Joel

Question 1

Which term from the list below would be viewed as benefits of using cloud services?

Unpredictable costs
Elasticity
Local reach only

Answer 1

Elasticity - Elasticity, Agility and Economies of scale are the correct answers, and would be seen as benefits that you can gain from using cloud services.

Question 2

Suppose you have two types of applications: legacy applications that require specialized mainframe hardware and newer applications that can run on commodity hardware. Which cloud deployment model would be best for you?

Public cloud
Private cloud
Hybrid cloud

Answer 2

Hybrid cloud - A hybrid cloud is a public and private cloud combined. You can run your new applications on commodity hardware you rent from the public cloud and maintain your specialized mainframe hardware on-premises.

Question 3

You’re developing an application and want to focus on building, testing, and deploying. You don’t want to worry about managing the underlying hardware or software. Which cloud service type is best for you?

Infrastructure-as-a-service
Platform-as-a-service
Software-as-a-service

Answer 3

Platform-as-a-service
- Platform-as-a-service is the best choice here because the PaaS services handle the IT management tasks for you, so you can focus on writing code.

Question 4

What is Azure?

• Microsoft’s cloud computing platform, which provides compute power, storage, and services over the Internet using a pay-as-you-go pricing model.
• A single data center located in Redmond, Washington.
• A hosting environment specifically for virtual machines

Answer 4

Microsoft’s cloud computing platform, which provides compute power, storage, and services over the Internet using a pay-as-you-go pricing model. -
Azure provides raw compute power and storage, as well as services to help you explore new software paradigms such as intelligent bots and mixed reality.

Question 5

Which of the following is an example of an Azure compute service?

Azure Virtual Machine
Azure Load Balancer
Azure Table Storage
Azure Cache for Redis

Answer 5

Azure Virtual Machine - Azure Virtual Machines provide compute power and support both Windows and Linux operating systems.

Question 6

When should youscale outyour deployment?

• When your application or service requires a more powerful CPU or more memory to run faster.
  When you need additional virtual machines to speed up your application
• When you’re using excess capacity that you don’t need.

Answer 6

When you need additional virtual machines to speed up your application.

Scaling out means adding additional systems, such as virtual machines. For example, you might create many virtual machines configured in the same way and use a load balancer to distribute work across them.

Question 7

True or False. You can select the specific datacenter you want to deploy your app into.
True
False

Answer 7

False - Correct. Azure organizes infrastructure aroundregionswhich include multiple datacenters. You can’t select a specific datacenter, but you can pick the region you want resources deployed into.

Question 8

True or False. Every region has an availability zone.
True
False

Answer 8

False - Correct. Regions that support Availability Zones includeCentral US,North Europe, andSouthEast Asia.

Question 9

Application availability refers to what?

• The service level agreement of the associated resource.
• Whether the application supports an availability zone.
• The overall time that a system is functional and working.

Answer 9

The overall time that a system is functional and working. -

Correct. The time that a system is working is referred to as the application availability.

Question 10

Which of the following defines an Azure subscription correctly?

• Using Azure does not require a subscription
• All Azure subscriptions are always free
• An Azure subscription is a logical unit of Azure services that is linked to an Azure account
• An account cannot have more than one subscription

Answer 10

An Azure subscription is a logical unit of Azure services that is linked to an Azure account -

Using Azure requires an Azure subscription. Azure offer free and paid subscription options to suit different customer needs and requirements, and an account can have one or more subscriptions, with different billing models and access-management policies applied to each. A subscription provides authenticated and authorized access to Azure products and services, and allows you to provision resources.

Question 11

True or False. Azure has free services you can use once you have an Azure subscription.

True - there are several free services available.
False - services are only free for the first 12 months.

Answer 11

This is true. Azure has several free services you can use including Azure App Services, Functions, and Azure Kubernetes containers.

Question 12

Billing in Azure is ______________

• Annually for each Azure account based on usage.
• Monthly for each Azure subscription based on usage.
• Monthly for each Azure account based on usage.
• Daily for each Azure subscription based on usage.

Answer 12

Monthly for each Azure subscription based on usage.

Billing is performed monthly for each subscription in the account, based on the resource usage.

Question 13

Which of the following are used to determine Azure costs for each billing period?

• The Azure website
• Number of created virtual machines
• The Azure pricing calculator
• Usage meters

Answer 13

Usage meters -

Azure is billed according to your consumption based on monthly usage meters.

Question 14

Which of the following is a factor affecting costs?

• Global infrastructure
• Location
• Availability zone

Answer 14

Location -

The location you place your resources will vary the price for the resource.

Question 15

Complete the following sentence. As an Azure customer, Azure Reservations offer discounted prices if you _________

• Pay in advance
• Provision many resources
• Have a free account
• Set Spending Limits

Answer 15

Pay in advance -

Azure Reservations offer discounted prices on certain Azure products and resources. To get a discount, you reserve products and resources by paying in advance. You can prepay for one or three year’s use of certain Azure resources.

Question 16

An Azure dashboard is stored as which type of file?

• XML
• JSON
• PNG

Answer 16

JSON - Azure dashboards are stored as JSON files which allows them to be uploaded and downloaded to share with other members of the Azure directory.

Question 17

Azure Advisor provides advice on: (Select one)

• Creating an Azure account
• Best practices and Security for your services
• Using the Azure portal effectively

Answer 17

Best practices and Security for your services

• Azure Advisor is a free service built into Azure that provides recommendations on high availability, security, performance, and cost.

Question 18

True or false: Azure Cloud Shell is an interactive, browser-accessible shell for managing Azure resources?
True
False

Answer 18

True - Azure Cloud Shell is an interactive shell for managing Azure resources. You can control and administer all of your Azure resources in the current subscription through a command-line interface built right into the portal.

Question 19

Suppose you have an existing application running locally on your own server. You need additional capacity but prefer to move to Azure instead of buying upgraded on-premises hardware. Which compute option would likely give you the quickest route to getting your application running in Azure?

• Serverless computing
• Containers
• Virtual machines

Answer 19

Virtual machines

• You have full control over the VM setup, so you can configure it to match your on-premises server. This will allow your existing application to run on the Azure VM with little or no change.

Question 20

Imagine that you work on a photo-sharing application that runs on millions of mobile devices. Demand is unpredictable because you see a spike in usage whenever a locally or nationally significant event occurs. Which Azure compute resource is the best match for this workload?

• Containers
• Serverless computing
• Virtual machines

Answer 20

Serverless computing

• The photo-sharing app is event driven and needs to handle unpredictable demand. Serverless computing is a good fit for this because it is event based and can scale instantly to process spikes in traffic. It should also be a cost-effective choice because you will pay for compute time only when processing user data.

Question 21

The compute options give you different levels of control over the configuration of the environment in which your application runs. Which of the following lists the compute options in order from “most control” to “least control”?

• Serverless computing, containers, virtual machines
• Containers, serverless computing, virtual machines
• Virtual machines, containers, serverless computing

Answer 21

Virtual machines, containers, serverless computing

• Virtual machines give you full control over the environment. Containers give you limited control. Serverless computing does not allow you to do any infrastructure configuration.

Question 22

Suppose you work at a startup with limited funding. Why might you prefer Azure data storage over an on-premises solution?
• To ensure you run on a specific brand of hardware which will let you to form a marketing partnership with that hardware vendor.
• The Azure pay-as-you-go billing model lets you avoid buying expensive hardware.
• To get exact control over the location of your data store.

Answer 22

The Azure pay-as-you-go billing model lets you avoid buying expensive hardware.

There are no large, up-front capital expenditures (CapEx) with Azure. You pay monthly for only the services you use (OpEx).

Question 23

Which of the following situations would yield the most benefits from relocating an on-premises data store to Azure?
Unpredictable storage demand that increases and decreases multiple times throughout the year.
Long-term, steady growth in storage demand.
Consistent, unchanging storage demand.

Answer 23

Unpredictable storage demand that increases and decreases multiple times throughout the year.

• Azure data storage is flexible. You can quickly and easily add or remove capacity. You can increase performance to handle spikes in load or decrease performance to reduce costs. In all cases, you pay for only what you use.

Question 24

Cloud security is a shared responsibility between you and your cloud provider. Which category of cloud services requires the greatest security effort on your part?
• Infrastructure as a service (IaaS)
• Platform as a service (PaaS)
• Software as a service (SaaS)

Answer 24

Infrastructure as a service (IaaS)

• At this level, the cloud provider provides physical security to compute resources. However, it’s your responsibility to patch and secure your operating systems and software, as well as configure your network to be secure.

Question 25

Which of these helps you most easily disable an account when an employee leaves your company? • Enforce multi-factor authentication (MFA) • Monitor sign-on attempts • Enable single sign-on (SSO)

Answer 25

Enable single sign-on (SSO) - SSO centralizes user identity, so you can disable an inactive account in a single step.

Question 26

Which of these is the strongest way to protect sensitive customer data? • Encrypt data as it sits in your database • Encrypt data as it travels over the network • Encrypt data both as it sits in your database and as it travels over the network

Answer 26

Encrypt data both as it sits in your database and as it travels over the network - Encrypting your data at all times, both as it sits in your database and as it travels over the network, minimizes the opportunity for an attacker to access your data in plain text.

Question 27

``` There has been an attack on your public-facing website, and the application's resources have been overwhelmed and exhausted, and are now unavailable to users. What service should you use to prevent this type of attack? • DDoS protection • Azure Firewall • Network Security Group • Application Gateway ```

Answer 27

DDoS protection - DDoS protection is the correct answer, because it will help prevent DDoS attacks.

Question 28

``` You want to store certificates in Azure to centrally manage them for your services. Which Azure service should you use? • MSIP • Azure AD • Azure Key Vault • Azure ATP ```

Answer 28

Azure Key Vault - Azure Key Vault is the correct answer, because it is a centralized cloud service for storing application secrets, referred to as a secret store.

Question 29

True or false: You can download published audit reports and other compliance-related information related to Microsoft’s cloud service from the Service Trust Portal True False

Answer 29

True - You can download published audit reports and other compliance-related information related to Microsoft’s cloud service from the Service Trust Portal.

Question 30

``` Which Azure service allows you to configure fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs? • Locks • Policy • Initiatives • Role-based Access Control ```

Answer 30

Role-based Access Control - Role-based access control is the correct answer. Role-based access control (RBAC) provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs. RBAC is provided at no additional cost to all Azure subscriber.

Question 31

``` Which Azure service allows you to create, assign, and, manage policies to enforce different rules and effects over your resources and stay compliant with your corporate standards and service-level agreements (SLAs)? Azure Policy Azure Blueprints Azure Security Center Role-based Access Control ```

Answer 31

Azure Policy - Azure Policy is the correct answer. Azure Policy is a service in Azure that you use to create, assign, and, manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service-level agreements (SLAs).

Question 32

``` Which of the following services provides up-to-date status information about the health of Azure services? • Compliance Manager • Azure Monitor • Service Trust Portal • Azure Service Health ```

Answer 32

Azure Service Health - Azure Service Health is the correct answer, because it provides you with a global view of the health of Azure services. With Azure Status, a component of Azure Service Health, you can get up-to-the-minute information on service availability.

Question 33

``` Where can you obtain details about the personal data Microsoft processes, how Microsoft processes it, and for what purposes? • Microsoft Privacy Statement • Compliance Manager • Azure Service Health • Trust Center ```

Answer 33

Microsoft Privacy Statement - Microsoft Privacy Statement is the correct answer.

Question 34

Tags can be applied to any type of resource on Azure True False

Answer 34

False

Question 35

Tags applied at a resource group level are propogated to resources within the resource group. True False

Answer 35

False

Question 36

Which of the following is not a feature of resource groups? Resources can be in only one resource group. Resources can be moved from one resource group to another resource group. Role based access control can be applied to the resource group.

Answer 36

Resources can be moved from one resource group to another resource group. Resource groups can be nested.

Question 37

Which of the following might be a good usage of tags? • Using tags to associate a cost center with resources for internal chargeback • Using tags in conjunction with Azure Automation to schedule maintenance windows • Using tags to store environment and department association

Answer 37

All of the above are good ways to use tags

Question 38

Which of the following would be the most efficient way to ensure a naming convention was followed across your subscription? • Send out an email with the details of your naming conventions and hope it is followed • Create a policy with your naming requirements and assign it to the scope of your subscription • Send out an email with the details of your naming conventions and hope it is followed • Give all other users except for yourself read-only access to the subscription. Have all requests to create resources sent to you so you can review the names being assigned to resources, and then create them.

Answer 38

Create a policy with your naming requirements and assign it to the scope of your subscription

Question 39

Which of the following would be good to put a resource lock on? • An ExpressRoute circuit with connectivity back to your on-premises network • A non-production virtual machine used to test occasional application builds • A storage account used to temporarily store images processed in a development environment

Answer 39

An ExpressRoute circuit with connectivity back to your on-premises network

Question 40

``` Which of the following are used to determine Azure costs for each billing period? • The Azure website • Number of created virtual machines • The Azure pricing calculator • Usage meters ```

Answer 40

Usage meters - Correct. Azure is billed according to your consumption based on monthly usage meters.

Question 41

Which of the following is a factor affecting costs? • Global infrastructure • Location • Availability zone

Answer 41

Location - The location you place your resources will vary the price for the resource.

Question 42

``` Complete the following sentence. As an Azure customer, Azure Reservations offer discounted prices if you _________ • Pay in advance • Provision many resources • Have a free account • Set Spending Limits ```

Answer 42

Pay in advance - Azure Reservations offer discounted prices on certain Azure products and resources. To get a discount, you reserve products and resources by paying in advance. You can prepay for one or three year's use of certain Azure resources.