Azure Fundamentals (Section 3)

What are the different level of access tiers for blob data? Select all applicable options. a. Hot tier b. Cold tier c. Archive tier d. Permanent tier

a. Hot tier b. Cold tier c. Archive tier

You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system. What are 3 possible solutions? a. Use Bash in Azure Cloud Shell b. Use PowerShell in Azure Cloud Shell c. Use the PowerApps Portal d. Use the Security & Compliance admin center e. Use the Azure Portal

a. Use bash in Azure Cloud Shell b. Use PowerShell in Azure Cloud Shell e. Use the Azure portal

For each of the following statements, select Yes if the statement is true. Otherwise, select no. a. You can associate a network security group (NSG) to a virtual network subnet. b. You can associate a network security group (NSG) to a virtual network. c. You can associate a network security group (NSG) to a network interface

a. Yes b. No c. Yes

NSG can be applied to what level? a. Subscription level b. Subnet level c. Management group level d. Virtual machine/NIC level

b. Subnet level d. Virtual machine/NIC level

What are two characteristics of the public cloud? a. Dedicated hardware b. Unsecured connections c. Limited storage d. Metered pricing e. Self-service management

d. Metered pricing e. Self-service management

The company would like to develop a cloud solution by making use of Azure government. Azure government can only be used by certain types of clients to develop cloud solutions. Which of the following are the types of customers that can make use of Azure government in this situation? Options: a. A government contractor from any country. b. A government entity from any country. c. A European government contractor d. A European government entity e. A US Government contractor f. A US Government entity

e. A US Government contractor f. A US Government entity

What is Azure policy initiative? a. A collection of policy definitions b. Collection of Azure policy definition assignments c. Group of Azure blue print definitions d. Group of role based access controls (RBAC)

A collection of policy definitions

A company is using containers for deploying all of its web applications. During a security audit, you notice that Microsoft Defender for cloud is not being used properly to provide misconfigurations related to containers. For which resource can you NOT use Microsoft Defender for cloud to secure the containers? a. Azure Kubernetes Service (AKS) b. Container hosts (VMs running Docker) c. Azure Container Registry (ACR) d. Azure Container Instance (ACI)

Azure Container Instance (ACI)

You can enable just in time (JIT) VM access by using: a. Azure Bastion b. Azure Firewall c. Azure Front Door d. Azure Security Center

Azure Security Center

Azure site recovery provides fault tolerance for virtual machines. a. No change is needed b. Disaster recovery c. Elasticity d. High Availability

Disaster Recovery

A systems ability to scale dynamically is called: a. Agility b. Elasticity c. Extendibility

Elasticity

True or False: Azure files is an example of SaaS.

False

True or False: You can join Android devices to Azure Active Directory.

False

Which resources can be used as a source for a Network Security group inbound security rule? a. Application security groups only b. IP address only c. Service tags only d. IP addresses, service tags, and application security groups.

IP addresses, service tags, and application security groups.

Which statement accurately describes the modern lifecycle policy for Azure services? a. Microsoft provides mainstream support for a service for 5 years. b. Microsoft provides a minimum of 12 months' notice before ending support for a service. c. After a service is made generally available, Microsoft provides support for the service for a minimum of 4 years. d. When a service is retired, you can purchase extended support for the service for up to five years.

Microsoft provides a minimum of 12 months' notice before ending support for a service.

Use DDoS protection service in combination with a web application firewall (WAF) for protection both at the _________ (layer 3 and 4, offered by DDoS protection standard) and at the _________ (layer 7 offered by WAF). a. Physical security b. Identity and access c. Perimeter d. Network e. Compute f. Application g. Data

Network Application

You are planning to migrate a company to Azure. Each of the company's numerous divisions will have an administrator in place to manage the Azure resources used by their respective division. You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the divisions, while keeping administrative effort to a minimum. Solution: You plan to make use of several Azure AD directories. Does this solution meet the goal?

No

You are required to deploy an artificial intelligence (AI) solution in Azure. You want to make sure that you are able to build, test, and deploy predictive analytics for the solution. Solution: You should make use of Azure Cosmos DB. Does this solution meet the goal?

No

You are tasked with deploying Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Platform as a Service. Does the solution meet the goal?

No

Your company is planning to migrate all their virtual machines to an Azure pay-as-you-go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center. You are required to make sure that the intended Azure solution uses the correct expenditure model. Solution: You should recommend the use of the elastic expenditure model. Does this solution meet the goal?

No

Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that management groups be included in the strategy. Does the solution meet the goal?

No

Your company's subscription includes a basic support plan. They would like to request an assessment of an Azure environment design from Microsoft. This is, however, not supported by the existing plan. You want to make sure that the company subscribes to a support plan that allows this functionality, while keeping expenses to a minimum. Solution: You recommend that the company subscribes to the Premier support plan. Does the solution meet the goal?

No

Your company has virtual machines hosted in Microsoft Azure. The VMs are located in a single Azure virtual network named VNet1. The company has users that work remotely. The remote workers require access to the VMs on VNet1. You need to provide access for the remote workers. What should you do? a. Configure a site-to-site VPN b. Configure a VNet-to-VNet VPN c. Configure a point-to-site VPN d. Configure Direct Access on a Windows Server 2012 server VM e. Configure a Multi-site VPN

Point-to-Site VPN

Which of the following is correct lifecycle of Azure services? a. Private preview -- Public preview -- Generally available b. Dev preview -- Public preview -- Generally available

Private preview -- Public preview -- Generally available

True or False: Azure SQL database is an example of PaaS.

True

True or False: Cloud computing leverages virtualization to provide services to multiple customers simultaneously.

True

What is guaranteed in an Azure service level agreement (SLA) for virtual machines? a. Uptime b. Feature availability c. Bandwidth d. Performance

Uptime

An availability zone in Azure has physically separate locations across two continents. a. No change is needed b. Within a single Azure region c. Within multiple Azure regions d. Within a single Azure datacenter

Within a single Azure region

You have an Azure subscription named Subscription1. You sign into the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys You need to create mVM1 in Subscription1 by using the command. Solution: From a computer that runs Windows 10, install Azure CLI. From a command prompt, sign into Azure and then run the command. Does this meet the goal?

Yes

Your company's active directory forest includes thousands of user accounts. You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired. You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed. Solution: You plan to sync all the Active directory user accounts to Azure active directory. Does the solution meet the goal?

Yes

Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that the Azure Resource Manager templates be included in the strategy. Does the solution meet the goal?

Yes

You are tasked with deploying Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Software as a Service. Does the solution meet the goal?

No

You have been informed by your superiors of the company intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during this process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution. Solution: You recommend the use of Azure Information Protection. Does this solution meet the goal?

No

Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during that same week it was deployed. 60% of the virtual machines have Windows Server 2016 installed, while the other 40% has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this, is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure reserved virtual machine instances. Does this solution meet the goal?

No

Your developers have created 10 web applications that must be hosted on Azure. You need to determine which Azure web tier plan to host the web apps. The web tier plan must meet the following requirements: 1) the web apps will use custom domains, 2) the web apps each require 10 GB of storage, 3) the web apps must each run in dedicated compute instances, 4) load balancing between instances must be included, and 5) costs must be minimized. Which web tier plan should you use? a. Basic b. Developer c. Free d. Standard

Standard

True or False: Horizontal scaling and vertical scaling are two types of scaling in Azure.

True

True or False: You can create group policies in Azure active directory.

True

True or False: You can join Windows 10 devices to Azure Active Directory.

True

Yes or No: A company is planning on deploying Microsoft Azure resources to a resource group (RG). But the resources would belong to different locations. Can you have resources that belong to the same resource group but be in multiple locations?

Yes

You are tasked with deploying Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Infrastructure as a Service. Does the solution meet the goal?

Yes

You have an Azure subscription named Subscription1. You sign into the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys You need to create VM1 in Subscription1 by using the command. Solution: From the Azure portal, launch Azure Cloud Shell and select Bash. Run the command in Cloud Shell. Does this meet the goal?

Yes

Azure services in public preview can be managed using which of the management tools? a. Azure portal b. Azure CLI

a. Azure portal b. Azure CLI

Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that the Azure API Management service be included in the strategy. Does the solution meet the goal?

No

You need to identify the type of failure for which an Azure availability zone can be used to protect access to Azure services. What should you identify? a. A storage failure b. An Azure region failure c. A physical server failure d. An Azure data center failure

An Azure data center failure

A company is planning on hosting an application on a set of virtual machines. The virtual machines are going to be running for a prolonged duration of time. Which of the following should be considered to reduce the overall cost of virtual machine usage? a. Premium disks b. Virtual machine scale sets c. Azure reservations d. Azure resource groups

Azure Reservations

Your developers have created a portal web app for users in the Miami branch office. The web app will be publicly accessible and used by the Miami users to retrieve customer and product information. The web app is currently running in an on-premises test environment. You plan to host the web app on Azure. You need to determine which Azure web tier plan to host the web app. The web tier must meet the following requirements: 1) the website will use the miami.weyland.com URL, 2) the website will be deployed in two instances, 3) SSL support must be included, 4) the website requires 12 GB of storage, 5) Costs must be minimized. Which web tier should you use? a. Basic b. Developer c. Free d. Standard e. Shared

Standard

You are required to deploy an artificial intelligence (AI) solution in Azure. You want to make sure that you are able to build, test, and deploy predictive analytics for the solution. Solution: You should make use of Azure machine learning studio. Does the solution meet the goal?

Yes

Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during that same week it was deployed. 60% of the virtual machines have Windows Server 2016 installed, while the other 40% has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this effort, is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure DevTest labs. Does this solution meet the goal?

Yes

For each of the following statements, select Yes if the statement is true. Otherwise, select no. a. With a consumption-based plan, you pay a fixed rate for all data sent to or from virtual machines hosted in the cloud. b. With a consumption-based plan, you reduce overall costs by paying only for extra capacity when it is required. c. Serverless computing is an example of a consumption-based plan.

a. No b. Yes c. Yes

For each of the following statements, select Yes if the statement is true. Otherwise, select no. a. Most Azure services are introduced in private preview before being introduced in public preview and then in general availability. b. Azure services in public preview can be managed only by using Azure CLI c. The cost of an Azure service in private preview decrease when the service becomes generally available.

a. Yes b. No c. No