test 7 Flashcards
A company has setup an Azure subscription and a tenant. They want to ensure that only Virtual Machines of a particular SKU size can be launched in their Azure account. They decide to implement Role Based access policies
Does this fulfil the requirement?
Yes
No
No
Role based access policies can be used to restrict access to resources, but they can put any sort of governance on what type of resources to create.
A company has setup an Azure subscription and a tenant. They want to ensure that only Virtual Machines of a particular SKU size can be launched in their Azure account. They decide to implement Azure locks
Does this fulfil the requirement?
Yes
No
No
Azure locks are used to prevent users from accidentally deleting or modifying critical resources. They can’t be used for the said purpose as stated in the question.
A company has setup an Azure subscription and a tenant. They want to ensure that only Virtual Machines of a particular SKU size can be launched in their Azure account. They decide to implement Azure policies
Does this fulfil the requirement?
Yes
No
Yes
Yes, this can be done with Azure policies
A company plans to use Azure Network watcher to perform the following tasks
“Find out if a network security rule is preventing a network packet from reaching a virtual machine hosted in an Azure virtual network”
“Find out if there is outbound connectivity between an Azure virtual machine and an external host”
Which of the following network watcher feature would you use for the following requirement?
” Find out if a network security rule is preventing a network packet from reaching a virtual machine hosted in an Azure virtual network”
IP Flow Verify
Next Hop
Packet Capture
Traffic Analysis
IP Flow Verify
Your company currently has a Site-to-Site connection with an Azure Virtual Private network. The VPN device that is allocated on the on-premise side is going to undergo a change in its public IP address. You have to ensure the Site-to-Site VPN connection continues to work after the change.
Which of the following steps would you need to carry out after the change in the public IP address on the on-premise VPN device ensuring minimum connection downtime?Choose 3 answers from the options given below
Remove the VPN connection
Stop the VPN connection
Modify the local gateway IP address
Modify the VPN gateway address
Recreate the VPN connection
Start the VPN connection
Remove the VPN connection
Modify the local gateway IP address
Recreate the VPN connection
A company has an application deployed across a set of virtual machines. Users connect to the application either using point-to-site VPN or site-to-site VPN connections. You need to ensure that connections to the application are spread across all of the virtual machines.
Which of the following could you set up for this requirement? Choose 2 answers from the options given below
A Public Load Balancer
An Internal Load Balancer
A Traffic Manager Profile
An Azure Content Delivery Network
An Azure Application Gateway
An Internal Load Balancer
An Azure Application Gateway
Since we need to distribute traffic across the virtual machines, we can use either the Load Balancer or Application Gateway service.
A company has setup an Azure subscription. They have setup a storage account and are currently using the BLOB service. They want to assign permissions to 3 user groups.
GroupA – This group should have the ability to manage the storage account
GroupB – This group should be able to manage containers within a storage account
GroupC – This group should be given full access to Azure Storage blob containers and data, including assigning POSIX access control
You need to assign the relevant Role Based Access Control ensuring the privilege of least access. Which of the following would you assign to GroupB?
Owner
Contributor
Storage Account Contributor
Storage Blob Data Contributor
Storage Blob Data Owner
Storage Blob Data Contributor
A company has setup an Azure subscription. They have setup a storage account and are currently using the BLOB service. They want to assign permissions to 3 user groups.
GroupA – This group should have the ability to manage the storage account
GroupB – This group should be able to manage containers within a storage account
GroupC – This group should be given full access to Azure Storage blob containers and data, including assigning POSIX access control
You need to assign the relevant Role Based Access Control ensuring the privilege of least access. Which of the following would you assign to GroupC?
Owner
Contributor
Storage Account Contributor
Storage Blob Data Contributor
Storage Blob Data Owner
Storage Blob Data Owner
A company is planning on using the Azure Import/Export service to move data out of their Azure Storage account. Which of the following service could be used when defining the Azure Export job?
BLOB storage
File storage
Queue storage
Table storage
BLOB storage
You have an Azure virtual machine based on the Windows Server 2016 image. You implement Azure backup for the virtual machine. You want to restore the virtual machine by using the Replace existing option.
Which of the following needs to be done first before you go ahead and replace the virtual machine using the Azure Backup option?
Create a custom image
Stop the virtual machine
Allocate a new disk
Enable encryption on the disk
Stop the virtual machine
The virtual machine has to be in the Stopped or Deallocated state in order to replace the existing disks on the virtual machine.
You have an Azure subscription named CertGlobalstaging. Under the subscription, you go ahead and create a resource group named CertGlobals-rg.
You then go ahead and create an Azure policy based on the “Not allowed resources types” definition. Here you define the parameters as Microsoft.Network.virtualNetworks as the not allowed resource type. You assign this policy to the Tenant Root Group.
Would you be able to create a virtual machine in the CertGlobals-rg resource group?
Yes
No
No
A company current has a set of Azure virtual machines. They want to ensure that their IT administrative team is alerted if any of the virtual machines are shutdown. They decide to create alerts based on Activity Logs in Azure Monitor.
Would this fulfil the requirement?
Yes
No
Yes
A company current has a set of Azure virtual machines. They want to ensure that their IT administrative team is alerted if any of the virtual machines are shutdown. They decide to create alerts in the Azure Advisor service.
Would this fulfil the requirement?
Yes
No
No
A company current has a set of Azure virtual machines. They want to ensure that their IT administrative team is alerted if any of the virtual machines are shutdown. They decide to create alerts in the Service Health service
Would this fulfil the requirement?
Yes
No
No
A company has created a storage account in their Azure subscription. The name of the storage account is CertGlobalstore. They have also created a file share named demo. They need to access the files in the file share via a UNC path.
You need to fill in the following blocks to ensure the right UNC path is provided
Which of the following needs to go into Slot1?
blob
blob.core.windows.net
portal.azure.com
file
file.core.windows.net
CertGlobalstore
demo
CertGlobalstore
