forest includes thousands of user accounts. You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired. You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed. Solution: You plan to require Azure Multi-Factor Authentication. Does the solution meet the goal?

No

Select yes or no: A platform as a service solution that hosts web apps in Azure provides full control of the operation systems that host applications. - A platform as a service solution provides additional memory to apps by changing pricing tiers. - A platform as a service solution can automatically scale the number of instances based on demand. -

No No Yes

Eval the underlined text: The Azure __Standard__ support plan is the lowest cost option to receive 24x7 access to support engineers by phone. O Basic O Professional Direct O No change is needed O Developer

No change is needed

Your company plans to request an architectural review of an Azure environment from Microsoft. The company currently has a Basic support plan. You need to recommend a new support plan for the company. The solution must minimize costs. Which support plan should you recommend? O Premier O Standard O Developer O Professional Direct

Premier

In which Azure support plans can you open a new support request? O Premier and Professional Direct only O Premier, Professional Direct, and Standard only O Premier, Professional Direct, Standard, and Developer only O Premier, Professional Direct, Standard, Developer, and Basic

Premier, Professional Direct, Standard, and Developer only

In which Azure support plans can you open a new support request? O Professional Direct O Standard O Developer O Basic O Premier

Professional Direct Standard Developer Premier

Your Azure trial account expired last week. You are now unable to ____. O Start an existing Azure virtual machine O Access your data stored in Azure O Access the Azure portal O Create additional Azure Active Directory user accounts

Start an existing Azure virtual machine

Your network contains an Active Directory forest. The forest contains 5,000 user accounts. Your company plans to migrate all network resources to Azure and to decommission the on-premises data center. You need to recommend a solution to minimize the impact on users after the planned migration. What should you recommend? O Implement Azure Multi-Factor Authentication (MFA) O Sync all the Active Directory user accounts to Azure Active Directory (Azure AD) O Instruct all users to change their password O Create a guest user account in Azure Active Directory (Azure AD) for each user

Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)

Your company has a Software Assurance agreement that includes Microsoft SQL Server Licenses. You plan to deploy SQL Server on Azure virtual machines. What should you do to minimize licensing costs for the deployment? O Configure Azure Cost Management budgets. O Use Azure reservations O Deallocate the virtual machines during off hours. O Use Azure Hybrid Benefit

Use Azure Hybrid Benefit

Your Azure environment contains multiple Azure VMs. You need to ensure that a vm named VM1 is accessible from the internet over HTTP. Solution: You modify an Azure firewall. Does this meet the goal?

Yes

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a network security group. Does this meet the goal?

Yes

Your company has an Azure AD environment. Users occasionally connect to Azure AD via the internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords. Solution: You configure the use of Azure AD Identity Protection. Does this meet the goal?

Yes

Your company has an Azure subscription that contains the following unused resources: - 20 user accounts in Azure AD - Five groups in Azure AD - 10 public IP addresses - 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused public IP addresses. Does this meet the goal?

Yes

Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Premier support plan. Does this meet the goal?

Yes

Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Professional Direct support plan. Does this meet the goal?

Yes

Select yes or no: Most Azure services are introduced in private preview before begin introduced in public preview, and then in general availability - Azure services in public preview can be managed only by using the Azure CLI - The cost of an Azure service in private preview decreases when the service becomes generally available -

Yes No No

Select yes or no: Azure provides flexibility between capital expenditures and operational expenditures. - If you create two Azure virtual machines that use B2S size, each virtual machine will always generate the same monthly costs. - When an Azure virtual machine is stopped, you continue to pay storage costs associated to the virtual machine. -

Yes No Yes

To what should an application connect to retrieve security tokens? O an Azure key vault O a certificate store O an azure storage account O Azure Active directory

Azure Active directory

Evaluate the underlined text: From __Azure Cloud Shell__ you can track your company's regulatory standards and regulations such as ISO 27001. O no change is need O the Trust Center O the Microsoft Partner Portal O Compliance Manager NOT completed

Compliance Manager

Which statement accurately describes the Modern Lifecycle Policy for Azure services? O Microsoft provides mainstream support for a service for five years. O After a service is made generally available, Microsoft provides support for the service for a minimum of four years. O Microsoft provides a minimum of 12 months' notice before ending support for a service. O When a service is retired, you can purchase extended support for the service for up to five years.

Microsoft provides a minimum of 12 months' notice before ending support for a service.

Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation? O Network security groups (NSGs) O Azure Service Bus O A local network gateway O A route filter

Network security groups (NSGs)

You have been informed by your superiors of the company's intentions to automate server deployment to Azure. There is, however some concern that administrative credentials could be uncovered during this process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution. Solution: You recommend the use of Azure Multi-Factor Authentication (MFA). Does this meet the goal?

No

Your company has an Azure AD environment. Users occasionally connect to Azure AD via the internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords. Solution: You configure the use of Azure AD Privileged Identity Management. Does this meet the goal?

No

Your company has an Azure subscription that contains the following unused resources: - 20 user accounts in Azure AD - Five groups in Azure AD - 10 public IP addresses - 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused network interfaces. Does this meet the goal?

No

You are planning a strategy to deploy numerous web servers and database servers to Azure. This strategy should allow for connection types between the web servers and database servers to be controlled. Solution: You include network security groups in your strategy. Does this solution meet the goal?

Yes

Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Standard support plan. Does this meet the goal?

Yes

Which two types of customer are eligible to use Azure government to develop a cloud solution? Choose two O a United States government contractor O a European government contractor O a European government entity O a United States government entity O a Canadian government contractor

a United States government contractor a United States government entity

You plan to deploy several Azure virtual machines. You need to control the ports that devices on the internet can use to access the vms. What should you use? O a network security group O An Azure key vault O an Azure Active Directory role O An Azure Active Directory group

a network security group

You have a resource group named RG1. You need to prevent the creation of virtual machines only in RG1. The solution must ensure that other objects can be created in RG1. What should you use? O a lock O an Azure role O a tag O an Azure policy

an Azure policy

Your company has an Azure subscription that contains resources in several regions. You need to ensure that admins can only create resources in those regions. What should you use? O a management group O an Azure policy O a reservation O a read-only lock

an Azure policy

Your developers have created a portal web app for users in the Miami branch office. The web app will be publicly accessible and used by the Miami users to retrieve customer and product information. The web app is currently running in an on-premises test environment. You plan to host the web app on Azure. You need to determine which Azure web tier plan to host the web app. The web tier plan must meet the following requirements: + The website will use the miami.weyland.com URL. + The website will be deployed to two instances. + SSL support must be included. + The website requires 12 GB of storage. * Costs must be minimized. Which web tier plan should you use? O shared O free O standard O basic

standard

Eval the underlined text: You can create an Azure support request from __support.microsoft.com__. O the Azure portal O No change is needed O the Knowledge Center O the Security & Compliance admin center

the Azure portal