AZURE PART 1 Flashcards
Azure App service ,Azure SQL Database and Cosmos DB
Paas
Azure VMs
Iaas
Automate srveal business processs
Power Automate
when we shuuf down vms and in stopped state we do incur cost yes or no
yes- beacuse of storage
Contoso’s Security team wants to apply policy-based configuration across deployments in multiple Azure subscriptions. Which of the following can help achieve this requirement?
Resource Groups
Management Groups
Role Based Access Control (RBAC)
Access
Management Groups
Contoso plans to implement a hybrid cloud architecture utilizing Azure.
They need to connect on-premises application resources. The solution should minimize latency and maximize security. Which option should they choose?
Point-to-Site VPN
Site-to-Site VPN
ExpressRoute
Azure Application Gateway
ExpressRoute
As part of a hybrid cloud deployment at Contoso, you need to connect Contoso’s on-premises datacenter to Azure. The solution you choose should minimize expense during the low-scale pilot deployment. Which option will you choose?
Point-to-Site VPN
Site-to-Site VPN V
* ExpressRoute
Azure Application Gateway
Site-to-Site VPN V
Contoso wants to migrate a legacy application to Azure that requires an file share accessible on a UNC path. You need to provide an SMB file share and secure access. The solution should minimize administrative effort. Which service will you use?
OneDrive
SharePoint
* Azure VM with a file share
Azure Files
Azure Files
colten warne cos (proclustion ate open, certand products.
Can they associate multiple Azure subscriptions to the same Entra ID tenant?
* YES
NO
YES
An Azure
is a set of datacenters deployed within a latency-defined
perimeter and connected through a dedicated regional low-latency network.
Availability Zone
Region
Geography
Datacenter
Region
Contoso Financial Services regularly creates documents containing sensitive customer data, including personally identifiable information.
You need to ensure access is restricted to finance personnel, regardless of where the document travels. Which service should you use to classify and protect these documents?
Microsoft Defender for Cloud Apps
Microsoft Defender for Endpoint
Microsoft Purview
Entra ID Conditional Access
Microsoft Purview
You need to manage your Azure VMs using the Azure portal. Which URL would you use to manage the Azure VMs?
https://portal.azurewebsites.net
https://portal.microsoft.com
https://portal.azure.microsoft.com
https://portal.azure.com
https://portal.azure.com
You can monitor health and performance of microservices applications running on Azure Kubernetes Service (AKS) with:
Azure Monitor
Azure App Insights
Azure Sentinel
Microsoft Defender for Cloud
Azure App Insights
You need to automate responses to some alerts from Azure Monitor.
Which service supports automating responses and corrective actions in this scenario?
Power Automate
Azure Logic Apps
Azure Web Jobs
Azure Automation
Azure Automation
The Contoso IT Operations team needs to aggregate events from a large number of resources hosted in Azure for correlation, alerting, and reporting. Which Azure service would you use to centrally collect, store, and act on events?
Azure App Insights
Azure Monitor
Azure Data Lake
Azure Event Hub
Azure Monitor
Contoso IT has deployed multiple Azure VM across 15 virtual networks.
How can you most securely limit inbound traffic and protect these VMs from unwanted inbound requests? (choose the best answer)
Create a network security group (NSG)
Deploy an Azure Firewall
Deploy an Azure Load Balancer
Deploy a virtual network gateway
Deploy an Azure Firewall
You need to define and enforce corporate standards for new and existing Azure resource deployments in all of Contoso’s Azure subscriptions. What should you use to meet this objective?
Azure Policy
Microsoft Defender for Cloud
Microsoft Sentinel
Azure Advisor
Azure Policy
You are responsible for creating Azure resources at Contoso using ARM templates. You need to ensure Azure resources are only created in approved regions. What should you use to enforce this requirement
Azure locks
Azure Policy
Azure Blueprint
Microsoft Defender for Cloud
Azure Policy
You need to configure access to Office 365 resources for users at Contoso. To group users for assignment of permissions, which of the following options would you use?
Microsoft 365 group
* Resource group
Security group
Management group
Security group
Which type of Azure storage stores NoSQL data in Azure, including a schemaless key/attribute store?
Queue Storage
Table Storage
*
Blob Storage
File Storage
Table Storage
Tailspin Toys uses a pay-as-you-go (PAYG) subscription in Azure. PAYG generally provides lowest cost over time, but least flexibility in terms of shifting consumption to new services.
O TRUE
FALSE
FALSE
Azure VMs in different subnets in the same virtual network can communicate by default
YES
* NO
YES
