Examkin

All practice questions

1186 questions

All types1,186Multiple choice620Multiple select228True / False291Matching47
Question 241Question →

An organization is planning its cloud strategy and needs to utilize various cost estimation and management tools. Match each business requirement to the correct Microsoft Azure tool. To answer, drag the appropriate tool from the right column to the matching requirement on the left.

Click a left item, then click its matching right item

Items

Estimate the monthly subscription fees for a new deployment of Azure App Service, Azure Cosmos DB, and Azure Virtual Network before provisioning them.
Estimate the potential savings over a three-year period by comparing the costs of maintaining physical datacenters with migrating the workloads to Azure.
Identify active but underutilized virtual machines in an existing Azure subscription to obtain recommendations for sizing down or stopping them.
Analyze historical cloud spend, track resource tags to allocate costs to departments, and configure budget threshold alerts.

Matches

Show answer & explanation

Answer

The correct pairings align the Azure Pricing Calculator with pre-deployment service estimation, the Total Cost of Ownership (TCO) Calculator with on-premises versus cloud cost comparison, Azure Advisor with optimization recommendations on active resources, and Azure Cost Management with tracking historical spend and setting budgets.
The configuration correctly maps pre-deployment estimation of new services to the Pricing Calculator, multi-year on-premises versus cloud migration modeling to the TCO Calculator, active resource utilization recommendations to Azure Advisor, and post-deployment cost tracking and budget alerts to Azure Cost Management.

Step-by-Step Solution

1
Evaluate the first requirement: estimating new deployment costs.
This requires the Azure Pricing Calculator since it deals with predicting costs for cloud resources before provisioning.
The Azure Pricing Calculator configures and estimates costs for planned service configurations.
2
Evaluate the second requirement: comparing datacenter costs to Azure migration.
This requires the Total Cost of Ownership (TCO) Calculator as it accepts on-premises infrastructure data to compare against Azure costs.
The TCO Calculator is designed for financial comparison and building a business case for cloud migration.
3
Evaluate the third requirement: finding and resizing underutilized existing VMs.
This requires Azure Advisor because it analyzes running resources to provide optimization recommendations.
Azure Advisor evaluates runtime configuration and usage metrics against best practices to suggest cost-saving opportunities.
4
Evaluate the fourth requirement: historical spend analysis and budgets.
This requires Azure Cost Management, which reports on actual accumulated billing data and supports budgeting tools.
Azure Cost Management is the suite for post-deployment billing analysis, tag allocation, and alerting.

Key Concept

Understanding the differences between Azure pre-deployment cost estimators (Pricing Calculator, TCO Calculator) and post-deployment management tools (Azure Advisor, Azure Cost Management).
Estimated Time:2m 0s
Question 242Question →

An administrator needs to configure access for a team of developers who must manage virtual machines. The virtual machines are located in an Azure resource group named Dev-RG, which is inside an Azure subscription named Sub1.

Which two of the following statements about managing access and governance in this scenario are correct?

Select all that apply

Show answer & explanation

Answer: Assigning the Contributor role to the developers at the Sub1 subscription level will allow them to manage the virtual machines in Dev-RG.; Assigning the Reader role to the developers at the Dev-RG level will allow them to view the virtual machine configurations without making changes.

Answer

Assigning the Contributor role to the developers at the Sub1 subscription level will allow them to manage the virtual machines in Dev-RG, and assigning the Reader role to the developers at the Dev-RG level will allow them to view the virtual machine configurations without making changes.
Azure Role-Based Access Control (RBAC) uses inheritance, meaning permissions granted at a subscription level flow down to containing resource groups and resources. Assigning the Contributor role at the subscription level allows the developers to manage resources in the resource group. Additionally, the Reader role is designed specifically to allow viewing of resources without permission to modify them.

Step-by-Step Solution

1
Analyze how permissions inherit in the Azure resource hierarchy.
Permissions assigned at a parent scope, such as the Sub1 subscription, propagate down to child scopes, such as the Dev-RG resource group and its virtual machines.
This confirms that assigning the Contributor role at the subscription level successfully delegates management permissions for the virtual machines.
2
Determine the role required for viewing configurations without making changes.
The Reader role provides read-only access to resources.
This confirms that assigning the Reader role at the Dev-RG level allows the developers to view the virtual machines without altering them.
3
Differentiate access management from policy enforcement and resource locking.
Azure Policy regulates resource compliance (e.g., allowed VM sizes), and resource locks prevent unauthorized deletion/modification. Neither is used to grant user permissions.
This helps rule out using Azure Policy or resource locks to delegate permissions to the developers.

Key Concept

Azure RBAC scope, built-in roles, and inheritance
Question 243Question →

A multinational financial firm is migrating a mission-critical banking application to Azure. The architecture includes Azure App Service, Azure Virtual Machines (VMs) running custom transactional software, and Azure SQL Database. The compliance and security teams require:

1. A mechanism to detect and alert on service-wide outages or scheduled maintenance in Azure regions where their resources reside.
2. A centralized repository to run complex queries, correlate events, and analyze IIS web server access logs and application-level trace logs from the VMs.
3. Near real-time alerting on virtual machine CPU spikes that triggers automated scaling actions.

Which of the following configurations correctly align these Azure services with the firm's requirements? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Azure Service Health must be utilized to track platform-level events such as regional service outages, planned maintenance, and service advisories, whereas Azure Monitor is used to collect and analyze telemetry data from the firm's specific deployed resources.; Azure Monitor Logs (via a Log Analytics workspace) must be configured to ingest and query custom VM application logs using Kusto Query Language (KQL), while Azure Monitor Metrics should be used to trigger auto-scaling based on CPU utilization.

Answer

The configuration using Azure Service Health for tracking platform-level issues, Azure Monitor Logs for querying guest OS logs, and Azure Monitor Metrics for CPU metric alerting.
To track regional platform outages and maintenance, the firm must use Azure Service Health, which communicates issues originating from the Azure platform. To analyze guest OS and application-level log events using KQL, the firm must use Azure Monitor Logs (via Log Analytics). To configure near real-time autoscale alerts based on VM CPU utilization, Azure Monitor Metrics must be used since it stores numerical performance data.

Step-by-Step Solution

1
Analyze the requirement for detecting service-wide outages or scheduled maintenance in Azure regions.
Identify that Azure Service Health is the dedicated service for tracking platform-wide issues, regional outages, and planned maintenance affecting Azure infrastructure.
Azure Service Health provides global and regional notifications, whereas Azure Monitor tracks the health and performance of specific resources deployed by the customer.
2
Analyze the requirement for querying, correlating, and analyzing custom application trace logs and IIS web server logs from VMs.
Identify that Azure Monitor Logs (stored in a Log Analytics workspace) aggregates text-based log data and enables querying using Kusto Query Language (KQL).
Azure Monitor Metrics is designed for time-series numerical data, not multi-line text logs, and Azure Service Health does not collect resource-specific log files.
3
Analyze the requirement for near real-time CPU utilization alerts that trigger auto-scaling actions.
Identify that Azure Monitor Metrics captures numerical telemetry (like CPU usage) at high frequency and is integrated with Azure Autoscale to trigger resource scaling.
Azure Monitor Metrics is optimized for quick, lightweight numerical evaluation, making it ideal for immediate scaling triggers, unlike log search queries which have higher latency.
4
Evaluate the choices to select the two options that correctly align these mapping principles.
Select the statement distinguishing Azure Service Health from resource telemetry, and the statement mapping logs to Azure Monitor Logs (KQL) and scaling to Azure Monitor Metrics.
This ensures the correct tools are paired with their corresponding architectural requirements while filtering out options that confuse Azure Monitor with Azure Service Health.

Key Concept

Azure Monitor vs. Azure Service Health, and Azure Monitor Logs vs. Metrics
Estimated Time:3m 0s
Question 244Question →

An organization is evaluating container hosting options in Microsoft Azure and wants to understand the characteristics of Azure Container Instances (ACI) compared to other Azure container services. Which two statements correctly describe the features or capabilities of Azure Container Instances (ACI)?

Select all that apply

Show answer & explanation

Answer: It provides a serverless platform to run containers without provisioning or managing underlying virtual machines.; It offers hypervisor-level isolation for container groups to secure workloads.

Answer

The correct statements are that Azure Container Instances provides a serverless platform to run containers without provisioning or managing underlying virtual machines, and it offers hypervisor-level isolation for container groups to secure workloads.
Azure Container Instances is a serverless container hosting service. It enables users to deploy containers immediately without the overhead of provisioning, managing, or scaling virtual machines. In addition, it provides hypervisor-level isolation for each container group by default, ensuring that containers within a group are isolated from other customer workloads sharing the same infrastructure.

Step-by-Step Solution

1
Identify the core management model of Azure Container Instances.
Azure Container Instances is serverless, meaning Azure manages the underlying virtual machines and host OS patching.
This helps rule out options claiming host patching is a customer responsibility.
2
Identify the orchestration and scaling boundaries of Azure Container Instances compared to Azure Kubernetes Service.
Azure Container Instances does not provide full orchestration features like automated service discovery or complex coordinated upgrades; those are features of Azure Kubernetes Service.
This rules out options claiming built-in orchestration capabilities for Azure Container Instances.
3
Confirm the isolation security features of Azure Container Instances.
Each container group in Azure Container Instances is isolated at the hypervisor level.
This confirms that hypervisor-level isolation is a correct characteristic.

Key Concept

Azure Container Instances (ACI) features and serverless container hosting
Estimated Time:1m 0s
Question 245Question →

An organization is designing a globally distributed web application that must store semi-structured JSON documents and support writing to multiple Azure regions simultaneously with low latency. Is the following statement true or false? The organization should use Azure SQL Database to meet these requirements because it natively supports multi-region writes and NoSQL document storage.

Show answer & explanation

Answer: False

Answer

False
The correct answer is False because Azure SQL Database is a relational database engine and cannot host multi-region write workloads natively. Azure Cosmos DB is the correct service because it is a globally distributed NoSQL database that natively supports multi-region writes and semi-structured JSON data.

Step-by-Step Solution

1
Analyze the application requirements.
The application requires storage for semi-structured JSON documents, global distribution, and the ability to write to multiple Azure regions simultaneously.
Establishing these parameters helps identify the key features needed from the Azure database service.
2
Evaluate the capabilities of Azure SQL Database.
Azure SQL Database is a relational database engine. Although it has some support for JSON, it is not a native NoSQL document store. In addition, its active geo-replication feature only supports a single write region with read-only secondary replicas.
This step determines whether the proposed service meets the defined requirements.
3
Identify the correct Azure service that fits all requirements.
Azure Cosmos DB is a globally distributed NoSQL database service that natively supports document schemas and multi-region writes.
This confirms that the statement is false since Azure Cosmos DB, not Azure SQL Database, is the appropriate choice.

Key Concept

Relational vs. non-relational database capabilities and multi-region write support in Azure
Question 246Question →

A financial institution is designing a network topology in Azure to securely isolate different environments while maintaining some private connectivity. They need to understand how Azure Virtual Networks (VNets), ExpressRoute, and VPN Gateways operate under various configurations.

Which of the following statements regarding Azure hybrid networking are correct? (Select two)

Select all that apply

Show answer & explanation

Answer: Azure ExpressRoute establishes a private connection to Microsoft services that does not go over the public internet.; An Azure VPN Gateway connection transmits encrypted traffic across the public internet between an on-premises network and an Azure Virtual Network.

Answer

The correct statements are that Azure ExpressRoute establishes a private connection that does not go over the public internet, and an Azure VPN Gateway connection transmits encrypted traffic across the public internet.
The correct options are the statements describing ExpressRoute as a private connection that does not traverse the public internet, and VPN Gateway as a connection that sends encrypted traffic over the public internet. ExpressRoute provides dedicated, private connection paths to Microsoft cloud services via a connectivity provider, enhancing reliability, speed, and privacy. A VPN Gateway, on the other hand, utilizes the public internet to establish a secure, encrypted tunnel between the on-premises site and the Azure Virtual Network.

Step-by-Step Solution

1
Analyze the operational pathway of Azure ExpressRoute connectivity.
ExpressRoute provides a private connection to Microsoft services that does not traverse the public internet.
To determine if ExpressRoute uses the public internet or a private connection.
2
Analyze the operational pathway of Azure VPN Gateway connectivity.
VPN Gateway sends encrypted traffic over the public internet using an IPsec tunnel.
To determine the medium and security method utilized by a VPN Gateway.
3
Analyze the cloud deployment model resulting from connecting on-premises networks to Azure.
The integration of on-premises resources with Azure resources is defined as a hybrid cloud model.
To verify if the connectivity changes the cloud model classification.

Key Concept

Azure hybrid networking options, specifically the differences in traffic paths between ExpressRoute (private, bypasses public internet) and VPN Gateway (encrypted over the public internet), and how they enable hybrid cloud architectures.
Question 247Question →

An enterprise cloud engineering team is reviewing recommendations in Azure Advisor to optimize their cloud deployment. Match each Azure Advisor recommendation to its correct recommendation category.

Click a left item, then click its matching right item

Items

Right-size or shutdown underutilized virtual machines to reduce hourly spend.
Configure virtual machine backup to protect application data from corruption or accidental deletion.
Enable Accelerated Networking on virtual machines to reduce latency and CPU utilization.
Create Azure Service Health alerts to receive automated notifications during service outages.

Matches

Show answer & explanation

Answer

Right-size or shutdown underutilized virtual machines matches Cost; Configure virtual machine backup matches Reliability; Enable Accelerated Networking matches Performance; Create Azure Service Health alerts matches Operational Excellence.
Each recommendation aligns with the core purpose of one of the Azure Advisor pillars: Cost focuses on saving money; Reliability focuses on uptime and data protection; Performance focuses on speed and efficiency; Operational Excellence focuses on operational best practices and processes.

Step-by-Step Solution

1
Analyze the recommendation regarding right-sizing and shutting down virtual machines to reduce spend.
Identify that cost reduction and optimizing spending map directly to the Cost category of Azure Advisor.
Azure Advisor groups recommendations that prevent waste and save money in the Cost category.
2
Analyze the recommendation regarding virtual machine backup configuration for protection against corruption.
Identify that backups ensure high availability and disaster recovery, mapping to the Reliability category.
Azure Advisor's Reliability category focuses on business continuity, resilience, and avoiding downtime.
3
Analyze the recommendation regarding Accelerated Networking to reduce latency.
Identify that improving speed, network throughput, and resource utilization maps to the Performance category.
Azure Advisor's Performance category is dedicated to enhancing the responsiveness and speed of applications.
4
Analyze the recommendation regarding Azure Service Health alerts for automated incident notifications.
Identify that operational tooling, alerts, and management workflows map to the Operational Excellence category.
The Operational Excellence category focuses on process efficiency, management best practices, and operations visibility.

Key Concept

Azure Advisor recommendation categories direct cloud optimization across five distinct pillars: Cost, Security, Reliability, Performance, and Operational Excellence.
Question 248Question →

An enterprise structures its resources using an Azure Management Group named 'Enterprise-MG'. This management group contains a single Azure subscription named 'Core-Sub'. Within 'Core-Sub', there is a resource group named 'Data-RG' containing an Azure SQL Database. You assign a user named Chloe the Reader role at the 'Enterprise-MG' level and the Contributor role at the 'Data-RG' level. Which of the following statements are true regarding Chloe's access permissions? (Select TWO).

Select all that apply

Show answer & explanation

Answer: Chloe can delete the Azure SQL Database in the 'Data-RG' resource group.; Chloe can view all resources in the 'Core-Sub' subscription.

Answer

Chloe can delete the Azure SQL Database in the 'Data-RG' resource group, and she can view all resources in the 'Core-Sub' subscription.
The Reader role assigned at the management group level ('Enterprise-MG') is inherited by all child resources, meaning Chloe can view all resources within the child subscription ('Core-Sub'). Additionally, the Contributor role assigned directly to the resource group ('Data-RG') allows Chloe to modify and delete resources within that group, such as the Azure SQL Database.

Step-by-Step Solution

1
Analyze Chloe's direct role assignments and their respective scopes.
Chloe is assigned the Reader role at the management group ('Enterprise-MG') level and the Contributor role at the resource group ('Data-RG') level.
This establishes the entry points of her permissions in the Azure resource hierarchy.
2
Apply the principles of Azure RBAC inheritance to propagate permissions downward.
The Reader role propagates from the management group down to the child subscription ('Core-Sub') and all resource groups inside it. The Contributor role only applies within the 'Data-RG' resource group.
Permissions in Azure flow down the hierarchy (Management Group -> Subscription -> Resource Group -> Resource).
3
Evaluate the statements against Chloe's effective permissions and resource controls.
She can view resources across the subscription due to inherited Reader rights, and manage/delete resources inside 'Data-RG' due to Contributor rights. She cannot assign policies (which is Azure Policy, not RBAC) and cannot bypass a ReadOnly lock (which overrides Contributor permissions).
To identify which actions are valid based on RBAC inheritance rules and other governance features.

Key Concept

Azure RBAC inheritance and scope propagation
Question 249Question →

A company is planning its data retention strategy using Azure Blob Storage. They want to store log files that are rarely accessed. The logs must be stored in the Archive tier to minimize costs, but if an anomaly is detected, the logs must be moved back to the Cool tier automatically. Is the following statement regarding Azure Storage lifecycle management true or false: You can configure a lifecycle management policy to automatically transition blobs from the Archive tier to the Cool tier when they need to be accessed again?

Show answer & explanation

Answer: False

Answer

The statement is false because Azure Storage lifecycle management policies cannot automatically transition blobs from the Archive tier to the Cool tier.
The statement is false because Azure Storage lifecycle management is strictly unidirectional (it transitions data to cooler tiers or deletes it) and does not support automatic rehydration of blobs from the Archive tier to warmer tiers.

Step-by-Step Solution

1
Analyze the capability of Azure Storage lifecycle management policies regarding blob transition directions.
Lifecycle management policies are designed to automate transitions to cooler tiers (Hot to Cool/Cold/Archive) and delete expired data.
This determines if bidirectional automation (moving data back to a warmer tier) is supported.
2
Evaluate if rehydration from the Archive tier can be handled by these policies.
Archived blobs are offline and must be explicitly rehydrated (by copying to a new blob or changing the tier to Hot/Cool/Cold) manually or via custom code.
This identifies the limitation of lifecycle policies regarding the Archive tier.
3
Determine the truth value of the statement.
Since lifecycle policies cannot perform rehydration automatically, the statement is false.
This yields the final correct answer.

Key Concept

Azure Storage lifecycle management policies only support unidirectional transitions to cooler tiers or deletion, and cannot automate rehydration from the Archive tier.
Question 250Question →

You are planning to migrate several application workloads to Microsoft Azure. Match each Azure database service to its primary database engine or classification description.

Click a left item, then click its matching right item

Items

Azure SQL Database
Azure Cosmos DB
Azure Database for PostgreSQL

Matches

Show answer & explanation

Answer

Azure SQL Database matches with the Microsoft SQL Server engine; Azure Cosmos DB matches with the globally distributed NoSQL database service; Azure Database for PostgreSQL matches with the relational service based on the open-source community engine.
Azure SQL Database matches the Microsoft SQL Server engine description because it is Microsoft's PaaS offering for SQL Server. Azure Cosmos DB is a multi-model NoSQL service that provides global scaling. Azure Database for PostgreSQL is the PaaS offering hosting the open-source community PostgreSQL database engine.

Step-by-Step Solution

1
Determine the database model (relational vs. non-relational) for each service.
Azure SQL Database and Azure Database for PostgreSQL are relational, whereas Azure Cosmos DB is non-relational (NoSQL).
Understanding the fundamental database type helps separate relational databases from NoSQL databases.
2
Differentiate between the relational database engines.
Azure SQL Database relies on the proprietary Microsoft SQL Server engine, while Azure Database for PostgreSQL uses the community open-source PostgreSQL engine.
This differentiation enables correct matching for the relational services.

Key Concept

Classification of Azure Relational and Non-Relational Databases
Question 251Question →

An organization has an Azure subscription containing several active virtual machines deployed in the East US region. To comply with a new corporate directive, an administrator assigns an Azure Policy to the subscription that restricts resource deployments to the West US region using the 'Deny' effect.

Which of the following describes the outcome of this policy assignment on the resources and deployments?

Show answer & explanation

Answer: The existing virtual machines in East US continue to run and are marked as non-compliant, while new virtual machine deployments to East US are blocked.

Answer

The existing virtual machines in East US continue to run and are marked as non-compliant, while new virtual machine deployments to East US are blocked.
When a new Azure Policy with a Deny effect is assigned, it does not retroactively delete, stop, or modify existing resources that violate the policy. Instead, those existing resources continue to run but are marked as non-compliant in compliance reporting. However, any new attempts to deploy resources that violate the policy parameters (such as deploying to East US instead of the allowed West US region) will be blocked.

Step-by-Step Solution

1
Identify the effect of the Azure Policy assignment ('Deny').
The policy is configured to block resource deployments that do not match the specified criteria (West US).
Understanding the policy effect helps determine how new deployment requests will be evaluated.
2
Evaluate the impact of the policy on existing resources.
Existing resources in East US continue to run but are marked as non-compliant.
Azure Policy does not retroactively modify, delete, or stop resources that were created prior to the policy assignment.
3
Evaluate the impact of the policy on new resource deployments.
Any new deployments to East US will be blocked by the policy's Deny effect.
The Deny effect prevents the resource provider from creating or updating resources that do not match the policy definition.

Key Concept

Azure Policy
Estimated Time:2m 0s
Question 252Question →

An enterprise is establishing a multi-platform development and operations pipeline. A lead engineer outlines the following scripting requirements for their deployment runners:

* Runner X: Runs on macOS and must execute Azure PowerShell scripts to audit resource groups.
* Runner Y: Runs on Red Hat Enterprise Linux (RHEL) and must execute Azure CLI commands to deploy web apps.

The team needs to determine if these runners can execute the scripts locally without using web-based tools.

What is the feasibility of the proposed runner configurations?

Show answer & explanation

Answer: Both Runner X and Runner Y are feasible, because both Azure CLI and Azure PowerShell are cross-platform and support local installation on macOS and Linux.

Answer

Both Runner X and Runner Y are feasible, because both Azure CLI and Azure PowerShell are cross-platform and support local installation on macOS and Linux.
Both proposed configurations are feasible. Azure CLI is a cross-platform command-line tool that can be installed locally on Windows, macOS, and Linux. Similarly, Azure PowerShell is cross-platform because it runs on PowerShell Core, enabling local installation and execution on Windows, macOS, and Linux. This allows Runner X (PowerShell on macOS) and Runner Y (CLI on Linux) to run as intended.

Step-by-Step Solution

1
Analyze the requirements for Runner X.
Runner X requires running Azure PowerShell scripts locally on macOS.
Identify the operating system (macOS) and the required tool (Azure PowerShell).
2
Determine the compatibility of Azure PowerShell on macOS.
Azure PowerShell runs on PowerShell Core, which is supported on macOS. Therefore, Runner X is feasible.
Verify if the tool can run locally on the specified operating system.
3
Analyze the requirements for Runner Y.
Runner Y requires running Azure CLI commands locally on Red Hat Enterprise Linux (RHEL).
Identify the operating system (Linux) and the required tool (Azure CLI).
4
Determine the compatibility of Azure CLI on Linux.
Azure CLI is cross-platform and has native packages for Linux distributions including RHEL. Therefore, Runner Y is feasible.
Verify if the tool can run locally on the specified operating system.

Key Concept

Cross-platform support of Azure management tools (Azure CLI and Azure PowerShell)
Question 253Question →

A systems administrator wants to manage Azure resources using command-line tools from a local computer running macOS.

Which tools can the administrator install and run locally on this computer?

Show answer & explanation

Answer: Both Azure CLI and Azure PowerShell

Answer

Both Azure CLI and Azure PowerShell
Both Azure CLI and Azure PowerShell are cross-platform command-line tools. They can be installed locally on Windows, macOS, and Linux operating systems, enabling administrators to manage Azure resources from their preferred environment.

Step-by-Step Solution

1
Identify the operating system of the local computer.
The local computer runs macOS.
The scenario specifies that the administrator is using macOS.
2
Determine the platform compatibility of Azure CLI and Azure PowerShell.
Both tools are cross-platform and support macOS.
Microsoft designs both Azure CLI and Azure PowerShell to be cross-platform, allowing administrators to manage Azure resources from Windows, macOS, and Linux.

Key Concept

Azure command-line tools compatibility
Estimated Time:45s
Question 254Question →

A global financial services firm operates a legacy banking application on physical Windows servers in their private data center, along with several containerized microservices hosted on Google Cloud Platform (GCP). The IT department wants to apply consistent corporate compliance rules and security monitoring to these non-Azure workloads using Azure Policy and Microsoft Defender, without migrating any resources to Azure. Which of the following Azure services should they use to achieve this goal?

Show answer & explanation

Answer: Azure Arc

Answer

Azure Arc
Azure Arc is designed to extend Azure management and services to any infrastructure, including virtual machines, physical servers, and Kubernetes clusters running on-premises or in other clouds (such as GCP). By registering these resources with Azure Arc, they appear as resource objects inside Azure, allowing the IT department to apply Azure Policy and Microsoft Defender just as they would with native Azure resources.

Step-by-Step Solution

1
Identify the organization's requirements
The firm needs to govern and monitor existing workloads (physical Windows servers on-premises and containerized microservices on Google Cloud Platform) using Azure Policy and Microsoft Defender without migrating them.
Understanding the operational constraints helps determine which Azure services can bridge the management plane across diverse environments.
2
Evaluate the capabilities of the proposed services
Azure Arc projects non-Azure resources into Azure Resource Manager (ARM). Once registered, these resources can be organized, monitored, and governed using Azure-native tools such as Azure Policy and Microsoft Defender.
This matches the requirement to extend Azure management to multi-cloud and on-premises environments without migrating the workloads.

Key Concept

Azure Arc extends the Azure Resource Manager control plane, enabling the management, governance, and security of resources running on-premises, at the edge, or in multi-cloud environments.
Question 255Question →

An administrator is reviewing recommendations in Azure Advisor to optimize their cloud deployment. Match each recommended action to its corresponding Azure Advisor recommendation category.

Click a left item, then click its matching right item

Items

Right-size or shut down underutilized virtual machines to reduce overall spend.
Enable Azure Backup to protect virtual machine data from accidental deletion or corruption.
Enable Azure Disk Encryption to protect virtual machine data at rest.
Upgrade virtual machine disks to Premium SSDs to improve disk input/output operations.

Matches

Show answer & explanation

Answer

Right-size or shut down underutilized virtual machines matches Cost; Enable Azure Backup matches Reliability; Enable Azure Disk Encryption matches Security; Upgrade virtual machine disks to Premium SSDs matches Performance.
The correct pairings match each action to the Advisor category that addresses its objective: cost savings match Cost; backup and resiliency match Reliability; data encryption matches Security; and disk access optimization matches Performance.

Step-by-Step Solution

1
Analyze the action of right-sizing or shutting down underutilized resources.
Determined that it targets reducing overall cloud spend.
The Cost category in Azure Advisor focuses on optimizing resources to reduce costs.
2
Analyze the action of enabling Azure Backup.
Determined that it prevents data loss and ensures backup availability.
The Reliability category in Azure Advisor includes recommendations for backup and disaster recovery.
3
Analyze the action of enabling Azure Disk Encryption.
Determined that it protects virtual machine disks through encryption.
The Security category in Azure Advisor provides recommendations to protect assets from threats.
4
Analyze the action of upgrading to Premium SSDs.
Determined that it improves storage I/O performance and latency.
The Performance category in Azure Advisor identifies configuration changes to optimize speed.

Key Concept

Azure Advisor Recommendation Categories
Question 256Question →

Northwind Traders runs a critical supply-chain application across multiple Azure virtual machines. The operations team wants to analyze their infrastructure configuration to find opportunities for improving application uptime and disaster recovery readiness based on Microsoft best practices. Which Azure tool provides these personalized reliability recommendations?

Show answer & explanation

Answer: Azure Advisor

Answer

Azure Advisor
Azure Advisor is the correct tool because it analyzes Azure resource configurations and telemetry to offer personalized recommendations. Reliability is one of its five key recommendation categories, helping organizations improve the availability and disaster recovery capabilities of their cloud resources.

Step-by-Step Solution

1
Identify the core requirement of the scenario
The operations team needs a tool that analyzes their infrastructure configuration and provides personalized best-practice recommendations for reliability (uptime and disaster recovery).
This helps narrow down the management tools to the one designed for proactive best-practice recommendations.
2
Evaluate the capabilities of the listed Azure tools
Azure Advisor is the only service that provides personalized recommendations across categories like Reliability, Cost, Security, Performance, and Operational Excellence.
This confirms the correct tool for the described scenario.

Key Concept

Azure Advisor recommendation categories
Question 257Question →

A company is preparing a cloud migration strategy. To justify the transition from a Capital Expenditure (CapEx) model to an Operating Expenditure (OpEx) model, they need to generate a report comparing their on-premises datacenter hosting expenses (including software licensing, power, and IT administrative labor) with the cost of running equivalent services on Azure. Is the statement that the Azure Pricing Calculator is the correct tool to perform this comparative analysis and generate the report true or false?

Show answer & explanation

Answer: False

Answer

False
The statement is false because the tool described is the Total Cost of Ownership (TCO) Calculator. The TCO Calculator allows you to input on-premises resource parameters (such as servers, storage, networking, and IT labor) to compare the cost of ownership against equivalent Azure deployments. The Azure Pricing Calculator, by contrast, is only used to estimate the consumption costs of configured Azure services for a planned deployment, and does not accept on-premises cost inputs or produce comparative reports.

Step-by-Step Solution

1
Analyze the business requirement in the scenario.
The requirement is to compare on-premises hosting expenses (hardware, software licensing, electricity, labor) with equivalent Azure services to create a cost comparison report.
Understanding the core requirement helps distinguish between different Azure cost tools.
2
Identify the capabilities of the Azure Pricing Calculator.
The Azure Pricing Calculator is designed to estimate the costs of specific Azure services for a new or planned cloud deployment. It does not accept detailed on-premises cost parameters (such as electricity or IT labor) or generate comparative reports against existing on-premises infrastructure.
This determines whether the tool named in the statement matches the required functionality.
3
Identify the capabilities of the Total Cost of Ownership (TCO) Calculator.
The TCO Calculator is specifically designed to compare the costs of running on-premises infrastructure (including physical servers, storage, networking, labor, power, and virtualization) with the costs of hosting equivalent workloads in Azure, producing a detailed comparative report.
This identifies the correct tool that satisfies the business requirement.

Key Concept

The difference between the Azure Pricing Calculator (which estimates the cost of Azure services) and the Total Cost of Ownership (TCO) Calculator (which compares on-premises datacenter costs with Azure costs).
Estimated Time:1m 30s
Question 258Question →

An organization hosts a production Azure Cosmos DB account. A ReadOnly resource lock is applied to the resource group containing the database, and a CanNotDelete resource lock is applied to the parent subscription. A cloud administrator with the Contributor role attempts to increase the database throughput and delete an unused database container. What is the outcome of these attempts?

Show answer & explanation

Answer: Both the throughput modification and the container deletion will be blocked.

Answer

Both the throughput modification and the container deletion will be blocked.
Both actions will be blocked. The Cosmos DB account inherits the ReadOnly lock applied to the resource group. Because a ReadOnly lock is more restrictive than a CanNotDelete lock, it prevents both configuration modifications (such as updating database throughput) and deletions (such as removing a database container). These restrictions apply to all users, including those with Contributor permissions.

Step-by-Step Solution

1
Evaluate lock inheritance and restrictiveness.
The Cosmos DB account inherits both the CanNotDelete lock from the subscription and the ReadOnly lock from the resource group.
Azure resources inherit locks applied at higher scopes (Subscription -> Resource Group -> Resource).
2
Determine the effective lock restriction on the resource.
The ReadOnly lock is the most restrictive lock and takes precedence over the CanNotDelete lock.
When multiple locks are inherited, the most restrictive lock applies to the resource.
3
Assess the impact of the ReadOnly lock on the requested operations.
Both the configuration change (throughput modification) and the deletion (container removal) are blocked.
A ReadOnly lock prevents all updates, modifications, and deletions. These restrictions apply to all users, regardless of their Azure RBAC roles (such as Contributor).

Key Concept

Resource locks prevent modification and deletion of Azure resources, applying to all users regardless of their RBAC roles, with child resources inheriting parent locks.
Question 259Question →

A municipal utility provider is implementing a serverless IoT solution to monitor water flow telemetry and automate emergency response operations. The solution must satisfy the following technical requirements:
1. Run custom Python code to analyze incoming sensor telemetry and identify flow rate anomalies.
2. Automate a multi-step response workflow that triggers when an anomaly is found, sending a notification via Twilio, creating an incident ticket in ServiceNow, and updating a record in Microsoft SharePoint without writing custom integration code.

Which two Azure services should the provider select to fulfill these requirements? (Select two.)

Select all that apply

Show answer & explanation

Answer: Azure Functions; Azure Logic Apps

Answer

Azure Functions and Azure Logic Apps are the correct services to fulfill these requirements.
The correct services are Azure Functions and Azure Logic Apps. Azure Functions is a serverless, code-first service that allows running custom code blocks (such as Python for data processing) on demand without maintaining virtual machines. Azure Logic Apps is a serverless, designer-first service used to design workflows that integrate systems, apps, and data through built-in connectors (such as Twilio, ServiceNow, and SharePoint) without writing integration code.

Step-by-Step Solution

1
Analyze the custom telemetry analysis requirement.
Identify that running custom Python code on an event-driven basis without infrastructure overhead points to Azure Functions, a code-first serverless compute service.
Azure Functions is optimized for short-running, custom-coded execution scenarios.
2
Analyze the workflow orchestration and multi-system integration requirement.
Identify that connecting multiple services (Twilio, ServiceNow, and SharePoint) without writing integration logic matches Azure Logic Apps, a designer-first serverless workflow integration tool.
Azure Logic Apps provides a visual designer and out-of-the-box connectors to orchestrate workflows across diverse SaaS and PaaS systems.

Key Concept

Azure Serverless Compute (Functions and Logic Apps)
Question 260Question →

A company plans to migrate a database to Azure. The company's IT compliance policy requires their administrators to maintain full control over the database configuration and have direct access to the underlying operating system to perform patching. Which Azure deployment option should they choose?

Show answer & explanation

Answer: SQL Server on Azure Virtual Machines

Answer

SQL Server on Azure Virtual Machines
SQL Server on Azure Virtual Machines represents an Infrastructure as a Service (IaaS) database deployment. Under IaaS, the customer retains administrative control over the virtual machine, which includes the responsibility to perform operating system patching and fully configure the database engine.

Step-by-Step Solution

1
Analyze the management requirements.
The company requires full control over the database configuration and direct access to perform operating system patching.
This requirement indicates an Infrastructure as a Service (IaaS) model rather than a Platform as a Service (PaaS) model.
2
Evaluate the database options against the IaaS model.
SQL Server on Azure Virtual Machines is an IaaS option, whereas Azure SQL Database, Azure SQL Managed Instance, and Azure Cosmos DB are PaaS options where Microsoft handles OS patching.
To maintain OS-level patching control, the customer must select the virtual machine hosting option.

Key Concept

Operating system and management responsibilities for Azure SQL Database options (IaaS vs PaaS)
PreviousPage 13 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin