Examkin

All practice questions

1186 questions

All types1,186Multiple choice620Multiple select228True / False291Matching47
Question 261Question →

A university needs to establish a hybrid network connection between its local campus server room and Azure. The university requires a connection that provides dedicated bandwidth up to 100 Gbps100\text{ Gbps}, low latency, and bypasses the public internet entirely. Which Azure service should the university implement to meet these requirements?

Show answer & explanation

Answer: Azure ExpressRoute

Answer

Azure ExpressRoute
Azure ExpressRoute is the correct service because it provides a private, dedicated physical connection from an on-premises network to Azure, bypassing the public internet completely. This meets the requirements for low latency and high bandwidth up to 100 Gbps100\text{ Gbps}.

Step-by-Step Solution

1
Analyze the connectivity requirements: hybrid connection (on-premises campus to Azure), high bandwidth (up to 100 Gbps100\text{ Gbps}), low latency, and bypassing the public internet entirely.
Identify that the connection must be a private, dedicated physical circuit rather than a connection over the public internet.
This rules out any internet-based hybrid connections such as Site-to-Site VPN.
2
Evaluate the available Azure networking services against these criteria.
Determine that ExpressRoute provides dedicated private connections bypassing the public internet, whereas VPN Gateway uses the public internet, VNet Peering connects internal Azure networks, and Bastion manages administrative VM access.
This identifies the service that satisfies all the specified requirements.

Key Concept

Azure ExpressRoute provides dedicated, private hybrid connectivity that bypasses the public internet.
Estimated Time:1m 0s
Question 262Question →

A software development team is building a custom employee tracking system. They need a database that supports traditional relational schemas, structured query language (SQL), and ACID transactions. Additionally, the team requires that Microsoft automatically manages all operating system patching and database engine updates so they can focus purely on application development. Which Azure service meets these requirements?

Show answer & explanation

Answer: Azure SQL Database

Answer

Azure SQL Database
Azure SQL Database is a fully managed relational database engine (PaaS) that handles upgrading, patching, backups, and monitoring without user involvement, making it the correct fit for the required relational schema and automatic patching.

Step-by-Step Solution

1
Analyze the database schema and query requirements.
The solution requires traditional relational schemas, SQL, and ACID transactions. This points to a relational database service.
Eliminating non-relational database services such as NoSQL alternatives.
2
Analyze the management and patching requirements.
The customer wants Microsoft to automatically manage the operating system patching and database software updates.
This points to a Platform as a Service (PaaS) offering and eliminates Infrastructure as a Service (IaaS) options like Virtual Machines where the customer is responsible for OS patching.
3
Select the service that is a fully managed PaaS relational database.
Azure SQL Database is a fully managed PaaS relational database that matches all specified criteria.
Ensures the correct balance of relational database features and cloud management responsibilities.

Key Concept

Azure relational database services and PaaS shared responsibility
Question 263Question →

An enterprise manages a hybrid cloud infrastructure, including a staging environment on Azure with over 100 virtual machines. The IT administration team needs to address three operational requirements:

1. Identify virtual machines that have low CPU utilization over the past 14 days to reduce unnecessary costs.
2. Prevent developers from deploying new virtual machines unless they specify an 'Environment' tag.
3. Automatically detect and alert on virtual machine operating system-level memory usage spikes in real time.

Which Azure management tools should the team utilize to satisfy each of these three requirements?

Show answer & explanation

Answer: Azure Advisor for identifying underutilized VMs; Azure Policy for enforcing resource tags; Azure Monitor for alerting on OS-level memory spikes

Answer

Azure Advisor should be used to identify underutilized virtual machines, Azure Policy to enforce resource tags, and Azure Monitor to alert on operating system-level memory spikes.
The correct option correctly maps each requirement to its appropriate tool: Azure Advisor's Cost pillar recommends right-sizing or shutting down underutilized VMs; Azure Policy uses rules to block non-compliant deployments such as those missing tags; and Azure Monitor collects and alerts on guest OS performance metrics.

Step-by-Step Solution

1
Analyze the first requirement: identifying underutilized VMs over 14 days to reduce cost.
Identify that Azure Advisor analyzes resource usage telemetry and provides cost-optimization recommendations, such as shutting down or right-sizing underutilized VMs.
Azure Advisor evaluates configuration and telemetry data to suggest best practices across Cost, Security, Reliability, Performance, and Operational Excellence.
2
Analyze the second requirement: preventing deployments of VMs that lack an 'Environment' tag.
Identify that Azure Policy can evaluate resource properties during deployment and deny the creation of resources that do not comply with specific rules (such as requiring a tag).
Azure Policy is designed to enforce organizational standards and assess compliance at scale, whereas RBAC only manages identity-based permissions.
3
Analyze the third requirement: alerting on guest OS-level memory spikes in real time.
Identify that Azure Monitor collects performance telemetry from the guest operating system and supports alert rules on these metrics.
Azure Monitor is the centralized solution for collecting, analyzing, and acting on telemetry from cloud and on-premises environments, unlike Service Health which monitors global Azure outages.

Key Concept

Azure Advisor vs. Azure Policy vs. Azure Monitor
Estimated Time:2m 0s
Question 264Question →

An administrator is troubleshooting an automated script designed to analyze security logs stored in an Azure Blob Storage account. The logs are stored in a container that has its access tier set to Archive to minimize storage costs. The script, which runs on an Azure Virtual Machine, fails with an error when attempting to read the log files directly. What is the cause of this script failure?

Show answer & explanation

Answer: The log files are in the Archive access tier, which requires the data to be rehydrated to the Hot or Cool tier before it can be read.

Answer

The log files are in the Archive access tier, which requires the data to be rehydrated to the Hot or Cool tier before it can be read.
The correct option is correct because the Archive access tier is an offline storage tier designed for data that is rarely accessed. Data in the Archive tier cannot be read or modified directly. To read the data, the blobs must first be rehydrated to an online tier (Hot or Cool) by either changing the tier of the blob or copying it to a new blob in an online tier.

Step-by-Step Solution

1
Identify the storage tier where the logs are located.
The logs are stored in the Archive access tier.
The scenario states the container's access tier is set to Archive.
2
Determine the access characteristics of the Archive tier.
The Archive tier is offline and does not support direct reads or writes.
Azure Blob Storage Archive tier is optimized for rarely accessed data and requires rehydration to Hot or Cool before the data can be accessed.
3
Analyze why the script failed to read the logs directly.
The script attempted a direct read operation on archived blobs, which is blocked by the platform.
Direct reading is not permitted on blobs while they remain in the Archive tier.

Key Concept

Azure Blob Storage access tiers (Hot, Cool, Cold, Archive) and their access patterns, specifically the requirement to rehydrate archived blobs before they can be read.
Question 265Question →

An independent developer needs to run a single containerized application for a temporary two-hour testing phase. To minimize cost and setup time, the developer wants to launch the container immediately without configuring virtual machines or setting up a Kubernetes cluster. Which Azure service is the most appropriate option for this deployment?

Show answer & explanation

Answer: Azure Container Instances

Answer

Azure Container Instances
Azure Container Instances is the correct choice because it is a serverless container hosting service. It allows you to run containers on demand without managing the underlying virtual machines or provisioning a container orchestrator, aligning perfectly with the developer's need for a quick, low-overhead, two-hour test.

Step-by-Step Solution

1
Analyze the requirements: a single containerized application needs to be run for a short, temporary period (two hours) without provisioning virtual machines or managing a cluster.
Identified the need for a serverless, zero-overhead container hosting service.
This allows the developer to deploy the container quickly and pay only for the exact compute resources used during the test.
2
Evaluate Azure Container Instances against the requirements.
Azure Container Instances satisfies all requirements by running containers directly without VM management or orchestration setup.
Azure Container Instances is specifically designed for simple, isolated container workloads that do not require full orchestration.
3
Evaluate the other options to confirm they do not meet the constraints as efficiently.
Azure Virtual Machines requires OS setup, Azure Kubernetes Service requires cluster management, and Microsoft 365 is a SaaS product.
These alternatives introduce unnecessary complexity, cost, or administrative overhead.

Key Concept

Hosting containers in Azure using Azure Container Instances (ACI)
Question 266Question →

An agricultural technology company operates a centralized management system in Azure, but also maintains local Kubernetes clusters and Windows Server virtual machines at several remote greenhouse locations. The IT department wants to simplify operations by using Azure Arc to manage these external resources.

Which two operations can the company perform by using Azure Arc? (Choose two.)

Select all that apply

Show answer & explanation

Answer: Organize and govern the remote Windows Server virtual machines by applying Azure Policy.; Monitor the performance and container health of the local Kubernetes clusters using Azure Monitor container insights.

Answer

Organize and govern the remote Windows Server virtual machines by applying Azure Policy, and monitor the performance and container health of the local Kubernetes clusters using Azure Monitor container insights.
The correct options are the statements indicating the company can govern the remote Windows Server virtual machines using Azure Policy and monitor the local Kubernetes clusters using Azure Monitor container insights. Azure Arc is designed to extend Azure Resource Manager governance and monitoring to physical or virtual servers and Kubernetes clusters situated outside of Azure, allowing centralized administration from the Azure Portal.

Step-by-Step Solution

1
Analyze the role of Azure Arc in hybrid and multi-cloud environments.
Azure Arc acts as a bridge that extends the Azure Resource Manager (ARM) control plane to resources outside Azure, such as on-premises servers and Kubernetes clusters.
This defines the scope of capabilities that Azure Arc offers for non-Azure resources.
2
Evaluate the listed operations against Azure Arc capabilities.
Enforcing policies via Azure Policy and monitoring containers via Azure Monitor are standard ARM services supported by Azure Arc. Migrating workloads or restricting management strictly to resources inside Azure are not features of Azure Arc.
This identifies which of the options represent supported features of Azure Arc.

Key Concept

Azure Arc extends Azure management and governance capabilities (such as Azure Policy and Azure Monitor) to resources located outside of Azure, including on-premises servers, edge devices, and multi-cloud environments.
Estimated Time:1m 30s
Question 267Question →

An IT engineer uses a personal computer running Linux to perform daily administration. The engineer needs to execute Azure PowerShell cmdlets locally to manage virtual machines.

What should the engineer do to run these command-line tools locally?

Show answer & explanation

Answer: Install Azure PowerShell directly on the Linux computer.

Answer

Install Azure PowerShell directly on the Linux computer.
Azure PowerShell is built on top of PowerShell Core, which is cross-platform. This allows administrators to install and run Azure PowerShell cmdlets natively on Windows, macOS, and Linux computers.

Step-by-Step Solution

1
Identify the target tool and operating system requirements.
The target tool is Azure PowerShell cmdlets, and the local operating system is Linux.
To determine whether the tool can run natively or requires an alternative environment.
2
Evaluate the cross-platform compatibility of Azure PowerShell.
Azure PowerShell is built on PowerShell Core, which is cross-platform and runs natively on Linux.
To verify if local installation on Linux is supported.
3
Select the option that correctly states the local installation capability.
Installing Azure PowerShell directly on the Linux computer is the correct action.
This avoids unnecessary workarounds like virtual machines or switching to other tools.

Key Concept

Azure PowerShell is a cross-platform command-line tool that can be installed locally on Windows, macOS, and Linux.
Estimated Time:45s
Question 268Question →

A cloud engineering team manages resources within an Azure resource group named CoreServices-RG. This resource group contains a virtual network named VNet-Core and a storage account named Storage-Core. The team applies a CanNotDelete resource lock to CoreServices-RG, and a ReadOnly resource lock directly to Storage-Core. Which two statements accurately describe how these locks affect the resources? (Select two.)

Select all that apply

Show answer & explanation

Answer: Users can modify the configuration of VNet-Core, but they cannot delete the virtual network.; Users cannot regenerate the access keys of Storage-Core.

Answer

Users can modify the configuration of the virtual network but cannot delete it, and users cannot regenerate the access keys of the storage account.
The resource group has a CanNotDelete lock, which is inherited by all resources within it, including the virtual network. A CanNotDelete lock allows authorized users to read and modify a resource, but prevents them from deleting it. Therefore, users can modify the configuration of the virtual network but cannot delete it. Additionally, a ReadOnly lock is applied directly to the storage account. A ReadOnly lock prevents all write and delete operations, which includes configuration changes and control plane actions like regenerating access keys.

Step-by-Step Solution

1
Determine the lock status and inheritance for the virtual network.
The virtual network inherits a CanNotDelete lock from the parent resource group.
Locks applied at the resource group level automatically inherit down to all resource group children.
2
Evaluate the permissions on the virtual network.
Authorized users can modify configuration settings but cannot delete the virtual network.
A CanNotDelete lock allows read and write/update operations but restricts delete actions.
3
Determine the lock status and inheritance for the storage account.
The storage account is subject to both the inherited CanNotDelete lock and a direct ReadOnly lock.
Locks are cumulative, meaning the most restrictive combination of all inherited and direct locks applies.
4
Evaluate the permissions on the storage account.
Users can view settings but cannot delete the resource or perform modify/write actions like key regeneration.
A ReadOnly lock restricts both deletes and writes (including control-plane POST operations such as key rotation).

Key Concept

Azure Resource Locks (CanNotDelete and ReadOnly) prevent accidental deletion or modification of critical Azure resources, applying cumulatively via resource group inheritance.
Question 269Question →

Azure Role-Based Access Control (RBAC) is used to restrict the geographic regions where resources can be deployed within a subscription.

Show answer & explanation

Answer: False

Answer

False
The statement is false because restricting resource locations or compliance rules is enforced by Azure Policy, whereas Azure RBAC only manages who has access to Azure resources, what they can do with those resources, and what areas they have access to.

Step-by-Step Solution

1
Analyze the capability described in the statement: restricting deployment to specific geographic regions.
Identify that this is a resource property compliance and governance constraint, rather than a user permission setting.
Understanding the difference between resource governance compliance (rules on resources) and access management (permissions on users).
2
Determine which Azure service governs resource properties and compliance.
Azure Policy is the service that enforces resource properties, including restricting allowed deployment regions.
Knowing that Azure Policy evaluates resources to ensure they align with organizational standards.
3
Evaluate the role of Azure Role-Based Access Control (RBAC).
Azure RBAC manages access by granting authorization to security principals (users, groups, applications) to perform operations (like read, write, delete) on resources.
Confirming that Azure RBAC does not check resource configurations like location during deployment.

Key Concept

Azure RBAC vs. Azure Policy
Question 270Question →

A logistics company runs container tracking databases on physical Linux servers in its local warehouses and on virtual machines in Amazon Web Services (AWS). The company wants to use the Azure portal to apply Azure Policy compliance guidelines and security baselines to these external servers without migrating any workloads to Azure virtual machines. Which service should the company use to project these external resources into Azure Resource Manager?

Show answer & explanation

Answer: Azure Arc

Answer

Azure Arc
Azure Arc allows organizations to project their non-Azure resources (such as on-premises physical Linux servers and AWS virtual machines) into Azure Resource Manager (ARM). Once registered with Azure Arc, these resources can be organized, monitored, and governed using native Azure tools like Azure Policy and resource groups, fulfilling the scenario's requirements without requiring any workload migration.

Step-by-Step Solution

1
Identify the core business requirement.
The company needs to govern, monitor, and apply compliance policies to physical on-premises servers and AWS virtual machines from the Azure portal.
Understanding the need for a single control plane across hybrid and multi-cloud environments is the first step in selecting the correct service.
2
Evaluate Azure services that extend Azure Resource Manager (ARM) outside Azure.
Azure Arc acts as a bridge, projecting non-Azure resources (such as servers and Kubernetes clusters) into ARM as native Azure resources.
This projection allows existing Azure management tools like Azure Policy and Azure Monitor to be applied directly to external resources.

Key Concept

Azure Arc extends Azure governance and management capabilities to on-premises, multi-cloud, and edge environments.
Estimated Time:1m 0s
Question 271Question →

A junior administrator needs to manage and restart virtual machines within a specific resource group. However, the administrator must not be allowed to grant access permissions to other users. Which Azure Role-Based Access Control (RBAC) role should you assign to meet this requirement?

Show answer & explanation

Answer: Contributor

Answer

The Contributor role should be assigned because it allows managing and restarting virtual machines without granting access to other users.
The Contributor role is correct because it grants permissions to create and manage all types of Azure resources, including restarting virtual machines, but it does not allow the assignment of roles in Azure RBAC, satisfying the constraint of not being able to grant access to others.

Step-by-Step Solution

1
Identify the administrative tasks required: managing and restarting virtual machines.
This requires a role that can write/modify resources, which rules out the Reader role.
The Reader role only allows viewing configurations.
2
Identify the security constraint: the user must not be able to delegate permissions or assign roles.
This rules out the Owner role, which allows full access management.
The Owner role allows granting access to other users, violating the requirement.
3
Determine the appropriate built-in role and rule out non-RBAC options.
The Contributor role fits the requirements, while Azure Policy is ruled out because it manages resource compliance rather than user permissions.
Azure RBAC manages user access, and Contributor allows resource management without access delegation.

Key Concept

Azure Role-Based Access Control (RBAC) built-in roles and scope
Question 272Question →

To support a new analytics project, a junior database administrator must be given the ability to deploy and delete Azure SQL databases within an Azure resource group named Analytics-RG. However, to ensure security compliance, the junior administrator must be prevented from delegating access rights or assigning roles to other team members.

Which action should you perform to meet these requirements using the principle of least privilege?

Show answer & explanation

Answer: Assign the Contributor role to the junior administrator for the Analytics-RG resource group.

Answer

Assign the Contributor role to the junior administrator for the Analytics-RG resource group.
The Contributor role permits full management of Azure resources (including deploying and deleting SQL databases) within the assigned scope, but it does not allow the assignment of roles in Azure RBAC. Assigning this role at the Analytics-RG resource group level fulfills all requirements while adhering to the principle of least privilege.

Step-by-Step Solution

1
Analyze the access requirements for the junior database administrator.
The administrator needs to perform resource management actions (deploy and delete SQL databases) but must not perform access control management actions (assigning roles).
This establishes the boundaries of the permissions needed.
2
Evaluate the capabilities of built-in Azure RBAC roles.
The Reader role only allows viewing resources. The User Access Administrator role only allows managing access. The Owner role allows both resource management and access management. The Contributor role allows resource management but explicitly excludes access management.
This allows selecting the role that matches the required permissions.
3
Determine the minimum scope and role that fits the requirements.
Assigning the Contributor role at the Analytics-RG resource group scope meets the operational needs without granting access management capabilities, which adheres to the principle of least privilege.
Applying the role at the resource group level ensures the permissions are limited to the target resources.

Key Concept

Azure Role-Based Access Control (RBAC)
Question 273Question →

An organization is designing a serverless data processing system that must perform two tasks:

1. Execute a custom Java program that runs a data cleanup process when a new file is uploaded to Azure Blob Storage.
2. Orchestrate a multi-step workflow that coordinates approvals, sends notifications using a SendGrid connector, and updates a Salesforce database.

To minimize operational costs, the resources must only consume billing charges when actively executing code or workflows.

Which combination of Azure services and billing plans should the organization choose to meet these requirements?

Show answer & explanation

Answer: Azure Functions on a Consumption plan to run the custom Java code, and Azure Logic Apps on a Consumption plan to orchestrate the multi-step workflow.

Answer

Azure Functions on a Consumption plan to run the custom Java code, and Azure Logic Apps on a Consumption plan to orchestrate the multi-step workflow.
The correct service mapping matches Azure Functions on a Consumption plan to run the custom Java code, and Azure Logic Apps on a Consumption plan to orchestrate the multi-step workflow. Azure Functions provides a code-first, event-driven serverless platform perfect for running custom Java binaries upon Blob Storage triggers. Azure Logic Apps provides a designer-first integration platform with pre-built connectors for SendGrid and Salesforce, which makes it ideal for SaaS orchestration. Selecting the Consumption plan for both services ensures that the organization only pays for active execution time, satisfying the requirement to minimize idle resource costs.

Step-by-Step Solution

1
Analyze Task 1 requirements (custom Java code execution on Blob Storage upload).
Identify Azure Functions as the correct code-first serverless compute service.
Azure Functions enables running custom code (like Java) in response to events (Blob Storage triggers) without managing servers.
2
Analyze Task 2 requirements (orchestration of workflow involving approvals and SaaS connectors like SendGrid and Salesforce).
Identify Azure Logic Apps as the correct designer-first serverless integration service.
Azure Logic Apps provides a visual designer and pre-built connectors to simplify connecting external SaaS applications and defining workflows.
3
Analyze cost and billing requirements (only consume billing charges when running).
Select the Consumption plan for both services.
The Consumption plan is the serverless pricing model that scales automatically and charges only for execution time and resource consumption, avoiding idle hosting fees.

Key Concept

Azure Serverless Compute (Functions and Logic Apps)
Question 274Question →

An organization hosts a business-critical retail application on Azure utilizing Azure Virtual Machines and Azure Cosmos DB. The operations team is reviewing the Azure Advisor dashboard to improve the system's overall resilience against potential outages and data loss. Which of the following recommendations would Azure Advisor provide under its Reliability category? Select TWO.

Select all that apply

Show answer & explanation

Answer: Configure Azure Backup for virtual machines to protect application data from accidental deletion or corruption.; Enable multi-region replication for the Azure Cosmos DB account to ensure database availability during regional outages.

Answer

The correct recommendations are configuring Azure Backup for virtual machines and enabling multi-region replication for Azure Cosmos DB.
Azure Advisor's Reliability category focuses on improving the continuity of your business-critical applications. Configuring virtual machine backup protects data against loss, and enabling multi-region database replication ensures database availability during regional outages. Both are official Advisor Reliability recommendations.

Step-by-Step Solution

1
Identify the target Azure Advisor category
The target category is Reliability (formerly High Availability), which focuses on application continuity, disaster recovery, and data protection.
The scenario asks specifically for recommendations under the Advisor Reliability category.
2
Evaluate the Virtual Machine recommendation option
Configuring Azure Backup is a core Advisor Reliability recommendation to protect VM data.
Backup ensures data protection and recovery capability, aligning directly with the Reliability pillar.
3
Evaluate the Azure Cosmos DB recommendation option
Enabling multi-region replication ensures database availability during regional outages, which is an Advisor Reliability recommendation.
Multi-region replication provides high availability and disaster recovery, which are key components of reliability.
4
Differentiate between Advisor recommendations and other Azure governance/monitoring tools
Resource locks, Azure Policy, and Azure Service Health are distinct Azure tools rather than Advisor recommendations.
This rules out the incorrect options by establishing tool boundaries.

Key Concept

Azure Advisor Reliability recommendations and boundary differentiation from other Azure management tools.
Question 275Question →

Is the following statement true or false?

Redeploying an Azure Resource Manager (ARM) template to a resource group deletes and recreates all existing resources defined in the template, even if their configuration has not changed.

Show answer & explanation

Answer: False

Answer

The statement is false. Redeploying an Azure Resource Manager (ARM) template does not delete and recreate existing resources that are unchanged.
The statement is false because Azure Resource Manager (ARM) template deployments are idempotent and run in incremental mode by default. When a template is redeployed, ARM compares the resources defined in the template with the existing resources in the resource group. It only creates new resources or updates those with configuration changes, leaving unchanged resources unmodified rather than deleting and recreating them.

Step-by-Step Solution

1
Analyze the statement regarding resource recreation during template redeployment.
The statement asserts that redeploying an ARM template deletes and recreates all defined resources regardless of configuration changes.
To evaluate the correctness of this assertion based on ARM deployment mechanics.
2
Recall the properties of ARM template deployments.
ARM templates are declarative and idempotent. By default, they deploy in incremental mode.
Incremental mode ensures that only new resources are created or existing resources with configuration changes are updated.
3
Evaluate the statement's validity.
Since unchanged resources are left untouched, the statement is false.
ARM does not delete and recreate unchanged resources during a template redeployment.

Key Concept

ARM Template Deployment Modes and Idempotency
Question 276Question →

A company is setting up a hybrid network connection to Azure. If the company deploys an Azure VPN Gateway, will the network traffic between their on-premises data center and Azure travel over the public internet?

Show answer & explanation

Answer: True

Answer

Yes, network traffic travels over the public internet.
Azure VPN Gateway establishes a secure, encrypted tunnel (IPSec) over the public internet to connect on-premises networks to Azure Virtual Networks.

Step-by-Step Solution

1
Identify the hybrid networking service being deployed.
The service is Azure VPN Gateway.
This is the component used to establish the connection from the on-premises site.
2
Determine the transport medium used by Azure VPN Gateway.
Azure VPN Gateway routes encrypted data packets across the public internet.
VPN connections use public IP routing to establish an IPSec/IKE tunnel.

Key Concept

Azure VPN Gateway transport path
Question 277Question →

An organization is migrating diverse application workloads to Microsoft Azure. How should you match each application database requirement to the most appropriate Azure database service?

Click a left item, then click its matching right item

Items

A globally distributed NoSQL database that supports multiple APIs, including MongoDB, Cassandra, and Gremlin.
A fully managed relational database service built on the Microsoft SQL Server engine, offering automated patching, scaling, and backups.
A fully managed relational database service built on the open-source PostgreSQL engine, optimized for building modern applications.

Matches

Show answer & explanation

Answer

Azure Cosmos DB matches the globally distributed NoSQL database requirement; Azure SQL Database matches the Microsoft SQL Server engine requirement; Azure Database for PostgreSQL matches the open-source PostgreSQL engine requirement.
The correct matches align the target workloads with the proper database architectures. Azure Cosmos DB matches the requirement for a globally distributed, multi-API NoSQL database. Azure SQL Database matches the fully managed relational SQL Server workload. Azure Database for PostgreSQL matches the fully managed open-source PostgreSQL engine.

Step-by-Step Solution

1
Identify the NoSQL, globally distributed, multi-API requirement.
Azure Cosmos DB is the only multi-model NoSQL database service in the selection.
Azure Cosmos DB supports various non-relational APIs such as MongoDB, Cassandra, and Gremlin.
2
Identify the fully managed Microsoft SQL Server database service.
Azure SQL Database represents the relational SQL Server database engine service.
Azure SQL Database is built on the SQL Server engine and offers Platform as a Service (PaaS) benefits.
3
Identify the open-source PostgreSQL database service.
Azure Database for PostgreSQL is the correct match.
Azure Database for PostgreSQL is the dedicated PaaS service for PostgreSQL workloads.

Key Concept

Distinguishing between relational (Azure SQL, PostgreSQL) and non-relational (Cosmos DB) database services in Azure.
Question 278Question →

An organization is planning to connect its local office to an Azure Virtual Network. The IT team decides to use Azure ExpressRoute because they believe it will encrypt their data as it travels over the public internet. Which statement explains why this assumption is incorrect?

Show answer & explanation

Answer: ExpressRoute uses a private, dedicated connection that bypasses the public internet, and it does not encrypt traffic by default.

Answer

ExpressRoute uses a private, dedicated connection that bypasses the public internet, and it does not encrypt traffic by default.
The correct statement is that ExpressRoute uses a private, dedicated connection that bypasses the public internet, and it does not encrypt traffic by default. This is because ExpressRoute establishes a direct connection via a connectivity provider, ensuring that traffic never traverses the public internet. Furthermore, since it is a private circuit, encryption is not automatically applied, and organizations must configure their own encryption (such as IPsec VPN) if it is required.

Step-by-Step Solution

1
Analyze the characteristics of Azure ExpressRoute connectivity.
Identify that ExpressRoute provides a private, dedicated connection through a connectivity provider, which completely bypasses the public internet.
Understanding the physical routing of ExpressRoute traffic is key to evaluating the scenario's assumption.
2
Evaluate the encryption capabilities of ExpressRoute.
Confirm that ExpressRoute traffic is not encrypted by default, and additional configurations (like VPN over ExpressRoute) are required if encryption is needed.
This directly refutes the assumption that ExpressRoute automatically encrypts all traffic.

Key Concept

Azure ExpressRoute provides a private, dedicated physical connection to Azure that bypasses the public internet and does not encrypt traffic by default.
Estimated Time:45s
Question 279Question →

A company plans to migrate an on-premises inventory management application to Microsoft Azure. The application requires a traditional relational database structure with strict schema enforcement, foreign key constraints, and complex SQL joins. The IT team is considering using Azure Cosmos DB for this database workload.

Why is Azure Cosmos DB unsuitable for this specific scenario?

Show answer & explanation

Answer: It is a multi-model NoSQL database designed for non-relational workloads rather than a traditional relational database engine.

Answer

It is a multi-model NoSQL database designed for non-relational workloads rather than a traditional relational database engine.
The correct option is correct because Azure Cosmos DB is a NoSQL (non-relational) database service, designed for high-velocity, semi-structured data, and lacks native support for traditional relational database features like foreign key constraints and ACID-compliant joins across multiple distinct tables.

Step-by-Step Solution

1
Analyze the application requirements.
The application requires a traditional relational structure, strict schema enforcement, foreign keys, and complex SQL joins.
Understanding the technical requirements is the first step to choosing or evaluating a database service.
2
Evaluate the capabilities of Azure Cosmos DB.
Azure Cosmos DB is a fully managed NoSQL (non-relational) database service designed for horizontal scaling, low latency, and semi-structured data.
Comparing service capabilities against the requirements helps identify mismatch points.
3
Identify the mismatch between requirements and Azure Cosmos DB.
Since Azure Cosmos DB is non-relational, it does not natively enforce traditional relational constraints like foreign keys across multiple tables or standard SQL joins.
This determines why Azure Cosmos DB is unsuitable for this workload.

Key Concept

Azure Cosmos DB is a fully managed, globally distributed NoSQL database service, whereas relational workloads requiring strict schemas, foreign keys, and traditional SQL joins are best suited for relational databases like Azure SQL Database.
Question 280Question →

An administrator wants to review recommendations in Azure Advisor to optimize their cloud deployment. Which two of the following are valid Azure Advisor recommendation categories that the administrator will find? (Select two.)

Select all that apply

Show answer & explanation

Answer: Cost; Reliability

Answer

The correct categories are Cost and Reliability.
The correct answers are Cost and Reliability. Azure Advisor groups its recommendations into five categories: Cost, Security, Reliability (formerly High Availability), Performance, and Operational Excellence.

Step-by-Step Solution

1
Identify the primary recommendation categories of Azure Advisor
The five pillars of Azure Advisor are Cost, Security, Reliability, Performance, and Operational Excellence.
Understanding these five categories allows for direct identification of correct categories.
2
Differentiate Advisor pillars from other Azure management tools
Identify that compliance enforcement belongs to Azure Policy and outage monitoring belongs to Azure Service Health.
This step ensures that management tool boundaries are correctly understood.

Key Concept

Azure Advisor Recommendation Categories
Estimated Time:45s
PreviousPage 14 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin