Azure Fundamental Practice Exam
Your company plants to migrate applications and services to the cloud. You recommend for a hybrid cloud to be deployed. Why would you make this recommendation?
To augment on premises resources by providing overflow capacity. A hybrid cloud is the combination of two or more cloud models, such as public and private, and provides benefits from both models.
The service provider is responsible for all infrastrucutre hardware in SaaS, PaaS, and IaaS. Yes or no?
Yes
When a blueprint is unassigned, all resources assigned by the blueprint remain in place, but blueprint resource locking is removed. Yes or No?
Yes
You can add a resource to or remove a resource from a resource group as long as the resource group is not locked. Yes or No?
Yes
The pay-as-you-go consumption model qualifies as on OpEx. Yes or No?
Yes
A company wants to host data disks in azure cloud. The data disks must be available to other on premises machines running windows, linux, and macOS using network sharing via server message block (SMB) protocol. Data must be secure both at rest and in transit. which storage product should you use? - file storage - blob storage - archive storage - disk storage
File storage. - Meets all scenario requirements. Access is provided to other VMs, as well as on premises, through the use of the SMB protocol, REST, and native client libraries.
You need to define a set of policies to help ensure compliance for resources contained in a resource group. Which method?
Initiative
You want to view the number of virtual machines (VMs) that are currently down. Which am I?
Resource Health
Multiple subscriptions can be owned by a single organizations. Yes or No?
Yes
Resources can interact with other resources in a different resource group. Yes or No?
Yes
You want to receive an email whenever the number of requests to a web app exceeds, 10,000 within an hour. Which am I?
Alerts
You want to enable developers to improve app performance and usability. Which am I?
Application Insights
Your company is planning an azure cloud deployment that must meet the following requirements: - improve the continuity of business-critical applications - improve application performance - detect threats and vulnerabilities - reduce overall azure costs You need to use a tool that will help you make these types of recommendations. Which tool should you use?
Azure Advisor personal cloud consultant that provides the information you need to follow best practices and optimize azure deployments.
__ enables you to perform automated deployments from azure devops.
Azure App Service
Your company is planning a development using azure database for postgresql. The development should meet the following requirements: - up to 10 tb storage - azure premium storage - point in time restore for up to 35 days What should you select? - azure database for postgresql single server memory optimized tier - azure database for postgresql single server general purpose tier - azure database for postgresql hyperscale (citus) - azure database for postgresql single server basic tier
Azure Database for PostgreSQL Single Server General Purpose tier. - most cost-effective option that meets all requirements. General purpose tier supports data storage of up to 16tb and uses azure premium storage.
You want to create a rule that restricts network traffic accross subscriptions. Which resource?
Azure Firewall
You need to prevent any users from deleting resources from a subscription with contents spanning multiple resource groups. Which method?
Azure Locks
A company wants to expand its cloud presence by deploying additional resources to azure. The company plans to use templates based on existing resources to automate deployment process. Ensuring consistent deployment is critical. Which should the company use? - Azure resource groups - microsoft defender for cloud - azure monitor - azure resource manager
Azure Resource Manager performs deployment and management tasks. Can easily deploy multiple resource instances or reliably deploy resources.
You need to use information from azure security center to develop best practices recommendations for optimization. Which method?
Azure advisor
How can Azure lower captial expenditure (CapEX) costs?
Azure allows you to pay monthly based on usage rather than pay upfront for physical hardware.
Which azure resource can be managed as Software-as-a-Service (SaaS)? - azure internet of things (IoT) Central - API Management - Virtual Machine (VM) - Azure SQL Database
Azure internet of things (IoT) Central
__ is the delivery of computing services such as compute power, storage, software and analytics over the internet.
Cloud computing
A company subs to azure as a platform for developing and deploying web apps. The company wants to keep initial expenses to a minimum. The company cannot use the free edition as it does not support many features required, so the company decides to go with azure AD premium subscription. You need to determine the features available to the company with azure active directory (Azure AD) premium p1 edition. Which two features are supported by azure ad premium p1 edition? - conditional access - RBAC - self service entitlement management - identity protection - privileged identity management, just in time access
Conditional Access RBAC
You need to give all users in a group the ability to create and manage all types of azure resources in a subscription. Rights granted to users should be kept to a minimum. Which built in role based access control (RBAC) should you assign to the group? - reader -contributer -user access administrator - other
Contributor
What is the advantage of using a public cloud over a private cloud? - costs are lower and spread among multiple tenants. - greater security is provided for tenant data. - the environment supports a higher level of customization for each tenant. - on demand scalability allows business requirements to be met more efficiently.
Costs are lower and spread among multiple tenants. - This is possible because subscribing tenants share resources and the provider can take advantage of economies of scale.
You want to prevent a malicious flood of HTTP traffic to a vm that hosts internet information services (IIS). What resource?
DDoS protection
You are going to start collecting data about your azure infrastructure with azure monitor. Which type of data collection requires you to enable diagnostics? - container workload performance - linux virtual machine health - event logs - usage of web applications
Event logs
Azure Advisor integrates with________ to help to prevent, detect, and respond to threats to Azure resources.
Microsoft Defender for Cloud
Which azure security solution provides general security recommendations and suggests remediations to better secure your resources? - azure ddos protection standard - key vault - azure information protection (AIP) - Microsoft Defender for Cloud
Microsoft Defender for Cloud provides security recommendations and suggests remediation actions, including suggestions for which remediations should take priority.
You want to allow inbound traffic to an Azure Virtual Machine from only specific Ip addresses. What resource?
Network Security Group (NSG)
A resource group can contain resources from the same region as the resource group only. Yes or No?
No
Authorization can use passwords to identify a person. Yes or No
No
Creating a virtual machine running windows server 2016 is an example of PaaS. Yes or no?
No
Using Capex for infrastructure spending is a good idea when the demand fluctuates or is unknown. Yes or No?
No
When a blueprint is updated and the updated version is published, any assignments of the blueprint are updated automatically. Yes or No?
No
For organizations with consistent, high utilization, the consumption-based pricing model is the most efficient one.
No When you have a consistent need for compute, storage, and network resources, it is more cost-efficient to reserve resources using the fixed pricing model.
Azure DDoS Protection Standard is enabled automatically. Yes or No?
No Basic is automatically enabled.
A subscription can have only one license. Yes or no?
No Will always have multiple licenses.
Migrating to cloud services enables an organization to budget infrastructure costs as an________
Operational expense
With ______________ developers deploy code and pay for its run time only, without worrying about the provisioning, configuration and management of the underlying infrastructure.
Serverless computing
What is the advantage of moving your company's infrastructure to azure by using a public cloud deployment model?
The company is able to scale up as needed with no CapEx required.
SaaS gives you a way to give users access to sophisticated applications in a pay as you go environment. Yes or No?
Yes
A subscription can contain one or more resource groups. Yes or No?
Yes
Authorization ensures that an account has sufficient permissions to access a resource
Yes
Azure DDoS Protection Standard provides protection against volumetric, protocol, and application layer attacks.
Yes
CapEx costs are fixed. Yes or No?
Yes
In the fixed price model, you pay for resources even if you do not use them.
Yes
Locking a resource group as read-only locks all resources contained in the group. Yes or No?
Yes - you an apply locks to a resource group or sub to prevent deletion or make contained resources read only.
Authentication ensures that the user name and password combination is correct. Yes or no?
Yes Establishes whether or not you are who you say you are.
Virtual Networks from multiple subscriptions in your organization can link to the same azure ddos protection plan.
Yes The protection plan is associated with a subscription when it is created and will be billed to the associated subscription plan.
There are no upfront costs when using the consumption based model
Yes You create or launch the resources you need and you are only charged for the usage amount.
Authentication can use certificates to identify a person or service.
Yes a certificate has an embedded key that identifies a person or service.
When you delete a core blueprint, any assigned versions of the blueprint remain in place.
Yes.
You manage a development team that needs to focus all its efforts on creating and maintaining application code. Your team does not have the resources to provision and scale the infrastructure your applications require to run. What should you do? - create an azure functions subscription and upload your code. - configure VMs and deploy application updates using azure command line interface (CLI). - automate virtual machine provisioning with azure quickstart templates. - containerize the apps and deploy a container cluster service
create an azure functions subscription and upload your code.
Application Security Groups (ASGs) let you:
organize similar servers so you can easily define and implement security policies based on those groups.
