Examkin

All practice questions

1186 questions

All types1,186Multiple choice620Multiple select228True / False291Matching47
Question 641Question →

A logistics company replaces its on-premises tracking infrastructure with Azure IoT Hub, paying only for the daily volume of messages processed. The company must depreciate these monthly message-processing fees over a multi-year period on its financial balance sheet.

Show answer & explanation

Answer: False

Answer

The statement is false because consumption-based cloud costs are classified as operating expenses (OpEx) and are fully expensed in the period they are incurred, rather than being depreciated over time.
The correct answer is False. Under the consumption-based billing model, Azure resources are treated as operating expenses (OpEx). OpEx costs are fully deducted in the tax year or financial period in which they are incurred. Depreciation is an accounting method reserved for capital expenditures (CapEx), such as physical server hardware, where the cost of a physical asset is spread over its useful life.

Step-by-Step Solution

1
Identify the type of cloud billing model used in the scenario.
The logistics company pays for Azure IoT Hub based on the daily volume of messages processed, which represents a consumption-based model.
Understanding the billing model helps determine the expense classification.
2
Classify the expense as either capital expenditure (CapEx) or operational expenditure (OpEx).
Consumption-based costs with no upfront physical infrastructure investment are classified as operating expenses (OpEx).
This classification dictates how the cost is treated on the company's financial statements.
3
Determine the accounting and tax treatment of the classified expense.
Operating expenses (OpEx) are fully expensed and deducted in the financial period they are incurred, whereas capital expenditures (CapEx) are capitalized and depreciated over multiple years.
This allows us to evaluate the truth of the statement regarding depreciation.

Key Concept

Under a consumption-based model, cloud services are treated as operating expenses (OpEx), allowing organizations to deduct these expenses in the current period rather than depreciating physical assets (CapEx) over time.
Estimated Time:1m 0s
Question 642Question →

An enterprise is evaluating deployment options for several new IT workloads. Which cloud model corresponds to each of the business scenarios described?

Click a left item, then click its matching right item

Items

A startup deploys its web analytics platform across multiple tenant-shared environments managed entirely by a third-party vendor, accessed securely over the public internet.
A government organization rents dedicated physical servers located in a third-party datacenter to host its sensitive records, ensuring that no other organization shares the hardware or network infrastructure.
A financial institution retains its core transaction database on its local on-premises hardware due to legacy compatibility, while utilizing a public cloud platform to run high-performance risk-modeling simulations that query the local database.
A software development firm deploys its database services on one public cloud provider to utilize a specific managed SQL service, while hosting its machine learning workloads on a different public cloud provider to take advantage of specialized AI tools.

Matches

Show answer & explanation

Answer

The startup's tenant-shared web analytics platform matches the public cloud model. The government organization's dedicated servers in a third-party datacenter match the private cloud model. The financial institution's combined on-premises database and public cloud simulations match the hybrid cloud model. The software firm's use of two different public cloud providers matches the multi-cloud model.
The correct matches align each scenario to the cloud model that matches its hosting ownership, tenancy, and structure: public cloud is represented by tenant-shared environments; private cloud is represented by dedicated physical servers rented from a third-party provider; hybrid cloud is represented by integrating on-premises hardware with public cloud simulations; and multi-cloud is represented by distributing workloads across two distinct public cloud providers.

Step-by-Step Solution

1
Analyze the startup's scenario involving tenant-shared environments managed by a third-party vendor over the internet.
Identify this as the public cloud model.
Public cloud resources are owned by a third-party provider, shared among multiple tenants, and accessed over the internet.
2
Analyze the government organization's scenario involving rented, dedicated physical servers inside a third-party datacenter with no shared hardware.
Identify this as the private cloud model.
Private cloud consists of computing resources used exclusively by one business or organization, which can be physically located at the organization's on-site datacenter or hosted by a third-party service provider.
3
Analyze the financial institution's scenario combining local on-premises hardware with public cloud risk-modeling simulations.
Identify this as the hybrid cloud model.
Hybrid cloud combines public and private cloud environments (such as on-premises infrastructure), allowing data and applications to be shared between them.
4
Analyze the software firm's scenario deploying database services on one public cloud and machine learning on another public cloud.
Identify this as the multi-cloud model.
Multi-cloud refers to the use of multiple public cloud services from different cloud providers, without necessarily integrating them into a hybrid model.

Key Concept

Characteristics and distinctions of public, private, hybrid, and multi-cloud deployment models.
Question 643Question →

An enterprise administration team is planning to standardize their infrastructure deployments across development and production environments. They decide to adopt Azure Bicep and Azure Resource Manager (ARM) templates to manage their resources.

Which of the following are characteristics or capabilities of using ARM templates or Bicep for resource deployment? (Select TWO).

Select all that apply

Show answer & explanation

Answer: They use declarative syntax to define the desired state of resources, allowing Azure to determine the correct deployment order.; They support deploying resources across multiple resource groups and subscriptions in a single deployment operation.

Answer

The characteristics and capabilities of ARM templates and Bicep include the use of declarative syntax to define the desired state of resources, and support for deploying resources across multiple resource groups and subscriptions in a single deployment.
The correct options are the ones stating that they use declarative syntax to define the desired state of resources, and that they support deploying resources across multiple resource groups and subscriptions. Declarative syntax allows the developer to focus on the end state rather than the ordering or CLI commands, as Azure automatically resolves dependencies. Additionally, ARM templates and Bicep files can utilize modules or nested deployments to deploy resources to different resource groups and subscriptions simultaneously.

Step-by-Step Solution

1
Analyze the core features of Azure Resource Manager (ARM) templates and Bicep.
Identify that they are declarative rather than imperative, allowing you to define 'what' to deploy without specifying step-by-step execution scripts.
This evaluates the fundamental definition and operational mechanism of ARM/Bicep infrastructure-as-code.
2
Evaluate deployment capabilities and scopes supported by ARM templates and Bicep.
Confirm that they support targeting different resource groups and subscriptions in one template deployment, but resource groups themselves cannot be nested.
This differentiates valid container architectures and deployment boundaries from invalid ones like nested resource groups.

Key Concept

Azure Resource Manager (ARM) Templates and Bicep deploy resources declaratively across scopes.
Question 644Question →

A company's system administrator wants to automatically receive email notifications if the CPU utilization of any production Azure Virtual Machine exceeds 85%85\%. At the same time, the administrator needs to enforce a compliance rule that prevents developers from deploying new Virtual Machines unless a specific 'Department' tag is applied.

Which combination of Azure services should the administrator use to meet these requirements?

Show answer & explanation

Answer: Azure Monitor to track the CPU utilization and send notifications, and Azure Policy to enforce the tagging requirement

Answer

Azure Monitor to track the CPU utilization and send notifications, and Azure Policy to enforce the tagging requirement
The correct answer specifies Azure Monitor to collect individual resource telemetry (such as VM CPU metrics) and send alerts, paired with Azure Policy to enforce compliance properties like mandatory tags at deployment time.

Step-by-Step Solution

1
Determine the tool required for tracking resource-specific CPU utilization and sending alerts.
Azure Monitor is designed to collect performance metrics and log data from Azure resources and trigger alerts based on metrics like CPU usage.
This isolates the monitoring requirement from broader platform health services.
2
Determine the tool required to enforce resource tagging compliance during deployment.
Azure Policy is used to define and enforce rules (such as requiring a specific tag) that resources must follow during deployment.
This isolates compliance and governance rules from access management (RBAC).
3
Combine the correct services to find the matching choice.
The correct combination is Azure Monitor and Azure Policy.
This matches the requirements of both resource performance alerting and resource tagging enforcement.

Key Concept

Distinguishing the roles of Azure Monitor, Azure Service Health, Azure Policy, and Azure Role-Based Access Control (RBAC)
Question 645Question →

A company currently hosts its document storage server on an Azure virtual machine (IaaS) where they manage the operating system and software updates. They plan to migrate this service to Microsoft SharePoint Online (SaaS). Which responsibility shifts from the customer to Microsoft after this migration?

Show answer & explanation

Answer: Operating system patching and maintenance

Answer

Operating system patching and maintenance
In Infrastructure as a Service (IaaS), the customer is responsible for maintaining and patching the operating system of their virtual machines. When migrating to a Software as a Service (SaaS) solution such as SharePoint Online, Microsoft manages the infrastructure, operating system, and application layer. Therefore, operating system patching and maintenance shifts to Microsoft.

Step-by-Step Solution

1
Identify the initial cloud service model and the target cloud service model from the scenario.
The initial model is Infrastructure as a Service (IaaS) since the company hosts resources on an Azure virtual machine. The target model is Software as a Service (SaaS) since they are migrating to Microsoft SharePoint Online.
Understanding the starting and ending service models helps determine how the division of responsibility changes.
2
Analyze which responsibility transfers from the customer to Microsoft when moving from IaaS to SaaS.
In IaaS, the customer must maintain and patch the operating system of the virtual machine. In SaaS, the cloud provider (Microsoft) manages the entire application stack, including the underlying operating system.
Comparing responsibilities shows that operating system patching and maintenance shifts from the customer to Microsoft, whereas responsibilities like data classification and identity management remain with the customer.

Key Concept

Shared Responsibility Model
Estimated Time:45s
Question 646Question →

A digital publishing company experiences a predictable increase in readers every morning between 8:00 AM and 10:00 AM. To handle this daily peak, the IT team manually increases the size (vCPUs and RAM) of their existing database server every morning, and decreases it in the afternoon. Does this manual adjustment of the database server's size represent horizontal scaling?

Show answer & explanation

Answer: False

Answer

The manual adjustment of increasing the size (vCPUs and RAM) of an existing database server represents vertical scaling (scaling up), not horizontal scaling (scaling out). Therefore, the correct answer is False.
The correct answer is False because horizontal scaling involves adding more instances of a resource (scaling out) to distribute the load, whereas the scenario describes adding more capacity (vCPUs and RAM) to a single existing server, which is vertical scaling (scaling up).

Step-by-Step Solution

1
Analyze the action performed by the IT team in the scenario.
The IT team is increasing the physical specifications (vCPU and RAM capacity) of a single, existing database server.
To classify the type of scaling, we must determine if resources are being resized or if new resources are being added.
2
Compare the action against the definitions of vertical and horizontal scaling.
Resizing an existing instance is vertical scaling (scaling up/down). Adding more instances is horizontal scaling (scaling out/in).
This comparison identifies that the scenario describes vertical scaling, which means it does not represent horizontal scaling.

Key Concept

Vertical scaling (scaling up) increases the capacity of a single resource, whereas horizontal scaling (scaling out) adds additional resource instances.
Question 647Question →

A company operates an online retail store that experiences sudden, temporary spikes in traffic during promotional events. The company wants to ensure that additional virtual machines are automatically created to handle the increased load, and then automatically removed when traffic returns to normal levels to minimize operational costs. Which cloud concept does this scenario describe?

Show answer & explanation

Answer: Elasticity

Answer

Elasticity
The correct answer is elasticity because it describes the ability of cloud systems to dynamically provision and deprovision computing resources automatically in response to changing workloads, ensuring the company only pays for the resources it actively uses.

Step-by-Step Solution

1
Analyze the scenario requirements: the application needs to automatically add virtual machines during load spikes and automatically remove them when traffic declines to control costs.
Identify that the system requires dynamic, automated allocation and deallocation of resources based on demand.
This distinguishes simple scaling (which can be manual or one-directional) from dynamic, bi-directional auto-scaling.
2
Evaluate the candidate cloud concepts (scalability, elasticity, high availability, disaster recovery) against this dynamic auto-scaling requirement.
Determine that elasticity is the specific cloud characteristic that defines automatic, demand-based scaling up and down to match workload demands.
Correctly identifying the term matching the scenario's cost-efficiency and automation needs leads to elasticity.

Key Concept

Elasticity is the ability of a system to dynamically allocate and deallocate resources automatically in response to real-time fluctuations in demand.
Estimated Time:1m 0s
Question 648Question →

An organization is migrating its workloads to Azure and wants to align its security operations with the Microsoft Azure Shared Responsibility Model. Match each administrative responsibility to its correct ownership profile under the cloud service models.

Click a left item, then click its matching right item

Items

Securing the physical infrastructure, hosts, and network cabling in the Azure datacenter.
Applying security patches and updates to the operating system of a web server running on an Azure Virtual Machine.
Defining information protection policies and classifying sensitive corporate documents stored in Microsoft 365.

Matches

Show answer & explanation

Answer

Physical infrastructure security is always Microsoft's responsibility; operating system patching on Azure Virtual Machines shifts to the customer in IaaS; and data classification and governance always remain with the customer in all cloud models.
The matches align with the Shared Responsibility Model: physical security is always Microsoft's responsibility across all models; guest OS patching is the customer's responsibility in IaaS; and data governance is always the customer's responsibility in all models.

Step-by-Step Solution

1
Identify the ownership boundary for physical security.
Physical infrastructure is always maintained by Microsoft across all service models (IaaS, PaaS, SaaS).
The customer has no physical access to the cloud datacenters, so Microsoft manages all physical security.
2
Determine who is responsible for operating system maintenance in Infrastructure as a Service (IaaS).
The customer is responsible for guest operating system configuration, updates, and patching.
In IaaS, Microsoft only provides the hypervisor and host; the guest OS is managed by the customer.
3
Determine who is responsible for document and data governance in Software as a Service (SaaS).
The customer is always responsible for the security of their data, information, and identity.
In all cloud models, including SaaS (e.g., Microsoft 365), data classification and access management remain the customer's responsibility.

Key Concept

Shared Responsibility Model
Question 649Question →

A company is building a web application on Azure. The architecture team needs to select storage solutions that optimize cost while meeting specific data access requirements:

1. High-resolution product images must be stored. These images are requested frequently by users and must load with minimal latency.
2. Application audit logs must be stored. These logs are rarely accessed but must be available immediately for real-time security analysis if a security event is detected.

Which two of the following Azure Storage configurations should the team select to meet these requirements?

Select all that apply

Show answer & explanation

Answer: The Hot access tier for the product images; The Cool access tier for the audit logs

Answer

The Hot access tier should be used for the frequently accessed product images, and the Cool access tier should be used for the infrequently accessed audit logs that still require immediate availability.
The Hot access tier is ideal for frequently accessed data like product images, offering the lowest access cost. The Cool access tier is designed for infrequently accessed data like audit logs that must remain online and immediately available for queries.

Step-by-Step Solution

1
Analyze the requirements for the product images.
Since product images are accessed frequently and require low latency, the Hot access tier is the correct choice.
The Hot access tier offers the lowest access latency and lowest transactional cost for frequently accessed data.
2
Analyze the requirements for the audit logs.
Since the logs are rarely accessed but must be available immediately for analysis, the Cool access tier is the correct choice.
The Cool access tier provides cheaper storage than the Hot tier while keeping the data online and immediately accessible without delay.
3
Evaluate the incorrect options to confirm they do not meet the constraints.
The Archive tier is offline and requires rehydration, and managed disks are IaaS resources that increase administrative overhead.
This confirms that only the Hot and Cool tiers meet both the accessibility and cost-efficiency goals of the scenario.

Key Concept

Azure Storage access tiers (Hot, Cool, Archive) and their appropriate use cases based on access frequency and availability requirements.
Question 650Question →

A logistics company runs its inventory API on Azure Virtual Machines. The company decides to migrate this workload to Azure App Service (PaaS) to reduce administrative overhead. Which statement correctly describes how the responsibility for the operating system and runtime shifts after this migration?

Show answer & explanation

Answer: Microsoft becomes responsible for patching the operating system and runtime, while the customer remains responsible for configuring the application and data.

Answer

Microsoft becomes responsible for patching the operating system and runtime, while the customer remains responsible for configuring the application and data.
In the Platform as a Service (PaaS) model, Microsoft takes over the management and patching of the underlying operating system and runtime environment (such as IIS, Node.js, or .NET runtimes). However, the customer is still responsible for deploying and configuring their application code, managing user identities, and protecting their data.

Step-by-Step Solution

1
Identify the source and target cloud service models in the scenario.
The workload is migrating from Azure Virtual Machines (IaaS) to Azure App Service (PaaS).
Understanding the service model transition is key to applying the Shared Responsibility Model.
2
Determine the distribution of responsibilities in a Platform as a Service (PaaS) model.
In PaaS, responsibility for physical infrastructure, operating systems, and network controls shifts to the cloud provider (Microsoft), while the customer retains responsibility for information/data, devices, accounts, and application settings.
This allows comparison of the options against the actual model rules.

Key Concept

Shared Responsibility Model
Question 651Question →

An administrator is planning the deployment of a web application to Azure. The deployment must create a resource group in the East US region. However, due to compliance requirements, the virtual machine resources must be located in the West US region. Additionally, the administrator wants to define the entire infrastructure as a declarative configuration file rather than writing step-by-step execution commands.

Which of the following statements correctly describes how Azure Resource Manager (ARM) templates and resource groups support this scenario?

Show answer & explanation

Answer: ARM templates allow resources to be deployed to a different region than the resource group containing them, using a declarative file that defines the target end-state.

Answer

ARM templates allow resources to be deployed to a different region than the resource group containing them, using a declarative file that defines the target end-state.
The correct option is correct because ARM templates use declarative syntax, where you describe what resources you want to deploy without writing the sequence of programming commands to create them. Furthermore, resources inside a resource group can be located in different regions than the resource group itself.

Step-by-Step Solution

1
Analyze the requirement for region alignment between resources and their resource group.
Identify that Azure allows resources to be deployed in any supported region, regardless of the resource group's location.
The resource group location is primarily used for storing deployment metadata, not restricting resource locations.
2
Evaluate the deployment methodology requirement (declarative vs. imperative).
Confirm that ARM templates and Bicep files use declarative syntax to describe the desired target state.
Declarative templates let Azure Resource Manager orchestrate the creation and ordering of resources automatically without requiring imperative step-by-step scripting.

Key Concept

ARM template declarative nature and Resource Group location boundaries
Estimated Time:1m 15s
Question 652Question →

A wildlife monitoring project uses IoT cameras to capture images of animals in remote areas. The project team needs to run a custom Python script that analyzes each uploaded image to identify the species. The analysis must execute only when a new image is uploaded, and the compute resources must scale automatically based on the volume of incoming images. Which Azure service is best suited for executing the image analysis script?

Show answer & explanation

Answer: Azure Functions

Answer

Azure Functions is the correct choice because it is a serverless, event-driven compute service that can run custom code (such as a Python script) and automatically scale resources to meet demand.
Azure Functions is a code-first, event-driven serverless compute service. It allows you to run custom code (such as a Python script) in response to events (such as an image upload to storage) without managing underlying infrastructure. It automatically scales compute resources based on demand, which matches the project requirements.

Step-by-Step Solution

1
Identify the primary requirement: running custom code (a Python script) in response to event triggers (uploads) with automatic scaling.
The solution must be a serverless compute service capable of custom code execution.
To minimize management overhead and ensure resources scale dynamically.
2
Evaluate Azure serverless compute options.
Azure Functions is code-first (runs custom code); Azure Logic Apps is designer-first (orchestrates workflows).
To select the tool designed specifically for running custom code scripts.
3
Confirm the service recommendation.
Azure Functions perfectly matches the requirements for custom script execution, event-driven triggers, and automatic scaling.
It handles the underlying infrastructure and scales compute resources automatically.

Key Concept

Distinction between Azure serverless compute services (Functions) and workflow orchestrators (Logic Apps).
Estimated Time:1m 0s
Question 653Question →

An organization has several virtual machines and databases running in Azure. The administration team wants to establish a monitoring strategy to analyze performance trends and troubleshoot resource issues.

Which of the following actions can be performed using Azure Monitor? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Analyzing real-time numeric performance metrics from the virtual machine operating systems; Querying consolidated event logs from multiple resources in a Log Analytics workspace

Answer

The correct actions are analyzing real-time numeric performance metrics from the virtual machine operating systems and querying consolidated event logs from multiple resources in a Log Analytics workspace.
Azure Monitor is designed to collect, analyze, and act on telemetry from your cloud and on-premises environments. This includes collecting performance metrics from virtual machine operating systems to analyze performance trends, as well as aggregating event logs from multiple resources into a Log Analytics workspace where they can be queried and analyzed.

Step-by-Step Solution

1
Identify the primary goal of the organization's monitoring strategy.
The goal is to analyze performance trends and troubleshoot resource issues for their own running Azure resources.
This determines whether resource-level monitoring (Azure Monitor) or service-level health tracking (Azure Service Health) is required.
2
Evaluate the capabilities of Azure Monitor against the requirements.
Azure Monitor is designed to collect performance metrics and log data from Azure resources, including virtual machine operating systems, and allows central analysis via Log Analytics workspaces.
This confirms that collecting operating system metrics and querying consolidated logs are core features of Azure Monitor.
3
Differentiate and eliminate options belonging to Azure Service Health.
Tracking global infrastructure outages and receiving alerts about planned maintenance windows are features provided by Azure Service Health, not Azure Monitor.
Azure Service Health focuses on issues with the Azure platform itself that might impact your subscriptions, whereas Azure Monitor tracks the performance and behavior of your specific deployed resources.

Key Concept

Azure Monitor collects and analyzes telemetry (metrics and logs) from your own resources, while Azure Service Health notifies you about global Azure service issues and planned maintenance.
Question 654Question →

Match each Microsoft Azure cloud model to its corresponding deployment description.

Click a left item, then click its matching right item

Items

Public cloud
Private cloud
Hybrid cloud

Matches

Show answer & explanation

Answer

Public cloud matches with shared resources and no capital expenditure; Private cloud matches with dedicated hardware and highest control; Hybrid cloud matches with the combination of on-premises and public cloud resources.
Public cloud corresponds to shared resources and zero capital expenditure for physical hardware. Private cloud corresponds to dedicated infrastructure providing the highest control and security. Hybrid cloud corresponds to combining on-premises datacenters with public cloud services.

Step-by-Step Solution

1
Identify the characteristic of Public cloud
Public cloud is characterized by shared multi-tenant resources and zero capital expenditure for physical hardware.
This matches the description of resources being shared among multiple tenants with no capital expenditure.
2
Identify the characteristic of Private cloud
Private cloud is characterized by dedicated infrastructure that provides maximum control and security.
This matches the description of resources dedicated exclusively to a single organization.
3
Identify the characteristic of Hybrid cloud
Hybrid cloud is characterized by combining local/on-premises resources with a public cloud provider.
This matches the description of combining private/on-premises infrastructure with a public cloud.

Key Concept

Cloud deployment models (Public, Private, and Hybrid)
Estimated Time:1m 0s
Question 655Question →

A company is planning its migration to Microsoft Azure and wants to understand the core cloud concepts before deploying services.

Which two statements correctly describe the characteristics of high availability and elasticity?

Select all that apply

Show answer & explanation

Answer: High availability ensures that a system remains operational and accessible with minimal downtime.; Elasticity allows a system to automatically scale resources up or down to match dynamic demand.

Answer

High availability ensures that a system remains operational and accessible with minimal downtime, while elasticity allows a system to automatically scale resources up or down to match dynamic demand.
The correct statements describe high availability and elasticity. High availability ensures that applications remain operational and accessible with minimal downtime, typically using redundancy. Elasticity is the ability of cloud systems to automatically and dynamically adjust resources in response to changing demand.

Step-by-Step Solution

1
Analyze the definition of high availability.
High availability focuses on maximizing uptime and ensuring service availability through redundant components, rather than recovering from regional disasters.
This helps identify the statement regarding continuous uptime as correct, and rules out disaster recovery scenarios.
2
Analyze the definition of elasticity.
Elasticity is the automatic, dynamic scaling of resources based on immediate demand, rather than manual, permanent hardware upgrades.
This helps identify the statement regarding automatic resource scaling as correct, and rules out manual scaling configurations.

Key Concept

High availability ensures uptime and accessibility, whereas elasticity provides automatic scaling in response to dynamic demand.
Question 656Question →

A municipal government currently hosts a public transit tracking application on Azure Virtual Machines. To reduce administrative overhead, the IT department plans to migrate the application to Azure App Service. How will the responsibility for operating system patching change after this migration?

Show answer & explanation

Answer: It shifts from the municipal government to Microsoft.

Answer

The responsibility for operating system patching shifts from the municipal government to Microsoft.
Migrating from Azure Virtual Machines (an Infrastructure as a Service, or IaaS, offering) to Azure App Service (a Platform as a Service, or PaaS, offering) shifts several management responsibilities. Under IaaS, the customer is fully responsible for configuring, updating, and patching the operating system of the virtual machines. Under PaaS, Microsoft manages the physical infrastructure, virtualization layer, and the operating system, which includes applying all OS patches. Therefore, the responsibility for operating system patching shifts from the municipal government to Microsoft.

Step-by-Step Solution

1
Identify the service models before and after the migration.
The initial state (Azure Virtual Machines) is Infrastructure as a Service (IaaS). The target state (Azure App Service) is Platform as a Service (PaaS).
Understanding the service models is necessary to apply the rules of the Shared Responsibility Model.
2
Analyze how responsibility for operating system management differs between IaaS and PaaS.
In IaaS, the customer (municipal government) is responsible for managing the operating system, including updates and patching. In PaaS, the cloud provider (Microsoft) manages the operating system, middleware, and runtime.
Comparing the responsibility boundaries determines the direction of the shift.
3
Formulate the change in responsibility.
Since the responsibility transitions from the customer (IaaS) to the cloud provider (PaaS), the responsibility for operating system patching shifts from the municipal government to Microsoft.
This matches the correct option description.

Key Concept

Shared Responsibility Model transition from IaaS to PaaS
Question 657Question →

An enterprise is migrating its legacy database and web application to Azure. The database requires consistent performance during predictable month-end processing, which is achieved by upgrading the virtual machine to a size with more CPU and RAM. However, the front-end web tier must automatically handle sudden, unpredicted spikes in user traffic by adding and removing virtual machine instances, while the overall system must remain operational even if an entire datacenter within the region suffers a power outage.

Which combination of cloud characteristics matches the database adjustment, the web tier behavior, and the outage protection requirements, in that order?

Show answer & explanation

Answer: Vertical scaling, elasticity, and high availability

Answer

Vertical scaling, elasticity, and high availability
Upgrading the resources of an existing virtual machine (adding CPU and RAM) is vertical scaling. Automatically adding or removing virtual machine instances in response to unpredictable traffic demands is elasticity. Ensuring the application remains operational during a single datacenter failure within the same region is high availability.

Step-by-Step Solution

1
Analyze the database configuration requirement.
Upgrading the resources (CPU and RAM) of an existing virtual machine represents vertical scaling (scaling up).
Vertical scaling increases the capacity of an existing resource, whereas horizontal scaling adds more resource instances.
2
Analyze the front-end web tier requirement.
Automatically adding and removing virtual machine instances in response to unpredicted fluctuations in traffic represents elasticity.
Elasticity refers to the dynamic, automated scaling of resources in and out based on real-time demand.
3
Analyze the power outage resilience requirement.
Ensuring the application remains operational despite a local datacenter failure within the same region represents high availability.
High availability focuses on maximizing service uptime and redundancy within a region (e.g., across Availability Zones), whereas disaster recovery focuses on recovering from a catastrophic regional failure.

Key Concept

Distinguishing between vertical/horizontal scaling, elasticity/scalability, and high availability/disaster recovery.
Estimated Time:2m 0s
Question 658Question →

An organization is evaluating infrastructure as code (IaC) deployment methods for their Azure environment. They review the following statement regarding Bicep templates:

Statement: Azure Resource Manager (ARM) templates written in Bicep require a separate runtime engine to be installed in Azure before they can be executed.

Is this statement true or false?

Show answer & explanation

Answer: False

Answer

False
The statement is false because Azure Bicep is a domain-specific language that compiles/transpiles to standard JSON Azure Resource Manager (ARM) templates. Azure Resource Manager natively interprets the JSON templates, so there is no Bicep runtime engine installed in Azure.

Step-by-Step Solution

1
Analyze Bicep's architecture and how Bicep files are processed.
Identify that Bicep is a domain-specific language (DSL) designed to simplify the authoring of Azure Resource Manager (ARM) templates.
Understanding the design goal of Bicep helps clarify how it interacts with the Azure platform.
2
Evaluate the deployment mechanism of Bicep files.
Note that Bicep files (.bicep) are compiled (transpiled) into standard JSON ARM templates (.json) before execution, and the native Azure Resource Manager handles the deployment.
This confirms that Azure does not run Bicep code directly and does not need a special engine to execute it.

Key Concept

Bicep transpilation to standard JSON ARM templates and execution via the native Azure Resource Manager engine
Question 659Question →

A financial institution uses Azure Blob Storage to retain historical transaction logs for regulatory compliance. The logs are rarely accessed and are stored in the Archive access tier to minimize cost. An auditor requests access to a specific log file from three years ago.

Which requirement must the institution meet before the auditor can read the log file?

Show answer & explanation

Answer: The log file must be rehydrated to an online tier, such as Hot or Cool, before it can be read.

Answer

The log file must be rehydrated to an online tier, such as Hot or Cool, before it can be read.
Data in the Archive access tier is offline and cannot be read directly. To read this data, it must first be rehydrated (copied or moved) to an online tier such as Hot or Cool.

Step-by-Step Solution

1
Determine the state of the data stored in the Archive access tier.
The Archive tier is an offline storage tier designed for rarely accessed data.
Understanding that data in the Archive tier is not immediately accessible.
2
Identify the process required to access offline blobs.
To access the data, the blob must be rehydrated to an online tier (Hot or Cool).
Data must be brought online before it can be read or modified.
3
Determine if customer infrastructure management is required.
Azure Storage is a PaaS service, so no OS management is required by the customer.
Distinguishing cloud service model responsibilities.

Key Concept

Azure Blob Storage Archive Access Tier and Rehydration
Question 660Question →

An administrator creates a resource group named `rg-finance-prod` and applies a tag with the key `CostCenter` and value `Finance-12` to the resource group. The administrator then deploys several Azure Virtual Machines and Azure SQL databases into this resource group. To track spending, the administrator runs a query in Azure Cost Management filtered by the `CostCenter: Finance-12` tag.

Which of the following describes the outcome of this query?

Show answer & explanation

Answer: The query will return zero costs for the virtual machines and databases because resources do not automatically inherit tags from their parent resource group.

Answer

The query will return zero costs for the virtual machines and databases because resources do not automatically inherit tags from their parent resource group.
In Azure, resources do not automatically inherit tags that are applied to their parent resource group. Because the virtual machines and databases do not have the tag applied directly to them, a query filtered by the tag key and value applied to the resource group will return zero costs for those resources.

Step-by-Step Solution

1
Analyze the tag assignment behavior between a resource group and its child resources.
Identify that tags applied directly to a resource group are not automatically inherited by the resources deployed inside it.
Azure Resource Manager treats tags as flat, non-inheriting metadata at the individual resource boundary by default.
2
Determine the impact of this behavior on Azure Cost Management queries.
Since the resources do not inherit the 'CostCenter' tag, they do not possess this metadata, and a cost query filtered by this tag will yield zero results for these resources.
Cost Management filters cost data based on the metadata actually present on the resources at the time of billing.

Key Concept

Azure Resource Tag Inheritance
Estimated Time:1m 0s
PreviousPage 33 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin