Examkin

All practice questions

1186 questions

All types1,186Multiple choice620Multiple select228True / False291Matching47
Question 501Question →

A financial services company needs to automate a security incident response process. When a high-risk login is detected, a workflow must orchestrate the following actions: retrieve user details from Azure Active Directory, block the user's account, create a support ticket in an external IT service management system, and send an email notification. The IT team wants to build this orchestration using a visual, designer-first tool with built-in connectors and minimal coding. Which Azure service should be recommended to host this workflow?

Show answer & explanation

Answer: Azure Logic Apps

Answer

Azure Logic Apps
Azure Logic Apps is correct because it is a serverless orchestration service that offers a visual designer and out-of-the-box connectors to integrate systems, satisfying the requirement to connect Azure Active Directory, email, and ticketing systems with minimal custom code.

Step-by-Step Solution

1
Analyze the business requirements for the automation.
The requirements specify an integration workflow that connects multiple systems (Azure Active Directory, external ticketing, email) and must be built visually with minimal coding.
This helps determine whether a code-first or designer-first serverless approach is appropriate.
2
Compare the primary serverless services in Azure.
Azure Functions is code-first, while Azure Logic Apps is designer-first and supports out-of-the-box connectors for third-party integrations.
Choosing the correct serverless service requires understanding the trade-off between code-first custom execution and designer-first workflow orchestration.
3
Identify the service matching the visual designer constraint.
Azure Logic Apps provides a visual designer interface and requires minimal custom code to connect multiple platforms.
Azure Logic Apps directly fulfills the designer-first and minimal code requirement.

Key Concept

Azure serverless services include Azure Functions (code-first) and Azure Logic Apps (designer-first workflow orchestration).
Question 502Question →

An organization wants to prevent users from deploying virtual machines of specific sizes within a production resource group. Additionally, the IT team wants to identify any existing virtual machines in that resource group that do not meet these size constraints without modifying them.

Which Azure feature or service should the organization use?

Show answer & explanation

Answer: Azure Policy, which blocks non-compliant resource deployments and reports compliance status for existing resources.

Answer

Azure Policy, which blocks non-compliant resource deployments and reports compliance status for existing resources.
The correct answer is Azure Policy, which blocks non-compliant resource deployments and reports compliance status for existing resources. Azure Policy is designed to enforce rules and compliance standards on resources, preventing deployments that violate those rules (such as VM sizes) while auditing existing resources to show compliance status without altering them.

Step-by-Step Solution

1
Identify the requirement to block deployments of virtual machines that do not meet specific size configurations.
This requires enforcing resource properties during creation, which is a key capability of Azure Policy (using a Deny effect).
Azure Policy is designed to evaluate resource properties during deployment to ensure alignment with defined rules.
2
Identify the requirement to audit existing virtual machines without altering them.
Azure Policy evaluates existing resources against newly assigned policies and marks non-compliant resources in its dashboard, leaving them intact.
This satisfies the compliance reporting requirement without causing disruptive changes to running infrastructure.
3
Differentiate between the roles of Azure Policy and Azure Role-Based Access Control (RBAC).
Azure RBAC manages user access permissions (who can manage a resource), whereas Azure Policy controls the properties of the resources (what properties are allowed).
This rules out RBAC-based solutions as they do not govern resource configuration details like VM sizes.

Key Concept

Azure Policy is used to enforce organizational standards, prevent the creation of non-compliant resources, and assess compliance of existing resources without modifying them.
Estimated Time:1m 0s
Question 503Question →

An organization is planning to optimize and estimate costs for different phases of their cloud journey. Match each business scenario to the most appropriate Azure cost tool.

Click a left item, then click its matching right item

Items

Estimating the cost savings of moving a VMware-based on-premises datacenter to Azure virtual machines.
Estimating the monthly runtime cost of a new multi-tier application using Azure App Service and Azure SQL Database before deployment.
Finding recommendations to resize underutilized Azure Virtual Machines in an active development environment.

Matches

Show answer & explanation

Answer

Match the scenario of estimating VMware migration savings to the Azure Total Cost of Ownership (TCO) Calculator; match the scenario of estimating monthly costs of a new App Service and SQL Database application before deployment to the Azure Pricing Calculator; and match the scenario of resizing underutilized Virtual Machines to Azure Advisor.
The matching aligns each scenario to its correct tool based on the lifecycle stage and data source. The Total Cost of Ownership (TCO) Calculator compares existing on-premises infrastructure costs to equivalent Azure services. The Azure Pricing Calculator estimates the costs of newly planned Azure services before deployment. Azure Advisor provides cost-saving recommendations for already running resources.

Step-by-Step Solution

1
Analyze the migration scenario which involves comparing existing on-premises infrastructure costs to equivalent Azure services.
Identify that comparing on-premises costs to Azure is the primary purpose of the Total Cost of Ownership (TCO) Calculator.
The TCO Calculator accepts details about servers, storage, databases, and bandwidth currently on-premises to output a cost comparison report.
2
Analyze the new application deployment scenario which requires estimating monthly consumption costs for cloud-native services.
Identify that estimating the cost of new configurations of Azure services prior to deployment is the primary purpose of the Azure Pricing Calculator.
The Azure Pricing Calculator allows users to select specific Azure services, configure their parameters (region, tier, size), and see an estimated monthly cost.
3
Analyze the optimization scenario for active resources in an existing Azure subscription.
Identify that Azure Advisor analyzes running resource usage telemetry to provide optimization recommendations, including cost savings.
Azure Advisor evaluates configuration and usage telemetry of active resources to suggest actions like shutting down or resizing underutilized VMs.

Key Concept

Azure cost estimation and optimization tools differ based on whether they evaluate on-premises migrations (TCO Calculator), new cloud service deployments (Pricing Calculator), or active resource configurations (Azure Advisor).
Question 504Question →

A company hosts a web application in Azure and wants to monitor its user experience and application behavior. Which two of the following tasks can be performed by using Application Insights?

Select all that apply

Show answer & explanation

Answer: Analyzing page load times and user response times; Detecting application exceptions and performance bottlenecks

Answer

The two correct tasks are analyzing page load times and user response times, and detecting application exceptions and performance bottlenecks.
Application Insights is designed to track how live applications perform. Key capabilities include analyzing page load times and user response times to evaluate user experience, and detecting exceptions and bottlenecks to resolve software errors.

Step-by-Step Solution

1
Determine the role of Application Insights.
Application Insights is an Application Performance Management (APM) feature within Azure Monitor.
This scope helps identify application-level telemetry tasks as correct.
2
Evaluate capabilities related to code execution and end-user performance.
Analyzing page load times and detecting software exceptions are classic application telemetry capabilities.
These relate directly to monitoring how the application performs and behaves.
3
Identify and exclude infrastructure status and governance tasks.
Monitoring global outages belongs to Azure Service Health, and policy compliance belongs to Azure Policy.
These are handled by other Azure services rather than application-level monitoring.

Key Concept

Azure Monitor Application Insights is a service designed to monitor live web applications and collect application telemetry, such as exception logs and user performance metrics.
Question 505Question →

An IT administrator needs to enforce multiple governance rules, such as restricting resource locations and requiring specific tags, across several Azure subscriptions. Can the administrator group these individual policy definitions into a single Azure Policy initiative and assign it at the management group level?

Show answer & explanation

Answer: True

Answer

Yes, the administrator can group the policy definitions into an initiative and assign it at the management group level.
Grouping multiple policy definitions into an initiative simplifies governance, and assigning the initiative at the management group scope ensures that it is inherited by all child subscriptions.

Step-by-Step Solution

1
Evaluate the need to group multiple policy definitions.
Confirm that an Azure Policy initiative is a collection of policy definitions that are grouped to achieve a specific goal.
Using an initiative reduces administration overhead compared to managing individual policy assignments.
2
Determine if the initiative can be applied at the management group level.
Verify that Azure Policy assignments support scopes including management groups, subscriptions, and resource groups.
Assigning at the management group level allows all nested subscriptions and resource groups to inherit the policy settings automatically.

Key Concept

Azure Policy Initiatives and Assignment Scopes
Question 506Question →

A company is planning to store data in Azure Storage and is comparing the Hot, Cool, and Archive access tiers to optimize costs. Which two of the following statements regarding these storage access tiers are correct?

Select all that apply

Show answer & explanation

Answer: The Hot access tier offers the lowest data retrieval and access costs but has the highest storage capacity costs.; The Archive access tier provides the lowest storage capacity costs but incurs the highest latency when retrieving data.

Answer

The statement that the Hot access tier offers the lowest retrieval costs but the highest storage costs, and the statement that the Archive access tier provides the lowest storage costs but the highest latency are both correct.
The Hot access tier is designed for active data, offering the lowest data access fees but charging the highest rate for storing data. The Archive access tier is designed for long-term retention of rarely accessed data, offering the lowest storage rates but requiring data to be rehydrated (a process taking several hours) before it can be read, which represents the highest latency.

Step-by-Step Solution

1
Analyze storage cost relationships among the tiers.
The Hot tier has the highest storage costs, while the Archive tier has the lowest storage costs.
Storage pricing is determined by how frequently data is expected to be read; active storage is priced higher than offline archival storage.
2
Analyze retrieval latency and access cost characteristics.
The Hot tier has the lowest access costs and instant retrieval. The Archive tier requires rehydration, causing several hours of latency.
Archive storage is offline to save hosting resources, meaning access requests take hours to complete (rehydrate).

Key Concept

Azure Storage Access Tiers (Hot, Cool, Archive)
Question 507Question →

An enterprise plans to deploy a mission-critical database workload across multiple subscriptions. The administration team needs a central interface to view and set up alerts for official communications from Microsoft regarding planned maintenance, service retirements, and active incidents that specifically impact the regions hosting their subscriptions. Which service should the team use to meet these requirements?

Show answer & explanation

Answer: Azure Service Health

Answer

Azure Service Health
Azure Service Health is the correct choice because it provides a personalized view of the health of the Azure services and regions used by your subscriptions. It allows you to configure alerts for active service issues, planned maintenance, and health advisories that directly impact your deployment.

Step-by-Step Solution

1
Identify the requirement of the scenario.
The team needs a tool to monitor platform-level events (planned maintenance, service retirements, and active incidents) that affect their specific subscriptions and regions.
This helps filter out irrelevant global Azure status updates and focus only on what impacts their workloads.
2
Evaluate the capabilities of the available options.
Azure Service Health specifically tracks platform-level health events mapped to the user's subscriptions and regions, while Azure Monitor tracks resource-level metrics/logs, Azure Advisor provides optimization recommendations, and Azure Resource Manager manages resource deployments.
Matching the features of each service ensures selection of the correct service designed for subscription-specific platform health tracking.

Key Concept

Azure Service Health provides a personalized dashboard and alerting mechanism for tracking platform-level issues, planned maintenance, and health advisories affecting your specific subscriptions and regions.
Question 508Question →

Which of the following describes the behavior of Azure resource tags in relation to billing and cost reporting?

Show answer & explanation

Answer: Tags can be used to group and filter billing data in Azure Cost Management, but they are not inherited by resources from their resource group.

Answer

Tags can be used to group and filter billing data in Azure Cost Management, but they are not inherited by resources from their resource group.
The correct option accurately states that tags are used for cost grouping and filtering in Azure Cost Management, and clarifies that tags are not inherited from a resource group by the resources within it.

Step-by-Step Solution

1
Analyze the role of tags in cost reporting.
Identify that tags serve as metadata to group and filter resources in billing and cost tools.
To understand how tags interact with Azure Cost Management.
2
Evaluate the inheritance behavior of tags in Azure.
Recall that tags applied at the resource group or subscription level do not flow down to individual resources.
To determine the correct application boundary of resource tags.

Key Concept

Azure Resource Tags and Cost Management
Question 509Question →

A financial services institution runs its core transaction processing system on-premises using twenty physical servers. The IT department needs to prepare a financial comparison report showing the cost savings of migrating these workloads to Azure over a five-year period, factoring in on-premises expenses such as physical hardware, electricity, and facilities maintenance. Which tool should the institution use to generate this comparison?

Show answer & explanation

Answer: Total Cost of Ownership (TCO) Calculator

Answer

Total Cost of Ownership (TCO) Calculator
The correct answer is the Total Cost of Ownership (TCO) Calculator. This tool is designed specifically to compare the costs of running an on-premises infrastructure against the costs of hosting equivalent workloads in the Azure cloud over a specified period. It models physical servers, storage arrays, network bandwidth, IT labor, and physical facility maintenance to demonstrate potential migration savings.

Step-by-Step Solution

1
Identify the primary objective of the scenario, which is to compare current on-premises running costs (server infrastructure, electricity, cooling, labor) with equivalent cloud deployment costs over a five-year timeline.
Recognized that the requirement involves a comparison of existing private infrastructure against prospective cloud hosting to calculate potential savings.
This establishes the baseline requirements for a Total Cost of Ownership (TCO) analysis rather than a simple configuration cost estimate.
2
Evaluate the capabilities of the available Azure estimation and cost management tools against the identified objective.
Determined that the Total Cost of Ownership (TCO) Calculator accepts inputs for current on-premises server, storage, network, and labor metrics to output a detailed multi-year comparison report, while the Pricing Calculator only estimates costs for new cloud architectures.
Analyzing tool functions helps select the tool that matches the requirement of evaluating on-premises to cloud cost comparisons.

Key Concept

Azure cost estimation tools comparison
Question 510Question →

Azure Service Health provides a public, global webpage that displays the health status of all Azure services across all geographic regions, even if you do not have resources deployed in those regions.

Show answer & explanation

Answer: False

Answer

The statement is false. The public, global webpage that displays the status of all Azure services across all regions is Azure Status, whereas Azure Service Health is personalized to your specific resources and subscriptions.
The statement is false because the public, global dashboard for all Azure services and regions is Azure Status. Azure Service Health is a personalized dashboard in the Azure Portal that requires logging in and only tracks resources and services active in your own subscriptions.

Step-by-Step Solution

1
Analyze the description in the statement to determine what type of service dashboard it describes.
The statement describes a public, global overview of all Azure services across all regions.
To classify the characteristics of the service being described.
2
Compare the description with the definition of Azure Service Health.
Azure Service Health is personalized and authenticated, showing only services and regions used by the specific subscriptions.
To verify if Azure Service Health matches the description in the statement.
3
Compare the description with the definition of Azure Status.
Azure Status is the public, global webpage that displays the health of all Azure services in all regions.
To identify the correct Azure service for the description provided.

Key Concept

Personalized health tracking via Azure Service Health vs. global health tracking via Azure Status
Question 511Question →

An organization is planning to use Azure Storage services for different workloads, including file sharing and long-term data backup. Which of the following statements are correct regarding Azure Storage services and access tiers? (Select two)

Select all that apply

Show answer & explanation

Answer: Azure Files supports sharing files using the industry-standard Server Message Block (SMB) protocol.; Data stored in the Archive access tier of a Blob storage account must be rehydrated to the Hot or Cool tier before it can be read.

Answer

Azure Files supports sharing files using the industry-standard Server Message Block (SMB) protocol, and data stored in the Archive access tier of a Blob storage account must be rehydrated to the Hot or Cool tier before it can be read.
The correct options are the statements regarding Azure Files and the Archive access tier. Azure Files provides serverless file shares that support the SMB protocol, making it suitable for standard file-sharing workloads. The Archive access tier is designed for rarely accessed data, storing it offline at a low cost, which necessitates rehydration to Hot or Cool before the data can be read.

Step-by-Step Solution

1
Evaluate the file sharing capabilities of Azure Storage.
Azure Files is identified as the native service that provides fully managed file shares using the SMB protocol.
To verify if the statement about Azure Files and SMB is correct.
2
Evaluate the characteristics and retrieval behavior of the Archive access tier.
The Archive access tier is offline and requires rehydration (transitioning to Hot or Cool) before data can be accessed, which introduces latency of several hours.
To identify correct data access workflows and rule out immediate access claims for Archive storage.
3
Analyze the IaaS responsibility model and disk capabilities.
In IaaS, disk management and optimization are the customer's responsibility, and Azure Disk Storage does not support Blob-style access tiers such as Archive.
To evaluate and eliminate the incorrect statement regarding automatic managed disk tiering by Microsoft.

Key Concept

Understanding the protocols supported by Azure Files and the accessibility/rehydration requirements of the Archive storage tier.
Question 512Question →

An administrator with the Owner role on an Azure subscription attempts to deploy a new virtual machine to the East US region. However, an Azure Policy definition with a Deny effect is assigned to the subscription, restricting all resource deployments to the West US region. What is the outcome of this deployment attempt?

Show answer & explanation

Answer: The deployment is blocked because Azure Policy restrictions are enforced regardless of the user's role-based access control (RBAC) privileges.

Answer

The deployment is blocked because Azure Policy restrictions are enforced regardless of the user's role-based access control (RBAC) privileges.
Azure Policy evaluations occur at the Azure Resource Manager level before any resource is created. A Deny policy blocks non-compliant deployment requests immediately, and this enforcement applies to all users, including those assigned the Owner role. RBAC roles determine who has access, but Azure Policy defines the compliance boundaries of the resources.

Step-by-Step Solution

1
Identify the assigned policy's effect and rules.
A policy with a Deny effect restricts deployments to the West US region.
This establishes that any deployment attempt to a different region (like East US) triggers a block unless bypassed.
2
Evaluate the relationship between the user's RBAC role and Azure Policy.
The user is a subscription Owner, but Azure Policy is applied at the resource deployment level, independent of RBAC.
RBAC determines what operations a user can initiate, but Azure Policy enforces properties of the resources being created.
3
Determine the final outcome of the deployment request.
The deployment request fails at the validation stage and is blocked.
Because the policy uses the Deny effect, the deployment is rejected before resource creation begins.

Key Concept

Interaction between Azure Policy and Role-Based Access Control (RBAC)
Question 513Question →

An organization is planning to deploy a multi-tier application in Azure and wants to estimate its monthly consumption costs. Determine if the following statement is true or false: The Azure Pricing Calculator can estimate the cost of these Azure resources, but it requires an active Azure subscription to access the tool and generate the estimate.

Show answer & explanation

Answer: False

Answer

The statement is false. The Azure Pricing Calculator is a free, publicly accessible web tool that does not require an active Azure subscription or login to estimate resource costs.
The statement is false because the Azure Pricing Calculator is a publicly accessible web tool that does not require an Azure subscription, account, or login to estimate resource costs.

Step-by-Step Solution

1
Identify the tool mentioned in the statement and its primary purpose.
The tool is the Azure Pricing Calculator, which is used to estimate the monthly consumption costs of Azure services before deployment.
This establishes whether the first part of the statement regarding cost estimation is correct.
2
Evaluate the access requirements of the Azure Pricing Calculator.
The Azure Pricing Calculator is a public web tool that is freely accessible to anyone via a web browser.
This determines whether an active Azure subscription or login is required to generate the estimate.
3
Combine the findings to determine the truth value of the entire statement.
Since the tool does not require an active subscription, the statement is false.
The statement incorrectly claims that an active subscription is required to access and use the calculator.

Key Concept

Public accessibility and usage of the Azure Pricing Calculator without requiring an Azure subscription.
Question 514Question →

A smart city logistics provider plans to automate package tracking. The provider needs a service to orchestrate tasks across multiple external APIs using a visual, drag-and-drop designer, and a separate service to run custom Java code that analyzes package weight data. To meet these requirements, the provider should use Azure Functions to orchestrate the workflow and Azure Logic Apps to run the custom Java code.

Show answer & explanation

Answer: False

Answer

The statement is false. Azure Logic Apps should be used to orchestrate the workflow using the visual designer, and Azure Functions should be used to run the custom Java code.

Step-by-Step Solution

1
Analyze the orchestration requirement.
The requirement calls for a visual, drag-and-drop designer to orchestrate tasks across APIs, which is the primary feature of Azure Logic Apps.
Identifying the correct service for workflow orchestration based on designer-first characteristics.
2
Analyze the custom code requirement.
The requirement calls for running custom Java code to analyze data, which is the primary feature of Azure Functions.
Identifying the correct service for code-first execution.
3
Compare the proposed solution in the statement with the identified services.
The statement suggests using Azure Functions for visual orchestration and Azure Logic Apps for custom Java code, which is the exact opposite of the correct service mapping.
Determining the truth value of the statement.

Key Concept

Azure Logic Apps is a designer-first workflow orchestration tool, whereas Azure Functions is a code-first serverless compute service.
Question 515Question →

A logistics company currently hosts its shipping tracking system on several Azure Virtual Machines (IaaS). To minimize the time spent on administrative tasks, the company plans to migrate the application to Azure App Service (PaaS).

Which of the following responsibilities shifts from the customer to Microsoft as a result of this migration?

Show answer & explanation

Answer: Updating and patching the host operating system and runtime environment

Answer

Updating and patching the host operating system and runtime environment
In an Infrastructure as a Service (IaaS) model, such as Azure Virtual Machines, the customer is responsible for maintaining, updating, and patching the operating system and any installed application runtimes. When transitioning to a Platform as a Service (PaaS) model, such as Azure App Service, Microsoft manages and patches the underlying operating system and runtime environment, shifting this administrative overhead away from the customer.

Step-by-Step Solution

1
Analyze the initial state (IaaS)
In IaaS (Azure Virtual Machines), the customer is responsible for the operating system, middleware, and runtime, while Microsoft manages physical security, virtualization, and physical networking.
To identify what shifts, we must first establish the baseline responsibilities in the source model.
2
Analyze the target state (PaaS)
In PaaS (Azure App Service), Microsoft manages the operating system, database engine (if applicable), and runtime, leaving the customer responsible for the application code and data.
We must establish the responsibilities in the destination model to determine the delta.
3
Identify the shifting responsibility
Operating system updates and runtime patching shift from the customer (IaaS) to Microsoft (PaaS). Physical security was already Microsoft's responsibility, and data/code remains the customer's responsibility.
By comparing the two sets of responsibilities, we isolate the specific task that changes owner during the migration.

Key Concept

Under the Shared Responsibility Model, migrating from IaaS to PaaS shifts the responsibility for maintaining the operating system and runtime environment from the customer to Microsoft. Physical security and host virtualization are always Microsoft's responsibility, while data and identities always remain the customer's responsibility.
Question 516Question →

A company currently hosts its custom collaboration portal and email system on several Azure Virtual Machines (IaaS). To minimize IT management effort, the company decides to migrate these services to Microsoft 365 (SaaS).

Which two of the following responsibilities will shift from being the responsibility of the customer to the responsibility of Microsoft as a result of this migration? (Select two.)

Select all that apply

Show answer & explanation

Answer: Patching and updating the operating system; Maintaining and updating the collaboration software application

Answer

The responsibilities that shift from the customer to Microsoft are patching and updating the operating system, and maintaining and updating the collaboration software application.
In an Infrastructure as a Service (IaaS) model, the customer is responsible for maintaining and patching the operating system and managing the installed applications. In a Software as a Service (SaaS) model like Microsoft 365, Microsoft takes full responsibility for the operating system and application management. Therefore, both patching and updating the operating system and maintaining and updating the collaboration software application shift from the customer to Microsoft.

Step-by-Step Solution

1
Identify the starting model (IaaS) and target model (SaaS) in the migration scenario.
The company starts with Infrastructure as a Service (Virtual Machines) and moves to Software as a Service (Microsoft 365).
Understanding the transition boundaries allows us to compare customer vs. Microsoft responsibilities under each model.
2
Analyze each responsibility area under IaaS and SaaS.
Operating system and application maintenance are customer responsibilities in IaaS, but become Microsoft's responsibility in SaaS. Physical security is always Microsoft's responsibility, and data security is always the customer's responsibility.
This determines which specific tasks shift ownership during the transition.

Key Concept

The Shared Responsibility Model defines which security tasks are handled by the cloud provider (Microsoft) and which tasks are handled by the customer, varying based on the service type (IaaS, PaaS, or SaaS).
Estimated Time:45s
Question 517Question →

An organization is deploying several virtual machines and storage accounts in Azure. The administrator needs to organize these resources for cost tracking and department-level billing. Which two statements correctly describe the behavior of Azure resource tags and Cost Management? (Select two.)

Select all that apply

Show answer & explanation

Answer: Tags applied to a resource group are not automatically inherited by the resources within that resource group.; Tags can be used to group billing data and categorize costs in Cost Analysis.

Answer

Tags applied to a resource group are not inherited by resources, and tags can be used to group and filter billing data in Cost Analysis.
Tags are metadata properties used to organize resources. They do not automatically inherit from resource groups or subscriptions to resources inside them. However, they can be utilized in Cost Analysis to group and filter billing data for reporting.

Step-by-Step Solution

1
Identify the behavior of tag inheritance across Azure scopes.
Tags do not inherit from resource groups or subscriptions to individual resources.
Understanding the inheritance boundary is key to planning tag strategies.
2
Analyze how tags interact with Cost Management and billing.
Tags act as metadata that Cost Analysis can use to filter and group costs.
Tags are primary tools for organizing cost reports by department or project.

Key Concept

Azure resource tags do not inherit down to resources, but are used in Cost Analysis to categorize and filter billing data.
Question 518Question →

A development team creates an Azure resource group and applies a tag named `Department` with a value of `Marketing` directly to the resource group. A developer then deploys a web app inside this resource group. What is the status of the `Department` tag on the newly deployed web app?

Show answer & explanation

Answer: The web app does not have the tag because Azure resources do not inherit tags applied to their resource group.

Answer

The web app does not have the tag because Azure resources do not inherit tags applied to their resource group.
The correct answer states that the web app does not have the tag because Azure resources do not inherit tags applied to their resource group. In Azure, tag inheritance is not automatic. While you can apply tags at the subscription or resource group level, these tags do not cascade down to the resources within them.

Step-by-Step Solution

1
Analyze the scope of the applied tag.
The tag is applied to the resource group, not the web app.
We need to determine if tag inheritance applies down to individual resources.
2
Determine Azure tag inheritance rules.
Azure resources do not automatically inherit tags from their parent resource groups or subscriptions.
This is a fundamental behavior of Azure Resource Manager governance.

Key Concept

Azure Resource Tag Inheritance
Question 519Question →

A company's cloud administrator needs to ensure that the IT operations team is automatically notified via email at least seven days before Microsoft performs scheduled maintenance on the physical infrastructure hosting their Azure virtual machines. The notifications must only target resources in the subscriptions managed by the team. Which Azure service or feature should the administrator use to configure these alerts?

Show answer & explanation

Answer: Azure Service Health

Answer

Azure Service Health
Azure Service Health provides a personalized dashboard and alerting mechanism for tracking issues, planned maintenance, and health advisories that affect resources in your specific Azure subscriptions. It allows you to configure Service Health alerts to notify you via email, SMS, or webhooks before planned maintenance events occur.

Step-by-Step Solution

1
Analyze the requirement to configure proactive, subscription-specific notifications for scheduled infrastructure maintenance.
Determine that the required solution must track Microsoft-scheduled physical maintenance affecting specific subscriptions and support automated alerts.
This helps filter out services that monitor guest operating system performance or general best practice recommendations.
2
Differentiate between global status tracking and personalized subscription tracking.
Recognize that global dashboards like Azure Status do not offer subscription filtering or direct alerting capabilities.
Azure Status is a public-facing website for overall cloud status, whereas the requirement is subscription-specific.
3
Select the tool designed for personalized platform events and alerting.
Identify Azure Service Health as the service that integrates planned maintenance events with active subscription resource metadata and supports alert configuration.
Azure Service Health provides a personalized view of health events and allows setting up Service Health alerts using Action Groups (such as email notifications).

Key Concept

Azure Service Health provides personalized alerts and status updates for planned maintenance, service issues, and health advisories affecting specific subscriptions.
Estimated Time:1m 0s
Question 520Question →

An administrator needs to write an automation script that will run locally on macOS, Linux, and Windows workstations to create and manage Azure resources. The script must utilize command-line syntax with the `az` prefix (such as `az group create`) and output results in JSON format.

Which tool should be installed on the local workstations to execute this script?

Show answer & explanation

Answer: Azure CLI

Answer

Azure CLI
The correct answer is Azure CLI. Azure CLI is a cross-platform command-line tool that runs locally on Windows, macOS, and Linux. It uses the 'az' command prefix (such as 'az group create') and outputs JSON formatted text by default, which aligns perfectly with all the requirements in the scenario.

Step-by-Step Solution

1
Identify the environment and syntax requirements.
The workstations run multiple operating systems (macOS, Linux, and Windows), requiring a cross-platform tool. The syntax uses the 'az' prefix (e.g., 'az group create') and outputs JSON.
Matching these requirements helps filter out tools that do not support this specific command structure, output format, or local installation mode.
2
Compare the features of Azure CLI and Azure PowerShell.
Azure CLI is cross-platform, uses the 'az' command structure, and outputs JSON by default. Azure PowerShell is also cross-platform but uses verb-noun cmdlets (e.g., 'New-AzResourceGroup') and outputs objects.
This step distinguishes between the two primary command-line options based on command syntax and output format.
3
Evaluate the requirement for local installation.
Both Azure CLI and Azure PowerShell can be installed locally. Azure Cloud Shell is browser-based and not installed locally. The Azure Portal is a web-based graphical interface.
This step confirms that the selected tool satisfies the installation constraints.

Key Concept

Azure CLI is a cross-platform command-line tool that uses commands starting with the 'az' prefix and outputs JSON by default, making it suitable for scripting across Windows, macOS, and Linux environments.
PreviousPage 26 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin