Azure Fundamentals Flashcards
[Answer choice] are physically separate datacenters within an Azure region.
Geographies
Region pairs
Resource groups
Availability zones
Availability zones
In a region pair, a region is paired with another region in the same [answer choice].
geography
availability zone
resource group
datacenter
geography
Which two components are created in an Azure subscription?
resources
resource groups
management groups
Azure AD user accounts
resources and resource groups
For which resource does Azure generate separate billing reports and invoices by default?
management groups
resource groups
subscriptions
accounts
subscriptions
Which two Azure resources can make use of availability zones?
Azure SQL databases
virtual machines
Azure subscriptions
resource groups
Azure SQL databases and virtual machines
Which scenario is a use case for a VPN gateway?
connecting an on-premises datacenter to an Azure virtual network
partitioning a virtual network’s address space
communicating between Azure resources
filtering outbound network traffic
connecting an on-premises datacenter to an Azure virtual network
You need to allow resources on two different Azure virtual networks to communicate with each other.
What should you configure?
a network security group (NSG)
a point-to-site VPN
peering
service endpoints
peering
What can you use to provide Mac and Android users with access to a Windows environment that will run Windows-based applications?
Azure Logic Apps
Azure Functions
Azure Virtual Desktop
Azure Container Instances
Azure Virtual Desktop
Which Azure Blob storage tier stores data offline and offers the lowest storage costs and the highest costs to access data?
Archive
Hot
Cool
Archive
Which two scenarios are common use cases for Azure Blob storage? Each correct answer presents a complete solution. Select all answers that apply.
- storing data for backup and restore
- hosting ASPX files for a website
- mounting a file storage share to be accessed as a virtual drive on multiple virtual machines
- serving images or documents directly to a browser
storing data for backup and restore
serving images or documents directly to a browser
Which Azure Storage service should you use to store unstructured files, such as images, that will be served on webpages?
Azure Blob storage
Azure Queue Storage
Azure Disk Storage
Azure Table storage
Azure Blob storage
Which two protocols are used to access Azure file shares? Each correct answer presents a complete solution.
FTP
HTTP
Network File System (NFS)
Server Message Block (SMB)
NFS and SMB
What can you use to allow a user to manage all the resources in a resource group?
Azure role-based access control (RBAC)
resource tags
resource locks
Azure Key Vault
Azure role-based access control (RBAC)
To which object or level is an Azure role-based access control (RBAC) role applied?
resource lock
scope
resource tag
policy
scope
What Azure AD feature can you use to configure security authentication that requires users to use their mobile phone to sign in?
Microsoft Defender for Cloud
Advanced Thread Protection (ATP)
Azure Information Protection (AIP)
multi-factor authentication (MFA)
multi-factor authentication (MFA)
Which two services are provided by Azure AD? Each correct answer presents a complete solution.
authentication
data encryption
multi-factor authentication (MFA)
single sign-on (SSO)
authentication
SSO
What Azure AD feature can you use to ensure that users can only access Microsoft Office 365 applications from approved client applications?
Select only one answer.
Azure role-based access control (RBAC)
single sign-on (SSO)
Conditional Access
multi-factor authentication (MFA)
Conditional Access
What can you use to sync identities between Azure AD and an on-premises deployment of Active Directory Domain Services (AD DS)?
Azure AD Connect
Azure Resource Manager (ARM)
Conditional Access
Azure Key Vault
Azure AD Connect
What can you use to ensure that users authenticate by using multi-factor authentication (MFA) when they attempt to sign in from a specific location?
Conditional Access
Azure role-based access control (RBAC)
single sign-on (SSO)
administrative units
Conditional Access
You need to compare the costs of running an application in an on-premises datacenter with the costs of running the application in Azure.
What should you use to assist you?
Azure Pricing calculator
Azure Advisor
Azure Cost Management
Total Cost of Ownership (TCO) Calculator
Total Cost of Ownership (TCO) Calculator
You have an Azure virtual machine that is accessed only between 9:00 and 17:00 each day.
What should you do to minimize costs but preserve the associated hard disks and data?
Deallocate the virtual machine.
Delete the virtual machine.
Scale down the virtual machine.
Resize the virtual machine.
Deallocate the virtual machine.
You need to associate the costs of resources to different groups within an organization without changing the location of the resources.
What should you use?
resource tags
resource groups
subscriptions
administrative units
resource tags
What can you use to ensure that new and existing Azure resources stay in compliance with corporate standards?
Azure Policy
resource locks
resource tags
Azure Advisor
Azure Policy
You need to recommend a solution for Azure virtual machine deployments. The solution must enforce company standards on the virtual machines.
What should you include in the recommendation?
Select only one answer.
Azure Cost Management
Azure Lock
Azure Policy
Azure Blueprints
Azure Policy
What allows you to orchestrate the deployment of resource templates and other artifacts?
Azure Blueprints
Azure Functions
Azure App Services
Azure Cognitive Services
Azure Blueprints simplifies large scale Azure deployments by packaging key environment artifacts, such as Azure Resource Manager (ARM) templates, role-based access controls (RBAC), and policies, into a single blueprint definition. You can easily apply the blueprint to new subscriptions and environments.
What can you use to ensure that a development team can only create virtual machines of a certain size?
Select only one answer.
Azure Blueprints
Azure Policy
Cloud Adoption Framework
Conditional Access
Azure Policy
Which two actions can be performed by using the graphical user interface (GUI) in the Azure portal?
Create new resources.
Review a graphical view of all the services you are using.
Change the availability zone of a virtual machine.
Repeatedly set up one or more resources and ensure that all the dependencies are created in the proper order.
Create new resources.
Review a graphical view of all the services you are using.
What can you use to describe the resources you want to provision in a declarative JSON format?
Azure PowerShell
Azure CLI
Azure Resource Manager (ARM) templates
Azure Repos
Azure Resource Manager (ARM) templates
Which management layer accepts requests from any Azure tool or API and enables you to create, update, and delete resources in an Azure account?
Azure Resource Manager (ARM)
Azure management groups
Azure CLI
Azure Sphere
Azure Resource Manager (ARM)
Which tool is accessible via Azure Cloud Shell and allows you to write Bash scripts to manage an Azure environment?
Azure PowerShell
Azure Resource Manager (ARM) templates
Azure Repos
Azure CLI
Azure CLI
What can you use to create resources in Azure and includes a validation step to ensure that all the resources can be created in the proper order based on dependencies, in parallel and idempotent?
Azure Resource Manager (ARM) templates
Azure CLI
Azure PowerShell
Azure REST API
Azure Resource Manager (ARM) templates
You need to use thresholds to trigger autoscaling functionality to scale an app up or down to meet the demand.
What should you include in the solution?
Azure Service Health
Azure Advisor
Azure Monitor
Log Analytics
Azure Monitor is a platform that collects metric and logging data, such as CPU percentages. The data can be used to trigger autoscaling.
Which issues require that you take action to avoid service interruptions, such as service retirements and breaking changes?
health advisories
service issues
application insights
Kusto queries
health advisories
What can you use to monitor outages in a specific Azure region?
Select only one answer.
Azure Advisor
Azure Security Center
Azure Monitor
Azure Service Health
Azure Service Health
What can you use to create alerts that relate to resource utilization for a specific Azure virtual machine?
Azure Advisor
Azure Monitor
Azure Policy
Azure Service Health
Azure Monitor
What can you use to find information about planned maintenance for Azure services that are critical to your organization?
Azure Service Health
Azure Advisor
Azure Monitor
Log Analytics
Azure Service Health
Which two attributes are characteristics of the private cloud deployment model? Each correct answer presents a complete solution.
Hardware must be purchased.
Users have complete control over resources and security.
Applications can be provisioned and deprovisioned quickly.
Organizations only pay for what they use.
Hardware must be purchased.
Users have complete control over resources and security.
What are two characteristics of the public cloud deployment model? Each correct answer presents a complete solution.
Services are offered over the internet and are available to anyone who wants to purchase them.
Computing resources are used exclusively by users from one organization.
Servers and storage are owned and operated by a third-party cloud service provider.
Hardware is physically located in an organization’s on-site datacenter.
Services are offered over the internet and are available to anyone who wants to purchase them.
Servers and storage are owned and operated by a third-party cloud service provider.
What are two characteristics of a consumption-based model? Each correct answer presents a complete solution.
no upfront costs
requires the purchase and management of the physical infrastructure
the ability to stop paying for resources that are no longer needed
high capital expenditures
no upfront costs
the ability to stop paying for resources that are no longer needed
What is an advantage of cloud computing compared to on-premises deployments?
Select only one answer.
You can scale more quickly.
You own your CPUs.
You have full access in case of internet outage.
You can work from multiple workstations.
You can scale more quickly.
Select the answer that correctly completes the sentence.
[Answer choice] refers to upfront costs incurred one time, such as hardware purchases.
Select only one answer.
Operational expenditures
Capital expenditures
Elasticity
A consumption-based model
Capital expenditures
Which cloud deployment model are you using if you have servers physically located at your organization’s on-site datacenter, and you migrate a few of the servers to the cloud?
Select only one answer.
private cloud
public cloud
hybrid cloud
hybrid cloud
Select the answer that correctly completes the sentence.
Increasing compute capacity for an app by adding RAM or CPUs to a virtual machine is called [answer choice].
Select only one answer.
vertical scaling
horizontal scaling
disaster recovery
high availability
vertical scaling
Select the answer that correctly completes the sentence.
Deploying and configuring cloud-based resources quickly as business requirements change is called [answer choice].
agility
scalability
elasticity
high availability
agility
Select the answer that correctly completes the sentence.
Increasing compute capacity for an app by adding instances of resources such as virtual machines is called [answer choice].
Select only one answer.
vertical scaling
horizontal scaling
disaster recovery
high availability
horizontal scaling
Select the answer that correctly completes the sentence.
An example of [answer choice] is automatically scaling an application to ensure that the application has the resources needed to meet customer demands.
Select only one answer.
agility
high availability
geo-distribution
elasticity
elasticity
Select the answer that correctly completes the sentence.
In cloud computing, [answer choice] allows you to deploy applications to regional datacenters around the world.
Select only one answer.
high availability
disaster recovery
geo-location
elasticity
geo-location
In which two deployment models are customers responsible for managing operating systems that host applications? Each correct answer presents a complete solution.
Select all answers that apply.
software as a service (SaaS)
platform as a service (PaaS)
infrastructure as a service (IaaS)
on-premises
infrastructure as a service (IaaS)
on-premises
In a platform as a service (PaaS) model, which two components are the responsibility of the cloud service provider? Each correct answer presents a complete solution.
Select all answers that apply.
operating system
physical network
user access
information and data
operating system
physical network
In which cloud service model is the customer responsible for managing the operating system?
Select only one answer.
Infrastructure as a service (IaaS)
platform as a service (PaaS)
software as a service (SaaS)
Infrastructure as a service (IaaS)
Select the answer that correctly completes the sentence.
[Answer choice] is the logical container used to combine and organize Azure resources.
Select only one answer.
a resource group
Azure Resource Manager (ARM)
a management group
an Azure region
a resource group
What is an Azure Storage account named storage001 an example of?
Select only one answer.
a resource
a resource group
a subscription
a resource manager
resource
For which resource does Azure generate separate billing reports and invoices by default?
Select only one answer.
management groups
resource groups
subscriptions
accounts
subscriptions
Which resource can you use to manage access, policies, and compliance across multiple subscriptions?
Select only one answer.
management groups
resource groups
administrative units
management groups
Which Azure resource is a software emulation of a physical computer that includes a virtual processor, memory, storage, and networking resources?
Select only one answer.
a virtual machine
an App Service
a function
a container
virtual machine
Which Azure compute service can you use to deploy and manage a set of identical virtual machines?
Select only one answer.
availability sets
availability zones
Azure Container Instances
Azure Virtual Machine Scale Sets
az vm scale sets
What are two services that allow you to run applications in containers? Each correct answer presents a complete solution.
Select all answers that apply.
Azure Container Instances
Azure Kubernetes Service (AKS)
Azure Logic Apps
Azure Functions
Azure Container Instances
Azure Kubernetes Service (AKS)
What is the purpose of defense in depth?
Select only one answer.
to enable you to locate and act on resources that are associated with specific workloads, environments, business units, and owners
to manage policies that control or audit resources so that the configurations stay compliant with corporate standards
to protect information and prevent it from being stolen by those who are unauthorized to access it
to evaluate resources and make recommendations to help improve reliability and performance
to protect information and prevent it from being stolen by those who are unauthorized to access it
Which type of strategy uses a series of mechanisms to slow the advancement of an attack that aims to gain unauthorized access to data?
Select only one answer.
defense in depth
least privileged access
distributed denial-of-service (DDoS)
perimeter
defense in depth
Why is cloud computing often less expensive than on-premises datacenters? Each correct answer presents a complete solution.
Select only one answer.
You are only billed for what you use.
Network bandwidth is free.
Cloud service offerings have limited functionality.
Services are only offered in a single geographic location.
You are only billed for what you use.
What is high availability in a public cloud environment dependent on?
Select only one answer.
the service-level agreement (SLA) that you choose
the vertical scalability of an app
cloud-based backup retention limits
capital expenditures
the service-level agreement (SLA) that you choose
Select the answer that correctly completes the sentence.
Increasing the capacity of an application by adding additional virtual machine is called [answer choice].
Select only one answer.
vertical scaling
horizontal scaling
high availability
agility
horizontal scaling
In a platform as a service (PaaS) model, which two components are the responsibility of the cloud service provider? Each correct answer presents a complete solution.
Select all answers that apply.
operating system
physical network
user access
information and data`
operating system
physical network
Which type of cloud service model is typically licensed through a monthly or annual subscription?
Select only one answer.
Infrastructure as a service (IaaS)
platform as a service (PaaS)
software as a service (SaaS)
SaaS is software that is centrally hosted and managed for you and your users or customers. Usually, one version of the application is used for all customers, and it is licensed through a monthly or annual subscription. PaaS and IaaS use a consumption-based model, so you only pay for what you use.
What is the customer responsible for in a software as a service (SaaS) model?
Select only one answer.
storage
data and access
virtual machines
runtime
data and access
Which cloud service model is used by Microsoft Office 365?
Select only one answer.
infrastructure as a service (IaaS)
platform as a service (PaaS)
software as a service (SaaS)
saas
What uses the infrastructure as a service (IaaS) cloud service model?
Select only one answer.
Azure virtual machines
Azure App Services
Microsoft Office 365
Azure Cosmos DB
az vm
Which type of cloud service are virtual networks?
Select only one answer.
infrastructure as a service (IaaS)
platform as a service (PaaS)
software as a service (SaaS)
iaas
Which two factors affect Azure costs? Each correct answer presents a complete solution.
Select all answers that apply.
availability zone selection
resource usage
resource location
date and time of use
resource usage and location
Which two scenarios are common billing use cases for resource tags? Each correct answer presents a complete solution.
Select all answers that apply.
categorizing costs by department
associating costs with different environments
resizing underutilized virtual machines
identifying lower cost regions
categorizing costs by department
associating costs with different environments
You plan to build a new solution in Azure that will use platform as a service (PaaS) products.
What should you use to estimate the monthly costs?
Select only one answer.
Total Cost of Ownership (TOC) Calculator
Azure Pricing calculator
Azure Advisor
Azure Cost Management
Azure Pricing calculator
Your organization plans to deploy several production virtual machines that will have consistent resource usage throughout the year.
What can you use to minimize the costs of the virtual machines without reducing the functionality of the virtual machines?
Select only one answer.
Azure Monitor alerts
Azure Reservations
spending limits
Azure Reservations offers discounted prices on certain Azure services. Azure Reservations can save you up to 72 percent compared to pay-as-you-go prices. To receive a discount, you can reserve services and resources by paying in advance.
What can you use to ensure that new and existing Azure resources stay in compliance with corporate standards?
Select only one answer.
Azure Policy
resource locks
resource tags
Azure Advisor
Azure Policy
You need to ensure that multi-factor authentication (MFA) is enabled on accounts with write permissions in an Azure subscription.
What should you implement?
Select only one answer.
resource tags
Cloud Adoption Framework
resource locks
Azure Policy
az policy
What allows you to orchestrate the deployment of resource templates and other artifacts?
Select only one answer.
Azure Blueprints
Azure Functions
Azure App Services
Azure Cognitive Services
Azure Blueprints simplifies large scale Azure deployments by packaging key environment artifacts, such as Azure Resource Manager (ARM) templates, role-based access controls (RBAC), and policies, into a single blueprint definition. You can easily apply the blueprint to new subscriptions and environments.
Which management layer accepts requests from any Azure tool or API and enables you to create, update, and delete resources in an Azure account?
Select only one answer.
Azure Resource Manager (ARM)
Azure management groups
Azure CLI
Azure Sphere
ARM
What can you use to manage resources, such as virtual machines, across multiple cloud platforms and on-premises environments?
Select only one answer.
Azure Arc
Azure CLI
Azure Monitor
Azure PowerShell
AZ Arc
What provides recommendations to reduce the cost of Azure resources?
Select only one answer.
Azure Advisor
Azure Security Center
Azure Dashboard
Azure Service Health
az advisor
You need to be notified when there are new recommendations for reducing Azure costs.
Which tool should you use?
Select only one answer.
Azure Service Health
Azure Advisor
Azure Monitor
Log Analytics
az advisor
You need to identify which Azure services are compliant with ISO 27001 Information Security Management Standards.
Where should you go to locate the information?
Select only one answer.
Microsoft Trust Center
Microsoft Privacy Statement
the Data Protection Addendum of Microsoft
Microsoft Online Services Terms
ms trust senter
Which two tools can you use to create a new Azure virtual machine from a mobile device that runs Android? Each correct answer presents complete solution.
Select all answers that apply.
the Azure portal
SSH
Remote Desktop
PowerShell in Azure Cloud Shell
azure portal
PowerShell in Azure Cloud Shell
You have a team of Linux administrators that need to manage the resources in Azure. The team wants to use the Bash shell to perform the administration.
What should you recommend?
Select only one answer.
Azure Blueprint
Azure CLI
Azure Powershell
Azure Resource Manager (ARM) template
azure cli
Which Azure service evaluates Azure resources and makes recommendations to help improve reliability, security, and performance, achieve operational excellence, and reduce costs?
Select only one answer.
Azure Monitor
Azure Service Health
Log Analytics
Azure Advisor
az advisor
You need to review the root cause analysis (RCA) report for a service outage that occurred last week.
Where should you look for the report?
Select only one answer.
Azure Service Health
Azure Advisor
Azure Monitor
Log Analytics
azure service health
What can you use to connect Azure resources, such as Azure SQL databases, to an Azure virtual network?
Select only one answer.
ExpressRoute
network security groups (NSGs)
peering
service endpoints
Service endpoints are used to expose Azure services to a virtual network, providing communication between the two. ExpressRoute is used to connect an on-premises network to Azure. NSGs allow you to configure inbound and outbound rules for virtual networks and virtual machines. Peering allows you to connect virtual networks together.
Which two services can you use to establish network connectivity between an-premises network and Azure resources? Each correct answer presents a complete solution.
Select all answers that apply.
ExpressRoute
Azure VPN Gateway
Azure Bastion
Azure Firewall
ExpressRoute connections and Azure VPN Gateway are two services that you can use to connect an on-premises network to Azure. Bastion provides a web interface to remotely administer Azure virtual machines by using SSH/RDP. Azure Firewall is a stateful firewall service used to protect virtual networks.
Which storage service offers fully managed file shares in the cloud that are accessible by using industry-standard network protocols?
Select only one answer.
Azure Disk Storage
Azure Table storage
Azure Queue Storage
Azure Files
az files
What are two basic services provided by all cloud providers? Each correct answer presents a complete solution.
Select all answers that apply.
application development
colocation
compute
storage
compute
storage
Select the answer that correctly completes the sentence.
An example of [answer choice] is automatically scaling an application to ensure that the application has the resources needed to meet customer demands.
Select only one answer.
agility
high availability
geo-distribution
elasticity
elasticity
Select the answer that correctly completes the sentence.
In cloud computing, [answer choice] allows you to deploy applications to regional datacenters around the world.
Select only one answer.
high availability
disaster recovery
geo-location
elasticity
geolocation
In a platform as a service (PaaS) model, which two components are the responsibility of the cloud service provider? Each correct answer presents a complete solution.
Select all answers that apply.
operating system
physical network
user access
information and data
operating system
physical network