Az UDemy Certification test

Question 1

True or false: You can manually trigger a logic app deployed in Azure from Visual Studio

Answer 1

TRUE, you can manually run your logic app using Visual Studio.

Question 2

If you are concerned that your Logic Apps are running in a multi-tenant environment, and want your Logic App to have its own hardware and network, which Azure Service would you need to add?

App Service Isolated Tier
Integrated Service Environment (ISE)
App Service Environment (ASE)
Virtual Network Service Endpoints

Answer 2

Explicación

Logic Apps can be put on their own hardware, with no other customers, using Integration service environments (ISE).

Question 3

What is the primary difference between the Owner role and the Contributor role?

The owner can create new resources whereas a contributor can only modify existing resources
The owner gets billed for the services
There can only be one owner to a resource
Tje owner of a resource can grant access to it to others. The contributor can control the resource but not give access to it to others.

Answer 3

Explicación
The owner of a resource can grant access to it to others. The contributor can control the resource but not give access to it to others.

Question 4

What is the maximum number of apps you can install in a single App Service free account?

10
Unlimited
100
1

Answer 4

Explicación

You can install up to 10 apps on a free account. Those 10 apps will all share the computing resources of that account.

Question 5

What security feature exists for API apps that will either allow or prevent applictions running from other domains (external web sites) from calling the API?

RBAC
Cross Site Scripting (XSS)
Azure AD
Cross-Origin Resource Sharing (CORS)

Answer 5

Explicación
Cross Origin Resource Sharing (CORS) is a standard with web browsers that will prevent a website from calling an API in the browser unless the API explicitly allows the call.

Question 6

Which .NET Framework class contains the EventHubClient for working with Event Hub events?

Microsoft.ServiceBus.Web
Microsoft.Azure.ServiceBus.Core
Microsoft.ServiceBus.Messaging
Microsoft.ServiceBus.Channels

Answer 6

Explicación

Microsoft.ServiceBus.Messaging contains the client for communicating with the service bus

Question 7

What Azure command line tool for Windows and Linux is designed to copy data to and from a Blob storage account, across containers, and across storage accounts?

bcp
Azure Storage Explorer
scopy
AzCopy

Answer 7

Explicación

AzCopy is the tool that can be used to copy large amounts of files between storage containers and accounts.

Question 8

5 PB is quite a large amount of storage, and very few uses are going to fill that up. Assuming that you will not fill it up, what would be the most likely reason you need to create more than one storage account?

Implementing file lifecycle using hot, cool and archive storage types will require separate storage accounts for each
Each VM in your solution will need its own storage account for performance reasons
There is a limit on the number of files in a storage account
Exceeding the maximum of 20,000 IO operations persecond

Answer 8

Explicación

The main reason for creating separate storage accounts is when you are having a lot of IO operations per second.

Question 9

True or false: you can create an Azure Function to run whenever a new email comes into Outlook using it’s own native Trigger integration with email

Answer 9

Explicación

You cannot get an Azure Function to trigger off an incoming email.

Question 10

What two things are required for an application to use Azure AD as its authentication provider?

Azure AD pricing tier
Azure Storage Account key
Redirect URI
Application ID

Answer 10

Redirect URI
Application ID

Explicación
When you register an application, you are given an application ID. That plus the application URL are required to connect to Azure AD for authentication.

Question 11

Which of the following programming languages is not supported by Web Jobs?

Windows Binary (EXE)
Powershell
Ruby
JavaScript

Answer 11

Explicación

Web Jobs does not support Ruby scripts.

Question 12

You are the developer for Acme Inc. You use Virtual Machines in Azure to provide your web sites to the public. The problem with scaling a virtual machine is that it starts with the basic Windows Server 2016 image, and you will need to find a way to deploy your code to the machine before it’s useful. What is the recommended way to deploy your website code to a brand new VM that would be used in automatic scaling?

The custom script VM extension to execute a PowerShell script to do your deployment and configuration
Azure Devops Pipelis that triggers when a new VM is created
Include the custom code in the ARM template deployment
Create a custom VM image that contains the website files

Answer 12

The custom script VM extension to execute a PowerShell script to do your deployment and configuration

Explicación
Custom script is the best answer. You could possibly create a custom VM image, but every change to the code would require the creation of a new custom image. That is not the recommended way to do that.

Question 13

Which of the following is NOT a way that you can deploy your code into Azure App Service?

Github
Dropbox
FTP
Upload the code directly to the Azure Portal website

Answer 13

Upload the code directly to the Azure Portal website

Explicación
You cannot deploy a new or updated App Service code by uploading to the Portal.

Question 14

The speed of an Azure Event Hub is determined by the number of Throughput units you reserve for it. You can set between 1 and 20 throughput units for the Event Hub. How fast does 1 throughput unit represent for data coming in to an Event Hub?

1 throughput unit is one event per second
1000 events per second
1 MB per second or 1000 events per second (whichever comes first)
1 GB per second

Answer 14

Explicación

1 MB per second or 1000 events per second (whichever comes first)

Question 15

What is the minimum App Service Plan level that allows you to enable auto-scaling for your web apps?

Isolated
Enterprise
Basic
Standard

Answer 15

Explicación

You can do scaling on the standard plan.

Question 16

What option do you have to grant someone access to a single container in your Azure storage account without having to give them your storage account keys?

Grant their user contributor access to your stoarage account within your subscription
Create for them a Share Access Signature (SAS)
Change the permission settings for the container to public
Recycle the storage account keys after giving one to them

Answer 16

Create for them a Share Access Signature (SAS)

Explicación
Storage accounts are access by keys. Using SAS will let them have very granular access without exposing any other part of your storage account.

Question 17

You are the developer for Acme Inc. You have developed an API for your companies service that you’d like to release to the general public, but you are worried. You do not want this API to be a source of denial of service attack on the business, consuming the database or web server resources. So you’d like to force people to register to use the API, and place throttling limits on each individual approved to use it. Which Azure Service provides these features?

Application Gateway
Load Balancer
Azure Functions
API Management

Answer 17

API Management

Explicación
The API Management service allows you to force developers to register and be approved before using your API, and allows you to enforce limits on them to protect your application.

Question 18

What is the maximum storage capacity of a Cosmos DB container?

100 GB
2 PB
Unlimited
500 GB

Answer 18

Unlimited

Explicación
Cosmos DB can store an unlimited amount of data. There is no specific limit.

Question 19

You are a developer for Acme Inc. You have implemented Redis as a caching service and it’s going great. You are running on a premium plan, and using the top 53 GB of memory cache. You’d like to increase the memory limit to 106 GB, but Redis does not support that. How can you get more memory when using Azure Redis? Choose the best answer.

Implement the Redis auto-scaling feature to automatically add and remove Redis nodes when demand exceeds 53 GB
Implement the Redis Cluster feature, and add a second shard to double the memory available
Create a second Redis server and modify your application to shard your storage between the two locations
If you are attempting to store more than 53 GB of data in memory cache, you’re probably doing something wrong. Best to use Azure SQL Database for that.

Answer 19

Implement the Redis Cluster feature, and add a second shard to double the memory available

Explicación
Redis Cluster supports up to 10 shards to create 530 GB of memory.

Question 20

You are the developer for Acme Inc. During a recent security audit of your public web apps and APIs, it was discovered that many of your public APIs expose metadata about themselves in the response headers. These APIs were developed by a third-party, and you do not have the source code to be able to fix the code. For instance, from reading the API HTTP response header, you can tell that the application was coded in ASP.NET. It is also missing some response headers, such as a content security policy header. What is the easiest way to modify the HTTP headers put out by the API code without modifying the API code?

Create an API Gateway Inbound Policy that asks the API (nicely) not to send the headers
Create a proxy application that calls the API, and then strips out the headers before returning back to the caller
Modify the App Service settings to indicate which headers you do not want to send
API Gateway Outbound Policy

Answer 20

API Gateway Outbound Policy

Explicación
The API Gateway outbound policy allows you to change the output headers before sending to the client

Question 21

What two methods can you use to restrict public Internet access to a Function App?

Virtual Network Service Endpoints
NSG
IP Access restriction
Removal of HTTP triggers

Answer 21

IP Access restriction
Removal of HTTP triggers

Explicación
If you want to restrict a function app from being accessed by the Internet, then don’t use an HTTP trigger. If you need an HTTP trigger, you can restrict who calls it by IP address.

Question 22

What is the name of the command line interface that allows you to interact with a Kubernetes cluster?

kubectl
Azure CLI
Git Bash
PowerShell

Answer 22

kubectl

Explicación
kubectl is the command line tool that allows you to interact with the Kubernetes cluster.

Question 23

The API Management Gateway includes a powerful feature called Policies. What is the main function of policies?

You can set rules as to who has access to an API and who does not
Increase the security of your account by rejecting traffic coming in to the API by IP address
Policies allow you to modify the behaviour of the API using configuration instead of code. A policy can change both the inbound and the outbound response.

Answer 23

Policies allow you to modify the behaviour of the API using configuration instead of code. A policy can change both the inbound and the outbound response.

Explicación
Policies allow you to modify the inbound request as well as the outbound results without modifying the API code itself.

Question 24

What is the maximum number of virtual machines that a virtual machine scale set can support?

100
10
1000
20

Answer 24

1000

Explicacion
1000! 1000 Virtual Machines in a scale set. Muah ha ha ha!

Question 25

When using a CDN for your website to cache static assets, why is it that end users - website vistiors - perceive improved performance from your site compared with not using a CDN?

CDN compresses the files before sending them along
Your web browser will recognize that it’s seen the file before and not request it again
The CDN keeps a copy of the website on its servers, and so users do not have to ask for any data at all from the origin web server when using the app.
Primarily because the content is cached in edge servers that are closer to the end users, resulting in reduced latency between them and that edge server.

Answer 25

Primarily because the content is cached in edge servers that are closer to the end users, resulting in reduced latency between them and that edge server.

Explicación
The CDN uses the edge network to ensure that the files are closest to the users that need them, resulting in low latency.

Question 26

Azure Monitor can collect data from any source - not just the built in sources - using what method?

Data Collector API
Azure Event Hub
It can read data files from and Blob Storage account
Log Analytics Agent

Answer 26

Data Collector API

Explicación
Data Collector API is designed for you to create your own data inputs into Azure Monitor

Question 27

You are a developer for Acme Inc. You have an app that runs fine on your local machine, but throws an exception when running in Azure inside an Azure VM under Windows Server and IIS. You’d like to debug the app just like you can do on your local using Visual Studio debug tools. What do you need to do in order to be able to remotely debug an app running in an Azure VM?

Download and install Visual Studio Remote Tools on the Azure VM
Attach the debugger to the remote server URL
Enable “remote debugging” in the web app configuration settings
Microsoft Azure does not allow remote debugging traffic to travel over it’s network

Answer 27

Download and install Visual Studio Remote Tools on the Azure VM

Explicación
Visual Studio Remote Tools exists for this purpose.

Question 28

You are a developer for Acme Inc. Your application uses a Service Bus Queue to receive messages from an outside app, and you have a number of applications processing those messages. You have recently been told that the business is seeing a problem of some messages in an unusual circumstance being processed twice. When you debug the problem, it’s a message that was successfully processed by the job but then the program fails before the queue could be updated to delete the message. Your boss wants you to fix the problem such that it might be better if a message was missed than if a message was processed twice. What do you do to ensure messages do not get processed twice, even if sometimes they don’t get processed?

Use only a single message processing application and this problem should go away
Store the sequence number of the message in a database table at the end of the message processing task, and modify the message processing taks to check the table before processing.
Switch the queue to “at-most-once” delivery
Implement additional error checking code around the processing of messages so that a developer will be sent a text message whenever a message fails to process.

Answer 28

Switch the queue to “at-most-once” delivery

Explicación
At-most-once delivery is designed for this

Question 29

What is the total maximum capacity of an unmanaged Azure Storage account in North America?

1 TB
100 GB
1 GB
5 PB

Answer 29

5 PB

Explicación
In North America and Europe (excluding the UK), storage accounts can hold 5 PB.

Question 30

In order to use Azure Batch, you need to create a Batch account. What is the Azure CLI command that can be used to create an Azure batch account?

az create natch account
az batch create
New-AzBatchAccount
az batch account create

Answer 30

az batch account create

Explicación
“az batch account create” is the correct answer

Question 31

What optional security feature can you enable for Azure SQL Database or SQL Server that will ensure data remains encrypted while at rest, during movement between client and server, and while the data is in use?

Always Encrypted
Force HTTPS traffic only
Transparent Data Encryption (TDE)
Transport Layer Security (TLS)

Answer 31

Always Encrypted

Explicación
The Always Encrypted feature, which requires a special client library, will ensure the data is encrypted at the client site and never decrypted inside Azure.

Question 32

Which three of the following can Azure SQL Database Auto-Tune on your behalf?

Force the last good execution plan to be used
Add new indexes
Rewrite slow performing queries
Remove unused indexes

Answer 32

Force the last good execution plan to be used
Add new indexes
Remove unused indexes

Explicación
Auto-tune is not just a voice modulation app for singers. It also will add and remove indexes from SQL Database, as well as force the last good execution plan. If you enable that.

Question 33

Which TCP network port do you need to allow traffic to pass through so that you can connect to a SQL Server database, by default?

1433
80
22
3389

Answer 33

Explicación

SQL Server uses port 1433 by default, unless you change it.

Question 34

You are the developer for Acme Inc. Your flagship application, Wind Collector App, uses 16 Azure SQL Databases to store it’s various data. There are periods of intense application activity and all databases are impacted with increased reads and writes. Your company is concerned with the cost, as they are currently provisioned as Single Databases. Your boss suggests moving them to an Elastic Database pool, because that appears to be a lower price. What reason would you tell your boss that this is not a good idea?

Elastic Dtabase Pools work best when the databases in the pool have independant utilization patterns. If all databases in the pool peak at the same time, you will not see the type of cost savings you expect
Elastic Databse Pools are often more expensive than 16 Single Databases
You would need 16 elastic database pools for the 16 SQL databases, so you would not really be saving money
Migrating the single databases into an elastic database pool is difficult to do. It’s better to start with a fresh database than try to migrate it

Answer 34

Elastic Dtabase Pools work best when the databases in the pool have independant utilization patterns. If all databases in the pool peak at the same time, you will not see the type of cost savings you expect

Explicación
Elastic pools share resources between all of the databases within it. But if all the databases have usage spikes at the same time, you’re not getting the benefit of pooling them.

Question 35

True or false: Azure Search supports multiple data sources

Answer 35

Explicación

Yes, it supports multiple data sources besides a database input

Question 36

Which Azure monitoring service allows you to set alerts to be notified when service incidents and planned maintenance is happening within Azure in regions that may affect you?

Azure Dashboard
Azure Monitor
Azure VM Alerts
Azure Service Health

Answer 36

Explicación
Azure Service Health will monitor the health of the entire Azure platform and let you create alerts if something is happening that can affect you.

Question 37

Which Azure service provides the ability to store and manage your private Docker container images?

Azure Web Apps for Containers
Azure Kubernetes Service
Azure Container Instances
Azure Container Registry (ACR)

Answer 37

ACR

Explicación
You can send your container images to Azure Container Registry (ACR) to store them before deployment

Question 38

What is the maximum file size of a block blob?

1 TB
4 GB
2 PB
4.75 TB

Answer 38

4.75 TB

Explicación
Although the storage account can hold 2 PB (in North America and Europe, excluding the UK), the maximum file size is 4.75 TB.

Question 39

What optional service can you enable, for a fee, to protect Azure SQL Database from unusual client behavior and potentially harmful attempts to access or exploit databases?

Azure Firewall
Advanced Threat Protection
Advanced DDoS Protection
Application Gateway with WAF

Answer 39

Advanced Threat Protection

Explicación
ATP (Advanced Threat Protection) will detect attempts to hack your SQL Database.

Question 40

You are a developer for Acme Inc. You have developed a custom API that, when called, constructs a report that involves pulling together and summarizing several months worth of data. You have developed a logic app that calls this API, but the problem is that the logic app times out after 120 seconds because the API takes too long to respond. What is the appropriate modification in order to get this to work?

Increase the timeout beyond 120 seconds
Rewrite the application so that it returns partial results from the call, and requires a second call for the rest of the results. Pagination
Modify it to an asynchronous request

Answer 40

Modify it to an asynchronous request

Explicación
Azure recommends you use asynchronous requests for long running calls.

Question 41

What does an App Service Environment (ASE) provide that an App Service Plan does not provide?

Auto-scaling options
A personalized thank you card from Bill Gates
Fully isolated and dedicated environment
Custom domain name

Answer 41

Fully isolated and dedicated environment

Explicación
I would love a personalized card from Bill Gates. Bill, send one to me! But in the meantime, you get an isolated environment dedicated to you.

Question 42

What is the concept of strong consistency with Cosmos DB?

Strong consistency is that, accross the world readers are guarranteed to always get the most recent committed version of an item
Strong consistency means that, accross the world, two applications might read a data item from a Cosmos DB container at the same time and get different results
Strong consistency means that, if two data writers were to try to update the data in a Cosmos DB container, the one who updates it last would win
With strong consistency, you are committing too use Cosmos DB in only one way in the future and forgoing other data storage models and APIs

Answer 42

Strong consistency is that, accross the world readers are guarranteed to always get the most recent committed version of an item

Explicación
Strong consistency is that, across the world, readers are guaranteed to always get the most recent committed version of an item.

Question 43

Which Azure CDN vendor does NOT offer the capability to serve different static content compared to a mobile device and a full-sized screen?

Microsoft
Akamai
Verizon

Answer 43

Akamai

Explicación
Standard Akamai currently does not offer Mobile device rules. Current mobile rules are offered by Standard Microsoft and Premium Verizon. For more info - Compare Azure Content Delivery Network (CDN) product features | Microsoft Docs

Question 44

You are an Azure Developer for Acme Logistics Inc. You need to store data in the cloud in a tabular format, but your primiary concern is the cost. You expect the data to be about 100 GB and less than 1 million accesses per month. You want the data storage solution that costs the least, on average. Which Azure table data store would be the best solution in this case?

SQL Server Enterprise in a VM
Azure Data Lake
Table Storage
Azure SQL Database

Answer 44

Table Storage

Explicación
Table Storage is the most cost effective solution for storing data in table format, but does not offer the features and speed of other solutions.

Question 45

You are a developer for Acme Inc. Your company’s flagship application is the Wind Monitoring software that Wind Energy farms use to monitor their equipment. At the end of each day, the Wind Collector sends a message that contains all of the days statistics in JSON format which needs to be read, processed, and posted to the database. Which Azure Service is best for processing this type of data?

Service Bus
Storage Queues
IoT Hub
Event Hub

Answer 45

Explicación

Service Bus Queue is enterprise-grade message queue.

Question 46

With Cosmos DB, you do not pay for CPU, IOPS, or memory. What two elements are used to determine pricing? Choose two.

Storage used in GB
Actual number of requests
Number of containers
Provisioned Request Units per Second (RU/s)

Answer 46

Storage used in GB
Provisioned Request Units per Second (RU/s)

Explicación
Cosmos DB has the concept of Provisioned RU/s which gives you up to a certain requests per second. If you need more, you need to upgrade. It also charges for storage.

Question 47

What is the Azure Powershell (Az Module) command for creating a new Web App?

New-AzWebApp
New-AzureRMWebApp
az webapp create
Create-AzWebApp

Answer 47

New-AzWebApp

Explicación
Powershell has a command, hyphen, AZ, and the service name as it’s standard format.

Question 48

The standard use for a Content Delivery Network (CDN) cache is to accelerate the serving of static files such as images, videos, and scripts. But when a website is completely customized to each user, where every user sees different content or personalized content, it’s not as effective. How can a CDN help these dynamic websites serve web content faster to users?

Even content that is completely personalized to each user can be cached and will result in performance improvements
CDN can compress the HTML, Javascript and other elements so that a smaller amount of data is sent over the wire, resulting in a quicker render time
By reading the HTML as it serves it, it can prefetch the next set of URLs before the user browser even requests them; and it can apply dynamic compression to images if the browser client is on a slower internet connection or a mobile device.

Answer 48

By reading the HTML as it serves it, it can prefetch the next set of URLs before the user browser even requests them; and it can apply dynamic compression to images if the browser client is on a slower internet connection or a mobile device.

Explicación
CDN will read the HTML as it passes through and automatically fetch the next files to be delivered without the client needing to ask.

Question 49

What DNS record is required to link a custom domain name to an Azure App Service so that users can access the app service using the custom domain name? Choose two. Each answer is a complete solution.

TXT record
CNAME Record
A Record
QNAME Record

Answer 49

CNAME Record
A Record

Explicación
You can connect a domain name to a web app using an A record or a CNAME record.

Question 50

What is the main benefit of using Privileged Identity Management with Azure AD?

Monitoring and protection of superuser accounts, provinding a higher level of eoversight to those more powerful accounts
It allows business partners and others that you invite to create an account in your Azure AD so that they can access the apps they are given access to.
It allows customers to log into your app using their Facebook, Google, Microsoft ot LinkedIn accounts

Answer 50

Monitoring and protection of superuser accounts, provinding a higher level of eoversight to those more powerful accounts

Explicación
PIM will protect your Azure AD accounts by monitoring them for unusual activity.