AZ-900 : Microsoft Azure Fundamentals Practice Tests 2025 5 Flashcards

Question

______________ enables centralizing your organization's file shares in Azure Files, while keeping the flexibility, performance, and compatibility of a Windows file server. Azure Data Box Gateway Azure Resource Manager Azure File Sync Azure Arc Azure File Manager

Answer 1

Azure File Sync Explanation: Azure File Sync enables centralizing your organization's file shares in Azure Files, while keeping the flexibility, performance, and compatibility of a Windows file server. While some users may opt to keep a full copy of their data locally, Azure File Sync additionally has the ability to transform Windows Server into a quick cache of your Azure file share. You can use any protocol that's available on Windows Server to access your data locally, including SMB, NFS, and FTPS. You can have as many caches as you need across the world. Azure file shares can be used in two ways: by directly mounting these serverless Azure file shares (SMB) or by caching Azure file shares on-premises using Azure File Sync. Which deployment option you choose changes the aspects you need to consider as you plan for your deployment. Direct mount of an Azure file share: Since Azure Files provides SMB access, you can mount Azure file shares on-premises or in the cloud using the standard SMB client available in Windows, macOS, and Linux. Because Azure file shares are serverless, deploying for production scenarios does not require managing a file server or NAS device. This means you don't have to apply software patches or swap out physical disks. Cache Azure file share on-premises with Azure File Sync: Azure File Sync enables you to centralize your organization's file shares in Azure Files, while keeping the flexibility, performance, and compatibility of an on-premises file server. Azure File Sync transforms an on-premises (or cloud) Windows Server into a quick cache of your Azure file share.

Answer 2

No Explanation: This might actually come as a shock to you, but not all Azure regions support Availability zones.

Answer 3

Azure Managed Disks Explanation: Azure managed disks are block-level storage volumes that are managed by Azure and used with Azure Virtual Machines. Managed disks are like a physical disk in an on-premises server but, virtualized. With managed disks, all you have to do is specify the disk size, the disk type, and provision the disk. Once you provision the disk, Azure handles the rest.

Answer 4

Cool Explanation: The keyword here is 'cost-effective'. From the Official Azure Documentation: When your data is stored in an online access tier (either Hot or Cool), users can access it immediately. The Hot tier is the best choice for data that is in active use, while the Cool tier is ideal for data that is accessed less frequently, but that still must be available for reading and writing. Example usage scenarios for the Hot tier include: Data that's in active use or is expected to be read from and written to frequently. Data that's staged for processing and eventual migration to the Cool access tier. Usage scenarios for the Cool access tier include: Short-term data backup and disaster recovery. Older data sets that aren't used frequently, but are expected to be available for immediate access. Large data sets that need to be stored in a cost-effective way while additional data is being gathered for processing.

Answer 5

By Purchasing Reservations Explanation: Azure Reservations help you save money by committing to one-year or three-year plans for multiple products. Committing allows you to get a discount on the resources you use. Reservations can significantly reduce your resource costs by up to 72% from pay-as-you-go prices. Reservations provide a billing discount and don't affect the runtime state of your resources. After you purchase a reservation, the discount automatically applies to matching resources. You can pay for a reservation up front or monthly. The total cost of up-front and monthly reservations is the same and you don't pay any extra fees when you choose to pay monthly. Monthly payment is available for Azure reservations, not third-party products. Why buy a reservation? If you have consistent resource usage that supports reservations, buying a reservation gives you the option to reduce your costs. For example, when you continuously run instances of a service without a reservation, you're charged at pay-as-you-go rates. When you buy a reservation, you immediately get the reservation discount. The resources are no longer charged at the pay-as-you-go rates.

Answer 6

Azure Policy Explanation: Azure Policy helps to enforce organizational standards and to assess compliance at-scale. Through its compliance dashboard, it provides an aggregated view to evaluate the overall state of the environment, with the ability to drill down to the per-resource, per-policy granularity. It also helps to bring your resources to compliance through bulk remediation for existing resources and automatic remediation for new resources. Common use cases for Azure Policy include implementing governance for resource consistency, regulatory compliance, security, cost, and management. Policy definitions for these common use cases are already available in your Azure environment as built-ins to help you get started. All Azure Policy data and objects are encrypted at rest. For more information, see Azure data encryption at rest.

Answer 7

Azure Storage Explorer Explanation: Azure Storage Explorer is a free tool to conveniently manage your Azure cloud storage resources from your desktop. You can easily use it to do the following - Upload, download and manage Azure Storage blobs, files, queues and tables, as well as Azure Data Lake Storage entities and Azure Managed Disks. Configure storage permissions and access controls, tiers and rules.

Answer 8

None of the above Explanation: The correct answer is - None of the above. Azure AD supports multiple authentication methods for user sign-in, including passwords, certificates, and biometric authentication. Passwords are the most commonly used authentication method and are supported by all Azure AD editions. Certificates can be used for machine authentication and require a client certificate to be installed on the device. Biometric authentication uses unique physical characteristics, such as fingerprints or facial recognition, to authenticate users.

Answer 9

Tools for visualizing data flow and understanding its origins and dependencies. Explanation: Microsoft Purview provides a unified data governance solution to help manage and govern your on-premises, multicloud, and software as a service (SaaS) data. Microsoft Purview provides tools for visualizing data lineage, allowing organizations to track the flow of data, understand its origins, and analyze its dependencies. This helps in performing impact analysis and ensuring data quality.

Answer 10

The total amount of data you need to transfer Explanation: The correct answer is : The total amount of data you need to transfer. When choosing the appropriate Data Box device for a migration, it is important to consider the total amount of data that needs to be transferred, as different devices have different capacity limits. The available network bandwidth is also an important factor, as it affects the speed of the transfer. The type of data being transferred may affect the choice of device, as some types of data may require specialized hardware or encryption capabilities. The organization's budget for the migration is not necessarily a factor in choosing the appropriate Data Box device, as the cost of the devices is fixed and does not vary based on the amount of data being transferred.

Answer 11

To declare the desired state of Azure resources and their dependencies. Explanation: An ARM template is a JSON file that defines the desired state of Azure resources, including their configuration, dependencies, and relationships. It allows you to automate resource provisioning.

Answer 12

Azure Sentinel Explanation: The correct answer is Azure Sentinel. Azure Firewall can integrate with Azure Sentinel to provide threat intelligence and advanced security analytics. Azure Sentinel is a cloud-native security information and event management (SIEM) solution that provides intelligent security analytics and threat intelligence across the enterprise. By integrating Azure Firewall with Azure Sentinel, customers can gain visibility and control over network traffic, detect threats, and respond quickly to security incidents.

Answer 13

Yes Explanation: A few key differences between Azure Policy and RBAC exist. RBAC focuses on user actions at different scopes. You might be added to the contributor role for a resource group, allowing you to make changes to that resource group. Azure Policy focuses on resource properties during deployment and for already-existing resources. Azure Policy controls properties such as the types or locations of resources. Unlike RBAC, Azure Policy is a default-allow-and-explicit-deny system. RBAC and Polices in Azure play a vital role in a governance strategy. While different, they both work together to ensure organizational business rules are followed be ensuring proper access and resource creation guidelines are met.

Answer 14

Management Group --> Subscription --> Resource Group Explanation: Azure provides four levels of scope: management groups, subscriptions, resource groups, and resources. The following image shows an example of these layers. Though not labeled as such, the blue cubes are resources.

Answer 15

Azure Table Storage Explanation: Azure Table storage is a service that stores non-relational structured data (also known as structured NoSQL data) in the cloud, providing a key/attribute store with a schemaless design. Because Table storage is schemaless, it's easy to adapt your data as the needs of your application evolve. Access to Table storage data is fast and cost-effective for many types of applications, and is typically lower in cost than traditional SQL for similar volumes of data. You can use Table storage to store flexible datasets like user data for web applications, address books, device information, or other types of metadata your service requires. You can store any number of entities in a table, and a storage account may contain any number of tables, up to the capacity limit of the storage account.

Answer 16

Subscription Explanation: Azure Locks can be set at the subscription level to prevent users from modifying or deleting a resource group or its resources. When an Azure Lock is applied to a resource or resource group, it prevents all users and roles from making any changes to the resource or deleting it. Other Options: Resource is incorrect because locks can be applied to resources, but it is not the highest level at which a lock can be set. Setting a lock at the resource level would only apply to that specific resource, whereas setting a lock at the subscription level would apply to all resources within the subscription. Management Group is incorrect because although locks can be applied at the management group level, this is not the highest level at which a lock can be set. Setting a lock at the management group level would apply to all resources within that management group, but if a resource group is not within that management group, it would not be affected by the lock. Tenant is incorrect because locks cannot be set at the tenant level. The highest level at which locks can be set is the subscription level.

Answer 17

Spot Pricing Explanation:

Answer 18

Azure Data Box Gateway Explanation: Azure Data Box Gateway is a storage solution that enables you to seamlessly send data to Azure. This article provides you an overview of the Azure Data Box Gateway solution, benefits, key capabilities, and the scenarios where you can deploy this device. Data Box Gateway is a virtual device based on a virtual machine provisioned in your virtualized environment or hypervisor. The virtual device resides in your premises and you write data to it using the NFS and SMB protocols. The device then transfers your data to Azure block blob, page blob, or Azure Files. Use cases: Data Box Gateway can be leveraged for transferring data to the cloud such as cloud archival, disaster recovery, or if there is a need to process your data at cloud scale. Here are the various scenarios where Data Box Gateway can be used for data transfer. Cloud archival - Copy hundreds of TBs of data to Azure storage using Data Box Gateway in a secure and efficient manner. The data can be ingested one time or an ongoing basis for archival scenarios. Continuous data ingestion - Continuously ingest data into the device to copy to the cloud, regardless of the data size. As the data is written to the gateway device, the device uploads the data to Azure Storage. Initial bulk transfer followed by incremental transfer - Use Data Box for the bulk transfer in an offline mode (initial seed) and Data Box Gateway for incremental transfers (ongoing feed) over the network.

Answer 19

Yes Explanation: A hybrid cloud is a combination of an on-prem deployment or private cloud, and public cloud. Therefore, to create a hybrid cloud, you must deploy resources to a public cloud.

Answer 20

Network virtual appliances Explanation: Azure virtual networks enable you to filter traffic between subnets by using the following approaches: Network security groups A network security group is an Azure resource that can contain multiple inbound and outbound security rules. You can define these rules to allow or block traffic, based on factors such as source and destination IP address, port, and protocol. Network virtual appliances A network virtual appliance is a specialized VM that can be compared to a hardened network appliance. A network virtual appliance carries out a particular network function, such as running a firewall or performing wide area network (WAN) optimization. Azure virtual networks enable you to link resources together in your on-premises environment and within your Azure subscription. In effect, you can create a network that spans both your local and cloud environments. There are three mechanisms for you to achieve this connectivity: Point-to-site virtual private networks The typical approach to a virtual private network (VPN) connection is from a computer outside your organization, back into your corporate network. In this case, the client computer initiates an encrypted VPN connection to connect that computer to the Azure virtual network. Site-to-site virtual private networks A site-to-site VPN links your on-premises VPN device or gateway to the Azure VPN gateway in a virtual network. In effect, the devices in Azure can appear as being on the local network. The connection is encrypted and works over the internet. Azure ExpressRoute For environments where you need greater bandwidth and even higher levels of security, Azure ExpressRoute is the best approach. ExpressRoute provides a dedicated private connectivity to Azure that doesn't travel over the internet.

Answer 21

Azure Pricing Calculator Explanation: Disclaimer : Prices are estimates and are not intended as actual price quotes. Actual prices may vary depending on the date of purchase, currency of payment and type of agreement that you enter into with Microsoft. Contact a Microsoft sales representative for additional information on pricing.

Answer 22

security posture Explanation: The objective of defense in depth is to protect information and prevent it from being stolen by those who aren't authorized to access it. A defense-in-depth strategy uses a series of mechanisms to slow the advance of an attack that aims at acquiring unauthorized access to data. Your security posture is your organization's ability to protect from and respond to security threats. The common principles used to define a security posture are confidentiality, integrity, and availability, known collectively as CIA. Confidentiality The principle of least privilege means restricting access to information only to individuals explicitly granted access, at only the level that they need to perform their work. This information includes protection of user passwords, email content, and access levels to applications and underlying infrastructure. Integrity Prevent unauthorized changes to information: At rest: when it's stored. In transit: when it's being transferred from one place to another, including from a local computer to the cloud. A common approach used in data transmission is for the sender to create a unique fingerprint of the data by using a one-way hashing algorithm. The hash is sent to the receiver along with the data. The receiver recalculates the data's hash and compares it to the original to ensure that the data wasn't lost or modified in transit. Availability Ensure that services are functioning and can be accessed only by authorized users. Denial-of-service attacks are designed to degrade the availability of a system, affecting its users.

Answer 23

Azure Migrate - Server Migration Explanation: Azure Migrate - Server Migration is the right tool for performing a lift-and-shift migration of your on-premises virtual machines to Azure. It supports various virtualization platforms like VMware, Hyper-V, and physical servers. The tool simplifies the migration process, automates tasks, and ensures minimal downtime during migration.

Answer 24

Infrastructure as a Service (IaaS) Overall explanation From the Official Azure Documentation: IaaS is the most flexible category of cloud services. It aims to give you complete control over the hardware that runs your application. Instead of buying hardware, with IaaS, you rent it.

Answer 25

Azure AzCopy Explanation: AzCopy is a command-line utility that you can use to copy blobs or files to or from a storage account.

Answer 26

Operational Explanation: One of the major changes that you will face when you move from on-premises cloud to the public cloud is the switch from capital expenditure (buying hardware) to operating expenditure (paying for service as you use it). This switch also requires more careful management of your costs. The benefit of the cloud is that you can fundamentally and positively affect the cost of a service you use by merely shutting down or resizing it when it's not needed.

Answer 27

Improved security by bypassing the public internet. Explanation: One of the primary benefits of using private endpoints is improved security. By utilizing private endpoints, you can establish a direct connection to Azure services from within your virtual network, bypassing the public internet. This helps in reducing the exposure of your resources to potential security risks associated with public internet traffic.

Answer 28

Capital Expense Explanation: Migrating to the public cloud saves a lot of Capex upfront and one of the biggest advantages is the ability to Pay as you go!

Answer 29

Azure AD and RBAC provide complementary functionality for managing access to Azure resources. Explanation: The correct option is : Azure AD and RBAC provide complementary functionality for managing access to Azure resources. Azure AD and RBAC are both related to identity and access management (IAM) in Azure, but they serve different purposes. Azure AD provides identity management services, including user authentication and authorization for cloud-based applications and services, while RBAC is used to manage access to specific Azure resources. RBAC provides a way to assign permissions to specific roles rather than individual users, which makes it easier to manage access control in large environments. Azure AD provides a central location for managing user identities and their access to various applications and resources, including Azure resources. Therefore, Azure AD and RBAC are complementary solutions that work together to provide a comprehensive IAM solution for Azure users. Other options - Azure AD and RBAC are two separate identity and access management solutions : This option is incorrect because Azure AD and RBAC are not two separate solutions. Rather, they are two separate components of the larger Azure IAM solution. Azure AD provides identity management services, while RBAC provides a way to manage access control for specific Azure resources. Azure AD is a prerequisite for RBAC, and RBAC relies on Azure AD for user authentication : This option is incorrect because RBAC does not rely on Azure AD for user authentication. Instead, RBAC is used to manage access to specific Azure resources, and it is possible to use RBAC without using Azure AD. While Azure AD can be used to manage RBAC roles, it is not a prerequisite for using RBAC. Azure AD and RBAC are both built into the Azure portal and are used interchangeably : This option is incorrect because Azure AD and RBAC are not interchangeable solutions. Rather, they serve different purposes and provide different functionality. Azure AD is used to manage user identities and their access to various applications and resources, while RBAC is used to manage access control for specific Azure resources.

Answer 30

Elasticity Explanation: Elasticity in this case is the ability to provide additional compute resource when needed and reduce the compute resource when not needed to reduce costs. Autoscaling is an example of elasticity. Here you don't need to provision lot of resources in advance. You will incur costs by allocating more resources only when demand increases! Elastic computing is the ability to quickly expand or decrease computer processing, memory and storage resources to meet changing demands without worrying about capacity planning and engineering for peak usage. Typically controlled by system monitoring tools, elastic computing matches the amount of resources allocated to the amount of resources actually needed without disrupting operations. With cloud elasticity, a company avoids paying for unused capacity or idle resources and doesn't have to worry about investing in the purchase or maintenance of additional resources and equipment.

Answer 31

Azure Migrate - Server Assessment and Azure Migrate - Server Migration Explanation: Azure Migrate - Server Assessment helps you to evaluate the migration readiness of your on-premises servers, identify any potential issues, and provide recommendations. Azure Migrate - Server Migration is designed to migrate your on-premises virtual machines or physical servers to Azure with minimal downtime. These two features work together to ensure a smooth migration of interconnected servers, as they address both the pre-migration assessment and the actual migration process. Other options: Azure Migrate - App Service and Azure Migrate Web App Migration - These are geared towards migrating web applications to Azure App Service and not for migrating interconnected servers. Azure Migrate - Database Assessment and Azure Migrate Database Migration - These focus on the assessment and migration of on-premises databases to Azure. They are not intended for migrating interconnected servers. Azure Migrate - Data Box and Azure Migrate Data Factory - These are used for transferring large amounts of data to Azure and for data integration, respectively. They do not address the migration of interconnected servers.

Answer 32

Yes Explanation: Azure Synapse Analytics was previously called Azure SQL Data Warehouse! Azure Synapse Analytics is a limitless analytics service that brings together data integration, enterprise data warehousing and big data analytics. It gives you the freedom to query data on your terms, using either serverless or dedicated resources at scale. Azure Synapse brings these worlds together with a unified experience to ingest, explore, prepare, manage and serve data for immediate BI and machine-learning needs.

Answer 33

An Azure Network Security Group (NSG) Explanation: Restricting Internet access to your VMs in Azure can be achieved by making use of Azure Network Security Groups. From the Official Azure Documentation: We can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources. For each rule, you can specify source and destination, port, and protocol.

Answer 34

Containers Explanation: Containers are often used to create solutions by using a microservice architecture. This architecture is where you break solutions into smaller, independent pieces. For example, you might split a website into a container hosting your front end, another hosting your back end, and a third for storage. This split allows you to separate portions of your app into logical sections that can be maintained, scaled, or updated independently. Imagine your website back-end has reached capacity but the front end and storage aren't being stressed. You could: Scale the back end separately to improve performance. Decide to use a different storage service. Replace the storage container without affecting the rest of the application.

Answer 35

False Explanation: This statement is false. Business-to-Customer (B2C) scenarios in Azure AD are focused on managing customer identities and providing a tailored sign-up and sign-in experience for external customers using your applications. From the official documentation: Azure AD B2C is a Customer Identity and Access Management (CIAM) solution that lets you build user journeys for consumer- and customer-facing apps. If you're a business or individual developer creating customer-facing apps, you can scale to millions of consumers, customers, or citizens by using Azure AD B2C. Developers can use Azure AD B2C as the full-featured CIAM system for their applications. With Azure AD B2C, customers can sign in with an identity they've already established (like Facebook or Gmail). You can completely customize and control how customers sign up, sign in, and manage their profiles when using your applications.

Answer 36

The Size of the Virtual Machine (VM) The Region the Virtual Machine is located in Explanation: From the Azure Pricing Calculator, we can see that: Region and Instance size affects Virtual Machine costs!

Answer 37

No Explanation: Automatically is the key word in this question that most people miss. Data is not backed up automatically to another Azure Data Center, although it can be backed up depending on the replication option configured for the account. Locally Redundant Storage (LRS) is the default which maintains three copies of the data in the data center. Geo-redundant storage (GRS) has cross-regional replication to protect against regional outages. Data is replicated synchronously three times in the primary region, then replicated asynchronously to the secondary region.

Answer 38

Agent-based discovery Explanation: The keyword here is 'physical' servers. The correct answer is 'Agent-Based Discovery'. Agent-based discovery is the correct choice for discovering and assessing physical servers. This method requires the installation of agents on the physical servers, which then collect and report data back to Azure Migrate for assessment. Other Options - Dependency visualization is a feature within Azure Migrate that helps you understand the dependencies between servers, applications, and services. It doesn't directly discover or assess physical servers. Hyper-V discovery is used to discover and assess virtual machines running on Hyper-V hosts. It is not designed for discovering and assessing physical servers. Agentless discovery is a method used by Azure Migrate to discover and assess virtual machines in virtualized environments, such as VMware or Hyper-V, without the need for installing agents on the source virtual machines. It is not intended for discovering and assessing physical servers.

Answer 39

Data-at-rest encryption Explanation: The correct answer is : Data-at-rest encryption. This is a key security feature of Azure Data Box devices that ensures data is unreadable if intercepted during the shipping process. Data-at-rest encryption ensures that data is encrypted when it is stored on the device, making it impossible for anyone to access the data without the encryption key. This is an important security measure that protects against data theft or loss during the shipping process. Other options: Firewall protection: This is incorrect because it refers to a network security measure that protects against unauthorized access to a network, but it is not directly related to the security of data during the shipping process. Multi-factor authentication: This is also incorrect because it is a security measure that verifies a user's identity using multiple methods, such as a password and a fingerprint or a security token. This is not directly related to the security of data during the shipping process. Data transfer over HTTPS: This is incorrect because it refers to a network protocol that encrypts data during transmission between a web server and a client, but it does not protect data during the shipping process.

Answer 40

A Firewall Explanation: A firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules. You can create firewall rules that specify ranges of IP addresses. Only clients granted IP addresses from within those ranges are allowed to access the destination server. Firewall rules can also include specific network protocol and port information. Azure Firewall is a managed, cloud-based network security service that helps protect resources in your Azure virtual networks. A virtual network is similar to a traditional network that you'd operate in your own datacenter. It's a fundamental building block for your private network that enables virtual machines and other compute resources to securely communicate with each other, the internet, and on-premises networks.

Answer 41

Developer Explanation: Reference: https://azure.microsoft.com/en-in/pricing/#product-pricing

Answer 42

By extending Azure Policy and Blueprints to on-premises and multi-cloud environments. Explanation: Azure Arc extends Azure Policy and Blueprints to on-premises and multi-cloud environments, allowing you to enforce governance policies consistently across the entire hybrid environment.

Answer 43

They enable you to manage and configure Kubernetes clusters across multiple environments Explanation: Azure Arc-enabled Kubernetes clusters allow you to manage and configure Kubernetes clusters consistently across multiple environments, including on-premises and multi-cloud, using Azure management tools.

Answer 44

Owner Explanation: By default, only the owner of an Azure subscription or resource group can delete or modify an Azure Lock. The owner role is the most privileged built-in role in Azure, allowing full access to all resources and management operations within a subscription or resource group.

Answer 45

To manage and monitor on-premises and multi-cloud environments from a single Azure portal. Explanation: Azure Arc allows organizations to manage and monitor not only Azure resources but also on-premises and multi-cloud environments using the Azure portal. It extends Azure management capabilities to a broader range of resources and locations.

Answer 46

Azure Cost Management + Billing Explanation:

Answer 47

Azure Service Health Explanation: If you want to keep tabs on Azure itself, especially the services and regions you depend on, you want to choose Azure Service Health. You can view the current status of the Azure services you rely on, upcoming planned outages, and services that will be sunset. You can set up alerts that help you stay on top of incidents and upcoming downtime without having to visit the dashboard regularly. However, if you want to keep track of the performance or issues related to your specific VM or container instances, databases, your applications, and so on, you want to visit Azure Monitor and create reports and notifications to help you understand how your services are performing or diagnose issues related to your Azure usage.

Answer 48

To manage and provision infrastructure using code. Explanation: Infrastructure as Code (IaC) is a key DevOps practice that involves the management of infrastructure, such as networks, compute services, databases, storages, and connection topology, in a descriptive model. IaC allows teams to develop and release changes faster and with greater confidence. Infrastructure as Code (IaC) allows you to define and manage infrastructure resources such as virtual machines, networks, and storage using code. This approach enhances consistency, repeatability, and scalability in deploying and managing resources.

Answer 49

No Explanation: All new virtual machines have an operating system disk and a local disk (or “resource disk”). Azure doesn't charge for local disk storage. The operating system disk is charged at the standard rate for disks. See all virtual machine configurations.

Answer 50

peering Explanation: You can link virtual networks together by using virtual network peering. Peering enables resources in each virtual network to communicate with each other. These virtual networks can be in separate regions, which allows you to create a global interconnected network through Azure. User-defined routes (UDR) are a significant update to Azure’s Virtual Networks that allows for greater control over network traffic flow. This method allows network administrators to control the routing tables between subnets within a VNet, as well as between VNets.

Answer 51

Azure Data Lake Storage Gen2 Explanation: Azure Data Lake Storage Gen2 is a set of capabilities dedicated to big data analytics, built on Azure Blob Storage. Data Lake Storage Gen2 converges the capabilities of Azure Data Lake Storage Gen1 with Azure Blob Storage. Designed for enterprise big data analytics Data Lake Storage Gen2 makes Azure Storage the foundation for building enterprise data lakes on Azure. Designed from the start to service multiple petabytes of information while sustaining hundreds of gigabits of throughput, Data Lake Storage Gen2 allows you to easily manage massive amounts of data. A fundamental part of Data Lake Storage Gen2 is the addition of a hierarchical namespace to Blob storage. The hierarchical namespace organizes objects/files into a hierarchy of directories for efficient data access. Data Lake Storage Gen2 builds on Blob storage and enhances performance, management, and security in the following ways: Performance is optimized because you do not need to copy or transform data as a prerequisite for analysis. Compared to the flat namespace on Blob storage, the hierarchical namespace greatly improves the performance of directory management operations, which improves overall job performance. Management is easier because you can organize and manipulate files through directories and subdirectories. Security is enforceable because you can define POSIX permissions on directories or individual files.

Answer 52

No Explanation: This answer does not specify that the scale set will be configured across multiple data centers so this solution does not meet the goal. For this question, deploying the VMs to multiple data centers / availability zones would make more sense. From the Official Azure Documentation: Azure virtual machine scale sets let you create and manage a group of load balanced VMs. The number of VM instances can automatically increase or decrease in response to demand or a defined schedule. Scale sets provide high availability to your applications, and allow you to centrally manage, configure, and update many VMs. Virtual machines in a scale set can be deployed across multiple update domains and fault domains to maximize availability and resilience to outages due to data center outages, and planned or unplanned maintenance events.

Answer 53

Azure ExpressRoute Explanation:

Answer 54

RBAC allows you to assign permissions to specific roles rather than individual users. Explanation: The correct option is : RBAC allows you to assign permissions to specific roles rather than individual users. Other options - RBAC allows you to manage user identities and access to cloud resources: This is incorrect because while RBAC is used for managing access to cloud resources, it specifically provides granular access control by allowing you to assign permissions to specific roles rather than individual users. Manage user identities are the keywords here. RBAC provides authentication and authorization services for Azure resources : This is incorrect because RBAC provides authorization services, but not authentication services. Authentication is provided by Azure AD! RBAC provides a centralized directory for managing user accounts and access to resources : This is incorrect because while RBAC does provide a centralized management interface for managing access to Azure resources, it specifically allows you to assign permissions to roles rather than manage user accounts. Again, managing user accounts is the keyword here.

Answer 55

It helps classify and manage data to meet regulatory requirements.

Answer 56

Azure Batch Explanation: Azure Batch enables large-scale parallel and high-performance computing (HPC) batch jobs with the ability to scale to tens, hundreds, or thousands of VMs. When you're ready to run a job, Batch does the following: Starts a pool of compute VMs for you. Installs applications and staging data. Runs jobs with as many tasks as you have. Identifies failures. Requeues work. Scales down the pool as work completes

Answer 57

Fault tolerance Explanation: The correct answer is Fault tolerance. Fault tolerance refers to the ability of a system or application to continue operating without disruption in the event of a failure. This is achieved through redundancy and failover mechanisms that ensure that if one component fails, another component takes over seamlessly, without any downtime or interruption of service. Scalability refers to the ability to increase or decrease resources as needed to meet changing demands, while elasticity refers to the ability to dynamically provision and de-provision resources based on demand. High availability refers to the ability of a system or application to remain operational and accessible for a high percentage of time, typically measured as a percentage of uptime over a given period.

Answer 58

Azure ExpressRoute Explanation: With ExpressRoute, your data doesn't travel over the public internet, so it's not exposed to the potential risks associated with internet communications. ExpressRoute is a private connection from your on-premises infrastructure to your Azure infrastructure. However, even if you have an ExpressRoute connection, DNS queries, certificate revocation list checking, and Azure Content Delivery Network requests are still sent over the public internet.

Answer 59

Conditional Access Explanation: Conditional Access is a tool that Azure Active Directory uses to allow (or deny) access to resources based on identity signals. These signals include who the user is, where the user is, and what device the user is requesting access from.

Answer 60

must be rehydrated before the data can be accessed Explanation: Azure storage offers different access tiers: hot, cool and archive. The archive access tier has the lowest storage cost. But it has higher data retrieval costs compared to the hot and cool tiers. Data in the archive tier can take several hours to retrieve. While a blob is in archive storage, the blob data is offline and can't be read, overwritten, or modified. To read or download a blob in archive, you must first rehydrate it to an online tier. Example usage scenarios for the archive access tier include: Long-term backup, secondary backup, and archival datasets Original (raw) data that must be preserved, even after it has been processed into final usable form. Compliance and archival data that needs to be stored for a long time and is hardly ever accessed.

Answer 61

Geographic distribution Explanation: One of the major benefits of cloud computing is the ability to quickly and easily deploy applications or systems across multiple regions or locations. This is often referred to as geographic distribution, and it allows organizations to better serve customers in different regions by providing faster response times and reduced latency. For example, imagine a company that has customers in both North America and Europe. By using a cloud provider's infrastructure, the company can deploy its application in data centers located in both regions, allowing customers to access the application with minimal latency. Additionally, if one data center experiences an outage or other issue, the application can fail over to another data center, ensuring that customers are still able to access the application without interruption. This is an example of the fault tolerance aspect of cloud computing. Scalability is incorrect because scalability refers to the ability to increase or decrease resources as needed to meet changing demands, but it does not necessarily enable rapid deployment across multiple locations. Fault tolerance is incorrect because fault tolerance refers to the ability of a system to continue operating in the event of a hardware or software failure. While fault tolerance is important for ensuring system availability, it does not necessarily enable rapid deployment across multiple locations. Elasticity is incorrect because elasticity refers to the ability to automatically adjust resources in response to changing demand. While elasticity is related to scalability, it does not necessarily enable rapid deployment across multiple locations. Geographic distribution is the correct answer because it refers to the ability to deploy applications or systems across multiple regions or locations, which can help improve performance, reduce latency, and provide redundancy in case of a disaster or outage.