All practice questions

1186 questions

Question 601Question

A company is migrating its operations to Azure and deploying three different workloads: legacy applications on Azure Virtual Machines (IaaS), database workloads on Azure SQL Database (PaaS), and productivity tools on Microsoft 365 (SaaS). To ensure proper governance, the IT team must define operational boundaries. Match each operational task to the correct responsibility classification under the Azure Shared Responsibility Model.

Click a left item, then click its matching right item

Items

Patching the guest operating system of the virtual machine running the legacy application (IaaS)
Configuring network firewalls and access controls for the database workload (PaaS)
Securing the physical server hardware and datacenters hosting Microsoft 365 (SaaS)

Matches

Show answer & explanation

Answer

Patching the guest operating system in IaaS is solely the responsibility of the Customer. Configuring network firewalls in PaaS is a shared responsibility between the Customer and Microsoft. Securing physical server hardware in SaaS is solely the responsibility of Microsoft.
Under the Azure Shared Responsibility Model: 1. Guest OS patching in IaaS is solely the customer's responsibility since they control the virtual machine. 2. Network controls configuration in PaaS is a shared responsibility because the customer manages the resource-level network settings while Microsoft secures the network infrastructure. 3. Physical host and datacenter security is always solely Microsoft's responsibility across all cloud models.

Step-by-Step Solution

1
Identify the service model for each task.
Task 1 is in IaaS (Virtual Machines), Task 2 is in PaaS (SQL Database), and Task 3 is in SaaS (Microsoft 365).
The shared responsibility model shifts tasks between the cloud provider and customer depending on whether IaaS, PaaS, or SaaS is used.
2
Determine the owner of the guest operating system in IaaS.
The customer is solely responsible.
In IaaS, the customer manages the OS, middleware, and applications, which includes patching the guest OS.
3
Determine the owner of network controls in PaaS.
It is a shared responsibility.
In PaaS, network controls are shared because Microsoft secures the platform's infrastructure and network connectivity, but the customer is responsible for configuring access restrictions and firewalls.
4
Determine the owner of the physical security and host hardware in SaaS.
Microsoft is solely responsible.
Physical security, including the physical hosts, network, and datacenter, remains the cloud provider's sole responsibility across all models.

Key Concept

The Shared Responsibility Model defines which security and operational tasks are handled by the cloud provider (Microsoft) and which are handled by the customer, varying across IaaS, PaaS, and SaaS deployments.
Estimated Time:1m 30s
Question 602Question

A startup company wants to deploy a new web application but has limited initial funding. The company decides to host the application on Azure using a consumption-based model rather than purchasing on-premises physical servers. How does this decision affect the startup's initial cash flow and expense classification?

Show answer & explanation

Answer: It reduces upfront cash requirements by shifting the infrastructure costs from Capital Expenditure (CapEx) to Operational Expenditure (OpEx).

Answer

It reduces upfront cash requirements by shifting the infrastructure costs from Capital Expenditure (CapEx) to Operational Expenditure (OpEx).
Choosing Azure's consumption-based model allows the startup to avoid purchasing physical servers, which would be classified as Capital Expenditure (CapEx). Instead, cloud hosting costs are paid incrementally as they are consumed, which is classified as Operational Expenditure (OpEx). This significantly reduces the initial cash flow requirements needed to launch the application.

Step-by-Step Solution

1
Analyze the financial characteristics of hosting applications on-premises vs in the cloud.
On-premises deployment requires purchasing physical hardware (servers, networking, storage), which is upfront Capital Expenditure (CapEx). Azure's consumption-based model uses Operational Expenditure (OpEx) where costs are billed based on actual usage.
To determine how migrating to a consumption-based model changes the expense structure and cash requirements.
2
Evaluate the impact of Azure's consumption-based model on cash flow and tax treatment.
Because there are no physical servers to purchase upfront, the startup avoids large initial cash outflows. Instead, they pay continuous, variable operating costs (OpEx) that align with active resource usage.
To identify the correct statement describing the change in cash flow and classification.

Key Concept

Under a consumption-based cloud model, organizations shift from Capital Expenditure (CapEx) to Operational Expenditure (OpEx), eliminating upfront infrastructure costs and paying only for the resources they consume.
Question 603Question

A company is planning its cloud migration strategy and establishes the following requirements:

* The legacy customer database must remain in the company's local datacenter to ensure physical control and data sovereignty.
* New web applications must be deployed to an environment where the hardware is owned and maintained by a third-party cloud provider, and paid for as an operational expense (OpEx).
* The web applications must securely access data from the legacy customer database.

Which cloud model should the company adopt to satisfy these requirements?

Show answer & explanation

Answer: Hybrid cloud

Answer

Hybrid cloud
The correct answer is hybrid cloud. A hybrid cloud combines public cloud services (such as hosting web applications on a third-party cloud provider's hardware using an OpEx model) with private cloud or on-premises infrastructure (such as keeping a database in a local datacenter to maintain data sovereignty and physical control). This allows the two environments to communicate and share data securely, meeting all of the company's requirements.

Step-by-Step Solution

1
Analyze the requirement for the legacy customer database.
The database must remain in the local datacenter for physical control and data sovereignty, representing a private cloud or on-premises environment.
Identifying the infrastructure environment of the database is the first step in determining the overall model.
2
Analyze the requirement for the new web applications.
The applications must run on hardware owned/maintained by a third-party provider under an OpEx cost structure, representing a public cloud environment.
Identifying the infrastructure environment of the web applications provides the second component of the overall model.
3
Determine the combined cloud model that integrates both environments.
Combining an on-premises/private cloud environment (for the database) with a public cloud environment (for the web apps) is the definition of a hybrid cloud.
A hybrid cloud connects public and private clouds to share data and applications, fulfilling all specified requirements.

Key Concept

Cloud Models (Public, Private, Hybrid, Multi-cloud)
Estimated Time:1m 30s
Question 604Question

An organization runs a database on an Azure Virtual Machine (IaaS). The organization needs to store the virtual machine's active database files on high-performance, persistent block storage. Additionally, they must store daily database backups that are rarely accessed but must be available for immediate restoration if a database failure occurs. Which storage configuration meets these requirements while minimizing costs?

Show answer & explanation

Answer: Use Azure Managed Disks for the active database files, and the Cool access tier in Azure Blob Storage for the backups.

Answer

Use Azure Managed Disks for the active database files, and the Cool access tier in Azure Blob Storage for the backups.
The configuration using Azure Managed Disks for the active database files and the Cool access tier in Azure Blob Storage for the backups satisfies all constraints. Azure Managed Disks offer dedicated block storage optimized for virtual machine operating systems and databases. The Cool access tier offers cheaper storage than the Hot tier for data stored for at least 30 days while keeping the backups online for immediate access during restorations.

Step-by-Step Solution

1
Determine the appropriate storage service for running Virtual Machine database files.
Azure Managed Disks are persistent block storage volumes managed by Azure and designed for use with Azure Virtual Machines, providing the high-performance necessary for active database workloads.
Virtual machines require block storage (Managed Disks) rather than object storage (Blob Storage) for OS and active application files.
2
Identify the backup access requirements and choose the correct storage tier.
The Cool access tier in Azure Blob Storage is optimal for storing data that is infrequently accessed (backups) but requires immediate, millisecond-level access when a restore is needed.
The Archive tier is offline and requires hours to rehydrate data, making it unsuitable for immediate restore needs, while the Hot tier is too expensive for infrequently accessed backups.
3
Verify cloud responsibility and expenditure models.
Azure VMs follow the IaaS model where the customer manages the operating system and applications, and billing follows the OpEx model.
This rules out solutions that misclassify responsibilities or cloud cost models.

Key Concept

Azure storage services and Blob access tiers
Question 605Question

A logistics company is designing a serverless solution to optimize its supply chain operations. The solution must support two workloads:

1. Run a custom Python script that calculates the most cost-effective shipping routes based on live traffic and weather data.
2. Automate a multi-step workflow that sends customer updates via Twilio, modifies records in a third-party CRM system, and sends confirmation emails through Office 365 without writing custom integration code.

Which Azure services should the company use to meet these requirements?

Show answer & explanation

Answer: Azure Functions to execute the Python script for route calculation, and Azure Logic Apps to orchestrate the multi-step integration workflow.

Answer

Azure Functions should be used to run the custom Python script for calculating routes, and Azure Logic Apps should be used to orchestrate the multi-step integration workflow.
The correct recommendation is to use Azure Functions for executing the custom Python script and Azure Logic Apps for orchestrating the multi-step integration workflow. Azure Functions is a code-first serverless compute service that runs custom code on demand, which is suitable for executing a routing script. Azure Logic Apps is a designer-first orchestration service with pre-built connectors, matching the need to integrate third-party services without writing custom connection logic. Additionally, both services are serverless (PaaS) offerings, meaning that Microsoft fully manages host security and operating system patching.

Step-by-Step Solution

1
Identify the service requirements for the custom Python script running route calculations.
Determine that a code-first serverless compute service is required because custom programming logic needs to run dynamically.
Azure Functions is a serverless compute service that supports running custom code languages, including Python.
2
Identify the service requirements for orchestrating a workflow across Twilio, a CRM, and Office 365 without writing custom code.
Determine that a designer-first integration platform with out-of-the-box connectors is needed.
Azure Logic Apps provides a visual designer and hundreds of pre-built connectors to integrate external services without writing integration code.
3
Analyze the management model of the serverless services.
Confirm that serverless services are Platform as a Service (PaaS) offerings, meaning that OS patching and server maintenance are fully handled by Microsoft.
This rules out options that place the responsibility of OS patching on the customer or misidentify SaaS products as PaaS hosts.

Key Concept

Distinction between Azure Functions (code-first serverless compute) and Azure Logic Apps (connector-first serverless orchestration), along with their placement under the PaaS shared responsibility model.
Estimated Time:1m 30s
Question 606Question

A university is designing a serverless solution to automate student registration processing. The solution must support two workloads:
1. A workflow that triggers automatically when a registration form is uploaded, orchestrating the steps to send a confirmation email via a Microsoft 365 connector.
2. A component that runs custom C# code to validate transcripts against proprietary academic rules.

Which two Azure services should the university select to meet these requirements? (Select two).

Select all that apply

Show answer & explanation

Answer: Azure Logic Apps to orchestrate the registration workflow and connect to Microsoft 365.; Azure Functions to execute the custom C# transcript validation code.

Answer

Azure Logic Apps should be selected to orchestrate the registration workflow and connect to Microsoft 365, and Azure Functions should be selected to execute the custom C# transcript validation code.
The correct options are the statements selecting Azure Logic Apps for workflow orchestration and Azure Functions for running custom C# code. Azure Logic Apps provides a visual designer and connectors (like Microsoft 365) to run serverless integration workflows. Azure Functions allows developers to execute custom code (like C# validation) in a serverless, event-driven model.

Step-by-Step Solution

1
Analyze the workflow orchestration requirement.
The requirement calls for orchestrating a multi-step workflow with a Microsoft 365 connector. This matches Azure Logic Apps, which is a designer-first, serverless integration service providing pre-built connectors.
To identify the best serverless service for workflow integration.
2
Analyze the custom code execution requirement.
The requirement calls for executing custom C# code to validate transcripts. This matches Azure Functions, which is a code-first, event-driven serverless compute service.
To identify the best serverless service for running custom programmatic logic.
3
Evaluate the incorrect options against Azure service definitions.
Azure Virtual Machines are IaaS (not serverless PaaS), meaning the customer manages patching. Azure App Service WebJobs is not the primary visual orchestrator for SaaS connectors.
To eliminate incorrect options and confirm the correct choices.

Key Concept

Azure Serverless Compute (Functions and Logic Apps)
Estimated Time:1m 30s
Question 607Question

A company is designing an Azure Resource Manager (ARM) template to deploy a multi-tier application. The development team proposes a template structure where a web app and database are deployed inside a primary resource group, and a secondary resource group is nested inside the primary resource group to hold the storage account. How does Azure Resource Manager (ARM) handle this proposed deployment?

Show answer & explanation

Answer: The deployment fails because Azure Resource Manager does not support nesting resource groups inside other resource groups.

Answer

The deployment fails because Azure Resource Manager does not support nesting resource groups inside other resource groups.
The correct answer is that the deployment will fail because Azure Resource Manager (ARM) does not support nesting resource groups inside other resource groups. All resource groups in Azure exist as flat, top-level logical boundaries directly under an Azure subscription.

Step-by-Step Solution

1
Analyze the proposed structure of the template deployment.
The proposal calls for a secondary resource group to be nested inside a primary resource group.
Understanding the containment structure of the resources helps identify architectural violations.
2
Evaluate the architectural constraints of Azure Resource Groups.
Azure Resource Groups are top-level logical containers under an Azure subscription and do not support hierarchical nesting.
This determines if the proposed structure is valid under Azure Resource Manager constraints.
3
Confirm the behavior of ARM template deployment with resource location and syntax rules.
Because nesting is inherently unsupported, the template deployment will fail. ARM templates are declarative and cannot override resource containment rules, nor are resources restricted to the location of the resource group they reside in.
This eliminates the distractors that suggest successful deployment under certain conditions or fail for incorrect reasons.

Key Concept

Azure Resource Group Boundaries and ARM Template Capabilities
Question 608Question

A retail company decides to host its inventory database in Microsoft Azure. Instead of purchasing physical servers upfront, the company pays for the database services monthly based on actual usage. What type of expense is represented by these monthly, usage-based payments?

Show answer & explanation

Answer: Operational Expenditure (OpEx)

Answer

Operational Expenditure (OpEx)
The correct answer is Operational Expenditure (OpEx). Under the consumption-based model of cloud computing, there are no upfront costs, and organizations pay for resources as they use them. These ongoing costs are classified as operational expenditures on a company's balance sheet.

Step-by-Step Solution

1
Analyze the financial model described in the scenario.
The company pays for the service monthly based on actual usage, with no upfront physical server purchases.
This matches a pay-as-you-go or consumption-based model.
2
Classify the expense type for monthly, usage-based services.
Usage-based payments for services are categorized as operational costs.
Operational Expenditure (OpEx) is spending money on products or services now and being billed for them now, whereas Capital Expenditure (CapEx) is spending money on physical infrastructure upfront.

Key Concept

Consumption-Based Model (CapEx vs OpEx)
Question 609Question

A company needs to ensure that all Azure SQL databases conform to a corporate security standard requiring Transparent Data Encryption (TDE) to be enabled. The IT security team wants to track and report on the compliance status of all databases across the subscription, but they do not want to block developers from deploying databases that do not meet this standard. Which of the following should the security team implement?

Show answer & explanation

Answer: An Azure Policy definition with the Audit effect

Answer

An Azure Policy definition with the Audit effect
The correct answer is the Azure Policy definition with the Audit effect. Azure Policy is designed to evaluate resource properties against corporate standards. The Audit effect evaluates resource configurations (such as whether SQL databases have TDE enabled) and logs non-compliance in the compliance dashboard, but it does not block the creation or modification of those resources, matching the company's requirements.

Step-by-Step Solution

1
Analyze the requirements to identify the core goal.
The goal is to track and report on database configurations (TDE enabled) without blocking deployments of non-compliant databases.
This establishes that the solution must focus on resource property evaluation (policy) rather than user access management (RBAC) or deletion/modification prevention (locks).
2
Evaluate the difference between Azure Policy effects.
The Audit effect evaluates resources and logs compliance status without blocking deployments, whereas the Deny effect actively prevents non-compliant deployments.
This distinguishes between the correct policy effect (Audit) and the incorrect policy effect (Deny) based on the requirement not to block developer deployments.
3
Compare policy-based compliance with other Azure governance features.
Azure Policy is the correct service for resource property evaluation. RBAC controls user permissions, and resource locks prevent accidental deletion or configuration changes.
This confirms that RBAC and resource locks are incorrect options for evaluating resource property compliance.

Key Concept

Azure Policy is used to define, assign, and manage policies that enforce different rules over resources, where the Audit effect evaluates resource properties and reports compliance without blocking deployments.
Estimated Time:1m 30s
Question 610Question

A logistics provider is considering moving its fleet tracking database and application servers from a co-located hosting facility to Azure. The finance department requires a report that estimates the potential savings of shifting from their current hardware, maintenance, electricity, and IT labor costs to a cloud consumption model over a three-year period. Which tool should the provider use to generate this comparative analysis?

Show answer & explanation

Answer: Azure Total Cost of Ownership (TCO) Calculator

Answer

Azure Total Cost of Ownership (TCO) Calculator
The Azure Total Cost of Ownership (TCO) Calculator is designed to compare the costs of running your current on-premises or co-located workloads against the cost of running equivalent workloads in Azure. It allows you to input details about your current physical servers, storage, network, electricity, and IT administration labor to generate a detailed report showing potential savings over time.

Step-by-Step Solution

1
Identify the primary goal of the organization's request.
The goal is to compare current co-located infrastructure costs (including hardware, maintenance, electricity, and labor) with the cost of running equivalent workloads in Azure to estimate potential savings.
This is a pre-migration cost comparison scenario.
2
Evaluate the tools based on their specific purposes.
The Total Cost of Ownership (TCO) Calculator compares on-premises/co-located costs to Azure, while the Pricing Calculator estimates new cloud-only deployments, and Cost Management tracks already-deployed resources.
Choosing the correct tool requires distinguishing between pre-migration comparison, pre-migration estimation, and post-migration management.

Key Concept

Distinguishing between Azure cost estimation tools (Pricing Calculator vs. TCO Calculator).
Question 611Question

When investigating whether a regional power failure in an Azure datacenter is impacting your application's availability, you should review Azure Service Health, while monitoring the ongoing disk read/write speeds of a specific database server requires configuring Azure Monitor.

Show answer & explanation

Answer: True

Answer

True
The statement correctly distinguishes between Azure Service Health (for platform-wide and regional infrastructure status) and Azure Monitor (for resource-specific performance telemetry).

Step-by-Step Solution

1
Identify the tool required for datacenter/regional infrastructure status.
Azure Service Health provides status updates on regional outages and planned maintenance.
It tracks issues originating from the Azure platform itself that impact your subscription.
2
Identify the tool required for individual resource performance telemetry.
Azure Monitor collects and analyzes performance metrics (such as disk read/write speeds) for specific individual resources.
It is designed to monitor the health and performance of your own deployed resources rather than the global cloud infrastructure.

Key Concept

Distinction between Azure Monitor (resource-level performance) and Azure Service Health (global platform issues)
Question 612Question

An organization hosts its customer-facing web application on Microsoft Azure and replicates its transactional database to Google Cloud Platform (GCP) for disaster recovery. The two environments are connected via a secure VPN gateway, and no on-premises or private data center resources are utilized. Is the statement that this architecture represents a hybrid cloud model true or false?

Show answer & explanation

Answer: False

Answer

False
The scenario describes a multi-cloud architecture because it solely utilizes two public cloud providers (Microsoft Azure and Google Cloud Platform) with no private cloud or on-premises infrastructure. A hybrid cloud model specifically requires a combination of public and private cloud environments.

Step-by-Step Solution

1
Analyze the cloud providers and infrastructure types used in the scenario.
The organization uses two public cloud providers (Microsoft Azure and Google Cloud Platform) and does not use any private cloud or on-premises data center.
Identifying the types of cloud environments involved is the first step in determining the correct cloud model.
2
Compare the identified configuration against the definitions of hybrid cloud and multi-cloud models.
A hybrid cloud model requires a combination of public cloud and private cloud (or on-premises) infrastructure. A multi-cloud model involves using services from two or more public cloud providers.
Distinguishing between these models requires understanding their distinct composition requirements.
3
Determine the validity of the statement based on the definitions.
Since only public clouds are used, the architecture is a multi-cloud model, not a hybrid cloud model. Therefore, the statement is false.
Concluding the analysis by evaluating the truth value of the specific statement.

Key Concept

Cloud Models (Public, Private, Hybrid, Multi-cloud)
Question 613Question

A financial services firm is migrating its legacy transaction processing system to Microsoft Azure. The firm's chief financial officer (CFO) requires that all costs associated with the new cloud infrastructure be immediately deducted as business expenses in the tax year they occur, rather than being capitalized and depreciated over several years. If the firm deploys the transaction processing system on Azure Virtual Machines using a pay-as-you-go consumption model, will this deployment strategy satisfy the CFO's requirement by classifying the infrastructure costs as operational expenditure (OpEx)?

Show answer & explanation

Answer: True

Answer

Yes, deploying the system on pay-as-you-go Azure Virtual Machines classifies the costs as operational expenditure (OpEx), which allows the firm to deduct the expenses in the tax year they occur.
The correct answer is true because a consumption-based model allows organizations to pay for resources as they use them, classifying the spending as operational expenditure (OpEx). OpEx can be fully deducted as an expense in the same tax year, satisfying the requirement to avoid capitalization and multi-year depreciation.

Step-by-Step Solution

1
Analyze the financial requirements of the firm's chief financial officer (CFO).
The CFO wants to deduct all costs as business expenses in the current tax year to avoid capitalization and depreciation over multiple years.
To determine whether the cloud spending model aligns with the tax treatment goals of the business.
2
Evaluate the proposed Azure deployment strategy (pay-as-you-go Virtual Machines).
Pay-as-you-go resources are billed on an ongoing, consumption basis with no upfront costs.
To classify the nature of the expenditure (CapEx vs. OpEx) based on the Azure billing model.
3
Determine the accounting and tax classification for the consumption-based billing model.
Ongoing consumption-based services are classified as operational expenditure (OpEx) and can be immediately deducted in the year they are billed.
To confirm if OpEx aligns with the CFO's requirement of immediate tax deduction.

Key Concept

Consumption-Based Model (CapEx vs OpEx)
Question 614Question

A company is migrating its web application from Azure Virtual Machines (IaaS) to Azure App Service (PaaS). Which two responsibilities shift from the customer to Microsoft after this migration?

Select all that apply

Show answer & explanation

Answer: Installing security patches and updates on the underlying operating system; Configuring and maintaining the web server middleware and application runtime

Answer

The responsibilities that shift from the customer to Microsoft are installing operating system security patches and configuring the web server middleware/runtime environment.
In the Shared Responsibility Model, migrating from Infrastructure as a Service (IaaS) to Platform as a Service (PaaS) shifts management of the operating system and the runtime middleware from the customer to Microsoft. Under Azure Virtual Machines (IaaS), the customer must patch the operating system and configure the middleware (like IIS or Apache). Under Azure App Service (PaaS), Microsoft automatically handles these tasks.

Step-by-Step Solution

1
Analyze the initial responsibility model (IaaS - Azure Virtual Machines)
In IaaS, the customer is responsible for everything from the operating system up, including OS updates, middleware, runtimes, applications, and data. Microsoft is only responsible for physical security, physical networking, and virtualization hosts.
To identify what shifts, we must first establish what the customer is responsible for before the migration.
2
Analyze the target responsibility model (PaaS - Azure App Service)
In PaaS, Microsoft takes over the management of the operating system, middleware, and database/runtime environments. The customer only manages the application code, settings, identities, and data.
Comparing the two models allows us to identify the specific responsibilities that move from the customer's domain to Microsoft's domain.
3
Identify the responsibilities that transfer from customer to Microsoft
Operating system patching and middleware/runtime management shift to Microsoft. Application code maintenance remains with the customer, and physical security was already Microsoft's responsibility.
This determines the correct choices by excluding responsibilities that do not change owners.

Key Concept

Shared Responsibility Model
Question 615Question

A logistics enterprise hosts its package routing database on a Microsoft SQL Server instance running on an Azure Virtual Machine. To minimize operational overhead, the enterprise plans to migrate this database to an Azure SQL Database deployment. Which administrative task remains the responsibility of the logistics enterprise after this migration?

Show answer & explanation

Answer: Configuring database user permissions and managing resource access controls

Answer

Configuring database user permissions and managing resource access controls
In the Azure Shared Responsibility Model, the customer is always responsible for classifying and securing their data, as well as managing database users, credentials, and access permissions, regardless of whether the service is deployed using IaaS, PaaS, or SaaS. Therefore, when migrating to Azure SQL Database (PaaS), the customer retains full responsibility for managing database user access permissions.

Step-by-Step Solution

1
Analyze the transition described in the scenario.
The migration shifts the database workload from an Azure Virtual Machine (Infrastructure as a Service - IaaS) to Azure SQL Database (Platform as a Service - PaaS).
Understanding the starting and ending service models is necessary to determine the shift in responsibilities.
2
Compare responsibilities between IaaS and PaaS for database hosting.
In IaaS (SQL on Virtual Machine), the customer manages the OS, database engine installation, patching, backups, configuration, and data access. In PaaS (Azure SQL Database), Microsoft takes over the OS management, database engine updates, and basic backups, while the customer retains control over database schemas, query optimization, user accounts, and data access controls.
This comparison identifies which tasks transfer to Microsoft and which tasks are retained by the customer.
3
Identify the task that is retained by the customer.
Managing database user accounts and resource access permissions remains the customer's responsibility in both IaaS and PaaS environments.
Identity and access management, along with the classification and protection of data, are always the customer's responsibility regardless of the cloud deployment model.

Key Concept

Shared Responsibility Model
Question 616Question

An organization wants to ensure that all resources deployed to a subscription automatically have a specific tag applied if it is missing from the deployment request. Is it true that Azure Policy can be used to automatically add the missing tag during resource deployment?

Show answer & explanation

Answer: True

Answer

The statement is true because Azure Policy can automatically apply missing tags during resource deployment using the Modify or Append effects.
Azure Policy is capable of modifying resources during creation or update. The 'Modify' effect allows the policy to add, update, or remove properties (such as tags) on a resource during deployment.

Step-by-Step Solution

1
Analyze Azure Policy capabilities regarding resource modification.
Azure Policy can evaluate resource properties during deployment and modify them before final creation.
To determine if Azure Policy can perform write operations on resources during deployment.
2
Identify the specific policy effects designed for adding tags.
The 'Modify' effect can add, update, or remove properties (such as tags) on a resource during deployment.
To verify the mechanism through which tags can be automatically applied.
3
Evaluate the correctness of the statement.
Since Azure Policy can automatically add missing tags during deployment, the statement is true.
To establish the final correct answer.

Key Concept

Azure Policy effects and remediation capabilities
Question 617Question

A corporate finance department is reviewing the budget transition for migrating their main ERP system to Microsoft Azure.

Does utilizing a consumption-based model allow the department to treat the recurring cloud costs as Operational Expenditure (OpEx), enabling the business to deduct the expenses in the tax year they are incurred instead of managing long-term physical hardware depreciation?

Show answer & explanation

Answer: True

Answer

True, because adopting a consumption-based pricing model in Azure shifts expenditures to Operational Expenditure (OpEx), allowing immediate tax deduction in the year incurred rather than long-term asset depreciation.
Utilizing a consumption-based model classifies the costs as Operational Expenditure (OpEx), allowing immediate tax deduction in the year incurred rather than long-term asset depreciation.

Step-by-Step Solution

1
Analyze the financial characteristics of Azure's consumption-based model.
The consumption-based model charges based on actual resource usage with no upfront purchase of physical hardware.
This establishes whether the cost pattern matches Capital Expenditure (CapEx) or Operational Expenditure (OpEx).
2
Determine the tax and accounting classification for these recurring expenses.
Since the company is paying for a service on an ongoing basis rather than purchasing a physical asset, the expenses are classified as Operational Expenditure (OpEx).
OpEx is typically deductible in the tax year the expenses are incurred.
3
Compare OpEx treatment to the traditional CapEx depreciation method.
Traditional on-premises hardware represents CapEx and must be depreciated over several years. The consumption-based model avoids this depreciation requirement.
This confirms that the statement correctly identifies the shift from depreciation (CapEx) to immediate deduction (OpEx).

Key Concept

Migrating to Azure's consumption-based model shifts IT spending from Capital Expenditure (CapEx) to Operational Expenditure (OpEx), allowing immediate deduction of operational costs and eliminating the need for long-term asset depreciation.
Question 618Question

A company experiences intermittent connectivity issues with its database deployments. A systems administrator needs to check if Microsoft has reported any active infrastructure incidents or planned maintenance events that specifically affect the resources inside their Azure subscription.

Which tool should the administrator use to view these personalized health events?

Show answer & explanation

Answer: Azure Service Health

Answer

Azure Service Health
Azure Service Health is the correct tool because it provides a personalized view of the health of Azure services and regions that your resources are actually deployed in. It covers active service issues, planned maintenance, and health advisories that directly impact your subscription.

Step-by-Step Solution

1
Analyze the requirement to monitor Microsoft-reported service outages and maintenance affecting the user's specific resources.
Identify that the solution must be personalized to the subscription's active resources and regions.
This filters out global tools like Azure Status.
2
Evaluate the difference between Azure Monitor and Azure Service Health.
Azure Monitor tracks the health and metrics of user-configured resources, whereas Azure Service Health tracks the health of the underlying Azure cloud infrastructure.
This prevents confusion between customer-managed resource telemetry and Microsoft-managed platform outages.
3
Select the service that aggregates personalized platform events.
Determine that Azure Service Health is the dedicated service for personalized dashboard notifications about active incidents, planned maintenance, and health advisories.
It directly satisfies the requirement for personalized service health updates.

Key Concept

Azure Service Health vs. Azure Monitor and Azure Status
Question 619Question

A dental clinic hosts its patient scheduling system on Microsoft Azure. Under the consumption-based billing model, the clinic is billed a predetermined flat fee each month regardless of how many resources their system actually consumes.

Show answer & explanation

Answer: False

Answer

The statement is false because under a consumption-based model, billing is based on actual resource usage rather than a predetermined flat monthly fee.
The correct answer is false because consumption-based billing is variable and depends on actual resource consumption, not a fixed predetermined fee.

Step-by-Step Solution

1
Analyze the definition of a consumption-based model in Microsoft Azure.
A consumption-based model charges organizations based on the actual resources (such as compute time, storage, or bandwidth) they consume, with no upfront costs.
To determine whether the pricing model described matches a consumption-based model.
2
Compare the scenario's billing mechanism (predetermined flat fee regardless of usage) with the consumption-based model.
A predetermined flat fee regardless of usage is characteristic of a fixed subscription or capital lease, which is the opposite of consumption-based billing.
To conclude whether the statement is true or false.

Key Concept

Under a consumption-based model, organizations only pay for the resources they consume, allowing costs to align directly with demand.
Question 620Question

An Azure administrator is configuring deployment pipelines using Azure Resource Manager (ARM) templates. Consider the following statement:

Statement: The default deployment mode for ARM templates is Incremental, which ensures that resources already present in the target resource group but not defined in the template are left unmodified.

Is this statement true or false?

Show answer & explanation

Answer: True

Answer

True
The statement is true because the default deployment mode for Azure Resource Manager (ARM) templates is Incremental, which preserves existing resources in the resource group that are not defined in the deployment template.

Step-by-Step Solution

1
Identify the default deployment mode for Azure Resource Manager (ARM) templates.
The default deployment mode is Incremental.
To determine how Azure handles resource groups during standard template deployments.
2
Analyze the behavior of Incremental deployment mode on resources not defined in the template.
Existing resources that are not declared in the template remain unaffected in the resource group.
To verify if the statement's description of Incremental mode is accurate.

Key Concept

ARM template deployment modes (Incremental vs Complete)
Estimated Time:1m 0s
PreviousPage 31 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin