All practice questions

1186 questions

Question 421Question

A company is migrating its operations to Azure. The operations team consists of Windows administrators who prefer using PowerShell, and Linux administrators who prefer using Bash and Azure CLI. Both groups want to write and execute scripts locally from their own workstations. Which statement is true regarding the local installation of these command-line tools?

Show answer & explanation

Answer: Both Azure CLI and Azure PowerShell can be installed locally on both Windows and Linux operating systems.

Answer

Both Azure CLI and Azure PowerShell can be installed locally on both Windows and Linux operating systems.
Both Azure CLI and Azure PowerShell are fully cross-platform tools. Azure CLI can be installed locally on Windows, macOS, and Linux. Similarly, Azure PowerShell is built on PowerShell Core, which is cross-platform, allowing it to be installed and run locally on Windows, macOS, and Linux.

Step-by-Step Solution

1
Analyze the operating system requirements of the operations team, which includes both Windows and Linux environments.
Identify that the solution must accommodate local command-line execution for both Windows and Linux users.
This establishes the environment constraints for the choice of tools.
2
Evaluate the cross-platform capabilities of Azure CLI and Azure PowerShell.
Confirm that Azure CLI is cross-platform (supporting Windows, macOS, Linux) and Azure PowerShell (built on PowerShell Core) is also cross-platform (supporting Windows, macOS, Linux).
This determines which tool configurations are supported locally on the team's workstation operating systems.

Key Concept

Cross-platform compatibility of Azure command-line tools
Question 422Question

An agricultural technology company aggregates telemetry data from remote IoT sensors on a local on-premises server. The company needs to establish a secure connection from this server to an Azure Virtual Network to upload the data. The solution must be cost-effective, encrypt all data in transit, and utilize the company's existing public internet connection. Which Azure service is best suited to meet these requirements?

Show answer & explanation

Answer: Azure VPN Gateway

Answer

Azure VPN Gateway
Azure VPN Gateway is the correct choice because it establishes an encrypted tunnel over the public internet (Site-to-Site VPN) between the on-premises network and the Azure Virtual Network, providing a secure and cost-effective connection.

Step-by-Step Solution

1
Analyze the requirements from the scenario: on-premises to Azure hybrid connection, secure (encrypted), low-cost/cost-effective, and utilizing the existing public internet.
Identify that the solution must route encrypted traffic over the public internet rather than a private dedicated line.
Understanding the constraints is necessary to eliminate options that use private lines or do not connect on-premises environments.
2
Evaluate Azure VPN Gateway against the requirements.
VPN Gateway supports Site-to-Site VPN connections which encrypt data in transit and run over the public internet, making it the most cost-effective match.
Validating the correct service ensures the scenario requirements are fully met.

Key Concept

Hybrid network connectivity using Azure VPN Gateway
Question 423Question

An organization wants to implement governance controls across their cloud environment. Is the following statement regarding the assignment scope of Azure Policy true or false?

Azure Policy definitions can be assigned at the management group, subscription, or resource group level.

Show answer & explanation

Answer: True

Answer

The statement is true because Azure Policy can be assigned at various scope levels such as management groups, subscriptions, or resource groups to enforce compliance.
The statement is correct because Azure Policy is designed to enforce standards and assess compliance at scale, which is achieved by assigning policy definitions at the management group, subscription, or resource group level.

Step-by-Step Solution

1
Identify the organizational hierarchy levels supported by Azure Policy for assignment.
Azure Policy supports assignment at the management group, subscription, and resource group levels.
To determine the valid scopes for policy enforcement.
2
Evaluate the statement against the identified scopes.
The statement correctly lists management group, subscription, and resource group as valid assignment scopes.
To verify the truth value of the statement.

Key Concept

Azure Policy assignment scope
Question 424Question

An organization runs its customer portal on several Azure Virtual Machines within a production environment, alongside a development environment. The IT team wants to optimize their cloud spend and ensure the application remains resilient. They decide to check Azure Advisor to identify potential improvements for these environments. Which of the following recommendations can Azure Advisor provide for this setup? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Buy Azure Reserved Virtual Machine Instances to optimize compute costs for virtual machines running continuously; Enable virtual machine backups to ensure data resiliency and protection against accidental deletion

Answer

Azure Advisor can recommend purchasing Azure Reserved Virtual Machine Instances to optimize compute costs for continuously running VMs, and enabling virtual machine backups to protect against data loss.
Azure Advisor provides optimization recommendations across specific categories. Purchasing Azure Reserved Virtual Machine Instances directly supports the Cost category by reducing running costs for continuous workloads. Enabling virtual machine backups supports the Reliability category by protecting data and ensuring application resiliency.

Step-by-Step Solution

1
Analyze the organization's requirements for cost optimization and application resiliency within the scope of Azure Advisor.
Identify that Azure Advisor provides recommendations across five pillars: Cost, Security, Reliability, Performance, and Operational Excellence.
This establishes which categories of recommendations are relevant to the organization's goals.
2
Evaluate the options against the five pillars of Azure Advisor and identify tool boundaries.
Purchasing reserved instances falls under the Cost pillar, and enabling virtual machine backups falls under the Reliability pillar. Managing resource policy enforcement and tracking global service health belong to Azure Policy and Azure Service Health respectively.
This isolates the correct capabilities of Azure Advisor from other Azure governance and monitoring tools.

Key Concept

Azure Advisor provides personalized recommendations to optimize Azure deployments across cost, security, reliability, performance, and operational excellence.
Question 425Question

You are managing costs in Azure and want to prevent unexpected charges. If you configure a budget in Azure Cost Management with a limit of $500, will Azure automatically shut down or delete your running virtual machines once this budget threshold is reached?

Show answer & explanation

Answer: False

Answer

False
Azure Cost Management budgets serve as a monitoring and alerting mechanism rather than a hard governance boundary. When a budget threshold is reached, only alerts are triggered, and resources continue to run and accumulate costs.

Step-by-Step Solution

1
Analyze the function of Azure Cost Management budgets.
Budgets are designed to compare actual or forecasted costs against a defined limit and send notifications when thresholds are crossed.
Understanding the primary purpose of budgets helps clarify that they are monitoring tools, not enforcement tools.
2
Determine if there is any default automated resource lifecycle action (like shutdown or deletion) triggered by reaching 100% of a budget.
No, Azure does not automatically stop or delete resources by default because this could disrupt production environments.
Differentiating between built-in alerting behavior and custom automation options is key to answering the question.

Key Concept

Azure Cost Management budgets generate alerts and notifications but do not automatically restrict resource consumption or delete assets by default.
Question 426Question

A logistics company hosts a real-time delivery tracking system on Azure. The engineering team must address three distinct monitoring objectives:

1. Analyze historical event logs from multiple Azure resources over the past 30 days using Kusto Query Language (KQL).
2. Trace code-level performance bottlenecks and exceptions inside the running API application.
3. Verify if Microsoft is experiencing any active datacenter outages or planning updates that could impact their deployment region.

Which combination of Azure features should the team use for each objective?

Show answer & explanation

Answer: Objective 1: Log Analytics; Objective 2: Application Insights; Objective 3: Azure Service Health

Answer

Objective 1: Log Analytics; Objective 2: Application Insights; Objective 3: Azure Service Health
The correct option maps Log Analytics to Objective 1 because KQL queries are executed against logs stored in a Log Analytics workspace. It maps Application Insights to Objective 2 because it is the primary application performance monitoring tool that intercepts code-level errors. It maps Azure Service Health to Objective 3 because it tracks Azure service availability and outages across regions.

Step-by-Step Solution

1
Determine which feature allows KQL querying of logs.
Log Analytics Workspace is identified as the central repository where KQL is used to query historical logs.
Log Analytics is the primary analytical engine for Azure Monitor logs.
2
Determine which feature traces application performance and exceptions at the code level.
Application Insights is identified as the application performance management (APM) service.
Application Insights monitors live web applications to trace exceptions, dependencies, and performance bottlenecks.
3
Determine which feature tracks Azure platform outages and planned maintenance.
Azure Service Health is identified.
Azure Service Health provides personalized alerts and guidance when Azure service issues affect your subscriptions.

Key Concept

Distinguishing the capabilities of Azure Monitor (Log Analytics and Application Insights) from Azure Service Health
Estimated Time:2m 0s
Question 427Question

An administrator is preparing to deploy an Azure Virtual Machine using an Azure Resource Manager (ARM) template. The destination resource group is located in the West US region. Which of the following describes the region constraint for the virtual machine being deployed?

Show answer & explanation

Answer: The virtual machine can be deployed to any supported Azure region, regardless of the resource group's location.

Answer

The virtual machine can be deployed to any supported Azure region, regardless of the resource group's location.
The correct option is that the virtual machine can be deployed to any supported Azure region, regardless of the resource group's location. The resource group's location determines where its metadata is stored, but the individual resources within that group can reside in other supported Azure regions.

Step-by-Step Solution

1
Analyze the relationship between resource locations and resource group locations in Azure.
The resource group location is used for storing metadata, not for restricting resource locations.
This establishes that the resource group's location does not restrict the location of the resources it contains.
2
Evaluate the template deployment capability.
An ARM template allows specifying different target regions for resources within the same template.
This allows resources to be deployed globally while being managed within a single resource group.

Key Concept

Azure Resource Manager resource group boundaries and resource locations
Estimated Time:45s
Question 428Question

Azure Policy helps enforce organizational standards and assess compliance at-scale. Is the statement that Azure Policy can be used to prevent the deployment of resources that do not comply with your security standards true or false?

Show answer & explanation

Answer: True

Answer

True
Azure Policy allows organizations to define rules for their resources. If a resource configuration does not match the policy criteria, Azure Policy can actively block its creation or modification using the 'Deny' effect. This ensures that non-compliant resources are not deployed into the environment.

Step-by-Step Solution

1
Identify the primary purpose of Azure Policy.
Azure Policy is a governance service that evaluates Azure resources to ensure they comply with corporate standards and service level agreements.
Understanding the scope of Azure Policy helps determine what enforcement capabilities it possesses.
2
Determine if Azure Policy has active enforcement capabilities.
Azure Policy supports various effects, including the 'Deny' effect, which prevents the creation or modification of resources that violate the defined policy rules.
This check confirms that the service can actively block non-compliant resources rather than just monitoring them.

Key Concept

Azure Policy enforcement capabilities
Question 429Question

A developer is designing a retail application in Microsoft Azure. They want to use Azure Cosmos DB to store customer profiles as documents and product relationships as a graph. Is the following statement true? A single Azure Cosmos DB account can be configured to simultaneously enable both the API for NoSQL (document) and the API for Gremlin (graph) to access the same underlying database.

Show answer & explanation

Answer: False

Answer

The statement is false because an Azure Cosmos DB account is restricted to a single API model selected at creation.
The correct response is that the statement is false. Azure Cosmos DB accounts are bound to a single API model selected at the time of resource creation. Therefore, to support both the API for Gremlin and the API for NoSQL, separate Azure Cosmos DB accounts must be deployed.

Step-by-Step Solution

1
Identify the data models and APIs required for the application.
The application requires document storage (API for NoSQL) and graph storage (API for Gremlin).
To evaluate if both APIs can be hosted within a single Azure Cosmos DB account.
2
Analyze Azure Cosmos DB account configuration limitations regarding APIs.
An Azure Cosmos DB account is configured for only one API at creation time, which cannot be changed or combined with other APIs.
This determines that multiple APIs cannot be used simultaneously within the same account.

Key Concept

Azure Cosmos DB single API constraint per account
Question 430Question

A company has an Azure environment with an active subscription named Enterprise-Sub. Inside this subscription, there is a resource group named App-RG, which contains an Azure App Service plan and an Azure SQL database.

Taylor is assigned the built-in Contributor role at the Enterprise-Sub subscription level.

Which of the following actions can Taylor perform within the App-RG resource group due to role inheritance? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Create a new Web App under the App Service plan in App-RG.; Delete the Azure SQL database inside App-RG.

Answer

Taylor can create a new Web App under the App Service plan in App-RG, and delete the Azure SQL database inside App-RG.
Due to Azure RBAC inheritance, the Contributor role assigned at the subscription scope propagates down to all resource groups and resources under that subscription. Therefore, Taylor inherits Contributor rights in App-RG. The Contributor role allows full management of resources, including creating new resources (like a Web App) and deleting existing resources (like a SQL database).

Step-by-Step Solution

1
Determine the effect of role assignment at the subscription level on child resources.
Taylor inherits the Contributor role permissions for the App-RG resource group and all resources within it (the App Service plan and the SQL database) because resource permissions propagate down the hierarchy.
Azure RBAC permissions assigned at a higher scope (Subscription) are inherited by all child scopes (Resource Groups and Resources) by default.
2
Identify the capabilities granted by the Contributor role.
Taylor can perform resource management operations, such as creating, deleting, and modifying resources, but cannot assign roles to other users or manage policies.
The built-in Contributor role grants full access to manage all resources but does not allow assigning roles in Azure RBAC or managing Azure Policies.
3
Evaluate which of the options fall under the allowed resource management actions and which fall under restricted management or policy actions.
Creating a Web App and deleting a SQL database are allowed resource management actions. Creating Azure Policy assignments or expecting policy to retroactively delete resources are policy-related and incorrect.
This step distinguishes between Azure RBAC resource management and Azure Policy governance.

Key Concept

Azure RBAC inheritance and the capabilities of the built-in Contributor role compared to Azure Policy.
Question 431Question

Azure Cloud Shell provides both Bash and PowerShell environments, and the Azure CLI is available for use in both of these environments.

Show answer & explanation

Answer: True

Answer

The statement is true because the Azure CLI is pre-installed and available in both the Bash and PowerShell environments of Azure Cloud Shell.

Step-by-Step Solution

1
Identify the shell environments offered by Azure Cloud Shell.
Azure Cloud Shell provides both Bash and PowerShell environments.
To understand the available user environments.
2
Determine if the Azure CLI ('az') tool is available within both environments.
The Azure CLI is globally installed in the underlying container and can be invoked from both Bash and PowerShell.
To verify tool compatibility across the environments.

Key Concept

Azure Cloud Shell environment tool availability
Question 432Question

An administrator is planning an Azure Storage deployment and needs to identify the characteristics of different storage options and tiers. Which two of the following statements are correct?

Select all that apply

Show answer & explanation

Answer: Azure Files provides fully managed file shares in the cloud that can be accessed using the industry-standard Server Message Block (SMB) protocol.; Data stored in the Archive access tier of Azure Blob Storage must be rehydrated to a Hot or Cool tier before it can be read.

Answer

Azure Files provides fully managed file shares accessible via SMB, and data in the Archive access tier must be rehydrated to Hot or Cool before it can be read.
The option stating that Azure Files provides fully managed file shares via the SMB protocol is correct because SMB is the standard protocol for sharing files that Azure Files implements natively. The option stating that data in the Archive tier must be rehydrated is correct because the Archive tier is offline and requires rehydration to an online tier (Hot or Cool) before the data can be read.

Step-by-Step Solution

1
Evaluate the statement regarding Azure Files protocol support.
The statement is correct because Azure Files supports standard file sharing protocols such as Server Message Block (SMB).
This is a fundamental feature of Azure Files, enabling it to replace or supplement on-premises file servers.
2
Evaluate the statement regarding Archive tier access requirements.
The statement is correct because the Archive tier is offline and requires rehydration.
Data in the Archive tier cannot be accessed directly; it must be copied or moved to Hot or Cool storage (rehydrated) before reading.
3
Evaluate the statement about immediate access to the Archive tier.
The statement is incorrect because Archive storage is offline and has retrieval latency of several hours.
Immediate millisecond-level access is only available in online tiers like Hot and Cool.
4
Evaluate the statement about Azure Disk Storage OS patching.
The statement is incorrect because OS management on VM disks is a customer responsibility in IaaS.
Under the shared responsibility model, IaaS resources place the guest operating system maintenance on the customer, not Microsoft.

Key Concept

Azure Storage services (Files, Disks) and Blob Storage access tiers (Archive) characteristics
Estimated Time:1m 0s
Question 433Question

Your team is hosting a web application on Azure. You want to track the performance of the underlying virtual machines by measuring memory consumption, and you want to receive an automated notification if the consumption exceeds a specific threshold. Which service should you use to meet these requirements?

Show answer & explanation

Answer: Azure Monitor

Answer

Azure Monitor
Azure Monitor is the core service designed to collect, analyze, and act on telemetry from your cloud and on-premises environments. It tracks resource performance metrics, such as memory consumption, and allows you to set up alert rules to trigger automated notifications when these metrics cross specified thresholds.

Step-by-Step Solution

1
Identify the target monitoring requirement.
The requirement is to collect performance telemetry (memory consumption) from individual resources (virtual machines) and configure automated notifications (alerts) based on those metrics.
This establishes whether the focus is on resource-level metrics or global service health.
2
Select the Azure service designed for resource telemetry and alerting.
Azure Monitor is the primary service for collecting, analyzing, and acting on telemetry from Azure and on-premises environments, including configuring metric alerts.
Matching the requirements to the correct service capabilities.

Key Concept

Azure Monitor is used to collect resource-level performance metrics and set up alerts.
Estimated Time:45s
Question 434Question

Your team plans to automate Azure resource deployments using scripts that contain Azure PowerShell cmdlets. The team members use local workstations running Windows, macOS, and Linux. You need to ensure that all team members can execute these scripts locally from their workstations. Which tool should they install on their local machines?

Show answer & explanation

Answer: Azure PowerShell

Answer

Azure PowerShell
Azure PowerShell is the correct answer because it is a cross-platform command-line tool that can be installed locally on Windows, macOS, and Linux. Since the scripts contain Azure PowerShell cmdlets, the team must install Azure PowerShell to run them locally.

Step-by-Step Solution

1
Analyze the script requirements.
The scripts contain Azure PowerShell cmdlets, which require a PowerShell environment to run.
Choosing the correct tool requires matching the command syntax used in the scripts.
2
Evaluate the execution environment requirements.
The scripts must be executed locally on workstations running Windows, macOS, and Linux.
This rules out web-hosted options like Azure Cloud Shell or Azure Portal.
3
Determine tool compatibility.
Azure PowerShell is cross-platform and supports local installation on Windows, macOS, and Linux.
Modern Azure PowerShell is built on PowerShell Core, allowing it to run locally on all three major operating systems.

Key Concept

Cross-platform local execution of Azure PowerShell cmdlets on Windows, macOS, and Linux
Question 435Question

A company stores rarely accessed backup files in the Archive access tier of Azure Blob Storage. An administrator needs to retrieve one of these files to restore a database. Which action must be performed before the administrator can read the data in the file?

Show answer & explanation

Answer: Rehydrate the blob by copying it to a Hot or Cool tier, or by changing its tier configuration.

Answer

Rehydrate the blob by copying it to a Hot or Cool tier, or by changing its tier configuration.
The correct answer is correct because the Archive tier is an offline storage tier. In order to read the data, the blob must first be rehydrated to an active online tier (such as Hot or Cool) either by changing its tier or by copying it to a new blob in an online tier.

Step-by-Step Solution

1
Identify the current access tier of the backup file.
The file is stored in the Archive access tier.
The Archive tier is an offline tier optimized for rarely accessed data.
2
Determine the requirement for accessing offline storage data.
The data must be brought online (rehydrated) to be read.
Direct read access is not supported on offline Archive blobs.
3
Select the correct rehydration method.
Change the tier of the blob to Hot or Cool, or copy the blob to a new blob in an online tier.
This transitions the blob back to an active state, allowing read operations.

Key Concept

Azure Storage Archive access tier requires rehydration to an online tier (Hot or Cool) before data can be read or accessed.
Question 436Question

An organization hosts a multi-region web application on Azure Virtual Machines. The operations team wants to identify opportunities to reduce monthly expenses by shutting down underutilized resources, and they also require recommendations on how to improve the reliability of their database servers. Which Azure service provides a centralized dashboard with recommendations across both cost optimization and reliability?

Show answer & explanation

Answer: Azure Advisor

Answer

Azure Advisor
Azure Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. It analyzes your resource configuration and usage telemetry and then recommends solutions to improve the cost-effectiveness, performance, reliability, security, and operational excellence of your Azure resources. Specifically, it can recommend shutting down or resizing underutilized virtual machines to save costs and configuring high availability for databases to enhance reliability.

Step-by-Step Solution

1
Analyze the requirements of the organization.
The organization needs recommendations for cost optimization (reducing expenses on underutilized resources) and reliability (improving high availability of database servers).
Understanding the target pillars helps narrow down the appropriate Azure management tool.
2
Evaluate the capabilities of the available Azure tools against the requirements.
Azure Advisor evaluates resources and provides optimization recommendations across Cost and Reliability pillars. Other tools like Azure Policy, Azure Monitor, and Microsoft Defender for Cloud do not provide this combined set of proactive optimizations.
Differentiating between the operational boundaries of Azure management tools ensures selecting the tool that provides the specific recommendations.

Key Concept

Azure Advisor provides personalized recommendations across five pillars (Cost, Security, Reliability, Performance, and Operational Excellence) to optimize Azure deployments.
Question 437Question

An organization needs to guarantee that all newly created storage accounts in their Azure subscription are restricted to a specific list of allowed locations. Which Azure service should be used to enforce this compliance requirement?

Show answer & explanation

Answer: Azure Policy

Answer

Azure Policy
Azure Policy evaluates resources in Azure by comparing their properties to business rules defined in policy definitions. The built-in 'Allowed locations' policy definition can be assigned to a subscription or resource group to prevent the deployment of resources, such as storage accounts, in unauthorized regions.

Step-by-Step Solution

1
Identify the core goal of the requirement
The requirement is to enforce a resource properties constraint (allowed geographic locations) during resource creation.
This distinguishes it from identity permissions, deletion safety, or metadata tagging.
2
Select the governance service that evaluates resource configurations
Azure Policy analyzes resource properties against compliance definitions (like 'Allowed locations') and can deny non-compliant deployments.
This directly fulfills the requirement to prevent creation of out-of-region resources.

Key Concept

Azure Policy is used to enforce rules, standards, and compliance over Azure resources at creation or evaluation time.
Question 438Question

An Azure administrator applies a billing tag to an Azure resource group named RG-Finance. What effect does this tag have on the individual resources located inside RG-Finance?

Show answer & explanation

Answer: The tag is applied only to the resource group itself and is not inherited by the resources.

Answer

The tag is applied only to the resource group itself and is not inherited by the resources.
Applying a tag to an Azure resource group applies that tag only to the resource group itself. The resources inside that group do not automatically inherit the tag. If you need tags on the resources for cost reporting, you must apply them directly to those resources or use Azure Policy to enforce tag application.

Step-by-Step Solution

1
Identify the scope of the tag application.
The tag is applied directly to the resource group named RG-Finance.
This establishes where the metadata is originally configured.
2
Evaluate Azure's tag inheritance rules for resource groups.
Confirm that Azure does not support automatic propagation of resource group tags to the resources contained within.
This determines whether the child resources will have the tag applied automatically.

Key Concept

Azure resource tags do not inherit down from a resource group to individual resources.
Estimated Time:45s
Question 439Question

To connect an on-premises datacenter to an Azure Virtual Network over a private connection that does not traverse the public internet, you must implement an Azure VPN Gateway.

Show answer & explanation

Answer: False

Answer

False
The correct answer is False because Azure VPN Gateway uses the public internet to transport encrypted traffic, whereas the requirement specified a path that does not traverse the public internet.

Step-by-Step Solution

1
Analyze the networking requirements in the statement.
The requirement is to establish a connection between an on-premises environment and Azure that does not traverse the public internet.
This sets the criteria for evaluating the appropriate Azure networking service.
2
Compare the routing paths of Azure VPN Gateway and Azure ExpressRoute.
VPN Gateway encrypts traffic but sends it over the public internet, whereas ExpressRoute uses a dedicated private peering connection that bypasses the public internet.
This differentiates the transmission mediums of the two hybrid connectivity options.
3
Evaluate the truth value of the statement.
Since the statement claims a VPN Gateway must be used for a path that does not traverse the public internet, the statement is false.
ExpressRoute, not VPN Gateway, is the service that satisfies this requirement.

Key Concept

Azure hybrid networking options differ in how they route traffic: VPN Gateway routes encrypted traffic over the public internet, while ExpressRoute uses private peering to bypass the public internet.
Question 440Question

A research institute wants to host a web application that processes environmental data. The web application is written in Python, does not use containers, and needs to run in a managed environment where Microsoft automatically handles host OS-level security updates and patches.

Is the following statement true or false?

Azure Kubernetes Service (AKS) is the most suitable service for this scenario because it allows you to deploy raw Python application code directly while automatically managing OS-level patching for the cluster hosts.

Show answer & explanation

Answer: False

Answer

The statement is false because Azure Kubernetes Service (AKS) requires applications to be containerized and does not support direct deployment of uncontainerized code. Additionally, AKS requires managing cluster nodes, whereas Azure App Service allows direct code deployment with fully managed host OS patching.
The statement is false because Azure Kubernetes Service (AKS) is specifically designed for containerized applications and cannot host raw, uncontainerized code directly. To deploy code directly without containerization while Microsoft handles OS patching, Azure App Service must be used.

Step-by-Step Solution

1
Analyze the hosting requirements of the scenario.
The application is written in Python, is not containerized, and requires a platform where Microsoft manages operating system-level patching.
Understanding these requirements helps narrow down which Azure compute service fits best.
2
Evaluate the capabilities of Azure Kubernetes Service (AKS) against these requirements.
AKS is a container orchestration service. It requires applications to be packaged as container images and does not support deploying raw Python code directly. While it manages Kubernetes control plane patching, the customer retains responsibility for upgrading cluster node operating systems.
This shows why the statement's claim that AKS is the most suitable service is incorrect.
3
Identify the correct Azure service for direct code deployment with fully managed OS patching.
Azure App Service is a Platform as a Service (PaaS) offering that allows developers to deploy raw code (including Python, PHP, and .NET) directly. It automatically handles the underlying OS-level security patching and maintenance.
This confirms that Azure App Service, not AKS, is the correct solution for this specific scenario.

Key Concept

Choosing the appropriate Azure compute service (Azure Container Instances, Azure Kubernetes Service, or Azure App Service) based on containerization requirements and management overhead.
Estimated Time:1m 30s
PreviousPage 22 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin