All practice questions

1186 questions

Question 461Question

A company is migrating an on-premises application that stores user profiles in MongoDB to Microsoft Azure. They need a fully managed database service that natively supports the MongoDB API, allowing them to keep their existing database queries and client drivers with minimal configuration. Which Azure database service should the company select?

Show answer & explanation

Answer: Azure Cosmos DB

Answer

Azure Cosmos DB
The correct database service is Azure Cosmos DB because it is a fully managed NoSQL database service that supports multiple APIs, including the MongoDB API. This enables seamless migration of MongoDB workloads without changing the application's queries or database driver configurations.

Step-by-Step Solution

1
Identify the primary database type and compatibility requirement.
The requirement calls for NoSQL MongoDB API compatibility to reuse existing queries and client drivers.
This narrows the choice to Azure database services supporting non-relational MongoDB protocols.
2
Evaluate the management level required.
The solution must be a fully managed database service.
This rules out Infrastructure as a Service (IaaS) options like SQL Server on Azure Virtual Machines, where the OS and database updates must be managed manually.
3
Select the service that offers both NoSQL multi-API support and full management.
Azure Cosmos DB provides a fully managed NoSQL multi-model database engine that offers MongoDB API compatibility.
This service perfectly satisfies both the NoSQL API requirement and the fully managed service criteria.

Key Concept

Azure Cosmos DB NoSQL Multi-Model APIs
Question 462Question

An organization wants to estimate the monthly consumption costs of a brand-new cloud-native application before deployment. Is it true that they should use the Azure Total Cost of Ownership (TCO) Calculator for this estimate?

Show answer & explanation

Answer: False

Answer

The statement is false.
The statement is false because the Azure Pricing Calculator is the correct tool to estimate costs for new Azure services. The TCO Calculator requires an on-premises infrastructure baseline to calculate potential savings from migration.

Step-by-Step Solution

1
Analyze the requirement in the scenario.
The requirement is to estimate the monthly consumption costs of a brand-new cloud-native application before deployment.
Understanding the goal helps match the correct Azure cost tool.
2
Evaluate the capabilities of the Azure Total Cost of Ownership (TCO) Calculator.
The TCO Calculator is designed to compare the cost of running on-premises infrastructure against equivalent Azure services to estimate migration savings over time.
This determines if the TCO Calculator is suitable for a new application with no on-premises footprint.
3
Evaluate the capabilities of the Azure Pricing Calculator.
The Pricing Calculator estimates the costs of individual Azure services and architectures for new deployments, without requiring an on-premises baseline.
This identifies the correct tool for the scenario.

Key Concept

Distinguishing between the Azure Pricing Calculator and the Azure Total Cost of Ownership (TCO) Calculator.
Question 463Question

A company stores media files in Azure Blob Storage. The files are accessed frequently for the first 30 days. After 30 days, the files are rarely accessed but must remain online and available for immediate download. Which solution should the company implement to minimize storage costs after 30 days?

Show answer & explanation

Answer: Transition the blobs to the Cool access tier using an Azure Storage lifecycle management policy.

Answer

Transition the blobs to the Cool access tier using an Azure Storage lifecycle management policy.
The correct option is to transition the blobs to the Cool access tier using an Azure Storage lifecycle management policy. The Cool tier is designed for data that is infrequently accessed but must remain immediately available online. A lifecycle management policy can automate this transition after 30 days, reducing storage costs without affecting application availability.

Step-by-Step Solution

1
Analyze the requirements for data availability and frequency of access.
The files need to be accessed frequently for 30 days (Hot tier), then infrequently but must remain online and available for immediate download (Cool tier).
This establishes that the Archive tier is not suitable because it takes hours to rehydrate and is offline.
2
Evaluate the cost-effective storage services and features that support automated tiering.
Azure Storage lifecycle management allows defining rules to automatically transition blobs to colder tiers (such as Cool) based on the age of the blob.
This automates the transition to minimize costs without manual intervention.

Key Concept

Azure Blob Storage access tiers and lifecycle management
Question 464Question

An administrator needs to perform an urgent, one-time restart of an Azure virtual machine while traveling. The only device available is a personal smartphone with a cellular connection, and the administrator cannot install any local command-line interfaces or shell modules.

Which of the following is the most appropriate management tool to complete this task?

Show answer & explanation

Answer: The Azure Portal accessed via a web browser or the Azure Mobile App

Answer

The Azure Portal accessed via a web browser or the Azure Mobile App
The Azure Portal, accessed via a mobile web browser or the official Azure Mobile App, provides an interactive graphical interface designed for quick, one-time management tasks such as restarting a virtual machine. It requires no local software or command-line module installations on the device, making it highly suitable for mobile and remote access.

Step-by-Step Solution

1
Analyze the requirements of the scenario.
The task is a one-time VM restart, it must be done from a smartphone, and no local command-line tools can be installed.
Identifying the device constraints and task type narrows down the compatible tools.
2
Evaluate the compatibility of the command-line tools.
Azure CLI and Azure PowerShell require local installation of command-line tools or modules, which is not supported on standard smartphone operating systems.
Eliminating tools that require unsupported local OS execution prevents selecting incorrect options.
3
Evaluate the web-based and graphical management tools.
The Azure Portal and the Azure Mobile App are fully compatible with web browsers and mobile platforms, providing interactive VM management.
Confirming the portal's support for mobile web and app access guarantees it meets the scenario constraints.

Key Concept

Azure Portal and Mobile App accessibility for interactive, one-time management tasks
Estimated Time:1m 0s
Question 465Question

Can you use Azure Cost Management to analyze historical resource costs and forecast future cloud spending?

Show answer & explanation

Answer: True

Answer

True
Azure Cost Management is designed to both analyze past spending and forecast future costs, allowing administrators to plan budgets effectively.

Step-by-Step Solution

1
Evaluate if Azure Cost Management tracks historical costs.
Yes, Azure Cost Management tracks and displays historical consumption and billing data.
To verify historical analysis support.
2
Evaluate if Azure Cost Management provides forecasting.
Yes, Azure Cost Management uses historical data trends to forecast future spending.
To verify predictive analysis support.

Key Concept

Azure Cost Management functionality
Question 466Question

A company hosts a web application on Azure Virtual Machines. The company needs to track the performance metrics of the virtual machines, such as CPU and memory usage, and also monitor the web application to detect and diagnose performance anomalies. Which two features or services should they use to meet these requirements? (Select two.)

Select all that apply

Show answer & explanation

Answer: Azure Monitor Metrics; Application Insights

Answer

Azure Monitor Metrics and Application Insights
Azure Monitor Metrics and Application Insights are the appropriate choices. Azure Monitor Metrics collects and logs numerical performance data such as CPU and memory usage from virtual machines. Application Insights is an application performance management service that monitors live web applications to help detect and diagnose issues.

Step-by-Step Solution

1
Identify the resource-level monitoring requirement.
Azure Monitor Metrics is the correct feature to track performance data like CPU and memory utilization for Azure Virtual Machines.
It collects numerical time-series performance data directly from virtual machines.
2
Identify the application-level monitoring requirement.
Application Insights is the correct service component to diagnose and detect anomalies within the live web application.
It monitors application performance and behavior, tracking requests, response times, and failure rates.

Key Concept

Azure Monitor features for resources and application monitoring
Question 467Question

A logistics enterprise deploys multiple virtual machines into an Azure resource group that has specific cost-center tags applied. The IT department expects these virtual machines to inherit the tags from the resource group. Additionally, the department needs to review recommendations on how to optimize virtual machine sizing to reduce costs. Which statement correctly describes the tag inheritance behavior and identifies the tool that provides the sizing recommendations?

Show answer & explanation

Answer: The virtual machines do not inherit the tags from the resource group, and the company should use Azure Advisor to obtain the sizing recommendations.

Answer

The virtual machines do not inherit the tags from the resource group, and the company should use Azure Advisor to obtain the sizing recommendations.
The correct option stating that resources do not inherit tags and that Azure Advisor should be used is correct because tag inheritance is not automatic in Azure, and Azure Advisor is the dedicated tool for providing best practice recommendations, including cost-saving right-sizing suggestions for virtual machines.

Step-by-Step Solution

1
Determine the resource tag inheritance behavior in Azure.
Confirm that tags applied to a resource group are not inherited by the resources inside that resource group.
By default, Azure resources do not inherit tags from their parent resource group; tags must be applied directly or enforced via Azure Policy.
2
Identify the Azure management tool that provides optimization and sizing recommendations.
Azure Advisor provides cost recommendations, specifically pointing out underutilized virtual machines that can be resized or shut down.
Azure Advisor analyzes resource configuration and usage telemetry to recommend solutions that improve efficiency, security, reliability, performance, and cost-effectiveness.

Key Concept

Resource tag inheritance rules and Azure Advisor cost recommendations
Question 468Question

An organization is planning to use Azure tags and budget alerts to manage and categorize its cloud resources. Which of the following statements correctly describe the behavior of resource tags and budgets in Azure? (Select two)

Select all that apply

Show answer & explanation

Answer: Resources do not automatically inherit tags that are applied to their parent resource group.; Azure Cost Management budgets can trigger email notifications to administrators when spending exceeds a predefined threshold.

Answer

The correct statements are that resources do not automatically inherit tags applied to their parent resource group, and Azure Cost Management budgets can trigger email notifications when spending exceeds a predefined threshold.
The statements stating that resources do not automatically inherit tags applied to their parent resource group and that Azure Cost Management budgets can trigger email notifications when spending exceeds a predefined threshold are correct. In Azure, tag inheritance is not automatic, and budget alerts are standard mechanisms to notify administrators about spending thresholds.

Step-by-Step Solution

1
Evaluate the behavior of tag inheritance between resource groups and individual resources.
Confirm that tags applied to a resource group do not inherit down to resources inside it.
Azure governance rules dictate that resource tags are not automatically inherited from resource groups.
2
Evaluate the purpose and functionality of Azure budgets and alerts.
Confirm that budgets can trigger alerts and send emails based on percentage thresholds of spending.
This is a native feature of Azure Cost Management designed to prevent budget overruns.

Key Concept

Azure resource tags do not inherit automatically, and Azure Cost Management budgets support email alerts based on cost thresholds.
Estimated Time:1m 0s
Question 469Question

An organization is reviewing its Azure cloud deployment using Azure Advisor. The IT department wants to focus on improving service uptime and disaster recovery readiness, while also minimizing unnecessary cloud spend. Which of the following recommendations are provided by Azure Advisor under either the Reliability or Cost categories? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Right-size or shut down underutilized virtual machines to lower subscription spend.; Enable Azure Backup on virtual machines to protect application data from corruption or accidental loss.

Answer

The recommendations to right-size or shut down underutilized virtual machines, and to enable Azure Backup on virtual machines.
Azure Advisor provides Cost recommendations such as right-sizing or shutting down underutilized virtual machines to optimize spend. It also provides Reliability recommendations such as enabling Azure Backup to ensure data protection and resiliency. Both are key pillars of Azure Advisor.

Step-by-Step Solution

1
Identify the target Azure Advisor categories from the scenario.
The target categories are Reliability (uptime/disaster recovery) and Cost (minimizing spend).
The scenario highlights a need for optimizing service uptime and minimizing cloud costs.
2
Evaluate the options against Azure Advisor's native recommendation pillars.
Right-sizing underutilized VMs falls under the Cost pillar, and enabling Azure Backup falls under the Reliability pillar.
These map directly to the defined capability categories of Azure Advisor.
3
Differentiate Advisor recommendations from other Azure governance and health tools.
Azure Policy restricts resource properties but does not manage budgets, and Azure Service Health tracks outage events without orchestrating VM failovers.
This rules out the incorrect management and monitoring capabilities presented in the distractors.

Key Concept

Azure Advisor recommendation categories and tool boundaries
Question 470Question

An administrator assigns an Azure Policy definition to an Azure subscription. The policy is configured to deny the deployment of virtual machines that do not have a tag named 'Department'. At the time of assignment, the subscription already contains several virtual machines that do not have this tag. What will happen to the existing virtual machines after the policy is assigned?

Show answer & explanation

Answer: The existing virtual machines continue to run without interruption but are flagged as non-compliant in the compliance dashboard.

Answer

The existing virtual machines continue to run without interruption but are flagged as non-compliant in the compliance dashboard.
The correct answer is correct because Azure Policy is designed to evaluate compliance. When a policy is assigned, any pre-existing resources that violate the policy are not deleted, stopped, or altered; instead, they are simply flagged as non-compliant in the compliance dashboard so administrators can address them manually.

Step-by-Step Solution

1
Analyze the scope and target of the Azure Policy assignment.
The policy is assigned to the subscription to deny new virtual machines without the 'Department' tag.
Understanding the policy's rule helps identify its primary target (new resource deployments).
2
Determine the impact of the policy on existing resources that do not meet the criteria.
Existing resources are evaluated during the policy compliance scan but are not modified, stopped, or deleted.
Azure Policy is non-destructive for existing resources; it only reports their compliance state.
3
Identify the correct outcome for the virtual machines currently in the subscription.
The virtual machines will continue running normally and will be flagged as non-compliant in the Azure Policy compliance reports.
This matches the evaluation behavior of Azure Policy.

Key Concept

Azure Policy compliance evaluation behavior on existing resources
Estimated Time:1m 0s
Question 471Question

An IT administrator needs to monitor the performance metrics of a specific Azure virtual machine, such as disk write operations per second, to ensure it meets workload demands. Which Azure service should the administrator use to collect and analyze these resource-specific metrics?

Show answer & explanation

Answer: Azure Monitor

Answer

Azure Monitor
Azure Monitor is the native Azure service designed to collect, analyze, and act on telemetry data from your cloud and on-premises environments. It collects numeric performance metrics, such as disk write operations per second, CPU utilization, and memory usage from resources like Azure Virtual Machines.

Step-by-Step Solution

1
Identify the goal of the IT administrator.
The goal is to monitor resource-specific performance metrics (disk write operations per second) of a specific Azure virtual machine.
Understanding the monitoring scope (resource-specific performance vs. platform-wide status) helps select the correct service.
2
Compare the capabilities of Azure Monitor and the alternative services.
Azure Monitor collects telemetry such as metrics and logs from specific resources, while Azure Service Health provides status updates on the Azure platform itself.
This highlights why Azure Monitor is correct and why Azure Service Health is a common distractor.

Key Concept

Azure Monitor is used for collecting and analyzing performance telemetry from specific Azure resources.
Estimated Time:45s
Question 472Question

An organization hosts a web application in an Azure virtual network in the East US region, and a database workload in another Azure virtual network in the West US region. The organization needs to allow the web application to securely communicate with the database. The solution must ensure that the traffic routes directly over the Microsoft backbone network without traversing the public internet, and it must not require the deployment of virtual network gateways. Which network connectivity feature should the organization implement?

Show answer & explanation

Answer: Virtual network peering, which connects the virtual networks directly using the Microsoft backbone network

Answer

Virtual network peering, which connects the virtual networks directly using the Microsoft backbone network
Virtual network peering is the correct choice because it enables direct, low-latency communication between Azure virtual networks across different regions. The traffic is routed over Microsoft's private backbone network rather than the public internet, and it does not require virtual network gateways, meeting all criteria.

Step-by-Step Solution

1
Analyze the networking requirements: connect two virtual networks in different Azure regions securely, keep traffic on Microsoft's private network, and avoid virtual network gateways.
Identify that the solution must support Azure-to-Azure connectivity without requiring a gateway.
Knowing the constraints helps eliminate hybrid connectivity options that require gateways.
2
Evaluate virtual network peering against the identified requirements.
Virtual network peering connects virtual networks directly over Microsoft's backbone network without gateways.
This directly satisfies the requirement for secure, gateway-free, and high-performance routing.

Key Concept

Azure Virtual Network Peering
Question 473Question

An organization is evaluating several Microsoft Azure tools to manage, optimize, and estimate costs. Match each business scenario to the most appropriate Azure tool. What is the correct tool mapping for each scenario?

Click a left item, then click its matching right item

Items

Estimating the potential cost savings of migrating physical server infrastructure and storage area networks from a local datacenter to Azure.
Estimating the monthly consumption costs of a planned deployment consisting of four Azure App Service plans and an Azure SQL Database.
Analyzing current Azure expenditures, setting up monthly budget alerts, and tracking spending across multiple subscriptions.
Receiving proactive recommendations to reduce monthly costs by identifying and resizing underutilized virtual machines.

Matches

Show answer & explanation

Answer

Migrating physical servers and storage area networks to Azure matches Azure Total Cost of Ownership (TCO) Calculator; estimating consumption for planned App Services and SQL Database matches Azure Pricing Calculator; analyzing current spend and setting budget alerts matches Azure Cost Management and Billing; receiving recommendations for underutilized virtual machines matches Azure Advisor.
The correct matches align each business requirement to the specific service designed for it: the TCO Calculator evaluates migration savings; the Pricing Calculator estimates monthly costs for future cloud configurations; Azure Cost Management handles budgeting and monitoring of existing spend; and Azure Advisor suggests cost-reduction optimizations on active resources.

Step-by-Step Solution

1
Analyze the core requirements of each business scenario to determine whether the objective is pre-migration comparison, pre-deployment estimation, active spending control, or active resource optimization.
Scenario 1 focuses on comparing local physical infrastructure costs to Azure. Scenario 2 focuses on estimating costs for a future cloud architecture. Scenario 3 involves tracking active spending. Scenario 4 involves optimizing active resources.
This establishes the logical boundaries between pre-migration, pre-deployment, and post-deployment operations.
2
Match each operational objective to the specific tool built for that lifecycle phase.
Pre-migration comparison maps to the TCO Calculator. Pre-deployment estimation maps to the Pricing Calculator. Active spending control maps to Azure Cost Management. Active resource optimization maps to Azure Advisor.
Matching the lifecycle phase of the workloads with the correct tool capabilities yields the correct associations.

Key Concept

Distinguishing between Azure cost estimation, cost management, and cost optimization tools.
Estimated Time:1m 30s
Question 474Question

An online retail company wants to build an automated order confirmation system. When a customer places an order, the system must trigger a workflow that sends an email via SendGrid, writes a record to a database, and posts a message to a Teams channel. The company wants to implement this solution with a serverless, designer-first orchestration tool that uses pre-built connectors and requires no custom development for the workflow sequence. Which Azure service is the most suitable for this requirement?

Show answer & explanation

Answer: Azure Logic Apps

Answer

Azure Logic Apps is the correct service because it provides a visual designer and pre-built connectors to orchestrate workflows without requiring custom development.
Azure Logic Apps is a serverless, designer-first orchestration service that provides a visual designer and pre-built connectors to integrate apps, data, and systems without writing custom orchestration code. This aligns perfectly with the requirement for a designer-first workflow requiring no custom development.

Step-by-Step Solution

1
Analyze the requirements of the workflow.
The scenario requires an orchestration service to trigger actions based on an event, using a designer-first approach with pre-built connectors and no custom coding.
This determines the serverless category (code-first vs designer-first).
2
Evaluate the visual layout and code requirement.
Since no custom code is required for the flow and pre-built connectors are preferred, a visual design engine is needed.
Azure Functions is code-first and lacks a visual orchestrator for this layout, whereas Azure Logic Apps is designed exactly for this.
3
Exclude non-serverless and SaaS options.
Azure Virtual Machines are IaaS (not serverless) and Microsoft 365 is SaaS (not an application integration platform).
Eliminating options that do not match the cloud service model definition confirms the target PaaS/serverless resource.

Key Concept

Azure Logic Apps vs Azure Functions serverless compute models
Estimated Time:1m 0s
Question 475Question

An administrator is reviewing the storage options and access tiers in Azure.

Which two of the following statements correctly describe the characteristics of Azure Blob Storage access tiers? (Select two.)

Select all that apply

Show answer & explanation

Answer: The Hot access tier is optimized for storing data that is accessed or written frequently.; The Archive access tier offers the lowest storage costs but requires data to be rehydrated to an online tier before it can be read.

Answer

The correct statements are that the Hot access tier is optimized for storing data that is accessed or written frequently, and the Archive access tier offers the lowest storage costs but requires data to be rehydrated to an online tier before it can be read.
The correct statements are that the Hot access tier is designed for frequently accessed data and the Archive access tier requires data to be rehydrated to an online tier (Hot or Cool) before it can be read. The Hot tier has higher storage costs but lower access fees, which aligns with active data workloads. The Archive tier stores data offline at the lowest storage cost, but its data is not immediately readable until it undergoes rehydration.

Step-by-Step Solution

1
Analyze the requirements for active vs. inactive data.
Identify that the Hot access tier is designed for active, frequently accessed data, while the Archive access tier is designed for rarely accessed data that can tolerate retrieval latency.
Understanding the design goals of each storage tier is necessary to identify correct descriptions of their access patterns.
2
Evaluate the access requirements and characteristics of the Cool and Archive tiers.
Confirm that the Cool tier is an online tier allowing immediate access (no rehydration needed), and the Archive tier is offline and requires rehydration before data can be read.
Differentiating online tiers (Hot, Cool) from offline tiers (Archive) helps rule out incorrect claims about rehydration requirements.
3
Compare Blob Storage tiers with VM Disk storage requirements.
Recognize that virtual machine OS disks require high-performance, low-latency persistent Disk Storage (IaaS), not offline Blob Storage tiers.
Distinguishing between block storage (Managed Disks) and object storage (Blob Storage) prevents misapplying storage tiers to VM OS disks.

Key Concept

Azure Blob Storage access tiers (Hot, Cool, Archive)
Question 476Question

An administrator uses Azure Cloud Shell to perform management tasks. During a session, the administrator saves a script file in the `/tmp` directory of the Cloud Shell environment. The administrator asserts that this script file will still be available in the `/tmp` directory when they launch a new Cloud Shell session the following day. Is this assertion true?

Show answer & explanation

Answer: False

Answer

The assertion is false because Azure Cloud Shell only persists files saved within the mounted home directory, while files saved in other directories like `/tmp` are deleted when the session container is recycled.
The correct answer is false. Azure Cloud Shell runs on a temporary container that is destroyed when the session ends. Only the user's home directory ($HOME) is persisted via a mounted Azure Files share. Files written to any other directory, including `/tmp`, do not persist across sessions.

Step-by-Step Solution

1
Determine how Azure Cloud Shell provides persistence across sessions.
Cloud Shell utilizes an Azure Files share to persist files, specifically mounting it to the user's home directory ($HOME).
To identify the boundary of persistent storage in the Cloud Shell environment.
2
Evaluate the file location specified in the scenario.
The file was saved in the `/tmp` directory, which is outside of the persistent home directory ($HOME).
To verify whether the saved file resides inside or outside the persistent storage mount.
3
Determine the lifecycle of the Cloud Shell session container.
Cloud Shell containers are temporary and recycled upon session termination, resetting all non-persisted directories.
To conclude that the script in `/tmp` will be deleted once the container is destroyed.

Key Concept

Azure Cloud Shell container lifecycle and file persistence limitations
Question 477Question

An administrator applies a tag named `CostCenter` with a value of `12345` to an Azure resource group named `RG-App`. If a developer creates a new Azure App Service plan within `RG-App`, which tag is automatically inherited by the new App Service plan?

Show answer & explanation

Answer: No tags are automatically inherited.

Answer

No tags are automatically inherited.
The correct answer is that no tags are automatically inherited. In Azure, tags applied to a resource group or subscription are not inherited by the resources they contain. If you need tags to be inherited, you must configure a policy using Azure Policy to copy tags from resource groups to resources.

Step-by-Step Solution

1
Analyze the action performed on the resource group.
The resource group has a CostCenter tag applied.
To identify the source tag that might potentially inherit.
2
Determine Azure's default behavior for tag inheritance.
Azure resources do not automatically inherit tags from their parent resource group.
To evaluate if the new App Service plan will receive the tag automatically.

Key Concept

Azure resource tags do not support inheritance from resource groups.
Estimated Time:45s
Question 478Question

To enforce data transit encryption, a security team assigns a policy definition requiring secure transfer (HTTPS) to a resource group. At the time of assignment, the resource group already contains several storage accounts that do not have HTTPS enabled. Is the statement that the policy will automatically alter or delete these existing, non-compliant storage accounts to enforce the rule true or false?

Show answer & explanation

Answer: False

Answer

False
The correct answer is false because Azure Policy evaluates pre-existing resources against newly assigned policies and marks them as non-compliant in the compliance dashboard. It does not automatically delete or modify them to enforce compliance.

Step-by-Step Solution

1
Analyze how Azure Policy evaluates existing resources after a new policy is assigned.
Azure Policy scans existing resources during its standard evaluation cycle (typically within 30 minutes of assignment, and then every 24 hours).
To identify compliance state without interrupting existing workloads.
2
Determine the action taken on non-compliant existing resources.
Existing resources that violate the policy are flagged as non-compliant in the Azure Policy dashboard, but they are not deleted, stopped, or automatically modified.
Azure Policy prevents non-compliant resources from being created or updated when using the Deny effect, but it does not destructively modify or remove resources that were already deployed before the policy was put in place.

Key Concept

Azure Policy compliance evaluation for existing resources
Estimated Time:45s
Question 479Question

An administrator wants to deploy several Azure virtual machines and storage accounts. Instead of using the Azure portal to create each resource manually, they decide to use Azure Bicep. Which benefit does this approach provide?

Show answer & explanation

Answer: It allows the administrator to define the desired state of the resources in a declarative template that can be repeatedly deployed.

Answer

It allows the administrator to define the desired state of the resources in a declarative template that can be repeatedly deployed.
Azure Bicep allows you to declare the desired end state of your infrastructure. Azure Resource Manager then handles the deployment, ensuring that resources are created consistently and can be repeatedly deployed across environments.

Step-by-Step Solution

1
Identify the primary deployment mechanism being used (Azure Bicep).
Azure Bicep is a declarative syntax language used to define Azure infrastructure.
This helps determine that we are looking for a benefit related to declarative infrastructure as code.
2
Evaluate the choices to find which one describes a valid capability of Bicep and Azure Resource Manager.
Defining the desired state in a declarative template for repeatable deployment is the core benefit.
The other options describe features that are either not supported by Azure (nesting resource groups), not required (matching resource and group locations), or represent imperative scripting rather than declarative templates.

Key Concept

Declarative infrastructure deployment using Azure Bicep and ARM templates
Question 480Question

Traffic between peered virtual networks in Azure is routed through the public internet if the virtual networks are located in different Azure regions.

Show answer & explanation

Answer: False

Answer

The statement is false.
Global virtual network peering routes all network traffic privately through Microsoft's backbone network without traversing the public internet.

Step-by-Step Solution

1
Identify the type of connection and its configuration in the statement.
The statement describes virtual network peering between networks in different Azure regions (global virtual network peering).
Understanding the specific networking feature helps determine its data routing path.
2
Determine the routing path of global virtual network peering.
Traffic between peered virtual networks always remains private and travels over the Microsoft backbone network, never traversing the public internet.
This private routing is a core security and performance guarantee of virtual network peering.

Key Concept

Routing behavior of global Azure Virtual Network peering
PreviousPage 24 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin