ureAz Flashcards

1
Q

Are disks involved in the cloud

A

Yes, we use virtual disks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is SUBNET?

A

a bifurcation of a network, such as VNET

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is NSG?

A

Network Security Group. like a firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Azure AD?

A

we use it for Identity and Access management. You create the users and you give them access to Azure Resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Azure AD?

A

we use it for Identity and Access management. You create the users and you give them access to Azure Resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

You need to create an application in Azure AD representing the Kineteco Web App so you can assign directory permissions to the app. To create the application identity, which command will you run?

A

bash az ad app create -display-name $appName \ …

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

You need to deliver a mobile push notification feature for the Kineteco Retail app, hosted in Azure App Service. The solution should minimize cost, complexity, and development effort. Which option should you choose?

A

Notification Hub

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Your application hosted in Azure App Service needs to retrieve secrets from Azure Key Vault. Which choice is NOT a way to authenticate to Key Vault?

A

shared access key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

You added a persistent volume claim to your apps YAML manifest. When you attempt to deploy to an existing AKS cluster there is no persistent volume available. What should you do?

A

Add a data disk definition for the AKS cluster to your apps YAML manifest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Your corporate web application is hosted in Azure regional data centres around the world. You need to route user requests to the closest service endpoint based on response latency. Which routing method should you use?

A

Traffic manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

You are developing a release strategy for several related software components. You need to reference variable groups and secure files across multiple build and release pipelines. What is the most efficient way to store and reference these assets from the pipeline?

A

Add the assets in Key Vault

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

You need to grant full access for an app to a temporary Azure storage account. Configuring access should require minimum effort. Which option should you use?

A

Azure AD user account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

The Kineteco web app runs in an Azure Kubernetes Service. You need to monitor feature use and user navigation paths to identify where improvements are needed. What should you do?

A

Install the Log Analytics agent and configure Azure Monitor for Containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which choice is not a valid trigger for an Azure functions?

A

third party services (GitHub)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which messaging service enables an event-driven programming model?

A

Event Grid

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

You need to populate a newly created SQL database from your release pipeline in Azure DevOps. The solution should minimize deployment time and efforts. Which approach should you use?

A

Populate from a BACPAC file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

You need to host a community website for your neighborhood association. The site contains static content, including HTML, CSS, and a few pages with client-side JavaScript. The site contains no sensitive information, and CORS support is unnecessary. The association has limited funds to pay for hosting, so the solution should be as inexpensive as possible. Which option should you use?

A

Azure Storage static website

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Your organization delivers a number of RESTful web services to customers around the world. You need to deploy cloud infrastructure to deliver these services to paying customers, including authentication, request throttling and routing of requests to the closest service endpoint. Which solution should you choose?

A

Application Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

You have a .NET app running on a VM Scale set. You need to monitor application performance without modifying the code. The solution should minimize the cost. What should you do?

A

Install the Application Insights Agent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

When setting your CI/CD pipeline an approval from your product owner is required before a final release to production. What solution do you use to achieve this?

A

a pre-deployment condition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

You want to configure the AKS instance running the Kineteco Inventory App to use Azure Active Directory (AD) for user authentication. To integrate with AKS with Azure AD which steps should you perform first?

A

Create a service principal in Azure AD. Then add user to the AKS security group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which access protocol does Azure Files not support?

A

HTTPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

You are writing an app for a sales team. You need to implement security in SQL Server to ensure that sales representatives see customer financial information only for customers whom they manage. Your app must make this transparent to the user. Which S#### QL data security option should you choose?

A

Dynamic Data Masking

24
Q

You configure access to secrets in Azure Key Vault with _.

A

RBAC roles

25
Q

Your Kineteco Web App experiences occasional spikes in usage that cause resource shortages that generate an alert. When this occurs, you want to configure scale out of the App Service plan resources. The solution should minimize cost and administrative effort. What should you do?

A

Configure an autoscape rule based on a metric

26
Q

You have CI/CD pipeline for a modern web application in Azure DevOps. The CI/CD process includes both a build and a release pipeline. You need to ensure that user testing (UAT) is successful before triggering the release pipeline. The process should be automated as possible. What should you add to your build pipeline?

A

Approval gate

27
Q

The Kineteco Web App is running on AKS. To meet a spike in demand, the horizontal pod autoscaler recently provisioned additional pods, which are no longer needed. What should you do to scale down unnecessary pods?

A

Do nothing. HPA will initiate scale down automatically.

28
Q

Your ARM template, created in VS Code, is failing validation in the build pipeline in Azure DevOps. You need to correct syntax issues at authoring time with a minimum of cost and effort. What should you do?

A

Install Azure Resource Manager Tools extension in VS Code

29
Q

You need to migrate the backlog of a development project for a newly acquired subsidiary. The development team currently uses a Kanban board to track stories, tasks, and bugs. Which process framework should you select in Azure Boards?

A

Agile

30
Q

You have set of SQL databases used with various PaaS applications with predictable usage patterns. You are planning to move these databases to Azure SQL and need to choose the right deployment option. Your priorities are minimizing costs, and having the ability to assign CPU and resources to individual databases. Which option should you choose?

A

Azure SQL elastic pool

31
Q

Your photo app hosted in Azure records user operations in a log for historical reference. Records must not be overwritten. Which storage type should you select to host log data?

A

append blob

32
Q

The Kineteco Retail App uses keys for signing and encryption of some data transfers. How should you write your app to invoke keys?

A

Azure Portal

33
Q

You need to create a tech support chatbot for Microsoft Teams that interacts with users based on natural language processing (NLP). The bot should be capable of processing differing sentence structures. Which Microsoft Bot Framework component will deliver this functionality?

A

LUIS

34
Q

You are implementing an application to manage automated warehouse operations for a global retailer. You need to design an enrollment process for IoT devices for production use. Solution requirements are as follows: Register IoT devices in bulk; encrypt all communication between devices and the Azure IoT cloud service; and implement Microsoft recommendations for device security. Which option should you choose?

A

X.509 certificate

35
Q

You are deploying three Azure VMS with an Azure Resource Manager (ARM) template. Which ARM function implements the iteration loop to provision the right number of VMs?

{
“type”: “Microsoft.Compute/virtualMachines”,
“name”: “[concat(‘myvm’, \_\_\_\_\_\_)]”,
“apiVersion”: “2016-04-30-preview”,
“location”: “[parameters(‘location’)]”,
“copy”: “ “,
“name”: “virtualMachineLoop”,
“count”: “[parameters(‘numberOfInstances’)]”
},

A

copyIndex()

36
Q

The Kineteco web app runs in an Azure Kubernetes Service. You need to monitor feature use and user navigation paths to identify where improvements are needed. What should you do?

A

Configure Application Insights cohorts

37
Q

Your web app hosted on Azure VMS generates a large number of random (non-sequential) writes. Which storage type should you select for your application?

A

page blob

38
Q

You are configuring a release pipeline in Azure DevOps. You need to reference several application variables across multiple pipelines at deployment time. How should you store application variables?

A

Configure a variable group

39
Q

You have configured the Kineteco Web App to run on Azure Kubernetes Service (AKS). Application resources need to scale to meet spikes in traffic. What should you do? The solution should minimize manual effort and cost.

A

Do nothing. Pods running on AKS scale up automatically.

40
Q

You are configuring a release pipeline in Azure DevOps. You need to read secrets from Azure Key Vault during pipeline execution. How should you retrieve application variables?

A

With a community-developed Key Vault task
With an ARM template
With an Azure CLI script in a Bash task

41
Q

You need to update the data within an existing database in Azure SQL with your changes. You want to test this process from your development workstation before incorporating the update into your CI/CD process. Which command will you run to update the schema on the target database?

A

SqlPackage.exe /TargetFile:” myapp.bacpac “ /Action:Export /SourceServerName:”kinetecosql.database.windows.net” /SourceDatabaseName:”kinetecoweb” /SourceUser:”admin” /SourcePassword:”MyPassword”

42
Q

You have a web app hosted in Azure App Service that reads from and writes data to an Azure SQL Database back-end. You need to send email alert when your web app returns any failure HTTP status code (anything except HTTP 200) for a user request. Which solution should you use?

A

service map in Azure Monitor

43
Q

Your new release pipeline in Azure DevOps includes a Bash task that runs an Azure CLI script. The Bash task running script fails. The agent setting of the agent job in the release pipeline is pictured below. The solution must minimize cost. What should you change in agent pool settings?

A

Change to a hosted agent pool running Ubuntu 16.04 LTS or later

44
Q

You are selecting a cloud messaging solution for your retail mobile app. Requirements for the solution are: Process messages in the order they are received: preserve messages in case of a processing delay; end guarantee message delivery. Which solution should you use?

A

Service Bus

45
Q

You need to provision a port mapping on the underlying node that allows the application to be accessed directly with the IP address and on the cluster node. Which service type should you provision?

A

NodePort

46
Q

What is the difference between a user-assigned managed identity and a system-assigned managed identity?

A

The lifecycle of a user-managed identity is managed separately from the resource

47
Q

You need to configure user access to Azure DevOps agent pools to meet the following requirements: Use an agent pool when authoring build or release pipelines for the project; view the agent pool and agents of the organization; and use the principle of least privilege. Which role memberships are required for the Azure DevOps organization and the project?

A

Organization: Reader; Project: Service Account

48
Q

You have created an Azure CLI script for a release pipeline in Azure DevOps. You need to reference the working directory for the running job. Which variable should you reference?

A

Agent.WorkFolder

49
Q

You are selecting Azure technologies for a new a pp that will process print jobs in a facility with thousands of printers. A pool of worker processes will send jobs to printer and report results when jobs are complete. Requirements for the solution are: Worker processes will retrieve and process messages as capacity permits; if a worker process or printer fails, a worker process should be able to retrieve message and resume processing; and the solution should maintain a central (server-side) log of messages processed. Which solution should you use?

A

Queue Storage

50
Q

In Azure Key Vault, you can manage access to your application secrets by setting permissions at any level except __.

A

at the Azure Subscription level

51
Q

Your company hosts a web application that uses Azure SQL Database to store data. You need to implement measures that allow only members of the managers group to see sensitive information. Which two actions should you perform?

A

Implement dynamic data masking and exclude the managers group.

Dynamic data masking helps prevent unauthorized access to sensitive data by enabling customers to designate how much of the sensitive data to reveal with minimal impact on the application layer.

52
Q

The Kineteco Inventory App uses an Azure SQL Database instance to store application and store inventory data. Store employees report occasional periods where queries in the web interface never return data. You suspect a database issue and need to identify the performance issue as soon as possible. The resource health dashboard reports “No health related issues found.” What should you do?

A

Enable Intelligent Insights

53
Q

Your web application needs to access files on an Azure Files share. Which option will deliver the highest throughput?

A

SMB

54
Q

You have source code for a project in a repository on GitHub. You need to migrate source code to a repository in Azure Repos. The solution should minimize effort. Which solution should you recommend?

A

From the Import a Git repository menu, select Import

55
Q

You need to facilitate user acceptance testing (UAT) on your web application hosted in App Service. Testers must approve changes before they are deployed to production. You should implement support for these requirements with a minimum of cost and complexity. What should you do?

A

Configure an additional deployment slot in the existing App Service instance

56
Q

Your microservices application includes a logging component that performs a large number of sequentinal writes. Which type of Azure Storage should you use?

A

append blob

57
Q

Your microservices application includes a logging component that performs a large number of sequentinal writes. Which type of Azure Storage should you use?

A
???
CORS
custom domains
webjobs
deployment slots