Practice 5 (Udemy) Flashcards
Which of the following can you use to calculate your estimated hourly or monthly costs for using Azure?
A. Azure Pricing Calculator
B. Azure TCO Calculator
C. Azure Cost Management
D. Azure Advisor
E. Azure Billing
A. Azure Pricing Calculator
Explanation:
Disclaimer : Prices are estimates and are not intended as actual price quotes. Actual prices may vary depending on the date of purchase, currency of payment and type of agreement that you enter into with Microsoft. Contact a Microsoft sales representative for additional information on pricing.
Select the valid options to pay for Azure? ( Choose 3 )
A. Azure Website
B. Azure Partner
C. Microsoft Representative
D. Microsoft Stores
E. Xbox Website
A. Azure Website
B. Azure Partner
C. Microsoft Representative
Explanation:
Your Cloud Security team is looking to block any access from untrusted sources, such as access from unknown or unexpected locations. Which of the following can they use?
A. Conditional Access
B. MFA
C. Policies
D. Blueprints
D. Resource Locks
A. Conditional Access
Explanation:
From the Official Azure Documentation:
Conditional Access is a tool that Azure Active Directory uses to allow (or deny) access to resources based on identity signals. These signals include who the user is, where the user is, and what device the user is requesting access from.
Conditional Access is useful when you need to:
Require multifactor authentication to access an application. You can configure whether all users require multifactor authentication or only certain users, such as administrators. You can also configure whether multifactor authentication applies to access from all networks or only untrusted networks. Require access to services only through approved client applications. For example, you might want to allow users to access Office 365 services from a mobile device as long as they use approved client apps, like the Outlook mobile app. Require users to access your application only from managed devices. A managed device is a device that meets your standards for security and compliance. Block access from untrusted sources, such as access from unknown or unexpected locations.
Which of the following are free?
A. Data ingress
B. Data transfer within the same region
C. Data Transfer from one region to another
D. Data transfer within the same Availability Zone
A. Data ingress
B. Data transfer within the same region
D. Data transfer within the same Availability Zone
Explanation
From the Official Azure Documentation:
Reference: https://azure.microsoft.com/en-ca/pricing/details/bandwidth/
Which of the following is the most flexible category of cloud services?
A. IaaS
B. SaaS
C. PaaS
A. IaaS
Explanation:
From the Official Azure Documentation:
IaaS is the most flexible category of cloud services. It aims to give you complete control over the hardware that runs your application. Instead of buying hardware, with IaaS, you rent it.
Reference: https://docs.microsoft.com/en-ca/learn/modules/fundamental-azure-concepts/categories-of-cloud-services
Since your company has shifted to a fully-remote working model, they are looking to provide employees with the best virtualized experience while saving costs by using existing eligible Windows licences. They also want to enable Bring your own device (BYOD) to access their desktop and applications over the Internet.
Which of the following would you suggest?
A. Azure Virtual Desktop
B. Azure Kubernetes
C. Azure Arc
D. Azure Virtual Machines
E. Azure FileSync
F. Azure ExpressRoute
A. Azure Virtual Desktop
Explanation:
From the Official Azure Documentation:
Azure Virtual Desktop allows you to enable a secure remote desktop experience from virtually anywhere. You can set up Azure Virtual Desktop (formerly Windows Virtual Desktop) in minutes to enable secure remote work. It is also possible to provide the familiarity and compatibility of Windows 11 with the new scalable multi-session experience for your end users and save costs by using existing eligible Windows licences.
Reference: https://azure.microsoft.com/en-ca/services/virtual-desktop/#features
_________________ enables large-scale parallel and high-performance computing (HPC) batch jobs with the ability to scale to tens, hundreds, or thousands of VMs.
A. Azure Virtual Machines
B. Azure Batch
B. Azure Batch
Explanation:
From the Official Azure Documentation:
Azure Batch enables large-scale parallel and high-performance computing (HPC) batch jobs with the ability to scale to tens, hundreds, or thousands of VMs.
When you’re ready to run a job, Batch does the following:
Starts a pool of compute VMs for you. Installs applications and staging data. Runs jobs with as many tasks as you have. Identifies failures. Requeues work. Scales down the pool as work completes.
Which of the following Azure plans should you choose for Trial and non-production environments?
A. Developer
B. Standard
C. Professional Direct
D. Premier
A. Developer
Explanation:
Your ________________ is your organization’s ability to protect from and respond to security threats.
A. Security Posture
B. Security Standard
C. Security Response
D. Security Blueprint
A. Security Posture
Explanation:
From the Official Azure Documentation:
The objective of defense in depth is to protect information and prevent it from being stolen by those who aren’t authorized to access it.
A defense-in-depth strategy uses a series of mechanisms to slow the advance of an attack that aims at acquiring unauthorized access to data.
Your security posture is your organization’s ability to protect from and respond to security threats. The common principles used to define a security posture are confidentiality, integrity, and availability, known collectively as CIA.
Confidentiality
The principle of least privilege means restricting access to information only to individuals explicitly granted access, at only the level that they need to perform their work. This information includes protection of user passwords, email content, and access levels to applications and underlying infrastructure.
Integrity
Prevent unauthorized changes to information:
At rest: when it's stored.
In transit: when it's being transferred from one place to another, including from a local computer to the cloud.
A common approach used in data transmission is for the sender to create a unique fingerprint of the data by using a one-way hashing algorithm. The hash is sent to the receiver along with the data. The receiver recalculates the data's hash and compares it to the original to ensure that the data wasn't lost or modified in transit.
Availability
Ensure that services are functioning and can be accessed only by authorized users. Denial-of-service attacks are designed to degrade the availability of a system, affecting its users.
A startup is looking to deploy a tool that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules. Which of the following would you recommend?
A. A Firewall
B. A Hub
C. A Router
D. A Gateway
E. A Filter
F. A Resource Group
A. A Firewall
Explanation:
From the Official Azure Documentation:
A firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules. You can create firewall rules that specify ranges of IP addresses. Only clients granted IP addresses from within those ranges are allowed to access the destination server. Firewall rules can also include specific network protocol and port information.
What’s Azure Firewall?
Azure Firewall is a managed, cloud-based network security service that helps protect resources in your Azure virtual networks. A virtual network is similar to a traditional network that you’d operate in your own datacenter. It’s a fundamental building block for your private network that enables virtual machines and other compute resources to securely communicate with each other, the internet, and on-premises networks.
Here’s a diagram that shows a basic Azure Firewall implementation:
A large organization plans to migrate all their On-Prem Virtual Machines to an Azure pay-as-you-go subscription. Which of the following expenditure models would this migration follow?
A. Operational
B. Elastic
C. Capital
D. Scalable
A. Operational
Explanation:
One of the major changes that you will face when you move from on-premises cloud to the public cloud is the switch from capital expenditure (buying hardware) to operating expenditure (paying for service as you use it).
This switch also requires more careful management of your costs. The benefit of the cloud is that you can fundamentally and positively affect the cost of a service you use by merely shutting down or resizing it when it’s not needed.
The Basic service tier is automatically enabled for free as part of your Azure subscription.
A. Yes
B. No
A. Yes
Explanation:
A distributed denial of service attack attempts to overwhelm and exhaust an application’s resources, making the application slow or unresponsive to legitimate users. DDoS attacks can target any resource that’s publicly reachable through the internet, including websites.
What is Azure DDoS Protection?
Azure DDoS Protection (Standard) helps protect your Azure resources from DDoS attacks.
When you combine DDoS Protection with recommended application design practices, you help provide a defense against DDoS attacks. DDoS Protection uses the scale and elasticity of Microsoft’s global network to bring DDoS mitigation capacity to every Azure region. The DDoS Protection service helps protect your Azure applications by analyzing and discarding DDoS traffic at the Azure network edge, before it can affect your service’s availability.
This diagram shows network traffic flowing into Azure from both customers and an attacker:
What service tiers are available to DDoS Protection?
DDoS Protection provides these service tiers:
Basic
The Basic service tier is automatically enabled for free as part of your Azure subscription. Always-on traffic monitoring and real-time mitigation of common network-level attacks provide the same defenses that Microsoft's online services use. The Basic service tier ensures that Azure infrastructure itself is not affected during a large-scale DDoS attack. The Azure global network is used to distribute and mitigate attack traffic across Azure regions. Standard The Standard service tier provides additional mitigation capabilities that are tuned specifically to Azure Virtual Network resources. DDoS Protection Standard is relatively easy to enable and requires no changes to your applications. The Standard tier provides always-on traffic monitoring and real-time mitigation of common network-level attacks. It provides the same defenses that Microsoft's online services use. Protection policies are tuned through dedicated traffic monitoring and machine learning algorithms. Policies are applied to public IP addresses, which are associated with resources deployed in virtual networks such as Azure Load Balancer and Application Gateway. The Azure global network is used to distribute and mitigate attack traffic across Azure regions.
A company wants to deploy a set of Azure Virtual Machines and wants to understand their pricing. Which 2 of the following affect Virtual Machine (VM) costs in Azure?
A. The Size of the Virtual Machine (VM)
B. The Region the Virtual Machine is located in
C. The virtual network the VM belongs to
D. The resource group the VM belongs to
E. The branding of the VM
F. The Scale Set the VM belongs to
G. The Data Center the VM resides in
A. The Size of the Virtual Machine (VM)
B. The Region the Virtual Machine is located in
Explanation:
You own a streaming-service website and notice extremely high spikes in traffic whenever a new movie is launched on your platform. However, during the rest of the month you experience moderate traffic.
Which of the following benefits does having your website hosted on Azure provide you given this scenario?
A. Fault Tolerance
B. High Latency
C. Elasticity
D. Load Balancing
E. Auto Rollovers
C. Elasticity
Explanation:
From the Official Azure Documentation:
Elasticity in this case is the ability to provide additional compute resource when needed and reduce the compute resource when not needed to reduce costs.
Autoscaling is an example of elasticity. Here you don’t need to provision lot of resources in advance. You will incur costs by allocating more resources only when demand increases!
Elastic computing is the ability to quickly expand or decrease computer processing, memory and storage resources to meet changing demands without worrying about capacity planning and engineering for peak usage. Typically controlled by system monitoring tools, elastic computing matches the amount of resources allocated to the amount of resources actually needed without disrupting operations. With cloud elasticity, a company avoids paying for unused capacity or idle resources and doesn’t have to worry about investing in the purchase or maintenance of additional resources and equipment.
Data that is stored in the Archive access tier of an Azure Storage account ________________.
A can only be read by using Azure Instant Access
B. Must be recovered before the data can be accessed
C. must be rehydrated before data can be accessed
D. must be requested from Azure by calling the helpline
C. must be rehydrated before data can be accessed
Explanation:
From the Official Azure Documentation:
Azure storage offers different access tiers: hot, cool and archive.
The archive access tier has the lowest storage cost. But it has higher data retrieval costs compared to the hot and cool tiers. Data in the archive tier can take several hours to retrieve.
While a blob is in archive storage, the blob data is offline and can’t be read, overwritten, or modified. To read or download a blob in archive, you must first rehydrate it to an online tier.
Example usage scenarios for the archive access tier include: Long-term backup, secondary backup, and archival datasets
Original (raw) data that must be preserved, even after it has been processed into final usable form.
Compliance and archival data that needs to be stored for a long time and is hardly ever accessed.
If you want to keep tabs on Azure itself, especially the services and regions you depend on, you should to choose __________________.
A. Azure Monitor
B. Azure Advisor
C. Azure Arc
D. Azure Service Health
D. Azure Service Health
Explanation:
From the Official Azure Documentation:
If you want to keep tabs on Azure itself, especially the services and regions you depend on, you want to choose Azure Service Health. You can view the current status of the Azure services you rely on, upcoming planned outages, and services that will be sunset. You can set up alerts that help you stay on top of incidents and upcoming downtime without having to visit the dashboard regularly.
However, if you want to keep track of the performance or issues related to your specific VM or container instances, databases, your applications, and so on, you want to visit Azure Monitor and create reports and notifications to help you understand how your services are performing or diagnose issues related to your Azure usage.
When a company thinks of migrating to the public cloud (like Azure), which of the following expense gets reduced?
A. Capital Expense
B. Operational Expense
C. Primary Expense
D. Secondary Expense
A. Capital Expense
Explanation:
Migrating to the public cloud saves a lot of Capex upfront and one of the biggest advantages is the ability to Pay as you go!
Which of the following can you use to estimate the cost savings you can get by migrating your workloads to Azure?
A. Azure TCO Calculator
B. Azure Pricing Calculator
C. Azure Cost Management
D. Azure Advisor
A. Azure TCO Calculator
Explanation:
From the Official Azure Documentation:
Azure Total Cost of Ownership (TCO) Calculator helps you estimate the cost savings you can realise by migrating your workloads to Azure
Which of the following can you use to track resource usage and manage costs across all of your clouds with a single, unified view?
A. Azure Pricing Calculator
B. Azure Cost Management + Billing
C. Azure Trust Center
D. Azure Monitor
B. Azure Cost Management + Billing
Explanation:
From the Official Azure Documentation:
The following depicts the single unified view to track resource usage as well as manage costs.
Reference : https://azure.microsoft.com/en-gb/services/cost-management/#overview
You have to run business critical workloads using Azure Virtual Machines, SQL Databases, Data Explorer, and Blob Storage for the next 3 years. Which of the following would provide the MOST cost savings?
A. By Purchasing Reservations
B. By using Resources judiciously
C. Using a Pay as You Go Subscription
D. Stopping the Virtual Machines every night
A. By Purchasing Reservations
Explanation:
From the Official Azure Documentation:
Azure Reservations help you save money by committing to one-year or three-year plans for multiple products. Committing allows you to get a discount on the resources you use. Reservations can significantly reduce your resource costs by up to 72% from pay-as-you-go prices. Reservations provide a billing discount and don’t affect the runtime state of your resources. After you purchase a reservation, the discount automatically applies to matching resources.
You can pay for a reservation up front or monthly. The total cost of up-front and monthly reservations is the same and you don’t pay any extra fees when you choose to pay monthly. Monthly payment is available for Azure reservations, not third-party products.
Why buy a reservation?
If you have consistent resource usage that supports reservations, buying a reservation gives you the option to reduce your costs. For example, when you continuously run instances of a service without a reservation, you’re charged at pay-as-you-go rates. When you buy a reservation, you immediately get the reservation discount. The resources are no longer charged at the pay-as-you-go rates.
