Practice Assessment Questions Flashcards
Which two attributes are characteristics of the private cloud deployment model?
Hardware must be purchased.
Company has complete control over physical resources and security.
(The company has complete control over physical resources and security.)
Describe cloud computing
In a private cloud, hardware must be purchased for start up and maintenance. In a private cloud, organizations control resources and security. Quick provisioning is a characteristic of the public cloud deployment model. Paying only for what is used is a characteristic of the public cloud deployment model.
What are two characteristics of the public cloud deployment model?
Servers and storage are owned/operated by a third-party cloud service provider.
(Servers and storage are owned and operated by a third-party cloud service provider.)
Services are offered over the internet and available to anyone who wants to purchase them.
(Services are offered over the internet and are available to anyone who wants to purchase them.)
Describe cloud computing
In a public cloud, services are offered over the internet and are available to anyone who wants to purchase them. A private cloud is limited to a single organization. Cloud resources, such as servers and storage, are owned and operated by a third-party cloud service provider and delivered over the internet. A private cloud consists of computing resources used exclusively by users from one business or organization.
Which two characteristics are common advantages of cloud computing?
geo-distribution
high availability
Describe cloud computing
Cloud-based apps can provide a continuous user experience with no apparent downtime, even when things go wrong. You can deploy apps and data to regional datacenters around the globe, thereby ensuring that your customers always have the best performance in their region. Apps in cloud computing can scale vertically and horizontally. In a public cloud model, you do not get physical access to servers, as they are managed by the cloud provider.
Why is cloud computing often less expensive than on-premises datacenters?
You are only billed for what you use.
Describe cloud computing
Renting compute and storage services and being billed for only what you use often lowers operating expenses. Depending on the service and the type of network bandwidth, charges can be incurred. Cloud service offerings often provide functionality that can be difficult or cost-prohibitive to deploy on-premises, especially for smaller organizations. Major cloud providers offer services around the world. Making it easy and relatively inexpensive to deploy services close to where your users reside.
[Answer choice] refers to upfront costs incurred one time, such as hardware purchases.
Capital expenditures
Describe cloud computing
Capital expenditures are one-time expenses that can be deducted over time. Operational expenditures are billed as you use services and do not have upfront costs.
Increasing compute capacity for an app by adding RAM or CPUs to a virtual machine is called [answer choice].
vertical scaling
Describe the benefits of using cloud services
You scale vertically to increase compute capacity by adding RAM or CPUs to a virtual machine. Scaling horizontally increases compute capacity by adding instances of resources, such as adding virtual machines to the configuration. Disaster recovery keeps data and other assets safe in the event of a disaster. High availability minimizes downtime when things go wrong.
Deploying and configuring cloud-based resources quickly as business requirements change is called [answer choice].
agility
Describe the benefits of using cloud services
Agility means that you can deploy and configure cloud-based resources quickly as app requirements change. Scalability means that you can add RAM, CPU, or entire virtual machines to a configuration. Elasticity means that you can configure cloud-based apps to take advantage of autoscaling, so apps always have the resources they need. High availability means that cloud-based apps can provide a continuous user experience with no apparent downtime, even when things go wrong.
What are cloud-based backup services, data replication, and geo-distribution features of?
a disaster recovery plan
Describe the benefits of using cloud services
Disaster recovery uses services, such as cloud-based backup, data replication, and geo-distribution, to keep data and code safe in the event of a disaster.
Increasing the capacity of an application by adding an additional virtual machine is called [answer choice].
horizontal scaling
Describe the benefits of using cloud services
Scaling horizontally increases compute capacity by adding instances of resources, such as adding virtual machines to the configuration. You scale vertically to increase compute capacity by adding RAM or CPUs to a virtual machine. Agility refers to the ability to deploy new applications and services quickly. High availability minimizes downtime when things go wrong.
In a platform as a service (PaaS) model, which two components are the responsibility of the cloud service provider?
operating system
physical network
Describe cloud service types
In PaaS, the cloud provider is responsible for the operating system, physical datacenter, physical hosts, and physical network. In PaaS, the customer is responsible for accounts and identities.
Which type of cloud service model is typically licensed through a monthly or annual subscription
software as a service (SaaS)
Describe cloud service types
SaaS is software that is centrally hosted and managed for you and your users or customers. Usually, one version of the application is used for all customers, and it is licensed through a monthly or annual subscription. PaaS and IaaS use a consumption-based model, so you only pay for what you use.
What is the customer responsible for in a software as a service (SaaS) model?
data and access
Describe cloud service types
SaaS allows you to pay to use an existing application on hardware managed by a third party. You supply data and configure access. Customers are only responsible for storage in a private cloud. Customers are responsible for virtual machines and runtime in IaaS and the private cloud.
Which cloud service model is used by Microsoft Office 365?
software as a service (SaaS)
Describe cloud service types
SaaS allows users to connect to and use cloud-based apps over the internet. Common examples are email, calendaring, and Office tools, such as Office 365.
Which type of cloud service are virtual networks?
infrastructure as a service (IaaS)
Describe cloud service types
IaaS helps you reduce the cost and complexity of maintaining a physical server and its datacenter infrastructure. Virtual networks are part of the IaaS cloud service.
[Answer choice] is the logical container used to combine and organize Azure resources.
a resource group
Describe the core architectural components of Azure
Resources are combined into resource groups, which act as a logical container into which Azure resources like web apps, databases, and storage accounts, are deployed and managed.
[Answer choice] are physically separate datacenters within an Azure region.
Availability zones
Describe the core architectural components of Azure
Availability zones are physically separate datacenters within an Azure region. Each availability zone is made up of one or more datacenters equipped with independent power, cooling, and networking.
What is an Azure Storage account named storage001 an example of?
a resource
Describe the core architectural components of Azure
A resource is a manageable item that is available through Azure. Virtual machines, storage accounts, web apps, databases, and virtual networks are examples of resources.
[Answer choice] is the deployment and management service for Azure.
Azure Resource Manager (ARM)
Describe the core architectural components of Azure
ARM is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in an Azure subscription. You use management features, such as access control, resource locks, and resource tags, to secure and organize resources after deployment.
Which Azure resource is a software emulation of a physical computer that includes a virtual processor, memory, storage, and networking resources?
a virtual machine
Describe Azure compute and networking services
Virtual machines are software emulations of physical computers. They include a virtual processor, memory, storage, and networking resources. Virtual machines host an operating system, and you can install and run software just like on a physical computer.
Which Azure compute service can you use to deploy and manage a set of identical virtual machines?
Azure Virtual Machine Scale Sets
Describe Azure compute and networking services
Virtual Machine Scale Sets are an Azure compute resource that you can use to deploy and manage and scale a set of identical virtual machines.
Which scenario is a use case for a VPN gateway?
connecting an on-premises datacenter to an Azure virtual network
Describe Azure compute and networking services
A VPN gateway is a type of virtual network gateway. Azure VPN Gateway instances are deployed to a dedicated subnet of a virtual network. You can use them to connect on-premises datacenters to virtual networks through a Site-to-Site (S2S) VPN connection.
You need to allow resources on two different Azure virtual networks to communicate with each other.
What should you configure?
peering
Describe Azure compute and networking services
You can link virtual networks together by using virtual network peering. Peering enables resources in each virtual network to communicate with each other.
What are two services that allow you to run applications in containers?
Azure Container Instances (ACI)
Azure Kubernetes Service (AKS)
Describe Azure compute and networking services
Containers are a virtualization environment. Much like running multiple virtual machines on a single physical host, you can run multiple containers on a single physical or virtual host. Unlike virtual machines, you do not manage the operating system for a container.
Which storage service should you use to store thousands of files containing text and images?
Azure Blob storage
Describe Azure storage services
Azure Blob storage is an object storage solution that you can use to store massive amounts of unstructured data, such as text or binary data.
Which Azure Blob storage tier stores data offline and offers the lowest storage costs and the highest costs to access data?
Archive
Describe Azure storage services
The Archive storage tier stores data offline and offers the lowest storage costs, but also the highest costs to rehydrate and access data. The Hot storage tier is optimized for storing data that is accessed frequently. Data in the Cool access tier can tolerate slightly lower availability, but still requires high durability, retrieval latency, and throughput characteristics similar to hot data.
Which two scenarios are common use cases for Azure Blob storage?
serving images/documents directly to a browser
(serving images or documents directly to a browser)
storing data for backup/restore
(storing data for backup and restore)
Describe Azure storage services
Low storage costs and unlimited file formats make blob storage a good location to store backups and archives. Blob storage can be reached from anywhere by using an internet connection. Azure Disk Storage provides disks for Azure virtual machines. Azure Files supports mounting file storage shares.
Which Azure Blob storage service tier has the highest storage costs and the fastest access times for reading and writing data?
Hot
Describe Azure storage services
The Hot tier is optimized for storing data that is accessed frequently. The Cool access tier has a slightly lower availability SLA and higher access costs compared to hot data, which are acceptable trade-offs for lower storage costs. Archive storage stores data offline and offers the lowest storage costs, but also the highest costs to rehydrate and access data.
What is the purpose of defense in depth?
Use several layers of protection to prevent information from being accessed by unauthorized users.
(To use several layers of protection to prevent information from being accessed by unauthorized users)
Describe Azure identity, access, and security
The objective of defense in depth is to use several layers of protection to prevent information from being accessed or stolen by unauthorized users.
What Microsoft Entra feature can you use to configure security authentication that requires users to use their mobile phone to sign in?
multi-factor authentication (MFA)
Describe Azure identity, access, and security
MFA is the concept of requiring something more than only a password to sign in to an application. You can use the mobile phone to receive a phone call, text, or a code to get authenticated.
Which two services are provided by Microsoft Entra?
Authentication
Single Sign-On (SSO)
Describe Azure identity, access, and security
Microsoft Entra provides services for verifying identity and access to applications and resources. SSO enables you to remember a single username and password to access multiple applications and is available in Azure AD.
Which Microsoft Entra feature can you use to ensure that users can only access Microsoft Office 365 applications from approved client applications?
Conditional Access
Describe Azure identity, access, and security
Conditional Access allows administrators to control, allow, or deny access to resources based on certain signals. You can require that access to certain applications only be allowed if the users are using an approved client application. MFA is a process whereby a user is prompted during the sign-in process for an additional form of identification. Examples include a code on their mobile phone or a fingerprint scan.
What can you use to sync identities from an on-premises Active Directory Domain Services (AD DS) domain to a Microsoft Entra tenant?
Microsoft Entra Connect
Describe Azure identity, access, and security
Microsoft Entra Connect syncs user identities from an on-premises Active Directory Domain Services (AD DS) domain to Microsoft Entra. Microsoft Entra Connect allows you to use features such as single sign-on (SSO), MFA, and self-service password reset (SSPR) in both systems. SSPR prevents users from using known compromised passwords.
What can you use to ensure that users authenticate by using multi-factor authentication (MFA) when they attempt to sign in from a specific location?
Conditional Access
Describe Azure identity, access, and security
Conditional Access can use signals to determine information about authentication attempts, and then determine whether to block access or require additional verifications, such as MFA.
You need to compare the costs of running an application in an on-premises datacenter with the costs of running the application in Azure.
What should you use to assist you?
Total Cost of Ownership (TCO) Calculator
Describe cost management in Azure
The TCO Calculator helps you estimate the cost savings over time of operating a solution in Azure compared to operating in an on-premises datacenter.
You plan to build a new solution in Azure that will use platform as a service (PaaS) products.
What should you use to estimate the monthly costs?
Azure Pricing calculator
Describe cost management in Azure
The Azure Pricing calculator allows you to estimate and configure according to your specific requirements. You will then receive a consolidated estimated price and a detailed breakdown of the costs associated with each resource you added to your solution.
Which two features are available by using Azure Cost Management + Billing?
Create/manage budgets.
(Create and manage budgets.)
Generate historical reports and forecast future usage.
Describe cost management in Azure
Azure Cost Management allows you to create and manage cost and usage budgets by monitoring resource demand trends, consumption rates, and cost patterns. It also allows you to use historical data to generate reports and forecast future usage and expenditures.
Your organization plans to deploy several production virtual machines that will have consistent resource usage throughout the year.
What can you use to minimize the costs of the virtual machines without reducing the functionality of the virtual machines?
Azure Reservations
Describe cost management in Azure
Azure Reservations offers discounted prices on certain Azure services. Azure Reservations can save you up to 72 percent compared to pay-as-you-go prices. To receive a discount, you can reserve services and resources by paying in advance. Spending limits can suspend a subscription when the spend limit is reached.
What can you use to ensure that new and existing Azure resources stay in compliance with corporate standards?
Azure Policy
Describe features and tools in Azure for governance and compliance
Azure Policy is a service in Azure that enables you to create, assign, and manage policies that control or audit resources. These policies enforce different rules across all resource configurations so that the configurations stay compliant with corporate standards.
What can you use to restrict the deployment of a virtual machine to a specific location?
Azure Policy
Describe the purpose of Azure Policy
Azure Policy can help to create a policy for allowed regions, which enables you to restrict the deployment of virtual machines to a specific location.
Which two actions can be performed by using Azure portal?
Create new resources.
Create Microsoft Entra user
Describe features and tools for managing and deploying Azure resources
The Azure portal provides a GUI to view all the services you are using, create new services, configure your services, and view reports.
What can you use to define the resources you want to provision in a declarative JSON format?
Azure Resource Manager (ARM) templates
Describe features and tools for managing and deploying Azure resources
By using ARM templates, you can describe the resources you want to use in a declarative JSON format.
You have a team of Linux administrators that need to manage the resources in Azure. The team wants to use the Bash shell to perform the administration.
What should you recommend?
Azure CLI
Describe features and tools for managing and deploying Azure resources
Azure CLI allows you to use the Bash shell to perform administrative tasks. Bash is used in Linux environments, so a Linux administrator will probably be more comfortable performing command-line administration from Azure CLI.
Which Azure service evaluates Azure resources and makes recommendations to help improve reliability, security, performance, and cost reduction?
Azure Advisor
Describe monitoring tools in Azure
Azure Advisor evaluates Azure resources and makes recommendations to help improve reliability, security, and performance, achieve operational excellence, and reduce costs.
You need to review the root cause analysis (RCA) report for a service outage that occurred last week.
Where should you look for the report?
Azure Service Health
Describe monitoring tools in Azure
After an outage, Service Health provides official incident reports called root cause analysis (RCA), which you can share with stakeholders.
