Azure Fundamentals Flashcards

1
Q

[Answer choice] are physically separate datacenters within an Azure region.

Geographies
Region pairs
Resource groups
Availability zones

A

Availability zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In a region pair, a region is paired with another region in the same [answer choice].

geography
availability zone
resource group
datacenter

A

geography

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which two components are created in an Azure subscription?

resources
resource groups
management groups
Azure AD user accounts

A

resources and resource groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

For which resource does Azure generate separate billing reports and invoices by default?

management groups
resource groups
subscriptions
accounts

A

subscriptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which two Azure resources can make use of availability zones?

Azure SQL databases
virtual machines
Azure subscriptions
resource groups

A

Azure SQL databases and virtual machines

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which scenario is a use case for a VPN gateway?

connecting an on-premises datacenter to an Azure virtual network
partitioning a virtual network’s address space
communicating between Azure resources
filtering outbound network traffic

A

connecting an on-premises datacenter to an Azure virtual network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

You need to allow resources on two different Azure virtual networks to communicate with each other.
What should you configure?

a network security group (NSG)
a point-to-site VPN
peering
service endpoints

A

peering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What can you use to provide Mac and Android users with access to a Windows environment that will run Windows-based applications?

Azure Logic Apps
Azure Functions
Azure Virtual Desktop
Azure Container Instances

A

Azure Virtual Desktop

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which Azure Blob storage tier stores data offline and offers the lowest storage costs and the highest costs to access data?

Archive
Hot
Cool

A

Archive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which two scenarios are common use cases for Azure Blob storage? Each correct answer presents a complete solution. Select all answers that apply.

  • storing data for backup and restore
  • hosting ASPX files for a website
  • mounting a file storage share to be accessed as a virtual drive on multiple virtual machines
  • serving images or documents directly to a browser
A

storing data for backup and restore
serving images or documents directly to a browser

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which Azure Storage service should you use to store unstructured files, such as images, that will be served on webpages?

Azure Blob storage
Azure Queue Storage
Azure Disk Storage
Azure Table storage

A

Azure Blob storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which two protocols are used to access Azure file shares? Each correct answer presents a complete solution.

FTP
HTTP
Network File System (NFS)
Server Message Block (SMB)

A

NFS and SMB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What can you use to allow a user to manage all the resources in a resource group?

Azure role-based access control (RBAC)
resource tags
resource locks
Azure Key Vault

A

Azure role-based access control (RBAC)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

To which object or level is an Azure role-based access control (RBAC) role applied?

resource lock
scope
resource tag
policy

A

scope

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What Azure AD feature can you use to configure security authentication that requires users to use their mobile phone to sign in?

Microsoft Defender for Cloud
Advanced Thread Protection (ATP)
Azure Information Protection (AIP)
multi-factor authentication (MFA)

A

multi-factor authentication (MFA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which two services are provided by Azure AD? Each correct answer presents a complete solution.

authentication
data encryption
multi-factor authentication (MFA)
single sign-on (SSO)

A

authentication
SSO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What Azure AD feature can you use to ensure that users can only access Microsoft Office 365 applications from approved client applications?
Select only one answer.

Azure role-based access control (RBAC)
single sign-on (SSO)
Conditional Access
multi-factor authentication (MFA)

A

Conditional Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What can you use to sync identities between Azure AD and an on-premises deployment of Active Directory Domain Services (AD DS)?

Azure AD Connect
Azure Resource Manager (ARM)
Conditional Access
Azure Key Vault

A

Azure AD Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What can you use to ensure that users authenticate by using multi-factor authentication (MFA) when they attempt to sign in from a specific location?

Conditional Access
Azure role-based access control (RBAC)
single sign-on (SSO)
administrative units

A

Conditional Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

You need to compare the costs of running an application in an on-premises datacenter with the costs of running the application in Azure.
What should you use to assist you?

Azure Pricing calculator
Azure Advisor
Azure Cost Management
Total Cost of Ownership (TCO) Calculator

A

Total Cost of Ownership (TCO) Calculator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

You have an Azure virtual machine that is accessed only between 9:00 and 17:00 each day.
What should you do to minimize costs but preserve the associated hard disks and data?

Deallocate the virtual machine.
Delete the virtual machine.
Scale down the virtual machine.
Resize the virtual machine.

A

Deallocate the virtual machine.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

You need to associate the costs of resources to different groups within an organization without changing the location of the resources.
What should you use?

resource tags
resource groups
subscriptions
administrative units

A

resource tags

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What can you use to ensure that new and existing Azure resources stay in compliance with corporate standards?

Azure Policy
resource locks
resource tags
Azure Advisor

A

Azure Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

You need to recommend a solution for Azure virtual machine deployments. The solution must enforce company standards on the virtual machines.
What should you include in the recommendation?
Select only one answer.

Azure Cost Management
Azure Lock
Azure Policy
Azure Blueprints

A

Azure Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What allows you to orchestrate the deployment of resource templates and other artifacts?

Azure Blueprints
Azure Functions
Azure App Services
Azure Cognitive Services

A

Azure Blueprints simplifies large scale Azure deployments by packaging key environment artifacts, such as Azure Resource Manager (ARM) templates, role-based access controls (RBAC), and policies, into a single blueprint definition. You can easily apply the blueprint to new subscriptions and environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What can you use to ensure that a development team can only create virtual machines of a certain size?
Select only one answer.

Azure Blueprints
Azure Policy
Cloud Adoption Framework
Conditional Access

A

Azure Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Which two actions can be performed by using the graphical user interface (GUI) in the Azure portal?

Create new resources.

Review a graphical view of all the services you are using.

Change the availability zone of a virtual machine.

Repeatedly set up one or more resources and ensure that all the dependencies are created in the proper order.

A

Create new resources.

Review a graphical view of all the services you are using.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What can you use to describe the resources you want to provision in a declarative JSON format?

Azure PowerShell
Azure CLI
Azure Resource Manager (ARM) templates
Azure Repos

A

Azure Resource Manager (ARM) templates

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Which management layer accepts requests from any Azure tool or API and enables you to create, update, and delete resources in an Azure account?

Azure Resource Manager (ARM)
Azure management groups
Azure CLI
Azure Sphere

A

Azure Resource Manager (ARM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Which tool is accessible via Azure Cloud Shell and allows you to write Bash scripts to manage an Azure environment?

Azure PowerShell
Azure Resource Manager (ARM) templates
Azure Repos
Azure CLI

A

Azure CLI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What can you use to create resources in Azure and includes a validation step to ensure that all the resources can be created in the proper order based on dependencies, in parallel and idempotent?

Azure Resource Manager (ARM) templates
Azure CLI
Azure PowerShell
Azure REST API

A

Azure Resource Manager (ARM) templates

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

You need to use thresholds to trigger autoscaling functionality to scale an app up or down to meet the demand.
What should you include in the solution?

Azure Service Health
Azure Advisor
Azure Monitor
Log Analytics

A

Azure Monitor is a platform that collects metric and logging data, such as CPU percentages. The data can be used to trigger autoscaling.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Which issues require that you take action to avoid service interruptions, such as service retirements and breaking changes?

health advisories
service issues
application insights
Kusto queries

A

health advisories

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What can you use to monitor outages in a specific Azure region?
Select only one answer.

Azure Advisor

Azure Security Center

Azure Monitor

Azure Service Health

A

Azure Service Health

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What can you use to create alerts that relate to resource utilization for a specific Azure virtual machine?

Azure Advisor

Azure Monitor

Azure Policy

Azure Service Health

A

Azure Monitor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What can you use to find information about planned maintenance for Azure services that are critical to your organization?

Azure Service Health

Azure Advisor

Azure Monitor

Log Analytics

A

Azure Service Health

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Which two attributes are characteristics of the private cloud deployment model? Each correct answer presents a complete solution.

Hardware must be purchased.

Users have complete control over resources and security.

Applications can be provisioned and deprovisioned quickly.

Organizations only pay for what they use.

A

Hardware must be purchased.

Users have complete control over resources and security.

38
Q

What are two characteristics of the public cloud deployment model? Each correct answer presents a complete solution.

Services are offered over the internet and are available to anyone who wants to purchase them.

Computing resources are used exclusively by users from one organization.

Servers and storage are owned and operated by a third-party cloud service provider.

Hardware is physically located in an organization’s on-site datacenter.

A

Services are offered over the internet and are available to anyone who wants to purchase them.

Servers and storage are owned and operated by a third-party cloud service provider.

39
Q

What are two characteristics of a consumption-based model? Each correct answer presents a complete solution.

no upfront costs

requires the purchase and management of the physical infrastructure

the ability to stop paying for resources that are no longer needed

high capital expenditures

A

no upfront costs

the ability to stop paying for resources that are no longer needed

40
Q

What is an advantage of cloud computing compared to on-premises deployments?
Select only one answer.

You can scale more quickly.

You own your CPUs.

You have full access in case of internet outage.

You can work from multiple workstations.

A

You can scale more quickly.

41
Q

Select the answer that correctly completes the sentence.
[Answer choice] refers to upfront costs incurred one time, such as hardware purchases.
Select only one answer.

Operational expenditures

Capital expenditures

Elasticity

A consumption-based model

A

Capital expenditures

42
Q

Which cloud deployment model are you using if you have servers physically located at your organization’s on-site datacenter, and you migrate a few of the servers to the cloud?
Select only one answer.

private cloud

public cloud

hybrid cloud

A

hybrid cloud

43
Q

Select the answer that correctly completes the sentence.
Increasing compute capacity for an app by adding RAM or CPUs to a virtual machine is called [answer choice].
Select only one answer.

vertical scaling

horizontal scaling

disaster recovery

high availability

A

vertical scaling

44
Q

Select the answer that correctly completes the sentence.
Deploying and configuring cloud-based resources quickly as business requirements change is called [answer choice].

agility

scalability

elasticity

high availability

A

agility

45
Q

Select the answer that correctly completes the sentence.
Increasing compute capacity for an app by adding instances of resources such as virtual machines is called [answer choice].
Select only one answer.

vertical scaling

horizontal scaling

disaster recovery

high availability

A

horizontal scaling

46
Q

Select the answer that correctly completes the sentence.
An example of [answer choice] is automatically scaling an application to ensure that the application has the resources needed to meet customer demands.
Select only one answer.

agility

high availability

geo-distribution

elasticity

A

elasticity

47
Q

Select the answer that correctly completes the sentence.
In cloud computing, [answer choice] allows you to deploy applications to regional datacenters around the world.
Select only one answer.

high availability

disaster recovery

geo-location

elasticity

A

geo-location

48
Q

In which two deployment models are customers responsible for managing operating systems that host applications? Each correct answer presents a complete solution.
Select all answers that apply.

software as a service (SaaS)

platform as a service (PaaS)

infrastructure as a service (IaaS)

on-premises

A

infrastructure as a service (IaaS)

on-premises

49
Q

In a platform as a service (PaaS) model, which two components are the responsibility of the cloud service provider? Each correct answer presents a complete solution.
Select all answers that apply.

operating system

physical network

user access

information and data

A

operating system

physical network

50
Q

In which cloud service model is the customer responsible for managing the operating system?
Select only one answer.

Infrastructure as a service (IaaS)

platform as a service (PaaS)

software as a service (SaaS)

A

Infrastructure as a service (IaaS)

51
Q

Select the answer that correctly completes the sentence.
[Answer choice] is the logical container used to combine and organize Azure resources.
Select only one answer.

a resource group

Azure Resource Manager (ARM)

a management group

an Azure region

A

a resource group

52
Q

What is an Azure Storage account named storage001 an example of?
Select only one answer.

a resource

a resource group

a subscription

a resource manager

A

resource

53
Q

For which resource does Azure generate separate billing reports and invoices by default?
Select only one answer.

management groups

resource groups

subscriptions

accounts

A

subscriptions

54
Q

Which resource can you use to manage access, policies, and compliance across multiple subscriptions?
Select only one answer.

management groups

resource groups

administrative units

A

management groups

55
Q

Which Azure resource is a software emulation of a physical computer that includes a virtual processor, memory, storage, and networking resources?
Select only one answer.

a virtual machine

an App Service

a function

a container

A

virtual machine

56
Q

Which Azure compute service can you use to deploy and manage a set of identical virtual machines?
Select only one answer.

availability sets

availability zones

Azure Container Instances

Azure Virtual Machine Scale Sets

A

az vm scale sets

57
Q

What are two services that allow you to run applications in containers? Each correct answer presents a complete solution.
Select all answers that apply.

Azure Container Instances

Azure Kubernetes Service (AKS)

Azure Logic Apps

Azure Functions

A

Azure Container Instances

Azure Kubernetes Service (AKS)

58
Q

What is the purpose of defense in depth?
Select only one answer.

to enable you to locate and act on resources that are associated with specific workloads, environments, business units, and owners

to manage policies that control or audit resources so that the configurations stay compliant with corporate standards

to protect information and prevent it from being stolen by those who are unauthorized to access it

to evaluate resources and make recommendations to help improve reliability and performance

A

to protect information and prevent it from being stolen by those who are unauthorized to access it

59
Q

Which type of strategy uses a series of mechanisms to slow the advancement of an attack that aims to gain unauthorized access to data?
Select only one answer.

defense in depth

least privileged access

distributed denial-of-service (DDoS)

perimeter

A

defense in depth

60
Q

Why is cloud computing often less expensive than on-premises datacenters? Each correct answer presents a complete solution.
Select only one answer.

You are only billed for what you use.

Network bandwidth is free.

Cloud service offerings have limited functionality.

Services are only offered in a single geographic location.

A

You are only billed for what you use.

61
Q

What is high availability in a public cloud environment dependent on?
Select only one answer.

the service-level agreement (SLA) that you choose

the vertical scalability of an app

cloud-based backup retention limits

capital expenditures

A

the service-level agreement (SLA) that you choose

62
Q

Select the answer that correctly completes the sentence.
Increasing the capacity of an application by adding additional virtual machine is called [answer choice].
Select only one answer.

vertical scaling

horizontal scaling

high availability

agility

A

horizontal scaling

63
Q

In a platform as a service (PaaS) model, which two components are the responsibility of the cloud service provider? Each correct answer presents a complete solution.
Select all answers that apply.

operating system

physical network

user access

information and data`

A

operating system

physical network

64
Q

Which type of cloud service model is typically licensed through a monthly or annual subscription?
Select only one answer.

Infrastructure as a service (IaaS)

platform as a service (PaaS)

software as a service (SaaS)

A

SaaS is software that is centrally hosted and managed for you and your users or customers. Usually, one version of the application is used for all customers, and it is licensed through a monthly or annual subscription. PaaS and IaaS use a consumption-based model, so you only pay for what you use.

65
Q

What is the customer responsible for in a software as a service (SaaS) model?
Select only one answer.

storage

data and access

virtual machines

runtime

A

data and access

66
Q

Which cloud service model is used by Microsoft Office 365?
Select only one answer.

infrastructure as a service (IaaS)

platform as a service (PaaS)

software as a service (SaaS)

A

saas

67
Q

What uses the infrastructure as a service (IaaS) cloud service model?
Select only one answer.

Azure virtual machines

Azure App Services

Microsoft Office 365

Azure Cosmos DB

A

az vm

68
Q

Which type of cloud service are virtual networks?
Select only one answer.

infrastructure as a service (IaaS)

platform as a service (PaaS)

software as a service (SaaS)

A

iaas

69
Q

Which two factors affect Azure costs? Each correct answer presents a complete solution.
Select all answers that apply.

availability zone selection

resource usage

resource location

date and time of use

A

resource usage and location

70
Q

Which two scenarios are common billing use cases for resource tags? Each correct answer presents a complete solution.
Select all answers that apply.

categorizing costs by department

associating costs with different environments

resizing underutilized virtual machines

identifying lower cost regions

A

categorizing costs by department

associating costs with different environments

71
Q

You plan to build a new solution in Azure that will use platform as a service (PaaS) products.
What should you use to estimate the monthly costs?
Select only one answer.

Total Cost of Ownership (TOC) Calculator

Azure Pricing calculator

Azure Advisor

Azure Cost Management

A

Azure Pricing calculator

72
Q

Your organization plans to deploy several production virtual machines that will have consistent resource usage throughout the year.
What can you use to minimize the costs of the virtual machines without reducing the functionality of the virtual machines?
Select only one answer.

Azure Monitor alerts

Azure Reservations

spending limits

A

Azure Reservations offers discounted prices on certain Azure services. Azure Reservations can save you up to 72 percent compared to pay-as-you-go prices. To receive a discount, you can reserve services and resources by paying in advance.

73
Q

What can you use to ensure that new and existing Azure resources stay in compliance with corporate standards?
Select only one answer.

Azure Policy

resource locks

resource tags

Azure Advisor

A

Azure Policy

74
Q

You need to ensure that multi-factor authentication (MFA) is enabled on accounts with write permissions in an Azure subscription.
What should you implement?
Select only one answer.

resource tags

Cloud Adoption Framework

resource locks

Azure Policy

A

az policy

75
Q

What allows you to orchestrate the deployment of resource templates and other artifacts?
Select only one answer.

Azure Blueprints

Azure Functions

Azure App Services

Azure Cognitive Services

A

Azure Blueprints simplifies large scale Azure deployments by packaging key environment artifacts, such as Azure Resource Manager (ARM) templates, role-based access controls (RBAC), and policies, into a single blueprint definition. You can easily apply the blueprint to new subscriptions and environments.

76
Q

Which management layer accepts requests from any Azure tool or API and enables you to create, update, and delete resources in an Azure account?
Select only one answer.

Azure Resource Manager (ARM)

Azure management groups

Azure CLI

Azure Sphere

A

ARM

77
Q

What can you use to manage resources, such as virtual machines, across multiple cloud platforms and on-premises environments?
Select only one answer.

Azure Arc

Azure CLI

Azure Monitor

Azure PowerShell

A

AZ Arc

78
Q

What provides recommendations to reduce the cost of Azure resources?
Select only one answer.

Azure Advisor

Azure Security Center

Azure Dashboard

Azure Service Health

A

az advisor

79
Q

You need to be notified when there are new recommendations for reducing Azure costs.
Which tool should you use?
Select only one answer.

Azure Service Health

Azure Advisor

Azure Monitor

Log Analytics

A

az advisor

80
Q

You need to identify which Azure services are compliant with ISO 27001 Information Security Management Standards.
Where should you go to locate the information?
Select only one answer.

Microsoft Trust Center

Microsoft Privacy Statement

the Data Protection Addendum of Microsoft

Microsoft Online Services Terms

A

ms trust senter

81
Q

Which two tools can you use to create a new Azure virtual machine from a mobile device that runs Android? Each correct answer presents complete solution.
Select all answers that apply.

the Azure portal

SSH

Remote Desktop

PowerShell in Azure Cloud Shell

A

azure portal

PowerShell in Azure Cloud Shell

82
Q

You have a team of Linux administrators that need to manage the resources in Azure. The team wants to use the Bash shell to perform the administration.
What should you recommend?
Select only one answer.

Azure Blueprint

Azure CLI

Azure Powershell

Azure Resource Manager (ARM) template

A

azure cli

83
Q

Which Azure service evaluates Azure resources and makes recommendations to help improve reliability, security, and performance, achieve operational excellence, and reduce costs?
Select only one answer.

Azure Monitor

Azure Service Health

Log Analytics

Azure Advisor

A

az advisor

84
Q

You need to review the root cause analysis (RCA) report for a service outage that occurred last week.
Where should you look for the report?
Select only one answer.

Azure Service Health

Azure Advisor

Azure Monitor

Log Analytics

A

azure service health

85
Q

What can you use to connect Azure resources, such as Azure SQL databases, to an Azure virtual network?
Select only one answer.

ExpressRoute

network security groups (NSGs)

peering

service endpoints

A

Service endpoints are used to expose Azure services to a virtual network, providing communication between the two. ExpressRoute is used to connect an on-premises network to Azure. NSGs allow you to configure inbound and outbound rules for virtual networks and virtual machines. Peering allows you to connect virtual networks together.

86
Q

Which two services can you use to establish network connectivity between an-premises network and Azure resources? Each correct answer presents a complete solution.
Select all answers that apply.

ExpressRoute

Azure VPN Gateway

Azure Bastion

Azure Firewall

A

ExpressRoute connections and Azure VPN Gateway are two services that you can use to connect an on-premises network to Azure. Bastion provides a web interface to remotely administer Azure virtual machines by using SSH/RDP. Azure Firewall is a stateful firewall service used to protect virtual networks.

87
Q

Which storage service offers fully managed file shares in the cloud that are accessible by using industry-standard network protocols?
Select only one answer.

Azure Disk Storage

Azure Table storage

Azure Queue Storage

Azure Files

A

az files

88
Q

What are two basic services provided by all cloud providers? Each correct answer presents a complete solution.
Select all answers that apply.

application development

colocation

compute

storage

A

compute

storage

89
Q

Select the answer that correctly completes the sentence.
An example of [answer choice] is automatically scaling an application to ensure that the application has the resources needed to meet customer demands.
Select only one answer.

agility

high availability

geo-distribution

elasticity

A

elasticity

90
Q

Select the answer that correctly completes the sentence.
In cloud computing, [answer choice] allows you to deploy applications to regional datacenters around the world.
Select only one answer.

high availability

disaster recovery

geo-location

elasticity

A

geolocation

91
Q

In a platform as a service (PaaS) model, which two components are the responsibility of the cloud service provider? Each correct answer presents a complete solution.
Select all answers that apply.

operating system

physical network

user access

information and data

A

operating system

physical network