AZ-900-Set-2
HOTSPOT - You plan to create an Azure virtual machine. You need to identify which storage service must be used to store the unmanaged data disks of the virtual machine. What should you identify? To answer, select the appropriate service in the answer area. - Containers - Tables - File shares - Queues
Azure containers are the backbone of the virtual disks platform for Azure IaaS. Both Azure OS and data disks are implemented as virtual disks where data is durably persisted in the Azure Storage platform and then delivered to the virtual machines for maximum performance. Azure Disks are persisted in Hyper-V VHD format and stored as a page blob in Azure Storage.Reference:https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-pageblob-overview
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Data that is stored in the Archive access tier of an Azure Storage account - can be accessed at any time by using azcopy.exe - can only be read by using Azure Backup - must be restored before the data can be accessed - must be rehydrated before the data can be accessed.
Azure storage offers different access tiers: hot, cool and archive. The archive access tier has the lowest storage cost. But it has higher data retrieval costs compared to the hot and cool tiers. Data in the archive tier can take several hours to retrieve. While a blob is in archive storage, the blob data is offline and can't be read, overwritten, or modified. To read or download a blob in archive, you must first rehydrate it to an online tier. Example usage scenarios for the archive access tier include: ✑ Long-term backup, secondary backup, and archival datasets ✑ Original (raw) data that must be preserved, even after it has been processed into final usable form. ✑ Compliance and archival data that needs to be stored for a long time and is hardly ever accessed. Reference: https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal#archive-access-tier
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. All the Azure resources deployed to a resource group must use the same Azure region. If you assign a tag to a resource group, all the Azure resources in that resource group are assigned to the same tag. If you assign permissions for a user to manage a resource group, the user can manage all the Azure resources in that resource group.
Box 1: No -Azure resources deployed to a single resource group can be located in different regions. The resource group only contains metadata about the resources it contains. When creating a resource group, you need to provide a location for that resource group. You may be wondering, "Why does a resource group need a location? And, if the resources can have different locations than the resource group, why does the resource group location matter at all?" The resource group stores metadata about the resources. When you specify a location for the resource group, you're specifying where that metadata is stored. For compliance reasons, you may need to ensure that your data is stored in a particular region. Box 2: No -Tags for Resources are not inherited by default from their Resource Group Box 3: Yes -A resource group can be used to scope access control for administrative actions. By default, permissions set at the resource level are inherited by the resources in the resource group.Reference:https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview
HOTSPOT -You need to identify which blades in the Azure portal must be used to perform the following tasks: ✑ View security recommendations. ✑ Monitor the health of Azure services. ✑ Browse available virtual machine images. Which blade should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Monitor the health of Azure services Browse available virtual machine images View security recomendations - Monitor - Subscriptions - Marketplace - Advisor
Box 1:Azure Monitor is used to monitor the health of Azure services.Azure Monitor maximizes the availability and performance of your applications and services by delivering a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments. It helps you understand how your applications are performing and proactively identifies issues affecting them and the resources they depend on.Box 2:You can browse available virtual machine images in the Azure Marketplace.Azure Marketplace provides access and information on solutions and services available from Microsoft and their partners. Customers can discover, try, or buy cloud software solutions built on or for Azure. The catalog of 8,000+ listings provides Azure building blocks, such as Virtual Machines (VMs), APIs, Azure apps,Solution Templates and managed applications, SaaS apps, containers, and consulting services.Box 3.Azure Advisor displays security recommendations.Azure Advisor provides you with a consistent, consolidated view of recommendations for all your Azure resources. It integrates with Azure Security Center to bring you security recommendations. You can get security recommendations from the Security tab on the Advisor dashboard.Security Center helps you prevent, detect, and respond to threats with increased visibility into and control over the security of your Azure resources. It periodically analyzes the security state of your Azure resources. When Security Center identifies potential security vulnerabilities, it creates recommendations. The recommendations guide you through the process of configuring the controls you need.References:https://docs.microsoft.com/en-us/azure/azure-monitor/overview https://docs.microsoft.com/en-us/azure/marketplace/marketplace-faq-publisher-guide https://docs.microsoft.com/en-us/azure/advisor/advisor-security-recommendations
Your company plans to deploy an Artificial Intelligence (AI) solution in Azure. What should the company use to build, test, and deploy predictive analytics solutions? A. Azure Logic Apps B. Azure Machine Learning Designer C. Azure Batch D. Azure Cosmos DB
Correct Answer: B Azure Machine Learning designer lets you visually connect datasets and modules on an interactive canvas to create machine learning models.Reference:https://docs.microsoft.com/en-us/azure/machine-learning/concept-designer
You have an Azure web app. You need to manage the settings of the web app from an iPhone. What are two Azure management tools that you can use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. Azure CLI B. the Azure portal C. Azure Cloud Shell D. Windows PowerShell E. Azure Storage Explorer
Correct Answer: BC The Azure portal is the web-based portal for managing Azure. Being web-based, you can use the Azure portal on an iPhone.Azure Cloud Shell is a web-based command line for managing Azure. You access the Azure Cloud Shell from the Azure portal. Being web-based, you can use theAzure Cloud Shell on an iPhone.Incorrect Answers:A: Azure CLI can be installed on MacOS but it cannot be installed on an iPhone.D: Windows PowerShell can be installed on MacOS but it cannot be installed on an iPhone.E: Azure Storage Explorer is not used to manage Azure web apps.References:http://www.deployazure.com/management/managing-azure-from-ipad/
HOTSPOT - You need to view a list of planned maintenance events that can affect the availability of an Azure subscription. Which blade should you use from the Azure portal? To answer, select the appropriate blade in the answer area. Microsoft Azure - All services - Dashboard - All resources - Resource groups - App services - Function Apps - SQL Databases - Azure Cosmos DB - Virtual Machines - Load balancers
On the Help and Support blade, there is a Service Health option. If you click Service Health, a new blade opens. The Service Health blade contains the Planned Maintenance link which opens a blade where you can view a list of planned maintenance events that can affect the availability of an Azure subscription.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS--generate-ssh-keys You need to create VM1 in Subscription1 by using the command. Solution: From a computer that runs Windows 10, install Azure CLI. From PowerShell, sign in to Azure and then run the command. Does this meet the goal? A. Yes B. No
Answer should be: Yes. Explanation/Reference: The command can be run from PowerShell or the command prompt if you have the Azure CLI installed. References: https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?view=azure-cli-latest
HOTSPOT - You plan to implement an Azure database solution. You need to implement a database solution that meets the following requirements: ✑ Can add data concurrently from multiple regions ✑ Can store JSON documents Which database service should you deploy? To answer, select the appropriate service in the answer area. Databases: - Azure Cosmos DB - Azure Database for MySQL servers - Azure Database for MariaDB servers - SQL Data warehouses - Azure Cache for Redis - Data factories - Virtual Clusters - Elastic Job Agents - SQL databases - Azure Database for PostgreSQL servers - SQL servers - Azure Database Migration Services - SQL server stretch databases - SQL elastic pools - Managed databases - SQL managed instances
Azure Cosmos DB is Microsoft's globally distributed, multi-model database service. With a click of a button, Cosmos DB enables you to elastically and independently scale throughput and storage across any number of Azure regions worldwide.Azure Cosmos DB is a great way to store unstructured and JSON data. Combined with Azure Functions, Cosmos DB makes storing data quick and easy with much less code than required for storing data in a relational database.References:https://docs.microsoft.com/en-us/azure/cosmos-db/introduction https://docs.microsoft.com/en-us/azure/azure-functions/functions-integrate-store-unstructured-data-cosmosdb?tabs=csharp
HOTSPOT -To complete the sentence, select the appropriate option in the answer area. - Azure policies provide - Resource group provide - Azure Resource Manager template provide - Management groups provide _____ a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment.
Azure Resource Manager templates provides a common platform for deploying objects to a cloud infrastructure and for implementing consistency across theAzure environment. Azure policies are used to define rules for what can be deployed and how it should be deployed. Whilst this can help in ensuring consistency, Azure policies do not provide the common platform for deploying objects to a cloud infrastructure. Reference:https://docs.microsoft.com/en-us/azure/governance/policy/overview
DRAG DROP -Match the Azure service to the correct definition. Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all. NOTE: Each correct match is worth one point. Select and Place: Answer Area: - An integrated solution for the deployment of code - A tool that provides guidance and recommendations to improve an Azure environment - A simplified tool to build intelligent Artificial Intelligence (AI) applications - Monitors web applications Answer Options: - Azure Advisor - Azure Cognitive Services - Azure Application Insights - Azure DevOps
Box 1: Azure DevOps. Azure DevOps is Microsoft's primary software development and deployment platform. DevOps influences the application lifecycle throughout its plan, develop, deliver and operate phases. Box 2: Azure Advisor. Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. It analyzes your resource configuration and usage telemetry and then recommends solutions that can help you improve the cost effectiveness, performance, high availability, and security of your Azure resources. Box 3: Azure Cognitive Services. Azure Cognitive Services are APIs, SDKs, and services available to help developers build intelligent applications without having direct AI or data science skills or knowledge. Azure Cognitive Services enable developers to easily add cognitive features into their applications. The goal of Azure Cognitive Services is to help developers create applications that can see, hear, speak, understand, and even begin to reason. The catalog of services within Azure Cognitive Services can be categorized into five main pillars - Vision, Speech, Language, Web Search, and Decision. Box 4. Azure Application Insights. Azure Application Insights detects and diagnoses anomalies in web apps. Application Insights, a feature of Azure Monitor, is an extensible Application Performance Management (APM) service for developers and DevOps professionals. Use it to monitor your live applications. It will automatically detect performance anomalies, and includes powerful analytics tools to help you diagnose issues and to understand what users actually do with your app. References: https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview https://azure.microsoft.com/en-gb/overview/what-is-devops/ https://docs.microsoft.com/en-us/azure/advisor/advisor-overview https://docs.microsoft.com/en-us/azure/cognitive-services/welcome
DRAG DROP - Match the Azure service to the correct description. Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all. NOTE: Each correct match is worth one point. Select and Place: Answer Area - A managed relational cloud database service - A cloud-based service that leverages massively parallel processing (MPP) - Can run massively parallel data transformation and processing programs across petabytes of data - An open-source framework for the distributed processing and analysis of big data sets in clusters Answer Options - Azure HDInsight - Azure Data Lake Analytics - Azure SQL Synapse Analytics - Azure SQL Database
Box 1: Azure SQL Database -SQL Server is a relational database service. Azure SQL Database is a managed SQL Server Database in Azure. The SQL Server is managed by Microsoft; you just have access to the database. Box 2: Azure SQL Synapse Analytics Azure SQL Synapse Analytics (previously called Data Warehouse) is a cloud-based Platform-as-a-Service (PaaS) offering from Microsoft. It is a large-scale, distributed, MPP (massively parallel processing) relational database technology in the same class of competitors as Amazon Redshift or Snowflake. Azure SQLSynapse Analytics is an important component of the Modern Data Warehouse multi-platform architecture. Because Azure SQL Synapse Analytics is an MPP system with a shared-nothing architecture across distributions, it is meant for large-scale analytical workloads which can take advantage of parallelism. Box 3: Azure Data Lake Analytics You can process big data jobs in seconds with Azure Data Lake Analytics. You can process petabytes of data for diverse workload categories such as querying,ETL, analytics, machine learning, machine translation, image processing and sentiment analysis by leveraging existing libraries written in .NET languages, R orPython. Box 4: Azure HDInsight. Apache Hadoop was the original open-source framework for distributed processing and analysis of big data sets on clusters. The Hadoop ecosystem includes related software and utilities, including Apache Hive, Apache HBase, Spark, Kafka, and many others. Azure HDInsight is a fully managed, full-spectrum, open-source analytics service in the cloud for enterprises. The Apache Hadoop cluster type in Azure HDInsight allows you to use HDFS, YARN resource management, and a simple MapReduce programming model to process and analyze batch data in parallel.Reference:https://azure.microsoft.com/en-us/services/sql-database/https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-overview-what-is https://docs.microsoft.com/bs-latn-ba/azure/hdinsight/hadoop/apache-hadoop-introduction https://www.blue-granite.com/blog/is-azure-sql-data-warehouse-a-good-fit-updated https://azure.microsoft.com/en-gb/services/data-lake-analytics/
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Azure Advisor provides recommendations on how to improve the security of an Azure Active Directory (Azure AD) environment. Azure Advisor provides recommendations on how to reduce the cost of running Azure virtual machines. Azure Advisor provides recommendations on how to configure the network settings on Azure virtual machines.
Box 1: No -Azure Advisor provides you with a consistent, consolidated view of recommendations for all your Azure resources. It integrates with Azure Security Center to bring you security recommendations. You can get security recommendations from the Security tab on the Advisor dashboard. Examples of recommendations include restricting access to virtual machines by configuring Network Security Groups, enabling storage encryption, installing vulnerability assessment solutions. However, Azure Advisor does not provide recommendations on how to improve the security of an Azure AD environment. Box 2: Yes -Advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized resources. You can get cost recommendations from the Cost tab on the Advisor dashboard. Box 3: No. Azure Advisor does not provide recommendations on how to configure network settings on Azure virtual machines.References:https://docs.microsoft.com/en-us/azure/advisor/advisor-security-recommendations https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations
HOTSPOT -To complete the sentence, select the appropriate option in the answer area. You have an application that is comprised of an Azure web app that has a Service Level Agreement (SLA) of 99.95 percent and an Azure SQL database that has an SLA of 99.99 percent. The composite SLA for the application is: - the product of both SLAs, which equals 99.94 percent - the lowest SLA associated to the application, which is 99.95 percent - the highest SLA associated to the application, which is 99.99 percent - the difference between the two SLAs, which is 0.05 percent.
Composite SLAs involve multiple services supporting an application, each with differing levels of availability. For example, consider an App Service web app that writes to Azure SQL Database. At the time of this writing, these Azure services have the following SLAs:✑ App Service web apps = 99.95%✑ SQL Database = 99.99%What is the maximum downtime you would expect for this application? If either service fails, the whole application fails. The probability of each service failing is independent, so the composite SLA for this application is 99.95% × 99.99% = 99.94%. That's lower than the individual SLAs, which isn't surprising because an application that relies on multiple services has more potential failure points.Reference:https://docs.microsoft.com/en-us/azure/architecture/reliability/requirements#understand-service-level-agreements
Your company plans to migrate all its network resources to Azure. You need to start the planning process by exploring Azure. What should you create first? A. a subscription B. a resource group C. a virtual network D. a management group
Correct Answer: A The first thing you create in Azure is a subscription. You can think of an Azure subscription as an "˜Azure account'. You get billed per subscription. A subscription is an agreement with Microsoft to use one or more Microsoft cloud platforms or services, for which charges accrue based on either a per-user license fee or on cloud-based resource consumption. Microsoft's Software as a Service (SaaS)-based cloud offerings (Office 365, Intune/EMS, and Dynamics 365) charge per-user license fees. Microsoft's Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) cloud offerings (Azure) charge based on cloud resource consumption. You can also use a trial subscription, but the subscription expires after a specific amount of time or consumption charges. You can convert a trial subscription to a paid subscription. Organizations can have multiple subscriptions for Microsoft's cloud offerings.References:https://docs.microsoft.com/en-us/office365/enterprise/subscriptions-licenses-accounts-and-tenants-for-microsoft-cloud-offerings
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system. Solution: You use Bash in Azure Cloud Shell. Does this meet the goal? A. Yes B. No
Correct Answer: A With Azure Cloud Shell, you can create virtual machines using Bash or PowerShell.Azure Cloud Shell is an interactive, authenticated, browser-accessible shell for managing Azure resources. It provides the flexibility of choosing the shell experience that best suits the way you work, either Bash or PowerShell.Reference:https://docs.microsoft.com/en-us/azure/cloud-shell/quickstart https://docs.microsoft.com/en-us/azure/cloud-shell/overview
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys You need to create VM1 in Subscription1 by using the command. Solution: From the Azure portal, launch Azure Cloud Shell and select PowerShell. Run the command in Cloud Shell. Does this meet the goal? A. Yes B. No
Correct Answer: A The command can be run in the Azure Cloud Shell. Although this question says you select PowerShell rather than Bash, the Az commands will work in PowerShell. The Azure Cloud Shell is a free interactive shell. It has common Azure tools preinstalled and configured to use with your account. To open the Cloud Shell, just select Try it from the upper right corner of a code block. You can also launch Cloud Shell in a separate browser tab by going to https://shell.azure.com/bash.Reference:https://docs.microsoft.com/en-us/azure/virtual-machines/linux/quick-create-cli
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0 installed. Does this meet the goal? A. Yes B. No
Correct Answer: AA PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell script needs to be run in PowerShell.In this question, the computer has PowerShell Core 6.0 installed. Therefore, this solution does meet the goal.Note: To create Azure resources using PowerShell, you would need to import the Azure PowerShell module which includes the PowerShell cmdlets required to create the resources.References:https://docs.microsoft.com/en-us/powershell/scripting/components/ise/how-to-write-and-run-scripts-in-the-windows-powershell-ise?view=powershell-6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell. Does this meet the goal? A. Yes B. No
Correct Answer: AA PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell script needs to be run in PowerShell.With the Azure Cloud Shell, you can run PowerShell cmdlets and scripts in a Web browser. You log in to the Azure Portal and select the Azure Cloud Shell option.This will open a PowerShell session in the Web browser. The Azure Cloud Shell has the necessary Azure PowerShell module installed. Note: to run a PowerShell script in the Azure Cloud Shell, you need to change to the directory where the PowerShell script is stored.References:https://docs.microsoft.com/en-us/azure/cloud-shell/quickstart-powershell
Your company plans to deploy several million sensors that will upload data to Azure. You need to identify which Azure resources must be created to support the planned solution. Which two Azure resources should you identify? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. Azure Data Lake B. Azure Queue storage C. Azure File Storage D. Azure IoT Hub E. Azure Notification Hubs
Correct Answer: AD IoT Hub (Internet of things Hub) provides data from millions of sensors.IoT Hub is a managed service, hosted in the cloud, that acts as a central message hub for bi-directional communication between your IoT application and the devices it manages. You can use Azure IoT Hub to build IoT solutions with reliable and secure communications between millions of IoT devices and a cloud- hosted solution backend. You can connect virtually any device to IoT Hub.There are two storage services IoT Hub can route messages to -- Azure Blob Storage and Azure Data Lake Storage Gen2 (ADLS Gen2) accounts. Azure DataLake Storage accounts are hierarchical namespace-enabled storage accounts built on top of blob storage. Both of these use blobs for their storage.References:https://docs.microsoft.com/en-us/azure/iot-hub/about-iot-hubhttps://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-messages-d2c
You have an Azure environment that contains multiple Azure virtual machines. You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines. You need to recommend which Azure resources must be created for the planned solution. Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. a virtual network gateway B. a load balancer C. an application gateway D. a virtual network E. a gateway subnet
Correct Answer: AE To implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines, you need to configure aVPN (Virtual Private Network) to connect the on-premises network to the Azure virtual network.The Azure VPN device is known as a Virtual Network Gateway. The virtual network gateway needs to be located in a dedicated subnet in the Azure virtual network. This dedicated subnet is known as a gateway subnet and must be named "˜GatewaySubnet'.Note: a virtual network (answer D) is also required. However, as we already have virtual machines deployed in a Azure, we can assume that the virtual network is already in place.References:https://docs.microsoft.com/en-us/office365/enterprise/connect-an-on-premises-network-to-a-microsoft-azure-virtual-network
Your company plans to move several servers to Azure. The company's compliance policy states that a server named FinServer must be on a separate network segment. You are evaluating which Azure services can be used to meet the compliance policy requirements. Which Azure solution should you recommend? A. a resource group for FinServer and another resource group for all the other servers B. a virtual network for FinServer and another virtual network for all the other servers C. a VPN for FinServer and a virtual network gateway for each other server D. one resource group for all the servers and a resource lock for FinServer
Correct Answer: B Networks in Azure are known as virtual networks. A virtual network can have multiple IP address spaces and multiple subnets. Azure automatically routes traffic between different subnets within a virtual network.The question states that FinServer must be on a separate network segment. The only way to separate FinServer from the other servers in networking terms is to place the server in a different virtual network to the other servers.References:https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-arm
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS--generate-ssh-keys You need to create VM1 in Subscription1 by using the command. Solution: From a computer that runs Windows 10, install Azure CLI. From a command prompt, sign in to Azure and then run the command. Does this meet the goal? A. Yes B. No
Correct Answer: B The command can be run from PowerShell or the command prompt if you have the Azure CLI installed. However, it must be run on the Windows 10 computer, not in Azure.References:https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?view=azure-cli-latest
You plan to map a network drive from several computers that run Windows 10 to Azure Storage. You need to create a storage solution in Azure for the planned mapped drive. What should you create? A. an Azure SQL database B. a virtual machine data disk C. a Files service in a storage account D. a Blobs service in a storage account
Correct Answer: C Azure Files is Microsoft's easy-to-use cloud file system. Azure file shares can be seamlessly used in Windows and Windows Server.To use an Azure file share with Windows, you must either mount it, which means assigning it a drive letter or mount point path, or access it via its UNC path.Unlike other SMB shares you may have interacted with, such as those hosted on a Windows Server, Linux Samba server, or NAS device, Azure file shares do not currently support Kerberos authentication with your Active Directory (AD) or Azure Active Directory (AAD) identity, although this is a feature we are working on.Instead, you must access your Azure file share with the storage account key for the storage account containing your Azure file share. A storage account key is an administrator key for a storage account, including administrator permissions to all files and folders within the file share you're accessing, and for all file shares and other storage resources (blobs, queues, tables, etc) contained within your storage account.References:https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows
You have an on-premises application that sends email notifications automatically based on a rule. You plan to migrate the application to Azure. You need to recommend a serverless computing solution for the application. What should you include in the recommendation? A. a web app B. a server image in Azure Marketplace C. a logic app D. an API app
Correct Answer: C Azure Logic Apps is a cloud service that helps you schedule, automate, and orchestrate tasks, business processes, and workflows when you need to integrate apps, data, systems, and services across enterprises or organizations. Logic Apps simplifies how you design and build scalable solutions for app integration, data integration, system integration, enterprise application integration (EAI), and business-to-business (B2B) communication, whether in the cloud, on premises, or both. For example, here are just a few workloads you can automate with logic apps: ✑ Process and route orders across on-premises systems and cloud services. ✑ Send email notifications with Office 365 when events happen in various systems, apps, and services. ✑ Move uploaded files from an SFTP or FTP server to Azure Storage. ✑ Monitor tweets for a specific subject, analyze the sentiment, and create alerts or tasks for items that need review. References:https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-overview
You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region. Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1? A. Azure Service Fabric B. Azure Monitor C. Azure virtual machines D. Azure Advisor
Correct Answer: C In the Azure virtual machines page in the Azure portal, there is a named Maintenance Status. This column will display service issues that could affect your virtual machine. A service failure is rare but host server maintenance that could affect your virtual machines is more common. Azure periodically updates its platform to improve the reliability, performance, and security of the host infrastructure for virtual machines. The purpose of these updates ranges from patching software components in the hosting environment to upgrading networking components or decommissioning hardware.References:https://docs.microsoft.com/en-us/azure/virtual-machines/maintenance-and-updates
You plan to deploy a website to Azure. The website will be accessed by users worldwide and will host large video files. You need to recommend which Azure feature must be used to provide the best video playback experience. What should you recommend? A. an application gateway B. an Azure ExpressRoute circuit C. a content delivery network (CDN) D. an Azure Traffic Manager profile
Correct Answer: C The question states that users are located worldwide and will be downloading large video files. The video playback experience would be improved if they can download the video from servers in the same region as the users. We can achieve this by using a content deliver network. A content delivery network (CDN) is a distributed network of servers that can efficiently deliver web content to users. CDNs store cached content on edge servers in point-of-presence (POP) locations that are close to end users, to minimize latency. Azure Content Delivery Network (CDN) offers developers a global solution for rapidly delivering high-bandwidth content to users by caching their content at strategically placed physical nodes across the world. Azure CDN can also accelerate dynamic content, which cannot be cached, by leveraging various network optimizations using CDN POPs. For example, route optimization to bypass Border Gateway Protocol (BGP). The benefits of using Azure CDN to deliver web site assets include: ✑ Better performance and improved user experience for end users, especially when using applications in which multiple round-trips are required to load content. ✑ Large scaling to better handle instantaneous high loads, such as the start of a product launch event. ✑ Distribution of user requests and serving of content directly from edge servers so that less traffic is sent to the origin server. References: https://docs.microsoft.com/en-us/azure/cdn/cdn-overview
You have an Azure environment that contains 10 virtual networks and 100 virtual machines. You need to limit the amount of inbound traffic to all the Azure virtual networks. What should you create? A. one application security group (ASG) B. 10 virtual network gateways C. 10 Azure ExpressRoute circuits D. one Azure firewall
Correct Answer: DYou can restrict traffic to multiple virtual networks with a single Azure firewall.Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It's a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.You can centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks. Azure Firewall uses a static public IP address for your virtual network resources allowing outside firewalls to identify traffic originating from your virtual network.References:https://docs.microsoft.com/en-us/azure/firewall/overview
HOTSPOT -Several support engineers plan to manage Azure by using the computers shown in the following table: Name - Operating system Computer1 - Windows10 Computer2 - Ubuntu Computer3 - MacOS Mojave You need to identify which Azure management tools can be used from each computer. What should you identify for each computer? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer Options: - The Azure CLI and the Azure portal - The Azure portal and Azure Powershell - The Azure CLI and Azure Powershell - The Azure CLI, the Azure portal, and Azure PowerShell
Previously, the Azure CLI (or x-plat CLI) was the only option for managing Azure subscriptions and resources from the command-line on Linux and macOS. Now with the open source and cross-platform release of PowerShell, you'll be able to manage all your Azure resources from Windows, Linux and macOS using your tool of choice, either the Azure CLI or Azure PowerShell cmdlets. The Azure portal runs in a web browser so can be used in either operating system.Reference:https://buildazure.com/2016/08/18/powershell-now-open-source-and-cross-platform-linux-macos-windows/
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed. Does this meet the goal? A. Yes B. No
orrect Answer: BA PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell script needs to be run in PowerShell.PowerShell can now be installed on Linux. However, the question states that the computer has Azure CLI tools, not PowerShell installed. Therefore, this solution does not meet the goal.References:https://docs.microsoft.com/en-us/powershell/scripting/components/ise/how-to-write-and-run-scripts-in-the-windows-powershell-ise?view=powershell-6
