az-305_questions.csv

Question;OptionA;OptionB;OptionC;OptionD;CorrectAnswer;Explanation
Azure storage supports multiple storage tiers for Blob storage. Which of the following is NOT a valid storage tier?;Cold;Archive;Glacier;Cool;C;Glacier is not a valid Azure storage tier. Azure Blob storage offers several access tiers based on access frequency to optimize costs. The Hot tier is for frequently accessed data, the Cool tier is for infrequent access, and the Archive tier is for data rarely accessed. Glacier is a tier from AWS and not a valid Azure Blob tier. Learn more at: https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers.
Which Microsoft-native tools can be used to deploy resources to Azure?;ARM templates, Bicep files, Azure PowerShell, and Azure CLI;ARM templates, Bicep files, Pulumi, Saltstack;Terraform and ARM templates;Azure DevOps only;A;ARM templates, Bicep files, Azure PowerShell, and Azure CLI are Microsoft's native tools for deploying and managing Azure resources. These tools allow automation of infrastructure provisioning using Infrastructure-as-Code (IaC) methodologies. ARM templates use JSON, while Bicep is a more user-friendly abstraction layer over ARM templates.
Which of the following is NOT a valid requirement to configure and test self-service password reset for cloud-only users?;An account with Global Administrator or Authentication Policy Administrator privileges;A Microsoft Entra tenant with at least a Microsoft Entra ID Free license;A Microsoft Entra tenant with at least a Microsoft Entra ID P1 license;A non-administrator user account;D;Admins are always enabled for self-service password reset (SSPR), so a non-administrator user account is not a valid requirement for testing SSPR. SSPR enables users to reset their passwords without the need for IT intervention. Learn more at: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr.
Which of the following is required to deploy Azure Bastion?;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger;A subnet named AzureBastion with a subnet mask of /26 or smaller;Azure Firewall with the Premium SKU;Azure Firewall with the Standard SKU;A;To deploy Azure Bastion, you must configure a subnet named AzureBastionSubnet with a subnet mask of /26 or larger. This subnet ensures secure RDP/SSH access to your VMs without exposing them to the public internet. Learn more at: https://learn.microsoft.com/en-us/azure/bastion/tutorial-create-host-portal#prerequisites.
Which of the following scopes can you assign Azure (RBAC) roles?;Entra Tenants administrative units or individual Entra objects like applications;Management groups subscriptions resource groups and individual resources;Management groups subscriptions and resource groups;Entra Tenants administrative units and individual subscriptions;B;Azure Role-Based Access Control (RBAC) roles can be assigned at multiple scopes, including management groups, subscriptions, resource groups, and individual resources. These assignments allow for granular control of permissions across an Azure environment.
Which of the following statements is NOT true about resource locks?;You can lock an Azure subscription, resource group, or individual resource.;When you apply a lock at a scope, all resources within that scope inherit the same lock.;Only the Owner, User Access Administrator, and Contributor roles can create and delete management locks.;Data plane operations like data transactions are not impacted by resource locks.;C;Only the Owner and the User Access Administrator roles can create and delete management locks. Contributor cannot create and delete management locks.
You are planning to configure object replication for block blobs. Which of the following is not a valid requirement?;The source and destination accounts must be either general-purpose v2 or premium block blob accounts;You must be assigned the Owner role on the storage account or higher in the scope;Blob versioning is enabled for both the source and destination account;The blob change feed must be enabled for the source account;B;To configure object replication for block blobs, you must have Owner or higher role permissions on the storage account. Blob versioning is necessary for replication between source and destination accounts. Learn more at: https://learn.microsoft.com/en-us/azure/storage/blobs/object-replication-overview.
You create a custom Azure policy definition and save it to a subscription named Sub1. Which of the following scopes can you assign the policy?;Only Resource Groups in Sub1;Anywhere in the management hierarchy;Resource Groups in Sub1 and Sub1;Only Sub1;B;Azure Policy allows you to assign policies at different scopes within the management hierarchy, including resource groups, subscriptions, and management groups. This enables centralized management of resources to ensure compliance across multiple environments. Learn more at: https://learn.microsoft.com/en-us/azure/governance/policy/concepts/scope.
You have an application that is accessing a storage account using storage account access keys. The application is configured to use key 1. You plan to rotate the storage account access keys. Which steps should you take and in which order?;Update the application to use key 2, regenerate key 1, update the application to use key 1, and then regenerate key 2;Regenerate key 1 and update the application to use the new key;Update the application to use key 2, regenerate key 1 and then update the application to use key 1;Regenerate key 2;A;To rotate storage account access keys, first update the application to use key 2, regenerate key 1, update the app to use key 1 again, and then regenerate key 2. This ensures seamless operation without downtime.
You have been asked to ensure that all Azure resources associated with a Human Resources (HR) workload are marked as confidential. What should you use?;Microsoft Entra groups;Administrative Units;Tags;Resource locks;C;Tags are key-value pairs that help you identify resources based on data to your organization.
You need to ensure that all public network access to an Azure storage account is disabled. What should you configure?;Private endpoint connections;Microsoft Defender for Cloud;Firewalls and virtual networks;Containers;C;To disable public network access to an Azure storage account, configure the firewalls and virtual networks settings. This ensures that only private endpoints or specific networks can access the storage. Learn more at: https://learn.microsoft.com/en-us/azure/storage/common/storage-network-security.
You need to provide secure delegated access to a blob in an Azure storage account. Which of the following should you use?;A stored access policy;A storage account access key;A shared access signature;An Azure file share;C;A Shared Access Signature (SAS) provides time-limited, secure delegated access to resources in Azure storage accounts, such as blobs. Learn more at: https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview.
You plan to delegate access to a storage account using a shared access signature (SAS). You need to set an expiration time that you may need to extend. Which of the following do you configure?;A storage account access key;An expiration policy for shared access signatures;A stored access policy;A user delegation SAS;C;A stored access policy provides server-side control over shared access signatures (SAS), allowing you to modify permissions, start time, or expiration. Learn more at: https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview.
Azure Storage provides four storage services. What are they?;Blobs, messages, databases, and files;Containers, tables, queues, and files;Blobs, tables, queues, and files;Disks, tables, queues, and files;C;Azure Storage services include Blobs (unstructured data), Tables (NoSQL data), Queues (message storage), and Files (managed file shares). These services offer a wide range of storage solutions for different use cases. Learn more at: https://learn.microsoft.com/en-us/azure/storage/common/storage-introduction.
Azure storage supports multiple storage tiers for Blob storage. Which of the following is NOT a valid storage tier?;Cold;Archive;Glacier;Cool;C;Glacier is not a valid Azure storage tier. Azure Blob storage offers several access tiers to optimize costs based on data access patterns, including Hot, Cool, and Archive tiers. The Hot tier is for frequently accessed data, the Cool tier is for infrequently accessed data, and the Archive tier is for rarely accessed data. To learn more, refer to https://www.serversimply.com/blog/choosing-the-right-data-storage-solution.
Which Microsoft-native tools can be used to deploy resources to Azure?;ARM templates, Bicep files, Azure PowerShell, and Azure CLI;ARM templates, Bicep files, Pulumi, Saltstack;Terraform and ARM templates;Azure DevOps only;A;ARM templates, Bicep files, Azure PowerShell, and Azure CLI are Microsoft's native tools for deploying and managing Azure resources. These tools allow automation of infrastructure provisioning using Infrastructure-as-Code (IaC) methodologies. ARM templates use JSON, while Bicep is a more user-friendly abstraction layer over ARM templates.
Which of the following is NOT a valid requirement to configure and test self-service password reset for cloud-only users?;An account with Global Administrator or Authentication Policy Administrator privileges;A Microsoft Entra tenant with at least a Microsoft Entra ID Free license;A Microsoft Entra tenant with at least a Microsoft Entra ID P1 license;A non-administrator user account;C;Microsoft Entra ID P1 is required for self-service password reset/change/unlock and on-premises write-back. This ensures that users can reset their passwords without needing to contact IT support, improving productivity and security.
Which of the following is required to deploy Azure Bastion?;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger;A subnet named AzureBastion with a subnet mask of /26 or smaller;Azure Firewall with the Premium SKU;Azure Firewall with the Standard SKU;A;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger is required when you deploy Azure Bastion. Reference: Deploy Azure Bastion - https://learn.microsoft.com/azure/bastion/tutorial-create-host-portal#prerequisites.
Which of the following scopes can you assign Azure (RBAC) roles?;Entra Tenants administrative units or individual Entra objects like applications;Management groups subscriptions resource groups and individual resources;Management groups subscriptions and resource groups;Entra Tenants;B;Azure RBAC role assignments can be scoped to management groups, subscriptions, resource groups, and individual resources only (but that's enough inheritance structure).
Which of the following statements is NOT true about resource locks?;You can lock an Azure subscription, resource group, or individual resource.;When you apply a lock at a scope, all resources within that scope inherit the same lock.;Only the Owner, User Access Administrator, and Contributor roles can create and delete management locks.;Data plane operations like data transactions are not impacted by resource locks.;C;Only the Owner and the User Access Administrator roles can create and delete management locks. Contributor cannot create and delete management locks.
You are planning to configure object replication for block blobs. Which of the following is not a valid requirement?;The source and destination accounts must be either general-purpose v2 or premium block blob accounts;You must be assigned the Owner role on the storage account or higher in the scope;Blob versioning is enabled for both the source and destination account;The blob change feed must be enabled for the source account;B;The blob change feed must be enabled for the source account, but it does not need to be enabled on the destination account. Object replication helps improve data availability and disaster recovery by asynchronously copying blobs from one storage account to another.
You create a custom Azure policy definition and save it to a subscription named Sub1. Which of the following scopes can you assign the policy?;Only Resource Groups in Sub1;Anywhere in the management hierarchy;Resource Groups in Sub1 and Sub1;Only Sub1;C;Resources must be within the resource hierarchy of the definition location to target for assignment. Both Resource Groups within Sub1 and Sub1 can be assigned the policy. This ensures that policies are applied consistently across the organization.
You have an application that is accessing a storage account using storage account access keys. The application is configured to use key 1. You plan to rotate the storage account access keys. Which steps should you take and in which order?;Update the application to use key 2 regenerate key 1 update the application to use key 1 and then regenerate key 2;Regenerate key 1 and update the application to use the new key;Update the application to use key 2 regenerate key 1 and then update the application to use key 1;Regenerate key 2;A;This series of steps would successfully rotate the storage account access keys. Key rotation helps enhance security by periodically changing the access keys used by applications to access storage accounts.
You have been asked to ensure that all Azure resources associated with a Human Resources (HR) workload are marked as confidential. What should you use?;Microsoft Entra groups;Administrative Units;Tags;Resource locks;C;Tags are key-value pairs that help you identify resources based on data to your organization.
You need to ensure that all public network access to an Azure storage account is disabled. What should you configure?;Private endpoint connections;Microsoft Defender for Cloud;Firewalls and virtual networks;Containers;C;You can configure the firewalls and virtual networks networking settings on the storage account to prevent public network access. Reference: Configure Azure Storage firewalls and virtual networks - https://learn.microsoft.com/azure/storage/common/storage-network-security?tabs=azure-portal.
You need to provide secure delegated access to a blob in an Azure storage account. Which of the following should you use?;A stored access policy;A storage account access key;A shared access signature;An Azure file share;C;Shared access signatures can be used to provide secure delegated access to Azure storage accounts. Reference: Grant limited access to Azure Storage resources using shared access signatures - https://learn.microsoft.com/azure/storage/common/storage-sas-overview.
You plan to delegate access to a storage account using a shared access signature (SAS). You need to set an expiration time that you may need to extend. Which of the following do you configure?;A storage account access key;An expiration policy for shared access signatures;A stored access policy;A user delegation SAS;C;A stored access policy provides additional control over shared access signatures. Reference: Create a stored access policy - https://learn.microsoft.com/azure/storage/storage-shared-access-signature-policies.
Azure Storage provides four storage services. What are they?;Blobs messages databases and files;Containers tables queues and files;Blobs tables queues and files;Disks tables queues and files;C;Azure storage provides unstructured blob storage, non-relational table storage, message storage with queues, and network share file storage with files.
How does Azure Policy enforce compliance?;Policies check resources against defined rules and parameters;Policies apply restrictions to user roles;Policies only audit resource compliance;Policies provide no enforcement capabilities;A;Policies check resources against defined rules and parameters.
If you want to deploy an Azure VM that provides high availability which storage redundancy option below should you choose?;Locally redundant storage (LRS);Zone-redundant storage (ZRS);Geo-redundant storage (GRS);Read-access geo-redundant storage (RA-GRS);B;Zone-redundant storage (ZRS) ensures that your virtual machine is hosted across multiple datacenters in a region.
Network Security Group rules are processed in which order?;Rules are processed based on source or destination first less specific source or destination values are processed first;Rules are processed based on source or destination first more specific source or destination values are processed first;Rules with lower priority numbers are processed first. For example 100 is processed before 110;Rules with higher priority numbers are processed first. For example 110 is processed before 100;C;Network security group rules are processed in priority order. Higher numbers are processed after lower numbers.
Which of the following tools can help you manage hardware and software requirements for the Microsoft Azure integration?;Azure Advisor;Azure Monitor;Cost Management;Azure Policy;A;Azure Advisor provides recommendations that can help you optimize your Azure resources across key areas such as cost, performance, security, and availability. The tool analyzes your Azure environment and suggests actions to improve efficiency and reduce costs. It provides real-time insights, making it easier to manage infrastructure while ensuring best practices are followed. Azure Monitor, Cost Management, and Azure Policy serve different purposes (monitoring, cost tracking, and policy enforcement respectively) and are not focused on resource optimization.
You are tasked with deploying a policy using Azure Policy. The policy must restrict resources to a certain suffix. For example resources can only be created in a specific region. Which of the following actions must be completed first?;Create a new policy definition;Assign a policy targeting a specific scope;Modify existing role assignments;Deploy resources as specified by your policy;A;Create a new policy definition.
You implement Azure App Service where you require a custom domain and SSL for your web app. Which pricing tier should you select?;Free plan;Standard plan;Basic plan;Premium plan;B;Standard plan or higher is required for custom domains. All other plans do not support custom domains.
You need to design an Azure backup solution. Which strategy should you implement for data protection?;Georeliant backup storage solutions;Fast recovery time objectives and recovery point objectives;Backup to a secondary Azure region;Full archive and restore capability;C;The correct strategy for Azure backup solutions, especially for disaster recovery and business continuity, is to implement a backup to a secondary Azure region. Azure offers geo-redundant storage (GRS) and read-access geo-redundant storage (RA-GRS) that ensure your data is replicated in a secondary Azure region, providing robust protection against data loss. This strategy ensures cross-region replication of data, allowing recovery from a disaster affecting the primary region. The key elements include: - **Geo-Redundancy**: Data is copied to a secondary region, providing high availability and durability. - **Recovery Point Objective (RPO)**: Defines the maximum acceptable amount of data loss measured in time. With a secondary region backup, the RPO can be minimized to minutes. - **Recovery Time Objective (RTO)**: Defines how quickly services can be restored. Azure backup solutions minimize RTO by leveraging fast recovery times. - **Encryption and Compliance**: Data is encrypted both at rest and in transit, and meets various regulatory requirements for compliance. This approach provides a robust disaster recovery strategy, ensuring business continuity in the event of regional outages or failures. More details can be found in the official documentation: https://learn.microsoft.com/en-us/azure/backup/backup-overview
Azure storage supports multiple storage tiers for Blob storage. Which of the following is NOT a valid storage tier?;Cold;Archive;Glacier;Cool;C;Glacier is not a valid Azure storage tier. Azure Blob storage offers several access tiers to optimize costs based on data access patterns, including Hot, Cool, and Archive tiers. The Hot tier is for frequently accessed data, the Cool tier is for infrequently accessed data, and the Archive tier is for rarely accessed data. To learn more, refer to https://www.serversimply.com/blog/choosing-the-right-data-storage-solution.
Which Microsoft-native tools can be used to deploy resources to Azure?;ARM templates, Bicep files, Azure PowerShell, and Azure CLI;ARM templates, Bicep files, Pulumi, Saltstack;Terraform and ARM templates;Azure DevOps only;A;ARM templates, Bicep files, Azure PowerShell, and Azure CLI are Microsoft's native tools for deploying and managing Azure resources. These tools allow automation of infrastructure provisioning using Infrastructure-as-Code (IaC) methodologies. ARM templates use JSON, while Bicep is a more user-friendly abstraction layer over ARM templates.
Which of the following is NOT a valid requirement to configure and test self-service password reset for cloud-only users?;An account with Global Administrator or Authentication Policy Administrator privileges;A Microsoft Entra tenant with at least a Microsoft Entra ID Free license;A Microsoft Entra tenant with at least a Microsoft Entra ID P1 license;A non-administrator user account;D;A non-administrator user account because Admins are always enabled for self-service password reset. To configure and test self-service password reset (SSPR) for cloud-only users, you need an account with Global Administrator or Authentication Policy Administrator privileges, and a Microsoft Entra tenant with at least a Microsoft Entra ID P1 license. Non-administrator user accounts are not required for SSPR configuration. For more information, see https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr.
Which of the following is required to deploy Azure Bastion?;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger;A subnet named AzureBastion with a subnet mask of /26 or smaller;Azure Firewall with the Premium SKU;Azure Firewall with the Standard SKU;A;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger is required when you deploy Azure Bastion. Azure Bastion provides secure and seamless RDP and SSH connectivity to your virtual machines directly in the Azure portal over SSL. For more details, visit https://learn.microsoft.com/en-us/azure/bastion/tutorial-create-host-portal#prerequisites.
Which of the following scopes can you assign Azure (RBAC) roles?;Entra Tenants administrative units or individual Entra objects like applications.;Management groups subscriptions resource groups and individual resources.;Management groups subscriptions and resource groups.;Entra Tenants;B;Azure Role-Based Access Control (RBAC) allows you to assign roles at different scopes, including management groups, subscriptions, resource groups, and individual resources. This hierarchical structure helps manage access permissions efficiently across various levels of the Azure environment. For more information, see https://learn.microsoft.com/en-us/azure/role-based-access-control/overview.
Which of the following statements is NOT true about resource locks?;You can lock an Azure subscription, resource group, or individual resource.;When you apply a lock at a scope, all resources within that scope inherit the same lock.;Only the Owner, User Access Administrator, and Contributor roles can create and delete management locks.;Data plane operations like data transactions are not impacted by resource locks.;C;Only the Owner and the User Access Administrator roles can create and delete management locks. Contributor cannot create and delete management locks.
You are planning to configure object replication for block blobs. Which of the following is not a valid requirement?;The source and destination accounts must be either general-purpose v2 or premium block blob accounts.;You must be assigned the Owner role on the storage account or higher in the scope.;Blob versioning is enabled for both the source and destination account.;The blob change feed must be enabled for the source account.;C;The blob change feed must be enabled for the source account to support object replication. Object replication asynchronously copies block blobs between a source storage account and a destination account. Blob versioning must be enabled for both accounts, and the blob change feed must be enabled for the source account. For more information, see https://learn.microsoft.com/en-us/azure/storage/blobs/object-replication-overview.
You create a custom Azure policy definition and save it to a subscription named Sub1. Which of the following scopes can you assign the policy?;Only Resource Groups in Sub1.;Anywhere in the management hierarchy.;Resource Groups in Sub1 and Sub1.;Only Sub1.;C;Azure Policy allows you to assign policies at various scopes, including management groups, subscriptions, resource groups, and individual resources. This flexibility helps enforce compliance and manage resources effectively across different levels of the Azure environment. For more details, visit https://learn.microsoft.com/en-us/azure/governance/policy/overview.
You have an application that is accessing a storage account using storage account access keys. The application is configured to use key 1. You plan to rotate the storage account access keys. Which steps should you take and in which order?;Update the application to use key 2 regenerate key 1 update the application to use key 1 and then regenerate key 2;Regenerate key 1 and update the application to use the new key.;Update the application to use key 2 regenerate key 1 and then update the application to use key 1.;Regenerate key 2;A;To rotate storage account access keys without downtime, follow these steps: 1. Update the application to use key 2. 2. Regenerate key 1. 3. Update the application to use key 1. 4. Regenerate key 2. This ensures continuous access while rotating the keys. For more information, see https://learn.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage.
How does Azure Policy enforce compliance?;Policies check resources against defined rules and parameters;Policies apply restrictions to user roles;Policies only audit resource compliance;Policies provide no enforcement capabilities;A;Azure Policy enforces compliance through multiple mechanisms and layers: 1) Real-time Evaluation: Policies evaluate resources against defined rules during creation/modification • Automatically checks compliance with business rules • Enforces standards during deployment • Prevents non-compliant resource creation 2) Policy Effects: • Deny: Blocks non-compliant deployments • Audit: Logs compliance violations • Append: Adds required properties • DeployIfNotExists: Creates supporting resources • Modify: Changes resource properties 3) Continuous Monitoring: • Regular compliance scans • Automated remediation • Compliance reporting • Resource tracking 4) Integration Points: • Works with Azure RBAC • Connects to Azure Monitor • Feeds compliance dashboards • Supports Azure Management Groups 5) Business Impact: • Ensures regulatory compliance • Standardizes configurations • Controls costs • Maintains security policies 6) Technical Implementation: • JSON-based definitions • Parameterized rules • Scoped assignments • Exemption handling.
Which of the following statements must you always consider when you define a custom Azure Policy?;The policy logic and its enforcement mechanism;Policy Assignment Scope It is decided at the resource level;Policy Definition Attributes These help to understand the policies applicability;All of the above;D;When defining custom Azure Policies consider: 1) Policy Logic & Enforcement: • Evaluation criteria and conditions • Resource property assessment • Effect selection (Deny/Audit/Modify) • Impact analysis on operations 2) Assignment Scope Considerations: • Management group implications • Subscription-level effects • Resource group boundaries • Individual resource targeting 3) Definition Attributes: • Policy parameters • API versions • Resource provider compatibility • Exception handling 4) Implementation Strategy: • Testing methodology • Deployment phases • Monitoring setup • Remediation planning 5) Business Alignment: • Compliance requirements • Cost implications • Security objectives • Operational impact 6) Technical Best Practices: • Use parameterization • Implement proper testing • Document thoroughly • Regular review cycles.
You need to design an Azure backup solution. Which strategy should you implement for data protection?;Georeliant backup storage solutions;Fast recovery time objectives and recovery point objectives;Backup to a secondary Azure region;Full archive and restore capability;C;The correct strategy for Azure backup solutions, especially for disaster recovery and business continuity, is to implement a backup to a secondary Azure region. Azure offers geo-redundant storage (GRS) and read-access geo-redundant storage (RA-GRS) that ensure your data is replicated in a secondary Azure region, providing robust protection against data loss. This strategy ensures cross-region replication of data, allowing recovery from a disaster affecting the primary region. The key elements include: - **Geo-Redundancy**: Data is copied to a secondary region, providing high availability and durability. - **Recovery Point Objective (RPO)**: Defines the maximum acceptable amount of data loss measured in time. With a secondary region backup, the RPO can be minimized to minutes. - **Recovery Time Objective (RTO)**: Defines how quickly services can be restored. Azure backup solutions minimize RTO by leveraging fast recovery times. - **Encryption and Compliance**: Data is encrypted both at rest and in transit, and meets various regulatory requirements for compliance. This approach provides a robust disaster recovery strategy, ensuring business continuity in the event of regional outages or failures. More details can be found in the official documentation: https://learn.microsoft.com/en-us/azure/backup/backup-overview
Which of the following scopes can you assign Azure (RBAC) roles?;Entra Tenants administrative units or individual Entra objects like applications;Management groups subscriptions resource groups and individual resources;Management groups subscriptions and resource groups;Entra Tenants;B;Azure RBAC scope assignment involves multiple layers: 1) Hierarchy Levels: • Management Groups (top level organization) • Subscriptions (billing boundaries) • Resource Groups (logical containers) • Individual Resources (specific services) 2) Inheritance Principles: • Permissions flow downward • Child resources inherit parent permissions • More specific assignments override inherited ones • Explicit denies take precedence 3) Implementation Guidelines: • Follow least privilege principle • Regular access reviews • Documentation requirements • Emergency access procedures 4) Technical Considerations: • Role definitions • Custom role creation • Scope boundaries • Assignment limits 5) Management Features: • Azure Portal administration • PowerShell/CLI automation • API integration • Audit logging 6) Security Best Practices: • Regular audits • Just-in-time access • Privileged Identity Management • Access reviews 7) Business Impact: • Governance enforcement • Compliance maintenance • Operational efficiency • Risk management.
Which Azure service should you use to analyze costs across multiple cloud platforms?;Azure Cost Management;Azure Advisor;Azure Monitor;Azure Policy;A;Azure Cost Management provides tools to monitor, allocate, and optimize cloud costs across multiple cloud platforms, including Azure, AWS, and GCP.
What is the maximum number of storage accounts you can have in a single Azure subscription?;50;100;250;No limit;C;By default, you can have up to 250 storage accounts per subscription per region. This limit can be increased by contacting Azure support.
Which Azure service should you use to implement a disaster recovery solution with the shortest possible recovery time objective (RTO)?;Azure Site Recovery;Azure Backup;Azure Storage;Azure Traffic Manager;A;Azure Site Recovery provides the shortest possible RTO by continuously replicating your workloads to a secondary region, allowing for quick failover in case of a disaster.
What is the primary purpose of Azure Lighthouse?;To manage multiple customer tenants from a single control plane;To monitor Azure resources across multiple subscriptions;To provide recommendations for cost optimization;To implement governance policies across Azure resources;A;Azure Lighthouse enables service providers to manage resources across multiple customer tenants from a single control plane, improving efficiency and governance.
Which Azure service should you use to implement a serverless, event-driven architecture?;Azure Functions;Azure Logic Apps;Azure Service Fabric;Azure Kubernetes Service;A;Azure Functions is a serverless compute service that enables you to run code on-demand without having to explicitly provision or manage infrastructure, making it ideal for event-driven architectures.
What is the maximum number of virtual networks you can peer in a single Azure region?;50;100;500;No limit;B;You can peer up to 100 virtual networks in a single Azure region. This limit applies to both global and regional peering.
Which Azure service should you use to implement a multi-region, active-active architecture with automatic failover?;Azure Front Door;Azure Traffic Manager;Azure Load Balancer;Azure Application Gateway;A;Azure Front Door provides global load balancing and site acceleration service for web applications, enabling multi-region, active-active architectures with automatic failover capabilities.
What is the maximum number of role assignments you can have in a single Azure subscription?;2000;4000;5000;No limit;B;The maximum number of role assignments per subscription is 4000. This includes Azure RBAC assignments at all scopes (management group, subscription, resource group, and resource).
Which Azure service should you use to implement a private, dedicated connection between your on-premises network and Azure?;Azure ExpressRoute;Azure VPN Gateway;Azure Bastion;Azure Firewall;A;Azure ExpressRoute provides a private, dedicated connection between your on-premises network and Azure, bypassing the public internet for improved security and performance.
What is the maximum number of public IP addresses you can associate with a single Network Interface Card (NIC)?;1;2;4;8;A;In Azure, you can associate only one public IP address with a single Network Interface Card (NIC). This is a fundamental networking limitation in Azure.
Which Azure service should you use to implement a centralized secrets management solution?;Azure Key Vault;Azure Storage;Azure SQL Database;Azure Cosmos DB;A;Azure Key Vault is a cloud service for securely storing and accessing secrets, such as API keys, passwords, SSL/TLS certificates, and cryptographic keys.
What is the maximum number of virtual machines you can include in a single availability set?;50;100;200;No limit;C;You can include up to 200 virtual machines in a single availability set in Azure. This limit helps ensure that the VMs are distributed across multiple fault domains and update domains.
Which Azure service should you use to implement a hybrid identity solution?;Azure Active Directory;Azure AD Domain Services;Azure AD B2C;Azure AD B2B;A;Azure Active Directory (Azure AD) is the primary service for implementing hybrid identity solutions, allowing you to synchronize on-premises directories with cloud identities.
What is the maximum number of management groups you can have in a single Azure AD tenant?;10,000;No limit;1000;5000;A;You can have a maximum of 10,000 management groups in a single Azure AD tenant. This limit helps maintain a manageable hierarchy for governance purposes.
Which Azure service should you use to implement a content delivery network (CDN) for your global web application?;Azure CDN;Azure Front Door;Azure Traffic Manager;Azure Application Gateway;A;Azure CDN is specifically designed to deliver content from your web applications to users worldwide with low latency and high bandwidth.
What is the maximum number of virtual machine scale sets you can create in a single region per subscription?;100;500;1000;2000;C;You can create up to 1000 virtual machine scale sets per region per subscription in Azure. This limit allows for significant scalability in your applications.
Which Azure service should you use to implement a multi-region database with automatic geo-replication?;Azure Cosmos DB;Azure SQL Database;Azure Database for MySQL;Azure Database for PostgreSQL;A;Azure Cosmos DB provides built-in global distribution and multi-region write capabilities, making it ideal for implementing multi-region databases with automatic geo-replication.
What is the maximum number of network security groups (NSGs) you can associate with a single subnet?;1;2;5;No limit;A;You can associate only one network security group (NSG) with a single subnet in Azure. However, you can have multiple rules within that NSG (Network Security Group).
Which Azure service should you use to implement a serverless, event-driven workflow across multiple Azure services?;Azure Logic Apps;Azure Functions;Azure Service Bus;Azure Event Grid;A;Azure Logic Apps is designed for creating and running automated workflows that integrate apps, data, services, and systems, making it ideal for serverless & event-driven workflows across multiple Azure services.
What is the maximum number of rules you can add to a single network security group (NSG)?;200;500;1000;5000;C;You can add up to 1000 security rules to a single network security group (NSG) in Azure. This limit allows for fine-grained control over network traffic.
Which Azure service should you use to implement a private container registry for your organization?;Azure Container Registry;Azure Kubernetes Service;Azure Container Instances;Azure App Service;A;Azure Container Registry is a managed Docker registry service that allows you to store and manage container images for all types of container deployments.
What is the maximum number of virtual network gateways you can create in a single virtual network?;1;2;4;No limit;A;You can create only one virtual network gateway per virtual network in Azure. This limitation is due to the architectural design of Azure networking.
Which Azure service should you use to implement a scalable, serverless database solution?;Azure Cosmos DB;Azure SQL Database;Azure Table Storage;Azure Database for MySQL;A;Azure Cosmos DB offers a serverless option that automatically scales based on your workload, making it ideal for implementing scalable and serverless database solutions.
What is the maximum number of IP addresses you can add to an IP address-based firewall rule in Azure SQL Database?;128;256;512;1024;B;You can add up to 256 IP addresses or IP address ranges to a single IP firewall rule in Azure SQL Database. This limit helps maintain manageable and performant firewall configurations.
Which Azure service should you use to implement a global load balancing solution with DNS-based traffic routing?;Azure Traffic Manager;Azure Front Door;Azure Load Balancer;Azure Application Gateway;A;Azure Traffic Manager uses DNS to direct client requests to the most appropriate service endpoint based on traffic-routing methods and endpoint health.
What is the maximum number of virtual machines you can include in a single virtual machine scale set?;100;1000;10000;100000;C;You can include up to 10,000 virtual machines in a single virtual machine scale set when using Flexible Orchestration mode. This allows for significant scalability in your applications.
Which Azure service should you use to implement a private, managed Kubernetes cluster?;Azure Kubernetes Service (AKS);Azure Container Instances;Azure Container Registry;Azure App Service;A;Azure Kubernetes Service (AKS) allows you to deploy and manage Kubernetes clusters, including private clusters that are not exposed to the public internet.
What is the maximum number of endpoints you can add to a single Traffic Manager profile?;100;200;500;1000;C;You can add up to 500 endpoints to a single Traffic Manager profile in Azure. This limit allows for complex, global traffic routing scenarios.
Which Azure service should you use to implement a multi-region, active-active cache for your application?;Azure Cache for Redis;Azure CDN;Azure Front Door;Azure Application Gateway;A;Azure Cache for Redis offers a geo-replication feature that allows you to link two Premium tier caches across different Azure regions, enabling multi-region, active-active caching scenarios.
What is the maximum number of virtual machines you can include in a single availability zone?;100;500;No limit;Depends on the VM size;C;There is no specific limit to the number of virtual machines you can include in a single availability zone. The limit is typically determined by your subscription limits and available capacity in the zone.
Which Azure service should you use to implement a scalable, real-time analytics solution for streaming data?;Azure Stream Analytics;Azure Synapse Analytics;Azure Data Factory;Azure Databricks;A;Azure Stream Analytics is a real-time analytics and complex event-processing engine designed to analyze and process high volumes of fast streaming data from multiple sources simultaneously.
What is the maximum number of custom domains you can configure for a single Azure AD tenant?;100;500;900;No limit;C;You can configure up to 900 custom domain names for a single Azure AD tenant. This limit is sufficient for most large enterprises with complex domain structures.
Which Azure service should you use to implement a centralized policy management solution across multiple subscriptions?;Azure Policy;Azure Blueprints;Azure Security Center;Azure Sentinel;A;Azure Policy enables you to create, assign, and manage policies that enforce different rules across your resource configurations, allowing for centralized policy management across multiple subscriptions.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service that runs large-scale applications efficiently in the cloud, scheduling compute-intensive tasks and dynamically adjusting resources without managing infrastructure.
What is the role of Azure App Service?;Hosting web apps, mobile app backends, RESTful APIs, or automated business processes;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure App Service is an HTTP-based service that lets you build and host web apps, background jobs, mobile backends, and RESTful APIs, with automatic scaling and high availability.
What is the function of Azure Container Instances?;Running containers in Azure in a fast and simple manner without creating virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Container Instances enables fast startup, per second billing, and persistent storage, making it a great compute solution to support new workloads and migrate data by using the lift and shift pattern.
What is the primary benefit of using Azure Kubernetes Service (AKS)?;Managing your hosted Kubernetes environment and making it simple to deploy and manage containerized applications in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Kubernetes Service (AKS) manages your hosted Kubernetes environment, providing automated updates, self-healing, and easy scaling for containerized applications.
What is the purpose of Azure Functions?;Running a small piece of code in the cloud without worrying about the infrastructure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Functions is a serverless application platform that provides intrinsic scalability, charging only for the resources used, and is ideal for handling specific definable actions triggered by an event.
What is the role of Azure Logic Apps?;Creating and running automated workflows to integrate applications, data, services, and systems;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Logic Apps is a cloud-based platform for creating and running automated workflows, simplifying the way you connect legacy, modern, and cutting-edge systems across cloud, on-premises, and hybrid environments.
What is the function of Azure File Sync?;Centralizing your organization's file shares and transforming an on-premises Windows Server into a quick cache of your Azure file share;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Sync lets you centralize your organization's file shares, providing the flexibility, performance, and compatibility of an on-premises file server with the benefits of cloud storage.
What is the primary benefit of using Azure Disk Encryption (ADE)?;Encrypting the VM's virtual hard disks (VHDs) to ensure data security;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Encryption (ADE) encrypts the VM's virtual hard disks (VHDs), ensuring that the disk image is accessible only by the VM that owns the disk, providing enhanced data security.
What is the purpose of Azure Site Recovery?;Providing disaster recovery features for applications in Azure, on-premises, and in other cloud providers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Site Recovery provides disaster recovery features for applications in Azure, on-premises, and in other cloud providers, automating disaster recovery tasks and maintaining data resilience.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service that runs large-scale applications efficiently in the cloud, scheduling compute-intensive tasks and dynamically adjusting resources without managing infrastructure.
What is the role of Azure App Service?;Hosting web apps, mobile app backends, RESTful APIs, or automated business processes;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure App Service is an HTTP-based service that lets you build and host web apps, background jobs, mobile backends, and RESTful APIs, with automatic scaling and high availability.
What is the function of Azure Container Instances?;Running containers in Azure in a fast and simple manner without creating virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Container Instances enables fast startup, per second billing, and persistent storage, making it a great compute solution to support new workloads and migrate data by using the lift and shift pattern.
What is the primary benefit of using Azure Kubernetes Service (AKS)?;Managing your hosted Kubernetes environment and making it simple to deploy and manage containerized applications in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Kubernetes Service (AKS) manages your hosted Kubernetes environment, providing automated updates, self-healing, and easy scaling for containerized applications.
What is the purpose of Azure Functions?;Running a small piece of code in the cloud without worrying about the infrastructure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Functions is a serverless application platform that provides intrinsic scalability, charging only for the resources used, and is ideal for handling specific definable actions triggered by an event.
What is the role of Azure Logic Apps?;Creating and running automated workflows to integrate applications, data, services, and systems;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Logic Apps is a cloud-based platform for creating and running automated workflows, simplifying the way you connect legacy, modern, and cutting-edge systems across cloud, on-premises, and hybrid environments.
What is the function of Azure File Sync?;Centralizing your organization's file shares and transforming an on-premises Windows Server into a quick cache of your Azure file share;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Sync lets you centralize your organization's file shares, providing the flexibility, performance, and compatibility of an on-premises file server with the benefits of cloud storage.
What is the primary benefit of using Azure Disk Encryption (ADE)?;Encrypting the VM's virtual hard disks (VHDs) to ensure data security;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Encryption (ADE) encrypts the VM's virtual hard disks (VHDs), ensuring that the disk image is accessible only by the VM that owns the disk, providing enhanced data security.
What is the purpose of Azure Site Recovery?;Providing disaster recovery features for applications in Azure, on-premises, and in other cloud providers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Site Recovery provides disaster recovery features for applications in Azure, on-premises, and in other cloud providers, automating disaster recovery tasks and maintaining data resilience.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service that runs large-scale applications efficiently in the cloud, scheduling compute-intensive tasks and dynamically adjusting resources without managing infrastructure.
What is the role of Azure App Service?;Hosting web apps, mobile app backends, RESTful APIs, or automated business processes;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure App Service is an HTTP-based service that lets you build and host web apps, background jobs, mobile backends, and RESTful APIs, with automatic scaling and high availability.
What is the function of Azure Container Instances?;Running containers in Azure in a fast and simple manner without creating virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Container Instances enables fast startup, per second billing, and persistent storage, making it a great compute solution to support new workloads and migrate data by using the lift and shift pattern.
What is the primary benefit of using Azure Kubernetes Service (AKS)?;Managing your hosted Kubernetes environment and making it simple to deploy and manage containerized applications in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Kubernetes Service (AKS) manages your hosted Kubernetes environment, providing automated updates, self-healing, and easy scaling for containerized applications.
What is the purpose of Azure Functions?;Running a small piece of code in the cloud without worrying about the infrastructure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Functions is a serverless application platform that provides intrinsic scalability, charging only for the resources used, and is ideal for handling specific definable actions triggered by an event.
What is the role of Azure Logic Apps?;Creating and running automated workflows to integrate applications, data, services, and systems;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Logic Apps is a cloud-based platform for creating and running automated workflows, simplifying the way you connect legacy, modern, and cutting-edge systems across cloud, on-premises, and hybrid environments.
What is the function of Azure File Sync?;Centralizing your organization's file shares and transforming an on-premises Windows Server into a quick cache of your Azure file share;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Sync lets you centralize your organization's file shares, providing the flexibility, performance, and compatibility of an on-premises file server with the benefits of cloud storage.
What is the primary benefit of using Azure Disk Encryption (ADE)?;Encrypting the VM's virtual hard disks (VHDs) to ensure data security;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Encryption (ADE) encrypts the VM's virtual hard disks (VHDs), ensuring that the disk image is accessible only by the VM that owns the disk, providing enhanced data security.
What is the purpose of Azure Site Recovery?;Providing disaster recovery features for applications in Azure, on-premises, and in other cloud providers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Site Recovery provides disaster recovery features for applications in Azure, on-premises, and in other cloud providers, automating disaster recovery tasks and maintaining data resilience.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service that runs large-scale applications efficiently in the cloud, scheduling compute-intensive tasks and dynamically adjusting resources without managing infrastructure.
What is the role of Azure App Service?;Hosting web apps, mobile app backends, RESTful APIs, or automated business processes;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure App Service is an HTTP-based service that lets you build and host web apps, background jobs, mobile backends, and RESTful APIs, with automatic scaling and high availability.
What is the function of Azure Container Instances?;Running containers in Azure in a fast and simple manner without creating virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Container Instances enables fast startup, per second billing, and persistent storage, making it a great compute solution to support new workloads and migrate data by using the lift and shift pattern.
What is the primary benefit of using Azure Kubernetes Service (AKS)?;Managing your hosted Kubernetes environment and making it simple to deploy and manage containerized applications in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Kubernetes Service (AKS) manages your hosted Kubernetes environment, providing automated updates, self-healing, and easy scaling for containerized applications.
What is the purpose of Azure Functions?;Running a small piece of code in the cloud without worrying about the infrastructure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Functions is a serverless application platform that provides intrinsic scalability, charging only for the resources used, and is ideal for handling specific definable actions triggered by an event.
What is the role of Azure Logic Apps?;Creating and running automated workflows to integrate applications, data, services, and systems;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Logic Apps is a cloud-based platform for creating and running automated workflows, simplifying the way you connect legacy, modern, and cutting-edge systems across cloud, on-premises, and hybrid environments.
What is the function of Azure File Sync?;Centralizing your organization's file shares and transforming an on-premises Windows Server into a quick cache of your Azure file share;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Sync lets you centralize your organization's file shares, providing the flexibility, performance, and compatibility of an on-premises file server with the benefits of cloud storage.
What is the primary benefit of using Azure Disk Encryption (ADE)?;Encrypting the VM's virtual hard disks (VHDs) to ensure data security;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Encryption (ADE) encrypts the VM's virtual hard disks (VHDs), ensuring that the disk image is accessible only by the VM that owns the disk, providing enhanced data security.
What is the purpose of Azure Site Recovery?;Providing disaster recovery features for applications in Azure, on-premises, and in other cloud providers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Site Recovery provides disaster recovery features for applications in Azure, on-premises, and in other cloud providers, automating disaster recovery tasks and maintaining data resilience.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service that runs large-scale applications efficiently in the cloud, scheduling compute-intensive tasks and dynamically adjusting resources without managing infrastructure.
What is the role of Azure App Service?;Hosting web apps, mobile app backends, RESTful APIs, or automated business processes;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure App Service is an HTTP-based service that lets you build and host web apps, background jobs, mobile backends, and RESTful APIs, with automatic scaling and high availability.
What is the function of Azure Container Instances?;Running containers in Azure in a fast and simple manner without creating virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Container Instances enables fast startup, per second billing, and persistent storage, making it a great compute solution to support new workloads and migrate data by using the lift and shift pattern.
What is the primary benefit of using Azure Kubernetes Service (AKS)?;Managing your hosted Kubernetes environment and making it simple to deploy and manage containerized applications in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Kubernetes Service (AKS) manages your hosted Kubernetes environment, providing automated updates, self-healing, and easy scaling for containerized applications.
What is the purpose of Azure Functions?;Running a small piece of code in the cloud without worrying about the infrastructure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Functions is a serverless application platform that provides intrinsic scalability, charging only for the resources used, and is ideal for handling specific definable actions triggered by an event.
What is the role of Azure Logic Apps?;Creating and running automated workflows to integrate applications, data, services, and systems;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Logic Apps is a cloud-based platform for creating and running automated workflows, simplifying the way you connect legacy, modern, and cutting-edge systems across cloud, on-premises, and hybrid environments.
What is the function of Azure File Sync?;Centralizing your organization's file shares and transforming an on-premises Windows Server into a quick cache of your Azure file share;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Sync lets you centralize your organization's file shares, providing the flexibility, performance, and compatibility of an on-premises file server with the benefits of cloud storage.
What is the primary benefit of using Azure Disk Encryption (ADE)?;Encrypting the VM's virtual hard disks (VHDs) to ensure data security;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Encryption (ADE) encrypts the VM's virtual hard disks (VHDs), ensuring that the disk image is accessible only by the VM that owns the disk, providing enhanced data security.
What is the purpose of Azure Site Recovery?;Providing disaster recovery features for applications in Azure, on-premises, and in other cloud providers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Site Recovery provides disaster recovery features for applications in Azure, on-premises, and in other cloud providers, automating disaster recovery tasks and maintaining data resilience.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service that runs large-scale applications efficiently in the cloud, scheduling compute-intensive tasks and dynamically adjusting resources without managing infrastructure.
What is the role of Azure App Service?;Hosting web apps, mobile app backends, RESTful APIs, or automated business processes;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure App Service is an HTTP-based service that lets you build and host web apps, background jobs, mobile backends, and RESTful APIs, with automatic scaling and high availability.
What is the function of Azure Container Instances?;Running containers in Azure in a fast and simple manner without creating virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Container Instances enables fast startup, per second billing, and persistent storage, making it a great compute solution to support new workloads and migrate data by using the lift and shift pattern.
What is the primary benefit of using Azure Kubernetes Service (AKS)?;Managing your hosted Kubernetes environment and making it simple to deploy and manage containerized applications in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Kubernetes Service (AKS) manages your hosted Kubernetes environment, providing automated updates, self-healing, and easy scaling for containerized applications.
What is the purpose of Azure Functions?;Running a small piece of code in the cloud without worrying about the infrastructure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Functions is a serverless application platform that provides intrinsic scalability, charging only for the resources used, and is ideal for handling specific definable actions triggered by an event.
What is the role of Azure Logic Apps?;Creating and running automated workflows to integrate applications, data, services, and systems;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Logic Apps is a cloud-based platform for creating and running automated workflows, simplifying the way you connect legacy, modern, and cutting-edge systems across cloud, on-premises, and hybrid environments.
What is the function of Azure File Sync?;Centralizing your organization's file shares and transforming an on-premises Windows Server into a quick cache of your Azure file share;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Sync lets you centralize your organization's file shares, providing the flexibility, performance, and compatibility of an on-premises file server with the benefits of cloud storage.
What is the primary benefit of using Azure Disk Encryption (ADE)?;Encrypting the VM's virtual hard disks (VHDs) to ensure data security;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Encryption (ADE) encrypts the VM's virtual hard disks (VHDs), ensuring that the disk image is accessible only by the VM that owns the disk, providing enhanced data security.
What is the purpose of Azure Site Recovery?;Providing disaster recovery features for applications in Azure, on-premises, and in other cloud providers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Site Recovery provides disaster recovery features for applications in Azure, on-premises, and in other cloud providers, automating disaster recovery tasks and maintaining data resilience.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service that runs large-scale applications efficiently in the cloud, scheduling compute-intensive tasks and dynamically adjusting resources without managing infrastructure.
What is the role of Azure App Service?;Hosting web apps, mobile app backends, RESTful APIs, or automated business processes;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure App Service is an HTTP-based service that lets you build and host web apps, background jobs, mobile backends, and RESTful APIs, with automatic scaling and high availability.
What is the function of Azure Container Instances?;Running containers in Azure in a fast and simple manner without creating virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Container Instances enables fast startup, per second billing, and persistent storage, making it a great compute solution to support new workloads and migrate data by using the lift and shift pattern.
What is the primary benefit of using Azure Kubernetes Service (AKS)?;Managing your hosted Kubernetes environment and making it simple to deploy and manage containerized applications in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Kubernetes Service (AKS) manages your hosted Kubernetes environment, providing automated updates, self-healing, and easy scaling for containerized applications.
What is the purpose of Azure Functions?;Running a small piece of code in the cloud without worrying about the infrastructure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Functions is a serverless application platform that provides intrinsic scalability, charging only for the resources used, and is ideal for handling specific definable actions triggered by an event.
What is the role of Azure Logic Apps?;Creating and running automated workflows to integrate applications, data, services, and systems;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Logic Apps is a cloud-based platform for creating and running automated workflows, simplifying the way you connect legacy, modern, and cutting-edge systems across cloud, on-premises, and hybrid environments.
What is the function of Azure File Sync?;Centralizing your organization's file shares and transforming an on-premises Windows Server into a quick cache of your Azure file share;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Sync lets you centralize your organization's file shares, providing the flexibility, performance, and compatibility of an on-premises file server with the benefits of cloud storage.
What is the primary benefit of using Azure Disk Encryption (ADE)?;Encrypting the VM's virtual hard disks (VHDs) to ensure data security;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Encryption (ADE) encrypts the VM's virtual hard disks (VHDs), ensuring that the disk image is accessible only by the VM that owns the disk, providing enhanced data security.
What is the purpose of Azure Site Recovery?;Providing disaster recovery features for applications in Azure, on-premises, and in other cloud providers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Site Recovery provides disaster recovery features for applications in Azure, on-premises, and in other cloud providers, automating disaster recovery tasks and maintaining data resilience.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service that runs large-scale applications efficiently in the cloud, scheduling compute-intensive tasks and dynamically adjusting resources without managing infrastructure.
What is the role of Azure App Service?;Hosting web apps, mobile app backends, RESTful APIs, or automated business processes;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure App Service is an HTTP-based service that lets you build and host web apps, background jobs, mobile backends, and RESTful APIs, with automatic scaling and high availability.
What is the function of Azure Container Instances?;Running containers in Azure in a fast and simple manner without creating virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Container Instances enables fast startup, per second billing, and persistent storage, making it a great compute solution to support new workloads and migrate data by using the lift and shift pattern.
What is the primary benefit of using Azure Kubernetes Service (AKS)?;Managing your hosted Kubernetes environment and making it simple to deploy and manage containerized applications in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Kubernetes Service (AKS) manages your hosted Kubernetes environment, providing automated updates, self-healing, and easy scaling for containerized applications.
What is the purpose of Azure Functions?;Running a small piece of code in the cloud without worrying about the infrastructure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Functions is a serverless application platform that provides intrinsic scalability, charging only for the resources used, and is ideal for handling specific definable actions triggered by an event.
What is the role of Azure Logic Apps?;Creating and running automated workflows to integrate applications, data, services, and systems;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Logic Apps is a cloud-based platform for creating and running automated workflows, simplifying the way you connect legacy, modern, and cutting-edge systems across cloud, on-premises, and hybrid environments.
What is the function of Azure File Sync?;Centralizing your organization's file shares and transforming an on-premises Windows Server into a quick cache of your Azure file share;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Sync lets you centralize your organization's file shares, providing the flexibility, performance, and compatibility of an on-premises file server with the benefits of cloud storage.
What is the primary benefit of using Azure Disk Encryption (ADE)?;Encrypting the VM's virtual hard disks (VHDs) to ensure data security;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Encryption (ADE) encrypts the VM's virtual hard disks (VHDs), ensuring that the disk image is accessible only by the VM that owns the disk, providing enhanced data security.
What is the purpose of Azure Site Recovery?;Providing disaster recovery features for applications in Azure, on-premises, and in other cloud providers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Site Recovery provides disaster recovery features for applications in Azure, on-premises, and in other cloud providers, automating disaster recovery tasks and maintaining data resilience.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service that runs large-scale applications efficiently in the cloud, scheduling compute-intensive tasks and dynamically adjusting resources without managing infrastructure.
What is the role of Azure App Service?;Hosting web apps, mobile app backends, RESTful APIs, or automated business processes;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure App Service is an HTTP-based service that lets you build and host web apps, background jobs, mobile backends, and RESTful APIs, with automatic scaling and high availability.
What is the function of Azure Container Instances?;Running containers in Azure in a fast and simple manner without creating virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Container Instances enables fast startup, per second billing, and persistent storage, making it a great compute solution to support new workloads and migrate data by using the lift and shift pattern.
What is the primary benefit of using Azure Kubernetes Service (AKS)?;Managing your hosted Kubernetes environment and making it simple to deploy and manage containerized applications in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Kubernetes Service (AKS) manages your hosted Kubernetes environment, providing automated updates, self-healing, and easy scaling for containerized applications.
What is the purpose of Azure Functions?;Running a small piece of code in the cloud without worrying about the infrastructure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Functions is a serverless application platform that provides intrinsic scalability, charging only for the resources used, and is ideal for handling specific definable actions triggered by an event.
What is the role of Azure Logic Apps?;Creating and running automated workflows to integrate applications, data, services, and systems;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Logic Apps is a cloud-based platform for creating and running automated workflows, simplifying the way you connect legacy, modern, and cutting-edge systems across cloud, on-premises, and hybrid environments.
What is the function of Azure File Sync?;Centralizing your organization's file shares and transforming an on-premises Windows Server into a quick cache of your Azure file share;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Sync lets you centralize your organization's file shares, providing the flexibility, performance, and compatibility of an on-premises file server with the benefits of cloud storage.
What is the primary benefit of using Azure Disk Encryption (ADE)?;Encrypting the VM's virtual hard disks (VHDs) to ensure data security;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Encryption (ADE) encrypts the VM's virtual hard disks (VHDs), ensuring that the disk image is accessible only by the VM that owns the disk, providing enhanced data security.
What is the purpose of Azure Site Recovery?;Providing disaster recovery features for applications in Azure, on-premises, and in other cloud providers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Site Recovery provides disaster recovery features for applications in Azure, on-premises, and in other cloud providers, automating disaster recovery tasks and maintaining data resilience.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service that runs large-scale applications efficiently in the cloud, scheduling compute-intensive tasks and dynamically adjusting resources without managing infrastructure.
What is the role of Azure App Service?;Hosting web apps, mobile app backends, RESTful APIs, or automated business processes;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure App Service is an HTTP-based service that lets you build and host web apps, background jobs, mobile backends, and RESTful APIs, with automatic scaling and high availability.
What is the function of Azure Container Instances?;Running containers in Azure in a fast and simple manner without creating virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Container Instances enables fast startup, per second billing, and persistent storage, making it a great compute solution to support new workloads and migrate data by using the lift and shift pattern.
What is the primary benefit of using Azure Kubernetes Service (AKS)?;Managing your hosted Kubernetes environment and making it simple to deploy and manage containerized applications in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Kubernetes Service (AKS) manages your hosted Kubernetes environment, providing automated updates, self-healing, and easy scaling for containerized applications.
What is the purpose of Azure Functions?;Running a small piece of code in the cloud without worrying about the infrastructure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Functions is a serverless application platform that provides intrinsic scalability, charging only for the resources used, and is ideal for handling specific definable actions triggered by an event.
What is the role of Azure Logic Apps?;Creating and running automated workflows to integrate applications, data, services, and systems;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Logic Apps is a cloud-based platform for creating and running automated workflows, simplifying the way you connect legacy, modern, and cutting-edge systems across cloud, on-premises, and hybrid environments.
What is the function of Azure File Sync?;Centralizing your organization's file shares and transforming an on-premises Windows Server into a quick cache of your Azure file share;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Sync lets you centralize your organization's file shares, providing the flexibility, performance, and compatibility of an on-premises file server with the benefits of cloud storage.
What is the primary benefit of using Azure Disk Encryption (ADE)?;Encrypting the VM's virtual hard disks (VHDs) to ensure data security;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Encryption (ADE) encrypts the VM's virtual hard disks (VHDs), ensuring that the disk image is accessible only by the VM that owns the disk, providing enhanced data security.
What is the purpose of Azure Site Recovery?;Providing disaster recovery features for applications in Azure, on-premises, and in other cloud providers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Site Recovery provides disaster recovery features for applications in Azure, on-premises, and in other cloud providers, automating disaster recovery tasks and maintaining data resilience.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service that runs large-scale applications efficiently in the cloud, scheduling compute-intensive tasks and dynamically adjusting resources without managing infrastructure.
What is the role of Azure App Service?;Hosting web apps, mobile app backends, RESTful APIs, or automated business processes;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure App Service is an HTTP-based service that lets you build and host web apps, background jobs, mobile backends, and RESTful APIs, with automatic scaling and high availability.
What is the function of Azure Container Instances?;Running containers in Azure in a fast and simple manner without creating virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Container Instances enables fast startup, per second billing, and persistent storage, making it a great compute solution to support new workloads and migrate data by using the lift and shift pattern.
What is the primary benefit of using Azure Kubernetes Service (AKS)?;Managing your hosted Kubernetes environment and making it simple to deploy and manage containerized applications in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Kubernetes Service (AKS) manages your hosted Kubernetes environment, providing automated updates, self-healing, and easy scaling for containerized applications.
What is the purpose of Azure Functions?;Running a small piece of code in the cloud without worrying about the infrastructure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Functions is a serverless application platform that provides intrinsic scalability, charging only for the resources used, and is ideal for handling specific definable actions triggered by an event.
What is the role of Azure Logic Apps?;Creating and running automated workflows to integrate applications, data, services, and systems;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Logic Apps is a cloud-based platform for creating and running automated workflows, simplifying the way you connect legacy, modern, and cutting-edge systems across cloud, on-premises, and hybrid environments.
What is the function of Azure File Sync?;Centralizing your organization's file shares and transforming an on-premises Windows Server into a quick cache of your Azure file share;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Sync lets you centralize your organization's file shares, providing the flexibility, performance, and compatibility of an on-premises file server with the benefits of cloud storage.
What is the primary benefit of using Azure Disk Encryption (ADE)?;Encrypting the VM's virtual hard disks (VHDs) to ensure data security;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Encryption (ADE) encrypts the VM's virtual hard disks (VHDs), ensuring that the disk image is accessible only by the VM that owns the disk, providing enhanced data security.
What is the purpose of Azure Site Recovery?;Providing disaster recovery features for applications in Azure, on-premises, and in other cloud providers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Site Recovery provides disaster recovery features for applications in Azure, on-premises, and in other cloud providers, automating disaster recovery tasks and maintaining data resilience.
What is the primary function of Azure Virtual Machines?;Deploying and managing virtual machines inside an Azure virtual network;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Virtual Machines is the basis of the Azure Infrastructure-as-a-Service (IaaS) model, used for developing, testing, and deploying applications in the cloud, or to extend your datacenter.
What is the purpose of Azure Batch?;Running large-scale parallel and high-performance computing (HPC) applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Batch is a managed service provided by Microsoft Azure that is designed to run large-scale parallel and high-performance computing (HPC) applications efficiently in the cloud. It automatically scales, manages job scheduling, and allocates compute resources based on the volume and complexity of tasks. Azure Batch supports batch processing workloads that require extensive computational resources, such as simulations, rendering, data analysis, and machine learning model training. Microsoft ensures that Azure Batch integrates well with security and compliance standards, protecting sensitive data and adhering to regulatory guidelines as part of Azure's security framework.
What is the primary function of Azure Active Directory (Azure AD)?;Managing identities and access to resources;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Active Directory (Azure AD) is a cloud-based identity and access management service that helps employees sign in and access resources.
What is the purpose of Azure AD Conditional Access?;Applying policies to ensure only authorized users can access resources;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure AD Conditional Access applies policies to ensure only authorized users can access resources, based on conditions such as user location, device state, and risk level.
What is the role of Azure AD Identity Protection?;Detecting and responding to identity-based threats;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure AD Identity Protection detects and responds to identity-based threats using machine learning and behavioral analytics.
What is the function of Azure AD Privileged Identity Management (PIM)?;Managing, controlling, and monitoring access to important resources;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure AD Privileged Identity Management (PIM) manages, controls, and monitors access to important resources, ensuring that only authorized users have access to critical roles.
What is the primary benefit of using Azure AD B2C?;Enabling businesses to provide identity and access management for their customers;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure AD B2C enables businesses to provide identity and access management for their customers, allowing them to sign in using social accounts or local accounts.
What is the purpose of Azure Policy?;Enforcing organizational standards and assessing compliance at scale;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Policy helps enforce organizational standards and assess compliance at scale by creating, assigning, and managing policies.
What is the role of Azure Blueprints?;Defining a repeatable set of Azure resources that implement and adhere to an organization's standards, patterns, and requirements;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Blueprints define a repeatable set of Azure resources that implement and adhere to an organization's standards, patterns, and requirements.
What is the function of Azure Monitor?;Collecting, analyzing, and acting on telemetry data from Azure and on-premises environments;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor collects, analyzes, and acts on telemetry data from Azure and on-premises environments, providing insights into the performance and health of applications and infrastructure.
What is the primary benefit of using Azure Security Center?;Providing unified security management and advanced threat protection across hybrid cloud workloads;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Security Center provides unified security management and advanced threat protection across hybrid cloud workloads, helping to prevent, detect, and respond to threats.
What is the purpose of Azure Sentinel?;Providing intelligent security analytics and threat intelligence across the enterprise;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Sentinel provides intelligent security analytics and threat intelligence across the enterprise, helping to detect, investigate, and respond to threats.
What is the role of Azure Key Vault?;Safeguarding cryptographic keys and secrets used by cloud applications and services;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Key Vault safeguards cryptographic keys and secrets used by cloud applications and services, ensuring secure key management and access control.
What is the function of Azure Resource Manager (ARM)?;Enabling the deployment, management, and monitoring of Azure resources as a group;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Resource Manager (ARM) enables the deployment, management, and monitoring of Azure resources as a group, providing a consistent management layer.
What is the primary benefit of using Azure Cost Management and Billing?;Helping organizations monitor, allocate, and optimize their cloud spending;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Cost Management and Billing helps organizations monitor, allocate, and optimize their cloud spending, providing insights into cost and usage patterns.
What is the purpose of Azure Advisor?;Providing personalized best practices and recommendations to optimize Azure deployments;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Advisor provides personalized best practices and recommendations to optimize Azure deployments, helping to improve performance, security, and cost-efficiency.
What is the role of Azure Automation?;Automating the creation, deployment, monitoring, and maintenance of resources in Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Automation automates the creation, deployment, monitoring, and maintenance of resources in Azure, helping to reduce manual intervention and improve efficiency.
What is the function of Azure Log Analytics?;Collecting and analyzing log data from various sources to provide insights into system performance and health;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Log Analytics collects and analyzes log data from various sources to provide insights into system performance and health, enabling proactive monitoring and troubleshooting.
What is the primary benefit of using Azure Application Insights?;Monitoring the performance and usage of web applications in real-time;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Application Insights monitors the performance and usage of web applications in real-time, providing insights into application behavior and user interactions.
What is the purpose of Azure Service Health?;Providing personalized alerts and guidance when Azure service issues affect your resources;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Service Health provides personalized alerts and guidance when Azure service issues affect your resources, helping to minimize downtime and maintain business continuity.
What is the role of Azure Security Center's Just-In-Time VM Access?;Reducing exposure to attacks by providing controlled access to virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Security Center's Just-In-Time VM Access reduces exposure to attacks by providing controlled access to virtual machines, allowing access only when needed.
What is the function of Azure Policy's Initiative Definition?;Grouping multiple policies together to achieve a specific goal;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Policy's Initiative Definition groups multiple policies together to achieve a specific goal, simplifying policy management and compliance.
What is the primary benefit of using Azure Blueprints' Artifacts?;Defining the specific resources and configurations that are part of a blueprint;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Blueprints' Artifacts define the specific resources and configurations that are part of a blueprint, ensuring consistency and compliance across deployments.
What is the purpose of Azure Monitor's Metrics Explorer?;Visualizing and analyzing metrics data from Azure resources;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor's Metrics Explorer visualizes and analyzes metrics data from Azure resources, helping to identify trends and diagnose issues.
What is the role of Azure Monitor's Log Alerts?;Generating alerts based on log data to notify users of potential issues;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor's Log Alerts generate alerts based on log data to notify users of potential issues, enabling proactive monitoring and response.
What is the function of Azure Monitor's Application Insights Profiler?;Capturing performance traces to diagnose performance issues in web applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor's Application Insights Profiler captures performance traces to diagnose performance issues in web applications, helping to improve application performance.
What is the primary benefit of using Azure Monitor's Service Map?;Visualizing dependencies between services and components in real-time;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor's Service Map visualizes dependencies between services and components in real-time, providing insights into application architecture and performance.
What is the purpose of Azure Monitor's Network Performance Monitor?;Monitoring network performance and diagnosing network issues;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor's Network Performance Monitor monitors network performance and diagnoses network issues, helping to ensure network reliability and performance.
What is the role of Azure Monitor's Container Insights?;Monitoring the performance and health of containerized applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor's Container Insights monitors the performance and health of containerized applications, providing insights into container resource usage and performance.
What is the function of Azure Monitor's VM Insights?;Monitoring the performance and health of virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor's VM Insights monitors the performance and health of virtual machines, providing insights into VM resource usage and performance.
What is the primary benefit of using Azure Monitor's Log Analytics Workspace?;Centralizing log data from various sources for analysis and visualization;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor's Log Analytics Workspace centralizes log data from various sources for analysis and visualization, enabling comprehensive monitoring and troubleshooting.
What is the purpose of Azure Monitor's Alerts Management?;Managing and responding to alerts generated by Azure Monitor;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor's Alerts Management manages and responds to alerts generated by Azure Monitor, helping to ensure timely and effective incident response.
What is the role of Azure Monitor's Action Groups?;Grouping notification preferences and actions to be taken when an alert is triggered;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor's Action Groups group notification preferences and actions to be taken when an alert is triggered, enabling efficient alert management and response.
What is the function of Azure Monitor's Autoscale?;Automatically adjusting the number of resources based on demand;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Monitor's Autoscale automatically adjusts the number of resources based on demand, helping to ensure optimal performance and cost-efficiency.
What is the primary function of Azure Blob Storage?;Storing unstructured data such as text or binary data;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Blob Storage is designed to store large amounts of unstructured data, such as text or binary data, and is optimized for storing massive amounts of data.
What is the purpose of Azure Data Lake Storage?;Providing a scalable and secure data lake for high-performance analytics;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Data Lake Storage provides a scalable and secure data lake for high-performance analytics, enabling organizations to store and analyze large volumes of data.
What is the role of Azure SQL Database?;Providing a fully managed relational database service;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure SQL Database is a fully managed relational database service that provides built-in intelligence, scalability, and security for modern cloud applications.
What is the function of Azure Cosmos DB?;Providing a globally distributed, multi-model database service;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Cosmos DB is a globally distributed, multi-model database service that provides high availability, low latency, and scalability for modern applications.
What is the primary benefit of using Azure Table Storage?;Storing large amounts of structured data in a NoSQL key-value store;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Table Storage is designed to store large amounts of structured data in a NoSQL key-value store, providing fast and cost-effective access to data.
What is the purpose of Azure File Storage?;Providing fully managed file shares in the cloud;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure File Storage provides fully managed file shares in the cloud, enabling organizations to share files across multiple virtual machines and access them from anywhere.
What is the role of Azure Disk Storage?;Providing high-performance, durable block storage for Azure virtual machines;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Disk Storage provides high-performance, durable block storage for Azure virtual machines, ensuring data persistence and reliability.
What is the function of Azure Managed Disks?;Simplifying the management of Azure virtual machine disks;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Managed Disks simplify the management of Azure virtual machine disks by handling storage account management, scalability, and performance optimization.
What is the primary benefit of using Azure SQL Managed Instance?;Providing a fully managed SQL Server instance with near 100% compatibility with on-premises SQL Server;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure SQL Managed Instance provides a fully managed SQL Server instance with near 100% compatibility with on-premises SQL Server, enabling easy migration and modernization of SQL Server applications.
What is the purpose of Azure Synapse Analytics?;Integrating big data and data warehousing to provide a unified analytics platform;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Synapse Analytics integrates big data and data warehousing to provide a unified analytics platform, enabling organizations to analyze and visualize data at scale.
What is the role of Azure Data Factory?;Orchestrating and automating data movement and transformation;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Data Factory orchestrates and automates data movement and transformation, enabling organizations to create data-driven workflows for data integration and processing.
What is the function of Azure Stream Analytics?;Processing and analyzing real-time data streams;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Stream Analytics processes and analyzes real-time data streams, enabling organizations to gain insights and take action on data in motion.
What is the primary benefit of using Azure HDInsight?;Providing a fully managed, open-source analytics service for big data;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure HDInsight provides a fully managed, open-source analytics service for big data, enabling organizations to run popular open-source frameworks such as Hadoop, Spark, and Kafka.
What is the purpose of Azure Databricks?;Providing a fast, easy, and collaborative Apache Spark-based analytics platform;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Databricks provides a fast, easy, and collaborative Apache Spark-based analytics platform, enabling organizations to build and scale data engineering, data science, and machine learning solutions.
What is the role of Azure Data Explorer?;Providing a fast and highly scalable data exploration service for log and telemetry data;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Data Explorer provides a fast and highly scalable data exploration service for log and telemetry data, enabling organizations to analyze large volumes of data in real-time.
What is the function of Azure Data Share?;Enabling secure and easy data sharing across organizations;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Data Share enables secure and easy data sharing across organizations, allowing data providers to share data with multiple consumers while maintaining control over data access.
What is the primary benefit of using Azure Cache for Redis?;Providing a fully managed, in-memory data store for high-performance applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Cache for Redis provides a fully managed, in-memory data store for high-performance applications, enabling organizations to achieve low-latency and high-throughput data access.
What is the purpose of Azure Database for PostgreSQL?;Providing a fully managed PostgreSQL database service;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Database for PostgreSQL provides a fully managed PostgreSQL database service, offering built-in high availability, automated backups, and scaling capabilities.
What is the role of Azure Database for MySQL?;Providing a fully managed MySQL database service;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Database for MySQL provides a fully managed MySQL database service, offering built-in high availability, automated backups, and scaling capabilities.
What is the function of Azure Database Migration Service?;Simplifying the migration of databases to Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Database Migration Service simplifies the migration of databases to Azure, providing a seamless and automated migration experience for various database types.
What is the primary benefit of using Azure SQL Data Warehouse?;Providing a fully managed, petabyte-scale data warehouse service;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure SQL Data Warehouse provides a fully managed, petabyte-scale data warehouse service, enabling organizations to run complex queries and perform data analysis at scale.
What is the purpose of Azure Data Lake Analytics?;Providing an on-demand analytics job service for big data;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Data Lake Analytics provides an on-demand analytics job service for big data, enabling organizations to process and analyze large volumes of data using U-SQL, R, Python, and .NET.
What is the role of Azure Event Hubs?;Ingesting and processing large volumes of event data in real-time;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Event Hubs ingests and processes large volumes of event data in real-time, enabling organizations to build real-time analytics and event-driven applications.
What is the function of Azure Time Series Insights?;Providing a fully managed analytics, storage, and visualization service for time series data;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Time Series Insights provides a fully managed analytics, storage, and visualization service for time series data, enabling organizations to analyze and visualize time series data at scale.
What is the primary benefit of using Azure Data Catalog?;Providing a fully managed data discovery and metadata management service;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Data Catalog provides a fully managed data discovery and metadata management service, enabling organizations to discover, understand, and consume data sources.
What is the purpose of Azure Data Box?;Providing a secure and efficient way to transfer large amounts of data to Azure;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Data Box provides a secure and efficient way to transfer large amounts of data to Azure, enabling organizations to move data to the cloud quickly and securely.
What is the role of Azure Data Lake Store?;Providing a hyper-scale repository for big data analytics workloads;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Data Lake Store provides a hyper-scale repository for big data analytics workloads, enabling organizations to store and analyze large volumes of data.
What is the function of Azure SQL Edge?;Providing a small-footprint, edge-optimized data engine for IoT and edge devices;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure SQL Edge provides a small-footprint, edge-optimized data engine for IoT and edge devices, enabling organizations to run SQL-based data processing and analytics at the edge.
What is the primary benefit of using Azure Blob Storage's Archive Tier?;Providing a cost-effective storage solution for rarely accessed data;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Blob Storage's Archive Tier provides a cost-effective storage solution for rarely accessed data, enabling organizations to store large amounts of data at a lower cost.
What is the purpose of Azure SQL Database Hyperscale?;Providing a highly scalable and performant database service for large-scale applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure SQL Database Hyperscale provides a highly scalable and performant database service for large-scale applications, enabling organizations to scale out storage and compute resources independently.
What is the role of Azure Data Lake Storage Gen2?;Combining the capabilities of Azure Data Lake Storage and Azure Blob Storage;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure Data Lake Storage Gen2 combines the capabilities of Azure Data Lake Storage and Azure Blob Storage, providing a unified data storage solution for big data analytics.
What is the function of Azure SQL Database Managed Instance Business Critical Tier?;Providing high availability and performance for mission-critical applications;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure SQL Database Managed Instance Business Critical Tier provides high availability and performance for mission-critical applications, ensuring data durability and minimal downtime.
What is the primary benefit of using Azure SQL Database Serverless?;Providing an on-demand, auto-scaling database service that charges only for the resources used;Providing cloud storage solutions;Offering email marketing services;Managing customer interactions;A;Azure SQL Database Serverless provides an on-demand, auto-scaling database service that charges only for the resources used, enabling organizations to optimize costs and performance.
Design an appropriate backup solution for a SQL Server that needs recovery within 2 hours.;Azure Backup;Azure Site Recovery;Active geo-replication;Azure Blob Storage;C;Active geo-replication provides continuous replication and faster recovery, meeting the 2-hour recovery window.
How can you ensure consistent policy application across Azure subscriptions?;Create a management group;Use a resource group;Assign policies individually;Use resource tags;A;Management groups allow policies to be applied consistently across multiple subscriptions.
What is the primary consideration when designing a hybrid solution for Azure and on-premises systems?;Latency and bandwidth;Number of VMs;Azure IoT support;Azure portal UI;A;Network latency and bandwidth are critical to ensure communication and performance in hybrid architectures.
Which Azure service should be used for running large-scale HPC workloads?;Azure Logic Apps;Azure Functions;Azure Virtual Machines;Azure Batch;D;Azure Batch is designed for running large-scale parallel and HPC applications.
What is a key advantage of Azure Kubernetes Service over Azure Container Instances?;Lower cost;Serverless architecture;Orchestration of complex workloads;Smaller footprint;C;Azure Kubernetes Service (AKS) provides powerful orchestration features for complex containerized workloads.
What is the role of Azure App Service in an enterprise application architecture?;Automates backups;Enables DevOps pipelines;Hosts web applications and APIs;Provides VMs for apps;C;Azure App Service is used to host web apps, mobile app backends, and REST APIs.
When should Azure Site Recovery be used in a hybrid architecture?;For non-critical apps;For on-premises app migrations;For maintaining VMs;For cold storage of files;B;Azure Site Recovery ensures business continuity by replicating on-premises VMs to Azure for disaster recovery.
How does Azure Blob Storage benefit unstructured data workloads?;Optimizes network traffic;Supports complex queries;Stores relational databases;Stores binary data like images and videos;D;Azure Blob Storage is used for storing large amounts of unstructured data such as media files.
What is the best way to control cost in Azure Virtual Machine workloads?;Vertical scaling;Reserved instances;Managed disks;Use Azure Functions;B;Reserved instances can significantly reduce cost by pre-purchasing VM capacity at a lower rate.
Which Azure service supports serverless architecture without managing infrastructure?;Azure Virtual Machines;Azure App Service;Azure Functions;Azure Kubernetes Service;C;Azure Functions allows running code in a serverless architecture, handling scaling and infrastructure management automatically.
What is the main advantage of using Azure Resource Manager (ARM) templates?;Reduces storage costs;Automates deployment of resources;Simplifies networking;Improves app security;B;ARM templates automate the deployment and management of resources consistently across environments.
How can Azure Policy help in governance strategies?;Manage access to resources;Ensure compliance with standards;Enable faster networking;Improve cost tracking;B;Azure Policy enforces organizational standards and compliance by automatically evaluating resources.
What disaster recovery solution should be used for Azure SQL databases in case of regional failure?;Backup Vault;Azure Site Recovery;Active geo-replication;Database mirroring;C;Active geo-replication replicates data to a secondary database in a different region, ensuring availability during regional outages.
Which service ensures automatic scaling of containerized workloads?;Azure Virtual Machines;Azure Functions;Azure Kubernetes Service;Azure Batch;C;Azure Kubernetes Service (AKS) supports auto-scaling of containerized workloads, ensuring efficient use of resources.
How can Azure Backup be used for long-term retention of data?;Enables real-time recovery;Automates VM scaling;Supports incremental backups;Stores backup data in Blob storage;C;Azure Backup supports incremental backups for long-term retention, reducing storage costs and improving efficiency.
What is the key benefit of using Azure Logic Apps?;Provides automated workflows;Hosts large-scale applications;Supports real-time data processing;Offers VM-level backups;A;Azure Logic Apps enable the creation and management of automated workflows integrating different apps and services.
Which service should be used to run stateless applications at scale?;Azure Batch;Azure Functions;Azure Virtual Machines;Azure Kubernetes Service;B;Azure Functions is designed for running stateless, event-driven applications at scale with no need to manage the underlying infrastructure.
What is the primary purpose of Azure landing zones?;To host storage accounts;To manage hybrid solutions;To ensure consistent architecture for workloads;To optimize IoT connectivity;C;Azure landing zones help establish a consistent foundation for workloads by aligning with organizational policies and best practices.
How can Azure DevOps pipelines benefit cloud-native development?;Enable monitoring of applications;Simplify API management;Automate code deployment and testing;Provide VMs for testing;C;Azure DevOps pipelines automate the process of code deployment and testing, speeding up development cycles.
What is the advantage of using Azure App Service for mobile app backends?;Optimized for IoT applications;Provides PaaS hosting without managing servers;Supports blockchain integration;Offers serverless architecture;B;Azure App Service provides a fully managed platform for hosting mobile app backends, eliminating the need for server management.
How can Azure Site Recovery improve disaster recovery plans?;Offers near-instant data retrieval;Provides real-time data processing;Replicates VMs to another region;Automatically repairs VM issues;C;Azure Site Recovery replicates VMs and data to another region, ensuring continuity in case of disasters.
Which Azure compute solution is ideal for lift-and-shift migrations?;Azure Functions;Azure Kubernetes Service;Azure Virtual Machines;Azure Logic Apps;C;Azure Virtual Machines allow you to migrate on-premises workloads to Azure with minimal changes, making them ideal for lift-and-shift scenarios.
What is a key use case for Azure Container Instances?;To host web apps;To deploy highly secure VMs;To run containerized workloads quickly;To automate backups;C;Azure Container Instances allows running containerized applications without managing the underlying infrastructure, making it ideal for quick deployments.
How can you control which users have access to multiple Azure subscriptions?;Using management groups;Using resource tags;Using subscription filters;Using Azure IoT Hub;A;Management groups allow for role assignments and access management across multiple subscriptions.
What should you use to ensure high availability across Azure regions?;Azure DevOps;Azure Policy;Geo-redundant storage;Azure Blob storage;C;Geo-redundant storage ensures data availability across multiple Azure regions, protecting against regional failures.
What is a key feature of Azure Kubernetes Service (AKS)?;Runs large-scale HPC applications;Orchestrates containerized applications;Manages VM-based apps;Provides serverless architecture;B;Azure Kubernetes Service (AKS) provides powerful orchestration for containerized applications, allowing automatic scaling and management.
How does Azure App Service support DevOps?;Enables CI/CD pipelines;Provides reserved VMs;Reduces IoT traffic;Simplifies network security;A;Azure App Service integrates with DevOps tools to enable continuous integration and delivery (CI/CD) for applications.
What should you use to enforce organizational compliance across subscriptions?;Azure DevOps;Azure Policy;Azure IoT Hub;Resource tags;B;Azure Policy ensures compliance by enforcing organizational rules and regulations across Azure resources.
How can Azure Logic Apps be used in a hybrid cloud architecture?;To run VM backups;To manage networking;To automate workflows across on-prem and cloud services;To provide VM scaling;C;Azure Logic Apps enable workflow automation that integrates on-premises and cloud-based applications and services.
What is a key benefit of using Azure Functions in a hybrid cloud architecture?;Provides IoT management;Automates VM backups;Runs code serverlessly;Hosts mobile apps;C;Azure Functions allows running code in a serverless environment, simplifying infrastructure management in hybrid cloud architectures.
What disaster recovery solution should be implemented for Azure SQL Database?;Azure Backup;Azure Site Recovery;Active geo-replication;Azure Blob storage;C;Active geo-replication provides a secondary database in a different region, ensuring minimal downtime and data loss in disaster recovery scenarios.
How can Azure ExpressRoute improve performance in a hybrid cloud solution?;It offers faster disaster recovery;It provides a private connection to Azure;It manages virtual machines;It automates security updates;B;Azure ExpressRoute provides a private, dedicated connection between on-premises infrastructure and Azure, reducing latency and improving performance.
Which Azure storage solution provides the lowest cost option for infrequently accessed data?;Azure Blob Storage (Hot);Azure Blob Storage (Cool);Azure Blob Storage (Archive);Azure Disk Storage;C;Azure Blob Storage (Archive) is the most cost-effective option for long-term storage of data that is infrequently accessed.
What is a benefit of Azure Availability Zones in terms of fault tolerance?;It improves network speed;It automates virtual machine deployment;It ensures high availability by distributing resources across zones;It enables serverless computing;C;Azure Availability Zones ensure fault tolerance by spreading resources across physically separated locations within an Azure region.
Which Azure service can be used to create and manage microservices-based applications?;Azure App Service;Azure Kubernetes Service (AKS);Azure Functions;Azure Logic Apps;B;Azure Kubernetes Service (AKS) is designed to manage and orchestrate containerized microservices-based applications.
How can you enforce Azure tagging policies to improve resource management?;Azure Backup;Azure Tags;Azure Policy;Azure DevOps;C;Azure Policy can enforce tagging policies to ensure all resources are properly tagged for better management and governance.
What is the key advantage of Azure Load Balancer in an infrastructure solution?;Increases storage capacity;Ensures high availability by distributing traffic;Automates data encryption;Improves DevOps pipeline;B;Azure Load Balancer distributes incoming traffic across multiple resources, ensuring high availability and reliability.
How can Azure Bastion improve the security of virtual machines?;By enabling faster network traffic;By providing a secure, browser-based RDP/SSH connection;By reducing storage costs;By managing IoT devices;B;Azure Bastion provides a secure, browser-based RDP and SSH connection to VMs, reducing the need to expose VMs to the public internet.
Which Azure service allows for continuous monitoring of cloud resources to detect security issues?;Azure Monitor;Azure Blob Storage;Azure Policy;Azure Functions;A;Azure Monitor provides continuous monitoring and alerting for Azure resources, helping to detect security issues in real-time.
What is the purpose of Azure Traffic Manager in a global architecture?;Improves network performance by caching;Ensures global DNS load balancing;Manages storage accounts;Provides disaster recovery;B;Azure Traffic Manager ensures DNS load balancing across multiple regions, improving performance and availability of globally distributed services.
What is the key benefit of using Azure Private Link?;Enables VMs to scale automatically;Offers secure access to Azure services over a private connection;Increases backup speed;Improves API management;B;Azure Private Link allows you to access Azure services over a private network, reducing the exposure to the public internet and enhancing security.
What is the best use case for Azure Disk Encryption?;Encrypting files stored in Azure Blob Storage;Encrypting virtual machine disks;Encrypting Azure App Service;Encrypting SQL databases;B;Azure Disk Encryption is specifically used to encrypt the OS and data disks of virtual machines to protect data at rest.
How does Azure Active Directory (AD) B2C improve customer experience?;It simplifies user management for internal users;It automates network management;It provides identity management and secure sign-in for external customers;It increases VM scalability;C;Azure AD B2C allows organizations to manage external customers' identities, providing secure sign-in and authentication for web and mobile apps.
Which Azure service should you use to manage key encryption keys?;Azure Blob Storage;Azure Key Vault;Azure App Service;Azure IoT Hub;B;Azure Key Vault is designed to manage encryption keys, certificates, and secrets used by cloud applications.
What is a key advantage of using Azure Service Bus in a messaging solution?;It automates storage backups;It manages API access;It ensures reliable message delivery between services;It supports direct device-to-cloud communication;C;Azure Service Bus provides reliable messaging services for inter-application communication, ensuring that messages are delivered even in case of service disruptions.
How does Azure Security Center assist in securing cloud workloads?;Provides storage redundancy;Manages API connections;Offers security recommendations and continuous monitoring;Provides automated VM scaling;C;Azure Security Center offers security recommendations and continuous monitoring of workloads to improve overall security posture.
What is the primary use of Azure API Management?;To manage virtual machines;To store large datasets;To publish and manage APIs;To automate DevOps pipelines;C;Azure API Management is used to publish, secure, and manage APIs, ensuring reliable and secure communication between services.
How does Azure Application Gateway improve security for web applications?;It encrypts data in transit;It provides web application firewall (WAF) capabilities;It enables faster virtual machine deployment;It simplifies storage management;B;Azure Application Gateway includes web application firewall (WAF) features to protect against common web vulnerabilities such as SQL injection and cross-site scripting.
Which Azure service would you recommend for a scalable, serverless event-processing solution?;Azure Kubernetes Service;Azure Functions;Azure Blob Storage;Azure Virtual Machines;B;Azure Functions provides a scalable, serverless event-processing environment, ideal for building event-driven architectures.
How can Azure Multi-Factor Authentication (MFA) enhance security in hybrid architectures?;By automating data backup;By reducing network latency;By adding an additional layer of security for user sign-ins;By providing network load balancing;C;Azure MFA adds an additional layer of security by requiring users to provide multiple forms of verification before granting access.
What is the role of Azure AD Conditional Access in securing cloud environments?;Enforces access policies based on conditions like location, device, and user risk;Provides API management;Enables IoT device monitoring;Improves data backup;A;Azure AD Conditional Access enforces access policies based on conditions such as user risk, location, and device compliance, improving security.
Which service is best for handling real-time analytics and large data streams in Azure?;Azure Functions;Azure App Service;Azure Stream Analytics;Azure SQL Database;C;Azure Stream Analytics processes real-time data streams from sources such as IoT devices or logs, providing real-time insights and analytics.
What is the main advantage of using Azure Storage Accounts for unstructured data?;Provides built-in SQL query support;Offers geo-redundancy and scalability;Supports real-time data processing;Provides integrated DevOps tools;B;Azure Storage Accounts offer geo-redundancy and scalability for storing large volumes of unstructured data such as documents, images, and videos.
Which Azure solution should be used for enterprise-level identity management?;Azure Site Recovery;Azure Functions;Azure Active Directory;Azure Logic Apps;C;Azure Active Directory (Azure AD) is the enterprise solution for identity and access management, enabling secure sign-in and access control for both on-premises and cloud environments.
How does Azure Policy help in ensuring compliance?;Enables disaster recovery;Offers automated code deployment;Evaluates resources to ensure they meet organizational standards;Provides real-time data streaming;C;Azure Policy helps ensure that resources comply with organizational standards and policies by continuously evaluating resources and applying corrective actions.
What Azure service can be used for scaling web applications automatically based on demand?;Azure Virtual Machines;Azure Kubernetes Service;Azure App Service;Azure Logic Apps;C;Azure App Service provides built-in auto-scaling, allowing web applications to scale automatically based on demand.
What is the best Azure service for managing IoT devices and data?;Azure Kubernetes Service;Azure App Service;Azure IoT Hub;Azure SQL Database;C;Azure IoT Hub is designed to manage and monitor IoT devices, providing secure and reliable communication between devices and the cloud.
How does Azure Traffic Manager ensure availability of global applications?;Encrypts network traffic;Provides load balancing across multiple regions;Automates data replication;Manages access to IoT devices;B;Azure Traffic Manager provides DNS-based load balancing across multiple regions, ensuring high availability and optimal performance for global applications.
Which Azure service enables communication between decoupled microservices?;Azure Virtual Machines;Azure Kubernetes Service;Azure Service Bus;Azure Functions;C;Azure Service Bus is a fully managed messaging service that enables communication between decoupled applications and microservices.
How can Azure Advisor help optimize your Azure workloads?;By scaling virtual machines;By providing personalized best practices and recommendations;By automating code deployment;By managing API connections;B;Azure Advisor provides personalized best practices and recommendations to help optimize your Azure workloads for performance, security, and cost.
What Azure solution should be used for serverless orchestration of tasks and workflows?;Azure Logic Apps;Azure Virtual Machines;Azure Kubernetes Service;Azure API Management;A;Azure Logic Apps provides serverless orchestration of tasks and workflows, enabling integration between various apps and services.
Which Azure service can be used for real-time monitoring of infrastructure and applications?;Azure Stream Analytics;Azure Monitor;Azure Virtual Machines;Azure Blob Storage;B;Azure Monitor provides real-time monitoring of infrastructure and applications, helping to identify and resolve issues before they impact performance.
How can Azure Active Directory (AD) improve security in a hybrid cloud environment?;By automating disaster recovery;By providing identity management and access control;By scaling IoT devices;By optimizing storage costs;B;Azure AD improves security in hybrid cloud environments by managing identities and access control for both on-premises and cloud applications.
What is the main benefit of using Azure Virtual Network (VNet) Peering?;Allows secure communication between VNets;Increases backup speed;Improves API management;Reduces storage costs;A;Azure Virtual Network (VNet) Peering enables secure communication between VNets in the same or different Azure regions.
How does Azure Site Recovery support disaster recovery?;Provides real-time monitoring of apps;Replicates workloads and VMs to another Azure region;Automates VM scaling;Manages IoT devices;B;Azure Site Recovery replicates workloads and virtual machines to another Azure region, ensuring minimal downtime and data loss in the event of a disaster.
How does Azure Key Vault enhance security in cloud applications?;Automates disaster recovery;Provides storage for large datasets;Manages encryption keys, secrets, and certificates;Hosts web apps;C;Azure Key Vault is used to store and manage encryption keys, secrets, and certificates, ensuring secure access to sensitive information in cloud applications.
Network Security Group rules are processed in which order?;Rules are processed based on source or destination first less specific source or destination values are processed first;Rules are processed based on source or destination first more specific source or destination values are processed first;Rules with lower priority numbers are processed first. For example 100 is processed before 110;Rules with higher priority numbers are processed first. For example 110 is processed before 100;C;Network security group rules are processed in priority order. Higher numbers are processed after lower numbers.
You are planning to configure object replication for block blobs. Which of the following is not a valid requirement?;The source and destination accounts must be either general-purpose v2 or premium block blob accounts.;You must be assigned the Owner role on the storage account or higher in the scope.;Blob versioning is enabled for both the source and destination account.;The blob change feed must be enabled for the source account.;Blob versioning is enabled for both the source and destination account.; The blob change feed must be enabled for the source account to support object replication. Reference: Azure Blob Storage Replication Policies - https://learn.microsoft.com/azure/storage/blobs/object-replication-overview
Azure storage supports multiple storage tiers for Blob storage. Which of the following is NOT a valid storage tier?;Cold;Archive;Glacier;Cool;Glacier; Glacier is not a valid Azure storage tier.
Which of the following is required to deploy Azure Bastion?;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger;A subnet named AzureBastion with a subnet mask of /26 or smaller;Azure Firewall with the Premium SKU;Azure Firewall with the Standard SKU;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger is required when you deploy Azure Bastion. Reference: Deploy Azure Bastion - https://learn.microsoft.com/azure/bastion/tutorial-create-host-portal#prerequisites; A subnet named AzureBastionSubnet with a subnet mask of /26 or larger
You plan to delegate access to a storage account using a shared access signature (SAS). You need to set an expiration time that you may need to extend. Which of the following do you configure?;A storage account access key;An expiration policy for shared access signatures;A stored access policy;A user delegation SAS;A stored access policy provides additional control over shared access signatures. Reference: Create a stored access policy - https://learn.microsoft.com/azure/storage/storage-shared-access-signature-policies; A stored access policy
You have an Azure Web App running on a Standard Azure App Service Plan. You currently have five staging slots that are being used to test various new features. You need to create a new deployment slot. What should you do first?;Scale up your App Service plan.;Scale out your App Service plan.;Modify the App Service plan, and set the maximum deployment slots to at least 6.;Redeploy your App Service plan with a new pricing tier;A;You need to scale up your App Service plan for access to additional staging slots.
You need to find underutilized virtual machines in your Azure subscription. Which tool can you use?;Azure Advisor;Azure Monitor;Activity logs;Cost Management;A;Azure Advisor offers actionable recommendations to help you optimize your Azure resources.
Which of the following is NOT a valid requirement to configure and test self-service password reset for cloud-only users?;An account with Global Administrator or Authentication Policy Administrator privileges;A Microsoft Entra tenant with at least a Microsoft Entra ID Free license;A Microsoft Entra tenant with at least a Microsoft Entra ID P1 license;A non-administrator user account.; A non-administrator user account; Admins are always enabled for self-service password reset.
You create a custom Azure policy definition and save it to a subscription named Sub1. Which of the following scopes can you assign the policy?;Only Resource Groups in Sub1.;Anywhere in the management hierarchy.;Resource Groups in Sub1 and Sub1.;Only Sub1.;Resources must be within the resource hierarchy of the definition location to target for assignment.; The policy can be assigned anywhere in the management hierarchy.
Which Microsoft-native tools can be used to deploy resources to Azure?;ARM templates, Bicep files, Azure PowerShell, and Azure CLI;ARM templates, Bicep files, Pulumi, Saltstack;Terraform and ARM templates;Azure DevOps only;A;ARM templates, Bicep files, Azure PowerShell, and Azure CLI are Microsoft's native tools for deploying and managing Azure resources. These tools allow automation of infrastructure provisioning using Infrastructure-as-Code (IaC) methodologies. ARM templates use JSON, while Bicep is a more user-friendly abstraction layer over ARM templates.
Which of the following scopes can you assign Azure (RBAC) roles?;Entra Tenants, administrative units or individual Entra objects like applications.;Management groups, subscriptions, resource groups, and individual resources.;Management groups, subscriptions, and resource groups.;Entra Tenants, administrative units, individual Entra objects like applications, management groups, subscriptions, resource groups, and individual resources.;B;Azure RBAC role assignments can be scoped to management groups, subscriptions, resource groups, and individual resources only (but that's enough inheritance structure).
You need to ensure that all public network access to an Azure storage account is disabled. What should you configure?;Private endpoint connections;Microsoft Defender for Cloud;Firewalls and virtual networks;Containers;You can configure the firewalls and virtual networks networking settings on the storage account to prevent public network access. Reference: Configure Azure Storage firewalls and virtual networks - https://learn.microsoft.com/azure/storage/common/storage-network-security?tabs=azure-portal; Firewalls and virtual networks
You have been asked to ensure that all Azure resources associated with a Human Resources (HR) workload are marked as confidential. What should you use?;Microsoft Entra groups;Administrative Units;Tags;Resource locks;C;Tags are key-value pairs that help you identify resources based on data to your organization.
You need to provide secure delegated access to a blob in an Azure storage account. Which of the following should you use?;A stored access policy;A storage account access key;A shared access signature;An Azure file share;Shared access signatures can be used to provide secure delegated access to Azure storage accounts. Reference: Grant limited access to Azure Storage resources using shared access signatures - https://learn.microsoft.com/azure/storage/common/storage-sas-overview; A shared access signature
Which of the following statements is NOT true about resource locks?;You can lock an Azure subscription, resource group, or individual resource.;When you apply a lock at a scope, all resources within that scope inherit the same lock.;Only the Owner, User Access Administrator, and Contributor roles can create and delete management locks.;Data plane operations like data transactions are not impacted by resource locks.;C;Only the Owner and the User Access Administrator roles can create and delete management locks. Contributor cannot create and delete management locks.
Which of the following statements must you always consider when you define a custom Azure Policy?;The policy logic and its enforcement mechanism;Policy Assignment Scope It is decided at the resource level;Policy Definition Attributes These help to understand the policies applicability;All of the above;D;When defining custom Azure Policies consider: 1) Policy Logic & Enforcement: • Evaluation criteria and conditions • Resource property assessment • Effect selection (Deny/Audit/Modify) • Impact analysis on operations 2) Assignment Scope Considerations: • Management group implications • Subscription-level effects • Resource group boundaries • Individual resource targeting 3) Definition Attributes: • Policy parameters • API versions • Resource provider compatibility • Exception handling 4) Implementation Strategy: • Testing methodology • Deployment phases • Monitoring setup • Remediation planning 5) Business Alignment: • Compliance requirements • Cost implications • Security objectives • Operational impact 6) Technical Best Practices: • Use parameterization • Implement proper testing • Document thoroughly • Regular review cycles.
You need to design an Azure backup solution. Which strategy should you implement for data protection?;Georeliant backup storage solutions;Fast recovery time objectives and recovery point objectives;Backup to a secondary Azure region;Full archive and restore capability;C;The correct strategy for Azure backup solutions, especially for disaster recovery and business continuity, is to implement a backup to a secondary Azure region. Azure offers geo-redundant storage (GRS) and read-access geo-redundant storage (RA-GRS) that ensure your data is replicated in a secondary Azure region, providing robust protection against data loss. This strategy ensures cross-region replication of data, allowing recovery from a disaster affecting the primary region. The key elements include: - **Geo-Redundancy**: Data is copied to a secondary region, providing high availability and durability. - **Recovery Point Objective (RPO)**: Defines the maximum acceptable amount of data loss measured in time. With a secondary region backup, the RPO can be minimized to minutes. - **Recovery Time Objective (RTO)**: Defines how quickly services can be restored. Azure backup solutions minimize RTO by leveraging fast recovery times. - **Encryption and Compliance**: Data is encrypted both at rest and in transit, and meets various regulatory requirements for compliance. This approach provides a robust disaster recovery strategy, ensuring business continuity in the event of regional outages or failures. More details can be found in the official documentation: https://learn.microsoft.com/en-us/azure/backup/backup-overview
Which of the following tools can help you manage hardware and software requirements for the Microsoft Azure integration?;Azure Advisor;Azure Monitor;Cost Management;Azure Policy;A;Azure Advisor provides recommendations that can help you optimize your Azure resources across key areas such as cost, performance, security, and availability. The tool analyzes your Azure environment and suggests actions to improve efficiency and reduce costs. It provides real-time insights, making it easier to manage infrastructure while ensuring best practices are followed. Azure Monitor, Cost Management, and Azure Policy serve different purposes (monitoring, cost tracking, and policy enforcement respectively) and are not focused on resource optimization.
How does Azure Policy enforce compliance?;Policies check resources against defined rules and parameters.;Policies apply restrictions to user roles.;Policies only audit resource compliance.;Policies provide no enforcement capabilities.;A;Azure Policy enforces compliance by evaluating resources in real-time against defined rules and parameters, which are specified in policies. These policies can be applied across subscriptions and resource groups to ensure that all resources meet the defined standards. Azure Policy offers several enforcement mechanisms: - **Audit**: Policies can audit resources and configurations without enforcing changes but can trigger alerts when non-compliant resources are detected. - **Deny**: Prevents the creation of resources that do not meet policy rules. - **Append**: Adds additional configuration to a resource that does not meet a specific policy requirement. - **Modify**: Changes the resource configuration to bring it into compliance automatically. Azure Policy continuously evaluates resource compliance and reports on compliance statuses through a centralized dashboard, allowing organizations to monitor and enforce compliance across their environments. For detailed information, you can refer to the official documentation: https://learn.microsoft.com/en-us/azure/governance/policy/overview
If you want to deploy an Azure VM that provides high availability, which storage redundancy option below should you choose?;Locally redundant storage (LRS);Zone-redundant storage (ZRS);Geo-redundant storage (GRS);Read-access geo-redundant storage (RA-GRS);B;Zone-redundant storage (ZRS) is the recommended storage redundancy option for providing high availability within a region. ZRS replicates your data synchronously across three physically separate availability zones in a region, ensuring that your virtual machine can continue to function even if one datacenter goes down. Unlike LRS, which only replicates within a single datacenter, and GRS/RA-GRS, which focus more on geo-redundancy for disaster recovery, ZRS is designed specifically for intra-region high availability. For more details, refer to the official Microsoft documentation: https://learn.microsoft.com/en-us/azure/storage/common/storage-redundancy#zone-redundant-storage
You implement Azure App Service where you require a custom domain and SSL for your web app. Which pricing tier should you select?;Free plan;Standard plan;Basic plan;Premium plan;B;The Standard plan is required for using custom domains and SSL certificates in Azure App Service. The Free and Basic plans do not support custom domains or SSL bindings. Standard and Premium plans both provide support for custom domains, SSL, and scaling options. The Standard plan offers additional features such as traffic management and autoscaling, making it ideal for production workloads that require these custom features. For further insights, refer to the Microsoft Azure App Service pricing guide: https://azure.microsoft.com/en-us/pricing/details/app-service/windows/
Network Security Group rules are processed in which order?;Rules are processed based on source or destination first less specific source or destination values are processed first;Rules are processed based on source or destination first more specific source or destination values are processed first;Rules with lower priority numbers are processed first. For example 100 is processed before 110;Rules with higher priority numbers are processed first. For example 110 is processed before 100;C;Network security group rules are processed in priority order. Higher numbers are processed after lower numbers.
You are planning to configure object replication for block blobs. Which of the following is not a valid requirement?;The source and destination accounts must be either general-purpose v2 or premium block blob accounts.;You must be assigned the Owner role on the storage account or higher in the scope.;Blob versioning is enabled for both the source and destination account.;The blob change feed must be enabled for the source account.;B;The blob change feed must be enabled for the source account, but it does not need to be enabled on the destination account.
Azure storage supports multiple storage tiers for Blob storage. Which of the following is NOT a valid storage tier?;Cold;Archive;Glacier;Cool;C;Glacier is not a valid Azure storage tier.
Which of the following is required to deploy Azure Bastion?;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger;A subnet named AzureBastion with a subnet mask of /26 or smaller;Azure Firewall with the Premium SKU;Azure Firewall with the Standard SKU;A;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger is required when you deploy Azure Bastion.
You plan to delegate access to a storage account using a shared access signature (SAS). You need to set an expiration time that you may need to extend. Which of the following do you configure?;A storage account access key;An expiration policy for shared access signatures;A stored access policy;A user delegation SAS;C;A stored access policy provides additional server side control over shared access signatures (SAS), including the ability to change the start time, expiry time, or permissions.
You have an Azure Web App running on a Standard Azure App Service Plan. You currently have five staging slots that are being used to test various new features. You need to create a new deployment slot. What should you do first?;Scale up your App Service plan.;Scale out your App Service plan.;Modify the App Service plan, and set the maximum deployment slots to at least 6.;Redeploy your App Service plan with a new pricing tier.;A;The Standard App Service plan provides five staging slots. Your App Service plan can be scaled up and down at any time. When you scale up your App Service plan, you get access to the additional features of that plan.
You need to find underutilized virtual machines in your Azure subscription. Which tool can you use?;Azure Advisor;Azure Monitor;Activity logs;Cost Management;A;Azure Advisor offers actionable recommendations to help you optimize your Azure resources across the Well-architected pillars, one of which is cost optimization.
Which of the following is NOT a valid requirement to configure and test self-service password reset for cloud-only users?;An account with Global Administrator or Authentication Policy Administrator privileges;A Microsoft Entra tenant with at least a Microsoft Entra ID Free license;A Microsoft Entra tenant with at least a Microsoft Entra ID P1 license;A non-administrator user account.;C;Microsoft Entra ID P1 is required for self-service password reset/change/unlock and on-premises write-back.
You have an application that is accessing a storage account using storage account access keys. The application is configured to use key 1. You plan to rotate the storage account access keys. Which steps should you take and in which order?;Update the application to use key 2, regenerate key 1, update the application to use key 1, and then regenerate key 2.;Regenerate key 1, and update the application to use the new key.;Update the application to use key 2, regenerate key 1, and then update the application to use key 1.;Regenerate key 2, and update the application to use key 2.;A;This series of steps would successfully rotate the storage account access keys.
Which of the following scopes can you assign Azure (RBAC) roles?;Entra Tenants, administrative units or individual Entra objects like applications.;Management groups, subscriptions, resource groups, and individual resources.;Management groups, subscriptions, and resource groups.;Entra Tenants, administrative units, individual Entra objects like applications, management groups, subscriptions, resource groups, and individual resources.;B;Azure RBAC role assignments can be scoped to management groups, subscriptions, resource groups, and individual resources.
You need to ensure that all public network access to an Azure storage account is disabled. What should you configure?;Private endpoint connections;Microsoft Defender for Cloud;Firewalls and virtual networks;Containers;C;You can configure the firewalls and virtual networks networking settings on the storage account to prevent public network access.
When managing Microsoft Entra and Azure, there are two types of roles that can be used to grant privileges to manage those resources. What are the two role types?;Privileged roles, Standard roles;Azure AD roles, Microsoft Entra roles;User roles, machine roles;Microsoft Entra roles, Azure roles;D;Microsoft Entra roles grant privileges within the Microsoft Entra tenant. Azure roles grant privileges within Azure subscriptions and management groups.
What is the maximum number of regions an Azure virtual network can span?;One;Two;Three;None;A;Virtual networks are deployed to a single region.
You have a Windows Azure VM, and you wish to directly backup only the following folders on the VM: C:\\FinanceApp and E:\\Database. You are not using a backup server. Which agent should you deploy to the virtual machine?;None, use the Azure VM agent.;Install the System Center Data Protection Manager (DPM) protection agent.;Microsoft Azure Backup Server (MABS) protection agent.;The Microsoft Azure Recovery Services (MARS) agent.;D;The Microsoft Azure Recovery Services (MARS) agent can be used to back up specific files, folders, or volumes on Windows Azure VMs.
Azure storage supports multiple redundancy options. Which of the following is NOT a valid Azure storage redundancy option?;Read-only Geo-zone-redundant Storage (RA-GZRS);Zone-redundant Storage (ZRS);Locally-geo-redundant Storage (LGRS);Locally-redundant Storage (LRS);C;Locally-geo-redundant Storage (LGRS) is not a valid Azure storage redundancy option.
You need to provide secure delegated access to a blob in an Azure storage account. Which of the following should you use?;A stored access policy;A storage account access key;A shared access signature;An Azure file share;C;Shared access signatures can be used to provide secure delegated access to Azure storage accounts.
Which of the following statements is NOT true about resource locks?;You can lock an Azure subscription, resource group, or individual resource.;When you apply a lock at a scope, all resources within that scope inherit the same lock.;Only the Owner, User Access Administrator, and Contributor roles can create and delete management locks.;Data plane operations like data transactions are not impacted by resource locks.;C;Only the Owner and the User Access Administrator roles can create and delete management locks. Contributor cannot create and delete management locks.
You create a custom Azure policy definition and save it to a subscription named Sub1. Which of the following scopes can you assign the policy?;Only Resource Groups in Sub1.;Anywhere in the management hierarchy.;Resource Groups in Sub1 and Sub1.;Only Sub1.;C;Resources must be within the resource hierarchy of the definition location to target for assignment. Both Resource Groups within Sub1 and Sub1 can be assigned the policy.
For which of the following storage accounts can you configure lifecycle management policies?;Premium block blob, and Blob Storage accounts.;Premium file share only.;General-purpose v2, premium block blob, and Blob Storage accounts.;General-purpose v2 only.;C;Lifecycle management policies are supported for block blobs and append blobs only. The account must be a general-purpose v2, premium block blob, or Blob Storage account.
Which of the following statements about resource groups is NOT true?;Resource groups can be nested.;Resource groups contain Azure resources.;A resource can only be a member of a single resource group.;Many resources can be moved between resource groups.;A;Resource groups cannot be nested.
Which Microsoft-native tools can be used to deploy resources to Azure?;ARM templates, Bicep files, Azure PowerShell, and Azure CLI;ARM templates, Bicep files, Pulumi, Saltstack;Terraform and ARM templates;Azure DevOps only;A;ARM templates, Bicep files, Azure PowerShell, and Azure CLI are Microsoft's native tools for deploying and managing Azure resources. These tools allow automation of infrastructure provisioning using Infrastructure-as-Code (IaC) methodologies. ARM templates use JSON, while Bicep is a more user-friendly abstraction layer over ARM templates.
A user named User1 has been assigned the Contributor role at the scope of a subscription named Sub1. User1 also has the Reader role assignment on a subscription named Sub2. User1 has also been assigned the Owner role at the scope of a resource group named RG1 within Sub1. No other role assignments exist for User1. Which of the following actions can the user perform?;Delete all resources within Sub2;Create resources within Sub2;Assign roles on RG1;Assign roles on Sub1;C;User1 can assign roles on RG1 using their Owner role assignment at that scope.
You have been asked to scale out a virtual machine deployment. What should you do?;Distribute the existing virtual machines to multiple regions;Increase the size of the virtual machine;Increase the number of virtual machine instances deployed;Increase the number of disks attached to the virtual machine;C;Scaling out involves deploying instances of an existing resource.
You have four virtual networks deployed. The virtual networks are deployed in the following regions: Australia East, South Central US, Southeast Asia, and West US. All virtual networks are fully peered. You are deploying Azure Bastion. How many Bastion hosts must you deploy to manage virtual machines deployed in all virtual networks?;3;4;1;2;C;Azure Bastion and VNet peering can be used together. When VNet peering is configured, you don't have to deploy Azure Bastion in each peered VNet.
You need to provide access to an Azure file share using Server Message Block (SMB). You have been asked which authentication methods are supported. Which of the following should you NOT recommend?;Shared access signatures for SMB;Microsoft Entra Kerberos for hybrid identities;Active Directory Domain Services (AD DS) authentication;Microsoft Entra Domain Services authentication;A;Shared access signatures for SMB is not a valid authentication option.
Which of the following resources is used to route the flow of network traffic to specific network destinations?;Network security groups;Azure firewall;ExpressRoute;User-defined routes;D;User-defined routes can be used to direct the flow of network traffic to specific network destinations.
Which of the following are valid membership types for Microsoft Entra groups?;Hybrid, guest, combined;Assigned, generated;Assigned, dynamic;Classic, Entra;C;Membership to Microsoft Entra groups can be either assigned or dynamic.
Which of the following statements is true about Entra ID licenses?;Entra ID licenses can be assigned to individual users or groups, but not both.;Entra ID licenses can be assigned to both individual users or groups.;Entra ID licenses can be assigned to individual users only.;Entra ID licenses can be assigned to groups only.;B;Entra ID licenses can be assigned to both users and groups as required.
Which of the following is NOT a valid Azure virtual machine disk type?;Operating System (OS);Data;Log;Temporary;C;Log is not a valid disk type.
Network Security Groups (NSGs) can be associated with which of the following Azure resources?;Network interfaces and subnets;Public and private IP addresses;Subnets and endpoints;Network interfaces and service endpoints;A;Network Security Groups (NSGs) can be associated with both network interfaces and subnets.
You have been asked to ensure that all Azure resources associated with a Human Resources (HR) workload are marked as confidential. What should you use?;Microsoft Entra groups;Administrative Units;Tags;Resource locks;C;Tags are key-value pairs that help you identify resources based on data to your organization.
You have been asked to allow 100 external users to access resources secured by your Microsoft Entra Tenant, including Microsoft 365. You create a CSV file with a list of email addresses and redirection URLs. In the Microsoft Entra Portal, which step should you take next?;From the All users menu, select New guest and then select Import.;From the All users menu, select Bulk operations and then select Bulk invite.;From the All users menu, select Bulk operations and then select Bulk create.;From the All guests menu, select Import guests.;B;You should select Bulk operations and then bulk invite guests from the All users menu.
When creating an Entra ID group, which group types can you create?;User, Device, Application;Security, Distribution;Security, Microsoft 365;User, Device;C;Microsoft Entra ID supports two group types, Security, and Microsoft 365.
Azure Storage provides four storage services. What are they?;Blobs, messages, databases, and files;Containers, tables, queues, and files;Blobs, tables, queues, and files;Disks, tables, queues, and files;C;Azure storage provides unstructured blob storage, non-relational table storage, message storage with queues, and network share file storage with files.
You have an existing storage account. You configure customer-managed keys for the account. Which storage services are encrypted using the customer-managed keys?;Blob storage only;Blob, table, queue, and file storage;Blob, queue, and file storage;Blob, and file storage;B;Data stored in queue and table storage isn't automatically protected by a customer-managed key when customer-managed keys are enabled for an existing storage account. You must configure these services to be included in this protection when you create the storage account.
Which of the following is NOT a valid requirement to configure and test self-service password reset for cloud-only users?;An account with Global Administrator or Authentication Policy Administrator privileges;A Microsoft Entra tenant with at least a Microsoft Entra ID Free license;A Microsoft Entra tenant with at least a Microsoft Entra ID P1 license;A non-administrator user account.;C;Microsoft Entra ID P1 is required for self-service password reset/change/unlock and on-premises write-back.
When managing Microsoft Entra and Azure, there are two types of roles that can be used to grant privileges to manage those resources. What are the two role types?;Privileged roles, Standard roles;Azure AD roles, Microsoft Entra roles;User roles, machine roles;Microsoft Entra roles, Azure roles;D;Microsoft Entra roles grant privileges within the Microsoft Entra tenant. Azure roles grant privileges within Azure subscriptions and management groups.
Which of the following scopes can you assign Azure (RBAC) roles?;Entra Tenants, administrative units or individual Entra objects like applications.;Management groups, subscriptions, resource groups, and individual resources.;Management groups, subscriptions, and resource groups.;Entra Tenants, administrative units, individual Entra objects like applications, management groups, subscriptions, resource groups, and individual resources.;B;Azure RBAC role assignments can be scoped to management groups, subscriptions, resource groups, and individual resources.
Which of the following statements is NOT true about resource locks?;You can lock an Azure subscription, resource group, or individual resource.;When you apply a lock at a scope, all resources within that scope inherit the same lock.;Only the Owner, User Access Administrator, and Contributor roles can create and delete management locks.;Data plane operations like data transactions are not impacted by resource locks.;C;Only the Owner and the User Access Administrator roles can create and delete management locks. Contributor cannot create and delete management locks.
You create a custom Azure policy definition and save it to a subscription named Sub1. Which of the following scopes can you assign the policy?;Only Resource Groups in Sub1.;Anywhere in the management hierarchy.;Resource Groups in Sub1 and Sub1.;Only Sub1.;C;Resources must be within the resource hierarchy of the definition location to target for assignment. Both Resource Groups within Sub1 and Sub1 can be assigned the policy.
Which of the following statements is true about Entra ID licenses?;Entra ID licenses can be assigned to individual users or groups, but not both.;Entra ID licenses can be assigned to both individual users or groups.;Entra ID licenses can be assigned to individual users only.;Entra ID licenses can be assigned to groups only.;B;Entra ID licenses can be assigned to both users and groups as required.
You have been asked to ensure that all Azure resources associated with a Human Resources (HR) workload are marked as confidential. What should you use?;Microsoft Entra groups;Administrative Units;Tags;Resource locks;C;Tags are key-value pairs that help you identify resources based on data to your organization.
You have been asked to allow 100 external users to access resources secured by your Microsoft Entra Tenant, including Microsoft 365. You create a CSV file with a list of email addresses and redirection URLs. In the Microsoft Entra Portal, which step should you take next?;From the All users menu, select New guest and then select Import.;From the All users menu, select Bulk operations and then select Bulk invite.;From the All users menu, select Bulk operations and then select Bulk create.;From the All guests menu, select Import guests.;B;You should select Bulk operations and then bulk invite guests from the All users menu.
When creating an Entra ID group, which group types can you create?;User, Device, Application;Security, Distribution;Security, Microsoft 365;User, Device;C;Microsoft Entra ID supports two group types, Security, and Microsoft 365.
Which of the following resources is used to route the flow of network traffic to specific network destinations?;Network security groups;Azure firewall;ExpressRoute;User-defined routes;D;User-defined routes can be used to direct the flow of network traffic to specific network destinations.
Which of the following are valid membership types for Microsoft Entra groups?;Hybrid, guest, combined;Assigned, generated;Assigned, dynamic;Classic, Entra;C;Membership to Microsoft Entra groups can be either assigned or dynamic.
Which of the following is NOT a valid Azure storage redundancy option?;Read-only Geo-zone-redundant Storage (RA-GZRS);Zone-redundant Storage (ZRS);Locally-geo-redundant Storage (LGRS);Locally-redundant Storage (LRS);C;Locally-geo-redundant Storage (LGRS) is not a valid Azure storage redundancy option.
You need to provide secure delegated access to a blob in an Azure storage account. Which of the following should you use?;A stored access policy;A storage account access key;A shared access signature;An Azure file share;C;Shared access signatures can be used to provide secure delegated access to Azure storage accounts.
For which of the following storage accounts can you configure lifecycle management policies?;Premium block blob, and Blob Storage accounts.;Premium file share only.;General-purpose v2, premium block blob, and Blob Storage accounts.;General-purpose v2 only.;C;Lifecycle management policies are supported for block blobs and append blobs only. The account must be a general-purpose v2, premium block blob, or Blob Storage account.
You have an existing storage account. You configure customer-managed keys for the account. Which storage services are encrypted using the customer-managed keys?;Blob storage only;Blob, table, queue, and file storage;Blob, queue, and file storage;Blob, and file storage;B;Data stored in queue and table storage isn't automatically protected by a customer-managed key when customer-managed keys are enabled for an existing storage account. You must configure these services to be included in this protection when you create the storage account.
Azure storage supports multiple storage tiers for Blob storage. Which of the following is NOT a valid storage tier?;Cold;Archive;Glacier;Cool;C;Glacier is not a valid Azure storage tier.
You are planning to configure object replication for block blobs. Which of the following is not a valid requirement?;The source and destination accounts must be either general-purpose v2 or premium block blob accounts.;You must be assigned the Owner role on the storage account or higher in the scope.;Blob versioning is enabled for both the source and destination account.;The blob change feed must be enabled for the source account.;D;The blob change feed must be enabled for the source account, but it does not need to be enabled on the destination account.
You plan to delegate access to a storage account using a shared access signature (SAS). You need to set an expiration time that you may need to extend. Which of the following do you configure?;A storage account access key;An expiration policy for shared access signatures;A stored access policy;A user delegation SAS;C;A stored access policy provides additional server side control over shared access signatures (SAS), including the ability to change the start time, expiry time, or permissions.
You have an application that is accessing a storage account using storage account access keys. The application is configured to use key 1. You plan to rotate the storage account access keys. Which steps should you take and in which order?;Update the application to use key 2, regenerate key 1, update the application to use key 1, and then regenerate key 2.;Regenerate key 1, and update the application to use the new key.;Update the application to use key 2, regenerate key 1, and then update the application to use key 1.;Regenerate key 2, and update the application to use key 2.;A;This series of steps would successfully rotate the storage account access keys.
Which of the following is required to deploy Azure Bastion?;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger;A subnet named AzureBastion with a subnet mask of /26 or smaller;Azure Firewall with the Premium SKU;Azure Firewall with the Standard SKU;A;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger is required when you deploy Azure Bastion.
You need to ensure that all public network access to an Azure storage account is disabled. What should you configure?;Private endpoint connections;Microsoft Defender for Cloud;Firewalls and virtual networks;Containers;C;You can configure the firewalls and virtual networks networking settings on the storage account to prevent public network access.
Which of the following resources is used to route the flow of network traffic to specific network destinations?;Network security groups;Azure firewall;ExpressRoute;User-defined routes;D;User-defined routes can be used to direct the flow of network traffic to specific network destinations.
You have been asked to scale out a virtual machine deployment. What should you do?;Distribute the existing virtual machines to multiple regions;Increase the size of the virtual machine;Increase the number of virtual machine instances deployed;Increase the number of disks attached to the virtual machine;C;Scaling out involves deploying instances of an existing resource.
You have four virtual networks deployed. The virtual networks are deployed in the following regions: Australia East, South Central US, Southeast Asia, and West US. All virtual networks are fully peered. You are deploying Azure Bastion. How many Bastion hosts must you deploy to manage virtual machines deployed in all virtual networks?;3;4;1;2;C;Azure Bastion and VNet peering can be used together. When VNet peering is configured, you don't have to deploy Azure Bastion in each peered VNet.
Which of the following is required to deploy Azure Bastion?;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger;A subnet named AzureBastion with a subnet mask of /26 or smaller;Azure Firewall with the Premium SKU;Azure Firewall with the Standard SKU;A;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger is required when you deploy Azure Bastion.
You need to ensure that all public network access to an Azure storage account is disabled. What should you configure?;Private endpoint connections;Microsoft Defender for Cloud;Firewalls and virtual networks;Containers;C;You can configure the firewalls and virtual networks networking settings on the storage account to prevent public network access.
What is the maximum number of regions an Azure virtual network can span?;One;Two;Three;None;A;Virtual networks are deployed to a single region.
You have a Windows Azure VM, and you wish to directly backup only the following folders on the VM: C:\\FinanceApp and E:\\Database. You are not using a backup server. Which agent should you deploy to the virtual machine?;None, use the Azure VM agent.;Install the System Center Data Protection Manager (DPM) protection agent.;Microsoft Azure Backup Server (MABS) protection agent.;The Microsoft Azure Recovery Services (MARS) agent.;D;The Microsoft Azure Recovery Services (MARS) agent can be used to back up specific files, folders, or volumes on Windows Azure VMs.
Azure storage supports multiple redundancy options. Which of the following is NOT a valid Azure storage redundancy option?;Read-only Geo-zone-redundant Storage (RA-GZRS);Zone-redundant Storage (ZRS);Locally-geo-redundant Storage (LGRS);Locally-redundant Storage (LRS);C;Locally-geo-redundant Storage (LGRS) is not a valid Azure storage redundancy option.
You need to provide secure delegated access to a blob in an Azure storage account. Which of the following should you use?;A stored access policy;A storage account access key;A shared access signature;An Azure file share;C;Shared access signatures can be used to provide secure delegated access to Azure storage accounts.
Which of the following statements is NOT true about resource locks?;You can lock an Azure subscription, resource group, or individual resource.;When you apply a lock at a scope, all resources within that scope inherit the same lock.;Only the Owner, User Access Administrator, and Contributor roles can create and delete management locks.;Data plane operations like data transactions are not impacted by resource locks.;C;Only the Owner and the User Access Administrator roles can create and delete management locks. Contributor cannot create and delete management locks.
You create a custom Azure policy definition and save it to a subscription named Sub1. Which of the following scopes can you assign the policy?;Only Resource Groups in Sub1.;Anywhere in the management hierarchy.;Resource Groups in Sub1 and Sub1.;Only Sub1.;C;Resources must be within the resource hierarchy of the definition location to target for assignment. Both Resource Groups within Sub1 and Sub1 can be assigned the policy.
For which of the following storage accounts can you configure lifecycle management policies?;Premium block blob, and Blob Storage accounts.;Premium file share only.;General-purpose v2, premium block blob, and Blob Storage accounts.;General-purpose v2 only.;C;Lifecycle management policies are supported for block blobs and append blobs only. The account must be a general-purpose v2, premium block blob, or Blob Storage account.
Which of the following statements about resource groups is NOT true?;Resource groups can be nested.;Resource groups contain Azure resources.;A resource can only be a member of a single resource group.;Many resources can be moved between resource groups.;A;Resource groups cannot be nested.
Which Microsoft-native tools can be used to deploy resources to Azure?;ARM templates, Bicep files, Azure PowerShell, and Azure CLI;ARM templates, Bicep files, Pulumi, Saltstack;Terraform and ARM templates;Azure DevOps only;A;ARM templates, Bicep files, Azure PowerShell, and Azure CLI are Microsoft's native tools for deploying and managing Azure resources. These tools allow automation of infrastructure provisioning using Infrastructure-as-Code (IaC) methodologies. ARM templates use JSON, while Bicep is a more user-friendly abstraction layer over ARM templates.
A user named User1 has been assigned the Contributor role at the scope of a subscription named Sub1. User1 also has the Reader role assignment on a subscription named Sub2. User1 has also been assigned the Owner role at the scope of a resource group named RG1 within Sub1. No other role assignments exist for User1. Which of the following actions can the user perform?;Delete all resources within Sub2;Create resources within Sub2;Assign roles on RG1;Assign roles on Sub1;C;User1 can assign roles on RG1 using their Owner role assignment at that scope.
Which of the following resources is used to route the flow of network traffic to specific network destinations?;Network security groups;Azure firewall;ExpressRoute;User-defined routes;D;User-defined routes can be used to direct the flow of network traffic to specific network destinations.
You have been asked to scale out a virtual machine deployment. What should you do?;Distribute the existing virtual machines to multiple regions;Increase the size of the virtual machine;Increase the number of virtual machine instances deployed;Increase the number of disks attached to the virtual machine;C;Scaling out involves deploying instances of an existing resource.
You have four virtual networks deployed. The virtual networks are deployed in the following regions: Australia East, South Central US, Southeast Asia, and West US. All virtual networks are fully peered. You are deploying Azure Bastion. How many Bastion hosts must you deploy to manage virtual machines deployed in all virtual networks?;3;4;1;2;C;Azure Bastion and VNet peering can be used together. When VNet peering is configured, you don't have to deploy Azure Bastion in each peered VNet.
Which of the following is required to deploy Azure Bastion?;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger;A subnet named AzureBastion with a subnet mask of /26 or smaller;Azure Firewall with the Premium SKU;Azure Firewall with the Standard SKU;A;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger is required when you deploy Azure Bastion.
You need to ensure that all public network access to an Azure storage account is disabled. What should you configure?;Private endpoint connections;Microsoft Defender for Cloud;Firewalls and virtual networks;Containers;C;You can configure the firewalls and virtual networks networking settings on the storage account to prevent public network access.
What is the maximum number of regions an Azure virtual network can span?;One;Two;Three;None;A;Virtual networks are deployed to a single region.
You have a Windows Azure VM, and you wish to directly backup only the following folders on the VM: C:\\FinanceApp and E:\\Database. You are not using a backup server. Which agent should you deploy to the virtual machine?;None, use the Azure VM agent.;Install the System Center Data Protection Manager (DPM) protection agent.;Microsoft Azure Backup Server (MABS) protection agent.;The Microsoft Azure Recovery Services (MARS) agent.;D;The Microsoft Azure Recovery Services (MARS) agent can be used to back up specific files, folders, or volumes on Windows Azure VMs.
Azure storage supports multiple redundancy options. Which of the following is NOT a valid Azure storage redundancy option?;Read-only Geo-zone-redundant Storage (RA-GZRS);Zone-redundant Storage (ZRS);Locally-geo-redundant Storage (LGRS);Locally-redundant Storage (LRS);C;Locally-geo-redundant Storage (LGRS) is not a valid Azure storage redundancy option.
You need to provide secure delegated access to a blob in an Azure storage account. Which of the following should you use?;A stored access policy;A storage account access key;A shared access signature;An Azure file share;C;Shared access signatures can be used to provide secure delegated access to Azure storage accounts.
Which of the following statements is NOT true about resource locks?;You can lock an Azure subscription, resource group, or individual resource.;When you apply a lock at a scope, all resources within that scope inherit the same lock.;Only the Owner, User Access Administrator, and Contributor roles can create and delete management locks.;Data plane operations like data transactions are not impacted by resource locks.;C;Only the Owner and the User Access Administrator roles can create and delete management locks. Contributor cannot create and delete management locks.
You create a custom Azure policy definition and save it to a subscription named Sub1. Which of the following scopes can you assign the policy?;Only Resource Groups in Sub1.;Anywhere in the management hierarchy.;Resource Groups in Sub1 and Sub1.;Only Sub1.;C;Resources must be within the resource hierarchy of the definition location to target for assignment. Both Resource Groups within Sub1 and Sub1 can be assigned the policy.
For which of the following storage accounts can you configure lifecycle management policies?;Premium block blob, and Blob Storage accounts.;Premium file share only.;General-purpose v2, premium block blob, and Blob Storage accounts.;General-purpose v2 only.;C;Lifecycle management policies are supported for block blobs and append blobs only. The account must be a general-purpose v2, premium block blob, or Blob Storage account.
Which of the following statements about resource groups is NOT true?;Resource groups can be nested.;Resource groups contain Azure resources.;A resource can only be a member of a single resource group.;Many resources can be moved between resource groups.;A;Resource groups cannot be nested.
Which Microsoft-native tools can be used to deploy resources to Azure?;ARM templates, Bicep files, Azure PowerShell, and Azure CLI;ARM templates, Bicep files, Pulumi, Saltstack;Terraform and ARM templates;Azure DevOps only;A;ARM templates, Bicep files, Azure PowerShell, and Azure CLI are Microsoft's native tools for deploying and managing Azure resources. These tools allow automation of infrastructure provisioning using Infrastructure-as-Code (IaC) methodologies. ARM templates use JSON, while Bicep is a more user-friendly abstraction layer over ARM templates.
A user named User1 has been assigned the Contributor role at the scope of a subscription named Sub1. User1 also has the Reader role assignment on a subscription named Sub2. User1 has also been assigned the Owner role at the scope of a resource group named RG1 within Sub1. No other role assignments exist for User1. Which of the following actions can the user perform?;Delete all resources within Sub2;Create resources within Sub2;Assign roles on RG1;Assign roles on Sub1;C;User1 can assign roles on RG1 using their Owner role assignment at that scope.
Which of the following is NOT a valid Azure storage redundancy option?;Read-only Geo-zone-redundant Storage (RA-GZRS);Zone-redundant Storage (ZRS);Locally-geo-redundant Storage (LGRS);Locally-redundant Storage (LRS);C;Locally-geo-redundant Storage (LGRS) is not a valid Azure storage redundancy option.
You need to provide secure delegated access to a blob in an Azure storage account. Which of the following should you use?;A stored access policy;A storage account access key;A shared access signature;An Azure file share;C;Shared access signatures can be used to provide secure delegated access to Azure storage accounts.
For which of the following storage accounts can you configure lifecycle management policies?;Premium block blob, and Blob Storage accounts.;Premium file share only.;General-purpose v2, premium block blob, and Blob Storage accounts.;General-purpose v2 only.;C;Lifecycle management policies are supported for block blobs and append blobs only. The account must be a general-purpose v2, premium block blob, or Blob Storage account.
You have an existing storage account. You configure customer-managed keys for the account. Which storage services are encrypted using the customer-managed keys?;Blob storage only;Blob, table, queue, and file storage;Blob, queue, and file storage;Blob, and file storage;B;Data stored in queue and table storage isn't automatically protected by a customer-managed key when customer-managed keys are enabled for an existing storage account. You must configure these services to be included in this protection when you create the storage account.
Azure storage supports multiple storage tiers for Blob storage. Which of the following is NOT a valid storage tier?;Cold;Archive;Glacier;Cool;C;Glacier is not a valid Azure storage tier.
You are planning to configure object replication for block blobs. Which of the following is not a valid requirement?;The source and destination accounts must be either general-purpose v2 or premium block blob accounts.;You must be assigned the Owner role on the storage account or higher in the scope.;Blob versioning is enabled for both the source and destination account.;The blob change feed must be enabled for the source account.;D;The blob change feed must be enabled for the source account, but it does not need to be enabled on the destination account.
You plan to delegate access to a storage account using a shared access signature (SAS). You need to set an expiration time that you may need to extend. Which of the following do you configure?;A storage account access key;An expiration policy for shared access signatures;A stored access policy;A user delegation SAS;C;A stored access policy provides additional server side control over shared access signatures (SAS), including the ability to change the start time, expiry time, or permissions.
You have an application that is accessing a storage account using storage account access keys. The application is configured to use key 1. You plan to rotate the storage account access keys. Which steps should you take and in which order?;Update the application to use key 2, regenerate key 1, update the application to use key 1, and then regenerate key 2.;Regenerate key 1, and update the application to use the new key.;Update the application to use key 2, regenerate key 1, and then update the application to use key 1.;Regenerate key 2, and update the application to use key 2.;A;This series of steps would successfully rotate the storage account access keys.
Which of the following is required to deploy Azure Bastion?;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger;A subnet named AzureBastion with a subnet mask of /26 or smaller;Azure Firewall with the Premium SKU;Azure Firewall with the Standard SKU;A;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger is required when you deploy Azure Bastion.
You need to ensure that all public network access to an Azure storage account is disabled. What should you configure?;Private endpoint connections;Microsoft Defender for Cloud;Firewalls and virtual networks;Containers;C;You can configure the firewalls and virtual networks networking settings on the storage account to prevent public network access.
What is the primary goal of a business continuity plan (BCP)?;To ensure the safety of employees;To minimize financial losses;To maintain critical business functions during and after a disaster;To comply with regulatory requirements;C;The primary goal of a business continuity plan (BCP) is to maintain critical business functions during and after a disaster. This involves ensuring that essential operations can continue with minimal disruption, thereby safeguarding the organization's ability to deliver products and services to its customers. A well-crafted BCP includes strategies for disaster recovery, data protection, and maintaining communication with stakeholders.
Which of the following is NOT a component of a business continuity plan?;Business impact analysis;Risk assessment;Marketing strategy;Disaster recovery plan;C;A marketing strategy is not a component of a business continuity plan. A BCP typically includes a business impact analysis, risk assessment, and disaster recovery plan. These components help identify potential risks, assess their impact on business operations, and develop strategies to mitigate those risks and ensure continuity of critical functions.
What is the purpose of a business impact analysis (BIA) in a BCP?;To identify potential risks and threats;To evaluate the financial impact of disruptions;To develop recovery strategies;To test the effectiveness of the BCP;B;The purpose of a business impact analysis (BIA) in a BCP is to evaluate the financial impact of disruptions on business operations. A BIA helps identify critical business functions and the resources required to support them, allowing organizations to prioritize recovery efforts and allocate resources effectively. It also helps determine the recovery time objectives (RTO) and recovery point objectives (RPO) for different business processes.
Which of the following is a key element of a disaster recovery plan?;Employee training;Data backup and restoration;Marketing campaigns;Product development;B;Data backup and restoration is a key element of a disaster recovery plan. A disaster recovery plan outlines the procedures for recovering data and restoring IT systems after a disruption. This includes regular data backups, secure storage of backup copies, and testing the restoration process to ensure data integrity and availability. Effective data backup and restoration strategies are essential for minimizing data loss and ensuring business continuity.
What is the difference between recovery time objective (RTO) and recovery point objective (RPO)?;RTO is the maximum acceptable downtime, while RPO is the maximum acceptable data loss;RTO is the maximum acceptable data loss, while RPO is the maximum acceptable downtime;RTO is the time it takes to recover data, while RPO is the time it takes to recover systems;RTO is the time it takes to notify stakeholders, while RPO is the time it takes to restore operations;A;Recovery time objective (RTO) is the maximum acceptable downtime for a business process, while recovery point objective (RPO) is the maximum acceptable data loss measured in time. RTO focuses on the time it takes to restore business operations after a disruption, whereas RPO focuses on the point in time to which data must be recovered to resume operations. Both RTO and RPO are critical metrics for designing effective disaster recovery and business continuity strategies.
Which of the following is an example of a high availability solution?;Regular data backups;Load balancing;Employee training;Marketing campaigns;B;Load balancing is an example of a high availability solution. High availability solutions are designed to ensure that critical systems and applications remain operational with minimal downtime. Load balancing distributes incoming network traffic across multiple servers, preventing any single server from becoming a bottleneck and ensuring continuous availability of services. Other high availability solutions include redundant hardware, failover clusters, and geographically distributed data centers.
What is the role of Azure Site Recovery in business continuity?;To provide data encryption;To manage user access;To replicate and recover virtual machines;To monitor network traffic;C;Azure Site Recovery plays a crucial role in business continuity by replicating and recovering virtual machines (VMs) in the event of a disruption. It enables organizations to replicate VMs to a secondary location, ensuring that critical applications and data remain available during outages. Azure Site Recovery also supports automated failover and failback processes, helping organizations minimize downtime and maintain business continuity.
Which of the following strategies is used to ensure data integrity during a disaster?;Data encryption;Data replication;Data compression;Data deduplication;B;Data replication is a strategy used to ensure data integrity during a disaster. Data replication involves creating copies of data and storing them in different locations, ensuring that data remains available and consistent even if one location is compromised. This strategy helps prevent data loss and ensures that critical information can be recovered quickly during a disaster. Other strategies for ensuring data integrity include regular data backups and implementing robust data protection measures.
What is the purpose of conducting regular tests of a business continuity plan?;To identify potential risks;To evaluate the effectiveness of the plan;To develop new marketing strategies;To train new employees;B;The purpose of conducting regular tests of a business continuity plan is to evaluate the effectiveness of the plan. Regular testing helps identify gaps and weaknesses in the plan, allowing organizations to make necessary adjustments and improvements. It also ensures that employees are familiar with their roles and responsibilities during a disruption, enhancing the organization's overall preparedness and resilience.
Which of the following is a benefit of having a business continuity plan?;Increased marketing reach;Improved employee morale;Enhanced operational resilience;Higher product sales;C;Enhanced operational resilience is a key benefit of having a business continuity plan. A well-developed BCP helps organizations prepare for and respond to disruptions, ensuring that critical business functions can continue with minimal impact. This resilience enhances the organization's ability to recover quickly from disasters, maintain customer trust, and protect its reputation. Other benefits of a BCP include compliance with regulatory requirements and reduced financial losses.
What is the purpose of Azure AD Privileged Identity Management (PIM)?;To manage user identities;To provide data encryption;To manage and control access to privileged roles;To monitor network traffic;C;Azure AD Privileged Identity Management (PIM) is a service within Microsoft Azure Active Directory (Azure AD) designed to help organizations manage, control, and monitor access to important resources. Specifically, PIM provides just-in-time (JIT) access to privileged roles, enabling users to activate roles only when necessary, and automatically deactivating them when not in use. This drastically reduces the risk of permanent over-privileged access that attackers could exploit. PIM allows organizations to configure policies that enforce specific criteria, such as Multi-Factor Authentication (MFA), just-in-time role activation, and approval workflows before granting access to sensitive resources. It also provides comprehensive logging and alerting, enabling real-time tracking of role activations and monitoring of any changes made during privileged sessions. By controlling and auditing access to Azure AD roles (such as Global Administrator or Security Administrator) and other Azure resources, PIM helps organizations adhere to the principle of least privilege, an essential component in any security strategy. It is a critical tool for reducing insider threats and protecting against external attacks that might exploit overly permissive access. For more information, you can refer to the official Microsoft documentation: For more information, you can refer to the official Microsoft documentation: https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure/ 
Which of the following is NOT a valid Azure storage redundancy option?;Read-only Geo-zone-redundant Storage (RA-GZRS);Zone-redundant Storage (ZRS);Locally-eo-redundant Storage (LGRS);Locally-redundant Storage (LRS);C;Locally-geo-redundant Storage (LGRS) is not a valid Azure storage redundancy option. Azure offers several redundancy options to ensure data durability and availability, including Locally-redundant Storage (LRS), Zone-redundant Storage (ZRS), Geo-redundant Storage (GRS), and Read-access Geo-redundant Storage (RA-GRS). Each option provides different levels of replication and protection against data loss. For more information refer to: https://learn.microsoft.com/en-us/training/paths/design-data-storage-solutions/).
You need to provide secure delegated access to a blob in an Azure storage account. Which of the following should you use?;A stored access policy;A storage account access key;A shared access signature;An Azure file share;C;Shared access signatures (SAS) can be used to provide secure delegated access to Azure storage accounts. SAS tokens allow you to grant limited access to your storage resources without sharing your account keys. You can specify the permissions, start and expiry times, and the IP addresses from which the resources can be accessed. For more information refer to: https://learn.microsoft.com/en-us/training/modules/design-data-storage-solution-for-relational-data/).
For which of the following storage accounts can you configure lifecycle management policies?;Premium block blob, and Blob Storage accounts.;Premium file share only.;General-purpose v2, premium block blob, and Blob Storage accounts.;General-purpose v2 only.;C;Lifecycle management policies are supported for block blobs and append blobs only. The account must be a general-purpose v2, premium block blob, or Blob Storage account. These policies help automate the transition of data to the appropriate access tiers or deletion of data based on specified rules. For more information refer to: https://www.microsoftpressstore.com/articles/article.aspx?p=3172426).
You have an existing storage account. You configure customer-managed keys for the account. Which storage services are encrypted using the customer-managed keys?;Blob storage only;Blob, table, queue, and file storage;Blob, queue, and file storage;Blob, and file storage;B;Data stored in queue and table storage isn't automatically protected by a customer-managed key when customer-managed keys are enabled for an existing storage account. You must configure these services to be included in this protection when you create the storage account. For more information refer to: https://learn.microsoft.com/en-us/training/modules/design-data-storage-solution-for-non-relational-data/).
Azure storage supports multiple storage tiers for Blob storage. Which of the following is NOT a valid storage tier?;Cold;Archive;Glacier;Cool;C;Glacier is not a valid Azure storage tier. Azure Blob storage offers several access tiers to optimize costs based on data access patterns, including Hot, Cool, and Archive tiers. The Hot tier is for frequently accessed data, the Cool tier is for infrequently accessed data, and the Archive tier is for rarely accessed data. For more information refer to: https://www.serversimply.com/blog/choosing-the-right-data-storage-solution).
You are planning to configure object replication for block blobs. Which of the following is not a valid requirement?;The source and destination accounts must be either general-purpose v2 or premium block blob accounts.;You must be assigned the Owner role on the storage account or higher in the scope.;Blob versioning is enabled for both the source and destination account.;The blob change feed must be enabled for the source account.;B;The blob change feed must be enabled for the source account, but it does not need to be enabled on the destination account. Object replication helps improve data availability and disaster recovery by asynchronously copying blobs from one storage account to another. For more information refer to: https://outlook.office365.com/owa/?ItemID=AAMkADVmNTExNTcyLWVkMDEtNDUzZS1iNGRhLTY2M2EwMDJmOTkxMgBGAAAAAAC7tXuHTnZsSK7mgQTxhw3oBwC97t0Zh4WqT4Upf8%2flA1g0AAAAAAEJAAC97t0Zh4WqT4Upf8%2flA1g0AAAke4aqAAA%3d&exvsurl=1&viewmodel=ReadMessageItem).
You plan to delegate access to a storage account using a shared access signature (SAS). You need to set an expiration time that you may need to extend. Which of the following do you configure?;A storage account access key;An expiration policy for shared access signatures;A stored access policy;A user delegation SAS;C;A stored access policy provides additional server side control over shared access signatures (SAS), including the ability to change the start time, expiry time, or permissions. This helps manage SAS tokens more effectively and ensures that access is granted only for the required duration. For more information refer to: https://outlook.office365.com/owa/?ItemID=AAMkADVmNTExNTcyLWVkMDEtNDUzZS1iNGRhLTY2M2EwMDJmOTkxMgBGAAAAAAC7tXuHTnZsSK7mgQTxhw3oBwC97t0Zh4WqT4Upf8%2flA1g0AAAAAAEMAAC97t0Zh4WqT4Upf8%2flA1g0AAAZAgmqAAA%3d&exvsurl=1&viewmodel=ReadMessageItem).
You have an application that is accessing a storage account using storage account access keys. The application is configured to use key 1. You plan to rotate the storage account access keys. Which steps should you take and in which order?;Update the application to use key 2, regenerate key 1, update the application to use key 1, and then regenerate key 2.;Regenerate key 1, and update the application to use the new key.;Update the application to use key 2, regenerate key 1, and then update the application to use key 1.;Regenerate key 2, and update the application to use key 2.;A;This series of steps would successfully rotate the storage account access keys. Key rotation helps enhance security by periodically changing the access keys used by applications to access storage accounts. For more information refer to: https://outlook.office365.com/owa/?ItemID=AAMkADVmNTExNTcyLWVkMDEtNDUzZS1iNGRhLTY2M2EwMDJmOTkxMgBGAAAAAAC7tXuHTnZsSK7mgQTxhw3oBwC97t0Zh4WqT4Upf8%2flA1g0AAAAAAEMAAC97t0Zh4WqT4Upf8%2flA1g0AAAc%2bR91AAA%3d&exvsurl=1&viewmodel=ReadMessageItem).
Which of the following is NOT a valid requirement to configure and test self-service password reset for cloud-only users?;An account with Global Administrator or Authentication Policy Administrator privileges;A Microsoft Entra tenant with at least a Microsoft Entra ID Free license;A Microsoft Entra tenant with at least a Microsoft Entra ID P1 license;A non-administrator user account.;C;Microsoft Entra ID P1 is required for self-service password reset/change/unlock and on-premises write-back. This ensures that users can reset their passwords without needing to contact IT support, improving productivity and security[1](https://learn.microsoft.com/en-us/shows/exam-readiness-zone/preparing-for-az-305-design-identity-governance-and-monitoring-solutions-1-of-4).
When managing Microsoft Entra and Azure, there are two types of roles that can be used to grant privileges to manage those resources. What are the two role types?;Privileged roles, Standard roles;Azure AD roles, Microsoft Entra roles;User roles, machine roles;Microsoft Entra roles, Azure roles;D;Microsoft Entra roles grant privileges within the Microsoft Entra tenant. Azure roles grant privileges within Azure subscriptions and management groups. This separation of roles helps in managing access and permissions more effectively[2](https://bing.com/search?q=Design+identity%2c+governance%2c+and+monitor+solutions+detailed+explanations).
Which of the following scopes can you assign Azure (RBAC) roles?;Entra Tenants, administrative units or individual Entra objects like applications.;Management groups, subscriptions, resource groups, and individual resources.;Management groups, subscriptions, and resource groups.;Entra Tenants, administrative units, individual Entra objects like applications, management groups, subscriptions, resource groups, and individual resources.;B;Azure RBAC role assignments can be scoped to management groups, subscriptions, resource groups, and individual resources. This allows for fine-grained access control and helps in managing permissions at different levels[3](https://www.classcentral.com/course/microsoft-learn-az-305-design-identity-governance-and-monitor-solutions-62236).
Which of the following statements is NOT true about resource locks?;You can lock an Azure subscription, resource group, or individual resource.;When you apply a lock at a scope, all resources within that scope inherit the same lock.;Only the Owner, User Access Administrator, and Contributor roles can create and delete management locks.;Data plane operations like data transactions are not impacted by resource locks.;C;Only the Owner and the User Access Administrator roles can create and delete management locks. Contributor cannot create and delete management locks.
You create a custom Azure policy definition and save it to a subscription named Sub1. Which of the following scopes can you assign the policy?;Only Resource Groups in Sub1.;Anywhere in the management hierarchy.;Resource Groups in Sub1 and Sub1.;Only Sub1.;C;Resources must be within the resource hierarchy of the definition location to target for assignment. Both Resource Groups within Sub1 and Sub1 can be assigned the policy. This ensures that policies are applied consistently across the organization[5](https://learn.microsoft.com/en-us/training/paths/design-identity-governance-monitor-solutions/?WT.mc_id=api_CatalogApi&sso=viva-learning).
Which of the following statements is true about Entra ID licenses?;Entra ID licenses can be assigned to individual users or groups, but not both.;Entra ID licenses can be assigned to both individual users or groups.;Entra ID licenses can be assigned to individual users only.;Entra ID licenses can be assigned to groups only.;B;Entra ID licenses can be assigned to both users and groups as required. This flexibility allows organizations to manage licenses more efficiently and ensure that all users have the necessary access[6](https://learn.microsoft.com/en-us/training/paths/design-identity-governance-monitor-solutions/).
You have been asked to ensure that all Azure resources associated with a Human Resources (HR) workload are marked as confidential. What should you use?;Microsoft Entra groups;Administrative Units;Tags;Resource locks;C;Tags are key-value pairs that help you identify resources based on data to your organization.
You have been asked to allow 100 external users to access resources secured by your Microsoft Entra Tenant, including Microsoft 365. You create a CSV file with a list of email addresses and redirection URLs. In the Microsoft Entra Portal, which step should you take next?;From the All users menu, select New guest and then select Import.;From the All users menu, select Bulk operations and then select Bulk invite.;From the All users menu, select Bulk operations and then select Bulk create.;From the All guests menu, select Import guests.;B;You should select Bulk operations and then bulk invite guests from the All users menu. This allows you to efficiently manage access for a large number of external users[8](https://microsoftapc.sharepoint.com/teams/AsiaSEOLocalisationteam/_layouts/15/Doc.aspx?sourcedoc=%7BE6C5F99C-1DBB-42DF-9267-10ACAF773068%7D&file=Microsoft%20Entra%20ID%20Governance%20L200%20customer%20facing%20deck.pptx&action=edit&mobileredirect=true&DefaultItemOpen=1).
When creating an Entra ID group, which group types can you create?;User, Device, Application;Security, Distribution;Security, Microsoft 365;User, Device;C;Microsoft Entra ID supports two group types, Security, and Microsoft 365. Security groups are used to manage user access to resources, while Microsoft 365 groups provide collaboration features[9](https://microsoft.sharepoint.com/teams/DynamicIdentityFramework/_layouts/15/Doc.aspx?sourcedoc=%7BABBF689C-B430-49B8-8489-B29AD60BE160%7D&file=Consultant%20Delivery%20Guide.docx&action=default&mobileredirect=true&DefaultItemOpen=1).
Which of the following resources is used to route the flow of network traffic to specific network destinations?;Network security groups;Azure firewall;ExpressRoute;User-defined routes;D;User-defined routes can be used to direct the flow of network traffic to specific network destinations. This allows for more granular control over network traffic and helps in optimizing network performance[10](https://microsoft.sharepoint.com/teams/LevelUpSkilling/_layouts/15/Doc.aspx?sourcedoc=%7BFFF87B7F-E6A5-45AA-A1C5-9D540AC02D94%7D&file=Microsoft%20Entra%20ID%20Governance%20Deck.pptx&action=edit&mobileredirect=true&DefaultItemOpen=1).
Which of the following are valid membership types for Microsoft Entra groups?;Hybrid, guest, combined;Assigned, generated;Assigned, dynamic;Classic, Entra;C;Membership to Microsoft Entra groups can be either assigned or dynamic. Assigned membership requires manual addition of members, while dynamic membership uses rules to automatically add and remove members based on attributes[11](https://microsoft.sharepoint.com/teams/capcmrhubstorage/_layouts/15/Doc.aspx?sourcedoc=%7BFE52848A-0314-4D37-9971-A2B9550BFCA2%7D&file=HYT%20Identity%20Governance%20Research%20-%20Topline%20Report.docx&action=default&mobileredirect=true&DefaultItemOpen=1).
What is the purpose of Azure Monitor?;To manage user identities;To provide data encryption;To monitor and analyze the performance and health of Azure resources;To manage network traffic;C;Azure Monitor is used to monitor and analyze the performance and health of Azure resources. It provides insights into the operation of applications and infrastructure, helping organizations to identify and resolve issues quickly[12](https://azure.microsoft.com/en-us/updates/upgrade-to-new-solution-for-azure-monitor-for-vms/).
Which of the following is a key feature of Azure Policy?;Data encryption;Role-based access control;Compliance auditing;Network traffic management;C;Azure Policy is used for compliance auditing. It allows organizations to create, assign, and manage policies that enforce rules and effects over resources, ensuring compliance with corporate standards and regulatory requirements[13](https://azure.microsoft.com/en-us/updates/preview-of-azure-monitor-for-sap-solutions/).
What is the role of Azure Blueprints in governance?;To provide data encryption;To manage user identities;To define a repeatable set of Azure resources and policies;To monitor network traffic;C;Azure Blueprints are used to define a repeatable set of Azure resources and policies. They help organizations to deploy and manage environments that comply with organizational standards and best practices.
Which of the following is NOT a feature of Microsoft Entra ID Governance?;Access recertification;Privileged access management;Data encryption;Access lifecycle management;C;Data encryption is not a feature of Microsoft Entra ID Governance. Entra ID Governance focuses on managing access to resources, ensuring that the right people have the right access at the right time.
What is the purpose of Azure AD Privileged Identity Management (PIM)?;To manage user identities;To provide data encryption;To manage and control access to privileged roles;To monitor network traffic;C;Azure AD Privileged Identity Management (PIM) is used to manage and control access to privileged roles. It helps organizations to reduce the risk of excessive, unnecessary, or misused access permissions.
Which of the following is a benefit of using Azure AD Conditional Access?;Data encryption;Role-based access control;Improved security by enforcing access policies based on conditions;Network traffic management;C;Azure AD Conditional Access improves security by enforcing access policies based on conditions. It allows organizations to control how and when users can access resources, based on factors such as location, device, and risk level.
What is the purpose of Azure AD Identity Protection?;To manage user identities;To provide data encryption;To detect and respond to identity-based threats;To monitor network traffic;C;Azure AD Identity Protection is used to detect and respond to identity-based threats. It leverages machine learning and behavioral analytics to identify suspicious activities and take appropriate actions to protect user accounts.
Which of the following is a key feature of Azure AD Access Reviews?;Data encryption;Role-based access control;Periodic review of user access to resources;Network traffic management;C;Azure AD Access Reviews allow organizations to periodically review user access to resources. This helps ensure that only authorized users have access to critical resources, reducing the risk of unauthorized access.
What is the purpose of Azure AD B2C?;To manage user identities;To provide data encryption;To enable customer identity and access management;To monitor network traffic;C;Azure AD B2C is used to enable customer identity and access management. It allows organizations to provide secure and seamless access to their applications for customers and partners.
Which of the following is a benefit of using Azure AD Application Proxy?;Data encryption;Role-based access control;Secure remote access to on-premises applications;Network traffic management;C;Azure AD Application Proxy provides secure remote access to on-premises applications. It allows users to access internal applications from anywhere, without the need for a VPN.
What is the role of Azure AD Connect in identity management?;To provide data encryption;To manage user identities;To synchronize on-premises directories with Azure AD;To monitor network traffic;C;Azure AD Connect is used to synchronize on-premises directories with Azure AD. This ensures that user identities and attributes are consistent across on-premises and cloud environments.
Which of the following is a key feature of Azure AD Identity Governance?;Data encryption;Role-based access control;Access lifecycle management;Network traffic management;C;Azure AD Identity Governance focuses on access lifecycle management. It helps organizations to manage the entire lifecycle of user access, from onboarding to offboarding, ensuring that access is granted and revoked appropriately.
What is the purpose of Azure AD Conditional Access policies?;To manage user identities;To provide data encryption;To enforce access controls based on conditions;To monitor network traffic;C;Azure AD Conditional Access policies are used to enforce access controls based on conditions. They allow organizations to define rules that determine how and when users can access resources, based on factors such as location, device, and risk level.
Which of the following is a benefit of using Azure AD Privileged Identity Management (PIM)?;Data encryption;Role-based access control;Reduced risk of excessive or misused access permissions;Network traffic management;C;Azure AD Privileged Identity Management (PIM) reduces the risk of excessive or misused access permissions. It helps organizations to manage and control access to privileged roles, ensuring that only authorized users have elevated access.
What is the purpose of Azure AD Identity Protection risk policies?;To manage user identities;To provide data encryption;To automatically respond to identity-based threats;To monitor network traffic;C;Azure AD Identity Protection risk policies are used to automatically respond to identity-based threats. They allow organizations to define actions that should be taken when suspicious activities are detected, such as requiring multi-factor authentication or blocking access.
Which of the following is a key feature of Azure AD Conditional Access?;Data encryption;Role-based access control;Risk-based access policies;Network traffic management;C;Azure AD Conditional Access includes risk-based access policies. These policies evaluate the risk level of each sign-in attempt and enforce appropriate access controls based on the assessed risk.
What is the purpose of Azure AD Access Reviews?;To manage user identities;To provide data encryption;To periodically review user access to resources;To monitor network traffic;C;Azure AD Access Reviews are used to periodically review user access to resources. This helps organizations to ensure that only authorized users have access to critical resources, reducing the risk of unauthorized access.
Which of the following is a benefit of using Azure AD B2C?;Data encryption;Role-based access control;Improved customer identity and access management;Network traffic management;C;Azure AD B2C improves customer identity and access management. It allows organizations to provide secure and seamless access to their applications for customers and partners, enhancing the user experience.
What is the role of Azure AD Application Proxy in identity management?;To provide data encryption;To manage user identities;To enable secure remote access to on-premises applications;To monitor network traffic;C;Azure AD Application Proxy enables secure remote access to on-premises applications. It allows users to access internal applications from anywhere, without the need for a VPN.
Which of the following is a key feature of Azure AD Connect?;Data encryption;Role-based access control;Directory synchronization;Network traffic management;C;Azure AD Connect provides directory synchronization. It ensures that user identities and attributes are consistent across on-premises and cloud environments, enabling seamless identity management.
What is the purpose of Azure AD Identity Governance?;To manage user identities;To provide data encryption;To manage the lifecycle of user access;To monitor network traffic;C;Azure AD Identity Governance manages the lifecycle of user access. It helps organizations to ensure that access is granted and revoked appropriately, from onboarding to offboarding.
Which of the following is a benefit of using Azure AD Conditional Access policies?;Data encryption;Role-based access control;Improved security by enforcing access controls based on conditions;Network traffic management;C;Azure AD Conditional Access policies improve security by enforcing access controls based on conditions. They allow organizations to define rules that determine how and when users can access resources, based on factors such as location, device, and risk level.
What is the purpose of Azure AD Privileged Identity Management (PIM)?;To manage user identities;To provide data encryption;To manage and control access to privileged roles;To monitor network traffic;C;Azure AD Privileged Identity Management (PIM) manages and controls access to privileged roles. It helps organizations to reduce the risk of excessive, unnecessary, or misused access permissions.
Which of the following is a key feature of Azure AD Identity Protection?;Data encryption;Role-based access control;Detection and response to identity-based threats;Network traffic management;C;Azure AD Identity Protection detects and responds to identity-based threats. It leverages machine learning and behavioral analytics to identify suspicious activities and take appropriate actions to protect user accounts.
What is the purpose of Azure AD Access Reviews?;To manage user identities;To provide data encryption;To periodically review user access to resources;To monitor network traffic;C;Azure AD Access Reviews periodically review user access to resources. This helps organizations to ensure that only authorized users have access to critical resources, reducing the risk of unauthorized access.
Which of the following is a benefit of using Azure AD B2C?;Data encryption;Role-based access control;Improved customer identity and access management;Network traffic management;C;Azure AD B2C improves customer identity and access management. It allows organizations to provide secure and seamless access to their applications for customers and partners, enhancing the user experience.
What is the role of Azure AD Application Proxy in identity management?;To provide data encryption;To manage user identities;To enable secure remote access to on-premises applications;To monitor network traffic;C;Azure AD Application Proxy enables secure remote access to on-premises applications. It allows users to access internal applications from anywhere, without the need for a VPN.
Which of the following is a key feature of Azure AD Connect?;Data encryption;Role-based access control;Directory synchronization;Network traffic management;C;Azure AD Connect provides directory synchronization. It ensures that user identities and attributes are consistent across on-premises and cloud environments, enabling seamless identity management.
What is the purpose of Azure AD Identity Governance?;To manage user identities;To provide data encryption;To manage the lifecycle of user access;To monitor network traffic;C;Azure AD Identity Governance manages the lifecycle of user access. It helps organizations to ensure that access is granted and revoked appropriately, from onboarding to offboarding.
Which of the following is a benefit of using Azure AD Conditional Access policies?;Data encryption;Role-based access control;Improved security by enforcing access controls based on conditions;Network traffic management;C;Azure AD Conditional Access policies improve security by enforcing access controls based on conditions. They allow organizations to define rules that determine how and when users can access resources, based on factors such as location, device, and risk level.
What is the purpose of Azure AD Privileged Identity Management (PIM)?;To manage user identities;To provide data encryption;To manage and control access to privileged roles;To monitor network traffic;C;Azure AD Privileged Identity Management (PIM) manages and controls access to privileged roles. It helps organizations to reduce the risk of excessive, unnecessary, or misused access permissions.
Which of the following is a key feature of Azure AD Identity Protection?;Data encryption;Role-based access control;Detection and response to identity-based threats;Network traffic management;C;Azure AD Identity Protection detects and responds to identity-based threats. It leverages machine learning and behavioral analytics to identify suspicious activities and take appropriate actions to protect user accounts.
What is the purpose of Azure AD Access Reviews?;To manage user identities;To provide data encryption;To periodically review user access to resources;To monitor network traffic;C;Azure AD Access Reviews periodically review user access to resources. This helps organizations to ensure that only authorized users have access to critical resources, reducing the risk of unauthorized access.
Which of the following is a benefit of using Azure AD B2C?;Data encryption;Role-based access control;Improved customer identity and access management;Network traffic management;C;Azure AD B2C improves customer identity and access management. It allows organizations to provide secure and seamless access to their applications for customers and partners, enhancing the user experience.
What is the role of Azure AD Application Proxy in identity management?;To provide data encryption;To manage user identities;To enable secure remote access to on-premises applications;To monitor network traffic;C;Azure AD Application Proxy enables secure remote access to on-premises applications. It allows users to access internal applications from anywhere, without the need for a VPN.
Which of the following is a key feature of Azure AD Connect?;Data encryption;Role-based access control;Directory synchronization;Network traffic management;C;Azure AD Connect provides directory synchronization. It ensures that user identities and attributes are consistent across on-premises and cloud environments, enabling seamless identity management.
What is the purpose of Azure AD Identity Governance?;To manage user identities;To provide data encryption;To manage the lifecycle of user access;To monitor network traffic;C;Azure AD Identity Governance manages the lifecycle of user access. It helps organizations to ensure that access is granted and revoked appropriately, from onboarding to offboarding.
Which of the following is a benefit of using Azure AD Conditional Access policies?;Data encryption;Role-based access control;Improved security by enforcing access controls based on conditions;Network traffic management;C;Azure AD Conditional Access policies improve security by enforcing access controls based on conditions. They allow organizations to define rules that determine how and when users can access resources, based on factors such as location, device, and risk level.
What is the purpose of Azure AD Privileged Identity Management (PIM)?;To manage user identities;To provide data encryption;To manage and control access to privileged roles;To monitor network traffic;C;
Which of the following is required to deploy Azure Bastion?;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger;A subnet named AzureBastion with a subnet mask of /26 or smaller;Azure Firewall with the Premium SKU;Azure Firewall with the Standard SKU;A;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger is required when you deploy Azure Bastion. Azure Bastion provides secure and seamless RDP and SSH connectivity to your virtual machines directly through the Azure portal without exposing them to the public internet. For more information refer to: https://outlook.office365.com/owa/?ItemID=AAMkADVmNTExNTcyLWVkMDEtNDUzZS1iNGRhLTY2M2EwMDJmOTkxMgBGAAAAAAC7tXuHTnZsSK7mgQTxhw3oBwC97t0Zh4WqT4Upf8%2flA1g0AAAAAAEMAAC97t0Zh4WqT4Upf8%2flA1g0AAAVN5JSAAA%3d&exvsurl=1&viewmodel=ReadMessageItem).
You need to ensure that all public network access to an Azure storage account is disabled. What should you configure?;Private endpoint connections;Microsoft Defender for Cloud;Firewalls and virtual networks;Containers;C;You can configure the firewalls and virtual networks networking settings on the storage account to prevent public network access. This helps secure your storage account by allowing access only from specified virtual networks or IP address ranges. For more information refer to: https://teams.microsoft.com/l/message/19:766ea78695084eddaea09ea8d90c828e@thread.v2/1622651550994?context=%7B%22contextType%22:%22chat%22%7D).
What is the primary benefit of using Azure Blob Storage?;Low latency;High throughput;Scalability and cost-efficiency;Data encryption;C;Azure Blob Storage is designed for scalability and cost-efficiency. It allows you to store large amounts of unstructured data, such as text or binary data, and access it from anywhere in the world. Blob Storage is ideal for serving images or documents directly to a browser, storing files for distributed access, and streaming video and audio. For more information refer to: https://teams.microsoft.com/l/message/19:766ea78695084eddaea09ea8d90c828e@thread.v2/1671088952739?context=%7B%22contextType%22:%22chat%22%7D).
Which of the following is a key feature of Azure Data Lake Storage?;Data encryption;Hierarchical namespace;Low latency;High throughput;B;Azure Data Lake Storage provides a hierarchical namespace, which allows you to organize your data into directories and subdirectories. This feature improves performance and management of large datasets by enabling efficient data access and operations. For more information refer to: https://teams.microsoft.com/l/message/19:meeting_NDE0YTMwZTctNmVkNC00Y2Y2LTgzNzktOGFiMjhhMGIzOWQ4@thread.v2/1727469225918?context=%7B%22contextType%22:%22chat%22%7D).
What is the purpose of Azure Storage Explorer?;To manage user identities;To provide data encryption;To manage and access Azure storage resources;To monitor network traffic;C;Azure Storage Explorer is a tool that allows you to manage and access Azure storage resources, such as blobs, files, queues, and tables. It provides a graphical interface for performing common storage tasks, such as uploading, downloading, and managing data. For more information refer to: https://teams.microsoft.com/l/message/19:83234e0ba7754219a799482a9cb8e31a@thread.v2/1707424283250?context=%7B%22contextType%22:%22chat%22%7D).
Which of the following is a benefit of using Azure Files?;Data encryption;Role-based access control;SMB and NFS protocol support;Network traffic management;C;Azure Files provides fully managed file shares in the cloud that are accessible via the SMB and NFS protocols. This allows you to share files across multiple virtual machines and access them from anywhere, just like a traditional file server. For more information refer to: https://learn.microsoft.com/en-us/training/modules/design-data-storage-solution-for-relational-data/?WT.mc_id=api_CatalogApi&sso=viva-learning).
What is the role of Azure Blob Storage in data archiving?;To provide data encryption;To manage user identities;To store large amounts of unstructured data for long-term retention;To monitor network traffic;C;Azure Blob Storage is used to store large amounts of unstructured data for long-term retention. The Archive tier in Blob Storage is designed for data that is rarely accessed but needs to be retained for compliance or other reasons. For more information refer to: https://learn.microsoft.com/en-us/azure/databox/data-box-heavy-overview).
Which of the following is a key feature of Azure Managed Disks?;Data encryption;Role-based access control;Automatic storage management;Network traffic management;C;Azure Managed Disks provide automatic storage management, which simplifies the process of managing disk storage for virtual machines. Managed Disks handle the storage account creation and management, ensuring high availability and durability of your data. For more information refer to: https://learn.microsoft.com/en-us/training/modules/design-data-storage-solution-for-non-relational-data/?WT.mc_id=api_CatalogApi&sso=viva-learning).
What is the purpose of Azure Storage Account Keys?;To manage user identities;To provide data encryption;To authenticate and authorize access to Azure storage resources;To monitor network traffic;C;Azure Storage Account Keys are used to authenticate and authorize access to Azure storage resources. Each storage account has two keys, which can be rotated to enhance security and ensure continuous access. For more information refer to: https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/technology-choices-overview).
Which of the following is a benefit of using Azure Table Storage?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Table Storage provides scalability and cost-efficiency for storing large amounts of structured data. It is a NoSQL key-value store that allows for fast access to data and is ideal for applications that require flexible data schemas. For more information refer to: https://azure.microsoft.com/en-us/solutions/backup-archive).
What is the role of Azure Queue Storage in application development?;To provide data encryption;To manage user identities;To enable asynchronous messaging between application components;To monitor network traffic;C;Azure Queue Storage enables asynchronous messaging between application components. It allows you to decouple different parts of your application, improving scalability and reliability by ensuring that messages are delivered even if one component is temporarily unavailable. For more information refer to: https://azure.microsoft.com/en-us/products/storage/data-lake-storage).
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data. For more information refer to: https://azure.microsoft.com/en-us/products/category/storage).
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution. For more information refer to: https://learn.microsoft.com/en-us/azure/architecture/solution-ideas/articles/medical-data-storage).
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs. For more information refer to: https://azure.microsoft.com/en-us/products/storage).
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure;To monitor network traffic;C;Azure Data Box is used to transfer large amounts of data to Azure. It provides a secure and efficient way to move data to the cloud, especially when network bandwidth is limited or data transfer times are critical. For more information refer to: https://learn.microsoft.com/en-us/training/paths/design-data-storage-solutions/?WT.mc_id=api_CatalogApi&sso=viva-learning).
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data.
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution.
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs.
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure;To monitor network traffic;C;Azure Data Box is used to transfer large amounts of data to Azure. It provides a secure and efficient way to move data to the cloud, especially when network bandwidth is limited or data transfer times are critical.
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data.
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution.
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs.
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure;To monitor network traffic;C;Azure Data Box is used to transfer large amounts of data to Azure. It provides a secure and efficient way to move data to the cloud, especially when network bandwidth is limited or data transfer times are critical.
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data.
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution.
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs.
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure;To monitor network traffic;C;Azure Data Box is used to transfer large amounts of data to Azure. It provides a secure and efficient way to move data to the cloud, especially when network bandwidth is limited or data transfer times are critical.
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data.
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution.
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs.
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure;To monitor network traffic;C;Azure Data Box is used to transfer large amounts of data to Azure. It provides a secure and efficient way to move data to the cloud, especially when network bandwidth is limited or data transfer times are critical.
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data.
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution.
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs.
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure;To analyze data for migration;C;Azure Data Box is a solution designed by Microsoft to help organizations securely transfer large amounts of data to Azure when network-based transfers are too slow or costly. Data Box devices, including physical hardware and disk storage options, allow for secure data migration by shipping pre-configured devices to customers, who can load data onto the device and then send it back to an Azure datacenter. The data is encrypted during transit, ensuring secure handling. After it reaches the Azure facility, data is uploaded to the appropriate storage service in the cloud. This is especially useful for moving datasets in the petabyte range, or when frequent large-scale data transfers are necessary, such as in backup or archive scenarios. Learn more at the official documentation: https://learn.microsoft.com/en-us/azure/databox/databox-overview .
Which of the following is NOT a valid Azure storage redundancy option?;Read-only Geo-zone-redundant Storage (RA-GZRS);Zone-redundant Storage (ZRS);Locally-geo-redundant Storage (LGRS);Locally-redundant Storage (LRS);C;Locally-geo-redundant Storage (LGRS) is not a valid Azure storage redundancy option. Azure offers several redundancy options to ensure data durability and availability, including Locally-redundant Storage (LRS), Zone-redundant Storage (ZRS), Geo-redundant Storage (GRS), and Read-access Geo-redundant Storage (RA-GRS). Each option provides different levels of replication and protection against data. To learn more, refer to ](https://learn.microsoft.com/en-us/training/paths/design-data-storage-solutions/).
You need to provide secure delegated access to a blob in an Azure storage account. Which of the following should you use?;A stored access policy;A storage account access key;A shared access signature;An Azure file share;C;Shared access signatures (SAS) can be used to provide secure delegated access to Azure storage accounts. SAS tokens allow you to grant limited access to your storage resources without sharing your account keys. You can specify the permissions, start and expiry times, and the IP addresses from which the resources can be accessed. To learn more, refer to https://learn.microsoft.com/en-us/training/modules/design-data-storage-solution-for-relational-data/).
For which of the following storage accounts can you configure lifecycle management policies?;Premium block blob, and Blob Storage accounts.;Premium file share only.;General-purpose v2, premium block blob, and Blob Storage accounts.;General-purpose v2 only.;C;Lifecycle management policies are supported for block blobs and append blobs only. The account must be a general-purpose v2, premium block blob, or Blob Storage account. These policies help automate the transition of data to the appropriate access tiers or deletion of data based on specified rules. To learn more, refer to https://www.microsoftpressstore.com/articles/article.aspx?p=3172426).
You have an existing storage account. You configure customer-managed keys for the account. Which storage services are encrypted using the customer-managed keys?;Blob storage only;Blob, table, queue, and file storage;Blob, queue, and file storage;Blob, and file storage;B;Data stored in queue and table storage isn't automatically protected by a customer-managed key when customer-managed keys are enabled for an existing storage account. You must configure these services to be included in this protection when you create the storage account. To learn more, refer to https://learn.microsoft.com/en-us/training/modules/design-data-storage-solution-for-non-relational-data/).
You are planning to configure object replication for block blobs. Which of the following is not a valid requirement?;The source and destination accounts must be either general-purpose v2 or premium block blob accounts.;You must be assigned the Owner role on the storage account or higher in the scope.;Blob versioning is enabled for both the source and destination account.;The blob change feed must be enabled for the source account.;D;The blob change feed must be enabled for the source account, but it does not need to be enabled on the destination account. Object replication helps improve data availability and disaster recovery by asynchronously copying blobs from one storage account to another. 
You plan to delegate access to a storage account using a shared access signature (SAS). You need to set an expiration time that you may need to extend. Which of the following do you configure?;A storage account access key;An expiration policy for shared access signatures;A stored access policy;A user delegation SAS;C;A stored access policy provides additional server side control over shared access signatures (SAS), including the ability to change the start time, expiry time, or permissions. This helps manage SAS tokens more effectively and ensures that access is granted only for the required duration. 
You have an application that is accessing a storage account using storage account access keys. The application is configured to use key 1. You plan to rotate the storage account access keys. Which steps should you take and in which order?;Update the application to use key 2, regenerate key 1, update the application to use key 1, and then regenerate key 2.;Regenerate key 1, and update the application to use the new key.;Update the application to use key 2, regenerate key 1, and then update the application to use key 1.;Regenerate key 2, and update the application to use key 2.;A;This series of steps would successfully rotate the storage account access keys. Key rotation helps enhance security by periodically changing the access keys used by applications to access storage accounts. 
Which of the following is required to deploy Azure Bastion?;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger;A subnet named AzureBastion with a subnet mask of /26 or smaller;Azure Firewall with the Premium SKU;Azure Firewall with the Standard SKU;A;A subnet named AzureBastionSubnet with a subnet mask of /26 or larger is required when you deploy Azure Bastion. Azure Bastion provides secure and seamless RDP and SSH connectivity to your virtual machines directly through the Azure portal without exposing them to the public internet. 
You need to ensure that all public network access to an Azure storage account is disabled. What should you configure?;Private endpoint connections;Microsoft Defender for Cloud;Firewalls and virtual networks;Containers;C;You can configure the firewalls and virtual networks networking settings on the storage account to prevent public network access. This helps secure your storage account by allowing access only from specified virtual networks or IP address ranges. 
What is the primary benefit of using Azure Blob Storage?;Low latency;High throughput;Scalability and cost-efficiency;Data encryption;C;Azure Blob Storage is designed for scalability and cost-efficiency. It allows you to store large amounts of unstructured data, such as text or binary data, and access it from anywhere in the world. Blob Storage is ideal for serving images or documents directly to a browser, storing files for distributed access, and streaming video and audio. 
Which of the following is a key feature of Azure Data Lake Storage?;Data encryption;Hierarchical namespace;Low latency;High throughput;B;Azure Data Lake Storage provides a hierarchical namespace, which allows you to organize your data into directories and subdirectories. This feature improves performance and management of large datasets by enabling efficient data access and operations. 
What is the purpose of Azure Storage Explorer?;To manage user identities;To provide data encryption;To manage and access Azure storage resources;To monitor network traffic;C;Azure Storage Explorer is a tool that allows you to manage and access Azure storage resources, such as blobs, files, queues, and tables. It provides a graphical interface for performing common storage tasks, such as uploading, downloading, and managing data. 
Which of the following is a benefit of using Azure Files?;Data encryption;Role-based access control;SMB and NFS protocol support;Network traffic management;C;Azure Files provides fully managed file shares in the cloud that are accessible via the SMB and NFS protocols. This allows you to share files across multiple virtual machines and access them from anywhere, just like a traditional file server. To learn more, refer to https://learn.microsoft.com/en-us/training/modules/design-data-storage-solution-for-relational-data/?WT.mc_id=api_CatalogApi&sso=viva-learning).
What is the role of Azure Blob Storage in data archiving?;To provide data encryption;To manage user identities;To store large amounts of unstructured data for long-term retention;To monitor network traffic;C;Azure Blob Storage is used to store large amounts of unstructured data for long-term retention. The Archive tier in Blob Storage is designed for data that is rarely accessed but needs to be retained for compliance or other reasons. To learn more, refer to https://learn.microsoft.com/en-us/azure/databox/data-box-heavy-overview).
Which of the following is a key feature of Azure Managed Disks?;Data encryption;Role-based access control;Automatic storage management;Network traffic management;C;Azure Managed Disks provide automatic storage management, which simplifies the process of managing disk storage for virtual machines. Managed Disks handle the storage account creation and management, ensuring high availability and durability of your data. To learn more, refer to https://learn.microsoft.com/en-us/training/modules/design-data-storage-solution-for-non-relational-data/?WT.mc_id=api_CatalogApi&sso=viva-learning).
What is the purpose of Azure Storage Account Keys?;To manage user identities;To provide data encryption;To authenticate and authorize access to Azure storage resources;To monitor network traffic;C;Azure Storage Account Keys are used to authenticate and authorize access to Azure storage resources. Each storage account has two keys, which can be rotated to enhance security and ensure continuous access. To learn more, refer to https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/technology-choices-overview).
Which of the following is a benefit of using Azure Table Storage?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Table Storage provides scalability and cost-efficiency for storing large amounts of structured data. It is a NoSQL key-value store that allows for fast access to data and is ideal for applications that require flexible data schemas. To learn more, refer to https://azure.microsoft.com/en-us/solutions/backup-archive).
What is the role of Azure Queue Storage in application development?;To provide data encryption;To manage user identities;To enable asynchronous messaging between application components;To monitor network traffic;C;Azure Queue Storage enables asynchronous messaging between application components. It allows you to decouple different parts of your application, improving scalability and reliability by ensuring that messages are delivered even if one component is temporarily unavailable. To learn more, refer to https://azure.microsoft.com/en-us/products/storage/data-lake-storage).
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data. To learn more, refer to https://azure.microsoft.com/en-us/products/category/storage).
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution. To learn more, refer to https://learn.microsoft.com/en-us/azure/architecture/solution-ideas/articles/medical-data-storage).
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs. To learn more, refer to https://azure.microsoft.com/en-us/products/storage).
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure;To monitor network traffic;C;Azure Data Box is used to transfer large amounts of data to Azure. It provides a secure and efficient way to move data to the cloud, especially when network bandwidth is limited or data transfer times are critical. To learn more, refer to https://learn.microsoft.com/en-us/training/paths/design-data-storage-solutions/?WT.mc_id=api_CatalogApi&sso=viva-learning).
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data.
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution.
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs.
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure;To monitor network traffic;C;Azure Data Box is used to transfer large amounts of data to Azure. It provides a secure and efficient way to move data to the cloud, especially when network bandwidth is limited or data transfer times are critical.
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data.
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution.
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs.
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure;To monitor network traffic;C;Azure Data Box is used to transfer large amounts of data to Azure. It provides a secure and efficient way to move data to the cloud, especially when network bandwidth is limited or data transfer times are critical.
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data.
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution.
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs.
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure;To monitor network traffic;C;Azure Data Box is used to transfer large amounts of data to Azure. It provides a secure and efficient way to move data to the cloud, especially when network bandwidth is limited or data transfer times are critical.
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data.
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution.
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs.
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure;To monitor network traffic;C;Azure Data Box is used to transfer large amounts of data to Azure. It provides a secure and efficient way to move data to the cloud, especially when network bandwidth is limited or data transfer times are critical.
Which of the following is a key feature of Azure Blob Storage?;Data encryption;Role-based access control;Support for multiple access tiers;Network traffic management;C;Azure Blob Storage supports multiple access tiers, including Hot, Cool, and Archive. These tiers allow you to optimize storage costs based on data access patterns, with the Hot tier for frequently accessed data, the Cool tier for infrequently accessed data, and the Archive tier for rarely accessed data.
What is the purpose of Azure File Sync?;To manage user identities;To provide data encryption;To synchronize on-premises file servers with Azure Files;To monitor network traffic;C;Azure File Sync is used to synchronize on-premises file servers with Azure Files. This allows you to centralize your file shares in Azure while maintaining local access to your data, providing a hybrid storage solution.
Which of the following is a benefit of using Azure Blob Storage for data backup?;Data encryption;Role-based access control;Scalability and cost-efficiency;Network traffic management;C;Azure Blob Storage provides scalability and cost-efficiency for data backup. It allows you to store large amounts of data at a low cost, with the ability to scale up or down based on your needs. Blob Storage also offers features such as data redundancy and access tiers to optimize costs.
What is the role of Azure Data Box in data migration?;To provide data encryption;To manage user identities;To transfer large amounts of data to Azure quickly and securely;To analyze data in real-time;C;Azure Data Box is a service provided by Microsoft to facilitate secure, large-scale data migrations to Azure. It helps organizations transfer terabytes (or even petabytes) of data quickly and securely without depending on network bandwidth. Instead of transferring data over the internet, organizations can store data on physical devices provided by Microsoft and then ship those devices to a data center where the data is uploaded directly to Azure. This approach significantly reduces the time needed to move large datasets. Azure Data Box also offers encryption features, ensuring data security during transit and is ideal for moving large volumes of data for backup, archival, disaster recovery, or initial cloud migrations. Reference: https://learn.microsoft.com/en-us/azure/databox/data-box-overview.
What is the primary purpose of a Virtual Network (VNet) in Azure?;To provide a secure environment for deploying virtual machines;To manage user identities;To encrypt data at rest;To monitor network traffic;A;A Virtual Network (VNet) in Azure provides a secure environment for deploying virtual machines and other resources. It allows you to create isolated network segments, control traffic flow, and connect to on-premises networks using VPN or ExpressRoute.
Which of the following is a key feature of Azure ExpressRoute?;Data encryption;High availability;Private, dedicated connection to Azure;Role-based access control;C;Azure ExpressRoute provides a private, dedicated connection to Azure, bypassing the public internet. This ensures higher security, reliability, and lower latency for data transfer between on-premises infrastructure and Azure.
What is the purpose of Azure Load Balancer?;To manage user identities;To provide data encryption;To distribute incoming network traffic across multiple resources;To monitor network traffic;C;Azure Load Balancer distributes incoming network traffic across multiple resources, such as virtual machines, to ensure high availability and reliability of applications. It helps balance the load and prevent any single resource from becoming a bottleneck.
Which of the following is a benefit of using Azure Virtual WAN?;Data encryption;Centralized network management;Role-based access control;Network traffic monitoring;B;Azure Virtual WAN provides centralized network management, allowing you to connect and manage multiple branch offices, data centers, and remote users. It simplifies network configuration and management, improving overall network efficiency. To learn more, study this article -> https://www.auvik.com/franklyit/blog/network-design-best-practices// .
What is the role of Azure Firewall in network security?;To manage user identities;To provide data encryption;To protect applications from DDoS attacks;To enforce network security policies and control traffic flow;D;Azure Firewall enforces network security policies and controls traffic flow between different network segments. It provides advanced threat protection, logging, and monitoring capabilities to secure your network infrastructure. To learn more, study this article -> https://www.diehardtechnologies.com/post/network-design/ .
Which of the following is a key feature of Azure VPN Gateway?;Data encryption;High availability;Secure, encrypted connection to on-premises networks;Role-based access control;C;Azure VPN Gateway provides a secure, encrypted connection to on-premises networks, enabling hybrid cloud scenarios. It supports site-to-site, point-to-site, and VNet-to-VNet connections, ensuring secure communication between different network environments. To learn more, study this article -> https://www.itjones.com/blogs/2022/1/15/designing-a-computer-network-for-your-business-a-step-by-step-guide/ .
What is the purpose of Azure Traffic Manager?;To manage user identities;To provide data encryption;To distribute user traffic across multiple endpoints;To monitor network traffic;C;Azure Traffic Manager distributes user traffic across multiple endpoints, such as Azure regions or on-premises locations, based on routing policies. It helps improve application performance, availability, and resilience by directing traffic to the most appropriate endpoint. To learn more, study this article -> https://www.n-able.com/blog/how-to-design-a-network/ .
Which of the following is a benefit of using Azure DDoS Protection?;Data encryption;Role-based access control;Protection against distributed denial-of-service (DDoS) attacks;Network traffic monitoring;C;Azure DDoS Protection provides protection against distributed denial-of-service (DDoS) attacks, ensuring the availability and performance of your applications. It automatically detects and mitigates DDoS attacks, minimizing the impact on your network infrastructure. To learn more, study this article -> https://azure.microsoft.com/en-us/blog/azure-multicloud-networking-native-and-partner-solutions// .
What is the role of Azure Bastion in network security?;To manage user identities;To provide data encryption;To provide secure RDP and SSH access to virtual machines;To monitor network traffic;C;Azure Bastion provides secure RDP and SSH access to virtual machines directly through the Azure portal, without exposing them to the public internet. It helps protect your virtual machines from external threats and simplifies remote management. To learn more, study this article -> https://microsoft.myhbp.org:443/leadingedge/video/4858AV-VIF-ENG/ .
Which of the following is a key feature of Azure Application Gateway?;Data encryption;High availability;Web application firewall (WAF);Role-based access control;C;Azure Application Gateway includes a web application firewall (WAF) that provides protection against common web vulnerabilities, such as SQL injection and cross-site scripting (XSS). It also offers load balancing, SSL termination, and URL-based routing for web applications[. To learn more, study this article -> https://azure.microsoft.com/en-us/solutions/networking/ .
What is the purpose of Azure Network Watcher?;To manage user identities;To provide data encryption;To monitor and diagnose network issues;To control traffic flow;C;Azure Network Watcher monitors and diagnoses network issues, providing insights into network performance and connectivity. It offers tools for packet capture, connection troubleshooting, and network topology visualization[. To learn more, study this article -> https://app.pluralsight.com/sso/microsoft?returnUrl=courses/it-professional-fundamentals-networking-cert/ .
Which of the following is a benefit of using Azure Private Link?;Data encryption;Role-based access control;Secure, private access to Azure services;Network traffic monitoring;C;Azure Private Link provides secure, private access to Azure services, such as Azure Storage and SQL Database, over a private endpoint. This ensures that traffic between your virtual network and Azure services remains within the Microsoft network, enhancing security and reducing exposure to the public internet[. To learn more, study this article -> https://azure.microsoft.com/en-us/updates/general-availability-new-simplified-nsx-networking-experience-for-azure-vmware-solution// .
What is the role of Azure Route Server in network management?;To manage user identities;To provide data encryption;To enable dynamic routing between virtual networks and on-premises networks;To monitor network traffic;C;Azure Route Server enables dynamic routing between virtual networks and on-premises networks, simplifying network configuration and management. It allows you to exchange routing information using the Border Gateway Protocol (BGP), ensuring optimal routing paths[. To learn more, study this article -> https://azure.microsoft.com/en-us/products/category/networking/ .
Which of the following is a key feature of Azure Front Door?;Data encryption;High availability;Global load balancing and application acceleration;Role-based access control;C;Azure Front Door provides global load balancing and application acceleration, improving the performance and availability of your applications. It offers features such as SSL offloading, URL-based routing, and caching to optimize content delivery[. To learn more, study this article -> https://eng.ms/docs/cloud-ai-platform/azure-cxp/cxp-cre/azure-cxp-cre-agc/agc-team-wiki/programs/aem/assessments/networking/networking/ .
What is the purpose of Azure Network Security Groups (NSGs)?;To manage user identities;To provide data encryption;To control inbound and outbound traffic to network resources;To monitor network traffic;C;Azure Network Security Groups (NSGs) control inbound and outbound traffic to network resources, such as virtual machines and subnets. They allow you to define security rules that filter traffic based on source, destination, port, and protocol[. To learn more, study this article -> https://microsoft.sharepoint.com/sites/Network_Connectivity/SitePages/RemoteAccess/About-Remote-Access.aspx?web=1/ .
Which of the following is a benefit of using Azure Virtual Network Peering?;Data encryption;Role-based access control;Low-latency, high-bandwidth connectivity between virtual networks;Network traffic monitoring;C;Azure Virtual Network Peering provides low-latency, high-bandwidth connectivity between virtual networks, enabling seamless communication between resources in different virtual networks. It simplifies network architecture and improves performance[. To learn more, study this article -> https://microsoft.sharepoint.com/teams/MS_Archives/_layouts/15/Doc.aspx?sourcedoc=%7BFEF617C1-2F71-4F9F-87F8-BAA820FA5419%7D&file=HelpDesk.doc&action=default&mobileredirect=true&DefaultItemOpen=1/ .
What is the role of Azure DNS in network management?;To manage user identities;To provide data encryption;To provide domain name resolution for Azure resources;To monitor network traffic;C;Azure DNS provides domain name resolution for Azure resources, allowing you to manage DNS records for your applications and services. It offers high availability, fast response times, and integration with other Azure services[. To learn more, study this article -> https://azure.microsoft.com/en-us/explore/global-infrastructure/global-network/ .
Which of the following is a key feature of Azure Virtual Network NAT?;Data encryption;High availability;Outbound internet connectivity for virtual machines;Role-based access control;C;Azure Virtual Network NAT provides outbound internet connectivity for virtual machines in a virtual network. It simplifies network configuration by managing the translation of private IP addresses to public IP addresses.
What is the purpose of Azure Network Performance Monitor?;To manage user identities;To provide data encryption;To monitor and analyze network performance;To control traffic flow;C;Azure Network Performance Monitor monitors and analyzes network performance, providing insights into network latency, packet loss, and connectivity issues. It helps you identify and resolve network problems, ensuring optimal performance.
Which of the following is a benefit of using Azure Virtual Network Service Endpoints?;Data encryption;Role-based access control;Secure, direct access to Azure services from a virtual network;Network traffic monitoring;C;Azure Virtual Network Service Endpoints provide secure, direct access to Azure services, such as Azure Storage and SQL Database, from a virtual network. This ensures that traffic between your virtual network and Azure services remains within the Azure backbone network, enhancing security and performance.
What is the role of Azure Traffic Analytics in network management?;To manage user identities;To provide data encryption;To analyze and visualize network traffic patterns;To control traffic flow;C;Azure Traffic Analytics analyzes and visualizes network traffic patterns, providing insights into network usage, security threats, and performance issues. It helps you optimize network resources and improve security.
Which of the following is a key feature of Azure Virtual Network Gateway?;Data encryption;High availability;Secure, encrypted connection to on-premises networks;Role-based access control;C;Azure Virtual Network Gateway provides a secure, encrypted connection to on-premises networks, enabling hybrid cloud scenarios. It supports site-to-site, point-to-site, and VNet-to-VNet connections, ensuring secure communication between different network environments.
What is the purpose of Azure Network Security Groups (NSGs)?;To manage user identities;To provide data encryption;To control inbound and outbound traffic to network resources;To monitor network traffic;C;Azure Network Security Groups (NSGs) control inbound and outbound traffic to network resources, such as virtual machines and subnets. They allow you to define security rules that filter traffic based on source, destination, port, and protocol.
Which of the following is a benefit of using Azure Virtual Network Peering?;Data encryption;Role-based access control;Low-latency, high-bandwidth connectivity between virtual networks;Network traffic monitoring;C;Azure Virtual Network Peering provides low-latency, high-bandwidth connectivity between virtual networks, enabling seamless communication between resources in different virtual networks. It simplifies network architecture and improves performance.
What is the role of Azure DNS in network management?;To manage user identities;To provide data encryption;To provide domain name resolution for Azure resources;To monitor network traffic;C;Azure DNS provides domain name resolution for Azure resources, allowing you to manage DNS records for your applications and services. It offers high availability, fast response times, and integration with other Azure services.
Which of the following is a key feature of Azure Virtual Network NAT?;Data encryption;High availability;Outbound internet connectivity for virtual machines;Role-based access control;C;Azure Virtual Network NAT provides outbound internet connectivity for virtual machines in a virtual network. It simplifies network configuration by managing the translation of private IP addresses to public IP addresses.
What is the purpose of Azure Network Performance Monitor?;To manage user identities;To provide data encryption;To monitor and analyze network performance;To control traffic flow;C;Azure Network Performance Monitor monitors and analyzes network performance, providing insights into network latency, packet loss, and connectivity issues. It helps you identify and resolve network problems, ensuring optimal performance.
Which of the following is a benefit of using Azure Virtual Network Service Endpoints?;Data encryption;Role-based access control;Secure, direct access to Azure services from a virtual network;Network traffic monitoring;C;Azure Virtual Network Service Endpoints provide secure, direct access to Azure services, such as Azure Storage and SQL Database, from a virtual network. This ensures that traffic between your virtual network and Azure services remains within the Azure backbone network, enhancing security and performance.
What is the role of Azure Traffic Analytics in network management?;To manage user identities;To provide data encryption;To analyze and visualize network traffic patterns;To control traffic flow;C;Azure Traffic Analytics analyzes and visualizes network traffic patterns, providing insights into network usage, security threats, and performance issues. It helps you optimize network resources and improve security.
Which of the following is a key feature of Azure Virtual Network Gateway?;Data encryption;High availability;Secure, encrypted connection to on-premises networks;Role-based access control;C;Azure Virtual Network Gateway provides a secure, encrypted connection to on-premises networks, enabling hybrid cloud scenarios. It supports site-to-site, point-to-site, and VNet-to-VNet connections, ensuring secure communication between different network environments.
What is the purpose of Azure Network Security Groups (NSGs)?;To manage user identities;To provide data encryption;To control inbound and outbound traffic to network resources;To monitor network traffic;C;Azure Network Security Groups (NSGs) control inbound and outbound traffic to network resources, such as virtual machines and subnets. They allow you to define security rules that filter traffic based on source, destination, port, and protocol.
Which of the following is a benefit of using Azure Virtual Network Peering?;Data encryption;Role-based access control;Low-latency, high-bandwidth connectivity between virtual networks;Network traffic monitoring;C;Azure Virtual Network Peering provides low-latency, high-bandwidth connectivity between virtual networks, enabling seamless communication between resources in different virtual networks. It simplifies network architecture and improves performance.
What is the role of Azure DNS in network management?;To manage user identities;To provide data encryption;To provide domain name resolution for Azure resources;To monitor network traffic;C;Azure DNS provides domain name resolution for Azure resources, allowing you to manage DNS records for your applications and services. It offers high availability, fast response times, and integration with other Azure services.
Which of the following is a key feature of Azure Virtual Network NAT?;Data encryption;High availability;Outbound internet connectivity for virtual machines;Role-based access control;C;Azure Virtual Network NAT provides outbound internet connectivity for virtual machines in a virtual network. It simplifies network configuration by managing the translation of private IP addresses to public IP addresses.
What is the purpose of Azure Network Performance Monitor?;To manage user identities;To provide data encryption;To monitor and analyze network performance;To control traffic flow;C;Azure Network Performance Monitor monitors and analyzes network performance, providing insights into network latency, packet loss, and connectivity issues. It helps you identify and resolve network problems, ensuring optimal performance.
Which of the following is a benefit of using Azure Virtual Network Service Endpoints?;Data encryption;Role-based access control;Secure, direct access to Azure services from a virtual network;Network traffic monitoring;C;Azure Virtual Network Service Endpoints provide secure, direct access to Azure services, such as Azure Storage and SQL Database, from a virtual network. This ensures that traffic between your virtual network and Azure services remains within the Azure backbone network, enhancing security and performance.
What is the role of Azure Traffic Analytics in network management?;To manage user identities;To provide data encryption;To analyze and visualize network traffic patterns;To control traffic flow;C;Azure Traffic Analytics analyzes and visualizes network traffic patterns, providing insights into network usage, security threats, and performance issues. It helps you optimize network resources and improve security.
Which of the following is a key feature of Azure Virtual Network Gateway?;Data encryption;High availability;Secure, encrypted connection to on-premises networks;Role-based access control;C;Azure Virtual Network Gateway provides a secure, encrypted connection to on-premises networks, enabling hybrid cloud scenarios. It supports site-to-site, point-to-site, and VNet-to-VNet connections, ensuring secure communication between different network environments.
What is the purpose of Azure Network Security Groups (NSGs)?;To manage user identities;To provide data encryption;To control inbound and outbound traffic to network resources;To monitor network traffic;C;Azure Network Security Groups (NSGs) control inbound and outbound traffic to network resources, such as virtual machines and subnets. They allow you to define security rules that filter traffic based on source, destination, port, and protocol.
Which of the following is a benefit of using Azure Virtual Network Peering?;Data encryption;Role-based access control;Low-latency, high-bandwidth connectivity between virtual networks;Network traffic monitoring;C;Azure Virtual Network Peering provides low-latency, high-bandwidth connectivity between virtual networks, enabling seamless communication between resources in different virtual networks. It simplifies network architecture and improves performance.
What is the role of Azure DNS in network management?;To manage user identities;To provide data encryption;To provide domain name resolution for Azure resources;To monitor network traffic;C;Azure DNS provides domain name resolution for Azure resources, allowing you to manage DNS records for your applications and services. It offers high availability, fast response times, and integration with other Azure services.
Which of the following is a key feature of Azure Virtual Network NAT?;Data encryption;High availability;Outbound internet connectivity for virtual machines;Role-based access control;C;Azure Virtual Network NAT provides outbound internet connectivity for virtual machines in a virtual network. It simplifies network configuration by managing the translation of private IP addresses to public IP addresses.
What is the purpose of Azure Network Performance Monitor?;To manage user identities;To provide data encryption;To monitor and analyze network performance;To control traffic flow;C;Azure Network Performance Monitor monitors and analyzes network performance, providing insights into network latency, packet loss, and connectivity issues. It helps you identify and resolve network problems, ensuring optimal performance.
Which of the following is a benefit of using Azure Virtual Network Service Endpoints?;Data encryption;Role-based access control;Secure, direct access to Azure services from a virtual network;Network traffic monitoring;C;Azure Virtual Network Service Endpoints provide secure, direct access to Azure services, such as Azure Storage and SQL Database, from a virtual network. This ensures that traffic between your virtual network and Azure services remains within the Azure backbone network, enhancing security and performance.
What is the role of Azure Traffic Analytics in network management?;To manage user identities;To provide data encryption;To analyze and visualize network traffic patterns;To control traffic flow;C;Azure Traffic Analytics analyzes and visualizes network traffic patterns, providing insights into network usage, security threats, and performance issues. It helps you optimize network resources and improve security.
Which of the following is a key feature of Azure Virtual Network Gateway?;Data encryption;High availability;Secure, encrypted connection to on-premises networks;Role-based access control;C;Azure Virtual Network Gateway provides a secure, encrypted connection to on-premises networks, enabling hybrid cloud scenarios. It supports site-to-site, point-to-site, and VNet-to-VNet connections, ensuring secure communication between different network environments.
What is the purpose of Azure Network Security Groups (NSGs)?;To manage user identities;To provide data encryption;To control inbound and outbound traffic to network resources;To monitor network traffic;C;Azure Network Security Groups (NSGs) control inbound and outbound traffic to network resources, such as virtual machines and subnets. They allow you to define security rules that filter traffic based on source, destination, port, and protocol.
Which of the following is a benefit of using Azure Virtual Network Peering?;Data encryption;Role-based access control;Low-latency, high-bandwidth connectivity between virtual networks;Network traffic monitoring;C;Azure Virtual Network Peering provides low-latency, high-bandwidth connectivity between virtual networks, enabling seamless communication between resources in different virtual networks. It simplifies network architecture and improves performance.
What is the role of Azure DNS in network management?;To manage user identities;To provide data encryption;To provide domain name resolution for Azure resources;To monitor network traffic;C;Azure DNS provides domain name resolution for Azure resources, allowing you to manage DNS records for your applications and services. It offers high availability, fast response times, and integration with other Azure services.
Which of the following is a key feature of Azure Virtual Network;Network Security Groups (NSGs);Virtual Network Peering;Blob Storage;Azure Active Directory;B;Azure Virtual Network (VNet) is a foundational service in Azure, providing several critical networking features that enable communication between Azure resources and with on-premises networks. One of the key features is "Virtual Network Peering," which allows two Azure VNets to connect seamlessly, enabling resources in different VNets to communicate with each other. This feature provides low-latency, high-bandwidth communication without the need for complex networking setups, such as VPNs or gateways. Virtual Network Peering helps organizations efficiently manage hybrid or multi-region deployments and ensure scalability. Peered networks can share resources while still maintaining security through separate address spaces. It is often used to facilitate the communication between application components deployed across multiple VNets within a single or across multiple Azure regions. By enabling VNet Peering, organizations can optimize performance, reduce costs associated with gateway devices, and improve overall network architecture design. For further reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview/ 
Which of the following tools can help you manage hardware and software requirements for the Microsoft Azure integration?;Azure Advisor;Azure Monitor;Cost Management;Azure Policy;A;Azure Advisor provides recommendations that can help you optimize your Azure resources across key areas such as cost, performance, security, and availability. The tool analyzes your Azure environment and suggests actions to improve efficiency and reduce costs. It provides real-time insights, making it easier to manage infrastructure while ensuring best practices are followed. Azure Monitor, Cost Management, and Azure Policy serve different purposes (monitoring, cost tracking, and policy enforcement respectively) and are not focused on resource optimization.