Practice Questions AZ-900

Provides serverless computing functionalities Which of the following would be best suited for this requirement?

Azure Functions because Azure Functions is a solution for easily running small pieces of code, or "functions," in the cloud. You can write just the code you need for the problem at hand, without worrying about a whole application or the infrastructure to run it. Functions can make development even more productive, and you can use your development language of choice, such as C#, Java, JavaScript, PowerShell, and Python. Pay only for the time your code runs and trust Azure to scale as needed. Azure Functions lets you develop serverless applications on Microsoft Azure.

A company is planning on setting up a Microsoft Azure Free Account. Does the Standard Support plan come along with the Microsoft Azure Free Account?

Basic - free Developer - $29 per month Standard - $100 per month Professional Direct - $1000 per month Azure Standard support is intended for customers running production workloads and offers unlimited 24/7 technical and billing support for your entire organization. It isn't a free service, it's one of 4 support tiers.

A company has a set of IT engineers that are responsible for implementing and managing the resources within their Microsoft Azure account. The IT engineers have a set of on-premise workstations that have the following different types of operating systems: - Windows 10 - MacOS - Ubuntu Which of the following tools can you use on the Ubuntu machines?

The Azure CLI, Azure Powershell and Azure Portal are all correct because all three interfaces can be used on Ubuntu. It is important to know Ubuntu is a flavor of the Linux operating system.

To set up a Enterprise Microsoft Azure Subscription Do you need to have a valid Microsoft account for associating the Azure Subscription?0

Yes

A company wants to host a set of tables in Microsoft Azure. They want absolutely zero administration of the underlying infrastructure and low latency access to data. You recommend using the SQL Database service. Would this meet the requirement?

YES, It is fully managed by Azure and therefore it does not entail any administration activities from user end Refer linkhttps://docs.microsoft.com/en-us/azure/sql-database/sql-database-paas-index

A company is planning on setting up an Azure account and spinning up resources within their purchased subscription. When it comes to the Service Level Agreement (SLA), does Microsoft ensure a SLA of 99.9% up-time for paid Azure services?

Yes, when it comes to paid Azure services, Microsoft Azure ensures a SLA of 99.9% up-time for paid Azure services. For more information, please visit: https://azure.microsoft.com/en-us/support/legal/sla/summary/

Which of the following customers are allowed to use Azure Government? Choose 2 answers from the options given below ​

because US government agencies or their partners interested in cloud services that meet government security and compliance requirements, can be confident that Microsoft Azure Government provides world-class security, protection, and compliance services. Azure Government delivers a dedicated cloud enabling government agencies and their partners to transform mission-critical workloads to the cloud. Azure Government services handle data that is subject to certain government regulations and requirements, such as FedRAMP, NIST 800.171 (DIB), ITAR, IRS 1075, DoD L4, and CJIS. In order to provide you with the highest level of security and compliance, Azure Government uses physically isolated datacenters and networks (located in U.S. only).

You are working on understanding all the key terms when it comes to International standards, data privacy and data protection policies. Which of the following pertains to the following? "A dedicated public cloud for federal and state agencies in the United States"

. Azure Government is correct because Azure Government delivers a dedicated cloud enabling only US government agencies and their partners to transform mission-critical workloads to the cloud. In order to provide you with the highest level of security and compliance, Azure Government uses physically isolated data-centers and networks. For more information, please visit: https://docs.microsoft.com/en-us/azure/azure-government/documentation-government-welcome

Artificial Intelligence solution The dev team wants to have a solution in place that can be used to build, test, and deploy predictive analytics solutions. Which of the following solutions would satisfy this purpose?

Azure Machine Learning Studio is a collaborative, drag-and-drop tool you can use to build, test, and deploy predictive analytics solutions on your data. Machine Learning Studio publishes models as web services that can easily be consumed by custom applications or BI tools. For more information, please visit:https://docs.microsoft.com/en-us/azure/machine-learning/studio/what-is-ml-studio

Do Azure Storage Accounts automatically replicate data to another region?

Data in an Azure Storage account is always replicated three times in the primary region. Azure Storage always stores multiple copies of your data so that it is protected from planned and unplanned events, including transient hardware failures, network or power outages, and massive natural disasters. Redundancy ensures that your storage account meets the Service-Level Agreement (SLA) for Azure Storage even in the face of failures.

key requirement: - Allows the hosting of web-based applications Which of the following would be best suited for this requirement?

Azure App Service is a fully managed "Platform as a Service" (PaaS) that integrates Microsoft Azure Websites (hosting of web-based applications), Mobile Services, and BizTalk Services into a single service, adding new capabilities that enable integration with on-premises or cloud systems. For more information, please visit: https://docs.microsoft.com/en-us/azure/app-service/

A company is planning on setting up a solution in Microsoft Azure. The solution would have the following key requirement: - Provide a cloud service that helps to transform data and provide valuable insights on the data itself Which of the following would be best suited for this requirement?

Azure Data Lake Analytics is correct because Azure Data Lake Analytics is a distributed, cloud-based data processing architecture offered by Microsoft in the Azure cloud. It is based on YARN, the same as the open-source Hadoop platform. It pairs with Azure Data Lake Store, a cloud-based storage platform designed for Big Data analytics. For more information, please visit: https://docs.microsoft.com/en-us/azure/data-lake-analytics/data-lake-analytics-overview

They want to push all the events from various resources into a centralized repository so that the events can be correlated later on. Which of the following services would you use for this requirement?

Azure Log Analytics because The Azure Log Analytics agent, previously referred to as the Microsoft Monitoring Agent (MMA) or OMS Linux agent, was developed for comprehensive management across on-premises machines, computers monitored by System Center Operations Manager, and virtual machines in any cloud to push logs to a centralized repository for analysis. The Windows and Linux agents attach to an Azure Monitor and store collected log data from different sources in your Log Analytics workspace, as well as any unique logs or metrics as defined in a monitoring solution.

- Provides a platform for creating workflows Which of the following would be best suited for this requirement?

Azure Logic Apps are a cloud service that helps you schedule, automate, and orchestrate tasks, business processes, and workflows when you need to integrate apps, data, systems, and services across enterprises or organizations. For more information, please visit: https://docs.microsoft.com/en-us/azure/logic-apps/

A company needs to deploy several Virtual Machines (VMs). Each of these Virtual Machines (VMs) will have the same set of permissions. To minimize the administrative overhead, in which method would you deploy the Azure Virtual Machines?

Azure Resource Manager because Azure Resource Manager is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in your Azure subscription. You use management features, like access control, locks, and tags, to secure and organize your resources after deployment. https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview

A company is planning on hosting solutions within Microsoft Azure Cloud. They need to implement MFA for identities hosted in Microsoft Azure. There are only two valid ways of authentications for MFA as listed below: - Picture Identification - Passport Number Is the above true or false?

False because the security of two-step verification lies in its layered approach. Compromising multiple authentication factors presents a significant challenge for attackers. Even if an attacker manages to learn the user's password, it is useless without also having possession of the additional authentication method. It works by requiring two or more of the following authentication methods: Something you know (typically a password) Something you have (a trusted device that is not easily duplicated, like a phone) Something you are (biometrics) For more information, please visit: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

requiring that servers are running even in the event that a single Data Center goes down. Which of the following terms best refers to the concept that needs to be implemented to fulfill this requirement?

Fault Tolerance is a concept in IT in which a computer system or set of infrastructure is designed in such a way that when one component fails (be it hardware , software, or network) a backup component takes over operations immediately so that there is no loss of service. So if the company hosted servers at two Data Centers, even if one Data Center went down the other Data Center would "turn on" and continue running those servers without any loss in service.

A cloud is a computing environment that combines a public cloud and a private cloud by allowing data and applications to be shared between them.

Hybrid, hybrid cloud is a computing environment that combines a public cloud and a private cloud by allowing data and applications to be shared between them. When computing and processing demand fluctuates, hybrid cloud computing gives businesses the ability to seamlessly scale their on-premises infrastructure up to the public cloud to handle any overflow—without giving third-party datacenters access to the entirety of their data. Organizations gain the flexibility and computing power of the public cloud for basic and non-sensitive computing tasks, while keeping business-critical applications and data on-premises, safely behind a company firewall. https://azure.microsoft.com/en-us/overview/what-is-hybrid-cloud-computing/

A company wants to implement an IoT solution service available in Microsoft Azure. Which of the following would meet the below requirement? "Monitor and control billions of Internet of Things (IoT) assets".

IoT Hub is correct because an IoT Hub is a managed service, hosted in the cloud, that acts as a central message hub for bi-directional communication between your IoT application and the devices it manages. You can use Azure IoT Hub to build IoT solutions with reliable and secure communications between millions of IoT devices and a cloud-hosted solution back end. You can connect virtually any device to IoT Hub. For more information, please visit: https://docs.microsoft.com/en-us/azure/iot-hub/about-iot-hub

Does Microsoft automatically provide professional technical support services with the Basic support plan?

No there are 4 tiers of support plans available, Basic Developer Standard Professional Direct In order to obtain additional support outside the scope of Basic (which is free), you would need to purchase one of the other support plans

Which of the following is a feature of the Azure SQL Data Warehouse architecture?

Scalability because the architecture of SQL Data Warehouse separates storage and compute, allowing each to scale independently. As a result, you can scale compute to meet performance demands independent of data storage. You can also pause and resume compute resources. A natural consequence of this architecture is that billing for compute and storage is separate. If you don't need to use your data warehouse for a while, you can save compute costs by pausing compute.

A company has a set of IT engineers that are responsible for implementing and managing the resources in their Microsoft Azure account. The IT engineers have a set of on-premise workstations that have the following different types of operating systems: - Windows 10 - MacOS - Ubuntu Which of the following user interfaces can you use on the Windows 10 machines?

The Azure CLI, Azure Powershell and Azure Portal are all correct because all three user interfaces work on Windows 10.

A company is planning on migrating their public web site to Microsoft Azure. Which of the following should the company consider when it comes to hosting their public web site within Microsoft Azure?

They would need to consider paying a monthly cost for their chosen solution. Through Microsoft Azure Web Sites, a PaaS platform, you choose the plan you want with specifics to meet your needs. If you need to host a web application in Azure, there are a couple of options. But for each option, you have to pay a monthly fee. An example is the pricing model available for Azure Web apps. If you are planning on deploying a public web site, then you would need to consider using a Basic App service plan or higher. https://azure.microsoft.com/en-us/pricing/details/app-service/windows/

Your company plans to purchase Azure. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend a support plan that meets the support policy requirement. Solution: Recommend a Professional Direct support plan. Does this meet the goal?

Yes https://azure.microsoft.com/en-us/support/plans/

A company is planning on setting up a Microsoft Azure account. Can they purchase multiple Azure subscriptions and tie them to the single Azure account?

Yes, because a billing account is created when you sign up to use Azure. You use your billing account to manage your invoices, payments, and track costs. You can have access to multiple billing accounts. For example, you might have signed up for Azure for your personal projects. You could also have access through your organization's Enterprise Agreement or Microsoft Customer Agreement. For each of these scenarios, you would have a separate billing account. https://docs.microsoft.com/en-us/azure/billing/billing-view-all-accounts

host an application on a set of Virtual Machines. The application must be made available 99.99% of the time. In order to comply with the SLA requirement, what is the minimum number of Virtual Machines required to ensure 99.99% up time to host the application?

2 Virtual Machines is the correct answer because Microsoft Azure's SLA for all Virtual Machines that have two or more instances deployed across two or more Availability Zones in the same Azure region, Microsoft guarantees you will have Virtual Machine Connectivity to at least one instance at least 99.99% of the time. For more information, please visit: https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_8/

A company plans on purchasing a Microsoft Azure Support plan. Below is a key requirement for the support plan: - Provide an option to contact Microsoft Support Engineers by phone or email 24/7. A recommendation is made to purchase the Professional Direct plan. Would this recommendation fulfill the requirement?

A. Yes , under the Professional Direct support plan, the company would be able to contact Microsoft Support Engineers by phone or email 24/7. More for information on the 5 Support plans offered by Microsoft Azure, please visit: https://azure.microsoft.com/en-us/support/plans/

Microsoft Azure services normally follow the below life-cycle: - 1st they are deployed in private preview - 2nd they are released in public preview - finally they are finally released to general availability Is this an accurate life cycle for an Azure service?

A. Yes, this is the life-cycle Microsoft Azure services normally follows. For more information, please visit: https://support.microsoft.com/en-us/help/18486/lifecycle-faq-azure

A company is planning on hosting a set of resources within their Microsoft Azure subscription. They are currently aware that most Azure Services can provide an SLA of 99.9%. Which of the following technique could be used to increase the up-time for resources hosted in Azure?

Adding resources to multiple regions because Regions are a set of data centres deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network. With more global regions than any other cloud provider, Azure gives customers the flexibility to deploy apps where they need to. Azure is generally available in 52 regions around the world, with plans announced for 2 additional regions.

Provide a digital online assistant that provides speech support Which of the following would be best suited for this requirement?

Azure AI Bot Service because Azure Bot Service and Bot Framework provide tools to build, test, deploy, and manage intelligent bots, all in one place. Through the use of modular and extensible framework provided by the SDK, tools, templates, and AI services developers can create bots that use speech, understand natural language, handle questions and answers, and more.

A company is planning on setting up a solution in Microsoft Azure. The solution would have the following key requirement: - Provide a service for hosting a web application Which of the following would be best suited for this requirement?

Azure App Service is the correct answer because an Azure App Service enables you to build and host web apps, mobile back ends, and RESTful APIs in the programming language of your choice without managing infrastructure. It offers auto-scaling and high availability, supports both Windows and Linux, and enables automated deployments from GitHub, Azure DevOps, or any Git repo.

key requirement: - Give the ability to detect and diagnose anomalies in web apps Which of the following would be best suited for this requirement?

Azure Application Insights a feature of Azure Monitor, is an extensible Application Performance Management (APM) service for web developers on multiple platforms. Use it to monitor your live web application. It will automatically detect performance anomalies. It includes powerful analytics tools to help you diagnose issues and to understand what users actually do with your app. It's designed to help you continuously improve performance and usability. It works for apps on a wide variety of platforms including .NET, Node.js and Java EE, hosted on-premises, hybrid, or any public cloud. It integrates with your DevOps process, and has connection points to a variety of development tools. It can monitor and analyze telemetry from mobile apps by integrating with Visual Studio App Center. For more information, please visit: https://docs.microsoft.com/en-us/azure/azure-monitor/app/cloudservices

Provide an efficient way to distribute web content to users across the world Which of the following would be best suited for this requirement?

Azure Content Delivery Network because Azure Content Delivery Network (CDN) is a global CDN solution for delivering high-bandwidth content. It can be hosted in Azure or any other location. With Azure CDN, you can cache static objects loaded from Azure Blob storage, a web application, or any publicly accessible web server, by using the closest point of presence (POP) server. Azure CDN can also accelerate dynamic content, which cannot be cached, by leveraging various network and routing optimizations. Better performance and improved user experience for end users, especially when using applications in which multiple round-trips are required to load content. Large scaling to better handle instantaneous high loads, such as the start of a product launch event. Distribution of user requests and serving of content directly from edge servers so that less traffic is sent to the origin server.

key requirement: - Gives the ability to host a big data analysis service for machine learning Which of the following would be best suited for this requirement?

Azure Databricks are an Apache Spark-based analytics platform optimized for the Microsoft Azure cloud services platform. Designed with the founders of Apache Spark, Databricks is integrated with Microsoft Azure to provide one-click setup, streamlined workflows, and an interactive workspace that enables collaboration between data scientists, data engineers, and business analysts as well as giving the ability to host and analyze services for machine learning. For more information, please visit: https://docs.microsoft.com/en-us/azure/azure-databricks/

Provide a cloud service that makes it easy, fast, and cost-effective to analyse massive amounts of data. Which of the following would be best suited for this requirement?

Azure HD Insight because Azure HD Insight is a managed, full-spectrum, open-source analytics service in the cloud for enterprises. You can use open-source frameworks such as Hadoop, Apache Spark, Apache Hive, LLAP, Apache Kafka, Apache Storm, R, and more. https://docs.microsoft.com/en-us/azure/hdinsight/hdinsight-overview

Provide the ability to distribute user traffic to a set of backend Virtual Machines Which of the following would be best suited for this requirement?

Azure Load Balancer because Azure Load Balancer operates at layer four of the Open Systems Interconnection (OSI) model. It is the single point of contact for clients. Load Balancer distributes new inbound flows that arrive at the Load Balancer's front end to back-end pool instances, according to specified load balacing rules and health probes. The back-end pool instances can be Azure Virtual Machines or instances in a Virtual Machine Scale Set (VMSS). With Azure Load Balancer, you can scale your applications and create high availabile services. Load Balancer supports both, inbound and outbound scenarios, provides low latency and high throughput, and scales up to millions of flows for all TCP and UDP applications. A public Load Balancer can provide outbound connections for virtual machines (VMs) inside your virtual network by translating their private IP addresses to public IP addresses. Public Load Balancers are used to load balancer internet traffic to your VMs. An internal (or private) Load Balancer can be used for scenarios where only private IP addresses are needed at the front end. Internal Load Balancers are used to load balance traffic inside a virtual network. You can also reach a Load Balancer front end from an on-premises network in a hybrid scenario.

Uses past training's to provide predictions that have high probability Which of the following would be best suited for this requirement?

Azure Machine Learning because Microsoft Azure Machine Learning Studio is a collaborative, drag-and-drop tool you can use to build, test, and deploy predictive analytics solutions on your data. Machine Learning Studio publishes models as web services that can easily be consumed by custom apps or BI tools such as Excel.

following requirements: - Provision a WordPress solution - Host the solution on a Virtual Machine Which of the following could be used to quickly deploy the above solutions?

Azure Marketplace is the correct answer because the Azure Marketplace is an online store that offers applications and services either built on or designed to integrate with Microsoft's Azure public cloud. Such solutions include Virtual Machines, developer services, API apps, Azure AD applications, web applications (such as WordPress), data services,and Microsoft Dynamics solutions. For more information, please visit: https://azuremarketplace.microsoft.com/en-us

The company needs to have a solution that will allow them to know the health of their VMs at all times so they can implement alerts and redundancy. Which solution would best fulfil this need for the company?

Azure Monitor because Microsoft Azure includes services for specific roles or tasks in the monitoring space, but it doesn't provide in-depth health perspectives of operating systems (OSs) hosted on Azure virtual machines (VMs). Although you can use Azure Monitor for different conditions, it's not designed to model and represent the health of core components, or the overall health of VMs.

Which of the following in Azure provides a common platform for deploying objects to the Azure Cloud Infrastructure and also allows implementing consistency across the environment?

Azure Resource Manager because Azure Resource Manager is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in your Azure subscription. You use management features, like access control, locks, and tags, to secure and organize your resources after deployment. The benefits of using Resource Manager include: Manage your infrastructure through declarative templates rather than scripts. Deploy, manage, and monitor all the resources for your solution as a group, rather than handling these resources individually. Redeploy your solution throughout the development lifecycle and have confidence your resources are deployed in a consistent state. Define the dependencies between resources so they're deployed in the correct order. Apply access control to all services in your resource group because Role-Based Access Control (RBAC) is natively integrated into the management platform. Apply tags to resources to logically organize all the resources in your subscription. Clarify your organization's billing by viewing costs for a group of resources sharing the same tag.

Provide a data store that can be used to store and perform analytics on petabytes of data Which of the following would be best suited for this requirement?

Azure SQL Data Warehouse because it is a cloud-based enterprise data warehouse that leverages massively parallel processing (MPP) to quickly run complex queries across petabytes of data. Use SQL Data Warehouse as a key component of a big data solution. Import big data into SQL Data Warehouse with simple PolyBase T-SQL queries, and then use the power of MPP to run high-performance analytics. As you integrate and analyze, the data warehouse will become the single version of truth your business can count on for insights. You can access Azure SQL Data Warehouse (SQL DW) from Azure Databricks using the SQL Data Warehouse connector (referred to as the SQL DW connector), a data source implementation for Apache Spark that uses Azure Blob storage, and PolyBase in SQL DW to transfer large volumes of data efficiently between an Azure Databricks cluster and a SQL DW instance.

A company is planning on creating resources for different departments within Microsoft Azure. They want to ensure that they get the bills by the departments. Which of the following should you consider implementing for this requirement?

Azure Tags because with Azure Tags, you apply tags to your Azure resources to logically organize them into a taxonomy. Each tag consists of a name and a value pair. For example, you can apply the name "Environment" and the value "Production" to all the resources in production. After you apply tags, you can retrieve all the resources in your subscription with that tag name and value. Tags enable you to retrieve related resources from different resource groups. This approach is helpful when you need to organize resources for billing or management such as certain departments like HR or Accounting.

A company wants to implement an IoT solution service available in Microsoft Azure. Which of the following would meet the below requirement? "Helps provide powerful data exploration and telemetry tools to help refine operational analysis"

Azure Time Series Insights is correct because Azure Time Series Insights is a fully managed analytics, storage, and visualization service that makes it simple to explore and analyze billions of IoT events simultaneously. It gives you a global view of your data, which lets you quickly validate your IoT solution and avoid costly downtime to mission-critical devices. For more information, For more information, please visit: https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-explorer

A company is planning on setting up a solution in Microsoft Azure. The solution would have the following key requirement: - Provide a solution to host and manage a group of identical Virtual Machines Which of the following would be best suited for this requirement?

Azure Virtual Machine Scale Sets is correct because Azure Virtual Machine Scale Sets are identical pools of virtual machines running some application you control. Azure provides tools for you to build and configure the VM's the way you want it, then create or remove instances of it until you have as many, or as few, as you need at any point in time. For more information, please visit: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview

A company is planning on setting up a solution in Microsoft Azure. The solution would have the following key requirement: - Provide an isolated environment for hosting of Virtual Machines Which of the following would be best suited for this requirement?

Azure Virtual Network is the correct answer because Azure Virtual Networks are a representation of your own network in the cloud. It is a logical isolation of the Azure cloud dedicated to your subscription where hosting of isolated Virtual Machines is possible. Each VNet you create has its own CIDR block and can be linked to other VNets and on-premises networks as long as the CIDR blocks do not overlap.

A company is planning on hosting a set of resources in Microsoft Azure. They want to protect their resources against DDoS attacks and also get real time attack metrics. Which of the following should the company select to meet this requirement?

DDoS Protection Standard is correct because DDoS Standard Protection provides additional mitigation capabilities over the Basic service tier that are tuned specifically to Azure Virtual Network resources. DDoS Protection Standard is simple to enable, and requires no application changes. Protection policies are tuned through dedicated traffic monitoring and machine learning algorithms. Policies are applied to public IP addresses associated to resources deployed in virtual networks, such as Azure Load Balancer, Azure Application Gateway, and Azure Service Fabric instances, but this protection does not apply to App Service Environments. Real-time telemetry is available through Azure Monitor views during an attack, and for history. Rich attack mitigation analytics are available via diagnostic settings. Application layer protection can be added through the Azure Application Gateway Web Application Firewall or by installing a 3rd party firewall from Azure Marketplace. Protection is provided for IPv4 and IPv6 Azure public IP addresses. For more information, please visit: https://docs.microsoft.com/en-us/azure/virtual-network/ddos-protection-overview

Which of the following is the right category to which the Azure SQL Database service belongs?

Platform as a service (PaaS) because Azure SQL Database is a fully managed Platform as a Service (PaaS) Database Engine that handles most of the database management functions such as upgrading, patching, backups, and monitoring without user involvement. Azure SQL Database is always running on the latest stable version of SQL Server Database Engine and patched OS with 99.99% availability. PaaS capabilities that are built-in into Azure SQL database enable you to focus on the domain specific database administration and optimization activities that are critical for your business.

They want to make use of availability zones within Azure. Which of the following is associated with the concept of availability zones within Microsoft Azure?

Data Center failure because Availability Zones is a high-availability offering that protects your applications and data from datacenter failures. Availability Zones are unique physical locations within an Azure region. Each zone is made up of one or more datacenters equipped with independent power, cooling, and networking. To ensure resiliency, there's a minimum of three separate zones in all enabled regions. The physical separation of Availability Zones within a region protects applications and data from datacenter failures. Zone-redundant services replicate your applications and data across Availability Zones to protect from single-points-of-failure. With Availability Zones, Azure offers industry best 99.99% VM uptime SLA. An Availability Zone in an Azure region is a combination of a fault domain and an update domain. For example, if you create three or more VMs across three zones in an Azure region, your VMs are effectively distributed across three fault domains and three update domains. The Azure platform recognizes this distribution across update domains to make sure that VMs in different zones are not updated at the same time. Build high-availability into your application architecture by co-locating your compute, storage, networking, and data resources within a zone and replicating in other zones. Azure services that support Availability Zones fall into two categories: Zonal services - you pin the resource to a specific zone (for example, virtual machines, managed disks, Standard IP addresses), or Zone-redundant services - platform replicates automatically across zones (for example, zone-redundant storage, SQL Database). To achieve comprehensive business continuity on Azure, build your application architecture using the combination of Availability Zones with Azure region pairs. You can synchronously replicate your applications and data using Availability Zones within an Azure region for high-availability and asynchronously replicate across Azure regions for disaster recovery protection.

Which of the following is a key advantage of hosting resources in the Azure private cloud?

Different departments in your organization can have a segmentation of resources defined in Azure because A private cloud consists of computing resources used exclusively by one business or organization. The private cloud can be physically located at your organization's on-site datacenter, or it can be hosted by a third-party service provider. But in a private cloud, the services and infrastructure are always maintained on a private network and the hardware and software are dedicated solely to your organization. In this way, a private cloud can make it easier for an organization to customize its resources to meet specific IT requirements. Private clouds are often used by government agencies, financial institutions, any other mid- to large-size organizations with business-critical operations seeking enhanced control over their environment. Advantages of a private clouds: More flexibility—your organization can customize its cloud environment to meet specific business needs. Improved security—resources are not shared with others, so higher levels of control and security are possible. High scalability—private clouds still afford the scalability and efficiency of a public cloud.

An application consists of a set of virtual machines hosted in a Virtual Network. In a month, the application seems to have a load of around 20% for 3 weeks. During the last week, the load on the application reached 80%. Which of the following concept would you implement to ensure least cost and efficiency of the underlying application infrastructure?

Elasticity because Elastic computing is the ability to quickly expand or decrease computer processing, memory, and storage resources to meet changing demands without worrying about capacity planning and engineering for peak usage. Typically controlled by system monitoring tools, elastic computing matches the amount of resources allocated to the amount of resources actually needed without disrupting operations. With cloud elasticity, a company avoids paying for unused capacity or idle resources and doesn't have to worry about investing in the purchase or maintenance of additional resources and equipment.

A company has several on-premise computers that run Windows 10. They want to map a network drive from these machines onto Microsoft Azure Storage. Which of the following solutions would best fulfill this requirement?

File service is the correct answer as Microsoft's Azure Storage accounts are a cloud storage solution for modern data storage scenarios. Azure Storage offers a massively scalable object store for data objects, a file system service for the cloud, a messaging store for reliable messaging, and a NoSQL store. Azure Storage is durable and highly available, secure, scalable, managed, and accessible. For more information, please visit: https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview

You are working on understanding all the key terms when it comes to International standards, data privacy and data protection policies. Which of the following pertains to the following? "A European policy that regulates data privacy and data protection"

GDPR is correct because GDPR is a new set of rules designed to give EU citizens more control over their personal data. It aims to simplify the regulatory environment for business so both citizens and businesses in the European Union can fully benefit from the digital economy. For more information, please visit: https://azure.microsoft.com/en-us/blog/protecting-privacy-in-microsoft-azure-gdpr-azure-policy-updates/

A company has 100 machines in their on-premise environment. They want to extend their infrastructure without using too much extra capital or increasing their operational expenditures. Which of the following could they opt to carry out for this requirement?

Have a hybrid architecture is the correct answer because a hybrid cloud is a computing environment that combines a public cloud and a private cloud by allowing data and applications to be shared between them. When computing and processing demand fluctuates, hybrid cloud computing gives businesses the ability to seamlessly scale their on-premises infrastructure up to the public cloud to handle any overflow—without giving third-party datacenters access to the entirety of their data. Organizations gain the flexibility and computing power of the public cloud for basic and non-sensitive computing tasks, while keeping business-critical applications and data on-premises, safely behind a company firewall. This architecture can also be utilized by companies interested in expanding to the cloud gradually if their heavily invested with on-premise infrastructure. For more information, please visit: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/dmz/secure-vnet-dmz

A company needs a list of planned maintenance events that could possibly affect the availability of their Microsoft Azure subscription.

Help + Support will showcase maintenance events that can affect the availability of a Microsoft Azure subscription. For more information, please visit: https://azure.microsoft.com/en-us/support/faq/

You are working on understanding all the key terms when it comes to International Standards, data privacy and data protection policies. Which of the following choices pertains to the following? "An organization that defines international standards across all industries"

ISO is the correct answer because ISO, International Organization for Standardization, is an organization defines international standards across all industries. For more information, please visit: https://docs.microsoft.com/en-us/microsoft-365/compliance/offering-iso-27001

A company wants to implement an IoT solution service available in Microsoft Azure. Which of the following would meet the below requirement? "Provides a fully managed SaaS (software-as-a-service) solution that makes it easy to connect, monitor and manage IoT assets at scale".

IoT Central is correct because IoT Central is an app platform that reduces the burden and cost associated with developing, managing, and maintaining enterprise-grade IoT solutions. Choosing to build with Azure IoT Central gives you the opportunity to focus your time, money, and energy on transforming your business with IoT data, rather than just maintaining and updating a complex and continually evolving IoT infrastructure. The easy-to-use interface makes it simple to monitor device conditions, create rules, and manage millions of devices and their data throughout their life cycle. Furthermore, it enables you to act on device insights by extending IoT intelligence into line-of-business applications. For more information, please visit: https://docs.microsoft.com/en-us/azure/iot-central/core/overview-iot-central

A company wants to implement an IoT solution service available in Microsoft Azure. Which of the following would meet the below requirement? "Used to analyze data on end user devices".

IoT Edge is correct because it moves cloud analytics and custom business logic to devices so that your organization can focus on business insights instead of data management. Scale out your IoT solution by packaging your business logic into standard containers, then you can deploy those containers to any of your devices and monitor it all from the cloud. Analytics drives business value in IoT solutions, but not all analytics needs to be in the cloud. If you want to respond to emergencies as quickly as possible, you can run anomaly detection workloads at the edge. If you want to reduce bandwidth costs and avoid transferring terabytes of raw data, you can clean and aggregate the data locally then only send the insights to the cloud for analysis. Azure IoT Edge is made up of three components: IoT Edge modules are containers that run Azure services, third-party services, or your own code. Modules are deployed to IoT Edge devices and execute locally on those devices. The IoT Edge runtime runs on each IoT Edge device and manages the modules deployed to each device. A cloud-based interface enables you to remotely monitor and manage IoT Edge devices. For more information, please see: https://docs.microsoft.com/en-us/azure/iot-edge/about-iot-edge

A company has a VPN device that will be used as Site-to-Site connection from Microsoft Azure to their on-premise location. Which of the following would be used to represent the VPN device?

Local Network Gateway is the correct answer because a Local Network Gateway represents the hardware or software VPN device in your local network. Use this with a connection to set up a Site-to-Site VPN connection between an Azure virtual network and your local network. There are no additional charges for creating local network gateways in Microsoft Azure. For more information, please visit: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

A company has a Virtual Machine You want to ensure that no one accidentally deletes the Virtual Machine. Which of the following would you modify to effectively implement this requirement?

Locks is the correct answer because With Azure Locks, an administrator may need to lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. You can set the lock level to CanNotDelete or ReadOnly. In the Azure portal, the locks are called Delete and Read-only respectively. CanNotDelete means authorized users can still read and modify a resource, but they can't delete the resource. ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role. For more information, please visit: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

A company is currently planning on deploying resources to Microsoft Azure. They want to have the ability to manage the compliance of resources across multiple subscriptions. Which of the following can help you achieve this requirement?

Management Groups is the correct answer because Management Groups are containers that help you manage access, policy, and compliance across multiple subscriptions. You can create these containers to build an effective and efficient hierarchy that can be used with Azure Policy and Azure Role Based Access Controls. For more information, please visit: https://docs.microsoft.com/en-us/azure/governance/management-groups/overview

A company is planning on using an entire suite of Microsoft products within Microsoft Azure. Which of the following belongs to the category of Software-as-a-Service (SaaS)?

Microsoft Office 365, is the correct answer because Software as a service (SaaS) is a software distribution model in which a third-party provider hosts applications and makes them available to customers over the Internet. SaaS is one of three main categories of cloud computing, alongside infrastructure as a service (IaaS) and platform as a service (PaaS). Office 365 is SaaS, which provides an online version of MS Office Suite (Office Web Apps) along with SharePoint Server, Exchange Server and Lync Server. Windows Azure is both IaaS and PaaS, which makes the Windows Server operating system and other features available as services. For more information, please visit:https://docs.microsoft.com/en-us/microsoft-365/

Which of the following can assist the company in getting the required compliance reports?

Microsoft Trust Center because within this resource, you can take advantage of more than 90 compliance certifications, including over 50 specific to global regions and countries, such as the US, the European Union, Germany, Japan, the United Kingdom, India, and China. And, get more than 35 compliance offerings specific to the needs of key industries, including health, government, finance, education, manufacturing, and media. Your emerging compliance needs are covered, too: Microsoft engages globally with governments, regulators, standards bodies, and non-governmental organizations. Explore Azure compliance offerings in the Microsoft Trust Center.

You are working on understanding all the key terms when it comes to International standards, data privacy and data protection policies. Which of the following pertains to the following? "An organization that defines standards used by the United States government"

NIST is correct because NIST, National Institute of Standards and Technology (is a physical sciences laboratory, and a non-regulatory agency of the United States Department of Commerce. Its mission is to promote innovation and industrial competitiveness. NIST's activities are organized into laboratory programs that include nanoscale science and technology, engineering, information technology, neutron research, material measurement, and physical measurement. For more information, please visit: For more information, please https://docs.microsoft.com/en-us/microsoft-365/compliance/offering-nist-csf

A company has a Virtual Machine (VM) defined as demovm. This Virtual Machine (VM) was created with the standard settings. An application is installed on demovm. It now needs to be ensured that the application can be accessed over the Internet via HTTP using a prioritised security rule. You make modifications to the Azure firewall. Would this solution fit the requirement?

NO, because only "Security Groups" have priority rules to allow inbound and outbound traffic and this CANNOT be done via "Azure Firewall".

A company is planning on deploying a web server and database server as shown in the architecture diagram below. You have to ensure that traffic restrictions are in place so that the database server can only communicate with the web server.

Network security groups (NSGs) because with NSGs you can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.

Would the Azure Advisor tool give recommendations on how to configure Virtual Network settings?

No because Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. It analyzes your resource configuration and usage telemetry and then recommends solutions that can help you improve the cost effectiveness, performance, high availability, and security of your Azure resources. With Advisor, you can: Get proactive, actionable, and personalized best practices recommendations. Improve the performance, security, and high availability of your resources, as you identify opportunities to reduce your overall Azure spend.

A company has setup a Virtual Machine as part of their purchase subscription. They now want to move the Virtual Machine to another subscription. Is this possible?

Yes, you can move a VM and its associated resources to a different subscription by using the Azure Portal simply by selecting the subscription where you want the VM to be moved, or select an existing resource group, or enter a name to have a new resource group created are all possible methods of accomplishing the same thing. For more information please visit: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

A company has a Virtual Machine (VM) defined as demovm. This Virtual Machine (VM) was created with the standard settings. An application is installed on demovm. It now needs to be ensured that the application can be accessed over the Internet via HTTP. You modify the Azure Traffic Manager profile. Would this solution fit the requirement?

No because Azure Traffic Manager is a DNS-based traffic load balancer that enables you to distribute traffic optimally to services across global Azure regions, while providing high availability and responsiveness. Traffic Manager uses DNS to direct client requests to the most appropriate service endpoint based on a traffic-routing method and the health of the endpoints. An endpoint is any Internet-facing service hosted inside or outside of Azure. Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to failure, including the failure of an entire Azure region. Modifying this won't make the Azure VM accessible from the internet.

A company is planning on hosting 2 Virtual Machines within Microsoft Azure as shown below: Virtual Machine Name Virtual Machine Size ---------------------------------- ------------------------------- demovm B1S demovm1 B1S Would both the Virtual Machines always generate the same monthly costs?

No because VMs usually use some form of storage, such as Azure Managed Disks, which are the new and recommended disk storage offering for use with Azure virtual machines for persistent storage of data. You can use multiple Managed Disks with each virtual machine. Microsoft offers four types of Managed Disks — Ultra Disk, Premium SSD Managed Disks, Standard SSD Managed Disks, Standard HDD Managed Disks. If one VM stops and the other runs, the cost will not be the same. If one VM has storage and the other does not, the cost will not be the same. If you scale in or out one VM, the cost will not be the same.

A company has a Virtual Machine (VM) defined as demovm. This Virtual Machine (VM) was created with the standard settings. An application is installed on demovm. It now needs to be ensured that the application can be accessed over the Internet via HTTP. You propose the solution to modify the DDoS protection plan Would this solution fit the requirement?

No because Azure DDoS Protection is something that prevents and mitigates DDoS attacks automatically tuned to protect your specific Azure resources. Protection is simple to enable on any new or existing Virtual Network and requires no application or resource changes. Azure DDos has nothing to do with accessing an Azure VM over the Internet via HTTP.

A company wants to host a set of tables within Microsoft Azure. They want absolutely zero administration of the underlying infrastructure and low latency access to data. You recommend using the Azure App service. Would this fulfill this requirement?

No is the correct answer because an Azure App Service enables you to build and host web apps, mobile back ends, and RESTful APIs in the programming language of your choice without managing infrastructure. It offers auto-scaling and high availability, supports both Windows and Linux, and enables automated deployments from GitHub, Azure DevOps, or any Git repo. For more information, please visit: https://docs.microsoft.com/en-us/azure/app-service/

A company plans on purchasing a Microsoft Azure Support plan. Below is a key requirement for the support plan: - Provide an option to contact Microsoft support engineers by phone or email during business hours. A recommendation is made to purchase the Basic Support plan. Would this recommendation fulfill the requirement

No is the correct answer, because being able to contact Microsoft Support Engineers by phone or email during business hours is only available under the 'Developer, Standard, and Professional Direct support plans. The company would not be able to contact Microsoft Support Engineers by phone or email during business hours under the Basic Support plan as "Technical Support" is not included.

A company wants to migrate some scripts to Microsoft Azure. They want to make use of the serverless features available in Azure. They decide to use the Azure Virtual Machine service. Would this service meet the requirement?

No this service does not meet the requirement, Azure Virtual Machine service is incorrect because an Azure Virtual Machine service is one of several types of on-demand, scalable computing resources that Azure offers. Typically, you choose a VM when you need more control over the computing environment than the other choices offer. An Azure VM gives the flexibility of virtualization without having to buy and maintain the physical hardware that runs it. However, you still need to maintain the VM by performing tasks, such as configuring, patching, and installing the software that runs on it. For more information, please visit: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/overview

They want to make use of availability zones within Azure. If they deploy resources across all regions in Azure, can they make use of availability zones in all regions in Azure?

No, because Availability Zones are physically separate locations within an Azure region. Each Availability Zone is made up of one or more datacenters equipped with independent power, cooling, and networking. Availability Zones allow customers to run mission-critical applications with high availability and low-latency replication although their are not enough availability zones world wide though to implement due to the lack of a availability zone not within a specific region. There are dedicated regions for US Government as per the image below - US Gov Arizona, US Gov Iowa, US Gov Texas, US Gov Virginia, US DoD East and US DoD Central. You cannot deploy resources in these regions as these are dedicated to US Government. The question asks for "...........make use of availability zones in all regions in Azure" The answer is NO because the normal user is not used to deploy resources in these regions, let alone using the availability zones in these regions https://azure.microsoft.com/en-us/global-infrastructure/regions/

A company is planning on using an Azure App Service to host their set of web applications utilizing the Platform-as-a-Service (PaaS) cloud computing model. In the PaaS model, does Microsoft Azure provide to the customer, full control over the operating system that hosts the web applications?

No, because in a Platform-as-a-Service (PaaS) cloud computing model, Microsoft Azure has full control over the physical data center, networking, firewalls/security, servers, storage, operating systems, development tools, database management tools and business analytics. In an Infrastructure-as-a-Service (IaaS) cloud computing model, Microsoft Azure only has full control over the physical data center, networking, firewalls/security, servers, and storage, but not the operating systems, development tools, databases, or applications. SaaS (Software-as-a-Service), Microsoft Azure has full control over everything, you would need to simply choose or provide the application solution. https://azure.microsoft.com/en-us/overview/what-is-iaas/ https://azure.microsoft.com/en-us/overview/what-is-paas/ https://azure.microsoft.com/en-us/overview/what-is-saas/

- Ensure that for high severity cases, there is a minimum initial response time of 10 minutes A recommendation is made to purchase the Basic Support plan Would this recommendation fulfill the requirement

No, because the Basic support tier doesn't include Case Severity/Response Times compared to the Developer, Standard, and Professional Direct plans.

A company wants to make use of a Microsoft Azure service in private preview. Are Azure services in private preview available to all customers?

No, because the private preview is only available to certain Azure customers for evaluation purposes. The public preview is available to all Azure customers. ... Azure features that have been successfully evaluated and tested will typically be released to customers as part of the generally available product integrated into Azure.

A company wants to migrate some scripts to Microsoft Azure. They want to make use of the serverless features available in Azure. They decide to use the Azure Content Delivery Network service. Would this service meet the requirement?

No, is the correct answer because Azure Content Delivery Network (CDN) lets you reduce load times, save bandwidth, and speed responsiveness—whether you're developing or managing websites or mobile apps, or encoding and distributing streaming media, gaming software, firmware updates, or IoT endpoints. As the name suggests it is used for content distribution to worldwide users using the global infrastructure of Azure. This means that the CDN uses the servers that are distributed throughout the globe for distributing content globally. For more information, please visit: https://docs.microsoft.com/en-us/azure/cdn/cdn-overview

A company is planning on deploying resources to a Resource Group (RG) within Microsoft Azure. The company is planning on assigning tags to the Resource Groups. Would the resources in the Resource Group (RG) also inherit the same tags?

No, resources in the Resource Group (RG) will not inherit the same tags because you apply tags to your Azure resources giving metadata to logically organize them into a taxonomy. Each tag consists of a name and a value pair. For example, you can apply the name "Environment" and the value "Production" to all the resources in production. After you apply tags, you can retrieve all the resources in your subscription with that tag name and value. Tags enable you to retrieve related resources from different resource groups. This approach is helpful when you need to organize resources for billing or management. It is important to note that Tags applied to the resource group are not inherited by the resources in that resource group. For more information, please visit: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

A company wants to try out a couple of Microsoft Azure services which are available in public preview. Is it true that services in public preview can only be used via the Azure CLI interface?

No, this is incorrect, all public preview services can be used via all user interfaces, not only the Azure CLI. A service in Public Preview means that the service is in public beta and can be tried out by anyone with an Azure subscription. You can often use these services at a discount as long as they are in preview. For more information, please visit: https://azure.microsoft.com/en-us/updates/storage-explorer-preview-now-available-in-azure-portal/

A company has multiple Microsoft Azure subscriptions. They want to merge the subscriptions into one. Do they need to contact Microsoft to merge the subscriptions?

No, you don't need to contact Microsoft for this request. You can transfer subscriptions between your accounts. Your accounts are conceptually considered accounts of two different users so you can use the above steps to transfer subscriptions between your accounts. Using "Cost Management + Billing" within the Azure Portal.

Should the company deploy resources which are part of Public Preview in their production environment?

No. Azure may include preview, beta, or other pre-release features, services, software, or regions offered by Microsoft to obtain customer feedback ("Previews"). Previews are made available to you on the condition that you agree to these terms of use, which supplement your agreement governing use of Azure.

- Ensure that for high severity cases, there is a minimum initial response time of less than 1 hour. - Ensure that the support plan is the most cost-effective. A recommendation is made to purchase the Professional Direct Support plan Would this recommendation fulfill the requirement?

No. Although, the Professional Direct Support plan DOES include a 1-hour window for critical business impact but is not a cost-effective option here. The Standard support plan also has a 1-hour window for critical business impact and is less costly as compared to the Professional Direct support plan. Therefore, choosing the Professional Direct support plan won't fulfill both of our requirements.

An IT Engineer needs to create a Virtual Machine Currently the IT Engineer has a Windows desktop and has installed the Azure Command Line interface. From which of the following could the IT engineer use the Azure Command Line Interface? Choose 2 answers from the options given below

Powershell Cmd Prompt Azure command-line interface (CLI) is Microsoft's cross-platform command-line experience for managing Azure resources. The Azure CLI is designed to be easy to learn and get started with, but powerful enough to be a great tool for building custom automation to use Azure resources. Azure PowerShell is a set of cmdlets that allow for manging Azure resources directly from the PowerShell command line. Azure PowerShell is designed to make it easy to learn and get started with, but provides powerful features for automation. Written in .NET Standard, Azure PowerShell works with PowerShell 5.1 on Windows, and PowerShell 6.x and higher on all platforms.

A company has a set of IT engineers that are responsible for implementing and managing the resources in their Microsoft Azure account. The IT engineers have a set of on-premise workstations that have the following different types of operating systems: - Windows 10 - macOS - Ubuntu Which of the following tools can you use on the macOS machines?

The Azure CLI, Azure Powershell and Azure Portal is the correct answer. The Azure CLI for the macOS platform, can be installed via the Homebrew package manager. Homebrew makes it easy to keep your installation of the CLI update to date. Azure Powershell can be installed on a macOS machine using PowerShell Core. Azure Portal can installed on any macOS machcine by installing the proper SDKs.

Does the Azure AD Premium tier come with an SLA of 99.9%?

Yes because Microsoft guarantees at least 99.9% availability of the Azure Active Directory Basic and Premium services. The services are considered available in the following scenarios: Users are able to login to the service, login to the Access Panel, access applications on the Access Panel and reset passwords. IT administrators are able to create, read, write and delete entries in the directory or provision or de-provision users to applications in the directory. No SLA is provided for the Free tier of Azure Active Directory.

A company is planning on using Azure Storage Accounts. They have the following requirement: - Storage of 2 TB of data - Storage of a million files Would using an Azure Storage Account fulfill these requirements?

Yes because an Azure storage account contains all of your Azure Storage data objects: blobs, files, queues, tables, and disks. The storage account provides a unique namespace for your Azure Storage data that is accessible from anywhere in the world over HTTP or HTTPS. Data in your Azure storage account is durable and highly available, secure, and massively scalable.

A company wants to host a set of tables within Microsoft Azure. They want absolutely zero administration of the underlying infrastructure and low latency access to data. You recommend using the CosmosDB service. Would this meet the requirement?

Yes is correct because Azure Cosmos DB is Microsoft's globally distributed, multi-model database service. With a click of a button, Cosmos DB enables you to elastically and independently scale throughput and storage across any number of Azure regions worldwide. You can elastically scale throughput and storage, and take advantage of fast, single-digit-millisecond data access using your favorite API including SQL, MongoDB, Cassandra, Tables, or Gremlin. Cosmos DB provides comprehensive service level agreements (SLAs) for throughput, latency, availability, and consistency guarantees, something no other database service offers. For more information, please visit: https://docs.microsoft.com/en-us/azure/cosmos-db/introduction

A company plans on purchasing a Microsoft Azure Support plan. Below is a key requirement for the support plan: - Provide an option to contact Microsoft support engineers by phone or email 24/7. A recommendation is made to purchase the Standard Support plan. Would this recommendation fulfill the requirement?

Yes is the correct answer as, under the Standard Support plan, the company has the ability to contact support engineers via phone or email 24/7. For more information on all the Support plans offered please visit https://azure.microsoft.com/en-us/support/plans/

Is it possible to create resources in multiple subscriptions?

Yes, because typically, you deploy all the resources in your template to a single resource group. However, there are scenarios where you want to deploy a set of resources together but place them in different resource groups or subscriptions. For example, you may want to deploy the backup virtual machine for Azure Site Recovery to a separate resource group and location. Resource Manager enables you to use nested templates to target different subscriptions and resource groups than the subscription and resource group used for the parent template. You can deploy to only five resource groups in a single deployment. Typically, this limitation means you can deploy to one resource group specified for the parent template, and up to four resource groups in nested or linked deployments. However, if your parent template contains only nested or linked templates and does not itself deploy any resources, then you can include up to five resource groups in nested or linked deployments.

A company wants to make use of a Microsoft Azure service in public preview. Are Azure services in public preview available to all customers?

Yes, Azure may include preview, beta, or other pre-release features, services, software, or regions offered by Microsoft to obtain customer feedback ("Previews"). Previews are made available to you on the condition that you agree to these terms of use, which supplement your agreement governing use of Azure. Public preview is available to all Azure customers.

Would the Microsoft Azure Advisor solution give recommendations on how to reduce the cost of running Microsoft Azure Virtual Machines?

Yes, Microsoft Azure Advisor would give recommendations on how to reduce the cost of running Microsoft Azure Virtual Machines. Azure Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. It analyzes your resource configuration usage, telemetry, and then recommends solutions that can help you improve the cost effectiveness, performance, high availability, and security of your Azure resources. Azure Advisor provides recommendations for Application Gateway, App Services, availability sets, Azure Cache, Azure Data Factory, Azure Database for MySQL, Azure Database for PostgreSQL, Azure Database for MariaDB, Azure ExpressRoute, Azure Cosmos DB, Azure public IP addresses, SQL Data Warehouse, SQL servers, storage accounts, Traffic Manager profiles, and virtual machines. For more information, please visit: https://docs.microsoft.com/en-us/azure/advisor/advisor-overview

A company is planning on hosting their resources within Microsoft Azure. Management wants to know the Capital Expenditure (CapEx) and Operational Expenditure (OpEx) costs that would be incurred if they migrated their entire IT infrastructure to Microsoft Azure. Does Microsoft Azure provide flexibility to companies when it comes to Capital Expenditures (CapEx) and Operational Expenditures (OpEx)?

Yes, Microsoft Azure provides flexibility for cost, control, and operational management. You must know the definition of each term to under the differences, they are defined below: Capital Expenditures (CapEx) generate benefits over a long period. These expenditures are generally nonrecurring and result in the acquisition of permanent assets. Some examples include physical buildings, office equipment, computers, servers, software, essentially any asset that is expected to provide utility to a business. Operational Expenditures (OpEx) is your operating costs, the expenses to run day-to-day business operations, like services and consumable items that get used up and are paid for according to use. This includes rent/utilities, wages/salaries, legal fees, website hosting fees, software licensing fees, essentially any costs a company incurs for running their day-to-day operations.

A company is planning on setting up a Pay-as-You-Go subscription within Microsoft Azure. Would the company have access to the support forums?

Yes, because community support is available for all plans. You can find specific forum topics and questions other Azure users have or post your own for guidance on a subject to get answers from Microsoft engineers and members within the Azure community. https://azure.microsoft.com/en-us/support/plans/

A company wants to migrate some scripts to Microsoft Azure. They want to make use of the serverless features available in Azure. They decide to use the Azure Functions service. Would this service meet the requirement?

Yes, is the correct answer. Azure Functions is a server-less compute service that lets you run event-triggered code without having to explicitly provision or manage infrastructure. You can write just the code you need for the problem at hand, without worrying about a whole application or the infrastructure to run it. Functions can make development even more productive, and you can use your development language of choice, such as C#, Java, JavaScript, PowerShell, and Python. Pay only for the time your code runs and trust Azure to scale as needed. Azure Functions lets you develop server-less applications on Microsoft Azure. For more information, please visit: https://docs.microsoft.com/en-us/azure/azure-functions/

Below is a key requirement for the support plan: - Ensure that for moderate severity cases, there is a minimum initial response time of 2 hours. A recommendation is made to purchase the Professional Direct support plan. Would this recommendation fulfill the requirement?

Yes, the Professional Direct plan would ensure that for moderate severity cases, there is a minimum initial response time of 2 hours.

A company is planning on deploying resources to a Resource Group (RG) within Microsoft Azure. The company is planning on assigning permissions to the Resource Group (RG). Would the resources within the Resource Group (RG) also inherit the same permissions?

Yes, the Resource Group (RG) will inherit the same permissions because permissions in the top level scope are automatically inherited to the level below - meaning subscription level users have the same permissions to the resource groups and the resource group level users have the same permission to the individual resources within the resource group. For more information, please visit: https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal

A company has a Virtual Machine (VM) defined as demovm. This Virtual Machine (VM) was created with the standard settings. An application is installed on demovm. It now needs to be ensured that the application can be accessed over the Internet via HTTP. You modify the Network Security Groups. Would this solution fit the requirement?

Yes, using Network Security Groups, you can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.

Is a customer allowed a maximum of 10 Free Microsoft Azure account?

there is a limit of one account with 12 months free access to products and $200 credit per new customer. You can, however, use as many products as you like beyond the free amounts by upgrading your account to pay-as-you-go pricing.

Is it possible for outside users to have access to resources within Azure, or do the users have to be specifically defined in Azure AD only?

users from the outside can also get access to Azure resources because of Azure role-based access control (RBAC) which allows better security management for large organizations and for small and medium-sized businesses working with external collaborators, vendors, or freelancers that need access to specific resources in your environment, but not necessarily to the entire infrastructure or any billing-related scopes. You can use the capabilities in Azure Active Directory B2B to collaborate with external guest users and you can use RBAC to grant just the permissions that guest users need in your environment.