Qs I am stuck on Flashcards
Your company has datacenters in Los Angeles and New York. The company has a Microsoft Azure subscription.
You are configuring the two datacenters as geo-clustered sites for site resiliency.
You need to recommend an Azure storage redundancy option.
You have the following data storage requirements:
✑ Data must be stored on multiple nodes.
✑ Data must be stored on nodes in separate geographic locations.
✑ Data can be read from the secondary location as well as from the primary location
Which Azure stored redundancy options should you recommend?
Read only redundant service
Which Azure support plans allow for new support requests to be opened
Developer
Standard
Premium
Professional Direct
Your company’s Azure subscription includes a Basic support plan.
They would like to request an assessment of an Azure environment’s design from Microsoft. This is, however, not supported by the existing plan.
You want to make sure that the company subscribes to a support plan that allows this functionality, while keeping expenses to a minimum.
Solution: You recommend that the company subscribes to the Professional Direct support plan.
Does the solution meet the goal?
No, expenses are not kept to a minium
Your developers have created 10 web applications that must be host on Azure.
You need to determine which Azure web tier plan to host the web apps. The web tier plan must meet the following requirements:
✑ The web apps will use custom domains.
✑ The web apps each require 10 GB of storage.
✑ The web apps must each run in dedicated compute instances.
✑ Load balancing between instances must be included.
✑ Costs must be minimized.
Which web tier plan should you use?
Standard
You are planning to migrate a company to Azure. Each of the company’s numerous divisions will have an administrator in place to manage the Azure resources used by their respective division.
You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the divisions, while keeping administrative effort to a minimum.
Solution: You plan to make use of several Azure Active Directory (Azure AD) directories.
Does the solution meet the goal?
No, management groups should be used for this
Your company is planning to migrate all their virtual machines to an Azure pay-as-you-go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center.
You are required make sure that the intended Azure solution uses the correct expenditure model.
Solution: You should recommend the use of the elastic expenditure model.
Does the solution meet the goal?
No, there is no such thing as this model
The correct model is called the operational model
Your company’s Active Directory forest includes thousands of user accounts.
You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired.
You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed.
Solution: You plan to sync all the Active Directory user accounts to Azure Active Directory (Azure AD).
Does the solution meet the goal?
Yes
Your company’s infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation.
The resources required by each business unit are identical.
You are required to sanction a strategy to create Azure resources automatically.
Solution: You recommend that management groups be included in the strategy.
Does the solution meet the goal?
No, management groups manage subscriptions, not resources
You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure.
You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible.
Solution: You include two virtual machines and one availability zone in your strategy.
Does the solution meet the goal?
No
For an SLA of 99.99%. at least 2 availability zones would be needed
You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure.
You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible.
Solution: You include one virtual machine and two availability zones in your strategy.
Does the solution meet the goal?
No, for an SLA of 99.99%, a second virtual machine would be needed
Your company’s developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed.
You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service.
Solution: You recommend the use of Microsoft Managed Desktop.
Does the solution meet the goal?
No because managed desktop can only deal with one OS, cannot manage virtual machines
Your company’s developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed.
You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service.
Solution: You recommend the use of Azure Reserved Virtual Machines (VM) Instances.
Does the solution meet the goal?
No, because reserved VMs means you commit to the number, and in this instance, VMs are removed the same week they are deployed
Your company’s developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed.
You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service.
Solution: You recommend the use of Azure DevTest Labs.
Does the solution meet the goal?
Yes
Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are located in a single Azure virtual network named VNet1.
The company has users that work remotely. The remote workers require access to the VMs on VNet1.
You need to provide access for the remote workers.
What should you do?
Configure a point to site vpn
You have been informed by your superiors of the company’s intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during this process.
You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution.
Solution: You recommend the use of Azure Information Protection.
Does the solution meet the goal?
No,
A key vault should be used for this
Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet.
You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords.
Solution: You configure the use of Azure AD Identity Protection.
Does the solution meet the goal?
Yes
You are planning a strategy to deploy numerous web servers and database servers to Azure.
This strategy should allow for connection types between the web servers and database servers to be controlled.
Solution: You include network security groups (NSGs) in your strategy.
Does the solution meet the goal?
Yes
network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources. For each rule, you can specify source and destination, port, and protocol.
Your company plans to migrate all its data and resources to Azure.
The company’s migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure.
You need to deploy an Azure environment that meets the company migration plan.
Solution: You create an Azure App Service and Azure Storage accounts.
Does this meet the goal?
No
Azure Storage is IaaS
Your company hosts an accounting application named App1 that is used by all the customers of the company.
App1 has low usage during the first three weeks of each month and very high usage during the last week of each month.
Which benefit of Azure Cloud Services supports cost management for this type of usage pattern?
Elasticity
automatically scaling up or down
Azure site recovery provides _____ for virtual machines
Disaster Recovery
Can PaaS provide additional memory to apps by changing pricing tiers?
No
Your company plans to deploy several custom applications to Azure. The applications will provide invoicing services to the customers of the company. Each application will have several prerequisite applications and services installed.
You need to recommend a cloud deployment solution for all the applications.
What should you recommend?
IaaS as high levels of customisation needed
True or false: A private cloud must be disconnected from the internet
False
You have an accounting application named App1 that uses a legacy database.
You plan to move App1 to the cloud.
Which service model should you use?
IaaS as you need to install the legacy software
What is a feature of an Azure virtual network?
Isolation and segmentation
______ enables Azure resources to be deployed close to users
geo distribution
You need to identify the type of failure for which an Azure Availability Zone can be used to protect access to Azure services.
What should you identify?
Azure data centre failures
You plan to extend your company’s network to Azure.
The network contains a VPN appliance that uses an IP address of 131.107.200.1.
You need to create an Azure resource that defines the VPN appliance in Azure.
Which Azure resource should you create?
Local network gateways
Your company plans to migrate to Azure.
The company has several departments. All the Azure resources used by each department will be managed by a department administrator.
What are two possible techniques to segment Azure for the departments? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point
Multiple subscriptions
Multiple resource groups
Can a single microsoft account be used to manage multiple azure subscriptions
Yes
Can 2 azure subscriptions be merged into a single subscription
no
Can virtual machines be moved between subscriptions
yes
You have an Azure environment that contains multiple Azure virtual machines.
You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines.
You need to recommend which Azure resources must be created for the planned solution.
Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Virtual network
Virtual network gateway
Can availability zones be implented in all azure regions
no
Your company plans to move several servers to Azure.
The company’s compliance policy states that a server named FinServer must be on a separate network segment.
You are evaluating which Azure services can be used to meet the compliance policy requirements.
Which Azure solution should you recommend?
A virtual network for finserver and another virtual network for all other servesr
You are running a virtual machine in a public cloud using IaaS. Which model correctly reflects how that resource is managed?
Shared responsiblity model
You have an Azure environment that contains 10 virtual networks and 100 virtual machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
What should you create?
Azure firewall
Which Azure service should you use to correlate events from multiple resources into a centralized repository?
Azure log analytics
An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0 installed.
Does this meet the goal?
No, resources cannot be created in a power shell
You plan to implement an Azure database solution.
You need to implement a database solution that meets the following requirements:
Can add data concurrently from multiple regions
Can store JSON documents
Which database service should you deploy?
Azure cosmos DB
You need to view a list of planned maintenance events that can affect the availability of an Azure subscription. Which blade should you use from the Azure portal
Help and support
Which of the following ensures data-residency and compliance needs are met for customers who need to keep their data and applications close?
geographies
Which of the following should you use when you are concerned only about the code running your service and not the underlying platform or infrastructure?
Azure functions
Azure Resource Manager templates use which format?
JSON
Which of the following services is a distributed network of servers that can efficiently deliver web content to users
Azure content delivery network
Which of the following cloud services provides development collaboration tools including high-performance pipelines, free private Git repositories, and configurable Kanban boards?
Azure devOps service
A company is planning on deploying an Azure Web App to 2 regions.
One of the key requirements is to ensure that the web app is always running if an Azure region fails. You need to ensure deployment costs are minimized.
Which of the following service would you include in the deployment of the solution?
Azure traffic manager
You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized by using Microsoft Power BI.
You need to recommend a storage solution for the data.
Which two solutions should you recommend?
Azure data lake, azure sql data warehouse
You have an Azure environment that contains 10 web apps. To which URL should you connect to manage all the Azure resources?
https://portal.azure.com
You plan to map a network drive from several computers that run Windows 10 to Azure Storage.
You need to create a storage solution in Azure for the planned mapped drive.
What should you create?
A files service in a storage account
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a DDoS protection plan.
Does this meet the goal?
No
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure firewall.
Does this meet the goal
Yes
Which of the following could grant or deny access based on the originating IP address?
firewall
Which of the following services would you use to filter internet traffic in your Azure virtual network?
Network security group
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
What are two possible solutions?
Modify a network security group
Modify an azure firewall
Which is likely the best way for companies to identify which billing department each Azure resource belongs to?
aPPLY A TAG TO EACH RESOURCE THAT INCLUDES THE ASSOICATED BILLLING DEPARTMENT
Where can a legal team access information around how the Microsoft cloud helps them secure sensitive data and comply with applicable laws and regulations?
Trust center
Where can the IT department find reference blueprints that it can apply directly to its Azure subscriptions?
Azure compliance documentation