Examkin

All practice questions

1186 questions

All types1,186Multiple choice620Multiple select228True / False291Matching47
Question 381Question →

An administrator needs to monitor the health of the Microsoft Azure infrastructure hosting their applications and configure notifications for events that might impact their deployments.

Which two of the following events can be tracked using Azure Service Health?

Select all that apply

Show answer & explanation

Answer: Planned maintenance events that may affect the availability of your resources; Service outages and active incidents in the Azure regions where your resources are deployed

Answer

Planned maintenance events that may affect the availability of your resources, and service outages and active incidents in the Azure regions where your resources are deployed
Azure Service Health provides a personalized dashboard showing health issues, planned maintenance, and health advisories that impact your resources. Therefore, you can track planned maintenance events and service outages in the regions where your resources are deployed.

Step-by-Step Solution

1
Identify the purpose of Azure Service Health.
Azure Service Health provides personalized alerts and guidance when Azure service issues, planned maintenance, or health advisories affect your resources.
To determine which monitoring scenarios fall under global infrastructure health rather than individual resource telemetry.
2
Distinguish between Azure Service Health and Azure Monitor.
Identify that CPU utilization and application logs are resource-level metrics (Azure Monitor), while region-wide outages and maintenance are infrastructure-level events (Azure Service Health).
To separate the target service from resource-specific monitoring.

Key Concept

Azure Service Health vs. Azure Monitor
Estimated Time:45s
Question 382Question →

A retail company manages their e-commerce application on Azure using multiple resource types. To ensure alignment with best practices, the operations director wants a service that proactively analyzes their environment's configurations and active usage telemetry to deliver actionable advice on right-sizing virtual machines, improving high availability, and securing databases. Which Azure service should the operations director use to view these tailored optimization recommendations?

Show answer & explanation

Answer: Azure Advisor

Answer

Azure Advisor is the service that proactively analyzes configuration and telemetry data to provide tailored recommendations across cost, security, reliability, performance, and operational excellence.
The correct answer is the option specifying Azure Advisor. This service integrates with Azure Security Center (now Microsoft Defender for Cloud) and evaluates resource configurations to provide recommendations across five main categories: cost, security, reliability, performance, and operational excellence. This aligns directly with the operations director's goals.

Step-by-Step Solution

1
Analyze the requirements to identify the core objective.
The requirement is to find a service that evaluates active resources and usage telemetry to recommend improvements in cost, reliability, and security.
This helps narrow down the choices to tools that analyze active workloads and offer optimization suggestions rather than template deployment or monitoring tools.
2
Differentiate between Azure management and governance tools.
Azure Advisor fits the requirement perfectly by acting as a personalized cloud consultant, whereas Azure Policy enforces compliance rules, Azure Monitor handles telemetry collection/alerts, and ARM templates manage deployments.
Understanding the boundary between recommendations (Advisor) and enforcement (Policy/RBAC) is essential to choosing the correct service.

Key Concept

Azure Advisor recommendations categories and usage
Estimated Time:1m 0s
Question 383Question →

An administrator needs to configure access for an external security audit team. The team must be able to view the configurations of all resources inside an Azure resource group named 'Production-RG'. However, they must not be allowed to modify any configurations, delete any resources, or manage user role assignments. Which Azure administration feature should the administrator assign to the security audit team to meet these requirements?

Show answer & explanation

Answer: The built-in Reader role at the resource group scope

Answer

The built-in Reader role at the resource group scope
The built-in Reader role at the resource group scope is the correct choice because it grants the security audit team the ability to view all resources and their configurations within the 'Production-RG' resource group. It adheres to the principle of least privilege by not allowing modifications, deletions, or role assignment changes.

Step-by-Step Solution

1
Identify the primary requirement, which is to allow a specific team to view resource configurations without making changes or managing access.
The requirement is an access control task rather than a compliance enforcement or metadata tagging task.
Determining the correct Azure management tool ensures we focus on Azure Role-Based Access Control (RBAC) rather than Azure Policy, Resource Locks, or Tags.
2
Evaluate the built-in Azure RBAC roles to find the one that matches the requested permissions.
The Reader role allows read-only access to resources at the assigned scope, whereas the Owner or Contributor roles would allow modifications.
Matching the permissions ensures that the principle of least privilege is followed.
3
Confirm that the selected role is applied at the correct scope to restrict access to the resource group.
Assigning the Reader role at the resource group scope restricts the team's read access only to 'Production-RG'.
Applying the role at the resource group scope limits the blast radius and access boundary to only the target resources.

Key Concept

Azure Role-Based Access Control (RBAC) allows administrators to manage access to Azure resources by assigning built-in or custom roles at specific scopes.
Question 384Question →

An organization is evaluating its cloud strategy and needs to use different Microsoft Azure tools to manage and estimate costs. Match each business requirement to the appropriate Azure tool.

Click a left item, then click its matching right item

Items

Estimating the monthly cost of deploying a new Azure Cosmos DB database and three new Azure Virtual Machines.
Comparing the projected cost savings of migrating an existing on-premises datacenter workload to Azure.
Monitoring ongoing spending patterns, analyzing historical invoices, and configuring budget alerts for deployed resources.

Matches

Show answer & explanation

Answer

The requirement to estimate the cost of new services matches the Azure Pricing Calculator. The requirement to compare on-premises costs with Azure matches the Azure Total Cost of Ownership (TCO) Calculator. The requirement to monitor ongoing spending and configure budget alerts matches Azure Cost Management.
The correct matches align each scenario with the tool designed for that phase of the cloud lifecycle. Estimating new cloud services matches the Azure Pricing Calculator. Comparing on-premises workloads to Azure matches the Azure Total Cost of Ownership (TCO) Calculator. Monitoring ongoing spending and setting budget alerts matches Azure Cost Management.

Step-by-Step Solution

1
Identify the requirement for new service estimation.
Estimating the cost of a new Azure Cosmos DB database and Virtual Machines matches the Azure Pricing Calculator.
The Azure Pricing Calculator estimates usage costs for planned cloud resources prior to deployment.
2
Identify the requirement for comparing on-premises and cloud migration costs.
Comparing on-premises datacenter workloads to Azure matches the Azure Total Cost of Ownership (TCO) Calculator.
The TCO Calculator compares on-premises costs (such as hardware, electricity, and labor) with cloud costs to show potential savings.
3
Identify the requirement for tracking actual, deployed resource costs.
Monitoring ongoing spend and configuring budget alerts matches Azure Cost Management.
Azure Cost Management helps control costs for active resources by analyzing billing data, tracking spending, and raising alerts when budgets are exceeded.

Key Concept

Azure cost estimation and management tools serve distinct purposes: the Pricing Calculator estimates new cloud deployments, the TCO Calculator compares on-premises to cloud migration, and Cost Management tracks active resource costs.
Estimated Time:1m 0s
Question 385Question →

An organization wants to control costs by restricting the virtual machine sizes (SKUs) that users can deploy in their environment. Is it true that Azure Policy can be used to block the creation of virtual machines that do not match the allowed sizes?

Show answer & explanation

Answer: True

Answer

True
The statement is true because Azure Policy is designed to enforce resource properties. A built-in policy can restrict virtual machine SKUs and block (deny) the deployment of any sizes not explicitly permitted.

Step-by-Step Solution

1
Identify the core requirement: restricting resource properties (specifically virtual machine size SKUs) and blocking non-compliant deployments.
The goal is to enforce resource compliance and prevent the creation of resources that violate specific properties.
Understanding the requirement helps select the appropriate Azure management or governance tool.
2
Recall the purpose and capabilities of Azure Policy.
Azure Policy evaluates resource properties against rules and can actively block deployment using the 'Deny' effect.
This confirms whether Azure Policy can perform the exact action described in the statement.

Key Concept

Azure Policy enforces organizational standards and assesses compliance at scale by evaluating resource properties and blocking non-compliant deployments.
Estimated Time:45s
Question 386Question →

An administrator needs to track the CPU utilization of several Azure Virtual Machines and receive a notification if the utilization exceeds 90%. Which Azure service should the administrator use?

Show answer & explanation

Answer: Azure Monitor

Answer

Azure Monitor
Azure Monitor collects and analyzes performance data (metrics) from individual Azure resources, including virtual machine CPU utilization, and allows you to set up alerts to notify administrators when thresholds are exceeded.

Step-by-Step Solution

1
Identify the goal of the scenario.
The goal is to collect performance metrics (CPU utilization) of virtual machines and configure alerts when a threshold is met.
Understanding the requirement helps isolate the Azure service designed specifically for telemetry collection and alerting.
2
Evaluate the capabilities of the options against the goal.
Azure Monitor collects telemetry (metrics and logs) and supports alerting. Azure Service Health is for global Azure status. Azure Policy enforces compliance. Azure Resource Locks prevent deletion or modification.
This step distinguishes between management, governance, and monitoring services.

Key Concept

Azure Monitor and Log Analytics
Question 387Question →

A company has deployed several virtual machines in Azure. The IT team needs to monitor the performance of their virtual machines and also track global Azure service outages that might impact their deployment region. Which two of the following statements correctly describe how they should use Azure services for these tasks?

Select all that apply

Show answer & explanation

Answer: Use Azure Monitor to track performance metrics, such as CPU usage and memory utilization, of the virtual machines.; Use Azure Service Health to get notified about planned maintenance and outages affecting the Azure region where the virtual machines are located.

Answer

Use Azure Monitor to track performance metrics of the virtual machines, and use Azure Service Health to get notified about planned maintenance and outages affecting the Azure region.
The statements indicating the use of Azure Monitor for resource performance metrics and Azure Service Health for regional outages/maintenance are correct because they map to the respective designs of these services. Azure Monitor tracks your resources' health, whereas Azure Service Health tracks the cloud platform's global status.

Step-by-Step Solution

1
Determine the service needed for tracking resource-specific performance.
Azure Monitor collects and analyzes telemetry data (such as CPU and memory usage metrics) from your Azure virtual machines.
Azure Monitor is designed to track the performance and health of your own resources.
2
Determine the service needed for tracking global cloud health and region-wide events.
Azure Service Health notifies you of outages, planned maintenance, and health advisories affecting Azure services and regions.
Azure Service Health monitors the status of Azure infrastructure as a whole, rather than your specific virtual machine metrics.

Key Concept

Distinction between Azure Monitor and Azure Service Health
Question 388Question →

A development team wants to host a web application on Azure. Is the following statement true or false?

Azure App Service is limited to hosting applications deployed from source code or pre-compiled binaries, and it does not support the deployment of custom Docker container images.

Show answer & explanation

Answer: False

Answer

The statement is false because Azure App Service supports the deployment and hosting of custom Docker container images.
The statement is false because Azure App Service fully supports deploying and running custom Docker container images. Developers can use Web App for Containers to deploy containerized web apps, getting the benefits of a managed Platform as a Service (PaaS) without being restricted to source code deployments.

Step-by-Step Solution

1
Identify the hosting capabilities of Azure App Service.
Azure App Service supports deploying application code directly or packaging applications into Docker container images.
To determine if the service is restricted to code-only deployments.
2
Analyze the statement to see if it correctly represents this capability.
The statement claims that Azure App Service does not support custom Docker containers, which is incorrect.
To evaluate the truth value of the statement.

Key Concept

Azure App Service container deployment support
Question 389Question →

To query Azure service outage events and resource performance metrics within the same Log Analytics workspace using Kusto Query Language (KQL), you must configure Azure Service Health to send its activity logs to that workspace, as Azure Monitor does not automatically consolidate platform-wide service health incidents into resource-level log repositories.

Show answer & explanation

Answer: True

Answer

True
The statement is true because platform-level service health notifications (managed by Azure Service Health) are written to the Azure Activity Log, while resource-level performance metrics and logs are managed by Azure Monitor in their own repositories. These two streams do not automatically merge; they require the administrator to configure a diagnostic setting to route the Activity Log to the target Log Analytics workspace for unified KQL querying.

Step-by-Step Solution

1
Differentiate between the scopes of Azure Monitor and Azure Service Health.
Identify that Azure Monitor manages resource-specific performance metrics and logs, while Azure Service Health monitors platform-wide issues and outages.
Understanding the boundary between resource-level telemetry and platform-level health alerts is required to determine how their logs are collected.
2
Evaluate the requirement of querying both sources within the same Log Analytics workspace using KQL.
Recognize that a Log Analytics workspace can only execute KQL queries across data that has been successfully routed to it.
Since KQL operates within the workspace boundary, data must be consolidated into the workspace to be queried together.
3
Analyze how Azure Service Health events are logged and forwarded.
Determine that Service Health events populate the Azure Activity Log, which by default is stored separately from resource diagnostic logs and requires a Diagnostic Setting to stream to a Log Analytics workspace.
This confirms that manual configuration is mandatory to achieve log consolidation, making the statement true.

Key Concept

Integration of Azure Service Health and Azure Monitor Log Analytics
Question 390Question →

A development team wants to ensure that all their testing environments are deployed consistently across different Azure subscriptions. They decide to use Bicep templates to define the infrastructure. What is a key benefit of using this declarative approach for their deployments?

Show answer & explanation

Answer: They allow the team to define the desired end-state of the infrastructure, leaving Azure to determine how to deploy it.

Answer

They allow the team to define the desired end-state of the infrastructure, leaving Azure to determine how to deploy it.
Using declarative templates allows developers to specify what infrastructure they want (the desired end-state) rather than detailing the step-by-step instructions to create it. Azure Resource Manager handles the deployment logic, dependency ordering, and parallel execution automatically.

Step-by-Step Solution

1
Analyze the definition of a declarative approach in the context of infrastructure deployment.
A declarative approach defines 'what' the target environment should look like (the desired end-state) rather than 'how' to build it step-by-step.
This matches the core benefit and purpose of Bicep and ARM templates.
2
Evaluate the other options against Azure governance and architecture rules.
Eliminated options regarding step-by-step imperative scripting, nested resource groups, and forced location inheritance.
These options describe behaviors that are either incorrect or represent structural limitations in Azure.

Key Concept

Declarative infrastructure deployment using ARM templates and Bicep
Estimated Time:45s
Question 391Question →

An international shipping company operates local branch offices in several coastal cities. Each office needs to establish a secure, encrypted connection to a shared database hosted in an Azure Virtual Network. The solution must utilize the existing local internet connections at each office. Which Azure service should be deployed to meet these requirements?

Show answer & explanation

Answer: Azure VPN Gateway

Answer

Azure VPN Gateway
A VPN gateway is a specific type of virtual network gateway that is used to send encrypted traffic between an Azure virtual network and an on-premises location over the public internet. This perfectly aligns with the requirement to secure traffic using the offices' existing internet connections.

Step-by-Step Solution

1
Analyze the connectivity requirements of the scenario.
The offices need a secure, encrypted connection to Azure over the public internet using their existing local internet connections.
This determines the type of network path (public internet vs. private dedicated line) and security requirements (encryption).
2
Evaluate the capabilities of Azure networking services.
VPN Gateway sends encrypted traffic over the public internet, whereas ExpressRoute bypasses the public internet completely.
Identifying which service matches the public internet transport and encryption requirement.

Key Concept

Azure VPN Gateway provides secure, encrypted hybrid connectivity over the public internet, unlike ExpressRoute which uses a private, dedicated connection.
Estimated Time:1m 0s
Question 392Question →

An organization is deploying several Azure Virtual Machines (IaaS) and needs to select the appropriate storage solution for the operating system (OS) disks. Which Azure storage service is specifically designed for hosting virtual machine operating system disks?

Show answer & explanation

Answer: Azure Disk Storage, which provides persistent block-level volume storage for Azure Virtual Machines.

Answer

Azure Disk Storage, which provides persistent block-level volume storage for Azure Virtual Machines.
The correct answer is Azure Disk Storage because it provides block-level storage volumes designed to be attached to Azure Virtual Machines, which is required for hosting an operating system (OS) disk.

Step-by-Step Solution

1
Identify the workload requirement: hosting an operating system (OS) disk for an Azure Virtual Machine (IaaS).
The workload requires high-performance, persistent block-level storage that can be attached directly to a virtual machine.
An operating system disk requires low-latency read and write capabilities directly attached to the VM compute resource.
2
Evaluate the storage options based on the requirement.
Azure Disk Storage provides managed disks (block storage) specifically designed for VMs, while Azure Files is a shared file system (SMB/NFS) and Azure Blob Storage is object storage.
Only block storage (Disk Storage) can host the primary operating system virtual hard disk (VHD) for a virtual machine.

Key Concept

Azure Disk Storage is the block-level storage service designed for Azure Virtual Machines to run OS and data disks, whereas Azure Files provides file shares and Blob Storage offers object storage with different access tiers.
Estimated Time:45s
Question 393Question →

Your company needs to ensure that all newly created storage accounts have 'Secure transfer required' enabled to meet security compliance standards. Which Azure service should you use to enforce this configuration requirement across the subscription?

Show answer & explanation

Answer: Azure Policy

Answer

Azure Policy
Azure Policy is the correct service because it allows administrators to define and enforce rules for Azure resources. By using Azure Policy, you can automatically block the deployment of storage accounts that do not have 'Secure transfer required' enabled, or audit them for compliance.

Step-by-Step Solution

1
Identify the requirement
The requirement is to enforce a specific configuration ('Secure transfer required') on all newly created storage accounts across an Azure subscription.
This is a compliance and governance requirement targeting resource properties rather than user access.
2
Evaluate the capabilities of the available Azure management tools
Azure Policy enables the creation and enforcement of policies that mandate resource configurations. Azure RBAC controls access permissions, Resource Locks prevent deletion/modification, and Service Health tracks platform outages.
Selecting the service that specifically handles resource properties and configuration compliance is necessary.

Key Concept

Azure Policy is used to enforce resource properties, ensure compliance with corporate standards, and prevent non-compliant deployments.
Estimated Time:45s
Question 394Question →

A media company is planning to host a new streaming service on Azure. They want to estimate the potential monthly cost of Azure Content Delivery Network (CDN) and Azure Blob Storage based on the expected outbound data transfer volume before they deploy any resources. Which tool should they use to generate this cost estimate?

Show answer & explanation

Answer: Azure Pricing Calculator

Answer

Azure Pricing Calculator
The Azure Pricing Calculator is designed to estimate the costs of new services before they are deployed by allowing users to select and configure Azure resources (such as Azure CDN and Azure Blob Storage) and input expected usage parameters like outbound data transfer.

Step-by-Step Solution

1
Analyze the business requirement.
The company needs to estimate the monthly costs of new, cloud-native Azure services (CDN and Blob Storage) based on expected usage prior to deployment.
Understanding whether the scenario involves estimating new cloud resources or comparing on-premises migration costs determines the correct tool.
2
Select the appropriate Azure cost estimation tool.
The Azure Pricing Calculator is chosen because it allows users to model and configure specific Azure services and output estimated costs.
The Pricing Calculator is the standard pre-deployment tool for estimating the cost of individual Azure services.

Key Concept

Azure Pricing Calculator vs. TCO Calculator
Estimated Time:45s
Question 395Question →

An administrator wants to use Azure Cloud Shell to execute administrative scripts containing Azure PowerShell cmdlets. The administrator is working on a Chromebook that runs ChromeOS and does not support local software installations. Which of the following statements is true regarding this scenario?

Show answer & explanation

Answer: The administrator can run Azure PowerShell cmdlets in Azure Cloud Shell because it runs in a web browser and is independent of the local operating system.

Answer

The administrator can run Azure PowerShell cmdlets in Azure Cloud Shell because it runs in a web browser and is independent of the local operating system.
The correct option is correct because Azure Cloud Shell is a browser-accessible, cloud-hosted shell that does not rely on the local operating system or local software installations. It provides pre-installed tools for both Bash (Azure CLI) and PowerShell, allowing users to run Azure PowerShell cmdlets from any device with a modern web browser, including a Chromebook running ChromeOS.

Step-by-Step Solution

1
Identify the constraints of the client machine.
The administrator is using a Chromebook running ChromeOS, which does not support local installation of traditional Windows or Linux desktop applications.
To determine if local installation is possible or if a cloud-based solution is required.
2
Evaluate the requirements of Azure Cloud Shell.
Azure Cloud Shell is a browser-accessible shell hosted in the cloud, requiring only a modern web browser and an internet connection.
To confirm that the tool can run on a Chromebook.
3
Verify support for PowerShell cmdlets in Azure Cloud Shell.
Cloud Shell provides both Bash and PowerShell environments, using PowerShell Core on a Linux container to execute cmdlets.
To ensure that PowerShell cmdlets can be run without a Windows operating system.

Key Concept

Azure Cloud Shell accessibility and environment options
Question 396Question →

A company is planning to migrate a legacy Microsoft SQL Server database to Microsoft Azure. The database requires host-level access to the underlying operating system to run custom file-system scripts, and the database administrators must retain complete control over the schedule for applying operating system patches.

Which Azure database deployment option meets these requirements?

Show answer & explanation

Answer: SQL Server on Azure Virtual Machines

Answer

SQL Server on Azure Virtual Machines
SQL Server on Azure Virtual Machines is an Infrastructure as a Service (IaaS) offering. Under this model, Microsoft manages the physical infrastructure, while the customer is responsible for configuring the virtual machine, including the operating system, database software configurations, patching schedule, and custom scripts.

Step-by-Step Solution

1
Analyze the administrative requirements of the database workload.
The database needs host-level operating system access to run custom scripts and full control over the operating system patching schedule.
This determines whether a Platform as a Service (PaaS) or Infrastructure as a Service (IaaS) solution is required.
2
Evaluate the database services against the shared responsibility model.
PaaS databases like Azure SQL Database and Azure Database for PostgreSQL automate operating system management and restrict host-level access. SQL Server on Azure Virtual Machines (IaaS) leaves operating system configuration and patching control to the customer.
To satisfy the requirement of OS-level access and custom patching control, an IaaS deployment option must be chosen.

Key Concept

Shared responsibility and database deployment models in Azure
Estimated Time:1m 0s
Question 397Question →

A company wants to ensure that its infrastructure deployments are consistent and repeatable across different environments. Instead of writing step-by-step scripts that specify how to create each resource, the administrator wants to define the final configuration of the resources. Which feature of Azure Resource Manager (ARM) templates directly supports this deployment method?

Show answer & explanation

Answer: Declarative syntax, which defines the desired end-state configuration of the resources

Answer

Declarative syntax, which defines the desired end-state configuration of the resources
The correct answer is the option focusing on declarative syntax. Azure Resource Manager (ARM) templates and Bicep files use declarative syntax, meaning you describe the desired resources and their properties without specifying the exact programming commands or step-by-step sequence to create them.

Step-by-Step Solution

1
Analyze the scenario requirement
The scenario requires defining the final configuration (end-state) of resources rather than writing step-by-step scripts.
This requirement points directly to the core difference between declarative and imperative deployment models.
2
Identify the ARM template mechanism that enables this behavior
ARM templates use declarative syntax (JSON or Bicep) to specify what resources to create and their properties.
Declaring the final state instead of execution steps is the definition of declarative syntax.

Key Concept

ARM templates use declarative syntax to define the desired end-state of Azure infrastructure.
Question 398Question →

When deploying infrastructure using Azure Resource Manager (ARM) templates, you must specify the exact, step-by-step commands to create each resource in the correct order. Is this statement true or false?

Show answer & explanation

Answer: False

Answer

The statement is false because ARM templates are declarative configurations where Azure Resource Manager determines the orchestration and deployment steps automatically.
The correct answer is false because ARM templates utilize a declarative syntax, which allows you to define the desired end-state of your resources without needing to script the step-by-step commands or execution order.

Step-by-Step Solution

1
Identify the deployment model used by ARM templates (declarative vs. imperative).
ARM templates use declarative syntax.
This allows administrators to define what the final environment should look like rather than how to build it.
2
Evaluate if the user must specify the exact creation sequence and commands.
The user does not need to define step-by-step commands; Azure Resource Manager handles orchestration, dependency mapping, and parallel execution.
Since the engine automatically analyzes the template to determine dependencies, manual sequencing is not required.

Key Concept

Declarative vs. Imperative deployment models in Azure Resource Manager
Estimated Time:45s
Question 399Question →

A healthcare provider is deploying a new software system composed of multiple containerized services that communicate with each other. The system must support complex container orchestration tasks, including service discovery, automated load balancing, and coordinated rolling upgrades across all instances. The provider wants to use a managed platform where the orchestration control plane is automatically managed by Azure. Which Azure service is designed to meet these requirements?

Show answer & explanation

Answer: Azure Kubernetes Service (AKS)

Answer

Azure Kubernetes Service (AKS)
Azure Kubernetes Service is correct because it is a managed container orchestration service that handles the Kubernetes control plane while supporting advanced orchestration features such as service discovery, load balancing, and coordinated rolling upgrades across multiple container instances.

Step-by-Step Solution

1
Analyze the application requirements.
The application is composed of multiple containerized components that require orchestration capabilities, including service discovery, load balancing, and coordinated updates.
This helps determine if a basic hosting service or a container orchestrator is required.
2
Evaluate the management requirements.
The organization wants a managed service where Azure automatically handles the orchestration control plane, while they do not have to manage it manually.
This rules out raw infrastructure (IaaS) options like Azure Virtual Machines.
3
Select the service that matches both container orchestration and managed control plane requirements.
Azure Kubernetes Service (AKS) is a managed container orchestration platform that provides service discovery, load balancing, and coordinated upgrades.
Azure Container Instances is for isolated containers without orchestration, and Azure App Service is for web apps and APIs, making Azure Kubernetes Service the correct choice.

Key Concept

Azure Kubernetes Service provides managed container orchestration for complex multi-container architectures.
Question 400Question →

A digital publishing organization has recently migrated its multi-tier workloads to Microsoft Azure. An administrator wants to analyze the resource optimizations recommended by Azure Advisor to organize the operational tasks. Match each specific Azure Advisor recommendation on the left with its correct recommendation category on the right.

Click a left item, then click its matching right item

Items

Purchase Azure Reserved Virtual Machine Instances to optimize budget allocations.
Enable Azure Backup for critical virtual machines to prevent data loss.
Apply Microsoft Defender for Cloud recommendations to resolve public endpoint exposures.
Implement Autoscale settings on Virtual Machine Scale Sets to handle peak traffic load.

Matches

Show answer & explanation

Answer

Purchasing Azure Reserved Instances matches with Cost; Enabling Azure Backup matches with Reliability; Applying Microsoft Defender for Cloud recommendations matches with Security; Implementing Autoscale settings matches with Performance.
The correct pairings match each recommendation with the Azure Advisor pillar designed to address that specific aspect of cloud governance: optimizing spending maps to Cost; protecting VM data via backups maps to Reliability; securing public endpoints maps to Security; and configuring autoscale rules maps to Performance.

Step-by-Step Solution

1
Analyze the recommendation regarding Reserved Instances.
This recommendation focuses on reducing spending by committing to a one- or three-year plan, which aligns directly with the Cost category.
Azure Advisor groups cost-saving suggestions like right-sizing and reservations under the Cost pillar.
2
Analyze the recommendation to enable Azure Backup for virtual machines.
This recommendation aims to ensure business continuity and protect workloads against data loss, aligning with the Reliability category.
Reliability in Azure Advisor focuses on high availability, disaster recovery, and data protection.
3
Analyze the recommendation regarding public endpoint exposures and Defender for Cloud.
This recommendation addresses potential vulnerabilities and access controls, aligning with the Security category.
Azure Advisor integrates security postures and threat mitigation recommendations under the Security pillar.
4
Analyze the recommendation for autoscale settings.
Autoscale optimizes resource allocation to maintain speed and efficiency under load, aligning with the Performance category.
Performance recommendations in Azure Advisor ensure that resources are tuned for maximum responsiveness and throughput.

Key Concept

Azure Advisor Recommendation Categories
PreviousPage 20 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin