Test 2

Azure Active Directory (Azure AD)

Azure Active Directory (Azure AD): Azure AD is the Active Directory service for a tenant. Each directory has one or more domains. A directory can have many subscriptions associated with it, but only one tenant.

You have to identity the right category for each of the following Azure Services - Azure Kubernetes - Azure Storage Accounts Which of the following category does Azure Kubernetes come under?

Azure Kubernetes comes as a "Platform as a service".

Azure tenant ID

Azure tenant ID: A tenant ID is a unique way to identify an Azure AD instance within an Azure subscription.

You are trying to understand the different cloud models. Which of the following are advantages of using a hybrid cloud model? Choose 2 answers from the options give below

Better control More flexibility Cost effectiveness Ease on transition

You are trying to understand the different cloud models. Which of the following are advantages of using the private cloud? Choose 2 answers from the options give below

Better security Higher scalability More flexibility

A company is planning on using Microsoft Azure Cloud for hosting resources. Which of the following is a key advantage of hosting resources in the Azure private cloud?

Different departments in your organization can have a segmentation of resources defined in Azure because A private cloud consists of computing resources used exclusively by one business or organization. The private cloud can be physically located at your organization's on-site datacenter, or it can be hosted by a third-party service provider. But in a private cloud, the services and infrastructure are always maintained on a private network and the hardware and software are dedicated solely to your organization. In this way, a private cloud can make it easier for an organization to customize its resources to meet specific IT requirements. Private clouds are often used by government agencies, financial institutions, any other mid- to large-size organizations with business-critical operations seeking enhanced control over their environment.

A company is planning on hosting an application on a set of Virtual Machines in Microsoft Azure. They want to ensure that the application survives a region wide failure within Azure. Which of the following concept needs to be considered to fulfill this requirement?

Disaster Recovery is correct. Disaster recovery is the process of restoring application functionality in the wake of a catastrophic loss.

An application consists of a set of virtual machines hosted in a Virtual Network. In a month, the application seems to have a load of around 20% for 3 weeks. During the last week, the load on the application reached 80%. Which of the following concept would you implement to ensure least cost and efficiency of the underlying application infrastructure?

Elasticity

elasticity

Elasticity is a term related to scaling. Elastic computing is the ability to quickly expand or decrease computer processing, memory, or storage resources to meet changing demands.

A company wants to migrate their current on-premise servers to the cloud utilizing Microsoft Azure. They require that their servers are running even in the event that a single Data Center goes down. Which of the following terms best refers to the concept that needs to be implemented to fulfill this requirement?

Fault tolerance A context clue is given in the question itself that helps identify which term best describes the concept the company wants, "They want to ensure that their servers are running even in the event that a single Data Center goes down".

Hybrid Cloud

Hybrid Cloud is correct because a hybrid cloud is a computing environment that combines a public cloud and a private cloud by allowing data and applications to be shared between them. When computing and processing demand fluctuates, hybrid cloud computing gives businesses the ability to seamlessly scale their on-premises infrastructure up to the public cloud to handle any overflow—without giving third-party data-centers access to the entirety of their data. Organizations gain the flexibility and computing power of the public cloud for basic and non-sensitive computing tasks, while keeping business-critical applications and data on-premises, safely behind a company firewall.

A (fill in the blank) cloud is a computing environment that combines a public cloud and a private cloud by allowing data and applications to be shared between them.

Hybrid, A hybrid cloud is a computing environment that combines a public cloud and a private cloud by allowing data and applications to be shared between them. When computing and processing demand fluctuates, hybrid cloud computing gives businesses the ability to seamlessly scale their on-premises infrastructure up to the public cloud to handle any overflow—without giving third-party datacenters access to the entirety of their data. Organizations gain the flexibility and computing power of the public cloud for basic and non-sensitive computing tasks, while keeping business-critical applications and data on-premises, safely behind a company firewall.

A company is planning on creating several Virtual Machines within Microsoft Azure. They would be using the Azure Virtual Machine service. Which of the following is the right category to which the Azure Virtual Machine service belongs to?

Infrastructure as a service (IaaS) because IaaS gives you a server in the cloud (virtual machine) that you have complete control over. With an Azure VM, you are responsible for managing everything from the Operating System on up to the application you are running.

You are trying to understand the different cloud models. Which of the following are advantages of using the public cloud? Choose 2 answers from the options give below

Low costs High reliability No maintenance Near-unlimited scalability

Low Latency

Low latency is a term that describes a computer network that is optimized to process a very high volume of data with minimal delay (latency).

Managed identities

Managed identities: Azure Key Vault provides a way to securely store credentials and other keys and secrets, but your code needs to authenticate to Key Vault to retrieve them. Using a managed identity makes solving this problem simpler by giving Azure services an automatically managed identity in Azure AD. You can use this identity to authenticate to Key Vault or any service that supports Azure AD authentication, without having any credentials in your code. For more information, see the following image and the overview of managed identities for Azure resources.

A company is planning on using an entire suite of Microsoft products within Microsoft Azure. Which of the following belongs to the category of Software-as-a-Service (SaaS)?

Microsoft Office 365

Advantages of a private clouds

More flexibility—your organization can customize its cloud environment to meet specific business needs. Improved security—resources are not shared with others, so higher levels of control and security are possible. High scalability—private clouds still afford the scalability and efficiency of a public cloud.

A company is planning on using an Azure App Service to host their set of web applications utilizing the Platform-as-a-Service (PaaS) cloud computing model. In the PaaS model, does Microsoft Azure provide full control over the operating system that hosts the web applications?

No, because in a Platform-as-a-Service (PaaS) cloud computing model, Microsoft Azure has full control over the physical data center, networking, firewalls/security, servers, storage, operating systems, development tools, database management tools and business analytics. In an Infrastructure -as-a-Service (IaaS) cloud computing model, Microsoft Azure only has full control over the physical data center, networking, firewalls/security, servers, and storage, but not the operating systems, development tools, databases, or applications. The below visual illustrates this concept, as you can see with SaaS (Software-as-a-Service), Microsoft Azure has full control over everything, you would need to simply choose or provide the application solution.

A company is planning on creating several SQL Databases within Microsoft Azure. They would be using the Azure SQL Database service. Which of the following is the right category to which the Azure SQL Database service belongs to?

Platform as a service (PaaS) because Azure SQL Database is a fully managed Platform as a Service (PaaS) Database Engine that handles most of the database management functions such as upgrading, patching, backups, and monitoring without user involvement. Azure SQL Database is always running on the latest stable version of SQL Server Database Engine and patched OS with 99.99% availability. PaaS capabilities that are built-in into Azure SQL database enable you to focus on the domain specific database administration and optimization activities that are critical for your business.

A company is planning on using the Microsoft Azure Content Delivery Service. Which of the following is the right cloud concept to which the Azure Content Delivery service belongs to?

Platform as a service (PaaS) that is what Azure Content Delivery Network (CDN) is. It's a global CDN solution for delivering high-bandwidth content. It can be hosted in Azure or any other location. With Azure CDN, you can cache static objects loaded from Azure Blob storage, a web application, or any publicly accessible web server, by using the closest point of presence (POP) server. Azure CDN can also accelerate dynamic content, which cannot be cached, by leveraging various network and routing optimizations.

Resource group

Resource group: A resource group is a container that holds related resources for an Azure solution. The resource group can include all the resources for the solution, or only those resources that you want to manage as a group. You decide how you want to allocate resources to resource groups, based on what makes the most sense for your organization.

Resource

Resource: A resource is a manageable item that's available through Azure. Common examples are virtual machine, storage account, web app, database, and virtual network. There are many more.

Scalability

Scalability is a term related to the adaptability of the system to the changed amount of workload or traffic to the web application. You can "Scale-up" (Upgrade the capacity of the host where the app is hosted by increasing RAM size for example) and you can "Scale-out" (Upgrade the capacity of the hosted application by increasing the number of host instances such as having a 'Load Balancer' where your application is hosted on multiple instances).

Service principal

Service principal: An Azure service principal is a security identity that user-created apps, services, and automation tools use to access specific Azure resources. Think of it as a "user identity" (username and password or certificate) with a specific role, and tightly controlled permissions. A service principal should only need to do specific things, unlike a general user identity. It improves security if you grant it only the minimum permission level that it needs to perform its management tasks.

Tenant

Tenant: A tenant is the organization that owns and manages a specific instance of Microsoft cloud services. It's most often used to refer to the set of Azure and Office 365 services for an organization.

A company is planning on setting up a private cloud network. Which of the following is an advantage of setting up a private cloud network?

The Private Cloud environment can be rolled out to select users is correct because a private cloud consists of computing resources used exclusively by one business or organization. The private cloud can be physically located at your organization's on-site datacenter, or it can be hosted by a third-party service provider. But in a private cloud, the services and infrastructure are always maintained on a private network and the hardware and software are dedicated solely to your organization. In this way, a private cloud can make it easier for an organization to customize its resources to meet specific IT requirements. Private clouds are often used by government agencies, financial institutions, any other mid- to large-size organizations with business-critical operations seeking enhanced control over their environment.

A company is planning on moving some of their on-premise resources to Azure. They have to provide a business justification for moving to Azure. They have to classify expenses as part of the business justification. Which category would the following expense come under? "New On-premise performance cluster to host a Big Data solution"

This expense comes under the capital expense category.

A company is planning on moving some of their on-premise resources to Azure. They have to provide a business justification for moving to Azure. They have to classify expenses as part of the business justification. Which category would the following expense come under? "Cooling expenses"

This expense comes under the operating expense category.

A company is planning on moving some of their on-premise resources to Azure. They have to provide a business justification for moving to Azure. They have to classify expenses as part of the business justification. Which category would the following expense come under? "Software Licensing"

This expense comes under the operating expense category.

A company wants to ensure that users in their company are authenticated when they access resources defined in their Microsoft Azure account. Which of the following is the correct definition of authentication?

This is the act of providing legitimate credentials because authentication is the process of proving you are who you say you are (i.e inputting your creds). Authentication is sometimes shortened to AuthN.

Vault consumer

Vault consumer: A vault consumer can perform actions on the assets inside the key vault when the vault owner grants the consumer access. The available actions depend on the permissions granted.

Vault owner

Vault owner: A vault owner can create a key vault and gain full access and control over it. The vault owner can also set up auditing to log who accesses secrets and keys. Administrators can control the key lifecycle. They can roll to a new version of the key, back it up, and do related tasks.

A company wants to host an application within Microsoft Azure. The application connects to a database in Azure. The company would like to store the database password in a secure location. You recommend the usage of the Azure Key Vault for storage of the password. Would this fulfill the requirement?

Yes, because Azure Key Vault is a tool for securely storing and accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, or certificates. A vault is logical group of secrets.

Which of the following is true when it comes to SaaS (Software as a service)?

You are responsible for configuring the solution because SaaS provides a complete software solution that you purchase on a pay-as-you-go basis from a cloud service provider. You rent the use of an app for your organization, and your users connect to it over the Internet, usually with a web browser. All of the underlying infrastructure, middleware, app software, and app data are located in the service provider's data center. The service provider manages the hardware and software, and with the appropriate service agreement, will ensure the availability and the security of the app and your data as well. SaaS allows your organization to get quickly up and running with an app at minimal upfront cost.