Azure 900 Practice Qs

Ace your homework & exams now with Quizwiz!

In Azure, resource tags are ________ that can be associated with each resource. globally unique identifiers metadata elements tracking cookies budget limitations

metadata elements

Can you give someone else access to your Azure subscription without giving them your user name and password? yes no

yes

What is the minimum charge for having an Azure Account each month, even if you don't use any resources? $200 $0 negotiated with enterprise manager $1

$0 An Azure account can cost nothing if you don't use any resources or only use free resources

How many regions does Azure have in Brazil? 4 1 2 0

A company has 50 Virtual Machines (VMs) hosted on-premises and 50 Virtual Machines (VMs) hosted in Azure. The Azure virtual machines and on-premises virtual machines connect to each other. Which of the following type of cloud model does this represent? 1. Hybrid Cloud 2. Private Cloud 3. Public Cloud

1. Hybrid Cloud

What is the most number of virtual machines that can me managed under a single Virtual Machine Scale Set? 10 1000 1 100

1000

How many minutes per month downtime is 99.99% availability? 100 1 40 4

How many minutes per month downtime is 99.99% availability? 4 100 1 40

Which of the following is an example of passwordless authentication? Choose all that apply. 4-digit PIN code to unlock your laptop Magic login link sent to your email Facial recognition Entering a number shown on your phone app

4-digit PIN code to unlock your laptop Magic login link sent to your email Facial recognition Entering a number shown on your phone app

Geo-redundant storage (GRS) stores how many copies of your file? 3 9 1 6

What is the Azure SLA for two or more Virtual Machines in an Availability Set? 100% 99.95% 99.90% 99.99%

99.95%

Which Azure Storage option is better for storing data for backup and restore, disaster recovery, and archiving? A - Azure Blob Storage B - Azure Files Storage C - Azure Disk Storage

A (Azure Blob Storage is your best option for storing disaster recovery files and archives.)

Tailwind Traders wants to use Azure ExpressRoute to connect its on-premises network to the Microsoft cloud. Which of the following choices isn't an ExpressRoute model that Tailwind Traders can use? A - Site-to-site virtual private network b - Any-to-any connection C - Point-to-point Ethernet connection D - CloudExchange colocation

A (site-to-site virtual private network isn't an ExpressRoute model.)

Azure Virtual Desktop is: A Windows 10 or Windows 11 Desktop instance in the cloud, which allows a user to log in from almost any device and access their work computer. A comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments. A service that scans your Azure configuration and recommends changes to optimize deployments, increase security, and save you money. A customizable dashboard which tracks the health of your Azure services in the regions where you use them.

A Windows 10 or Windows 11 Desktop instance in the cloud, which allows a user to log in from almost any device and access their work computer.

What are Azure Availability Zones? Within each individual data center, certain racks of servers have been architected by Azure to have higher uptime than the others. If you place your apps onto this rack, you'll get higher uptime than if you let Azure do it. A folder structure in Azure in which you organize resources like databases, virtual machines, virtual networks, or almost any resource This is the same as a region A feature of Azure that allows you to manually specify into which data center your virtual machines are placed, which allows you to achieve higher availability than any other option.

A feature of Azure that allows you to manually specify into which data center your virtual machines are placed, which allows you to achieve higher availability than any other option.

An IT Engineer needs to create a Virtual Machine in Azure. Currently, the IT Engineer has a Windows desktop along with the Azure Command Line Interface (CLI). Which of the following would allow the IT engineer to use the Azure Command Line Interface? Choose 2 answers from the options given below. A. PowerShell B. File and Print Explorer C. Command Prompt D. Control Panel

A. PowerShell C. Command Prompt Options B and D are incorrect because you can't launch Azure Command-Line from any of these options.

Match the services on the left to the correct descriptions on the right. Services A. Authorization B. Authentication Descriptions 1. Confirms the identity of a person who wants access 2. Grants the proper access to a legitimate user

A2 B1

Which ways does the Azure Resource Manager model provide to deploy resources? a) CLI b) REST API / SDK c) Azure Portal d) Powershell

All of those ways can be used to deploy or manage resources using ARM

What benefit does a Content Delivery Network (CDN) provide its users? Allows you to reduce the traffic coming into a web server for static, unchanging files such as images, videos and PDFs For a small fee, Azure will take over management of your virtual machine, perform OS updates and ensure it's running well Allows you to store data that can be retrieved later in an extremely fast and inexpensive manner Allows you to keep temporarily session information on the web visitor such as their login ID or their name

Allows you to reduce the traffic coming into a web server for static, unchanging files such as images, videos and PDFs

What is the concept of Big Data? A form of artificial intelligence (AI) that allows systems to automatically learn and improve from experience without being explicitly programmed. A set of Azure services that allow you to use execute code in the cloud but don't require (or even allow) you to manage the underlying server A small sensor or other device that constantly sends it's status and other data to the cloud An extremely large set of data that you want to ingest and do analysis on; traditional software like SQL Server cannot handle Big Data as efficiently as specialized products

An extremely large set of data that you want to ingest and do analysis on; traditional software like SQL Server cannot handle Big Data as efficiently as specialized products

What does it mean if a service is in Public Preview mode? You have to apply to get selected in order to use that service Anyone can use the service but it must not be for production use The service is generally available for use, and Microsoft will provide support for it Anyone can use the service for any reason

Anyone can use the service but it must not be for production use

What is the name of the open-source project run by the Apache foundation that maps to the HDInsight tools within Azure? Apache Cayenne Apache Jaguar Apache Jazz Apache Hadoop

Apache Hadoop

Which of the following is not taken into account when comparing the total cost of ownership (TCO) of a cloud-hosted solution with an on-premises hosted solution? IT Operations salaries Electricity costs Real estate costs Application Developer costs

Application Developer costs

What advantage does an Application Gateway have over a Load Balancer? Application gateway understands the HTTP protocol and can interpret the URL and make decisions based on the URL. Application Gateway can be scaled so that two, three or more instances of the gateway can support your application. Application Gateway is more like an enterprise-grade product. You should not use a load balancer in production.

Application gateway understands the HTTP protocol and can interpret the URL and make decisions based on the URL.

What is the benefit of using a command line tool like Powershell or CLI as opposed to the Azure portal? Cheaper Quicker to deploy VMs Automation

Automation The real benefit is automation. Being able to write a script to do something is better than having to do it manually each time.

What feature within Azure will make recommendations to you about reducing cost on your account? Azure Security Center Azure Service Health Azure Dashboard Azure Advisor

Azure Advisor

Which Azure management tool analyzes your usage of Azure and makes suggestions specifically targeted to help you optimize your usage of Azure regarding cost, security and performance? Azure Firewall Azure Mobile App Azure Service Health Azure Advisor

Azure Advisor

Which tool within the Azure Portal will make specific recommendations based on your actual usage for how you can improve your use of Azure? Azure Dashboard Azure Advisor Azure Monitor Azure Service Health

Azure Advisor

Which tool within the Azure Portal will make specific recommendations based on your actual usage for how you can improve your use of Azure? Azure Service Health Azure Dashboard Azure Advisor Azure Monitor

Azure Advisor

__________ simplifies governance and management by delivering a consistent multi-cloud and on-premises management platform. Azure Resource Manager Azure Arc Azure Kubernetes Service Azure DevOps

Azure Arc

_______________ allows you to manage Windows and Linux machines running on-premesis or in other cloud providers, as if they were Azure VMs. Azure Resource Manager Azure Cloud Shell Log Analytics Azure Arc

Azure Arc Azure Arc-enabled servers lets you manage Windows and Linux physical servers and virtual machines hosted outside of Azure, on your corporate network, or other cloud provider. This management experience is designed to be consistent with how you manage native Azure virtual machines, using standard Azure constructs such as Azure Policy and applying tags.

What service does Azure provide as an optional upgrade to protect against DDoS attacks? Azure DDoS Protection Standard Azure DDoS Protection Basic Azure protects against DDoS as part of it's basic offering and there is no service you can upgrade to Advanced Threat Protection (ATP)

Azure DDoS Protection Standard

____________ allows you to use your own domain names for your internal, private Azure virtual machines. Azure Traffic Manager Azure Load Balancer Azure Bastion Azure DNS Private Zones

Azure DNS Private Zones

Which Azure storage migration option involves Microsoft shipping you a hard drive for you to copy your files to, after which you ship the hard disk back to them for them to upload to your account? Azure File Sync Azure Data Box Azure Storage Explorer AzCopy

Azure Data Box Use Data Box family of products such as Data Box, Data Box Disk, and Data Box Heavy to move large amounts of data to Azure when you're limited by time, network availability, or costs

Which Azure feature is specifically designed to help companies get their in-house developed code from the code repository, through automated unit testing, and onto Azure using a service called Pipelines? a) Azure DevOps b) Azure Monitor c) GitHub d) Virtual Machines

Azure DevOps Azure DevOps contains many services, one of which is Pipelines. Pipelines allows you to build an automation that moves code (and all related dependencies) through various stages from the development environment into deployment.

If you are a US federal, state, local, or tribal government entities and their solution providers, which Azure option should you be looking to register for? Azure Department of Defence Azure Government Azure Public Portal Azure is not available for government officials

Azure Government

If you are a US federal, state, local, or tribal government entities and their solution providers, which Azure option should you be looking to register for? Azure Public Portal Azure Government Azure is not available for government officials Azure Department of Defence

Azure Government

What is the recommended way within Azure to store secrets such as private cryptographic keys? Azure Advanced Threat Protection (ATP) Azure Key Vault Within the application code In an Azure Storage account private blob container

Azure Key Vault

If you wanted to get an alert every time a new virtual machine is created, where could you create that? Azure Dashboard Azure Monitor Subscription settings Azure Policy

Azure Monitor

Which Azure website tool is available for you to estimate the future costs of your Azure products and services by adding products to a shopping basket and helping you calculate the costs? Microsoft Docs Azure Pricing Calculator Azure Advisor

Azure Pricing Calculator

What does ARM stand for in Azure? Advanced RISC Machine Account Resource Manager Availability, Reliability, Maintainability Azure Resource Manager

Azure Resource Managerr

What is the name of Azure's hosted SQL database service? Cosmos DB Table Storage SQL Server in a VM Azure SQL Database

Azure SQL Database

Which of the following is not an example of Infrastructure as a Service? SQL Server in a VM Virtual Machine Virtual Network Azure SQL Database Virtual Machine Scale Sets

Azure SQL Database

Which of the following is not an example of Infrastructure as a Service? Virtual Network Virtual Machine Scale Sets Azure SQL Database SQL Server in a VM Virtual Machine

Azure SQL Database

Which Azure service is meant to be a security dashboard that contains all the security and threat protection in one place? Azure Key Vault Azure Monitor Azure Portal Dashboard Azure Security Center

Azure Security Center

_______________ is a service that offers a Windows 10 or Windows 11 virtual machine that runs in the cloud for use as your workstation. Azure Web Apps Azure Virtual Desktop VPN Gateway Express Route

Azure Virtual Desktop

Who is responsible for the security of the physical servers in an Azure data center? I am responsible for securing the physical data centers Azure is responsible for securing the physical data centers

Azure is responsible for securing the physical data centers

A company wants to try out some services which Azure is offering in Public Preview. Do the services in Public Preview in Azure come with an SLA? A. Yes B. No

B. No

Select the answer that correctly completes the sentence. Single sign-on (SSO) is __________ method that enables users to sign in the first time and access various applications and resource by using same password. A. a validation B. an authentication C. a configuration D. an authorization

B. an authentication Single sign-on is an authentication method that allows users to sign in using one set of credentials to login across applications. Single sign-on makes it easier to manage passwords and increases security capabilities.

Your company needs to deploy and manage several Azure Web apps using the Azure App service resource. Which of the following URL would you use to manage the Azure Web Apps? A. https://portal.microsoft.com B. https://portal.azure.com C. https://portal.azurewebsites.net D. https://portal.azurewebsites.com

B. https://portal.azure.com

What does it mean that security is a shared model in Azure? Azure takes care of security completely. You must keep your security keys private and ensure it doesn't get out. Azure takes no responsibility for security. Both users and Azure have responsibilities for security.

Both users and Azure have responsibilities for security.

Select the answer that correctly completes the sentence. __________in Azure enables you to deploy Azure resources close to the users. A. Elasticity B. Scalability C. Geo-distribution D. High availability

C. Geo-distribution Because of geo-distribution you can deploy apps and data to regional datacenters around the globe, thereby ensuring that your customers always have the best performance in their region.

Select the answer that correctly completes the sentence. __________ copies data to a secondary region from the primary region across multiple datacenters that are located many miles apart. A. Premium storage B. Zone redundant storage (ZRS) C. Geo-redundant storage (GRS) D. Locally-redundant storage (LRS)

C. Geo-redundant storage (GRS) Replicates your data to a secondary region that is in different geographic locations from the primary region.

Which ways does the Azure Resource Manager model provide to deploy resources? CLI Azure Portal Powershell REST API / SDK

CLI Azure Portal Powershell REST API / SDK

What is the name of the collective set of APIs that provide machine learning and artificial intelligence services to your own applications like voice recognition, image tagging, and chat bot? Azure Machine Learning Studio Natural Language Service, LUIS Azure Batch Cognitive Services

Cognitive Services

Which feature of Azure AD allows you to restrict access to a resource based on the geographical location of the user? Privileged Identity Management Directory Roles Role Based Access Control Conditional Access

Conditional Access

Which of the following options can you use to link virtual networks? A - Network address translation B - Multi-chassis link aggregation C - Dynamic Host Control Protocol D - Virtual network peering

D (Virtual network peering can be used to link virtual networks.)

Tailwind Traders has millions of log entries that it wants to analyze. Which option would be ideal for analysis? A - Azure Cosmos DB B - Azure SQL Database C - Azure Database for PostgreSQL D - Azure Synapse Analytics

D - Azure Synapse Analytics Azure Synapse Analytics is the logical choice for analyzing large volumes of data

What is the first step that you would take in order to share an image file as a blob in Azure Storage? A - Create an Azure Storage container to store the image. B - Upload the image file and create a container. C - Use a Shared Access Signature (SAS) token to restrict access to the image. D - Create an Azure Storage account.

D D (You must create an Azure Storage account before you can use any Azure Storage features.)

Of the following types of data, which type is best suited for the archive storage tier? Data that you don't expect to ever need to access, but want to keep just in case The most recent backup of an important server Videos and other large files available to view or download from your website Data that you intend to delete within 30-60 days

Data that you don't expect to ever need to access, but want to keep just in case

____________ is the strategy of layering multiple security defenses on top of each other to provide stronger protection than any single defensive mechanism alone. Network Access Control Azure Firewall Defense in depth Azure AD Conditional Access

Defense in depth

Windows servers use "remote desktop protocol" (RDP) in order for administrators to get access to manage the server. Linux servers use SSH. What is the recommendation for ensuring the security of these protocols? Disable RDP access using the Windows Services control panel admin tool Do not allow public Internet access over the RDP and SSH ports directly to the server. Instead use a secure server like Bastion to control access to the servers behind. Ensure strong passwords on your Windows admin accounts Do not enable SSH access for Linux servers

Do not allow public Internet access over the RDP and SSH ports directly to the server. Instead use a secure server like Bastion to control access to the servers behind.

Windows servers use 'remote desktop protocol' (RDP) in order for administrators to get access to manage the server. Linux servers use SSH. What is the recommendation for ensuring the security of these protocols? Ensure strong passwords on your Windows admin accounts Disable RDP access using the Windows Services control panel admin tool Do not allow public Internet access over the RDP and SSH ports directly to the server. Instead use a secure server like Bastion to control access to the servers behind. Do not enable SSH access for Linux servers

Do not allow public Internet access over the RDP and SSH ports directly to the server. Instead use a secure server like Bastion to control access to the servers behind.

Besides Azure Service Health, where else can you find out any issues that affect the Azure global network that affect you? Azure Updates Blog Install the Azure app on your phone Each Virtual Machine has a Resource Health blade Azure will email you

Each Virtual Machine has a Resource Health blade

Besides Azure Service Health, where else can you find out any issues that affect the Azure global network that affect you? Each Virtual Machine has a Resource Health blade Azure will email you Install the Azure app on your phone Azure Updates Blog

Each Virtual Machine has a Resource Health blade

Which Azure networking solution supports the highest-speed connection between your corporate office and an Azure region near you? Express Route Edge Computing Point-to-Site VPN Site-to-site VPN

Express Route Express Route is a direct, private connection from your data center into Azure.

TRUE OR FALSE: Through Azure Active Directory one can control access to an application but not the resources of the application. FALSE TRUE

FALSE

TRUE OR FALSE: Through Azure Active Directory one can control access to an application but not the resources of the application. TRUE FALSE

FALSE

TRUE OR FALSE: If you wanted to deploy a virtual machine to China, you would just choose the China region from the drop down. True False

False

True or false: You cannot have more than one Azure subscription per company True False

False

True or false: there are no service level guarantees (SLA) when a service is in General Availability (GA) FALSE TRUE

False False, most Azure GA services do have service level agreements

True or false: Azure charges for bandwidth used "inbound" to Azure TRUE FALSE

False Ingress bandwidth is free. You pay for egress (outbound).

What is the most common and recommended type of storage account? Premium page blobs Premium block blobs Standard general-purpose v1 General Purpose V2

General Purpose V2

If you wanted to simply use Azure as an extension of your own datacenter, not primarily hosting anything there but using it for extra storage or taking advantage of some services, what hosting model is that called? Public cloud Hybrid Cloud Private cloud

Hybrid Cloud

Who is responsible for the security of your Azure Storage account access keys? Azure is responsible for securing the access keys I am responsible for securing the access keys

I am responsible for securing the access keys

A virtual machine is called what type of hosting model? IaaS PaaS SaaS

IaaS

Which of the following cloud computing models requires the highest level of involvement in maintaining the operating system and file system by the customer? SaaS FaaS PaaS IaaS

IaaS

Which style of computing is easiest when migrating an existing hosted application from your own data center into the cloud? FaaS PaaS Serverless IaaS

IaaS

Which style of computing is easiest when migrating an existing hosted application from your own data center into the cloud? PaaS Serverless IaaS FaaS

IaaS

Which of the following cloud computing models requires the highest level of involvement in maintaining the operating system and file system by the customer? IaaS FaaS SaaS PaaS

IaaS IaaS or Infrastructure as a service requires you to keep your OS patched, close ports, and generally protect your own server

What types of files can a Content Delivery Network speed up the delivery of? Images Videos JavaScript files PDFs

Images Videos JavaScript files PDFs

Within the context of privacy and compliance, what does the acronym ISO stand for, in English? International Organization for Standardization Info Systems Officer Instead of Intelligence and Security Office

International Organization for Standardization

What is an Azure Subscription? It is the level at which services are billed. All resources created under a subscription are billed to that subscription. Each user account is associated with a unique subscription. If you need more than one subscription, you need to create multiple user accounts.

It is the level at which services are billed. All resources created under a subscription are billed to that subscription.

What data format are ARM templates created in? JSON HTML XML YAML

JSON

What data format are ARM templates created in? YAML JSON XML HTML

JSON

What type of container is used to collect log and metric data from various Azure Resources? Managed Storage Azure Monitor account Log Analytics Workspace Append Blob Storage

Log Analytics Workspace is required to collect logs and metrics

What Azure tool gives you the ability to manage multiple subscriptions into nested hierarchies? Resource Groups RBAC Azure Active Directory Management Groups

Management Groups

Which of the following is a feature of the cool access tier for Azure Storage? Significant delays in accessing your data, up to several hours Cheapest option when it comes to bandwidth costs to access your files Most expensive option when it comes to bandwidth cost to access your files Much cheaper to store your files than the hot access tier

Much cheaper to store your files than the hot access tier

Which feature of Azure Active Directory will require users to have their mobile phone in order to be able to log in? Azure Security Center Multi-Factor Authentication Advanced Threat Protection (ATP) Azure Information Protection (AIP)

Multi-Factor Authentication

Which free Azure security service checks all traffic travelling over a subnet against a set of rules before allowing it in, or out. Advanced Threat Protection (ARP) Azure DDoS Protection Network Security Group Azure Firewall

Network Security Group Network Security Group (NSG) - a fairly basic set of rules that you can apply to both inbound traffic and outbound traffic that lets you specify what sources, destinations and ports are allowed to travel through from outside the virtual network to inside the virtual network

What is the basic way of protecting an Azure Virtual Network subnet? Application Gateway with WAF Azure DDos Standard protection Network Security Group Azure Firewall

Network Security Group Network Security Group (NSG) - a fairly basic set of rules that you can apply to both inbound traffic and outbound traffic that lets you specify what sources, destinations, and ports are allowed to travel through from outside the virtual network to inside the virtual network

David is working in an organization that plans to deploy several virtual machines (VMs) that will host its business-critical application to Azure.David has been asked to suggest a solution to ensure that if a single data center fails, the application will not be affected.He suggests to deploy virtual machines to multiple resource groups with the same availability zone.Will the solution suggested by David meet the requirement? Yes No

You have plans to deploy several Azure virtual machines. You are required to ensure that the services running on the virtual machines are available, even if a single data center fails. Solution: You suggest deploy the virtual machines to two or more scale sets. Does the suggested solution meet the desired goal? Yes No

Each person has their own user id and password to log into Azure. But how many subscriptions can a single account be associated with? 10 One 250 per region No limit

No limit

For tax optimization, which type of expense is preferable? CapEx OpEx

OpEx

Deploying Azure App Services applications consists of what two components? Pick two. Configuration Managing operating system updates Database scripts Packaged code

Packaged code Configuration

Which storage access tier is the MOST EXPENSIVE to store files per GB? Cool tier Premium tier Archive tier Hot tier

Premium tier

On which of the following cloud models can we deploy physical servers? a) Private cloud and Hybrid cloud only b) Private cloud-only c) Private cloud, Hybrid cloud and Public cloud d) Hybrid cloud-only

Private cloud and Hybrid cloud only Since a private cloud is on-premises therefore we can deploy physical servers. Also, Aa hybrid cloud is a mix of on-premise and public cloud resources. So, we can deploy physical servers on-premises.

__________ allows your private virtual network to access Azure services such as Storage, Cosmos DB, and SQL Database privately, allowing you to disable public access. SQL Firewall Private endpoints Public endpoints Site-to-site VPN

Private endpoints

Which Azure service can be enabled to enable Multi-Factor Authentication for administrators but not require it for regular users? Azure Firewall Advanced Threat Protection Azure AD B2B Privileged Identity Management

Privileged Identity Management

Which Azure service can be enabled to enable Multi-Factor Authentication for administrators but not require it for regular users? Azure Firewall Advanced Threat Protection Privileged Identity Management Azure AD B2B

Privileged Identity Management

The term ______________ is used to describe a relationship between two regions within the same geographic region for disaster recovery purposes. Geo Availability Set Region Pair Availability Zone

Region Pair

What does the letter R in RBAC stand for? Role Rights Rule Review

Role

Outlook 365 is what type of hosting model? PaaS IaaS SaaS

SaaS

On which Azure website are you likely to find the results of Pen Tests and Security Assessments conducted by third-parties regarding Azure? Azure Portal Microsoft Docs Service Trust Portal LinkedIn

Service Trust Portal

Where can you go to see all of the international standards compliance documents and audit results that Azure provides for itself? Service Trust Portal Azure Monitor Azure Policy Azure Service Health

Service Trust Portal

Select all features part of Azure AD? Smart lockout Log Alert Rule Custom banned password list Device Management Single sign-on

Smart lockout Custom banned password list Device Management Single sign-on

What two types of DDoS protection services does Azure provide? Select two. Standard Premium Basic Advanced

Standard Basic Azure DDos Protection Basic is free, while you can upgrade to Standard for a fee.

True or false: Azure Cloud Shell allows access to the Bash and Powershell consoles in the Azure Portal FALSE TRUE

TRUE

What is a benefit of economies of scale? Prices of cloud servers and services are always going down. It'll be cheaper next year than it is this year. Big companies don't need to make a profit on every sale Big companies don't need to make a profit on the first product they sell you, because they will make a profit on the second The more you buy of something, the cheaper it is for you

The more you buy of something, the cheaper it is for you

Your organization has implemented an Azure Policy that restricts the type of Virtual Machine instances you can use. How can you create a VM that is blocked by the policy? The only way is to remove the policy, create the resource and add the policy back Use an account that has Contributor or above permissions to the resource group Subscription Owners (Administrators) can create resources regardless of what the policy restricts

The only way is to remove the policy, create the resource and add the policy back

What is the concept of Availability? A system that has a single point of failure A system must have 100% uptime to be considered available The percentage of time a system responds properly to requests, expressed as a percentage over time A system that can scale up and scale down depending on customer demand

The percentage of time a system responds properly to requests, expressed as a percentage over time

What is the concept of Availability? The percentage of time a system responds properly to requests, expressed as a percentage over time A system that has a single point of failure A system must have 100% uptime to be considered available A system that can scale up and scale down depending on customer demand

The percentage of time a system responds properly to requests, expressed as a percentage over time

What would be a good reason to have multiple Azure subscriptions? There is one person/credit card paying for resources, but many people who have accounts in Azure, and you need to separate out resources between clients so that there is absolutely no chance of resources being exposed between them There is one person/credit card paying for resources, and only one person who logs into Azure to manage the resources, but you want to be able to know which resources are used for which client project

There is one person/credit card paying for resources, but many people who have accounts in Azure, and you need to separate out resources between clients so that there is absolutely no chance of resources being exposed between them

What would be a good reason to have multiple Azure subscriptions? There is one person/credit card paying for resources, but many people who have accounts in Azure, and you need to separate out resources between clients so that there is absolutely no chance of resources being exposed between them. There is one person/credit card paying for resources, and only one person who logs into Azure to manage the resources, but you want to be able to know which resources are used for which client project.

TRUE OR FALSE: Azure Tenant is a dedicated and trusted instance of Azure Active Directory that's automatically created when your organization signs up for a Microsoft cloud service subscription. True False

True

True or False: Azure has the responsibility to manage the hardware in the Infrastructure as a Service model True False

True

True or false: A virtual network must be in the same region as the resources attached to it. True False

True

What makes estimating the cost of an unmanaged storage account difficult? The cost of storage changes frequently You are charged for data coming into Azure, and it's difficult to predict that There is no way to predict the amount of data in the account You are charged for data leaving Azure, and it's difficult to predict that

You are charged for data leaving Azure, and it's difficult to predict that

Why would someone prefer a Consumption-based pricing model as opposed to a Time-based pricing model? It is always cheaper to pay for consumption than to pay by the hour The pricing model is simpler and easier to understand You can save a lot of money if you don't use the resource often as opposed to having it available for use 24/7 You can easily predict the cost of the service into the future

You can save a lot of money if you don't use the resource often as opposed to having it available for use 24/7

What two advantages does cloud computing elasticity give to you? Pick two. You can save money. You can do more regular backups and you won't lose as much when that backup gets restored Servers have become a commodity and Microsoft doesn't even need to even fix servers that fail within Azure. You can serve users better during peak traffic periods by automatically adding more capacity.

You can save money. You can serve users better during peak traffic periods by automatically adding more capacity.

Why are Azure App Services considered Platform as a Service? You give Azure the code and configuration, and you have no access to the underlying hardware Azure App Services is not PaaS, it's Software as a Service. You are responsible for keeping the operating system up to date with the latest patches You can decide on what type of virtual machine it runs - A-series, or D-series, or even H-series

You give Azure the code and configuration, and you have no access to the underlying hardware

Why is Azure App Services considered Platform as a Service? You give Azure the code and configuration, and you have no access to the underlying hardware You can decide on what type of virtual machine it runs - A-series, or D-series, or even H-series You are responsible for keeping the operating system up to date with the latest patches Azure App Services is not PaaS, it's Software as a Service.

You give Azure the code and configuration, and you have no access to the underlying hardware

What does it mean if a service is in Private Preview mode? Anyone can use the service for any reason The service is generally available for use, and Microsoft will provide support for it You have to apply to get selected in order to use that service Anyone can use the service but it must not be for production use

You have to apply to get selected in order to use that service

How do you get access to services in Private Preview mode? They are available in the marketplace. You simply use them. You cannot use private preview services. You must agree to a terms of use first. You must apply to use them.

You must apply to use them.

What is the core problem that you need to solve in order to have a high-availability application? You need to ensure the capacity of your server exceeds your highest number of expected concurrent users You need to avoid single points of failure You should have a backup copy of your application on standby, ready to be started up when the main application fails. You need to ensure your server has a lot of RAM and a lot of CPUs

You need to avoid single points of failure

What happens if Azure does not meet its own Service Level Agreement guarantee (SLA)? Its not possible, azure will always meet its SLA you will be refunded a small amt of your monthly fee the service will be free that month

You will be refunded a small amt of your monthly fee

What is the most number of virtual machines that can me managed under a single Virtual Machine Scale Set? a) 1000 b) 1 c) 10 d) 100

a) 1000 Up to 1000 virtual machines can be managed under a single VMSS

What type of documents does the Microsoft Service Trust Portal provide? a) A list of standards that Microsoft follows, pen test results, security assessments, white papers, faqs, and other documents that can be used to show Microsoft's compliance efforts b) Specific recommendations about your usage of Azure and ways you can improve c) A tool that helps you manage your compliance to various standards d) Documentation on the individual Azure services and solutions

a) A list of standards that Microsoft follows, pen test results, security assessments, white papers, faqs, and other documents that can be used to show Microsoft's compliance efforts

What does it mean if a service is in General Availability (GA) mode? a) Anyone can use the service for any reason b) the service has now reached public preview and microsoft will provide support for it anyone can use the service but it must not be for production use you have to apply to get selected in order to use that service

a) Anyone can use the service for any reason

What advantage does an Application Gateway have over a Load Balancer? a) Application gateway understands the HTTP protocol and can interpret the URL and make decisions based on the URL. b) Application Gateway can be scaled so that two, three or more instances of the gateway can support your application. c) Application Gateway is more like an enterprise-grade product. You should not use a load balancer in production.

a) Application gateway understands the HTTP protocol and can interpret the URL and make decisions based on the URL.

What is Azure's preferred Identity/authentication service? a) Azure Active Directory b) Live Connect c) Network Security Group d) Facebook Connect

a) Azure Active Directory Azure Active Directory (Azure AD) - Microsoft's preferred Identity as a Service solution

Peter is working in company that plans to migrate its website to Azure. The website is being accessed worldwide by users for video streaming services. Peter has been asked to suggest a solution to provide reduced load times and high transfer speeds. Which of the following Azure service should Peter suggest to meet the requirement? a) Azure Content Delivery Network b) Load Balancers c) Network Security Groups d) Blob Storage

a) Azure Content Delivery Network

What service does Azure provide as an optional upgrade to protect against DDoS attacks? a) Azure DDoS Protection Standard b) Azure DDoS Protection Basic c) Azure protects against DDoS as part of it's basic offering and there is no service you can upgrade to d) Advanced Threat Protection (ATP)

a) Azure DDoS Protection Standard

Who is responsible for the security of your Azure Storage account access keys? a) I am responsible for securing the access keys b) Azure is responsible for securing the access keys

a) I am responsible for securing the access keys Customers are responsible to secure the access keys they are given and regenerate them if they are exposed.

Which two features does Virtual Machine Scale Sets provide as part of the core product? Pick two. a) Load balancing between virtual machines b) Firewall c) Autoscaling of virtual machines d) Automatic installation of supporting apps and deployment of custom code e) Content Delivery Network

a) Load balancing between virtual machines c) Autoscaling of virtual machines

What is the benefit of using Powershell over CLI? a) No benefit, it's the same b) More powerful commands c) Cheaper d) Quicker to deploy VMs

a) No benefit, it's the same

What is a policy initiative in Azure? a custom designed policy ability to group policies together assigning permissions to a role in azure requiring all resources to use tags in Azure

ability to group policies together

You have an on-premises network that contains 100 servers. You need to recommend a solution that provides additional resources to your users. The solution must minimize capital and operational expenditure costs. What should you include in the recommendation? a) Complete migration to the public cloud b) Additional data center c) A private cloud d) A hybrid cloud

d) A hybrid cloud A hybrid cloud is a combination of a private cloud and a public cloud. Capital expenditure involves spending money up-front for infrastructure like new servers. Also, with a hybrid cloud, we can use the on-premises servers while adding new servers in the public cloud. Moreover, adding new servers in Azure reduces the capital expenditure costs as we will not be paying for new servers which could have been the case if we deployed new server on-premises.

Which of the following is something that Azure Cognitive Services API can currently do? a) Recognize text in an image b) Create text from audio c) Speak text in an extremely realistic way d) Translate text from one language to another e) Recognize faces in a picture f) All of these! Azure can do it all!

f) All of these! Azure can do it all! https://docs.microsoft.com/en-us/azure/cognitive-services/welcome

True or false: Azure charges for bandwidth used inbound to Azure true false

false

Approximately how many regions does Azure have around the world? 40 10 60+ 25

60+

How many hours are available free when using the Azure B1S General Purpose Virtual Machines under a Azure free account in the first 12 months? 300 hrs 750 hrs 500 hrs Indefinite amount of hrs

750 hrs

What is the service level agreement for two or more Azure Virtual Machines that have been placed into the same Availability Set in the same region? 100% 99.99% 99.90% 99.95%

99.95%

What is the service level agreement for two or more Azure Virtual Machines that have been manually placed into different Availability Zones in the same region? 99.90% 99.95% 100% 99.99%

99.99%

What is a DDoS attack? An attempt to send SQL commands to the server in a way that it will execute them against the database A denial of service attack that sends so much traffic to a network that it cannot respond fast enough; legitimate users become unable to use the service An attempt to guess a user's password through brute force methods An attempt to read the contents of a web page from another website, thereby stealing the user's private information

A denial of service attack that sends so much traffic to a network that it cannot respond fast enough; legitimate users become unable to use the service

What is a DDoS attack? a) A denial of service attack that sends so much traffic to a network that it cannot respond fast enough; legitimate users become unable to use the service b) An attempt to guess a user's password through brute force methods c) An attempt to read the contents of a web page from another website, thereby stealing the user's private information d) An attempt to send SQL commands to the server in a way that it will execute them against the database

A denial of service attack that sends so much traffic to a network that it cannot respond fast enough; legitimate users become unable to use the service Distributed Denial of Service attacks (DDoS) -a type of attack that originates from the Internet that attempts to overwhelm a network with millions of packets of bad traffic that aims to prevent legitimate traffic from getting through

What are resource groups? Automatically assigned groups of resources that all have the same type (virtual machine, app service, etc) Based on the tag assigned to a resource by the deployment script, it is assigned to a group A folder structure in Azure in which you organize resources like databases, virtual machines, virtual networks, or almost any resource Within Azure security model, users are organized into groups, and those groups are granted permissions to resources

A folder structure in Azure in which you organize resources like databases, virtual machines, virtual networks, or almost any resource

What type of documents does the Microsoft Service Trust Portal provide? Documentation on the individual Azure services and solutions Specific recommendations about your usage of Azure and ways you can improve A list of standards that Microsoft follows, pen test results, security assessments, white papers, faqs, and other documents that can be used to show Microsoft's compliance efforts A tool that helps you manage your compliance to various standards

A list of standards that Microsoft follows, pen test results, security assessments, white papers, faqs, and other documents that can be used to show Microsoft's compliance efforts

Which of the following is a good example of a Hybrid cloud? A server runs in your own environment, but places files i the cloud so that it can extend the amount of storage it has access to technology that allows you to grow living tissue on top of an exoskeleton, making Terminators impossible to spot among humans Your code is a mobile app tha runs on IOS and Android phones, but it uses a database in the cloud Your users are inside your corporate network but your applications and data are in the cloud

A server runs in your own environment, but places files i the cloud so that it can extend the amount of storage it has access to Hybrid Cloud - A mixture between your own private networks and servers, and using the public cloud for some things. Typically used to take advantage of the unlimited, inexpensive growth benefits of the public cloud.

Which of the following is a good example of a Hybrid cloud? Technology that allows you to grow living tissue on top of an exoskeleton, making Terminators impossible to spot among humans. Your code is a mobile app that runs on iOS and Android phones, but it uses a database in the cloud. Your users are inside your corporate network but your applications and data are in the cloud. A server runs in your own environment, but places files in the cloud so that it can extend the amount of storage it has access to.

A server runs in your own environment, but places files in the cloud so that it can extend the amount of storage it has access to.

What makes a system highly available? If it maintains 100% availability It's not possible to make a highly available system A system specifically designed to be resilient, with no single point of failures Must have a minimum of two VMs

A system specifically designed to be resilient, with no single point of failures

Your company is planning on hosting resources using Azure services. You have to decide on the right service to use for the desired requirement. Which of the following would you use for the following requirement? "Provide a service that is used to add artificial intelligence features to applications" A. Azure Cognitive Service B. Azure DevOps C. Azure Bot service D. Azure Synapse Analytics

A. Azure Cognitive Service You can use the Azure Cognitive service to build applications with artificial intelligence capabilities.

What software is used to synchronize your on premises AD with your Azure AD? Azure AD Federation Services AD Connect Azure AD Domain Services LDAP

AD Connect

What software is used to synchronize your on premises AD with your Azure AD? Azure AD Federation Services LDAP Azure AD Domain Services AD Connect

AD Connect

What Azure service allows you to use JSON to define your infrastructure, and is sometimes described as infrastructure as code? Azure Blueprint Application Insights Powershell scripts ARM Templates

ARM Templates

Which of the following is considered a benefit of consumption-based pricing? Amount can be deprecated as a capital-expense over many years Increase performance and availability. Steady, reliable monthly bill. Ability to save money by scaling-down services when not required.

Ability to save money by scaling-down services when not required.

_______________ are isolated (single-tenant) environments where you can deploy one or more Azure App Services on your own virtual network. Azure Dedicated Hosts App Service Environments Azure Hybrid Benefit Azure Data Box

App Service Environments

Which storage access tier is the LEAST EXPENSIVE to store files per GB? Premium tier Archive tier Cool tier Hot tier

Archive tier

Which of the following are one of the advantages of running your cloud in a private cloud? Assurance that your code, data and applications are running on isolated hardware, and on an isolated network. You own the hardware, so you can change private cloud hosting providers easily. Private cloud is significantly cheaper than the public cloud.

Assurance that your code, data and applications are running on isolated hardware, and on an isolated network.

What is the benefit of using a command line tool like Powershell or CLI as opposed to the Azure portal? Automation Quicker to deploy VMs Cheaper

Automation

Which two features does Virtual Machine Scale Sets provide as part of the core product? Pick two. Automatic installation of supporting apps and deployment of custom code Autoscaling of virtual machines Content Delivery Network Load balancing between virtual machines Firewall

Autoscaling of virtual machines Load balancing between virtual machines

The term ______________ represents a physically separate location within a region. It could be a data center or a group of closely connected data centers. Geo Availability Set Region Pair Availability Zone

Availability Zone Azure availability zones are physically separate locations within each Azure region that are tolerant to local failures. Failures can range from software and hardware failures to events such as earthquakes, floods, and fires. Tolerance to failures is achieved because of redundancy and logical isolation of Azure services. To ensure resiliency, a minimum of three separate availability zones are present in all availability zone-enabled regions.

__________ is a command-line utility that you can use to copy blobs or files to or from a storage account. SFTP AzCopy Azure Data Factory Azure Cloud Shell

AzCopy

An IT administrator has the requirement to control access to a specific app resource using multi-factor authentication. What Azure service satisfies this requirement? Azure Function Azure Authorization Azure AD Azure Authentication

Azure AD You can use Azure AD to control access to your apps and your app resources, based on your business requirements. In addition, you can use Azure AD to require multi-factor authentication when accessing important organizational resources.

What is Azure's preferred Identity/authentication service? Facebook Connect Network Security Group Live Connect Azure Active Directory

Azure Active Directory

Which Azure service is the recommended Identity-as-a-Service offering inside Azure? Azure Portal Azure Active Directory (AD) Identity and Access Management (IAM) Azure Front Door

Azure Active Directory (AD)

Which Azure service is the recommended Identity-as-a-Service offering inside Azure? Azure Portal Azure Front Door Azure Active Directory (AD) Identity and Access Management (IAM)

Azure Active Directory (AD) Azure AD is the identity service designed for web protocols, that you can use for your applications.

Which type of Azure storage supports the Server Message Block (SMB) protocol and the Network File System (NFS) protocol for accessing files? Storage Explorer Azure Table Storage Azure File Storage General Purpose V2

Azure File Storage

Which Azure service, when enabled, will automatically block traffic to or from known malicious IP addresses and domains? Azure Firewall Azure Active Directory Network Security Groups Load Balancer

Azure Firewall

Which of the following services would NOT be considered Infrastructure as a Service? Azure Functions App Virtual Network Virtual Network Interface Card (NIC) Virtual Machine

Azure Functions App

Which of the following services would NOT be considered Infrastructure as a Service? Virtual Network Interface Card (NIC) Virtual Machine Azure Functions App Virtual Network

Azure Functions App

Where do you go within the Azure Portal to find all of the third-party virtual machine and other offers? Choose an image when creating a VM Bing Azure Marketplace Azure mobile app

Azure Marketplace contains thousands of services you can rent within the cloud

If you wanted to get an alert every time a new virtual machine is created, where could you create that? Azure Dashboard Subscription settings Azure Monitor Azure Policy

Azure Monitor

Which feature within Azure collects all of the logs from various resources into a central dashboard, where you can run queries, view graphs, and create alerts on certain events? Storage Account or Event Hub Azure Portal Dashboard Azure Monitor Azure Security Center

Azure Monitor Azure Monitor - a centralized dashboard that collects all the logs, metrics and events from your resources

Which Azure governance tool allows you to implement compliance audits to find instances of Azure resources that do not follow the company policy, or even prevent those resources from being created? Role Based Access Control (RBAC) Resource Locks Identity and Access Management Azure Policy

Azure Policy

What is the MAIN management tool used for managing Azure resources with a graphical user interface? Azure Storage Explorer Remote Desktop Protocol (RDP) Azure Portal PowerShell

Azure Portal Azure Portal is the website used to manage your resources in Azure

Which feature within Azure alerts you to service issues that happen in Azure itself, not specifically related to your own resources? Azure Monitor Azure Service Health Azure Portal Dashboard Azure Security Center

Azure Service Health

Which feature within Azure alerts you to service issues that happen in Azure itself, not specifically related to your own resources? Azure Service Health Azure Monitor Azure Security Center Azure Portal Dashboard

Azure Service Health

Which tool within Azure is comprised of : Azure Status, Service Health and Resource Health? Azure Service Health Azure Monitor Azure Advisor Azure Dashboard

Azure Service Health

Which tool within Azure is comprised of : Azure Status, Service Health and Resource Health? Azure Monitor Azure Service Health Azure Advisor Azure Dashboard

Azure Service Health Azure Service Health - lets you know about any Azure-related service issues including region-wide downtime

What software, using an intuitive interface, can be downloaded for Windows, macOS or Linux that helps you manage your Azure cloud storage resources from your desktop? Azure Storage Explorer Azure Data Box Azure File Sync Azure Portal

Azure Storage Explorer can help you upload, download, and manage Azure Storage blobs, files, queues, and tables, as well as Azure Data Lake Storage entities and Azure managed disks. Configure storage permissions and access controls, tiers, and rules.

Which Azure serverless computing technology provides the ability to execute workflows to automate business scenarios by using triggers without writing any code? A. Azure Functions B. Azure Logic Apps C. Azure Front Door D. Azure DevOps

B. Azure Logic Apps are designed in a web-based designer and can execute logic triggered by Azure services without writing any code.

A company is planning to host an application on a set of Virtual Machines in Azure. They want to ensure that the application recovers from a region-wide failure in Azure. Which of the following concept needs to be considered to fulfil this requirement? A. Scalability B. Disaster Recovery C. Agility D. Elasticity

B. Disaster Recovery Option A is incorrect since this is used to scale in our scale-out infrastructure.Option C is incorrect since this is used from a customer perspective to make applications more agile.Option D is incorrect since this is used to make an application more flexible in its architecture based on user demand. For more information on disaster recovery in Azure, please visit the below URL- https://docs.microsoft.com/en-us/azure/architecture/resiliency/disaster-recovery-azure-applications

What does it mean that security is a "shared model" in Azure? a) Azure takes care of security completely. b) Both users and Azure have responsibilities for security. c) Azure takes no responsibility for security. d) You must keep your security keys private and ensure it doesn't get out.

Both users and Azure have responsibilities for security.

What is the concept of being able to get your applications and data running in another environment quickly? Azure Blueprint Azure Devops Business Continuity / Disaster Recovery (BC/DR) Reproducible deployments

Business Continuity / Disaster Recovery (BC/DR)

Business Continuity / Disaster Recovery (BC/DR) Disaster Recovery - the ability to recover from a big failure within an acceptable period of time, with an acceptable amount of data lost

Your development team is interested in writing Graph-based applications that take advantage of the Gremlin API. Which option would be ideal for that scenario? A - Azure SQL Database B - Azure Databricks C - Azure Cosmos DB D - Azure Database for PostgreSQL

C Azure Cosmos DB supports SQL, MongoDB, Cassandra, Tables, and Gremlin APIs.

Paying per GB for an unmanaged storage account is an example of what type of cloud pricing model? Reservations Hybrid benefit Spot pricing Consumption model

Consumption model

What is the advantage of "passwordless authentication" over "password plus multi-factor authentication"? Security Availability Convenience Performance

Convenience

Which database product offers "sub 5 millisecond" response times as a feature? Azure SQL Database SQL Server in a VM SQL Data Warehouse Cosmos DB

Cosmos DB

What database service is specifically designed to be extremely fast in responding to requests for small amounts of data (called low latency)? SQL Server in a VM Cosmos DB SQL Database SQL Data Warehouse

Cosmos DB Cosmos DB - extremely low latency (fast) storage designed for smaller pieces of data quickly; SaaS

Which of the following service is a cloud-based network security service that helps to protect the resources that are stored in an Azure Virtual Network? A. Azure Sentinel B. Azure Key Vault C. Azure Dedicated Hosts D. Azure Firewall

D. Azure Firewall The Azure Firewall is a cloud-based service that can be used to protect resources in an Azure virtual network. Here you can define network rules and application rules to protect your Azure Virtual Network.

Which of the following is not a feature of Azure Functions? Can possibly cost you nothing as there is a generous free tier Can edit the code right in the Azure Portal using a code editor Designed for backend batch applications that are continuously running Can trigger the function based off of Azure events such as a new file being saved to a storage account blob container

Designed for backend batch applications that are continuously running

What services does Azure Active Directory Domain Services (AD DS) provide? RBAC Domain join Users oAuth authentication

Domain join

What is the concept of paired regions? a) Azure employees in those regions sometimes go on picnics together. b) Each region of the world has one other region, usually in a completely separate country and geography, where it makes the most sense to place your backups. Like East US 2 is paired with South Korea. c) Each region in the world has at least one other region in which is shares an extremely high speed connection, and where there is coordinated action by Azure not to do anything that will bring them both down at the same time. d) When you deploy your code to one region of the world, it is automatically deployed to the paired region as an emergency backup.

Each region in the world has at least one other region in which is shares an extremely high speed connection, and where there is coordinated action by Azure not to do anything that will bring

What is the concept of paired regions? When you deploy your code to one region of the world, it is automatically deployed to the paired region as an emergency backup. Each region of the world has one other region, usually in a completely separate country and geography, where it makes the most sense to place your backups. Like East US 2 is paired with South Korea. Each region in the world has at least one other region in which is shares an extremely high speed connection, and where there is coordinated action by Azure not to do anything that will bring them both down at the same time. Azure employees in those regions sometimes go on picnics together.

Each region in the world has at least one other region in which is shares an extremely high speed connection, and where there is coordinated action by Azure not to do anything that will bring them both down at the same time.

True or False: Azure is a public cloud, and has no private cloud offerings TRUE FALSE

FALSE

True or false: Azure Monitor allows you to monitor activity logs from Azure Active Directory. TRUE FALSE

FALSE

True or false: Azure PowerShell scripts and Command Line Interface (CLI) scripts are entirely compatible with each other? FALSE TRUE

FALSE

True or false: Azure PowerShell scripts and Command Line Interface (CLI) scripts are entirely compatible with each other? TRUE FALSE

FALSE

True or false: You can create a virtual machine without attaching it to a virtual network. TRUE FALSE

FALSE

True or false: A resource group must be in the same region as the resources inside of it. True False

False No, a resource group does not have to be in the same region as the resources inside of it. A resource group is a logical grouping, not a physical one.

True or False: Azure is a public cloud, and has no private cloud offerings FALSE TRUE

False Some aspects of Azure are not open to the public and require a private agreement with Microsoft such as Azure Government and DoD services

True or false: You cannot have more than one Azure subscription per company FALSE TRUE

False You can have multiple subscriptions, as a way to separate out resources between billing units, business groups, or for any reason you wish.

What is the new data privacy and information protection regulation that took effect across Europe in May 2018? FedRAMP GDPR ISO 9001:2015 PCI DSS

GDPR The General Data Protection Regulation (GDPR) took effect in Europe in May 2018.

A virtual machine is called what type of hosting model? PaaS SaaS IaaS

IaaS Virtual Machines are Infrastructure as a Service (IaaS)

Let us suppose XYZ Ltd plans on purchasing Azure AD Basic for their Azure account. "The Azure AD Basic tier comes with an SLA of 99.9%" State whether the above statement is correct or not Incorrect Correct

Incorrect

How do you invite a person who is not an employee of your company to use one of your applications protected by Azure Active Directory? External Users cannot be managed by Azure Active Directory Azure AD Conditional Access Invite them as a Guest User Add them as a User

Invite them as a Guest User

What effect does setting a budget have on a subscription? It can alert you when the budget is reached or start an automation. All charges will stop until a higher budget is approved. The only effect would be the budget being added as a column in reports. All resources will be stopped when the budget is hit.

It can alert you when the budget is reached or start an automation.

It is the level at which services are billed. All resources created under a subscription are billed to that subscription.

How does Multi-Factor Authentication make a system more secure? It requires the user to have access to their verified phone in order to log in It doesn't make it more secure It is another password that a user has to memorize, making it more secure It allows the user to log in without a password because they have already previously been validated using a browser cookie

It requires the user to have access to their verified phone in order to log in

In what way does Multi-Factor Authentication increase the security of a user account? It doesn't. multi-factor authentication is more about access and authentication than account security. It requires users to be approved before than can log in for the first time It requires single sign on functionality It requires the user to possess something like their phone to read an SMS, use a mobile app or biometric identification

It requires the user to possess something like their phone to read an SMS, use a mobile app or biometric identification

In what way does Multi-Factor Authentication increase the security of a user account? It requires single sign-on functionality It requires the user to possess something like their phone to read an SMS, use a mobile app, or biometric identification. It requires users to be approved before they can log in for the first time. It doesn't. Multi-Factor Authentication is more about access and authentication than account security.

It requires the user to possess something like their phone to read an SMS, use a mobile app, or biometric identification.

When deploying a virtual machine into an availability set, how does Azure treat that VM differently? It will autoscale the VM, adding and removing instances as demand increases and decreases It will place the VM in another data center as other VMs in the set It will place the VM on the same physical server as the other VMs in the set It will place the VM on a physically separate server and roll out Azure updates to it in a staggered manner.

It will place the VM on a physically separate server and roll out Azure updates to it in a staggered manner.

What types of files can a Content Delivery Network speed up the delivery of? Javascript files images pdfs videos

Javascript files images pdfs videos

How does the use of availability zones improve the availability of your application? If something was to happen to your application, a new copy of it would be deployed to another data center almost instantly so that your customers would hardly notice any downtime. Keeps your servers in separate regions, in a globally-redundant architecture. Keeps your servers in separate data centers in the same region, protecting them from data center specific issues such as power-outages or internet disconnection. Keeps your servers closer together for faster inter-server communication and lower overall latency.

Keeps your servers in separate data centers in the same region, protecting them from data center specific issues such as power-outages or internet disconnection.

Which of the following resources are not considered Compute resources? Azure Batch Virtual Machines Virtual Machine Scale Sets Load Balancer Function Apps

Load Balancer

Which of the following resources are not considered Compute resources? Load Balancer Azure Batch Virtual Machines Virtual Machine Scale Sets Function Apps

Load Balancer A load balancer is a networking product, and does not execute your code

What Azure resource allows you to evenly split traffic coming in and direct it to several identical virtual machines to do the work and respond to the request? Azure App Services Azure Logic Apps Virtual Network Load Balancer or Application Gateway

Load Balancer or Application Gateway

What Azure resource allows you to evenly split traffic coming in and direct it to several identical virtual machines to do the work and respond to the request? Azure Logic Apps Load Balancer or Application Gateway Virtual Network Azure App Services

Load Balancer or Application Gateway

What are groups of subscriptions called? Azure Policy Management Groups Subscription Groups ARM Groups

Management Groups

What are groups of subscriptions called? Subscription Groups Management Groups Azure Policy ARM Groups

Management Groups Subscriptions can be nested and placed into management groups to make managing them easier.

Which TWO ways can be used to connect virtual network subnets in two different regions? Each is a complete solution. Choose only two. Azure Firewall Network Gateway Vnet Peering Network Security Groups (NSG)

Network Gateway Vnet Peering Virtual networks can be connect by either peering, or with installing network gateway devices on each.

How do you control the traffic flowing between two subnets on the same virtual network? Network Security Group Network Watcher Azure Traffic Manager Azure Firewall

Network Security Group

Which free Azure security service checks all traffic travelling over a subnet against a set of rules before allowing it in, or out. Azure DDoS Protection Network Security Group Advanced Threat Protection (ARP) Azure Firewall

Network Security Group

Each person has their own user id and password to log into Azure. But how many subscriptions can a single account be associated with? One 250 per region 10 No limit

No limit

An organization has 1,000 virtual machines (VMs) hosted on the Hyper-V hosts in a data center. They are planning to migrate all the virtual machines to an Azure pay-as-you-go subscription. John has been asked to suggest the expenditure model to use for the planned Azure solution. Which of the given expenditure model should he choose in this case? a) Operational b) Elastic c) Capital d) Scalable

Operational The most significant change that will be face when moving from an on-premises cloud to a public cloud is the switch from capital expenditure (i.e, buying hardware) to operating expenditure (paying for service). Also, this shift requires more careful management of costs and expenditures. The primary advantage of the cloud is that you can positively impact the cost of a service you use by merely shutting down or resizing it when not required

Deploying Azure App Services applications consists of what two components? Pick two. Packaged code Configuration Database scripts Managing operating system updates

Packaged code Configuration

Which of the following scenarios would Azure Policy be a recommended method for enforcement? Require a virtual machine to always update to the latest security patches Prevent certain Azure Virtual Machine instance types from being used in a resource group Add an additional prompt when creating a resource without a specific tag to ask the user if they are really sure they want to continue? Allow only one specific roles of users to have access to a resource group

Prevent certain Azure Virtual Machine instance types from being used in a resource group

Which of the following scenarios would Azure Policy be a recommended method for enforcement? Add an additional prompt when creating a resource without a specific tag to ask the user if they are really sure they want to continue? Prevent certain Azure Virtual Machine instance types from being used in a resource group Require a virtual machine to always update to the latest security patches Allow only one specific roles of users to have access to a resource group

Prevent certain Azure Virtual Machine instance types from being used in a resource group Azure Policy can add restrictions on storage account SKUs, virtual machine instance types, and rules relating to tagging of resources and groups. It cannot prompt a user to ask them if they are sure.

In which of the given kind of cloud model are all the hardware resources owned by a third party and shared between multiple tenants? a) Private Cloud b) Hybrid Cloud c) Public Cloud d) Multi-vendor Cloud

Public Cloud Microsoft Azure, Amazon Web Services (AWS) and Google Cloud are some of the examples of public cloud service providers. Microsoft, Amazon and Google own the hardware. The tenants are the customers who use the public cloud services.

Select the way(s) to increase the security of a traditional user id and password system? Require longer and more complex passwords Do not allow users to log into an application except using a company registered device Require users to change their passwords more frequently Use multi-factor authentication which requires an additional device (something you have) to verify identity

Require longer and more complex passwords Do not allow users to log into an application except using a company registered device Require users to change their passwords more frequently Use multi-factor authentication which requires an additional device (something you have) to verify identity

Select the way(s) to increase the security of a traditional user id and password system? Require users to change their passwords more frequently. Require longer and more complex passwords. Use multi-factor authentication which requires an additional device (something you have) to verify identity. Do not allow users to log into an application except using a company registered device.

Require users to change their passwords more frequently. Require longer and more complex passwords. Use multi-factor authentication which requires an additional device (something you have) to verify identity. Do not allow users to log into an application except using a company registered device.

What is the best criteria to decide what resources go into the same resource group? Resources in a resource group should be related in some way. They should share the same lifecycle so they can be added, updated and deleted together. Only resources from the same region should be in the resource group from that region. Each resource should get its own resource group. All resources of the same type (storage, virtual machines, databases, etc) go into their own resource group.

Resources in a resource group should be related in some way. They should share the same lifecycle so they can be added, updated and deleted together.

What types of resources are defined as compute resources? All resources that are listed in the Azure Marketplace Only Virtual Machines Resources that perform some type of task that requires CPU cycles to perform the work

Resources that perform some type of task that requires CPU cycles to perform the work

Which of the following elements is considered part of the "network" layer of network security? Keeping operating systems up to date with patches Locks on the data center doors All of the above Separate servers into distinct subnets by role

Separate servers into distinct subnets by role

Why should you divide your application into multiple subnets as opposed to having all your web, application and database servers running on the same subnet? There are only a limited number of IP addresses available per subnet, so you need multiple subnets over a certain number. Each server type of your application requires its own subnet. It's not possible to mix web servers, database servers and application servers on the same subnet. Separating your application into multiple subnets allows you to have different NSG security rules for each subnet, which can make it harder for a hacker to get from one compromised server onto another.

Separating your application into multiple subnets allows you to have different NSG security rules for each subnet, which can make it harder for a hacker to get from one compromised server onto another.

Select all features part of Azure AD? Log Alert Rule Smart lockout Custom banned password list Single sign-on Device Management

Smart lockout Custom banned password list Single sign-on Device Management

Which of the following is NOT one of the factors of Multi-Factor Authentication (MFA)? Something you know Something you have Something you can do Something you are

Something you can do

TRUE

True or false: You can run a containerized application on a virtual machine. TRUE FALSE

TRUE

With Azure public cloud, anyone with a valid credit card can sign up and get services immediately, subject to geography restrictions TRUE FALSE

TRUE

What feature of a system makes it elastic? The ability to increase and reduce capacity based on actual demand The ability to heal itself after a crash The ability to stay up (available) while updates are being made to the system The ability to withstand denial of service attacks

The ability to increase and reduce capacity based on actual demand

What feature of a system makes it elastic? a) The ability to heal itself after a crash b) The ability to stay up (available) while updates are being made to the system c) The ability to withstand denial of service attacks d) The ability to increase and reduce capacity based on actual demand

The ability to increase and reduce capacity based on actual demand Elasticity - The ability of a system to automatically grow when maximum capacity is reached, and automatically shrink to minimize waste.

One of the benefits of the cloud is agility. What does that mean in the context of the cloud? The ability to respond to and drive market change quickly The ability of a system to grow it's capacity easily when it reaches full capacity The ability to spin up new resources within minutes The ability to recover from a big region-wide failure in a short amount of time

The ability to respond to and drive market change quickly

What is Single Sign-On? When you sign in to an application, it remembers who you are the next time you go there. The ability to use an existing user id and password to sign in other applications, and not have to create/memorize a new one. When an application outsources (federates) it's identity service to a third-party platform

The ability to use an existing user id and password to sign in other applications, and not have to create/memorize a new one.

What is the goal of a DDoS attack? To overwhelm and exhaust application resources To crack the password from administrator accounts To trick users into giving up personal information To extract data from a database

To overwhelm and exhaust application resources

True or false: If your feature is in the General Availability phase, then your feature will receive support from all Microsoft support channels.

True

With Azure public cloud, anyone with a valid credit card can sign up and get services immediately TRUE FALSE

True

True or false: Azure Cloud Shell allows access to the Bash and Powershell consoles in the Azure Portal True False

True Cloud Shell - allows access to the Bash and Powershell consoles in the Azure Portal

True or False: Azure has the responsibility to manage the hardware in the Infrastructure as a Service model

True Yes, Azure still manages the hardware itself, the hypervisor and all of the physical elements behind the scenes

True or false: Formal support is not included in private preview mode. - True - False

True rue. Preview features are not fully ready and this phase does not include formal support.

True or false: you can create your own policies if built-in Azure Policy is not sufficient to your needs True False

True you can create custom policies using JSON

Where can you go to see what standards Microsoft is in compliance with? Azure Service Health Azure Privacy Page Azure Security Center Trust Center

Trust Center

Where can you go to see what standards Microsoft is in compliance with? Azure Service Health Azure Security Center Azure Privacy Page Trust Center

Trust Center

Which of the following elements is considered part of the perimeter layer of security? Separate servers into distinct subnets by role Locks on the data center doors Keep operating systems up to date with patches Use a firewall

Use a firewall

Why is a user id and password sometimes not enough to prove someone is who they say they are? Some people might choose the same user id and password Passwords must be encrypted before being stored Passwords are usually easy to forget User id and password can be used by anyone such as a co-worker, ex-employee or hacker half-way around the world

User id and password can be used by anyone such as a co-worker, ex-employee or hacker half-way around the world

Why is a user id and password sometimes not enough to prove someone is who they say they are? User id and password can be used by anyone such as a coworker, ex employee or hacker half way around the world Passwords must be encrypted before being stored passwords are usually easy to forget some people might choose the same user id and passord

User id and password can be used by anyone such as a coworker, ex employee or hacker half way around the world

Which of the following Azure features is most likely to deliver the most immediate savings when it comes to reducing Azure costs? a) Auto shutdown of development and QA servers over night and on weekends b) Using Azure Reserved Instances for most of your virtual machines c) Changing your storage accounts from globally redundant (GRS) to locally redundant (LRS) d) Using Azure Policy to restrict the user of expensive VM SKUs

Using Azure Reserved Instances for most of your virtual machines

What hardware device is required to exist or be installed on your company network in order to set up a site-to-site VPN? Virtual machine Application Gateway Virtual Network VPN Gateway

VPN Gateway A VPN Gateway needs to be configured to connect to Azure for a private network to be established

One of the three core principles of the Zero Trust model of security is: Block all external network ports Always encrypt data stored on the hard disk Verify explicity Use a firewall on the network perimiter

Verify explicity

In which US state is the East US 2 region? Virginia California Texas Iowa

Virginia

What Azure product allows you to autoscale virtual machines from 1 to 1000 instances, and also provides load balancing services built in? Application Gateway Azure App Services Azure Virtual Machines Virtual Machine Scale Sets

Virtual Machine Scale Sets

What Azure product allows you to autoscale virtual machines from 1 to 1000 instances, and also provides load balancing services built in? Azure Virtual Machines Application Gateway Azure App Services Virtual Machine Scale Sets

Virtual Machine Scale Sets

What is the maximum amount of Azure Storage space a single subscription can store? Virtually unlimited 5 PB 500 GB 2 TB

Virtually Unlimited A single Azure subscription can have up to 250 storage accounts per region, and each storage account can store up to 5 Petabytes. That is 31 million Terabytes. This is probably 15-20 times what Google, Amazon, Microsoft and Facebook use combined. That's a lot.

What is the maximum amount of Azure Storage space a single subscription can store? 5 PB 500 GB Virtually unlimited 2 TB

Virtually unlimited

Application Gateway contains what additional optional security feature over a regular Load Balancer? Azure AD Advanced Information Protection Web Application Firewall (or WAF) Advanced DDoS Protection Multi-Factor Authentication

Web Application Firewall (or WAF)

Application Gateway contains what additional optional security feature over a regular Load Balancer? Multi-Factor Authentication Web Application Firewall (or WAF) Azure AD Advanced Information Protection Advanced DDoS Protection

Web Application Firewall (or WAF)

What operating systems does an Azure Virtual Machine support? Windows, Linux and macOS macOS Linux Windows and Linux Windows

Windows and Linux

What operating systems does an Azure Virtual Machine support? macOS Linux Windows, Linux and macOS Windows Windows and Linux

Windows and Linux

Which of the following is considered a downside to using Capital Expenditure (CapEx)? You must wait over a period of years to depreciate that investment on your taxes You are not guaranteed to make a profit You can deduct expenses as they occur It does not require a lot of up front money

You must wait over a period of years to depreciate that investment on your taxes

What is the core problem that you need to solve in order to have a high-availability application? You need to avoid single points of failure You need to ensure your server has a lot of RAM and a lot of CPUs You need to ensure the capacity of your server exceeds your highest number of expected concurrent users You should have a backup copy of your application on standby, ready to be started up when the main application fails.

You need to avoid single points of failure

What happens if Azure does not meet its own Service Level Agreement guarantee (SLA)? It's not possible. Azure will always meet it's SLA? The service will be free that month You will be financially refunded a small amount of your monthly fee

You will be financially refunded a small amount of your monthly fee

Which feature within Azure collects all of the logs from various resources into a central dashboard, where you can run queries, view graphs, and create alerts on certain events? a) Azure Monitor b) Azure Security Center c) Azure Portal Dashboard d) Storage Account or Event Hub

a) Azure monitor Azure Monitor - a centralized dashboard that collects all the logs, metrics and events from your resources

Which Azure Service contains pre-built machine learning models that you can use in your own code, using an API? a) Cognitive Services b) Azure Functions c) Azure Blueprints d) App Services

a) Cognitive Services Cognitive Services is an API that Azure provides, that gives access to a set of pre-built machine learning models including vision services, speech services, knowledge management and chat bots.

Which tool within Azure helps you to track your compliance with various international standards and government laws? a) Compliance Manager b) Microsoft Privacy Statement c) Service Trust Portal d) Azure Government Services

a) Compliance Manager Compliance Manager will track your own compliance with various standards and laws.

Which feature of Azure Active Directory will require users to have their mobile phone in order to be able to log in? a) Multi-Factor Authentication B) Azure Information Protection (AIP) c) Azure Security Center d) Advanced Threat Protection (ATP)

a) Multi-Factor Authentication Multi-Factor Authentication (MFA) - the concept of having something additional to a "password" that is required to log in; passwords are find-able or guessable; but having your mobile phone on you to receive a phone call, text or run an app to get a code is harder for an unknown hacker to get

Azure Services can go through several phases in a Service Lifecycle. What are the three phases called? a) Private Preview, Public Preview, and General Availability b) Announced, Coming Soon, and Live c) Preview Phase, General Availability Phase, and Unpublished d) Development phase, QA phase, and Live phase

a) Private Preview, Public Preview, and General Availability

What hardware device is required to exist or be installed on your company network in order to set up a site-to-site VPN? a) VPN Gateway b) application gateway c) virtual network d) virtual machine

a) VPN Gateway VPN Gateway needs to be configured to connect to Azure for a private network to be established

What two advantages does cloud computing elasticity give to you? Pick two. a) You can save money. b) You can serve users better during peak traffic periods by automatically adding more capacity. c) Servers have become a commodity and Microsoft doesn't even need to even fix servers that fail within Azure. d) You can do more regular backups and you won't lose as much when that backup gets restored

a) You can save money. b) You can serve users better during peak traffic periods by automatically adding more capacity.

Which of the following would be an example of an Internet of Things (IoT) device? a) A mobile application that is used to watch online video courses b) A refrigerator that monitors how much milk you have left and sends you a text message when you are running low c) A web application that people use to perform their banking tasks d) A video game, installed on Windows clients around the world, that keep user scores in the cloud.

b) A refrigerator that monitors how much milk you have left and sends you a text message when you are running low

Which of the following are one of the advantages of running your cloud in a private cloud? a) You own the hardware, so you can change private cloud hosting providers easily. b) Assurance that your code, data and applications are running on isolated hardware, and on an isolated network. c) Private cloud is significantly cheaper than the public cloud.

b) Assurance that your code, data and applications are running on isolated

Which Azure management tool analyzes your usage of Azure and makes suggestions specifically targeted to help you optimize your usage of Azure regarding cost, security and performance? a) Azure Firewall b) Azure Advisor c) Azure Mobile App d) Azure Service Health

b) Azure Advisor

Which Azure service is meant to be a security dashboard that contains all the security and threat protection in one place? a) Azure Key Vault b) Azure Security Center c) Azure Monitor d) Azure Portal Dashboard

b) Azure Security Center Azure Security Center - unified security management and threat protection; a security dashboard inside Azure Portal

What is the name of the group of services inside Azure that hosts the Apache Hadoop big data analysis tools? a) Azure Data Factory b) HDInsight c) Azure Hadoop Services d)Azure Kubernetes Services

b) HDInsight HDInsight is a collection of open-source Apache Hadoop tools

What type of container is used to collect log and metric data from various Azure Resources? a) Azure Monitor account b) Log Analytics Workspace c) Managed Storage d) Append Blob Storage

b) Log Analytics Workspace Log Analytics Workspace is required to collect logs and metrics

What types of resources are defined as "compute resources"? a) All resources that are listed in the Azure Marketplace b) Resources that perform some type of task that requires CPU cycles to perform the work c) Only Virtual Machines

b) Resources that perform some type of task that requires CPU cycles to perform the work Compute Services - a category of services in Azure that provides CPU cycles for rent. Virtual Machines are only one type of compute resource. The Marketplace contains many types of resources, not just compute.

Why should you divide your application into multiple subnets as opposed to having all your web, application and database servers running on the same subnet? a) Each server type of your application requires its own subnet. It's not possible to mix web servers, database servers and application servers on the same subnet. b) Separating your application into multiple subnets allows you to have different NSG security rules for each subnet, which can make it harder for a hacker to get from one compromised server onto another. c) There are only a limited number of IP addresses available per subnet, so you need multiple subnets over a certain number.

b) Separating your application into multiple subnets allows you to have different NSG security rules for each subnet, which can make it harder for a hacker to get from one compromised server onto another.

What is the significance of the Azure region? Why is it important? a) Even though you have to choose a region when creating resources, there's generally no consequence of what you select. You can create a network in one region and then create virtual machines for that network in another region. b) You must select a region when creating most resources, and the region is the area of the world where those resources will be physically located. c)Once you select a region, you cannot create resources outside of that region. So selecting the right region is an important decision. d) Region is just a folder structure in which you organize resources, much like file folders on a computer.

b) You must select a region when creating most resources, and the region is the area of the world where those resources will be physically located.

What are Azure Availability Zones? a) This is the same as a region b) A folder structure in Azure in which you organize resources like databases, virtual machines, virtual networks, or almost any resource c) A feature of Azure that allows you to manually specify into which data center your virtual machines are placed, which allows you to achieve higher availability than any other option. d) Within each individual data center, certain racks of servers have been architected by Azure to have higher uptime than the others. If you place your apps onto this rack, you'll get higher uptime than if you let Azure do it.

c) A feature of Azure that allows you to manually specify into which data center your virtual machines are placed, which allows you to achieve higher availability than any other option. Availability Zones - Unique physical locations within an Azure region, made up of one or more datacenters; there is a minimum of three zones in each region; you can manually place your resources in an availability zone for highest availability

What makes a system highly available? a) It's not possible to make a highly available system b) If it maintains 100% availability c) A system specifically designed to be resilient, with no single point of failures d) Must have a minimum of two VMs

c) A system specifically designed to be resilient, with no single point of failures High Availability - a system specifically designed to be resilient when some component of the system fails

What feature within Azure will make recommendations to you about reducing cost on your account? a) Azure Dashboard b) Azure Service Health c) Azure Advisor d) Azure Security Center

c) Azure Advisor Azure Advisor analyzes your account usage and makes recommendations for you based on its set rules

What is the MAIN management tool used for managing Azure resources with a graphical user interface? a) Azure Storage Explorer b) Remote Desktop Protocol (RDP) c) Azure Portal d) PowerShell

c) Azure Portal Azure Portal is the website used to manage your resources in Azure

Which Azure website tool is available for you to estimate the future costs of your Azure products and services by adding products to a shopping basket and helping you calculate the costs? a) Azure Advisor b) Microsoft Docs c) Azure Pricing Calculator

c) Azure Pricing Calculator Azure Pricing Calculator lets you attempt to calculate your future bill based on resources you select and your estimates of usage

What is the name of Azure's hosted SQL database service? a) Cosmos DB b) SQL Server in a VM c) Azure SQL Database d) Table Storage

c) Azure SQL Database SQL Database is a SQL Server compatible option in Azure, a database as a service

Which major cloud provider offers the most international locations for customers to provision virtual machines and other servers? a) Amazon AWS b) Google Cloud Platform c) Microsoft Azure

c) Microsoft Azure Azure has the most regions of any major cloud provider - 60+ global regions.

Outlook 365 is what type of hosting model? a) PaaS b) IaaS c) SaaS

c) SaaS Outlook 365 is Software as a Service (SaaS).

One of the benefits of the cloud is agility. What does that mean in the context of the cloud? a) The ability to spin up new resources within minutes b) The ability of a system to grow it's capacity easily when it reaches full capacity c) The ability to respond to and drive market change quickly d) The ability to recover from a big region-wide failure in a short amount of time

c) The ability to respond to and drive market change quickly Agility - the ability to respond to change "rapidly" based on changes to market or environment; ensuring fast time to market

What is Single Sign-On? a) When an application outsources (federates) it's identity service to a third-party platform b) When you sign in to an application, it remembers who you are the next time you go there. c) The ability to use an existing user id and password to sign in other applications, and not have to create/memorize a new one.

c) The ability to use an existing user id and password to sign in other applications, and not have to create/memorize a new one. Single Sign-On - the ability to use the same user id and password to log into every application that your company has; enabled by Azure AD

What is the default amount of credits that you are given when you first create an Azure Free account? a) Azure does not give you any free credits when you create a free account b) You are given $50 per month, for one year towards Azure services c) The default is US$200 d) You can create 1 Linux VM, 1 Windows VM, and a number of other free services for the first year.

c) The default is US$200 There are some other benefits to a free account, but you get US$200 to spend in the first month.

Which of the following Azure features is most likely to deliver the most immediate savings when it comes to reducing Azure costs? a) Auto shutdown of development and QA servers over night and on weekends b) Changing your storage accounts from globally redundant (GRS) to locally redundant (LRS) c) Using Azure Reserved Instances for most of your virtual machines d) Using Azure Policy to restrict the user of expensive VM SKUs

c) Using Azure Reserved Instances for most of your virtual machines Reserved Instances often offer 40% or more savings off of the price of pay-as-you-go virtual machines

What makes estimating the cost of an unmanaged storage account difficult? a) The cost of storage changes frequently b) There is no way to predict the amount of data in the account c) You are charged for data leaving Azure, and it's difficult to predict that d) You are charged for data coming into Azure, and it's difficult to predict that

c) You are charged for data leaving Azure, and it's difficult to predict that There is a cost for egress (bandwidth out) and it's hard to estimate how many bytes will be counted leaving an Azure network

Your company has 10 departments. The company plans to implement an Azure environment. You need to ensure that each department can use a different payment option for the Azure services it consumes. What should you create for each department? a) a resource group b) a reservation c) a subscription d) a container instance

c) a subscription

What are resource groups? a) Automatically assigned groups of resources that all have the same type (virtual machine, app service, etc) b) Based on the tag assigned to a resource by the deployment script, it is assigned to a group c) Within Azure security model, users are organized into groups, and those groups are granted permissions to resources d) A folder structure in Azure in which you organize resources like databases, virtual machines, virtual networks, or almost any resource

d) A folder structure in Azure in which you organize resources like databases, virtual machines, virtual networks, or almost any resource

If you have an Azure free account, with a $200 credit for the first month, what happens when you reach the $200 limit? a) You cannot create any more resources until you add more credits to the account. b) Your account is automatically closed. c) Your credit card is automatically billed. d) All services are stopped and you must decide whether you want to convert to a paid account or not.

d) All services are stopped and you must decide whether you want to convert to a paid account or not.

What benefit does a Content Delivery Network (CDN) provide its users? a) For a small fee, Azure will take over management of your virtual machine, perform OS updates and ensure it's running well b) Allows you to keep temporarily session information on the web visitor such as their login ID or their name c) Allows you to store data that can be retrieved later in an extremely fast and inexpensive manner d) Allows you to reduce the traffic coming into a web server for static, unchanging files such as images, videos and PDFs

d) Allows you to reduce the traffic coming into a web server for static, unchanging files such as images, videos and PDFs Content Delivery Network - allows you to improve performance by removing the burden of serving static, unchanging files from the main server to a network of servers around the globe; a CDN can reduce traffic to a server by 50% or more, which means you can serve more users or serve the same users faster; SaaS

An IT administrator has the requirement to control access to a specific app resource using multi-factor authentication. What Azure service satisfies this requirement? a) Azure Function b) Azure Authentication c) Azure Authorization d) Azure AD

d) Azure AD You can use Azure AD to control access to your apps and your app resources, based on your business requirements. In addition, you can use Azure AD to require multi-factor authentication when accessing important organizational resources.

How do you stop your Azure account from incurring costs above a certain level without your knowledge? a) Switch to Azure Reserved Instances with Hybrid Benefit for VMs b) use Azure Functions which have a significant free limit c) Set up a billing alert to send you an email when it reaches a certain level d) Implement the Azure spending limit in the Account Center

d) Implement the Azure spending limit in the Account Center

What is the basic way of protecting an Azure Virtual Network subnet? a) Azure Firewall b) Application Gateway with WAF c) Azure DDos Standard protection d) Network Security Group

d) Network Security Group Network Security Group (NSG) - a fairly basic set of rules that you can apply to both inbound traffic and outbound traffic that lets you specify what sources, destinations, and ports are allowed to travel through from outside the virtual network to inside the virtual network

Logic apps, functions, and service fabric are all examples of what model of compute within Azure? a) IaaS model b) SaaS model c) App Services Model d) Serverless model

d) Serverless model he serverless model of compute removes all responsibility to selecting or even managing the server and makes Azure responsible for running your code including scaling

Which of the following methods of deploying a virtual machine provides the highest availability SLA? a) Two or more virtual machines in a data center b) Two or more virtual machines in an availability set c) A single VM d) Two or more virtual machines across availability zones in the same region

d) Two or more virtual machines across availability zones in the same region Availability Zones offer 99.99% availability when configured correctly.

Why would someone prefer a Consumption-based pricing model as opposed to a Time-based pricing model? a) You can easily predict the cost of the service into the future b) The pricing model is simpler and easier to understand c)It is always cheaper to pay for consumption than to pay by the hour d) You can save a lot of money if you don't use the resource often as opposed to having it available for use 24/7

d) You can save a lot of money if you don't use the resource often as opposed to having it available for use 24/7 Consumption-Based Model - paying for something based on how much you used, as opposed to paying for something no matter if you use it or not.

Which of the following elements is considered part of the "perimeter" layer of security? Separate servers into distinct subnets by role Keep operating systems up to date with patches locks on the data center doors use a firewall

use a firewall Firewall is part of the perimeter security For more information on the layered approach to network security: https://docs.microsoft.com/en-us/learn/modules/intro-to-security-in-azure/5-network-security

When we implement a Software as a Service (SaaS)solution, then we become responsible to ________________. a) Configure high availability b) Define scalability rules c) Install the SaaS solution d) Configure the SaaS Solution

d) Configure the SaaS Solution While implementing a Software as a Service (SaaS) solution, you become responsible to configure the SaaS solution. SaaS needs the least amount of management as the cloud provider is responsible to manage everything, allowing the end-user to use the software smoothly. Moreover, Software as a service (SaaS) permits the users to connect to and use cloud-based apps over the Internet like email, calendaring and office tools.

An organization plans to host an accounting application called App1 that will be used by all the customers of the organization. It was observed that App1 had low usage during the initial three weeks of each month and very high usage during the last week of each month. Which of the following advantages of Azure Cloud Services will support cost management to handle this kind of usage pattern? 1. High availability 2. High latency 3. Elasticity 4. Load balancing

3. Elasticity Elasticity offers the ability to provide additional compute resources when needed and reduce them when not required for reducing the costs. One of the examples of elasticity is Autoscaling. Elastic computing provides the ability to quickly expand or decrease computer processing, memory and storage resources to meet changing demands without worrying about capacity planning and engineering for peak usage. Moreover, cloud elasticity offers an organization to not pay for any unused capacity or unused resources.

Which of the following are the characteristics of the public cloud? (A) Dedicated hardware (B) Unsecured connections (C) Limited storage (D) Metered pricing (E) Self-service management 1. Only (A) and (B) 2. Only (B) and (C) 3. Only (C) and (D) 4. Only (D) and (E)

4. Only (D) and (E) Azure Cloud service offers metered pricing, as we pay for the resources being used. Also, public cloud services offer a self-managed service, as you can use the portal to add, change and also remove the resources as and when needed. Since hardware is shared among public cloud clients, so it is not dedicated. Therefore, connections on the cloud are secured. Also, storage is virtually unlimited on the cloud and in the public cloud, you get pay-as-you-go pricing with no CapEx costs. Also, the public cloud offers self-service management services.

Tailwind Traders uses the LAMP stack for several of its websites. Which option would be ideal for migration? A - Azure Database for MySQL B - Azure Cosmos DB C - Azure SQL Database D - Azure Database for PostgreSQL

A - Azure Database for MySQL Azure Database for MySQL is the logical choice for existing LAMP stack applications.

Which of the following Azure Service would you suggest when you are planning to create an application with an event-based architecture that has the feature to ingest events from Blob storage and create custom topics? A - Azure Event Grid B - Azure Functions C - Azure Machine Learning Studio D - Azure Logic Apps

A - Azure Event Grid

Which of the following services should be used when the primary concern is to perform work in response to an event (often via a REST command) that needs a response in a few seconds? A - Azure Functions B - Azure App Service C - Azure Container Instances

A - Azure Functions (Azure Functions is used when you need to perform work in response to an event (often via a REST request), timer, or message from another Azure service, and when that work can be completed quickly, within seconds or less)

ou organization is planning to build a ou organization is planning to build a customized solution for uploading weather data to Azure using several million sensors. Which of the given service should the company use to connect, monitor, and control the sensors without managing the infrastructure? A - Azure IoT Hub B - Azure Virtual Machine C - Azure Files D - Azure App Service

A - Azure IoT Hub

A company is planning to set up a solution in Azure. The solution would have the following key requirement. A tool that provides guidance and recommendations to improve an Azure environment Which of the following would be best suited for this requirement? A. Azure Advisor B. Azure Cognitive Services C. Azure Application Insights D. Azure DevOps

A. Azure Advisor

What can you use to launch the Azure Cloud Shell? A. Azure portal B. Azure PowerShell C. Azure Command Line Interface (CLI) D. Azure Resource Manager (ARM) template

A. Azure portal Azure Cloud Shell is an interactive, authenticated, browser-accessible shell for managing Azure resources. It provides the flexibility of choosing the shell experience that best suits the way you work, either Bash or PowerShell.Azure You can access the Cloud Shell in three ways:• Direct link: Open a browser to https://shell.azure.com.• Azure portal: Select the Cloud Shell icon on the Azure portal.• Code snippets: On learn.microsoft.com and Microsoft Learn, select the Try It button

Your company is planning to create several Virtual Machines in Azure. Which of the following is the right category to which the Azure Virtual Machine belongs? A. Infrastructure as a service (IaaS) B. Platform as a service (PaaS) C. Software as a service (SaaS) D. Function as a service (FaaS)

A. Infrastructure as a service (IaaS) IaaS constitutes the Infrastructure that constitutes your Azure Virtual Machines. Since this is clearly shown, all other options are incorrect. https://azure.microsoft.com/en-us/overview/what-is-iaas/

A company is planning to deploy Azure resources to a resource group. The company is planning to assign permissions to the resource groups. Would the resources in the resource group also inherit the same permissions? A. Yes B. No

A. Yes https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-porta

Match the services on the left to the correct descriptions on the right. Services A. Pricing calculator B. TCO calculator C. Cost management Descriptions 1. Estimates workload costs 2. Estimates the cost savings by comparing datacenter costs to running the same workload on Azure 3. Helps control, analyze, and optimize workload costs

A1 B2 C3 Pricing calculator helps you to estimate workload cost. TCO Calculator provided approximate cost savings of operating similar workload on Azure to on-premises datacenter. Azure Cost Management helps to understand Azure bill, manage account.

Match the services on the left to the correct descriptions on the right. Services A. Infrastructure as a service (IaaS) B. Platform as a service (PaaS) C. Software as a service (SaaS) Descriptions 1. Provides hosting and management of an application and its underlying infrastructure, as well as any maintenance, upgrades, and security patching 2. Provides a fully managed environment for developing, testing, delivering, and managing cloud-based applications 3. Provides servers and virtual machines, storage, networks, and operating systems on a pay-as-you-go basis

A3 B2 C1

Match the services on the left to the correct descriptions on the right. Services A. Azure Resource Locks B. Azure Blueprints C. Azure Policy Descriptions 1. Rapidly provisions and runs new environments with the knowledge that they are in line with the organization's compliance requirements. 2. Enforces standards and assess compliance across your organization 3. Prevents resources from being accidentally deleted or changed

A3 B2 C2

An organization intends to migrate all its data and resources to Azure. The migration plan developed requires that only Platform as a Service (PaaS) solutions must be used in Azure. John has been asked to deploy an Azure environment that meets the requirement of the migration plan. John suggests creating an Azure App Service and Azure SQL databases. Does the suggested solution meet the requirement? 1. Yes, the solution meets the requirement 2. No, the solution does not meet the requirement

Azure App Service and Azure SQL databases are illustrations of Azure PaaS solutions. Thus, the suggested solution meets the requirement.

Jane is working in an organization that plans on storing 40 TB of data in Azure that they can query using either serverless on-demand or provisioned resources at a scale. Also, it is required that the stored data must be integrated and visualized using Microsoft Power BI, for analytics.Which of the following Azure service should Jane suggest in this case? A - Azure Sphere B - Azure Synapse Analytics C -Azure CycleCloud D - Azure Database Migration Service

Which Azure compute resource can be deployed to manage a set of identical virtual machines? A - Virtual machine availability sets B - Virtual machine scale sets C -Virtual machine availability zones

B Virtual machine scale sets let you deploy and manage a set of identical virtual machines.

Which of the following options isn't a benefit of ExpressRoute? Redundant connectivity A - Consistent network throughput B - Encrypted network communication C - Access to Microsoft cloud services

B (ExpressRoute does provide private connectivity, but it isn't encrypted.)

Tailwind Traders wants to create a secure communication tunnel between its branch offices. Which of the following technologies can't be used? A - Point-to-site virtual private network B - Implicit FTP over SSL C - Azure ExpressRoute D - Site-to-site virtual private network

B (FTP over SSL can't be used to create a secure communication tunnel.)

______________ offers real-time analytics and complex event-processing engine. A - Azure Data Lake B - Azure Stream Analytics C - Azure Logic Apps D - Azure Event Hub

B - Azure Stream Analytics

Your company has a team of remote workers that need to use Windows-based software to develop your company's applications, but your team members are using various operating systems like MacOS, Linux, and Windows. Which Azure compute service would help resolve this scenario? A - Azure App Service B - Windows Virtual Desktop C - Azure Container Instances

B - Windows Virtual Desktop enables your team members to run Windows in the cloud, with access to the required applications for your company's needs.

Which of the following is a feature of the cool access tier for Azure Storage? A) Cheapest option when it comes to bandwidth costs to access your files B) Much cheaper to store your files than the hot access tier C) Most expensive option when it comes to bandwidth cost to access your files D) Significant delays in accessing your data, up to several hours

B) Much cheaper to store your files than the hot access tier Cool access tier offers cost savings when you expect to store your files and not need to access them often

Jacob is working in an organization. He has been asked to migrate its SQL Database to Azure by ensuring that other users in the organization do not accidentally delete or modify critical resources.Which of the following Azure feature should Jacob use to meet the requirement? A - Azure Active Directory B - Azure Resource Manager Locks C - Azure Policy D - Azure role-based access control

Select the answer that correctly completes the sentence. __________ is supported by ExpressRoute for connecting an on-premises network to Azure. A. A Point-to-Site VPN B. A point-to-point Ethernet connection C. A Site-to-Site VPN D. Azure Peering service

B. A point-to-point Ethernet connection A Point-to-point Ethernet connection is supported by ExpressRoute for connecting your on-premises network to Azure.The three models that ExpressRoute supports are:• CloudExchange colocation• Point-to-point Ethernet connection• Any-to-any-connection

A company is planning to set up a solution in Azure. The solution would have the following key requirement. A simplified tool to build intelligent Artificial Intelligence applications. Which of the following would be best suited for this requirement? A. Azure Advisor B. Azure Cognitive Services C. Azure Application Insights D. Azure Devops

B. Azure Cognitive Services

A company needs to implement a solution in Azure. Below are the key requirements for this solution. No need for schema or Index management Ensure low latency access to data from around the world. Which of the following data solution would you consider for this requirement? A. Azure SQL Database B. Azure CosmosDB C. Azure SQL Datawarehouse D. SQL Server Stretch database

B. Azure CosmosDB Option A is incorrect since this is used to store normal table-like data.Option C is incorrect since this is used for building data warehouses.Option D is incorrect since this is used to stretch warm dynamically and cold transactional data from Microsoft SQL Server 2016 to Microsoft Azure.

A company is planning to set up a solution in Azure. They have the following key requirement. Give the ability to process data from millions of sensors. Which of the below Azure services can be used for this purpose? A. Azure Machine Learning B. Azure IoT Hub C. Azure AI Bot D. Azure Functions

B. Azure IoT Hub The Microsoft documentation mentions the following. Azure loT Hub loT Hub is a managed service, hosted in the cloud, that acts as a central message hub for bi-directional communication between your loT application and the devices it manages. You can use Azure toT Hub to build loT solutions with reliable and secure communications between millions of loT devices and a cloud-hosted solution backend. You can connect virtually any device to loT Hub.

Which Azure feature enables you to organize multiple subscriptions in hierarchies for unified policies and compliance? A. Resource groups B. Management groups C. Azure Active Directory (Azure AD) D. Azure Container Instances

B. Management groups Management groups help you manage access, policy, and compliance for multiple subscriptions. All subscriptions in a management group automatically inherit the conditions applied to the management group.

QA company wants to start using Microsoft Azure. They currently also have a private cloud setup. Would it be required for them to migrate their entire private cloud model to achieve a hybrid cloud model? A. Yes B. No

B. No The Hybrid Cloud model combines both the public cloud and private cloud model. So, the company does not need to migrate its private cloud model to achieve the hybrid cloud model. The Microsoft documentation mentions the following.

A company is planning to upgrade its current Azure AD Free plan to the Azure AD Premium P1 plan. Does Microsoft provide the same feature set for both plans? A. Yes B. No

B. No The support plans have different feature sets.

A company is planning to deploy Azure resources to a resource group. The company is planning to assign tags to the resource groups. Would the resources in the resource group also inherit the same tags? A. Yes B. No

B. No https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

Which defense in depth layer uses distributed denial of service (DDoS) protection? A. Physical security layer B. Perimeter layer C. Network layer D. Application layer

B. Perimeter layer The perimeter layer uses distributed denial of service (DDoS) protection to filter large-scale attacks before they can cause a denial of service for users.

Select the answer that correctly completes the sentence. You use __________ to organize resources in an Azure subscription. A. Azure regions B. Resource groups C. Management groups D. Administrative units

B. Resource Groups Azure resources are combined into resource groups, which act as logical containers into which Azure resources like web apps, databases, and storage accounts are deployed and managed.

A company is planning to use Azure Synapse Analytics for hosting their sales historical data. Which of the following is a feature of the Azure Synapse SQL architecture? A. High Availability B. Scalability C. Disaster Recovery D. Visualization

B. Scalability Options A and C are incorrect because this is something that you have to ensure with the capabilities available in Azure.Option D is incorrect since you need to use other tools for handling the visualization of data in a SQL Datawarehouse.

Select the answer that correctly completes the sentence. __________ enables you to provision a group of matching and load-balanced virtual machines in Azure. A. Azure Logic Apps B. An availability set C. An Azure virtual machine scale set D. Azure Load Balancer

C. An Azure virtual machine scale set Virtual machine scale enables you to provision a group of matching and load-balanced virtual machines in Azure.Imagine you are running a website that enables scientists to upload astronomy images that need to be processed. If you duplicated the VM, you would normally need to configure an additional service to route requests between multiple instances of the website. Virtual machine scale sets could do that work for you.

Select the answer that correctly completes the sentence. __________ enables you to scale to thousands of virtual machines for high-performance computing and large-scale parallel jobs. A. An Azure virtual machine scale set B. An availability set C. Azure Batch D. An availability zone

C. Azure Batch Azure Batch allows you to scale to thousands of virtual machines for high-performance computing (HPC) and large-scale parallel jobs. Other Azure functionalities allow you to scale multiple VMs, but only Azure Batch will allow for thousands of VMs for HPC.

Select the answer that correctly completes the sentence. __________ is a repeatable set of governance tools that helps development teams quickly build and create new environments while adhering to organizational compliance to speed up development and deployment. A. Azure DevOps B. A Continuous Integration/Continuous Deployment (CI/CD) pipeline configuration C. Azure Blueprints D. Azure Policy

C. Azure Blueprints Sometimes Cloud environment grow beyond just one subscription, in that case Azure Blueprints help to scale the configuration. Azure Blueprints help with repeatable tasks so that development teams rapidly build and deploy new environments and speed the overall development and deployment phases. Blueprints are a declarative way to orchestrate the deployment of various resource templates.

Your company is planning on hosting resources using Azure services. You have to decide on the right service to use for the desired requirement. Which of the following would you use for the following requirement? "Provide a service that is used to integrate bots with applications" A. Azure Cognitive Service B. Azure DevOps C. Azure Bot service D. Azure Synapse Analytics

C. Azure Bot service You can use the Azure Bot service to build bots within applications Option A is incorrect because this is used to build cognitive intelligence in applications. Option B is incorrect because this is a set of tools used for implementing DevOps. Option D is incorrect because this is used to host a data warehouse.

A company is planning to set up a solution on the Azure platform. The solution has the following main key requirement. Provide a managed service that could be used to manage and scale container-based applications. Which of the following would be best suited for this requirement? A. Azure Event Grid B. Azure DevOps C. Azure Kubernetes D. Azure Dev Test Labs

C. Azure Kubernetes

Select the answer that correctly completes the sentence. __________ alerts you when service issues occur in an Azure environment, such as a regional Azure outage that affects all Azure customers. A. Azure Monitor B. Azure Advisor C. Azure Service Health D. Azure Application Insights

C. Azure Service Health Azure Service Health alerts you about service issues that happen in Azure itself, such as a regional Azure outage

Which cloud approach is used by organizations to take full advantage of on-premises technology investments and allows data and applications to be shared between two environments? A. Public cloud B. Private cloud C. Hybrid cloud D. On-premises datacenter

C. Hybrid cloud

Which option is used to set the communication between an on-premises VPN device and an Azure VPN gateway through an encrypted tunnel over the internet? A. ExpressRoute B. Point-to-Site (P2S) VPN C. Site-to-Site VPN

C. Site-to-Site VPN Established between on-premises VPN device and an Azure VPN Gateway that is deployed in a virtual network. This connection type allow communication between any on-premises authorize resource to access a virtual network through an encrypted tunne

When can an organization decommission its private cloud infrastructure hosted in its data center? A. When they have a hybrid solution B. When all of their servers are in the private cloud C. When all of their servers are in the public cloud D. When all of their servers are in the public or private cloud

C. When all of their servers are in the public cloud It can do when all the servers are migrated to the Azure cloud, which is a public cloud, and you have no dependency left on your private cloud ( or on-premise environment ). Then you can completely look to decommission it.

Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure.Y ou need to deploy an Azure environment that meets the company's migration plan. What should you create? A. Azure virtual machines, Azure SQL databases, and Azure Storage accounts. B. an Azure App Service and Azure virtual machines that have Microsoft SQL Server installed. C. an Azure App Service and Azure SQL databases. D. Azure storage accounts and web server in Azure virtual machines.

C. an Azure App Service and Azure SQL databases.

A company is planning to set up a solution in Azure. The solution would have the following key requirement. An Integration solution for the deployment of code Which of the following would be best suited for this requirement? A. Azure Advisor B. Azure Cognitive Services C. Azure Application Insights D. Azure DevOps

D. Azure DevOps Azure DevOps consists of a large set of tools. Amongst these, you have Azure Pipelines which can be used to build, test and deploy code. Since this is a clear feature of the tool, all other options are incorrect.

Which Azure Active Directory (Azure AD) feature is used to provide access to resources based on organizational policies? A. multi-factor authentication (MFA) B. single sign-on (SSO) C. administrative units D. Conditional Access

D. Conditional Access Conditional Access is the tool used by Azure Active Directory to allow (or deny) access to resources based on identity signals. Conditional access is a more refined MFA (multifactor authentication) method.

Which of the given cloud deployment solution is suggested for Azure virtual machines? 1. Infrastructure as a Service (IaaS) 2. Platform as a Service (PaaS) 3. Software as a Service (SaaS) 4. Database as a Service (DaaS)

Infrastructure as a Service (IaaS) Azure virtual machines are Infrastructure as a Service (IaaS) which is the most flexible category of cloud services. IaaS aims to offer a complete control over the hardware that runs the application including IT infrastructure servers, virtual machines, storage, networks, and operating systems. Therefore rather than buying hardware, with IaaS, we rent it.

An organization is planning to deploy several custom applications to Azure. These custom applications offer invoicing services to the customers of the company. Every application will have several prerequisite applications and services installed. Peter has been asked to suggest a cloud deployment solution for all the applications. What of the following should he suggest to meet the requirement? 1) Software as a Service (SaaS) 2) Platform as a Service (PaaS) 3) Infrastructure as a Service (laaS)

Infrastructure as a Service (laaS) Infrastructure as a service (IaaS) is an instant computing infrastructure, provisioned and managed over the internet. The Infrastructure as a service (IaaS) provider manages the infrastructure, while the organization purchase, install, configure, and manage their own software.

An organization is planning to migrate all its data and resources to Azure. The migration plan of the organization indicates that only Platform as a Service (PaaS) solutions must be used in Azure. Peter has been asked to deploy an Azure environment that fulfils the company migration plan . Peter suggests to create Azure virtual machines, Azure SQL databases, and Azure Storage accounts to meet the requirement. Does the suggested solution meet the goal? 1) Yes, the solution meets the requirement 2)No, the solution does not meet the requirement

No, the solution does not meet the requirement Platform as a service (PaaS) offers a complete development and deployment environment in the cloud. PaaS provides infrastructure servers, storage, and networking features as well as middleware, development tools, business intelligence (BI) services, database management systems, and more. PaaS has been designed to support the complete web application lifecycle including building, testing, deploying, managing, and updating. VMs is an examples of Infrastructure as a service (IaaS) with instant computing infrastructure, that is provisioned and managed over the internet.

What should you do when planning to migrate a public website to Azure? 1. Deploying a VPN 2. Paying monthly usage cost 3. Paying to transfer all the website data to Azure 4. Reducing the number of connections on the website

Paying monthly usage cost In order to migrate to a cloud platform there are some key features to consider when using Azure Websites as your hosting solution. Like it should be globally available, should have a built-in load balancer and more.

Azure Cosmos DB is an example of ___________________. a) Software as a Service (SaaS) b) Platform as a Service (PaaS) c) Infrastructure as a Service (laaS) d) Functions as a Service (FaaS)

Platform as a Service (PaaS) Azure Cosmos DB is an example of a platform as a service (PaaS) cloud database provider.

An organization plans to migrate a web application to Azure that can be accessed by external users. Peter has been asked to suggest a cloud deployment solution for minimizing the amount of administrative effort in managing the web application. Which of the following should Peter include in the solution to meet the requirement? 1. Software as a Service (SaaS) 2. Platform as a Service (PaaS) 3. Infrastructure as a Service (IaaS) 4. Database as a Service (DaaS)

Platform as a Service (PaaS) Since, Azure App Service is a platform-as-a-service (PaaS) that allows you to create web and mobile apps for any platform/device and then connect it to data anywhere, in the cloud or on-premises. Also, App Service includes the web and mobile capabilities that were previously delivered separately as Azure Websites and Azure Mobile Services.

An organization is planning to migrate several servers from an on-premises network to Azure. Which of the following is a benefit of using a public cloud service for the servers over an on-premises network? a) Public cloud is owned by the public, NOT a private corporation b) Public cloud is a crowd-sourcing solution that provides corporations with the ability to enhance the cloud c) All public cloud resources can be freely accessed by every member of the public d) Public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud

Public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud Since, the public cloud is a shared entity where multiple corporations can use a portion of the resources in the cloud. Also, the hardware resources (servers, infrastructure etc.) are managed by the cloud service provider. Multiple organization are now building resources such as virtual machines (VMs) and virtual networks on the hardware resources. Question 12: In

tate whether the following statement holds True or False. "A company deploying its own data center is an example of CapEx." Yes, the statement is correct No, the statement is not correct

Yes Deploying your own datacenter is an example of CapEx since it is required to purchase all the infrastructure upfront before it can be used.

Can you give someone else access to your Azure subscription without giving them your user name and password? - Yes - No

Yes Yes, anyone can create their own Azure account and you can give them access to your subscription with granular control as to permissions

Let us suppose XYZ Ltd. wants to make use of Azure for the deployment of various solutions. They wish to ensure that suspicious attacks and threats to resources in their Azure account are prevented. For this, they use in-built sensors in Azure. Which of the following options will help to prevent such attacks? a) Azure DDoS attacks b) Azure Advanced Threat Protection c) Azure privelaged id management d) Azure AD Identity Protection

a) Azure DDoS attacks

Let us suppose you work for ABC Ltd. which has several business units. Each business unit requires 20 different Azure resources for daily operation. All the business units require the same type of Azure resources. Now, you are required to suggest a solution to automate the creation of Azure resources. Which of the following options would you suggest in this case? a) Azure Resource Manager templates b) The Azure API Management service c) Virtual machine scale sets d) Management groups

a) Azure Resource Manager templates

Who is responsible for the security of the physical servers in an Azure data center? a) Azure is responsible for securing the physical data centers b) I am responsible for securing the physical data centers

a) Azure is responsible for securing the physical data centers Azure is responsible for physical security

A company has an on-premises network containing several servers. The company plans to migrate all the servers to Azure. John has been asked to provide a solution to make sure that some of the servers are available in case a single Azure data center goes offline for an extended period. What must John do in this case? a. Fault Tolerance b. Elasticity c. Scalability d. Low Latency

a. Fault Tolerance Fault tolerance is the property that allows a system to continue operating properly in the event of the failure of (or one or more faults within) some of its components. The Availability Zones expand the level of control for maintaining the availability of the applications and data on the Virtual Machines.

Let us suppose ABC Ltd. plans to migrate all its data and resources to Azure. The company's migration plan states that only platform as a service (PaaS) solutions must be used in Azure. Now you are required to deploy an Azure environment which supports the planned migration. Solution: In this case, you create an Azure App Service and Azure virtual machines that have Microsoft SQL Server installed. Does the solution meet the desired goal? No, the solution does not meet the desired goal. Yes, the solution meets the desired goal.

a. yes

A company plans to offer Infrastructure as a Service (IaaS) resources in Azure. Which of the following resources is an example of Infrastructure as a Service (IaaS)? a) An Azure web app b) An Azure virtual machine c) An Azure logic app d) An Azure SQL database

b) An Azure virtual machine An Azure virtual machine is an example of Infrastructure as a Service (IaaS). On the other hand, Azure web app, Azure logic app and Azure SQL database are all examples of Platform as a Service (Paas).

An organization plans to migrate its docker containers to Azure. You have been asked to suggest a solution that offers a set of version control tools to help developers manage the application code. Which amongst the following will you include in your recommendation? a) Azure monitor b) Azure repos c) Azure pipelines d) Azure activity log

b) Azure repos

b) Hybrid Cloud The hybrid cloud is a mixture between private services (like your self-hosted applications) and public ones (like extra storage) See: https://azure.microsoft.com/en-us/overview/what-is-hybrid-cloud-computing/

What Azure tool gives you the ability to manage multiple subscriptions into nested hierarchies? a) RBAC b) Management Groups c) Azure Active Directory d) Resource Groups

b) Management Groups Management Groups - a hierarchy of subscriptions; can have many subscriptions, and group them, and put those groups into other groups

A company that hosts its infrastructure in _________________________ does not require its own data center. a) Private Cloud b) Public Cloud c) Hybrid Cloud d) Hyper-V Cost

b) Public Cloud A company that hosts its infrastructure in a public cloud can close its data centre. The public cloud is one of the most common deployment models. In this case, there is no need to manage local hardware or keep it updated since everything runs on the cloud provider's hardware. On the other hand, a private cloud is hosted in your own data centre. Therefore, you cannot close your data centre if you are using a private cloud.

Jacob is working in an organization. He has been asked to migrate its SQL Database to Azure by ensuring that other users in the organization do not accidentally delete or modify critical resources. Which of the following Azure feature should Jacob use to meet the requirement? a) Azure role-based access control b) Azure Policy c) Azure Resource Manager Locks d) Azure Active Directory

c) Azure Resource Manager Locks

Your organization has implemented an Azure Policy that restricts the type of Virtual Machine instances you can use. How can you create a VM that is blocked by the policy? a) Use an account that has Contributor or above permissions to the resource group b) Subscription Owners (Administrators) can create resources regardless of what the policy restricts c) The only way is to remove the policy, create the resource and add the policy back

c) The only way is to remove the policy, create the resource and add the policy back You cannot perform a task that violates policy, so you have to remove the policy in order to perform the task.

Which of the following Azure Service would you suggest when you are planning to create an application with an event-based architecture that has the feature to ingest events from Blob storage and create custom topics? a) Azure Logic Apps b) Azure Functions c) Azure Machine Learning Studio d) Azure Event Grid

d) Azure Event Grid

_____________ offers real-time analytics and complex event-processing engine. a) Azure Event Hub b) Azure Data Lake c) Azure Logic Apps d) Azure Stream Analytics

Azure 900 Practice Qs

Related study sets

Network+ 8th Edition Chapter 2

bio 1404 jaffe exam 5

Ch. 8 Business

Growth and Development Ch 5

Chapter 9 Quiz

Real Estate Mathematics and Formulas

Earth Space Science Technology and the EMS

Science 1003 self test 5

international ch 8/ 9

Ch. 10

Business Law CH28: Banking

OB: Ch. 18 Nursing Management of the Newborn

Bodies Exams and Quizzes

basics of human movement

Fundamentals of Nursing CH 4: Health and Illness

ap world history chapter 23 key terms

SS22DCWB Welcome to DealerCONNECT

Chapter 2 Nutrition: Tools for healthy Eating

Chapter 9, my answers

Складні випадки визначення частин мови