Examkin

All practice questions

1186 questions

All types1,186Multiple choice620Multiple select228True / False291Matching47
Question 321Question →

A retail company wants to deploy a new public-facing web API. The development team wants to deploy the application code directly using a fully managed platform where Microsoft automatically handles operating system patching, load balancing, and scaling, without the team needing to package the application into containers or manage container orchestration. Which Azure compute service should the company select?

Show answer & explanation

Answer: Azure App Service

Answer

Azure App Service
Azure App Service is a HTTP-based service for hosting web applications, REST APIs, and mobile backends. It is a Platform as a Service (PaaS) offering where Microsoft manages the underlying infrastructure, operating system patching, and scaling. It allows developers to deploy code directly (e.g., .NET, Java, Node.js, Python) without needing to containerize the application first.

Step-by-Step Solution

1
Evaluate the hosting constraints, which state that the application code must be deployed directly without containerization.
This rules out Azure Container Instances and Azure Kubernetes Service, as both are dedicated container hosting platforms that require container images.
Container instances and Kubernetes cannot host uncontainerized raw application code directly.
2
Evaluate the patching constraints, which specify that Microsoft must automatically handle operating system patching.
This rules out Azure Virtual Machines.
Under the shared responsibility model for Infrastructure as a Service (IaaS), guest operating system patching is the customer's responsibility.
3
Identify the service that matches both direct code deployment and fully managed operating system maintenance.
Azure App Service is a Platform as a Service (PaaS) that meets all of these criteria.
PaaS offloads OS patching and infrastructure maintenance to Microsoft while supporting code-first deployments.

Key Concept

Azure App Service as a Platform as a Service (PaaS) compute offering for direct code deployment.
Estimated Time:1m 0s
Question 322Question →

A company has virtual networks (VNets) deployed in two different Azure regions: East US and West Europe. Is the following statement true or false?

Azure Virtual Network peering can only link virtual networks that are located in the same Azure region.

Show answer & explanation

Answer: False

Answer

False
The statement is false because Global Virtual Network peering allows virtual networks in different Azure regions to connect directly.

Step-by-Step Solution

1
Identify the networking service being discussed.
The statement describes Virtual Network (VNet) peering.
VNet peering is used to connect virtual networks directly.
2
Determine the regional capabilities of Virtual Network peering.
Azure supports both regional VNet peering (same region) and Global VNet peering (different regions).
To evaluate if the restriction to the 'same Azure region' is true or false.

Key Concept

Global Virtual Network Peering
Question 323Question →

A healthcare provider hosts a multi-region electronic health record (EHR) application on Azure virtual machines. The IT operations team wants to identify optimization opportunities across their environment using Azure Advisor. Which of the following recommendations should the team expect to receive directly from Azure Advisor? (Select two.)

Select all that apply

Show answer & explanation

Answer: A recommendation to right-size or shut down underutilized virtual machines to optimize monthly spending.; A recommendation to enable virtual machine backups to protect application data against accidental loss.

Answer

The recommendations to right-size or shut down underutilized virtual machines, and to enable virtual machine backups to protect application data.
The correct recommendations are to right-size or shut down underutilized virtual machines, and to enable virtual machine backups. Azure Advisor analyzes telemetry to detect low-utilization VMs (Cost category) and checks if virtual machines have backup enabled to protect against data loss (Reliability category).

Step-by-Step Solution

1
Identify the primary purpose and categories of Azure Advisor.
Azure Advisor provides personalized recommendations across five categories: Cost, Security, Reliability, Performance, and Operational Excellence.
This establishes the boundaries of what Azure Advisor can recommend.
2
Evaluate which of the options fall directly under Advisor's standard best-practice evaluations.
Right-sizing underutilized virtual machines represents a standard Cost optimization recommendation. Configuring virtual machine backup represents a standard Reliability recommendation.
This confirms the two correct selections.
3
Differentiate Advisor's capabilities from other Azure governance and monitoring tools.
Automatic tag inheritance is a policy enforcement action (Azure Policy), and real-time metric alerting is a monitoring configuration task (Azure Monitor).
This eliminates the distractors based on tool boundaries.

Key Concept

Azure Advisor analyzes resource configuration and telemetry data to recommend solutions that improve the cost-effectiveness, performance, reliability, and security of Azure resources.
Estimated Time:1m 30s
Question 324Question →

A software developer is designing a new cloud-native solution and needs to estimate the potential monthly cost of running two virtual machines and an Azure SQL Database before any resources are provisioned.

Which tool should the developer use to obtain this estimate?

Show answer & explanation

Answer: Pricing Calculator

Answer

Pricing Calculator
The Pricing Calculator is the correct tool because it allows developers to estimate the monthly costs of Azure services before they are created by configuring parameters such as VM sizes, regions, and database tiers.

Step-by-Step Solution

1
Analyze the requirement to determine if it involves estimating costs for new services (pre-deployment) or comparing existing on-premises infrastructure to Azure.
The requirement is to estimate the costs of new virtual machines and a database before they are provisioned.
Distinguishing between new service cost estimation and on-premises comparison is key to choosing between the Pricing Calculator and the TCO Calculator.
2
Evaluate which Azure tool is designed for pre-deployment cost estimation of individual services.
The Pricing Calculator is identified as the tool designed to estimate costs for new services based on specified configurations.
The Pricing Calculator allows users to input configuration details (region, size, tier) for Azure services and output a estimated monthly cost before deployment.

Key Concept

Estimating Azure resource costs before deployment using the Pricing Calculator.
Estimated Time:45s
Question 325Question →

An organization is using an Azure Resource Manager (ARM) template to deploy a virtual machine and a virtual network. Is it true that the virtual machine will automatically wait for the virtual network to be fully deployed first as long as the virtual network resource is defined earlier in the template file than the virtual machine resource?

Show answer & explanation

Answer: False

Answer

The statement is false because Azure Resource Manager templates deploy resources in parallel by default, regardless of their order in the template file, unless explicit dependencies are defined.
The correct answer is False because ARM templates do not execute sequentially based on their file order. They are declarative, meaning resources are deployed in parallel unless explicit dependencies are established using 'dependsOn' or implicit reference links.

Step-by-Step Solution

1
Analyze the deployment model of Azure Resource Manager (ARM) templates.
ARM templates use a declarative syntax, meaning you define the desired end state of the infrastructure rather than the sequential steps to create it.
Understanding the difference between declarative and imperative models is key to knowing how resource creation is orchestrated.
2
Evaluate how ARM schedules resource creation and determines order.
ARM deploys resources in parallel by default to optimize deployment speed. It only enforces a sequence if an explicit dependency is defined using properties like 'dependsOn' in ARM templates or resource references in Bicep.
This determines whether the physical order of resources in the template file has any effect on execution sequence.

Key Concept

Declarative resource deployment and dependency management in ARM templates
Question 326Question →

A startup is deploying its web application to Azure and needs to connect its on-premises development office to the Azure Virtual Network. The network connection must be secure, encrypt all traffic in transit, and be established quickly using the office's existing public internet connection. Which Azure service should the startup implement to meet these requirements?

Show answer & explanation

Answer: Azure VPN Gateway

Answer

Azure VPN Gateway
Azure VPN Gateway is the correct service because it creates an encrypted connection (a Site-to-Site VPN tunnel) over the public internet between an on-premises location and an Azure Virtual Network. This allows for a fast, cost-effective setup using existing internet infrastructure.

Step-by-Step Solution

1
Analyze the connectivity requirements: the connection must route over the public internet, encrypt all traffic in transit, and connect an entire on-premises network to Azure.
Determine that ExpressRoute is unsuitable because it uses a private dedicated line rather than the public internet and does not encrypt traffic by default.
This narrows down the options to internet-based hybrid connectivity solutions.
2
Evaluate the remaining options (VPN Gateway, Virtual Network Peering, and Bastion) to find the service designed for site-to-site network connectivity.
Identify that Azure VPN Gateway creates an encrypted Site-to-Site tunnel over the public internet, whereas Virtual Network Peering only connects Azure-native networks, and Bastion is for VM-specific administrative access.
To select the service that matches the hybrid connectivity and encryption requirements.

Key Concept

Azure VPN Gateway provides secure, encrypted site-to-site connectivity over the public internet, whereas ExpressRoute provides dedicated, private, and unencrypted connectivity bypassing the public internet.
Question 327Question →

A financial services firm is designing a hybrid data storage solution with the following requirements:
- A shared file repository must be concurrently accessible via the SMB protocol from both on-premises servers and Azure Virtual Machines.
- Historical transaction reports must be retained for seven years at the lowest possible storage cost; these reports are rarely accessed but must be available for immediate online retrieval within seconds when audited.

Which combination of Azure storage services and storage tiers best meets these requirements while minimizing operational overhead and costs?

Show answer & explanation

Answer: Azure Files for the shared repository, and Azure Blob Storage configured with the Cold access tier for the transaction reports.

Answer

Azure Files for the shared repository, and Azure Blob Storage configured with the Cold access tier for the transaction reports.
Azure Files provides a fully managed SMB file share that can be mounted concurrently on-premises and in Azure VMs, meeting the first requirement. The Cold tier in Azure Blob Storage provides the lowest possible storage cost for online storage, keeping the data immediately accessible within seconds/milliseconds without requiring the multi-hour rehydration process associated with the Archive tier.

Step-by-Step Solution

1
Evaluate the sharing protocol and concurrency requirements.
Azure Files is identified as the appropriate service because it natively supports concurrent SMB access for both on-premises servers and Azure Virtual Machines as a fully managed service.
Azure Disk Storage is restricted to VM attachment, and Azure Blob Storage uses REST APIs rather than standard SMB for file shares.
2
Analyze the retrieval time constraints for the archived reports.
The Archive access tier is ruled out because it requires hours for rehydration, whereas the reports must be available within seconds.
The scenario specifies that reports must be available for immediate online retrieval.
3
Determine the most cost-effective online storage tier.
Azure Blob Storage with the Cold access tier is selected because it is cheaper than Hot and Cool tiers for storage cost while maintaining immediate (millisecond/second level) online availability.
This minimizes the cost of storing rarely accessed data while meeting the immediate retrieval requirement.

Key Concept

Azure Storage Services and Tiers
Estimated Time:2m 0s
Question 328Question →

A security administrator needs to ensure that a database auditor can view the configuration of all resources inside a resource group named Billing-RG, but cannot modify any settings, delete resources, or grant other users access to the resource group. Which configuration should the administrator implement?

Show answer & explanation

Answer: Assign the Reader role to the user at the Billing-RG scope.

Answer

Assign the Reader role to the user at the Billing-RG scope.
Assigning the Reader role at the Billing-RG scope is the correct solution because it grants the user permission to view all resources in the resource group, but strictly prevents them from making any modifications, deleting resources, or delegating access permissions to others.

Step-by-Step Solution

1
Identify the required level of access for the database auditor.
The auditor requires read-only access (viewing configurations) without the ability to modify settings, delete resources, or manage user access permissions.
This establishes the baseline requirements to select the correct Azure Role-Based Access Control (RBAC) role.
2
Evaluate the built-in Azure RBAC roles against the requirements.
The Reader role grants read-only access, the Contributor role allows resource modification, and the Owner role allows full management and access delegation. The User Access Administrator role only manages user access.
Matching the requirements to the correct built-in role ensures least privilege is applied.
3
Determine the appropriate scope for the assignment.
Assigning the Reader role at the Billing-RG scope restricts access specifically to that resource group.
Assigning roles at the correct scope ensures the user only has access to the target resources.

Key Concept

Azure Role-Based Access Control (RBAC) is used to manage who has access to Azure resources, what they can do with those resources, and what areas they have access to.
Question 329Question →

Azure Cloud Shell automatically authenticates your command-line session using the credentials of the signed-in Azure account, eliminating the need to run login commands such as 'az login' or 'Connect-AzAccount' when starting a session.

Show answer & explanation

Answer: True

Answer

True
The correct answer is True because Azure Cloud Shell is natively integrated with the Azure Portal and automatically authenticates the user. When a user opens Cloud Shell, their session is pre-authenticated with the credentials used to log into the portal, allowing them to manage resources immediately without running login commands.

Step-by-Step Solution

1
Identify the authentication behavior of Azure Cloud Shell.
Azure Cloud Shell is a web-based command-line tool accessible directly from the Azure Portal.
To determine if local login commands are necessary inside the Cloud Shell environment.
2
Verify if manual login is required.
Because the user is already authenticated to the Azure Portal, Cloud Shell automatically inherits these credentials and authenticates the CLI or PowerShell session.
This eliminates the need to execute manual authentication commands to begin managing resources.

Key Concept

Azure Cloud Shell pre-authentication
Question 330Question →

A cloud administrator plans to use the browser-based command line environment within the Azure portal to execute management scripts. Is it true or false that this environment requires an associated Azure Storage account to persist files across different sessions?

Show answer & explanation

Answer: True

Answer

True
The correct answer is True because Azure Cloud Shell requires an Azure Storage account to mount an Azure Files share, ensuring that files, scripts, and user profiles are saved and accessible in future sessions.

Step-by-Step Solution

1
Identify the Azure management tool described in the scenario.
The browser-based command line environment within the Azure portal is Azure Cloud Shell.
Recognizing the tool allows us to evaluate its operating requirements and storage mechanisms.
2
Determine how Azure Cloud Shell handles data persistence.
Azure Cloud Shell uses a mounted Azure Files share within an Azure Storage account to persist files in the user's home directory.
Since the container hosting the session is temporary and gets deleted after inactivity, external storage is required to save data.

Key Concept

Azure Cloud Shell storage account dependency
Question 331Question →

Determine if the following statement is true or false: If you assign an Azure Policy definition to an Azure resource group, any existing resources within that group that do not comply with the policy are automatically deleted.

Show answer & explanation

Answer: False

Answer

The statement is false because Azure Policy evaluates existing resources for compliance and flags them as non-compliant rather than deleting them.
The correct answer is false because Azure Policy only flags existing non-compliant resources in compliance reports rather than deleting them.

Step-by-Step Solution

1
Analyze the action of assigning an Azure Policy definition to a resource group.
Azure Policy will evaluate all resources within the scope (the resource group) against the policy rules.
To understand how the policy affects both new and existing resources.
2
Determine the impact of Azure Policy on existing resources that do not comply.
Existing resources that violate the policy are marked as non-compliant in the Azure Policy dashboard, but they are not deleted or modified.
Azure Policy's primary mechanism for existing resources is evaluation and reporting, preventing automatic destructive actions like deletion.

Key Concept

Azure Policy compliance evaluation for existing resources
Estimated Time:45s
Question 332Question →

An enterprise is migrating its on-premises SQL Server-based human resources (HR) application to Azure. The application requires a relational database that supports strict schema constraints, ACID transactions, and SQL Server compatibility. The enterprise wants to minimize administrative overhead by ensuring that Microsoft automatically handles operating system updates and database patching. Which Azure service should the enterprise select?

Show answer & explanation

Answer: Azure SQL Database

Answer

Azure SQL Database
Azure SQL Database is a fully managed relational database service (Platform as a Service) that provides SQL Server compatibility, strict schema enforcement, ACID compliance, and automatic operating system and database engine patching by Microsoft.

Step-by-Step Solution

1
Identify the database model requirement from the scenario.
The scenario requires a relational database that supports traditional schemas, ACID transactions, and SQL Server compatibility.
This rules out non-relational (NoSQL) databases.
2
Identify the management and patching requirements.
The solution must be fully managed with Microsoft handling operating system and database patching, which points to a Platform as a Service (PaaS) database service.
This rules out Infrastructure as a Service (IaaS) database hosting where the customer manages the operating system.
3
Select the service that satisfies both the relational and fully managed requirements.
Azure SQL Database is a fully managed relational database service (PaaS) that meets all the criteria.
It matches the schema, compatibility, and management requirements.

Key Concept

Azure relational database services and their management models (PaaS vs. IaaS)
Estimated Time:1m 0s
Question 333Question →

A company is planning to host four new application workloads on Microsoft Azure. Each workload has specific database requirements. Which Azure database service should you select for each application workload?

Click a left item, then click its matching right item

Items

A web application that stores semi-structured catalog data using JSON documents and requires global distribution with guaranteed single-digit millisecond latency.
A corporate application migrating from an on-premises Microsoft SQL Server environment that requires a fully managed relational database engine with high compatibility.
An open-source application built using the LAMP stack (Linux, Apache, MySQL, PHP) that requires a managed relational database service in Azure.
An analytics application that requires a fully managed relational database based on the PostgreSQL engine to run complex spatial queries.

Matches

Show answer & explanation

Answer

Match the web application requiring JSON documents and low latency with Azure Cosmos DB; match the corporate SQL Server migration with Azure SQL Database; match the LAMP stack application with Azure Database for MySQL; and match the PostgreSQL analytics application with Azure Database for PostgreSQL.
The correct matches correctly align the application workload requirements with their targeted Azure Database services. Relational database engines (SQL Server, MySQL, PostgreSQL) are matched to their corresponding managed PaaS offerings (Azure SQL Database, Azure Database for MySQL, Azure Database for PostgreSQL), while the non-relational JSON workload with global scaling needs is matched to Azure Cosmos DB.

Step-by-Step Solution

1
Analyze the web application workload.
The requirement specifies JSON documents, global distribution, and single-digit millisecond latency, which describes the capabilities of a NoSQL database system.
Azure Cosmos DB is Azure's premier NoSQL and globally distributed database solution.
2
Analyze the corporate application migration.
The workload requires high compatibility with Microsoft SQL Server in a fully managed Platform as a Service (PaaS) format.
Azure SQL Database offers a managed relational database engine natively compatible with on-premises SQL Server.
3
Analyze the open-source web application stack.
The workload utilizes the traditional LAMP stack, which relies specifically on the MySQL database engine.
Azure Database for MySQL provides a fully managed community edition of MySQL.
4
Analyze the analytics application workload.
The requirement specifies a managed relational database that must be based on the PostgreSQL engine.
Azure Database for PostgreSQL is the designated managed service for hosting community-edition PostgreSQL workloads in Azure.

Key Concept

Selecting the correct Azure database service based on relational versus non-relational database types, compatibility requirements, and engine types.
Estimated Time:1m 30s
Question 334Question →

An organization wants to configure alerts to notify their IT team about issues affecting the Azure infrastructure that hosts their applications. Which two event types can be tracked by using Azure Service Health? (Select two.)

Select all that apply

Show answer & explanation

Answer: Planned maintenance events that may affect the availability of your resources; Service incidents such as outages in Azure regions that affect your active subscriptions

Answer

The correct options are the statements describing 'Planned maintenance events that may affect the availability of your resources' and 'Service incidents such as outages in Azure regions that affect your active subscriptions'.
Azure Service Health notifies users about events affecting Azure infrastructure, specifically planned maintenance (giving advance notice of updates) and service incidents (such as unplanned outages that affect active subscriptions and regions).

Step-by-Step Solution

1
Identify the primary purpose of Azure Service Health.
Azure Service Health focuses on notifications regarding Azure's infrastructure status, including service incidents, planned maintenance, and health advisories that affect your resources.
This establishes the scope of what the service covers.
2
Differentiate between infrastructure-level health and individual resource metrics or configurations.
Individual resource performance (like CPU and memory metrics) is tracked by Azure Monitor, and access management is controlled via Azure RBAC. Outages and planned maintenance are infrastructure events tracked by Azure Service Health.
To select the two correct infrastructure health options and rule out resource-specific management options.

Key Concept

Understanding the types of notifications and events tracked by Azure Service Health versus other Azure management services.
Estimated Time:45s
Question 335Question →

An administrator wants to use the Azure CLI locally on a Windows 11 computer to manage cloud resources. Which action should the administrator take?

Show answer & explanation

Answer: Install the Azure CLI directly on the Windows 11 computer.

Answer

Install the Azure CLI directly on the Windows 11 computer.
The correct action is to install the Azure CLI directly on the Windows 11 computer. The Azure CLI is a cross-platform command-line utility that can be installed natively on Windows, macOS, and Linux, allowing administrators to manage resources using identical command syntax across all supported operating systems.

Step-by-Step Solution

1
Identify the requested tool and the client operating system.
The target tool is Azure CLI, and the client operating system is Windows 11.
This establishes the tool requirements and deployment target environment.
2
Evaluate the cross-platform capabilities of the Azure CLI tool.
The Azure CLI is cross-platform and supports native installation on Windows, macOS, and Linux.
This determines if the tool can run natively on the specified OS without virtualization or alternative toolsets.

Key Concept

Azure CLI is cross-platform and runs natively on Windows, macOS, and Linux.
Question 336Question →

An administrator assigns a tag named Environment with a value of Production to an Azure resource group. The resource group contains an Azure Virtual Machine and an Azure Storage account. The virtual machine has no tags applied directly. The storage account has a tag named Environment with a value of Dev applied directly.

Which two statements are true regarding how Azure Cost Management and billing will process these resources? (Choose two.)

Select all that apply

Show answer & explanation

Answer: The costs for the virtual machine will be reported as untagged in Cost Analysis when grouping by the Environment tag.; The costs for the storage account will be grouped under the Dev tag value in Cost Analysis.

Answer

The correct statements are that the virtual machine's costs will be reported as untagged in Cost Analysis when grouping by the Environment tag, and the storage account's costs will be grouped under the Dev tag value.
Azure resources do not inherit tags from their parent resource group. Therefore, the virtual machine, which has no tags applied directly, will have its costs reported as untagged when grouping by the Environment tag in Cost Analysis. The storage account has the Environment tag with the value Dev applied directly, so its costs will be grouped under the Dev tag value in Cost Analysis.

Step-by-Step Solution

1
Analyze tag inheritance between the resource group and the virtual machine.
The virtual machine has no tags directly applied and does not inherit the Environment: Production tag from its resource group.
Azure resources do not automatically inherit tags from their parent resource group.
2
Analyze the tag on the storage account.
The storage account retains its directly applied tag: Environment: Dev.
Directly applied tags on a resource are valid and are not overwritten by resource group tags.
3
Determine how these tags affect Cost Analysis grouping.
In Cost Analysis, grouping by the Environment tag will show the virtual machine as untagged and the storage account under Dev.
Cost Analysis groups costs using only the tags directly applied to each individual resource.
4
Evaluate the financial/accounting impact of tagging.
Applying tags has no impact on classifying costs as OpEx or CapEx.
Cloud consumption costs are classified as OpEx, and tagging is used for metadata organization, not for altering financial classification.

Key Concept

Azure Cost Management, Billing, and Resource Tags
Question 337Question →

An organization needs to estimate and optimize its cloud-related expenditures. Which Azure tool is the correct match for each business requirement?

Click a left item, then click its matching right item

Items

Estimate the monthly cost of deploying a new Azure SQL Database and two Virtual Machines before creation.
Compare the cost of maintaining a physical on-premises server infrastructure versus migrating it to Azure.
Identify underutilized cloud resources to obtain cost-optimization recommendations.

Matches

Show answer & explanation

Answer

Estimating monthly cost before deployment matches the Azure Pricing Calculator. Comparing physical on-premises maintenance costs to Azure migration matches the Azure Total Cost of Ownership (TCO) Calculator. Identifying underutilized cloud resources for cost savings recommendations matches Azure Advisor.
Estimating new resource costs before deployment corresponds to the Azure Pricing Calculator. Comparing on-premises costs to Azure migration corresponds to the Azure Total Cost of Ownership (TCO) Calculator. Finding recommendations for active resource cost optimization corresponds to Azure Advisor.

Step-by-Step Solution

1
Analyze the first requirement: estimating the costs of new resources (Azure SQL Database and Virtual Machines) before they are deployed.
This matches the Azure Pricing Calculator, which allows users to select services and configuration details to generate a cost estimate.
The Pricing Calculator is designed for forward-looking estimates of Azure services.
2
Analyze the second requirement: comparing the financial impact of physical on-premises hardware versus a cloud alternative.
This matches the Azure Total Cost of Ownership (TCO) Calculator, which evaluates cost savings over time when migrating workloads to Azure.
The TCO Calculator specifically models the transition from on-premises/colocation models to the cloud.
3
Analyze the third requirement: getting recommendations to optimize active cloud resource usage and lower costs.
This matches Azure Advisor, which inspects your deployed configuration and offers cost recommendations like resizing virtual machines.
Azure Advisor analyzes active deployments to offer optimization suggestions.

Key Concept

Azure cost estimation and optimization tools consist of the Pricing Calculator (for new service estimates), the TCO Calculator (for on-premises to cloud comparisons), and Azure Advisor (for active resource recommendations).
Estimated Time:1m 0s
Question 338Question →

An organization needs to monitor the status of its Azure deployments. The operations team must distinguish between issues affecting the overall Azure cloud infrastructure, events impacting services under their specific subscription, and availability issues of individual virtual machine instances. Which of the following actions should the team perform to achieve these goals? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Create Service Health alerts to receive notifications about planned maintenance and active service outages that affect the resources within their subscription.; Review Resource Health to diagnose whether a specific virtual machine is unavailable due to an Azure platform-level event rather than a configuration error within the guest operating system.

Answer

To monitor subscription-level and resource-level health, the team should use Service Health alerts to track planned maintenance and active outages affecting their subscription, and use Resource Health to check the status of specific virtual machine instances.
The correct actions are using Service Health alerts for subscription-level events and Resource Health for specific resource-level failures. Service Health allows users to set up alerts for planned maintenance and outages affecting their specific subscriptions, while Resource Health shows the status of individual resources (like a virtual machine) and helps determine if an issue is caused by the Azure platform.

Step-by-Step Solution

1
Identify subscription-wide tracking requirements.
Service Health alerts are identified as the correct tool for tracking subscription-wide maintenance and outages.
Service Health provides a personalized dashboard showing only the services and regions relevant to the target subscription.
2
Identify individual resource tracking requirements.
Resource Health is identified as the correct tool for checking specific virtual machine availability.
Resource Health drills down to the health of single resource instances and determines if downtime is platform-induced.
3
Evaluate the role of monitoring tools like Azure Monitor.
Azure Monitor is ruled out for tracking global or subscription-wide infrastructure outages.
Azure Monitor focuses on the performance and logs of customer-deployed workloads, not the health status of the underlying Azure cloud infrastructure.

Key Concept

Azure Service Health components and their distinction from Azure Monitor
Question 339Question →

A cloud administrator needs to configure telemetry and notification alerts for a new business application deployed on Azure Virtual Machines. The monitoring strategy has two distinct goals:

1. Track the virtual machines' CPU usage and generate an alert if it stays above 85% for more than 10 minutes.
2. Receive early notifications about planned Azure infrastructure maintenance or platform-wide outages in the region that could affect the virtual machines' availability.

Which combination of services should the administrator implement to meet these requirements?

Show answer & explanation

Answer: Azure Monitor for tracking the CPU usage threshold, and Azure Service Health for tracking the planned maintenance and platform outages

Answer

Azure Monitor for tracking the CPU usage threshold, and Azure Service Health for tracking the planned maintenance and platform outages
The correct answer correctly maps Azure Monitor to resource-level CPU monitoring and Azure Service Health to platform-level events. Azure Monitor collects operational telemetry like metrics from your resources, whereas Azure Service Health keeps you informed about outages and planned maintenance affecting the Azure infrastructure.

Step-by-Step Solution

1
Analyze the first requirement: tracking CPU usage for specific virtual machines and triggering alerts when it exceeds 85%.
Identify that resource-level telemetry and metrics, such as virtual machine CPU utilization, are collected, analyzed, and alerted upon by Azure Monitor.
Azure Monitor is the primary tool for monitoring the performance and health of individual Azure resources.
2
Analyze the second requirement: receiving early notifications for planned Azure infrastructure maintenance and regional outages that could impact the VMs.
Identify that Azure Service Health is the service responsible for notifying users about Azure service incidents, planned maintenance, and other advisories that affect their specific subscriptions.
Azure Service Health provides a personalized dashboard showing the health of the Azure services and regions they use, which is separate from individual resource telemetry.
3
Combine both service mappings to determine the correct configuration.
Pair Azure Monitor for the resource CPU metrics with Azure Service Health for the platform maintenance and outage notifications.
This combination accurately maps each requirement to its designated Azure management service.

Key Concept

Understanding the distinction between resource-specific monitoring (Azure Monitor) and platform-level health tracking (Azure Service Health).
Estimated Time:2m 0s
Question 340Question →

An organization is designing a microservices application that requires container orchestration features such as service discovery, load balancing, and coordinated scaling across multiple container nodes. Is it true that Azure Container Instances (ACI) is the primary Azure service designed to provide these full cluster orchestration capabilities?

Show answer & explanation

Answer: False

Answer

The assertion is false.
Azure Container Instances (ACI) is a serverless container hosting service designed for running isolated containers quickly and easily. It does not offer cluster orchestration features such as service discovery, load balancing, or coordinated node scaling. Azure Kubernetes Service (AKS) is the service designed for full container orchestration, making the statement false.

Step-by-Step Solution

1
Analyze the requirements in the scenario.
The application requires microservices orchestration features, including service discovery, load balancing, and automated scaling across multiple container nodes.
This establishes the technical criteria needed to evaluate the hosting service.
2
Compare Azure Container Instances (ACI) against the requirements.
ACI is designed to run isolated containers quickly without provisioning virtual machines, but it lacks native cluster orchestration, service discovery, and node management.
This determines if ACI fits the primary capabilities requested.
3
Identify the correct Azure service for full container orchestration.
Azure Kubernetes Service (AKS) is the container orchestration service in Azure that provides cluster management, service discovery, and coordinated scaling.
This confirms that AKS, not ACI, is the primary service designed for the described scenario.

Key Concept

Distinguishing the capabilities of Azure Container Instances (ACI) from Azure Kubernetes Service (AKS) for container orchestration.
Estimated Time:1m 0s
PreviousPage 17 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin