All practice questions
1186 questions
An administrator with the Owner role can delete an Azure Key Vault named vault-prod, which is located in a resource group that has an active CanNotDelete resource lock, without first removing the lock.
A healthcare provider needs to replicate backup data from its local data center to Azure Storage. Because the data contains sensitive records, the transmission must be encrypted. To minimize operational costs, the provider wants to leverage their existing office internet connection instead of leasing dedicated telecommunication lines. Which Azure service should be deployed to handle this connection?
An organization configures an Azure Policy assignment at a management group scope. The policy specifies that only virtual machines of the 'Standard_D2s_v3' size can be deployed, using the Deny effect. The subscription governed by this management group already contains several running virtual machines of the 'Standard_F4s' size. A developer who holds the Owner role for the subscription attempts to deploy a new virtual machine of the 'Standard_F4s' size.
Which of the following describes the status of the existing virtual machines and the outcome of the developer's deployment attempt?
An administrator manages a fleet of virtual machines and Azure SQL databases in the East US region. The administrator needs to configure notifications and view status reports for two specific scenarios:
1. When Microsoft schedules a host infrastructure upgrade that will temporarily impact the virtual machines in East US.
2. When a specific virtual machine instance becomes unavailable due to an unexpected hardware failure on the physical host.
Which of the following Azure features should the administrator use to address these requirements? (Select TWO.)
Select all that apply
An enterprise organization is preparing a business case for migrating its legacy on-premises datacenter to Microsoft Azure. The Chief Financial Officer (CFO) requires a comparative financial analysis over a three-year period. The analysis must evaluate on-premises capital expenses (CapEx)—such as physical server chassis, storage arrays, network switches, and virtualization licensing—against the projected operational expenses (OpEx) of running equivalent workloads on Azure infrastructure, including the cost offsets from reduced power, cooling, real estate, and administrative staff labor. Which tool should the organization use to generate this comparative cost analysis?
An organization has an Azure subscription containing a resource group named 'SecOps-RG'. An administrator needs to configure access permissions for an auditor named User1 to meet the following requirements:
- User1 must be able to view the configuration of all resources across the entire subscription.
- User1 must be able to delegate permissions to other users, but this capability must be restricted only to resources within the 'SecOps-RG' resource group.
- The principle of least privilege must be followed.
Which of the following configuration steps should the administrator perform? (Select TWO.)
Select all that apply
A biotechnology company operates a mix of physical Windows servers in their local laboratories and Linux virtual machines on Amazon Web Services (AWS). The company wants to enforce security compliance guidelines using Azure Policy and view the compliance status of all these servers in a single pane of glass within the Azure portal, without migrating the workloads. Which Azure service should the company use to meet these requirements?
An administrator wants to run Azure PowerShell cmdlets locally on a personal laptop running macOS to manage Azure virtual machines. Which action should the administrator take to run these cmdlets?
An administrator needs to improve the resilience of their cloud application deployments in Azure using Azure Advisor recommendations.
Which of the following actions are categorized under the Reliability recommendation category in Azure Advisor? Select two.
Select all that apply
An organization wants to obtain personalized best-practice recommendations for reducing cost and improving the security of their deployed Azure resources. Which Azure service should the organization use?
You are migrating several workloads to Microsoft Azure. You need to identify the correct Azure database service for each workload requirement.
Match each workload requirement to the most appropriate Azure database service.
Click a left item, then click its matching right item
Items
Matches
An administrator needs to delegate access across multiple Azure resources. Evaluate the following statement: Assigning an Azure Role-Based Access Control (RBAC) role to a user at the management group scope automatically propagates that role assignment down to all subscriptions, resource groups, and resources nested within that management group hierarchy.
An administrator frequently switches between the Bash and PowerShell environments in Azure Cloud Shell to execute scripts. Is the following statement true or false?
Switching the shell environment from Bash to PowerShell within Azure Cloud Shell automatically deletes all files stored in the user's home directory because the two environments mount separate Azure Files shares.
A financial company needs to design a serverless solution that triggers when a message is received in an Azure Service Bus queue, performs complex data transformations using proprietary Python libraries, and then sends an email notification. The company should use Azure Logic Apps to run the data transformation steps because Logic Apps natively supports custom Python code execution and external library imports.
Is the following statement true or false?
Azure Database for PostgreSQL is a non-relational (NoSQL) database service.
An Azure administrator configures a ReadOnly resource lock on a resource group named rg-finance. The resource group contains an Azure Virtual Network named vnet-prod. Another administrator then applies a CanNotDelete lock directly to vnet-prod. Which of the following statements describe the resulting effects of these locks? Select two.
Select all that apply
By default, Azure Virtual Network peering is transitive, meaning that if VNet A is peered with VNet B, and VNet B is peered with VNet C, resources in VNet A can communicate with resources in VNet C without requiring a direct peering connection or a transit gateway.
Is this statement true or false?
A healthcare provider hosts sensitive patient applications across virtual machines running in Google Cloud Platform (GCP) and legacy database servers running on-premises. The provider needs to centralize compliance auditing and performance monitoring across all environments without migrating these workloads to the Azure public cloud.
Which of the following statements correctly describe how Azure Arc can be used to meet these requirements? (Select TWO)
Select all that apply
An organization needs to deploy a complex microservices application composed of dozens of containers that require service discovery, load balancing, and coordinated scaling.
Is the statement that Azure Container Instances (ACI) is the primary Azure service designed to manage these orchestration requirements true or false?
An organization wants to connect its on-premises headquarters to an Azure Virtual Network. They require an encrypted connection that runs over the public internet to minimize setup costs. Which Azure service should the organization use to meet these requirements?