Test Questions

Question 1

Which storage option supports persistent storage for ACI?

Answer 1

Azure Files

Question 2

What is Azure Event Grid?

Answer 2

Azure event grid provides a solution for building event-driven architectures that subscribe to Azure resources and route events to different endpoints. Event Grid can subscribe to a variety of Azure resources including storage resources, resource groups, and IoT hubs. Events can be filtered before being forwarded to appropriate event handles for processing.

Question 3

What is NIST 800-171

Answer 3

Is a United States regulation that provides guidelines addressing controlled unclassified information in non-federal information systems and organizations.

Question 4

What is GDPR?

Answer 4

Addresses data protection and privacy for all individuals in the EU

Question 5

What is PCI DSS?

Answer 5

Refers to common reference architecture for the proper handling of credit card data?

Question 6

What is HITTRUST?

Answer 6

Privately held company that had established a Common Security Framework

Question 7

What resource is required to use Azure Cloud Shell?

Answer 7

A storage account is required to use Azure Cloud SHell.

Question 8

Describe Azure SQL Database?

Answer 8

Cost effective, serverless database with an intermittent usage pattern and a low compute utilization over time. The serverless service tier of Azure SQL Database is optimized for scenarios with intermittent or unpredictable patterns. It automatically pauses the database during periods of inactivity and resumes it when activity returns.

Question 9

What are SQL Server on Azure VMs for?

Answer 9

Fast migration of SQL Server from on-premise to Azure with retention system access. This option enables lift-and-shift from an on-premises datacenter to Azure with ease.

Question 10

What resource should you use to allow inbound traffic to an Azure VM from only specific addresses.

Answer 10

NSG. A network security group allows inbound traffic to an Azure VM from only specific IP addresses. An NSG allows or denies inbound traffic to an Azure resource.

Question 11

What resource do you use to create a rule that restricts network traffic across subscriptions?

Answer 11

You should use Azure Firewall when you want to create a rule that restricts network traffic across subscriptions. It has built-in high availability. Rules are enforced and logged across subscriptions which reduces management overhead.

Question 12

What authentication types are supported by both SSPR and MFA

Answer 12

Password
SMS
VoiceCall

Question 13

What two features are supported by Azure AD free edition

Answer 13

Free edition supports group management and self-service password change for cloud users.

Azure AD Basic provides group based management and company branding

Question 14

What does an application security group do?

Answer 14

A ASG let you group VMs and define network security policies based on those groups.

Question 15

What does compliance manager do?

Answer 15

Allows you to determine whether or not your services meet industry standards.

Question 16

what is National Institute of Standards and Technology?

Answer 16

is a standards-based non-regulatory agency based in the United States

Question 17

What happens when you transfer billing ownership of a subscription from an account in your azure tenant to another azure tenant and associate the subscription with a new directory?

Answer 17

You are not required to associate the subscription with the new directory.

All user groups with RBC access to manage the subscription lose access
RBAC assignments do not carry over when you associate the subscription with a new tenant.

System-assigned managed identities are not re-enabled automatically and must be re-enabled after the transfer.

Moving a subscription that owns an Azure Kubernetes service cluster causes the cluster to lose functionality.