Practice Test 3 (Udemy) Flashcards
Which Azure service should you use to store certificates?
A. Azure Security Center
B. An Azure Storage Account
C. Azure Information Protection
D. Azure Key Vault
D. Azure Key Vault
Explanation:
From the Official Azure Documentation:
Azure Key Vault helps solve the following problems:
1) Secrets Management - Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets
2) Key Management - Azure Key Vault can also be used as a Key Management solution. Azure Key Vault makes it easy to create and control the encryption keys used to encrypt your data.
3) Certificate Management - Azure Key Vault is also a service that lets you easily provision, manage, and deploy public and private Transport Layer Security/Secure Sockets Layer (TLS/SSL) certificates for use with Azure and your internal connected resources.
Azure Key Vault has two service tiers: Standard, which encrypts with a software key, and a Premium tier, which includes hardware security module(HSM)-protected keys
_________________ is a hosting service for Domain Name System domains that provides name resolution by using Microsoft Azure infrastructure.
A. Azure VPN Gateway
B. Azure ExpressRoute
C. Azure Virtual Subnets
D. Azure DNS
D. Azure DNS
Explanation:
From the Official Azure Documentation:
Azure DNS is a hosting service for DNS domains that provides name resolution by using Microsoft Azure infrastructure. By hosting your domains in Azure, you can manage your DNS records by using the same credentials, APIs, tools, and billing as your other Azure services.
You can’t use Azure DNS to buy a domain name. For an annual fee, you can buy a domain name by using App Service domains or a third-party domain name registrar. Your domains then can be hosted in Azure DNS for record management. For more information, see Delegate a domain to Azure DNS.
You can link virtual networks together by using ________________.
A. Virtual Network Proxy
B. Virtual Network Hub
C. Virtual Network Peering
D. Virtual Network Seeding
C. Virtual Network Peering
Explanation:
Explanation
From the Official Azure Documentation:
You can link virtual networks together by using virtual network peering. Peering enables resources in each virtual network to communicate with each other. These virtual networks can be in separate regions, which allows you to create a global interconnected network through Azure.
User-defined routes (UDR) are a significant update to Azure’s Virtual Networks that allows for greater control over network traffic flow. This method allows network administrators to control the routing tables between subnets within a VNet, as well as between VNets.
Reference: https://docs.microsoft.com/en-ca/learn/modules/azure-networking-fundamentals/azure-virtual-network-fundamentals
Azure Service Health allows us to define the critical resources that should never be impacted due to outages and downtimes.
A. Yes
N. No
B. No
Explanation:
From the Official Azure Documentation:
Azure Service Health notifies you about Azure service incidents and planned maintenance so you can take action to mitigate downtime. Configure customisable cloud alerts and use your personalised dashboard to analyse health issues, monitor the impact to your cloud resources, get guidance and support, and share details and updates.
Although you can see when a maintenance is planned and act accordingly to migrate a VM if needed, you can’t prevent service failures.
It’s possible to deploy a new Azure VM from a Google Chromebook by using PowerAutomate.
A. No
B. Yes
A. No
Explanation:
Tricky question! PowerAutomate is not the same as PowerShell.
PowerAutomate moreover isn’t a part of Azure! It falls under the Microsoft umbrella of offerings, just like PowerApps.
Hence, this statement is definitely False. You can use the Azure portal to provision Virtual Machines, or even the CLI.
_______________ copies your data synchronously across three Azure availability zones in the primary region. For applications requiring high availability.
A. Geo-zone redundant storage (GZRS)
B. Zone Redundant Storage (ZRS)
C. Locally Redundant Storage (LRS)
D. Planet redundant storage (PRS)
B. Zone Redundant Storage (ZRS)
Explanation:
From the Official Azure Documentation:
Data in an Azure Storage account is always replicated three times in the primary region. Azure Storage offers two options for how your data is replicated in the primary region:
Locally redundant storage (LRS) copies your data synchronously three times within a single physical location in the primary region. LRS is the least expensive replication option, but isn't recommended for applications requiring high availability or durability. Zone-redundant storage (ZRS) copies your data synchronously across three Azure availability zones in the primary region. For applications requiring high availability, Microsoft recommends using ZRS in the primary region, and also replicating to a secondary region. Geo-zone-redundant storage (GZRS) combines the high availability provided by redundancy across availability zones with protection from regional outages provided by geo-replication. Data in a GZRS storage account is copied across three Azure availability zones in the primary region and is also replicated to a secondary geographic region for protection from regional disasters.
______________ is a set of capabilities in Azure Active Directory (AAD) that enables organizations to secure and manage any outside user, including customers and partners.
A. External Identities
B. External User Management
C. Sentinel
D. External Profiles
A.External Identities
Explanation:
From the Official Azure Documentation:
External Identities is a set of capabilities that enables organizations to secure and manage any external user, including customers and partners. Building on B2B collaboration, External Identities gives you more ways to interact and connect with users outside your organization.
Yes or No:
A Resource can only access other resources in the same resource group.
A. No
B. Yes
A. No
Explanation:
From the official Azure documentation:
A resource can connect to resources in other resource groups. This scenario is common when the two resources are related but don’t share the same lifecycle. For example, you can have a web app that connects to a database in a different resource group.
Which of the following is the mission-critical cloud deployment available only to US Federal, State, Local and Tribal Governments and their partners?
A. ISO
B. Azure Government
C. Azure Nation
D. Azure Federal
B. Azure Government
Explanation:
From the Official Azure Documentation:
Azure Government is the mission-critical cloud, delivering breakthrough innovation to US government customers and their partners. Only US federal, state, local and tribal governments and their partners have access to this dedicated instance, operated by screened US citizens. Azure Government offers the broadest level of certifications of any cloud provider to simplify even the most critical government compliance requirements.
What is network latency?
A. the maximum amount of data that can travel over the network
B. The cost incurred by the data traveling over the network
C. The time it takes for data to travel over the network
D. The distance the data travel over the network
C. The time it takes for data to travel over the network
Explanation:
Network latency is the time it takes for data or a request to go from the source to the destination. Latency in networks is measured in milliseconds.
Azure ____________ is an authorization system built on Azure Resource Manager that provides fine-grained access management to Azure resources.
A. Locks
B. Policies
C. Role Based Access Control (RBAC)
D. Resource Groups
C. Role Based Access Control (RBAC)
Explanation:
From the official Azure docs:
Access management for cloud resources is a critical function for any organization that is using the cloud. Azure role-based access control (Azure RBAC) helps you manage who has access to Azure resources, what they can do with those resources, and what areas they have access to.
Azure RBAC is an authorization system built on Azure Resource Manager that provides fine-grained access management to Azure resources.
What can you do with Azure RBAC?
Here are some examples of what you can do with Azure RBAC:
Allow one user to manage virtual machines in a subscription and another user to manage virtual networks Allow a DBA group to manage SQL databases in a subscription Allow a user to manage all resources in a resource group, such as virtual machines, websites, and subnets Allow an application to access all resources in a resource group
Having a hybrid cloud solution in place could be useful when regulations or policies do not permit moving specific data or workloads to the cloud.
A. Yes
B. No
A. yes
Explanation:
From the official Azure documentation:
When organizations move workloads and data to the cloud, their on-premises datacenters often continue to play an important role. The term hybrid cloud refers to a combination of public cloud and on-premises datacenters, to create an integrated IT environment that spans both. Some organizations use hybrid cloud as a path to migrate their entire datacenter to the cloud over time. Other organizations use cloud services to extend their existing on-premises infrastructure.
When to use a hybrid solution
Consider using a hybrid solution in the following scenarios:
As a transition strategy during a longer-term migration to a fully cloud-native solution. When regulations or policies do not permit moving specific data or workloads to the cloud. For disaster recovery and fault tolerance, by replicating data and services between on-premises and cloud environments. To reduce latency between your on-premises datacenter and remote locations, by hosting part of your architecture in Azure.
____________ is a bridge that extends the Azure platform to help you build applications and services with the flexibility to run across datacenters, at the edge, and in multicloud environments. It also simplifies governance and management by delivering a consistent multi-cloud and on-premises management platform.
A. Azure DNS
B. Azure Bridge
C. Azure Sentinel
D. Azure Arc
D. Azure Arc
Explanation:
Azure Arc is a bridge that extends the Azure platform to help you build applications and services with the flexibility to run across datacenters, at the edge, and in multicloud environments. Develop cloud-native applications with a consistent development, operations, and security model. Azure Arc runs on both new and existing hardware, virtualization and Kubernetes platforms, IoT devices, and integrated systems.
Today, companies struggle to control and govern increasingly complex environments that extend across data centers, multiple clouds, and edge. Each environment and cloud possesses its own set of management tools, and new DevOps and ITOps operational models can be hard to implement across resources.
Azure Arc simplifies governance and management by delivering a consistent multi-cloud and on-premises management platform.
Which of the following services allows you to easily run popular open source frameworks including Apache Hadoop, Spark, and Kafka for open source analytics?
A. Azure Data Lake Analytics
B. Azure Cognitive Services
C. Azure Cosmos DB
D. Azure HDInsight
D. Azure HDInsight
Explanation:
VERY IMPORTANT!
From the Official Azure docs:
We can easily run popular open source frameworks—including Apache Hadoop, Spark, and Kafka—using Azure HDInsight, a cost-effective, enterprise-grade service for open source analytics. Effortlessly process massive amounts of data and get all the benefits of the broad open source ecosystem with the global scale of Azure.
Many people get confused between Azure HDInsight and Azure Databricks -
1) Azure HDInsight brings both Hadoop and Spark under the same umbrella and enables enterprises to manage both using the same set of tools e.g. using Ambari, Apache Ranger etc. It also offers industry standard notebook experience with support for both Jupyter and Zeppelin notebooks. Enterprises that want this ease of manageability across all their big data workloads can choose to use HDInsight.
2) Azure Databricks is a premium Spark offering that is ideal for customers who want their data scientists to collaborate easily and run their Spark based workloads efficiently and at industry leading performance.
Azure Databricks is an Apache Spark-based analytics platform optimized for the Microsoft Azure cloud services platform. For more details, refer to Azure Databricks Documentation.
______________ is a command-line utility that you can use to copy blobs or files to or from a storage account.
A. AzCopy
B. AzReplicate
C. AzMigrate
D. AzMove
A. AzCopy
Explanation:
From the Official Azure Documentation:
AzCopy is a command-line utility that you can use to copy blobs or files to or from a storage account.
Example of a command -
azcopy make 'https://mystorageaccount.file.core.windows.net/myfileshare? sv=2018-03-28&ss=bjqt&srs=sco&sp=rjklhjup&se=2019-05-10T04:37:48Z&st=2019-05- 09T20:37:48Z&spr=https&sig=%2FSOVEFfsKDqRry4bk3qz1vAQFwY5DDzp2%2B%2F3Eykf%2FJLs%3D'
A recent unapproved size change to one of the Virtual Machines (VMs) in your company has led to a huge unexpected bill. Which of the following services can help you identify the user who made this unapproved change?
A. Azure Service Health
B. Azure Activity Log
C. Azure Xamarin
D. Azure Event Hubs
E. Azure Information Protection (AIP)
B. Azure Activity Log
Explanation:
From the Official Azure Documentation:
The Azure Monitor activity log is a platform log in Azure that provides insight into subscription-level events. The activity log includes information like when a resource is modified or a virtual machine is started. You can view the activity log in the Azure portal or retrieve entries with PowerShell and the Azure CLI. This article provides information on how to view the activity log and send it to different destinations.
Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/essentials/activity-log
Which of the following is a free tool to conveniently manage your Azure cloud storage resources from your desktop?
A. Azure FileSync
B. Azure AzCopy
C. Azure Data Box
D. Azure Storage Explorer
E. Azure Migrate
D. Azure Storage Explorer
Explanation:
From the Official Azure Documentation:
Azure Storage Explorer is a free tool to conveniently manage your Azure cloud storage resources from your desktop.
Reference : https://azure.microsoft.com/en-ca/features/storage-explorer/#overview
It’s possible to deploy an Azure VM from a MacOS based system by using which of the following options?
A. Azure CLI
B. Azure Cloudshell
C. Azure Powershell
D. Azure Portal
A. Azure CLI
B. Azure Cloudshell
C. Azure Powershell
D. Azure Portal
Explanation:
All of the above can be used to manage Azure resources on a MacOS based system!
Azure Portal - Available for all Operating Systems
Azure CLI - Available for MacOS, Windows and Linux
Azure Powershell - Available to install on MacOS, Windows, Linux, Docker, and Arm (Subset of Azure Cloudshell)
Azure Cloudshell - Azure Cloud Shell is an interactive, authenticated, browser-accessible shell for managing Azure resources. It provides the flexibility of choosing the shell experience that best suits the way you work, either Bash or PowerShell.
Your company makes use of several SQL databases. However, you want to increase their efficiency because of varying and unpredictable workloads. Which of the following can help you with this?
A. Region Pairs
B. Elastic Pools
C. Resource Tags
D. Scale Sets
B. Elastic Pools
Explanation:
Just like Azure VM Scale Sets are used with VMs, you can use Elastic Pools with Azure
SQL Databases!
SQL Database elastic pools are a simple, cost-effective solution for managing and scaling multiple databases that have varying and unpredictable usage demands. The databases in an elastic pool are on a single Azure SQL Database server and share a set number of resources at a set price. Elastic pools in Azure SQL Database enable SaaS developers to optimize the price performance for a group of databases within a prescribed budget while delivering performance elasticity for each database.
_____________ devices can easily move data to Azure when busy networks aren’t an option.
A. Azure Data Box
B. Azure File Sync
C. Azure Storage Explorer
D. Azure Migrate
A. Azure Data Box
Explanation:
From the Official Azure Documentation:
Azure Data Box devices easily move data to Azure when busy networks aren’t an option. Move large amounts of data to Azure when you’re limited by time, network availability, or costs, using common copy tools such as Robocopy. All data is AES-encrypted, and the devices are wiped clean after upload, in accordance with NIST Special Publication 800-88 revision 1 standards.
The members of your organization have been complaining about having to enter their password too many times which is frustrating. Moreover, users also tend to forget their passwords which leads to reset overhead. Which of the following services in Azure can help with this?
A. Azure Active Directory Passwordless
B. Azure Active Directory SeamlessAuth
C. Azure ExpressRoute
D. Azure Arc
A. Azure Active Directory Passwordless
Explanation:
From the Official Azure Documentation:
Features like multifactor authentication (MFA) are a great way to secure your organization, but users often get frustrated with the additional security layer on top of having to remember their passwords. Passwordless authentication methods are more convenient because the password is removed and replaced with something you have, plus something you are or something you know.
Each organization has different needs when it comes to authentication. Microsoft global Azure and Azure Government offer the following three passwordless authentication options that integrate with Azure Active Directory (Azure AD):
Windows Hello for Business Microsoft Authenticator FIDO2 security keys
ou can also allow your employee’s phone to become a passwordless authentication method. You may already be using the Authenticator app as a convenient multi-factor authentication option in addition to a password. You can also use the Authenticator App as a passwordless option.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-passwordless
A startup has deployed a set of Virtual Machines which are critical for their day-to-day operations. They need to ensure their availability even if a single data center goes down.
One of their interns has suggested that deploying these VMs using a Scale Set would solve the problem. Do you agree?
A. No
B. Yes
A. No
Explanation:
This answer does not specify that the scale set will be configured across multiple data centers so this solution does not meet the goal.
Azure virtual machine scale sets let you create and manage a group of load balanced VMs. The number of VM instances can automatically increase or decrease in response to demand or a defined schedule. Scale sets provide high availability to your applications, and allow you to centrally manage, configure, and update many VMs.
Virtual machines in a scale set can be deployed across multiple update domains and fault domains to maximize availability and resilience to outages due to data center outages, and planned or unplanned maintenance events.
An Azure ________________ is a connection between two Azure Regions within the same geographic region for disaster recovery purposes.
A. Geography
B. Region
C. Availability Zone
D. Region Pair
D. Region Pair
Explanation:
Regional Pairs are 2 connected Azure Regions for Disaster Recovery within the same Geography.
Many organizations require both high availability provided by availability zones that are also supported with protection from large-scale phenomena and regional disasters. As discussed in the resiliency overview for regions and availability zones, Azure regions are designed to offer protection against local disasters with availability zones. But they can also provide protection from regional or large geography disasters with disaster recovery by making use of another region that uses cross-region replication.
To ensure customers are supported across the world, Azure maintains multiple geographies. These discrete demarcations define a disaster recovery and data residency boundary across one or multiple Azure regions.
Cross-region replication is one of several important pillars in the Azure business continuity and disaster recovery strategy. Cross-region replication builds on the synchronous replication of your applications and data that exists by using availability zones within your primary Azure region for high availability. Cross-region replication asynchronously replicates the same applications and data across other Azure regions for disaster recovery protection.
Example -
Reference: https://docs.microsoft.com/en-us/azure/availability-zones/cross-region-replication-azure
Which Azure service should you use to correlate events from multiple resources into a centralized repository?
A. Azure Log Analytics
B. Azure Event Hubs
C. Azure Cosmos DB
D. Azure Blueprint
B. Azure Event Hubs
Explanation:
From the official documentation:
Event Hubs is a fully managed, real-time data ingestion service that’s simple, trusted and scalable. Stream millions of events per second from any source to build dynamic data pipelines and immediately respond to business challenges. Keep processing data during emergencies using the geo-disaster recovery and geo-replication features.
Integrate seamlessly with other Azure services to unlock valuable insights. Allow existing Apache Kafka clients and applications to talk to Event Hubs without any code changes – you get a managed Kafka experience without having to manage your own clusters. Experience real-time data ingestion and microbatching on the same stream.
