AZ-900 Test Questions

Ace your homework & exams now with Quizwiz!

Complete the Sentence: ________ can calculate cost savings due to reduced electricity consumption as a result of migrating on-prem Microsoft SQL servers to Azure - The Azure Migrate: Server Assessment tool - The Azure Total Cost of Ownership (TCO) calculator - The Database Migration Assistant - The pricing calculator in Azure

- The Azure Total Cost of Ownership (TCO) calculator TCO allows you to compare costs, and will tell you how much you'll save. Pricing calculator will just give you the price.

How should you calculate the monthly uptime percentage?

100 x (Maximum Available Minutes - Downtime in Minutes) / Maximum Available Minutes

Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation? A. network security groups (NSGs) B. Azure Service Bus C. a local network gateway D. a route filter

A

View Security Recommendations: a) monitor b) subscriptions c) marketplace d) advisor

Advisor

____________ is an Apache Spark-based analytics service.

Azure Databricks

Your Azure trial account expired last week. You are now unable to __________________. A. create additional Azure Active Directory (Azure AD) user accounts B. Start an existing Azure virtual machine C. Access your data stored in Azure D. Access the Azure portal

B. Start an existing Azure virtual machine

What can Azure Information Protection encrypt? A. network traffic B. documents and email messages C. an Azure Storage account D. an Azure SQL database

B. documents and email messages Azure Information Protection (sometimes referred to as AIP) is a cloud-based solution that helps an organization to classify and optionally, protect its documents and emails by applying labels.

You can use _______________ in Azure to send email alerts when the cost of the current billing period for an Azure subscription exceeds a specified limit. a. Advisor recommendations b. Access control (IAM) c. Budget alerts d. Compliance

Budget Alerts

Which two types of customers are eligible to use Azure Government to develop a cloud solution? A. a Canadian government contractor B. a European government contractor C. a United States government entity D. a United States government contractor E. a European government entity

C, D

This question requires that you evaluate the underlined text to determine if it is correct. When you are implementing a software as a service (SaaS) solution, you are responsible for configuring high availability. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. A. No change is needed. B. defining scalability rules C. installing the SaaS solution D. configuring the SaaS solution

D

You have a resource group named RG1.You need to prevent the creation of virtual machines only in RG1. The solution must ensure that other objects can be created in RG1.What should you use? A. a lock B. an Azure role C. a tag D. an Azure policy

D. an Azure policy

Azure Germany can be used by _______________________ of Germany only. A. legal residents B. only enterprises that are registered in Germany C. only enterprises that purchase their azure licenses from a partner based in Germany D. any user or enterprise that requires its data to reside in Germany

D. any user or enterprise that requires its data to reside in Germany

Azure Key Vault is used to store secrets for A. Azure Active Directory (Azure AD) user accounts. B. Azure Active Directory (Azure AD) administrative accounts C. Personally Identifiable Information (PII) D. server applications

D. server applications

A network security group (NSG) will encrypt all the network traffic sent from Azure to the internet.

False

Azure Firewall will encrypt all the network traffic sent from Azure to the Internet

False

From Azure Service Health, an admin can prevent a service failure.

False

If you implement the security recommendations provided by Azure Advisor, your company's secure score will decrease

False

To maintain Microsoft support, you must implement the security recommendations provided by Azure Advisor within a period of 30 days.

False

You need to view a list of planned maintenance events that can affect the availability of an Azure subscription. Which blade should you use from the Azure portal?

Help + Support > Service Health > Planned Maintenance

You need to request that Microsoft increase a subscription quota limit for your company. Which blade should you use from the Azure portal?

Help + support

Monitors the Health of Azure services: a) monitor b) subscriptions c) marketplace d) advisor

Monitor

Adding resource groups in an Azure subscription generates additional costs.

No

After an Azure service becomes generally available, the service is no longer updated with new features.

No

All Azure services in private preview must be accessed by using a seperate Azure portal.

No

An Azure service in general availability is released to a subset of Azure customers

No

Authorization to access Azure resources can be provided only to Azure Active Directory users.

No

Availability zones are used to replicate data and applications to multiple regions.

No

Availability zones can be implemented in all Azure Regions. (Yes/No)

No

Azure Active Directory requires the implementation of domain controllers on Azure virtual machines.

No

By copying several gigabits of data to Azure from an on-premises network over a VPN, additional data transfer costs are incurred.

No

By creating additional resource groups in an Azure subscription, additional costs are incurred.

No

Companies can increase the Service Level Agreement (SLA) guaranteed uptime by purchasing multiple subscriptions.

No

Copy 10 GB of data to Azure from an on-premise network over a VPN generates additional Azure data costs.

No

Data traffic between Azure services within the same Azure region is always free.

No

Each user account in Azure Active Directory can be assigned only one license.

No

North America is represented by a single Azure region. (yes/no)

No

Only virtual machines that run Windows Server can be created in availability zones. (yes/no)

No

Only virtual machines that run Windows Servers can be created in availability zones. (Yes/No)

No

Outbound data traffic from Azure to an on-premises network is always free.

No

Support from MSDN forums in only provided to companies that have a pay as you go subscription.

No

To implement an Azure Multi-Factor Authentication solution, you must sync on premises identities to the cloud.

No

Users in Azure Active Directory (Azure AD) are organized by using resource groups.

No

When you create Azure resources for service in public preview, you must recreate the resources once the service becomes generally available.

No

When you use a general-purpose v2 Azure Storage account, you are only charged for the amount of data that is stored. All read and write operations are free.

No

With a consumption-based plan, you pay a fixed rate for all data sent to and from virtual machines hosted in the cloud.

No

You are required to deploy an Artificial Intelligence (AI) solution in Azure.You want to make sure that you are able to build, test, and deploy predictive analytics for the solution.Solution: You should make use of Azure Cosmos DB.Does the solution meet the goal? · A. Yes · B. No

No

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure Traffic Manager profile. Does this meet the goal?

No

Your company has an Azure subscription that contains the following unused resources: ✑ 20 user accounts in Azure Active Directory (Azure AD) ✑ Five groups in Azure AD ✑ 10 public IP addresses ✑ 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused user accounts. Does this meet the goal?

No

Your company has an Azure subscription that contains the following unused resources: ✑ 20 user accounts in Azure Active Directory (Azure AD) ✑ Five groups in Azure AD ✑ 10 public IP addresses ✑ 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused user groups. Does this meet the goal?

No

Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent have Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: you recommend the use of Azure Reserved Virtual Machines (VM) Instances. Does the solution meet the goal?

No

Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that the Azure API Management service be included in the strategy. Does the solution meet the goal?

No

Two Azure subscriptions can be merged into a single subscription. A. Yes B. No

No Explanation: You cannot merge two subscriptions into a single subscription. However, you can move some Azure resources from one subscription to another. You can also transfer ownership of a subscription and change the billing type for a subscription.

An Azure subscription can be associated to multiple Azure Active Directory (Azure AD) tenants. (Yes/No)

No An Azure AD tenant can have multiple subscriptions but an Azure subscription can only be associated with one Azure AD tenant.

You can use Availability Zones in Azure to protect Azure virtual machines from a region failure. (yes/no)

No Availability Zones exist within one region, not across regions (about three per region)

You are required to deploy an Artificial Intelligence (AI) solution in Azure. You want to make sure that you are able to build, test, and deploy predictive analytics for the solution. Solution: You should make use of Azure Logic Apps. Does the solution meet the goal?

No Azure Logic Apps is a cloud-based platform for creating and running automated workflows that integrate your apps, data, services, and systems.

When an Azure subscription expires, the associated Azure Active Directory (Azure AD) tenant is deleted automatically. (Yes/No)

No If your subscription expires, you lose access to all the other resources associated with the subscription. However, the Azure AD directory remains in Azure. You can associate and manage the directory using a different Azure subscription.

Data transfers between Azure services located in different Azure regions are always free. (yes/no)

No Inbound data transfer is free, outbound is charged.

If you have Azure resources deployed to every region, you can implement availability zones in all the regions (yes/no)

No Not all Azure regions support availability zones.

Azure China is operated by Microsoft.

No Operated by 21Vianet

An Azure resource group contains multiple Azure subscriptions (Yes/No)

No Resource groups are logical containers for Azure resources. However, resource groups do not contain subscriptions. Subscriptions contain resource groups.

If you assign a tag to a resource group, all the Azure resources in that resource group are assigned to the same tag.

No Tags for Resources are not inherited by default from their Resource Group

Two Azure virtual machines that use the B2S size have the same monthly costs.

No There are other factors that influence the cost of a virtual machine such as the virtual hard disks attached to the virtual machine.

Azure subscription can contain multiple account administrators. (Yes/No)

No There can only be one account owner/admins. Other admins can be added (co admins) but they won't be account admins.

All data that is copied to an Azure Storage account is backed up automatically to another Azure data center. (yes/no)

No You can choose methods of data replication. Locally Redundant Storage (LRS) is the default which maintains three copies in the data center. Geo-redundant storage (GRS) has cross-regional replication to protect against regional outages.

Azure Advisor can generate a list of Azure virtual machines that are protected by Azure Backup

No (generates a list of VMs that ARE NOT protected by Azure Backup)

From Azure Service Health, an admin can create a rule to be alerted if an Azure service fails.

True

From Azure Monitor, you can create alerts.

Yes

General Data Protection Regulation (GDPR) applies to companies that offer goods or services to individuals in the EU.

Yes

General Data Protection Regulation (GDPR) defines data protection and privacy rules.

Yes

Identities stored in Azure Active Directory, third party cloud services, and on-premises Active Directory can be used to access Azure resources.

Yes

Identities stored in Azure Active Directory, third-party cloud services, and on-premises Active Directory can be used to access Azure resources.

Yes

Identities stored in an on-premises Active Directory can be synchronized to Azure Active Directory.

Yes

If an Azure resource has a read-only lock, you can add a Delete lock to the resource.

Yes

You can use Availability Zones in Azure to protect Azure managed disks from a datacenter failure. (yes/no)

Yes

You can use Availability Zones in Azure to protect Azure virtual machines from a datacenter failure. (yes/no)

Yes

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure firewall. Does this meet the goal?

Yes

An Azure free account has a spending limit.

Yes $200 USD

The _______________ explains what data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data. a. Microsoft Online Service Privacy Statement b. Microsoft Online Services Terms c. Microsoft Online Service Level Agreement d. Online Subscription Agreement for Microsoft Azure

a. Microsoft Online Service Privacy Statement

You have an application that is comprised of an Azure web app that has a Service Level Agreement (SLA) of 99.95 percent and an Azure SQL database that has an SLA of 99.99% The composite SLA for the application is a. the product of both SLAs, which equals 99.94% b. the lowest SLA associated to the application, which is 99.95% c. the highest SLA associated to the application which is 99.99% d. the difference between the two SLAs,, which is 0.05%

a. the product of both SLAs, which equals 99.94%

_____ is the process of verifying a user's credentials. a. Authorization b. Authentication c. Federation d. Ticketing

b. Authentication Authentication is proving your identity, proving that you are who you say you are. The most common example of this is logging in to a system by providing Authorization is what you're allowed to do once you've been authenticated. For example, what resources you're allowed to access and what you can do with those resources.

You can access Compliance Manager from the a. Azure Active Directory admin center b. Azure portal c. Microsoft 365 admin center d. Microsoft Service Trust Portal

b. Azure Portal

Which Azure service enforces Azure MFA based on a condition? a. Azure Monitor b. Azure Security Center c. Azure Active Directory Identity Protection d. Azure Advanced Threat Protection

c. Azure Active Directory Identity Protection

From _____ you can view which user turned off a specific virtual machine during the last 13 days. a. Azure Access Control IAM b. Azure Event Hubs c. Azure Activity Log d. Azure Service Health

c. Azure Activity Log

_______ provide a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment. a. Azure policies b. Resource groups c. Azure Resource Manager d. Management groups

c. Azure Resource Manager

All Azure services that are in public preview are ______________________. a. provided without any documentation b. only configurable from Azure CLI c. excluded from the Service Level Agreements d. only configurable from the Azure portal

c. excluded from the Service Level Agreements

Which Azure service monitors threats by using sensors? a. Azure Monitor b. Azure Security Center c. Azure Active Directory Identity Protection d. Azure Advanced Threat Protection

d. Azure Advanced Threat Protection

You can view your company's regulatory compliance report from ________. a. Azure Advisor b. Azure Analysis Services c. Azure Monitor d. Azure Security Center

d. Azure Security Center

You can enable just in time VM access by using a. Azure Bastion b. Azure Firewall c. Azure Front Door d. Azure Security Center

d. Azure Security Center Allows you to lock down inbound traffic to your Azure VM which would reduce exposure to attacks while providing easy access when you need to connect to a VM.

Which Azure management tool to be used with which operating system: MacOS Mojave a. The Azure CLI and the Azure portal b. The Azure portal and Azure PowerShell c. The Azure CLI and the Azure PowerShell d. The Azure CLI, the Azure portal, and the Azure PowerShell

d. The Azure CLI, the Azure portal, and the Azure PowerShell

Which Azure management tool to be used with which operating system: Ubuntu Laptop a. The Azure CLI and the Azure portal b. The Azure portal and Azure PowerShell c. The Azure CLI and the Azure PowerShell d. The Azure CLI, the Azure portal, and the Azure PowerShell

d. The Azure CLI, the Azure portal, and the Azure PowerShell

Which Azure management tool to be used with which operating system: Windows 10 Laptop a. The Azure CLI and the Azure portal b. The Azure portal and Azure PowerShell c. The Azure CLI and the Azure PowerShell d. The Azure CLI, the Azure portal, and the Azure PowerShell

d. The Azure CLI, the Azure portal, and the Azure PowerShell

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.An Azure administrator plans to run a PowerShell script that creates Azure resources.You need to recommend which computer configuration to use to run the script.Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell.Does this meet the goal? · A. Yes · B. No

A

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.Solution: You use PowerShell in Azure Cloud Shell.Does this meet the goal? · A. Yes · B. No

A

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company plans to purchase Azure. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Premier support plan. Does this meet the goal? A. Yes B. No

A

This question requires that you evaluate the underlined text to determine if it is correct. When planning to migrate a public website to Azure, you must plan to pay monthly usage costs. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. A. No change is needed B. Deploy a VPN C. pay to transfer all the website data to Azure D. reduce the number of connections to the website

A

Which Azure service provides a set of version control tools to manage code? · A. Azure Repos · B. Azure DevTest Labs · C. Azure Storage · D. Azure Cosmos DB

A

Your companyג€™s Azure subscription includes a Basic support plan.They would like to request an assessment of an Azure environmentג€™s design from Microsoft. This is, however, not supported by the existing plan.You want to make sure that the company subscribes to a support plan that allows this functionality, while keeping expenses to a minimum.Solution: You recommend that the company subscribes to the Premier support plan.Does the solution meet the goal? · A. Yes · B. No

A

Your company plans to request an architectural review of an Azure environment from Microsoft.The company currently has a Basic support plan.You need to recommend a new support plan for the company. The solution must minimize costs.Which support plan should you recommend? A. Premier B. Developer C. Professional Direct D. Standard

A. Premier Only with Premier it's possible to "request an architectural review of an Azure environment from Microsoft."

Your company has 10 offices. You plan to generate several billing reports from the Azure portal. Each report will contain the Azure resource utilization of each office. Which Azure Resource Manager feature should you use before you generate the reports? A. tags B. templates C. locks D. policies

A. tags

You plan to implement an Azure database solution. You need to implement a database solution that meets the following requirements: Can add data concurrently from multiple regions Can store JSON documents Which database service should you deploy?

Azure Cosmos DB Azure Cosmos DB is Microsoft's globally distributed, multi-model database service. With a click of a button, Cosmos DB enables you to elastically and independently scale throughput and storage across any number of Azure regions worldwide. Azure Cosmos DB is a great way to store unstructured and JSON data. Combined with Azure Functions, Cosmos DB makes storing data quick and easy with much less code than required for storing data in a relational database.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You plan to deploy several Azure virtual machines.You need to ensure that the services running on the virtual machines are available if a single data center fails.Solution: You deploy the virtual machines to two or more scale sets.Does this meet the goal? A. Yes B. No

B

The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Basic support plan. Does this meet the goal? A. Yes B. No

B

To what should an application connect to retrieve security tokens? A. an Azure Storage account B. Azure Active Directory (Azure AD) C. a certificate store D. an Azure key vault

B

You need to deploy an Azure environment that meets the company migration plan. Solution: You create an Azure App Service and Azure virtual machines that have Microsoft SQL Server installed. Does this meet the goal? Options: A. Yes B. No

B Explanation: Azure App Service is a PaaS (Platform as a Service) service. However, Azure virtual machines are an IaaS (Infrastructure as a Service) service. Therefore, this solution does not meet the goal.

Azure Monitor can send alerts to Azure Security groups.

No

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a DDoS protection plan. Does this meet the goal?

No

Azure can be used to build a General Data Regulation (GDPR) applies to companies that offer goods or services to individuals in the EU.

Yes

You can create customer Azure roles to control access to resources.

Yes

Your company has an Azure subscription that contains the following unused resources: ✑ 20 user accounts in Azure Active Directory (Azure AD) ✑ Five groups in Azure AD ✑ 10 public IP addresses ✑ 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused IP adresses. Does this meet the goal?

Yes

Which Azure service can you use as a security information and event management (SIEM) solution? A. Azure Analysis Services B. Azure Sentinel C. Azure Information Protection D. Azure Cognitive Services

b. Azure Sentinel

Browse available virtual machine images: a. monitor b. subscriptions c. marketplace d. advisor

c. marketplace

You need to manage Azure by using Azure Cloud Shell. Which Azure portal icon should you select?

>_

What is required to use Azure Cost Management? A. a Dev/Test subscription B. Software Assurance C. an Enterprise Agreement (EA) D. a pay-as-you-go subscription

C. an Enterprise Agreement (EA)

You deploy an Azure resource. The resource becomes unavailable for an extended period due to a service outage. Microsoft will ________________. A. refund your bank account B. migrate the resource to another subscription C. credit your account D. Send you a coupon code that you can redeem for Azure credits

C. credit your account

You attempt to create several managed Microsoft SQL Server instances in an Azure environment and receive a message that you must increase your Azure subscription limits.What should you do to increase the limits? · A. Create a service health alert · B. Upgrade your support plan · C. Modify an Azure policy · D. Create a new support request

D

All Azure Security Center features are free.

No

All Azure service in private preview is released to all Azure customers.

No

Storing 1 TB of data in Azure Blob storage will always cost of the same, regardless of the Azure region in which the data is located.

No

A Premier support plan can only be purchased by companies that have an Enterprise Agreement (EA).

Yes

A resource group can have the Owner role assigned to multiple users.

Yes

Azure Government is operated by Microsoft.

Yes

Azure Monitor can monitor the performance of on-premise computers. (yes/no)

Yes

Azure has built-in authentication and authorization services that provide secure access to Azure resources

Yes

Complete the sentence: Data that is stored in the Archive access tier of an Azure Storage Account a. can be accessed at anytime by using azcopy.exe b. can only be read by using Azure Backup c. must be restored before the data can be accessed d. must be rehydrated before the data can be accessed

d. must be rehydrated before the data can be accessed Azure storage offers different access tiers: hot, cool and archive. The archive access tier has the lowest storage cost. But it has higher data retrieval costs compared to the hot and cool tiers. Data in the archive tier can take several hours to retrieve. While a blob is in archive storage, the blob data is offline and can't be read, overwritten, or modified. To read or download a blob in archive, you must first rehydrate it to an online tier. Example usage scenarios for the archive access tier include: ✑ Long-term backup, secondary backup, and archival datasets ✑ Original (raw) data that must be preserved, even after it has been processed into final usable form. ✑ Compliance and archival data that needs to be stored for a long time and is hardly ever accessed.

Which Azure service should you use to collect events from multiple resources into a centralized repository? · A. Azure Event Hubs · B. Azure Analysis Services · C. Azure Monitor · D. Azure Stream Analytics

A

Your company has an on-premises network with numerous servers, which they intend to migrate to Azure.You have been tasked with devising a plan that allows for the availability of a few of the servers, in the event that one of the Azure data centers becomes unavailable for a lengthy interval.Solution: You should include fault tolerance in your plan.Does the solution meet the goal? · A. Yes · B. No

A

Your company has several business units. Each business unit requires 20 different Azure resources for daily operation. All the business units require the same type of Azure resources. You need to recommend a solution to automate the creation of the Azure resources. What should you include in the recommendations? A. Azure Resource Manager templates B. virtual machine scale sets C. the Azure API Management service D. management groups

A

Your company has several business units.Each business unit requires 20 different Azure resources for daily operation. All the business units require the same type of Azure resources.You need to recommend a solution to automate the creation of the Azure resources.What should you include in the recommendations? · A. Azure Resource Manager templates · B. virtual machine scale sets · C. the Azure API Management service · D. management groups

A

Your company plans to migrate to Azure. The company has several departments. All the Azure resources used by each department will be managed by a department administrator.What are two possible techniques to segment Azure for the departments? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point. · A. multiple subscriptions · B. multiple Azure Active Directory (Azure AD) directories · C. multiple regions · D. multiple resource groups

A, D

You have an Azure environment.You need to create a new Azure virtual machine from a tablet that runs the Android operating system.What are three possible solutions? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point. · A. Use Bash in Azure Cloud Shell. · B. Use PowerShell in Azure Cloud Shell. · C. Use the PowerApps portal. · D. Use the Security & Compliance admin center. · E. Use the Azure portal.

A,B,E

Your company plans to deploy several million sensors that will upload data to Azure.You need to identify which Azure resources must be created to support the planned solution.Which two Azure resources should you identify? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point. · A. Azure Data Lake · B. Azure Queue storage · C. Azure File Storage · D. Azure IoT Hub · E. Azure Notification Hubs

A,D

You need to collect and automatically analyze security events from Azure Active Directory (Azure AD).What should you use? A. Azure Sentinel B. Azure Synapse Analytics C. Azure AD Connect D. Azure Key Vault

A. Azure Sentinel Microsoft Azure Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution. Azure Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response.

The Azure _________________ support plan is the lowest cost option to receive 24x7 access to support engineers by phone. A. Standard B. Developer C. Basic D. Professional Direct

A. Standard

You plan to deploy several Azure virtual machines. You need to control the ports that devices on the Internet can use to access the virtual machines. What should you use? A. a network security group (NSG) B. an Azure Active Directory (Azure AD) role C. an Azure Active Directory group D. an Azure key vault

A. a network security group (NSG) A network security group (NSG) contains a list of security rules that allow or deny network traffic to resources connected to Azure Virtual Networks (VNet). NSGs can be associated to subnets, individual VMs (classic), or individual network interfaces (NIC) attached to VMs (Resource Manager)

Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation? A. network security groups (NSGs) B. Azure Service Bus C. a local network gateway D. a route filter

A. network security groups (NSGs)

What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines? A. uptime B. feature availability C. bandwidth D. performance

A. uptime

Match the service to the correct definition. Azure Advisor Azure Cognitive Services Azure Application Insights Azure DevOps An integrated solution for the deployment of code. A tool that provides guidance and recommendations to improve an Azure environment. A simplified tool to build intelligent Artificial Intelligence (AI) applications Monitors web applications

Azure Advisor - A tool that provides guidance and recommendations to improve an Azure environment. Azure Cognitive Services - A simplified tool to build intelligent Artificial Intelligence (AI) applications Azure Application Insights - Monitors web applications Azure DevOps - An integrated solution for the deployment of code.clou

A company that has numerous divisions is planning to deploy an Azure environment.The company would like each divisionג€™s option to pay for the Azure services it utilizes, not be the same.You have been asked to recommend a solution to meet the requirements.Solution: You recommend that an Azure role be created for each division.Does the solution meet the goal? · A. Yes · B. No

B

You are tasked with deploying Azure virtual machines for your company.You need to make use of the appropriate cloud deployment solution.Solution: You should make use of Platform as a Service (PaaS).Does the solution meet the goal? · A. Yes · B. No

B

Your network contains an Active Directory forest. The forest contains 5,000 user accounts. Your company plans to migrate all network resources to Azure and to decommission the on-premises data center. You need to recommend a solution to minimize the impact on users after the planned migration. What should you recommend? A. Implement Azure Multi-Factor Authentication (MFA) B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD) C. Instruct all users to change their password D. Create a guest user account in Azure Active Directory (Azure AD) for each user

B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)

If a resource group named RG1 has a delete lock, __________ can delete RG1. A. only a member of the global administrators group B. The delete lock must be removed before an administrator C. An Azure policy must be modified before an administrator D. An Azure tag must be added before an administrator

B. The delete lock must be removed before an administrator

Your company has 10 departments. The company plans to implement an Azure environment. You need to ensure that each department can use a different payment option for the Azure services it consumes. What should you create for each department? A. a reservation B. a subscription C. a resource group D. a container instance

B. a subscription

Your company has an Azure subscription that contains resources in several regions.You need to ensure that administrators can only create resources in those regions.What should you use? A. a read-only lock B. an Azure policy C. a management group D. a reservation

B. an Azure policy

A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week. Thirty of the virtual machines run WindowsServer 2016 and 20 of the virtual machines run Ubuntu Linux.You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines.What should you recommend? · A. Azure Reserved Virtual Machines (VM) Instances · B. Azure virtual machine scale sets · C. Azure DevTest Labs · D. Microsoft Managed Desktop

C

This question requires that you evaluate the underlined text to determine if it is correct. An organization that hosts its infrastructure in a private cloud can decommission its data center. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. A. No change is needed. B. in a hybrid cloud C. in the public cloud D. on a Hyper-V host

C

What can you use to automatically send an alert if an administrator stops an Azure virtual machine? · A. Azure Advisor · B. Azure Service Health · C. Azure Monitor · D. Azure Network Watcher

C

What is required to use Azure Cost Management? A. a Dev/Test subscription B. Software Assurance C. an Enterprise Agreement (EA) D. a pay-as-you-go subscription

C

You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region.Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1? · A. Azure Service Fabric · B. Azure Monitor · C. Azure virtual machines · D. Azure Advisor

C

___________________ provide a common platform for deploying objects to cloud infrastructure and for implementing consistency across the Azure environment. A. Azure Policies B. Resource groups provide C. Azure Resource Manager provides D. Management groups provide

C. Azure Resource Manager provides

What should you use to evaluate whether your company's Azure environment meets regulatory requirements? A. Azure Service Health B. Azure Knowledge Center C. Azure Security Center D. Azure Advisor

C. Azure Security Center

What are two characteristics of the public cloud? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. dedicated hardware B. unsecured connections C. limited storage D. metered pricing E. self-service management

D, E

What are two characteristics of the public cloud? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Options: A. dedicated hardware B. unsecured connections C. limited storage D. metered pricing E. self-service management

D,E Explanation: With the public cloud, you get pay-as-you-go pricing - you pay only for what you use, no CapEx costs. With the public cloud, you have self-service management. You are responsible for the deployment and configuration of the cloud resources such as virtual machines or web sites. The underlying hardware that hosts the cloud resources is managed by the cloud provider. Incorrect Answers: A: You don't have dedicated hardware. The underlying hardware is shared so you could have multiple customers using cloud resources hosted on the same physical hardware. B: Connections to the public cloud are secure. C: Storage is not limited. You can have as much storage as you like.

You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password. Which Azure service should you use? A. Azure AD Connect Health B. Azure AD Privileged Identity Management C. Azure Advanced Threat Protection (ATP) D. Azure AD Identity Protection

D. Azure AD Identity Protection

Your company plans to migrate all on-premises data to Azure. You need to identify whether Azure complies with the company's regional requirements. What should you use? A. the Knowledge Center B. Azure Marketplace C. the MyApps portal D. the Trust Center

D. the Trust Center

A Standard support plan is included in an Azure free account. (yes/no)

No

A Windows Virtual Desktop host pool that includes 20 session hosts supports a maximum of 20 simultaneous user connections. (yes/no)

No

Azure services in public preview are subject to a Service Level Agreement (SLA).

No

You can assign an Azure blueprint to a resource group.

No

You need to create VM1 in Subscription1 by using the command.Solution: From a computer that runs Windows 10, install Azure CLI. From a command prompt, sign in to Azure and then run the command.Does this meet the goal? · A. Yes · B. No

A

You need to recommend which computer configuration to use to run the script.Solution: Run the script from a computer that runs Windows 10 and has the Azure PowerShell module installed.Does this meet the goal? · A. Yes · B. No

A

Your companyג€™s on-premises network includes a large number of servers.They would like to make extra resources available to their users, while keeping capital and operational overheads to a minimum.You are required to make recommendations that should be included in the overall solution.Solution: You should indorse the use of a hybrid cloud as part of the solution.Does the solution meet the goal? · A. Yes · B. No

A

Each Azure subscription can be managed by using a Microsoft account only. (Yes/No)

No You need an Azure Active Directory account to manage a subscription, not a Microsoft account. An account is created in the Azure Active Directory when you create the subscription. Further accounts can be created in the Azure Active Directory to manage the subscription.

A user who is assigned the Owner role can transfer ownership of an Azure subscription.

No You need to be an administrator of the billing account that has the subscription to be able to transfer the subscription. This could be a Billing Administrator or Global Administrator. An owner can only manage the resources and permissions within the subscription but not transfer the ownership.

You plan to deploy several Azure virtual machines.You need to ensure that the services running on the virtual machines remain available if a single data center fails.What are two possible solutions? Each correct answer presents a complete solution. · A. Deploy the virtual machines to two or more availability zones. · B. Deploy the virtual machines to two or more resource groups. · C. Deploy the virtual machines to a scale set. · D. Deploy the virtual machines to two or more regions.

A,D

An Azure resource can have multiple delete locks.

Yes

Serverless computing is an example of a consumption-based plan.

Yes

You can join Windows 10 devices to Azure Active Directory.

Yes

With Azure Reservations, you pay less for virtual machines than with pas as you go pricing.

Yes A reservation is where you commit to pay for a resource (for example a virtual machine) for one or three years. This gives you a discounted price on the resource for the reservation period.

If you assign permissions for a user to manage a resource group, the user can manage all the Azure resources in that resource group. (yes/no)

Yes A resource group can be used to scope access control for administrative actions. By default, permissions set at the resource level are inherited by the resources in the resource group.

From Azure Monitor, you can monitor resources across multiple Azure subscriptions.

Yes Azure Monitor can consolidate log entries from multiple Azure resources, subscriptions, and tenants into one location for analysis together.

A company can use resources from multiple subscriptions. A. Yes B. No

Yes Explanation: A company can have multiple subscriptions and store resources in the different subscriptions. However, a resource instance can exist in only one subscription.Reference:https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/create-subscription

You plan to create an Azure virtual machine.You need to identify which storage service must be used to store the unmanaged data disks of the virtual machine.What should you identify? To answer, select the appropriate service in the answer area. A. Containers B. File Shares C. Tables D. Queus

A. Containers

An Azure service is available to all Azure customers when it is in __________________. a. public preview b. private preview c. development d. an Enterprise Agreement subscription

a. public preview ✑Public Preview means that the service is in public beta and can be tried out by anyone with an Azure subscription. Services in public preview are often offered at a discount price and are excluded from SLAs. ✑ Services in private preview are available only to selected people who has signed up to the private preview program. ✑ Services in development are not available to the public. ✑ Services provided under an Enterprise Agreement (EA) subscription are available only to the subscription owner.

_______________ provide organizations with the ability to manage the compliance of Azure resources across multiple subscription. a. Resource groups b. Management groups c. Azure policies d. Azure App Service plans

b. Management groups

Complete the sentence: An Availability Zone in Azure has physically separate locations a. across two continents b. within a single Azure region c. within multiple Azure regions d. within a single Azure datacenters

b. within a single Azure region

You company implements _______ to automatically add a watermark to Microsoft Word documents that contain credit card information. a. Azure policies b. DDoS Protection c. Azure Information Protection d. Azure Active Directory Identity Protection

c. Azure Information Protection Azure Information Protection is used to automatically add a watermark to Microsoft Word documents that contain credit card information.Y ou use Azure Information Protection labels to apply classification to documents and emails. When you do this, the classification is identifiable regardless of where the data is stored or with whom itג€™s shared.

You are planning to migrate a company to Azure. Each of the companyג€™s numerous divisions will have an administrator in place to manage the Azure resources used by their respective division.You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the divisions, while keeping administrative effort to a minimum.Solution: You plan to make use of several Azure Active Directory (Azure AD) directories.Does the solution meet the goal? · A. Yes · B. No

B

You are planning to migrate a company to Azure. Each of the companyג€™s numerous divisions will have an administrator in place to manage the Azure resources used by their respective division.You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the divisions, while keeping administrative effort to a minimum.Solution: You plan to make use of several resource groups.Does the solution meet the goal? · A. Yes · B. No

B

You are tasked with deploying Azure virtual machines for your company.You need to make use of the appropriate cloud deployment solution.Solution: You should make use of Software as a Service (SaaS).Does the solution meet the goal? · A. Yes · B. No

B

You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure Traffic Manager profile. Does this meet the goal? A. Yes B. No

B

You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell. Does this meet the goal? A. Yes B. No

B

Your company has an on-premises network with numerous servers, which they intend to migrate to Azure.You have been tasked with devising a plan that allows for the availability of a few of the servers, in the event that one of the Azure data centers becomes unavailable for a lengthy interval.Solution: You should include scalability in your plan.Does the solution meet the goal? · A. Yes · B. No

B

Your company is planning to migrate all their virtual machines to an Azure pay-as-you-go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center.You are required make sure that the intended Azure solution uses the correct expenditure model.Solution: You should recommend the use of the scalable expenditure model.Does the solution meet the goal? A. Yes · B. No

B

Your company plans to deploy an Artificial Intelligence (AI) solution in Azure.What should the company use to build, test, and deploy predictive analytics solutions? · A. Azure Logic Apps · B. Azure Machine Learning Designer · C. Azure Batch · D. Azure Cosmos DB

B

Your companyג€™s Active Directory forest includes thousands of user accounts.You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired.You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed.Solution: You plan to enforce password change.Does the solution meet the goal? · A. Yes · B. No

B

Your companyג€™s Active Directory forest includes thousands of user accounts.You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired.You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed.Solution: You plan to require Azure Multi-Factor Authentication (MFA).Does the solution meet the goal? · A. Yes · B. No

B

Your companyג€™s Azure subscription includes a Basic support plan.They would like to request an assessment of an Azure environmentג€™s design from Microsoft. This is, however, not supported by the existing plan.You want to make sure that the company subscribes to a support plan that allows this functionality, while keeping expenses to a minimum.Solution: You recommend that the company subscribes to the Standard support plan.Does the solution meet the goal? · A. Yes · B. No

B

Which Azure service should you use to collect events from multiple resources into a centralized repository? A. Azure Event Hubs B. Azure Analysis Services C. Azure Monitor D. Azure Log Analytics

A. Azure Event Hubs

Your company plans to deploy an Artificial Intelligence (AI) solution in Azure. What should the company use to build, test, and deploy predictive analytics solutions? A. Azure Logic Apps B. Azure Machine Learning Studio C. Azure Batch D. Azure Cosmos DB

B

Which statement accurately describes the Modern Lifecycle Policy for Azure services? A. Microsoft provides mainstream support for a service for five years. B. Microsoft provides a minimum of 12 months notice before ending support for a service. C. After a service is made generally available, Microsoft provides support for the service for a minimum of four years. D. When a service is retired, you can purchase extended support for the service for up to five years.

B. Microsoft provides a minimum of 12 months notice before ending support for a service.

To what should an application connect to retrieve security tokens? A. an Azure Storage account B. Azure Active Directory (Azure AD) C. a certificate store D. an Azure key vault

B. Azure Active Directory (Azure AD)

You can create an Azure support request from ____________________. A. support.microsoft.com B. the Azure portal C. the Knowledge Center D. the Security & Compliance admin center

B. the Azure portal

Transferring data between Azure Storage accounts in different Azure regions is free.

No

You can associate a network security group (NSG) to a virtual network.

No

You can create Group Policies in Azure Active Directory.

No

All Azure free accounts expire after a specific period.

Yes

Azure Multi-Factor Authentication can be required for administrative and non-administrative user accounts.

Yes

Azure Security Center can monitor Azure resources and on-premise resources.

Yes

Azure can be used to build a General Data Protection Regulation (GDPR)-compliant infrastructure.

Yes

Azure has built-in authentication and authorization services that provide secure access to Azure resources.

Yes

Azure services in public preview can be used in production environments.

Yes

Azure virtual machines that run Windows Server 2016 can encrypt the network traffic sent from the virtual machines to a host on the Internet

Yes

To use Azure Active Directory (Azure AD) credentials to sign in to a computer that runs Windows 10, the computer must be joined to Azure AD. (yes/no)

Yes

You can add an Azure Resource Manager template to an Azure blueprint.

Yes

You can associate a network security group (NSG) to a network interface.

Yes

You can use Azure blueprint to grant permissions to a resource.

Yes

When an Azure virtual machine is stopped, you continue to pay storage costs for the virtual machine.

Yes When a virtual machine is stopped (deallocated), the virtual machine is unloaded/dismounted from the physical server in Azure. In this state, you are not charged for the virtual machine itself. However, you are still charged for the storage costs of the virtual hard disks attached to the virtual machine.

Your companyג€™s developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed.You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service.Solution: you recommend the use of Azure DevTest Labs.Does the solution meet the goal? · A. Yes · B. No

A

Match Terms to Definition Azure Databricks Azure Functions Azure App Service Azure Application Insights Provides the platform for serverless code A big data analysis service for machine learning Detects and diagnoses anomalies in web apps Hosts Web Apps

Azure Databricks - A big data analysis service for machine learning Azure Functions - Provides the platform for serverless code Azure App Service - Hosts Web Apps Azure Application Insights - Detects and diagnoses anomalies in web apps

Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. a Canadian government contractor B. a European government contractor C. a United States government entity D. a United States government contractor E. a European government entity

C,D

Which Azure service should you use to store certificates? A. Azure Security Center B. an Azure Storage account C. Azure Key Vault D. Azure Information Protection

C. Azure Key Vault Used to securely store tokens, passwords, certificates, API keys, and other secrets.

What should you use to evaluate whether your company's Azure environment meets regulatory requirements? A. the Knowledge Center website B. the Advisor blade from the Azure portal C. Compliance Manager from the Service Trust Portal D. the Solutions blade from the Azure portal

C. Compliance Manager from the Service Trust Portal Compliance Manager in the Service Trust Portal is a workflow-based risk assessment tool that helps you track, assign, and verify your organization's regulatory compliance activities related to Microsoft Cloud services, such as Microsoft 365, Dynamics 365, and Azure.

An Azure Free Account can contain an unlimited number of web apps.

No It can contain 10.

An Azure Storage account can contain up to 2 TB of data and up to one million files. (yes/no)

No It's actually 2 Pb in the US and 500 TB in other regions (with no limit on the number of files)

By copying several GB of data from Azure to an on-premises network over a VPN, additional data transfer costs are incurred.

Yes

You can associate a network security group (NSG) to a virtual network subnet.

Yes

Your company plans to migrate all its network resources to Azure.You need to start the planning process by exploring Azure.What should you create first? · A. a subscription · B. a resource group · C. a virtual network · D. a management group

A

If Microsoft plans to end support for an Azure service that does NOT have a successor service, Microsoft will provide notification at least _______________ before. A. 12 months B. 6 months C. 90 days D. 30 days

A. 12 months

You need to be notified when Microsoft plans to perform maintenance that can affect the resources deployed to an Azure subscription.What should you use? · A. Azure Monitor · B. Azure Service Health · C. Azure Advisor · D. Microsoft Trust Center

B

Your company has an Azure subscription that contains resources in several regions. A company policy states that administrators must only be allowed to create additional Azure resources in a region in the country where their office is located. You need to create the Azure resource that must be used to meet the policy requirement. What should you create? A. a read-only lock B. an Azure policy C. a management group D. a reservation

B. an Azure policy Azure policies can be used to define requirements for resource properties during deployment and for already existing resources.

Your Azure trial account expired last week. You are now unable to __________. A. create additional Azure Active Directory (Azure AD) user accounts B. start an existing Azure virtual machine C. access your data stored in Azure D. access the Azure portal

B. start an existing Azure virtual machine

A Windows Virtual Desktop session host can run Windows 10 only. (yes/no)

No

After you create a virtual machine, you need to modify the ______ to allow connections to TCP port 8080 on the virtual machine. a. network security group (NSG) b. virtual network gateway c. virtual network d. route table

a. Network Security Group port == NSG

An Azure Policy initiative definition is a ________________. a. collection of policy definitions b. collection of Azure Policy definition assignments c. group of Azure Blueprints definitions d. groups of role-based access control (RBAC) role assignments

a. collection of policy definitions

A company that has numerous divisions is planning to deploy an Azure environment.The company would like each divisionג€™s option to pay for the Azure services it utilizes, not be the same.You have been asked to recommend a solution to meet the requirements.Solution: You recommend that a subscription be created for each division.Does the solution meet the goal? · A. Yes · B. No

A

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.An Azure administrator plans to run a PowerShell script that creates Azure resources.You need to recommend which computer configuration to use to run the script.Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0 installed.Does this meet the goal? · A. Yes · B. No

A

You are currently trying to generate a number of managed Microsoft SQL Server instances in an Azure environment. During the process, you are presented with a notification informing you that the Azure subscription limits must be increased.You want to make sure that you can complete your task.Solution: You generate a new support request.Does the solution meet the goal? · A. Yes · B. No

A

You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.Solution: You use Bash in Azure Cloud Shell.Does this meet the goal? · A. Yes · B. No

A

You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.Solution: You use the Azure portal.Does this meet the goal? · A. Yes · B. No

A

You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keysYou need to create VM1 in Subscription1 by using the command. Solution: From the Azure portal, launch Azure Cloud Shell and select Bash. Run the command in Cloud Shell.Does this meet the goal? · A. Yes · B. No

A

Your company plans to request an architectural review of an Azure environment from Microsoft. The company currently has a Basic support plan. You need to recommend a new support plan for the company. The solution must minimize costs. Which support plan should you recommend? A. Premier B. Developer C. Professional Direct D. Standard

A

Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks? A. Azure Firewall B. an application security group C. Azure DDoS protection D. a network security group (NSG)

A. Azure Firewall An NSG is for traffic inside a same virtual network, not a gateway between several networks. But you can restrict traffic to multiple Vnets with a single Firewall.

match the description: Azure Functions Azure App Service Azure Virtual Machines Azure Container Instances Provide operating system virtualization Provide a portable environment for virtualized applications. Used to build, deploy, and scale web apps. Provide a platform for serverless code.

Azure Functions - Provide a platform for serverless code. Azure App Service - Used to build, deploy, and scale web apps. Azure Virtual Machines - Provide a portable environment for virtualized applications. Azure Container Instances - Provide operating system virtualization

Match the descriptions: Azure Government GDPR ISO NIST An organization that defines international standards across all industries. An organization that defines standards by the United States government. A European policy that regulates data privacy and data protection. A dedicated public cloud for federal and state agencies in the United States.

Azure Government - A dedicated public cloud for federal and state agencies in the United States. General Data Protection Regulations (GDPR) - A European policy that regulates data privacy and data protection. International organization for Standardization (ISO) - An organization that defines international standards across all industries. National Institute of Standards and Technology (NIST) - An organization that defines standards by the United States government.

Match to description: Azure HDInsight Azure Data Lake Analytics Azure SQL Synapse Analytics Azure SQL Database A managed relational cloud database service A cloud-based service that leverages massively parallel processing (MPP) to quickly run complex petabytes of data in a relational database Can run massively parallel data transformation and processing programs across petabytes of data An open-source framework for distributed processing and analysis of big data sets in clusters

Azure HDInsight - An open-source framework for distributed processing and analysis of big data sets in clusters Azure Data Lake Analytics - Can run massively parallel data transformation and processing programs across petabytes of data Azure SQL Synapse Analytics - A cloud-based service that leverages massively parallel processing (MPP) to quickly run complex petabytes of data in a relational database Azure SQL Database - A managed relational cloud database service

Match to descritption: Azure Machine Learning Azure Synapse Analytics Azure IoT Hub Azure Functions Azure Bot Services Provides a cloud-based Enterprise Data Warehouse (EDW) Uses past training to provide predictions that have high probability. Provides serverless computing functionalities. Processes data from millions of sensors. Provides a digital online assistant that provides speech support.

Azure Machine Learning - Uses past training to provide predictions that have high probability. Azure Synapse Analytics - Provides a cloud-based Enterprise Data Warehouse (EDW) Azure IoT Hub - Processes data from millions of sensors. Azure Functions - Provides serverless computing functionalities. Azure Bot Services - Provides a digital online assistant that provides speech support.

Match the Terms to Definitions Azure Sphere IoT Central IoT Hub A managed service that provides bidirectional communication between IoT devices and Azure A fully managed software as a service (SaaS) solution to connect t, monitor, and manage IoT devices at scale A software and hardware solution that provides communication and security features for IoT devices.

Azure Sphere - A software and hardware solution that provides communication and security features for IoT devices. IoT Central - A fully managed software as a service (SaaS) solution to connect t, monitor, and manage IoT devices at scale IoT Hub - A managed service that provides bidirectional communication between IoT devices and Azure

A company that has numerous divisions is planning to deploy an Azure environment.The company would like each divisionג€™s option to pay for the Azure services it utilizes, not be the same.You have been asked to recommend a solution to meet the requirements.Solution: You recommend that an Azure policy be created for each division.Does the solution meet the goal? · A. Yes · B. No

B

A team of developers at your company plans to deploy, and then remove, 50 virtual machines each week. All the virtual machines are configured by using AzureResource Manager templates.You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines.What should you recommend? · A. Azure Reserved Virtual Machine (VM) Instances · B. Azure DevTest Labs · C. Azure virtual machine scale sets · D. Microsoft Managed Desktop

B

This question requires that you evaluate the underlined text to determine if it is correct. You have several virtual machines in an Azure subscription. You create a new subscription. The virtual machines cannot be moved to the new subscription. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. A. No change is needed B. The virtual machines can be moved to the new subscription C. The virtual machines can be moved to the new subscription only if they are all in the same resource group D. The virtual machines can be moved to the new subscription only if they run Windows Server 2016.

B

You are currently trying to generate a number of managed Microsoft SQL Server instances in an Azure environment. During the process, you are presented with a notification informing you that the Azure subscription limits must be increased.You want to make sure that you can complete your task.Solution: You alter an Azure policy.Does the solution meet the goal? · A. Yes · B. No

B

You have been informed by your superiors of the companyג€™s intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during this process.You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution.Solutidyaon: You recommend the use of Azure Information Protection.Does the solution meet the goal? · A. Yes · B. No

B

Your companyג€™s Azure subscription includes a Basic support plan.They would like to request an assessment of an Azure environmentג€™s design from Microsoft. This is, however, not supported by the existing plan.You want to make sure that the company subscribes to a support plan that allows this functionality, while keeping expenses to a minimum.Solution: You recommend that the company subscribes to the Professional Direct support plan.Does the solution meet the goal? · A. Yes · B. No

B

Your Azure environment contains multiple Azure virtual machines.You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.What are two possible solutions? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point. A. Modify an Azure Traffic Manager profile B. Modify a network security group (NSG) C. Modify a DDoS protection plan D. Modify an Azure firewall

B, D

Your developers have created 10 web applications that must be host on Azure. You need to determine which Azure web tier plan to host the web apps. The web tier plan must meet the following requirements: The web apps will use custom domains. The web apps each require 10 GB of storage. The web apps must each run in dedicated compute instances. Load balancing between instances must be included. Costs must be minimized. Which web tier plan should you use? A. Standard B. Basic C. Free D. Shared

B. Basic

Complete the paragraph/choose the appropriate answer: You have several virtual machines in an Azure subscription. You create a new subscription. A. The virtual machines cAnnot be moved to the new subscription. B. The virtual machines can be moved to the new subscription. C. The virtual machines can be moved to the new subscription only if they are all in the same resource group. D. The virtual machines can be moved to the new subscription only if they run Windows Server 2016.

B. The virtual machines can be moved to the new subscription.

You have an on-premises application that sends email notifications automatically based on a rule.You plan to migrate the application to Azure.You need to recommend a serverless computing solution for the application.What should you include in the recommendation? · A. a web app · B. a server image in Azure Marketplace · C. a logic app · D. an API app

C

You create a resource group named RG1 in Azure Resource Manager.You need to prevent the accidental deletion of the resources in RG1.Which setting should you use? Quickstart Resource Costs Deployments Policies Properties Locks Automation Script

Locks

An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed. Does this meet the goal?

No

Azure Advisor provides recommendations on how to configure the network settings on Azure virtual machines.

No

Azure Advisor provides recommendations on how to improve the security of an Azure Active Directory (Azure AD) environment.

No

Azure Services in public preview can be managed only by using the Azure CLI.

No

If your company uses an Azure free account, you will only be able to use a subset of Azure services.

No

The Service Level Agreement (SLA) for Azure Active Directory Premium P2 is the same as the SLA for Azure Active Directory Free.

No

The cost of an Azure service in private preview decreases when the service becomes generally available.

No

Two valid methods for Azure Multi-Factor Authentication (MFA) are picture and passport number.

No

You are planning a strategy to deploy numerous web servers and database servers to Azure. This strategy should allow for connection types between the web servers and database servers to be controlled. Solution: You include the Azure Service Bus in your strategy. Does the solution meet the goal?

No

You can create up to 10 Azure free accounts by using the same Microsoft account.

No

You can join Android devices to Azure Active Directory.

No

You can stop an Azure SQL Database instance to decrease costs.

No

Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Basic support plan. Does this meet the goal?

No

An Azure free account has a limit of 2TB of data that can be uploaded to Azure.

No It has 5 GB

A user account can be assigned to multiple Azure roles.

Yes

All paying Azure customers can claim credit if their monthly uptime percentage is below the guaranteed amount in the SLA

Yes

An Azure reservation is used to reserve server capacity at a specific data center.

Yes

An Azure resource inherits locks from its resource group.

Yes

An Azure service in public preview is released to all Azure customers.

Yes

Azure Active Directory (Azure AD) groups support dynamic membership rules.

Yes

Azure Active Directory provides authentication services for resources hosted in Azure and Microsoft 365.

Yes

Azure Advisor provides recommendations on how to reduce the cost of running Azure virtual machines.

Yes

Azure Government is available only to US government agencies and their partners.

Yes

Azure Monitor can trigger alerts based on data in an Azure Log Analytics workspace. (yes/no)

Yes

Companies can increase the Service Level Agreement (SLA) guaranteed uptime by adding Azure resources to multiple regions.

Yes

Copy 10 GB of data from Azure to an on-premise network over a VPN generates additional Azure data costs.

Yes

Data that is stored in an Azure Storage account automatically has atleast three copies. (yes/no)

Yes

From Azure Service Health, an administrator can create a rule to be alerted if an Azure service fails. (yes/no)

Yes

From the Azure portal, you can distinguish between services that are generally available and services that are in public preview.

Yes

In Azure Active Directory Premium P2, atleast 99.9% availability is guaranteed.

Yes

Most Azure services are introduced in private preview before being introduced in public preview, and then in general availability.

Yes

The Azure spending limit is fixed and cannot be increased or decreased.

Yes

The Service Level Agreement (SLA) guaranteed uptime for paid Azure services is atleast 99.9%

Yes

The cost of Azure resources can vary between regions.

Yes

When using an Azure ExpressRoute connection, inbound data traffic from an on-premises network to Azure is always free.

Yes

Windows Virtual Desktop supports desktop and app virtualization.

Yes

With a consumption-based plan, you reduce overall costs by paying only for extra capacity when it is required.

Yes

You are planning a strategy to deploy numerous web servers and database servers to Azure. This strategy should allow for connection types between the web servers and database servers to be controlled. Solution: You include a local network gateway in your strategy. Does the solution meet the goal?

Yes

You can change the Azure Active Directory (Azure AD) tenant to which an Azure subscription is associated. (Yes/No)

Yes

You can configure the Azure Active Directory activity logs to appear in Azure Monitor.

Yes

Your company plans to purchase an Azure subscription. The companyג€™s support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Professional Direct support plan. Does this meet the goal?

Yes

You need to deploy an Azure environment that meets the company migration plan. Solution: You create an Azure App Service and Azure SQL databases. Does this meet the goal?

Yes Explanation: Azure App Service and Azure SQL databases are examples of Azure PaaS solutions. Therefore, this solution does meet the goal.

You plan to deploy a website to Azure. The website will be accessed by users worldwide and will host large video files.You need to recommend which Azure feature must be used to provide the best video playback experience.What should you recommend? · A. an application gateway · B. an Azure ExpressRoute circuit · C. a content delivery network (CDN) · D. an Azure Traffic Manager profile

C

You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure.You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible.Solution: You include two virtual machines and one availability zone in your strategy.Does the solution meet the goal? · A. Yes · B. No

B

Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are located in a single Azure virtual network named VNet1.The company has users that work remotely. The remote workers require access to the VMs on VNet1.You need to provide access for the remote workers.What should you do? · A. Configure a Site-to-Site (S2S) VPN. · B. Configure a VNet-toVNet VPN. · C. Configure a Point-to-Site (P2S) VPN. · D. Configure DirectAccess on a Windows Server 2012 server VM. · E. Configure a Multi-Site VPN

C A Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer.

Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet.You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords.Solution: You configure the use of Azure Key Vault.Does the solution meet the goal? · A. Yes · B. No

B

You are planning to migrate a company to Azure. Each of the companyג€™s numerous divisions will have an administrator in place to manage the Azure resources used by their respective division.You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the divisions, while keeping administrative effort to a minimum.Solution: You plan to make use of several subscriptions.Does the solution meet the goal? · A. Yes · B. No

A

You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure.You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible.Solution: You include two virtual machines and two availability zones in your strategy.Does the solution meet the goal? · A. Yes · B. No

A

You have an on-premises network that contains several servers. You plan to migrate all the servers to Azure. You need to recommend a solution to ensure that some of the servers are available if a single Azure data center goes offline for an extended period. What should you include in the recommendation? A. fault tolerance B. elasticity C. scalability D. low latency

A

You have been informed by your superiors of the companyג€™s intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during this process.You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution.Solution: You recommend the use of Azure Key Vault.Does the solution meet the goal? · A. Yes · B. No

A

You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0 installed. Does this meet the goal? A. Yes B. No

A

You have an on-premises network that contains several servers. You plan to migrate all the servers to Azure. You need to recommend a solution to ensure that some of the servers are available if a single Azure data center goes offline for an extended period. What should you include in the recommendation? Options: A. fault tolerance B. elasticity C. scalability D. low latency

A Explanation: A private cloud is hosted in your datacenter. Therefore, you cannot close your datacenter if you are using a private cloud. A public cloud is hosted externally, for example, in Microsoft Azure. An organization that hosts its infrastructure in a public cloud can close its data center. Public cloud is the most common deployment model. In this case, you have no local hardware to manage Microsoft AZ-900 https://www.certification-questions.com or keep up-to-date - everything runs on your cloud provider's hardware. Microsoft Azure is an example of a public cloud provider. In a private cloud, you create a cloud environment in your own datacenter and provide self-service access to compute resources to users in your organization. This offers a simulation of a public cloud to your users, but you remain completely responsible for the purchase and maintenance of the hardware and software services you provide

Your company plans to automate the deployment of servers to Azure. Your manager is concerned that you may expose administrative credentials during the deployment. You need to recommend an Azure solution that encrypts the administrative credentials during the deployment. What should you include in the recommendation? A. Azure Key Vault B. Azure Information Protection C. Azure Security Center D. Azure Multi-Factor Authentication (MFA)

A. Azure Key Vault Use Azure Key Vault to encrypt keys and small secrets like passwords that use keys stored in hardware security modules (HSMs).

You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS--generate-ssh-keysYou need to create VM1 in Subscription1 by using the command.Solution: From a computer that runs Windows 10, install Azure CLI. From PowerShell, sign in to Azure and then run the command.Does this meet the goal? · A. Yes · B. No

A. yES

You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure.You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible.Solution: You include one virtual machine and two availability zones in your strategy.Does the solution meet the goal? · A. Yes · B. No

B

Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet.You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords.Solution: You configure the use of Azure AD Privileged Identity Management.Does the solution meet the goal? · A. Yes · B. No

B

Your companyג€™s developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed.You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service.Solution: you recommend the use of Microsoft Managed Desktop.Does the solution meet the goal? · A. Yes · B. No

B

You have an Azure web app.You need to manage the settings of the web app from an iPhone.What are two Azure management tools that you can use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point. · A. Azure CLI · B. the Azure portal · C. Azure Cloud Shell · D. Windows PowerShell · E. Azure Storage Explorer

B,C

From _______, you can track your company's regulatory standards and regulations, such as ISO 27001. A. Azure Cloud Shell B. the Microsoft Cloud Partner Portal C. Compliance Manager D. the Trust Center

C. Compliance Manager

Your company intends to subscribe to an Azure support plan. The support plan must allow for new support requests to be opened. Which of the following are support plans that will allow this? Answer by choosing the correct option from the list. Basic Developer Standard Professional Premier

Developer Standard Professional Premier

All the Azure resources deployed to a single resource group must share the same Azure region. (yes/no)

No Azure resources deployed to a single resource group can be located in different regions. When creating a resource group, you need to provide a location for that resource group. When you specify a location for the resource group, you are specifying where that metadata is stored. For compliance reasons, you may need to ensure that your data is stored in a particular region.

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a network security group (NSG). Does this meet the goal?

Yes

Your company plans to purchase an Azure subscription.The companyג€™s support policy states that the Azure environment must provide an option to access support engineers by phone or email.You need to recommend which support plan meets the support policy requirement.Solution: Recommend a Standard support plan.Does this meet the goal?

Yes

Every Azure region has multiple data centers. (yes/no)

Yes Have multiple Data centers but don't necessarily have Availability Zones (which not only include a datacenter but also an independent power source, cooling, and networking). Even not recommended regions have datacenters which increase latency and are connected through a low latency network. (back up back up)

In which Azure support plans can you open a new support request? A. Premier and Professional Direct only B. Premier, Professional Direct, and Standard only C. Premier, Professional Direct, Standard, and Developer only D. Premier, Professional Direct, Standard, Developer, and Basic

C. Premier, Professional Direct, Standard, and Developer only

Which task can you perform by using Azure Advisor? A. Integrate Active Directory and Azure Active Directory (Azure AD). B. Estimate the costs of an Azure solution. C. Confirm that Azure subscription security follows best practices. D. Evaluate which on-premises resources can be migrated to Azure.

C. Confirm that Azure subscription security follows best practices.

You plan to create an Azure virtual machine. You need to identify which storage service must be used to store the unmanaged data disks of the virtual machine. What should you identify? Containers File Shares Tables Queues

Containers Azure containers are the backbone of the virtual disks platform for Azure IaaS. Both Azure OS and data disks are implemented as virtual disks where data is durably persisted in the Azure Storage platform and then delivered to the virtual machines for maximum performance. Azure Disks are persisted in Hyper-V VHD format and stored as a page blob in Azure Storage.

You have an Azure environment that contains 10 virtual networks and 100 virtual machines. You need to limit the amount of inbound traffic to all the Azure virtual networks. What should you create? A. one network security group (NSG) B. 10 virtual network gateways C. 10 Azure ExpressRoute circuits D. one Azure firewall

D

Your company has an Azure subscription that contains the following unused resources: ✑ 20 user accounts in Azure Active Directory (Azure AD) ✑ Five groups in Azure AD ✑ 10 public IP addresses ✑ 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused network interfaces. Does this meet the goal?

No

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0 installed. Does this meet the goal? A. Yes B. No

A

You are required to deploy an Artificial Intelligence (AI) solution in Azure.You want to make sure that you are able to build, test, and deploy predictive analytics for the solution.Solution: You should make use of Azure Machine Learning Studio.Does the solution meet the goal? · A. Yes · B. No

A

Your companyג€™s infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation.The resources required by each business unit are identical.You are required to sanction a strategy to create Azure resources automatically.Solution: You recommend that management groups be included in the strategy.Does the solution meet the goal? · A. Yes · B. No

B

Your network contains an Active Directory forest. The forest contains 5,000 user accounts. Your company plans to migrate all network resources to Azure and to decommission the on-premises data center. You need to recommend a solution to minimize the impact on users after the planned migration. What should you recommend? A. Implement Azure Multi-Factor Authentication (MFA) B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD) C. Instruct all users to change their password D. Create a guest user account in Azure Active Directory (Azure AD) for each user

B

You can convert the Azure subscription of your company from Free Trial to Pay as You Go

Yes

Your companyג€™s on-premises network includes a large number of servers.They would like to make extra resources available to their users, while keeping capital and operational overheads to a minimum.You are required to make recommendations that should be included in the overall solution.Solution: You should indorse the use of a private cloud as part of the solution.Does the solution meet the goal? · A. Yes · B. No

B

Your company has a Software Assurance agreement that includes Microsoft SQL Server licenses. You plan to deploy SQL Server on Azure virtual machines. What should you do to minimize licensing costs for the deployment? A. Deallocate the virtual machines during off hours. B. Use Azure Hybrid Benefit. C. Configure Azure Cost Management budgets. D. Use Azure reservations.

B. Use Azure Hybrid Benefit. With Hybrid Benefit you can keep using your existing licenses in the cloud.

You can download a Regulatory Compliance report from the Azure Security Center.

Yes

A single Microsoft account can be used to manage multiple Azure subscriptions. A. Yes B. No

Yes Explanation: You can use the same account to manage multiple subscriptions. You can create an additional subscription for your account in the Azure portal. You may want an additional subscription to avoid hitting subscription limits, to create separate environments for security, or to isolate data for compliance reasons.

You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keysYou need to create VM1 in Subscription1 by using the command.Solution: From the Azure portal, launch Azure Cloud Shell and select PowerShell. Run the command in Cloud Shell.Does this meet the goal? · A. Yes · B. No

A

You have an Azure environment that contains multiple Azure virtual machines.You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines.You need to recommend which Azure resources must be created for the planned solution.Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point. · A. a virtual network gateway · B. a load balancer · C. an application gateway · D. a virtual network · E. a gateway subnet

A, E

A support engineer plans to perform several Azure management tasks by using the Azure CLI.You install the CLI on a computer.You need to tell the support engineer which tools to use to run the CLI.Which two tools should you instruct the support engineer to use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point. · A. Command Prompt · B. Azure Resource Explorer · C. Windows PowerShell · D. Windows Defender Firewall · E. Network and Sharing Center

A,C

You are currently trying to generate a number of managed Microsoft SQL Server instances in an Azure environment. During the process, you are presented with a notification informing you that the Azure subscription limits must be increased.You want to make sure that you can complete your task.Solution: You generate a service health alert.Does the solution meet the goal? · A. Yes · B. No

B

Your company has datacenters in Los Angeles and New York. The company has a Microsoft Azure subscription.You are configuring the two datacenters as geo-clustered sites for site resiliency.You need to recommend an Azure storage redundancy option.You have the following data storage requirements:Data must be stored on multiple nodes.Data must be stored on nodes in separate geographic locations.Data can be read from the secondary location as well as from the primary locationWhich of the following Azure stored redundancy options should you recommend? · A. Geo-redundant storage · B. Read-only geo-redundant storage · C. Zone-redundant storage · D. Locally redundant storage

B

Your company is planning to migrate all their virtual machines to an Azure pay-as-you-go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center.You are required make sure that the intended Azure solution uses the correct expenditure model.Solution: You should recommend the use of the elastic expenditure model.Does the solution meet the goal? A. Yes · B. No

B

Your company plans to move several servers to Azure.The companyג€™s compliance policy states that a server named FinServer must be on a separate network segment.You are evaluating which Azure services can be used to meet the compliance policy requirements.Which Azure solution should you recommend? · A. a resource group for FinServer and another resource group for all the other servers · B. a virtual network for FinServer and another virtual network for all the other servers · C. a VPN for FinServer and a virtual network gateway for each other server · D. one resource group for all the servers and a resource lock for FinServer

B

Your companyג€™s on-premises network includes a large number of servers.They would like to make extra resources available to their users, while keeping capital and operational overheads to a minimum.You are required to make recommendations that should be included in the overall solution.Solution: You should indorse the use of an added data center as part of the solution.Does the solution meet the goal? · A. Yes · B. No

B

Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: You create an Azure App Service and Azure Storage accounts. Does this meet the goal? Options: A. Yes B. No

B Explanation: Azure App Service is a PaaS (Platform as a Service) service. However, Azure Storage accounts are an IaaS (Infrastructure as a Service) service. Therefore, this solution does not meet the goal.

You have an Azure virtual network named VNET1 in a resource group named RG1. You assign an Azure policy specifying that virtual networks are not an allowed resource type in RG1. VNET1 _______ A. is deleted automatically B. Is moved automatically to another resource group C. Continues to function normally D. Is now a read-only object

C. Continues to function normally The VNet will be marked as ג€˜Non-compliantג€™ when the policy is assigned. However, it will not be deleted and will continue to function normally.Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements. If there are any existing resources that aren't compliant with a new policy assignment, they appear under Non-compliant resources.

You have an Azure environment that contains 10 virtual networks and 100 virtual machines.You need to limit the amount of inbound traffic to all the Azure virtual networks.What should you create? A. one application security group (ASG) B. 10 virtual network gateways C. 10 Azure ExpressRoute circuits D. one Azure firewall

D

Your company plans to purchase an Azure subscription.The companyג€™s support policy states that the Azure environment must provide an option to access support engineers by phone or email.You need to recommend which support plan meets the support policy requirement.Solution: Recommend a Premier support plan.Does this meet the goal?

Yes

You are tasked with deploying Azure virtual machines for your company.You need to make use of the appropriate cloud deployment solution.Solution: You should make use of Infrastructure as a Service (IaaS).Does the solution meet the goal? · A. Yes · B. No

A

Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet.You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords.Solution: You configure the use of Azure AD Identity Protection.Does the solution meet the goal? · A. Yes · B. No

A

You plan to map a network drive from several computers that run Windows 10 to Azure Storage. You need to create a storage solution in Azure for the planned mapped drive. What should you create? A. an Azure SQL database B. a virtual machine data disk C. a Files service in a storage account D. a Blobs service in a storage account

C

You plan to deploy a critical line-of-business application to Azure. The application will run on an Azure virtual machine. You need to recommend a deployment solution for the application. The solution must provide a guaranteed availability of 99.99 percent. What is the minimum number of virtual machines and the minimum number of availability zones you should recommend for the deployment? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

2 Virtual machines 2 Availability Zones You need a minimum of two virtual machines with each one located in a different availability zone. Availability Zones is a high-availability offering that protects your applications and data from datacenter failures. Availability Zones are unique physical locations within an Azure region. Each zone is made up of one or more datacenters equipped with independent power, cooling, and networking. To ensure resiliency, thereג€™s a minimum of three separate zones in all enabled regions. The physical separation of Availability Zones within a region protects applications and data from datacenter failures. Zone-redundant services replicate your applications and data across Availability Zones to protect from single-points-of-failure. With Availability Zones, Azure offers industry best 99.99% VM uptime SLA.

A support plan solution that gives you best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost is a _______ support plan. A. Standard B. Developer C. Basic D. Premier

C. Basic

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.Solution: You use the PowerApps portal.Does this meet the goal? · A. Yes · B. No

B PowerApps lets you quickly build business applications with little or no code. It is not used to create Azure virtual machines. Therefore, this solution does not meet the goal.

You are planning a strategy to deploy numerous web servers and database servers to Azure.This strategy should allow for connection types between the web servers and database servers to be controlled.Solution: You include network security groups (NSGs) in your strategy.Does the solution meet the goal? · A. Yes · B. No

A

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.An Azure administrator plans to run a PowerShell script that creates Azure resources.You need to recommend which computer configuration to use to run the script.Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed.Does this meet the goal? · A. Yes · B. No

B

Your companyג€™s Active Directory forest includes thousands of user accounts.You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired.You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed.Solution: You plan to sync all the Active Directory user accounts to Azure Active Directory (Azure AD).Does the solution meet the goal? · A. Yes · B. No

A

Your company has an on-premises network with numerous servers, which they intend to migrate to Azure.You have been tasked with devising a plan that allows for the availability of a few of the servers, in the event that one of the Azure data centers becomes unavailable for a lengthy interval.Solution: You should include elasticity in your plan.Does the solution meet the goal? · A. Yes · B. No

B


Related study sets

Foundations Chapter 3 - The World Marketplace

View Set

Perry chapter 31: SIDS and Immunizations

View Set

Chapter 9: Teaching and Counseling

View Set

Chapter 17: Death, Dying, and Grieving

View Set

Ap bio immune system practice questions

View Set

Unit 4: Financial Sector Money & monetary policy

View Set

38: Renal Hemodynamics, Blood Flow

View Set