d2 Flashcards
You have an Azure environment that contains 10 virtual networks and 100 virtual machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
What should you create?
A. one network security group (NSG)
B. 10 virtual network gateways
C. 10 Azure ExpressRoute circuits
D. one Azure firewall
D. one Azure firewall
You need to view a list of planned maintenance events that can affect the availability of an Azure subscription.
Which blade should you use from the Azure portal? To answer, select the appropriate blade in the answer area.
Help and support
You have an Azure environment that contains multiple Azure virtual machines.
You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines.
You need to recommend which Azure resources must be created for the planned solution.
Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. a virtual network gateway B. a load balancer C. an application gateway D. a virtual network E. a gateway subnet
D. a virtual network
E. a gateway subnet
You plan to map a network drive from several computers that run Windows 10 to Azure Storage. You need to create a storage solution in Azure for the planned mapped drive.
What should you create?
A. an Azure SQL database
B. a virtual machine data disk
C. a Files service in a storage account
D. a Blobs service in a storage account
C. a Files service in a storage account
Your company plans to deploy several million sensors that will upload data to Azure.
You need to identify which Azure resources must be created to support the planned solution.
Which two Azure resources should you identify? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Azure Data Lake B. Azure Queue storage C. Azure File Storage D. Azure IoT Hub E. Azure Notification Hubs
B. Azure Queue storage
D. Azure IoT Hub.
You have an application that is comprised of an Azure web app that has a Service Level Agreement (SLA) of 99.95 percent and an Azure SQL database that has an SLA of 99.99 percent.
The composite SLA for the application is the product of both SLAs, which equals 99.94 percent.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. the lowest SLA associated to the application, which is 99.95 percent
C. the highest SLA associated to the application, which is 99.99 percent
D. the difference between the two SLAs, which is 0.05 percent
A. No change is needed
This question requires that you evaluate the underlined text to determine if it is correct.
Azure Germany can be used by legal residents of Germany only.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. no change is needed
B. only enterprises that are registered in Germany
C. only enterprises that purchase their azure licenses from a partner based in Germany
D. any user or enterprise that requires its data to reside in Germany
D. any user or enterprise that requires its data to reside in Germany
After you create a virtual machine, you need to modify the network security group (NSG) to allow connections from TCP port 8080 to the virtual machine.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. virtual network gateway
C. virtual network
D. route table
A. No change is needed
Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. a Canadian government contractor B. a European government contractor C. a United States government entity D. a United States government contractor E. a European government entity
C. a United States government entity
D. a United States government contractor
You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password.
Which Azure service should you use?
A. Azure AD Connect Health
B. Azure AD Privileged Identity Management
C. Azure Advanced Threat Protection (ATP)
D. Azure AD Identity Protection
Reveal Solution
D. Azure AD Identity Protection
Reveal Solution
Your company plans to deploy several web servers and several database servers to Azure.
You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers.
What should you include in the recommendation?
A. network security groups (NSGs)
B. Azure Service Bus
C. a local network gateway
D. a route filter
A. network security groups (NSGs)
To what should an application connect to retrieve security tokens?
A. an Azure Storage account
B. Azure Active Directory (Azure AD)
C. a certificate store
D. an Azure key vault
B but I think d
Resource groups provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. Management groups
C. Azure policies
D. Azure App Service plans
C. Azure policies
You have a resource group named RG1.
You plan to create virtual networks and app services in RG1.
You need to prevent the creation of virtual machines only in RG1.
What should you use?
A. a lock
B. an Azure role
C. a tag
D. an Azure policy
D. an Azure policy
What should you use to evaluate whether your company’s Azure environment meets regulatory requirements?
A. the Knowledge Center website
B. the Advisor blade from the Azure portal
C. Compliance Manager from the Security Trust Portal
D. the Security Center blade from the Azure portal
D. the Security Center blade from the Azure portal
This question requires that you evaluate the underlined text to determine if it is correct.
You have an Azure virtual network named VNET1 in a resource group named RG1.
You assign an Azure policy specifying that virtual networks are not an allowed resource type in RG1. VNET1 is deleted automatically.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. is moved automatically to another resource group
C. continues to function normally
D. is now a read-only object
A. No change is needed
You need to configure an Azure solution that meets the following requirements:
✑ Secures websites from attacks
✑ Generates reports that contain details of attempted attacks
What should you include in the solution?
A. Azure Firewall
B. a network security group (NSG)
C. Azure Information Protection
D. DDoS protection
D. DDoS protection
Your company plans to migrate all on-premises data to Azure. You need to identify whether Azure complies with the company’s regional requirements.
What should you use?
A. the Knowledge Center
B. Azure Marketplace
C. the Azure portal
D. the Trust Center
D. the Trust Center
Azure has built in authentication and authorization that give access to Azure resources
True
You attempt to create several managed Microsoft SQL Server instances in an Azure environment and receive a message that you must increase your Azure subscription limits.
What should you do to increase the limits?
A. Create a service health alert
B. Upgrade your support plan
C. Modify an Azure policy
D. Create a new support request
D. Create a new support request
All azure free accounts expire after specific period
True
Each azure subscription can be managed by Microsoft account only
True
Azure AD premium uptime SLA is 99.9
True
Azure AD free and standard have same SLA
False
paying Azure customer can claim credit if SLA is broken by Azure
True
guarantee at least 99.9% availability of the Azure Active Directory Basic and Premium services
yes
No SLA is provided for the Free tier of Azure Active Directory.
yes
Azure services in public preview can be used in prdocution
yes
azure services in public preview have SLA assigned
NO
standard support included in Azure free account
NO
premier support only for companies with Enterprise agreement
YES
A support plan solution that gives you best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost is a Standard support plan.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. Developer
C. Basic
D. Premier
C. Basic
In which Azure support plans can you open a new support request?
A. Premier and Professional Direct only
B. Premier, Professional Direct, and Standard only
C. Premier, Professional Direct, Standard, and Developer only
D. Premier, Professional Direct, Standard, Developer, and Basic
C. Premier, Professional Direct, Standard, and Developer only
You can create an Azure support request from support.microsoft.com.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed.
B. the Azure portal
C. the Knowledge Center
D. the Security & Compliance admin center
B. the Azure portal
The Basic support plan does not have any technical support for engineers.
The Developer support plan has only technical support for engineers via email.
t
If Microsoft plans to end support for an Azure service that does NOT have a successor service, Microsoft will provide notification at least 12 months before.
True
Azure Repos is a set of version control tools that you can use to manage your code.
T
Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks?
A. Azure Firewall B. an application security group C. Azure DDoS protection D. a network security group (NSG) Reveal Solution
A. Azure Firewall
This question requires that you evaluate the underlined text to determine if it is correct.
From Azure Cloud Shell, you can track your company’s regulatory standards and regulations, such as ISO 27001.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed.
B. the Microsoft Cloud Partner Portal
C. Compliance Manager
D. the Trust Center
C. Compliance Manager
A company has the requirement to have an automated process in place which would upload logs to an Azure SQL database every week. Reports would then be generated from the SQL database. Which of the following would you use for this requirement?
A. The AzCopy tool
B. Azure Data Factory
C. Azure HDInsight
D. Data Migration Assistant
B. Azure Data Factory
Our team needs to deploy a Virtual machine that will host a SQL Server. The Virtual machine will have 2 data disks, one for the log file and the other for the data files. You need to recommend a caching policy for each disk.
Which of the following would you recommend for the data disk containing the logs?
A. None
B. ReadOnly
C. WriteOnly
D. ReadWrite
A. None
A company is planning on deploying an Azure Web App to 2 regions.
One of the key requirements is to ensure that the web app is always running if an Azure region fails. You need to ensure deployment costs are minimized.
Which of the following service would you include in the deployment of the solution?
A. Azure Functions
B. Azure Traffic Manager
C. Azure Application Gateway
D. Azure Load Balancer
B. Azure Traffic Manager
