Examkin

All practice questions

1186 questions

All types1,186Multiple choice620Multiple select228True / False291Matching47
Question 721Question →

In Microsoft Azure, when you apply a tag to a resource group, all resources residing within that resource group automatically inherit the tag.

Show answer & explanation

Answer: False

Answer

False
The statement is false because Azure resource tags are not inherited from resource groups by the resources inside them.

Step-by-Step Solution

1
Determine the resource organizational boundary where the tag is applied.
The tag is applied at the resource group level.
This establishes the scope of the metadata assignment.
2
Assess whether Azure resources inherit metadata tags from their parent logical containers.
Azure resources do not inherit tags from the resource group they belong to.
By design, tag inheritance from a resource group to child resources is not automatic in Azure.

Key Concept

Azure resource tag inheritance behavior
Estimated Time:45s
Question 722Question →

A company plans to deploy a web application and an Azure SQL database using Azure Resource Manager (ARM) templates. The operations team wants to define the resources and their relationships in a configuration file, allowing Azure to determine the optimal deployment order. The resource group for this deployment is created in the East US region, but the SQL database must be located in the West US region for compliance.

Which of the following describes the capabilities of ARM templates and resource groups for this scenario?

Show answer & explanation

Answer: ARM templates are declarative, allowing Azure to determine the deployment sequence, and resources can be deployed to a different region than the resource group.

Answer

ARM templates are declarative, allowing Azure to determine the deployment sequence, and resources can be deployed to a different region than the resource group.
The correct option states that ARM templates are declarative and that resources can reside in a different region than their resource group. This is because ARM templates define the desired state rather than execution steps, and resource groups only store metadata in their designated region, allowing the actual resources to reside in any supported location.

Step-by-Step Solution

1
Analyze the deployment execution model of Azure Resource Manager (ARM) templates.
ARM templates are declarative configurations where you specify the desired state, rather than imperative scripts where you define sequential steps.
This allows Azure to automatically resolve dependencies and determine the optimal order to deploy resources.
2
Analyze the location requirements of resources within an Azure resource group.
Resources do not inherit or require the location of their resource group.
The resource group's location is only used to store metadata about the resources, meaning individual resources like the SQL database can be deployed to a different region (West US) than the group itself (East US).
3
Analyze the structural hierarchy of resource groups.
Resource groups cannot be nested inside other resource groups.
All resource groups exist directly under an Azure subscription, meaning hierarchical nesting is not supported.

Key Concept

Azure Resource Manager templates are declarative configuration tools, and resources in a resource group can be deployed across different Azure regions.
Question 723Question →

An organization is transitioning its cloud infrastructure deployment model to Azure. The operations team wants to define their target infrastructure state in a configuration file and let Azure determine the correct sequence of resource creation and configuration automatically.

Which capability or feature of Azure Resource Manager (ARM) templates or Bicep supports this deployment approach?

Show answer & explanation

Answer: Declarative syntax, which defines the desired end-state infrastructure without specifying the sequence of commands to create it.

Answer

Declarative syntax, which defines the desired end-state infrastructure without specifying the sequence of commands to create it.
The correct answer defines the declarative nature of Azure Resource Manager templates and Bicep. Declarative syntax allows you to specify the resources you need and their properties without needing to write step-by-step commands to build them. Azure Resource Manager automatically determines dependencies and creates the resources in the correct order.

Step-by-Step Solution

1
Identify the organization's requirement to define infrastructure state and automate the creation order.
Recognized the need for a mechanism where the platform, rather than the user, determines the sequence of resource provisioning.
This establishes the distinction between declarative (what to build) and imperative (how to build) models.
2
Evaluate the capabilities of Azure Resource Manager (ARM) templates and Bicep.
Confirmed that ARM templates and Bicep use declarative syntax to define the desired end-state of the infrastructure.
This matches the requirement since Azure handles the dependency mapping and creation order under the hood.

Key Concept

Declarative nature of ARM templates and Bicep
Estimated Time:1m 0s
Question 724Question →

A company implements an automated deployment pipeline using Azure Resource Manager (ARM) templates to ensure that their development, testing, and production environments are configured identically. They also host the application database across multiple Availability Zones to ensure it remains online if a single data center fails. Which cloud concepts are directly demonstrated by this architecture?

Show answer & explanation

Answer: Predictability and Reliability

Answer

Predictability and Reliability
The correct answer is the option stating 'Predictability and Reliability'. Using Azure Resource Manager (ARM) templates ensures that the infrastructure is deployed consistently across environments, which directly demonstrates predictability (specifically deployment and configuration predictability). Hosting the database across multiple Availability Zones protects the application against data center failures, which directly demonstrates reliability (through high availability and fault tolerance).

Step-by-Step Solution

1
Analyze the first requirement: deploying identical environments using templates.
Using infrastructure as code (like ARM templates) guarantees that deployments are consistent and repeatable across development, test, and production. This ensures that performance and setup are predictable.
To identify which cloud concept describes consistent, repeatable resource deployment.
2
Analyze the second requirement: database surviving a localized data center failure using Availability Zones.
Availability Zones are physically separate data centers within an Azure region. Distributing resources across them ensures high availability and fault tolerance, which are key components of reliability.
To identify which cloud concept describes recovering from localized hardware failures and maintaining uptime.
3
Combine the identified cloud concepts and match them with the options.
The two concepts demonstrated are Predictability and Reliability.
To determine the correct choice.

Key Concept

Reliability and predictability are core cloud benefits. Reliability ensures systems recover from failures and continue to function, while predictability refers to performance, cost, and consistent resource deployment.
Question 725Question →

Azure Files supports the Network File System (NFS) protocol for file shares created in standard general-purpose v2 storage accounts.

Show answer & explanation

Answer: False

Answer

False
The statement is false because Azure Files supports the Network File System (NFS) protocol only on premium file shares. Premium file shares require a premium FileStorage account type. Standard general-purpose v2 storage accounts do not support NFS file shares and are limited to Server Message Block (SMB) and REST protocols.

Step-by-Step Solution

1
Identify the storage protocols supported by Azure Files under different storage account types.
Azure Files supports both SMB and NFS protocols, but they have different account requirements.
To determine if NFS can be used with standard general-purpose v2 accounts.
2
Verify the requirements for deploying NFS file shares in Azure Files.
NFS file shares require premium performance and must be created in premium FileStorage accounts.
Standard general-purpose v2 accounts only support the SMB protocol for file sharing.

Key Concept

Azure Files protocol support and storage account tiers
Question 726Question →

An administrator creates an Azure resource group named RG-Prod in the West US region. The administrator needs to deploy a virtual machine to run an application. Which of the following statements is correct regarding the location of the resource group and the location of the virtual machine?

Show answer & explanation

Answer: The virtual machine can be deployed in any available Azure region, regardless of the West US location of the resource group.

Answer

The virtual machine can be deployed in any available Azure region, regardless of the West US location of the resource group.
In Azure, resources within a resource group do not need to share the same location as the resource group itself. The location of the resource group determines where its metadata is stored, but the actual resources can be deployed to any available region to support multi-region setups.

Step-by-Step Solution

1
Analyze the relationship between resource groups and the location of their resources in Azure.
A resource group requires a location to store its metadata, but it is a logical container that does not enforce a regional boundary on the resources themselves.
This establishes that resource group location and resource location are independent.
2
Evaluate the deployment capability of the virtual machine in relation to the resource group's location.
The virtual machine can be deployed to any available Azure region (e.g., East US, West Europe) and still belong to the RG-Prod resource group.
This confirms that the resources inside the resource group can reside in different regions.

Key Concept

Resource Group Location Independence
Estimated Time:45s
Question 727Question →

A logistics firm runs a custom delivery dispatch application on Azure virtual machines. The operations team wants to track global Azure infrastructure incidents that could impact their deployment, and they also need to collect local performance counters such as disk write operations directly from the operating systems of their virtual machines. Which combination of services should the firm use for these two requirements?

Show answer & explanation

Answer: Azure Service Health to track global infrastructure incidents, and Azure Monitor to collect virtual machine performance counters

Answer

Azure Service Health to track global infrastructure incidents, and Azure Monitor to collect virtual machine performance counters
The correct answer correctly maps Azure Service Health to the task of tracking global infrastructure outages and maintenance, and Azure Monitor to the task of collecting performance counters from the virtual machine operating systems. Azure Service Health provides a personalized dashboard of the health of Azure services in the regions where you use them, while Azure Monitor gathers metric and log data from specific resources.

Step-by-Step Solution

1
Identify the service that provides notifications about global Azure infrastructure incidents, service outages, and planned maintenance affecting the subscription.
Azure Service Health is identified as the service responsible for tracking platform-level health and outages.
This matches the requirement to monitor global infrastructure incidents rather than individual resource telemetry.
2
Identify the service that collects and analyzes resource-level performance counters, such as disk write operations, directly from virtual machine operating systems.
Azure Monitor (specifically using metrics and diagnostics/agents) is identified as the service responsible for resource-level performance data collection.
This matches the requirement to capture specific metrics from the workloads hosted on Azure.
3
Select the option that pairs Azure Service Health for global platform incidents with Azure Monitor for resource performance counters.
The correct combination is determined to be Azure Service Health and Azure Monitor respectively.
This aligns both requirements to their correct native Azure management and governance services.

Key Concept

Distinguishing between Azure Monitor and Azure Service Health for tracking cloud environment status versus individual resource telemetry.
Question 728Question →

A company transitions its on-premises SQL database servers to Azure SQL Database to shift their IT spending from Capital Expenditure (CapEx) to Operational Expenditure (OpEx). The administrator applies a resource tag named `BillingCode: DeptF` directly to the resource group containing the Azure SQL databases. Which of the following describes the billing classification and tagging behavior of these databases in Azure Cost Management?

Show answer & explanation

Answer: The database costs are categorized as Operational Expenditure (OpEx), but they are not automatically grouped under the BillingCode: DeptF tag.

Answer

The database costs are categorized as Operational Expenditure (OpEx), but they are not automatically grouped under the BillingCode: DeptF tag.
Migrating to Azure SQL Database shifts costs from Capital Expenditure (CapEx), which involves upfront physical infrastructure costs, to Operational Expenditure (OpEx), which is a consumption-based, ongoing operational cost. Additionally, Azure resource tags applied to a resource group are not inherited by the resources inside that resource group. Therefore, the database costs will be categorized as OpEx, but will not show the applied tag in cost reports unless the tag is directly applied to the database resources.

Step-by-Step Solution

1
Determine the financial expenditure model classification for the database migration.
Operational Expenditure (OpEx)
Azure SQL Database is a Platform as a Service (PaaS) offering billed on a consumption basis (OpEx), shifting away from the upfront hardware procurement costs of on-premises servers (CapEx).
2
Analyze the tag inheritance behavior between the resource group and the databases.
The databases do not inherit the BillingCode: DeptF tag.
In Azure, resource tags applied at the resource group level do not automatically inherit down to the resources within that group.

Key Concept

Azure resource tags are not inherited from resource groups to resources, and cloud services use a consumption-based OpEx model.
Question 729Question →

A retail company is migrating its e-commerce platform to Microsoft Azure. The migration plan includes deploying database workloads to Azure SQL Database (a Platform as a Service / PaaS offering) and web servers to Azure Virtual Machines (an Infrastructure as a Service / IaaS offering). The company's security team is defining their cloud governance and compliance strategy.

When comparing the management and security responsibilities of these two deployments, which of the following is correct?

Show answer & explanation

Answer: The retail company is responsible for operating system patching on the web servers, while Microsoft automatically handles operating system patching and physical security for the database solution.

Answer

The retail company is responsible for operating system patching on the web servers, while Microsoft automatically handles operating system patching and physical security for the database solution.
Under the shared responsibility model, the division of management tasks depends on the cloud service model. For Infrastructure as a Service (IaaS) resources like Azure Virtual Machines, the customer maintains full control and responsibility over the guest operating system, which includes applying patches and software updates. For Platform as a Service (PaaS) resources like Azure SQL Database, the cloud provider (Microsoft) handles physical security, infrastructure maintenance, and operating system updates, letting the customer focus on data governance and application-level settings.

Step-by-Step Solution

1
Identify the service types for each workload in the scenario.
Azure Virtual Machines is an Infrastructure as a Service (IaaS) offering, and Azure SQL Database is a Platform as a Service (PaaS) offering.
Management and security responsibilities differ based on the cloud service model.
2
Apply the shared responsibility model to both service types.
For IaaS, the customer patches the guest OS and manages applications. For PaaS, Microsoft patches the OS and manages the physical infrastructure, while the customer manages data and database access.
Determining the correct division of tasks identifies the true statement.

Key Concept

Shared responsibility model across IaaS and PaaS service types
Estimated Time:1m 0s
Question 730Question →

A company is planning to migrate its workloads to the cloud. The IT administrator wants to ensure that they can deploy resources using standardized templates, track resource configurations, and audit deployments for compliance. Which cloud benefit does this scenario describe?

Show answer & explanation

Answer: Manageability and governance

Answer

Manageability and governance
The correct answer is manageability and governance. Manageability and governance represent the cloud computing benefits that allow organizations to deploy resources consistently using templates, monitor resources, and enforce compliance policies automatically.

Step-by-Step Solution

1
Identify the core requirements described in the scenario, which are deploying resources via templates, tracking resource configurations, and auditing deployments for compliance.
These requirements focus on resource standardization, control, and compliance auditing.
Understanding the administrator's goals helps map them to the correct cloud benefit.
2
Compare the requirements with the definitions of key cloud benefits.
Manageability and governance directly address the deployment of resources using templates and auditing them to ensure alignment with organizational policies.
Matching the scenario's features to cloud computing benefits identifies the correct answer.

Key Concept

Cloud Manageability and Governance
Question 731Question →

An administrator applies a tag with the key 'Environment' and value 'Production' to an Azure resource group. The resource group contains several virtual machines. When viewing the cost analysis in Azure Cost Management, the administrator filters the report by the 'Environment: Production' tag, but the virtual machines are not included in the filtered results. Which of the following explains this behavior?

Show answer & explanation

Answer: Resources within a resource group do not inherit the tags applied to the resource group.

Answer

Resources within a resource group do not inherit the tags applied to the resource group.
In Azure, resource tags are not inherited from resource groups. For cost reports in Azure Cost Management to reflect tag filters, the tags must be applied directly to the individual resources.

Step-by-Step Solution

1
Analyze how tags are applied and inherited in Azure.
Confirm that tags applied to a resource group are not inherited by the resources inside that resource group.
This is a fundamental behavior of Azure Resource Manager (ARM) tagging.
2
Determine how Azure Cost Management filters costs.
Cost Management filters cost reports based on tags applied directly to resources.
Because the virtual machines do not have the tag applied directly, filtering by the tag in the report will not return their costs.

Key Concept

Azure resource tags do not inherit from resource groups to resources, which directly impacts cost filtering in Azure Cost Management.
Question 732Question →

A healthcare provider deploys a web-based patient portal using Azure App Service. The cloud engineering team needs to:
1. View metrics and trace logs to isolate performance bottlenecks within the application's code.
2. Check for scheduled platform maintenance or region-wide outages that could impact the availability of the App Service plan.

Which Azure services or features should the team use for these respective needs?

Show answer & explanation

Answer: Application Insights (a feature of Azure Monitor) for code performance bottlenecks, and Azure Service Health for scheduled maintenance and outages

Answer

Application Insights (a feature of Azure Monitor) for code performance bottlenecks, and Azure Service Health for scheduled maintenance and outages
The correct option correctly maps Application Insights (part of Azure Monitor) to application-level diagnostics (identifying code bottlenecks) and Azure Service Health to platform-level events (planned maintenance and outages).

Step-by-Step Solution

1
Identify the service needed to monitor custom application code performance and trace logs.
Application Insights (a feature of Azure Monitor) is designed for application performance management (APM) and code-level diagnostics.
Azure Monitor tracks resource-level metrics, and its Application Insights feature specifically monitors live applications to identify performance bottlenecks and anomalies.
2
Identify the service needed to track broad infrastructure issues, region-wide outages, and scheduled Azure platform maintenance.
Azure Service Health provides a personalized view of the health of Azure services in the regions and subscriptions where resources are deployed.
Unlike resource-level monitoring, Azure Service Health informs you about outages and maintenance events planned by Microsoft that affect the underlying cloud infrastructure.

Key Concept

Azure Monitor (specifically Application Insights) is used for application-level diagnostics and performance tracking, whereas Azure Service Health is used to track cloud-wide service degradations, outages, and planned maintenance affecting your resources.
Question 733Question →

A software development team is configuring deployment mechanisms for their environments in Azure. They want to transition from manual portal configurations to declarative deployments using Bicep. Which two statements describe valid features or capabilities of Bicep and Azure Resource Manager (ARM) templates? (Select TWO)

Select all that apply

Show answer & explanation

Answer: They support declarative syntax, allowing you to define the desired end-state infrastructure without writing the sequence of programming commands.; They support deploying resources to a different Azure region than the region of the resource group containing them.

Answer

ARM templates and Bicep files are declarative, meaning they define the desired end-state rather than step-by-step commands, and they allow resources to be deployed in different regions than the parent resource group.
ARM templates and Bicep utilize a declarative syntax, enabling administrators to state the desired end-state of the infrastructure rather than specifying execution steps. Additionally, resources inside a resource group can be placed in different Azure regions from the resource group itself, as the resource group's location is only used to store metadata.

Step-by-Step Solution

1
Analyze template syntax paradigm.
Identify that templates are declarative, defining the desired state of infrastructure.
This rules out the choice regarding imperative scripts.
2
Evaluate resource group capabilities and limitations.
Recall that resource groups cannot be nested, and resources can be deployed to a different location than their parent resource group.
This rules out the nesting option and validates the location flexibility option.

Key Concept

Azure Resource Manager (ARM) templates and Bicep provide a declarative way to manage infrastructure, where resources in a group can reside in different Azure regions.
Question 734Question →

A financial institution maintains its core banking database on dedicated servers located within its own local data center. To handle seasonal traffic spikes, the institution hosts its public-facing loan application on Microsoft Azure. Which cloud deployment model is represented by this configuration?

Show answer & explanation

Answer: Hybrid cloud

Answer

Hybrid cloud
The correct answer is the hybrid cloud. A hybrid cloud model connects public cloud resources (like Microsoft Azure) with private, on-premises infrastructure (like a local data center). In this scenario, the financial institution uses both environments to meet its needs, keeping sensitive database resources on-premises while leveraging the public cloud for scalability during traffic spikes.

Step-by-Step Solution

1
Analyze the resource location and ownership described in the scenario.
The core database is kept on the organization's own dedicated hardware in its own local data center (private/on-premises), while the public application is hosted on Microsoft Azure (public cloud).
Identifying where the workloads run and who owns the hardware is the first step in determining the cloud model.
2
Determine which cloud model connects these two distinct environments.
A hybrid cloud model is defined by the integration of on-premises infrastructure (private) with public cloud services.
This matches the definition of a hybrid cloud, which allows data and apps to be shared between them.

Key Concept

Cloud Models (Public, Private, Hybrid, Multi-cloud)
Estimated Time:45s
Question 735Question →

An online retailer is migrating its customer loyalty application from self-managed servers on Azure Virtual Machines to a fully managed Software as a Service (SaaS) platform. Under the Microsoft Shared Responsibility Model, which responsibility shifts entirely from the customer to Microsoft as a result of this migration?

Show answer & explanation

Answer: Configuring and maintaining network controls

Answer

Configuring and maintaining network controls
In an Infrastructure as a Service (IaaS) deployment, such as Azure Virtual Machines, the customer is responsible for defining and configuring network controls, including Virtual Networks and Network Security Groups. When migrating to a Software as a Service (SaaS) model, the cloud provider (Microsoft) takes full responsibility for managing the application's underlying network infrastructure and network security controls, meaning the customer no longer manages network controls for that application.

Step-by-Step Solution

1
Analyze the starting model (Azure Virtual Machines) and the target model (SaaS).
Azure Virtual Machines is an IaaS model where the customer manages network controls. SaaS is a fully managed model where the provider manages all underlying infrastructure including network controls.
To identify which responsibilities shift, we must compare the customer's duties in IaaS versus SaaS.
2
Evaluate the shared responsibility boundaries for data, identity, endpoints, and networking.
Data, endpoints, and identity accounts always remain the customer's responsibility. Network controls shift from customer-managed in IaaS to cloud provider-managed in SaaS.
This determines which of the given options represents a shifted responsibility rather than a constant customer responsibility.

Key Concept

Shared Responsibility Model
Estimated Time:1m 0s
Question 736Question →

A company wants to ensure its web application remains operational even if an entire datacenter in its primary region experiences a power failure. To achieve this, the company deploys virtual machines across separate physical locations within the same region.

Which cloud capability is the company utilizing to meet this goal?

Show answer & explanation

Answer: High availability using Availability Zones

Answer

High availability using Availability Zones
The correct answer is high availability using Availability Zones. High availability ensures that applications remain accessible by hosting them on redundant infrastructure within the same region, such as in separate physical datacenters with independent power and cooling (Availability Zones).

Step-by-Step Solution

1
Analyze the business requirement
The company wants to maintain application uptime and protect against a power failure in a single datacenter within the same region.
This establishes the scope as localized redundancy (high availability) rather than regional failover (disaster recovery) or dynamic resource resizing (elasticity).
2
Identify the correct cloud concept and architecture component
Deploying resources across separate physical locations (Availability Zones) within the same region provides high availability.
Availability Zones are isolated datacenters within an Azure region designed to protect applications from localized datacenter outages.

Key Concept

High Availability and Availability Zones
Question 737Question →

An organization is deploying an application on a single Azure Virtual Machine. The application requires dedicated, low-latency block storage for its operating system and database files. Additionally, the organization needs to store database backup files that are rarely accessed, must be kept for several years at the lowest possible cost, and can tolerate a retrieval latency of several hours. Which storage configuration should the organization select to meet these requirements?

Show answer & explanation

Answer: Azure Disk Storage for the virtual machine files, and Azure Blob Storage configured with the Archive access tier for the backup files.

Answer

The configuration using Azure Disk Storage for the virtual machine files and Azure Blob Storage Archive tier for the backup files.
The configuration using Azure Disk Storage for the virtual machine files and Azure Blob Storage Archive tier for the backup files is correct because Azure Disk Storage provides the dedicated block storage required for VM virtual hard disks, and the Archive tier of Azure Blob Storage offers the lowest cost for long-term, rarely accessed data that can tolerate retrieval times of several hours.

Step-by-Step Solution

1
Analyze the virtual machine storage requirements.
The requirement specifies dedicated, low-latency block storage for OS and database files attached to a single VM, which points directly to Azure Disk Storage rather than Azure Files (which is shared file storage).
Azure Disk Storage provides volume-level block storage volumes for Azure VMs.
2
Analyze the backup storage requirements.
The backups are rarely accessed, require the lowest cost, and can tolerate a retrieval delay of several hours. This matches the characteristics of the Archive access tier in Azure Blob Storage.
The Archive access tier has the lowest storage costs but higher access costs and retrieval latency (requiring rehydration).
3
Evaluate the management responsibilities and access constraints.
Azure VMs are IaaS resources where the customer patches the OS. Additionally, data in the Archive tier cannot be read directly without rehydration.
Correctly identifying IaaS responsibilities and Archive tier access constraints eliminates the distractors.

Key Concept

Selecting appropriate Azure storage services (Disk vs. Files) and Blob storage tiers based on workload latency, access patterns, and cost constraints.
Question 738Question →

An organization is planning to migrate a legacy enterprise resource planning (ERP) application to Microsoft Azure. The migration requirements specify the following constraints:

* The application database engine requires specific operating system-level performance tuning and a custom kernel configuration.
* The organization must implement custom third-party security monitoring agents directly in the operating system kernel.
* The organization requires complete control over virtual network routing, including the deployment of custom virtual appliances.
* The organization wants to eliminate the cost and overhead of purchasing, maintaining, and housing physical servers, storage, and networking hardware.

According to the cloud shared responsibility model, which cloud service category must the organization select, and who is responsible for patching the guest operating system in this deployment?

Show answer & explanation

Answer: Infrastructure as a Service (IaaS); the organization is responsible for patching the guest operating system.

Answer

Infrastructure as a Service (IaaS); the organization is responsible for patching the guest operating system.
The correct answer is the option designating Infrastructure as a Service (IaaS) where the organization patches the guest operating system. This model is required because the scenario involves constraints (custom OS kernel configurations, OS-level tuning, custom virtual appliances) that require root/administrative access to the operating system and network settings, which are only available in IaaS. Under the cloud shared responsibility model for IaaS, Microsoft manages the physical security, servers, and hypervisor, while the customer is responsible for guest operating system configuration, patching, and security.

Step-by-Step Solution

1
Evaluate the architectural constraints to determine the required level of control over the host.
The need for custom kernel configurations, OS-level tuning, and custom virtual routing appliances indicates that the organization requires full administrative access to the operating system and virtual networks.
This rules out PaaS and SaaS models, which abstract the operating system and networking controls away from the customer.
2
Evaluate the requirement to eliminate physical server and datacenter management.
This requirement rules out on-premises private cloud deployments and confirms a public cloud model must be used.
A public cloud model handles physical infrastructure overhead while allowing the organization to focus on virtual resources.
3
Identify the public cloud service model that meets the control requirements.
Infrastructure as a Service (IaaS) is selected because it provides virtualized compute resources (virtual machines) that grant full guest OS and networking control to the customer.
IaaS is the only service model that allows the deployment of custom virtual appliances and custom OS configurations.
4
Determine the shared responsibility owner for guest operating system patching under the IaaS model.
In IaaS, the customer retains responsibility for the guest operating system, including patching, updates, and security configurations, while Microsoft manages physical hosts, hypervisors, and physical security.
To correctly define the division of operational responsibilities.

Key Concept

Infrastructure as a Service (IaaS) provides maximum control over virtual machines and network configurations, placing the responsibility of guest operating system management, maintenance, and patching entirely on the customer.
Estimated Time:2m 0s
Question 739Question →

An organization is evaluating different cloud models to determine the best approach for hosting its services. Match each cloud model to the description that best represents its typical implementation.

Click a left item, then click its matching right item

Items

Public cloud
Private cloud
Hybrid cloud
Multi-cloud

Matches

Show answer & explanation

Answer

Public cloud matches the description of running web applications on shared hardware infrastructure owned by a third-party provider. Private cloud matches hosting legacy applications on dedicated physical servers within a secure on-premises datacenter. Hybrid cloud matches connecting a local Active Directory server with Azure Active Directory. Multi-cloud matches distributing microservices across Microsoft Azure and Amazon Web Services (AWS) without connecting them.
Public cloud uses shared hardware from a third-party provider. Private cloud utilizes dedicated, single-tenant hardware on-premises. Hybrid cloud connects on-premises assets to public cloud resources. Multi-cloud uses multiple independent public cloud providers.

Step-by-Step Solution

1
Analyze the description involving third-party shared infrastructure.
This aligns with the public cloud model where resources are multi-tenant and managed by a cloud provider.
Public cloud is characterized by shared resources accessed via the internet without ownership of physical hardware.
2
Analyze the description of dedicated physical servers located in an on-premises datacenter.
This aligns with the private cloud model.
Private cloud provides exclusive use of resources by a single organization, often on-premises for maximum control and security.
3
Analyze the description of syncing on-premises Active Directory with Azure Active Directory.
This aligns with the hybrid cloud model.
A hybrid model connects private (on-premises) infrastructure to public cloud services to allow joint operation.
4
Analyze the description of using both Azure and AWS independently.
This aligns with the multi-cloud model.
Multi-cloud refers to using two or more public cloud providers simultaneously for distinct workloads without bridging them in a hybrid configuration.

Key Concept

Cloud deployment models (public, private, hybrid, and multi-cloud) determine resource ownership, accessibility, and integration levels.
Estimated Time:1m 0s
Question 740Question →

Regarding cloud manageability, 'management of the cloud' refers to the tasks that the customer performs to configure, scale, and monitor their cloud resources. Is this statement true or false?

Show answer & explanation

Answer: False

Answer

The statement is false because the described activities represent 'management in the cloud', while 'management of the cloud' is the responsibility of the cloud provider.
The correct answer is False because the customer's configuration, scaling, and monitoring of resources represent 'management in the cloud', whereas 'management of the cloud' is handled by the cloud provider.

Step-by-Step Solution

1
Analyze the statement to identify the key term 'management of the cloud' and the associated tasks (configuring, scaling, and monitoring).
Recognize that the tasks described are performed by the customer on their own resources.
To determine which manageability domain these tasks belong to.
2
Compare these tasks against the definitions of 'management of the cloud' and 'management in the cloud'.
Determine that customer tasks are classified as 'management in the cloud', whereas 'management of the cloud' refers to the cloud provider's management of the physical infrastructure.
To evaluate whether the statement's definition is correct.

Key Concept

Manageability in the cloud (management of the cloud vs. management in the cloud)
Estimated Time:45s
PreviousPage 37 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin