All practice questions

1186 questions

Question 741Question

A university is migrating its student information system to a cloud environment. The administration wants to ensure the platform provides robust security, governance, and manageability for all departments. Which two statements describe the security, governance, or manageability benefits of cloud computing?

Select all that apply

Show answer & explanation

Answer: Cloud governance provides tools like resource templates and automated policies to ensure all deployed workloads remain compliant with organizational standards.; Cloud manageability allows administrators to deploy, monitor, and configure resources using command-line interfaces, web portals, and APIs.

Answer

The correct statements are that cloud governance provides tools like resource templates and automated policies to ensure compliance, and cloud manageability allows administrators to deploy, monitor, and configure resources using command-line interfaces, web portals, and APIs.
Governance benefits include using tools like templates and policies to maintain compliance, while manageability allows administrators to control and monitor resources using tools like portals, CLI, and APIs.

Step-by-Step Solution

1
Evaluate the statements describing cloud governance and manageability features.
The statements highlighting declarative templates/policies and administration tools (portals, CLI, APIs) are correct.
These directly align with how governance and manageability are implemented in cloud environments to manage resource compliance and operations.
2
Analyze the remaining options to identify misconceptions about PaaS and tag inheritance.
Operating system patching in PaaS is a provider responsibility, and tag inheritance is not automatic.
Eliminating these incorrect options confirms the correct choices.

Key Concept

Security, Governance, and Manageability
Question 742Question

A company hosts a web application on several Azure virtual machines. The IT team needs to implement a monitoring solution to track resource performance and automate responses to system events.

Which two tasks can the team perform by using Azure Monitor? (Select two.)

Select all that apply

Show answer & explanation

Answer: Collect and analyze performance metrics from the guest operating system of the virtual machines.; Configure an alert to send an email notification when the CPU utilization of a virtual machine exceeds a specific threshold.

Answer

Collect and analyze performance metrics from the guest operating system of the virtual machines, and configure an alert to send an email notification when the CPU utilization of a virtual machine exceeds a specific threshold.
Azure Monitor is designed to collect and analyze telemetry data from Azure resources, including the guest operating system of virtual machines. Additionally, it allows users to configure alerts that trigger automated actions (such as sending email notifications) when specific metric thresholds (such as CPU utilization) are exceeded.

Step-by-Step Solution

1
Identify the primary capabilities of Azure Monitor.
Azure Monitor collects, analyzes, and acts on telemetry data from cloud and on-premises environments. This includes gathering metrics and logs from resources (including the guest operating system) and setting up metric-based alerts to notify administrators.
To distinguish the valid features of Azure Monitor from other Azure governance and management services.
2
Evaluate the option regarding tracking outages and maintenance.
This is a feature of Azure Service Health, which focuses on Microsoft-side service status rather than the telemetry of the customer's specific resources.
To rule out the service health distractor.
3
Evaluate the option regarding administrative roles.
This is a feature of Azure Role-Based Access Control (RBAC), which handles identity and access management.
To rule out the access control distractor.

Key Concept

Azure Monitor collects telemetry (metrics and logs) from Azure resources and provides alerting capabilities based on that data.
Estimated Time:1m 30s
Question 743Question

A company plans to use Azure resource tags to categorize cost data for different departments. Which two of the following statements correctly describe how tags and resource groups function in this scenario? (Select two.)

Select all that apply

Show answer & explanation

Answer: Resource tags are key-value pairs that help categorize resources for billing analysis.; Resources do not automatically inherit tags that are applied to their parent resource group.

Answer

Resource tags are key-value pairs that help categorize resources for billing analysis, and resources do not automatically inherit tags that are applied to their parent resource group.
Resource tags are metadata elements consisting of key-value pairs that enable the categorization and grouping of resources, making it easier to filter and analyze billing data in Azure Cost Management. In addition, tags applied to a resource group are not inherited by the resources inside that resource group; tags must be applied directly to resources or managed via Azure Policy to enforce tag application.

Step-by-Step Solution

1
Analyze how tags behave when applied at the resource group level versus the individual resource level.
Understand that Azure resources do not inherit tags from their containing resource groups or subscriptions.
Tag inheritance is a common misconception in Azure governance, and recognizing that tags do not inherit down is critical for designing accurate tag-based cost reports.
2
Evaluate the purpose of Azure resource tags in relation to billing and cost management.
Identify that tags consist of key-value pairs used to organize, locate, and aggregate cost data across different resources.
This allows organizations to filter and categorize their cloud spend in Azure Cost Management by departments or environments.

Key Concept

Azure resource tags are key-value pairs used for logical organization and cost grouping, and they are not automatically inherited from resource groups to individual resources.
Question 744Question

A research institute needs to run a temporary data simulation that requires high compute power for one week. The institute rents virtual machines from Microsoft Azure for the duration of the simulation and deletes them afterward. The physical servers hosting these virtual machines are shared with other Azure customers. Which cloud model is the institute using?

Show answer & explanation

Answer: Public cloud

Answer

Public cloud
The public cloud model is correct because the resources (virtual machines) are owned and operated by a third-party cloud service provider (Microsoft) and provisioned over the internet using shared physical hardware.

Step-by-Step Solution

1
Analyze resource ownership and sharing details in the scenario.
The infrastructure is owned by a third-party cloud provider (Microsoft) and the physical hardware is shared with other customers (multi-tenancy).
These are key characteristics of the public cloud model.
2
Check for local data center integration or dedicated single-tenant hardware.
There is no mention of local on-premises hardware or dedicated physical infrastructure.
This rules out both hybrid and private cloud models.

Key Concept

Public cloud model characteristics
Estimated Time:45s
Question 745Question

A financial services company is deploying a new application. The administrator creates a resource group named prod-rg in the East US region to organize the application's resources. A developer needs to deploy a virtual machine (VM) that must reside in the West US region for latency reasons, and the finance team requires a 'CostCenter' tag to be applied to all resources for billing. Which of the following statements correctly describes how the resource group's configuration affects this deployment?

Show answer & explanation

Answer: The virtual machine can be deployed in the West US region within prod-rg, but it will not automatically inherit the 'CostCenter' tag from the resource group.

Answer

The virtual machine can be deployed in the West US region within the resource group, but it will not automatically inherit the tag from the resource group.
The correct answer is correct because Azure allows resources to be deployed in a different region than their resource group, and resources do not automatically inherit tags applied to their resource group. The resource group's location is only used to store metadata about the resources.

Step-by-Step Solution

1
Evaluate whether Azure resources must reside in the same region as their containing resource group.
Resources can be deployed in any supported region, independent of the resource group's location.
The resource group location is only used to store deployment metadata, not to restrict the geographic location of the resources themselves.
2
Determine if resource groups can be nested in Azure.
Nesting resource groups is not supported.
Azure resource groups are a single-level logical grouping mechanism.
3
Analyze whether resource tags are automatically inherited by resources from their resource group.
Resources do not inherit tags from their parent resource group.
Tags must be applied directly to individual resources, or enforced automatically using Azure Policy.

Key Concept

Resource Group Boundaries and Tagging Inheritance
Estimated Time:1m 30s
Question 746Question

A retail company adopts a cloud-based inventory management system that is delivered as a Software as a Service (SaaS) solution. Under the SaaS model, the retail company is responsible for maintaining the physical hardware and virtual machines hosting the system. Is this statement true or false?

Show answer & explanation

Answer: False

Answer

False
The correct answer is False because the customer of a Software as a Service (SaaS) application is not responsible for managing or maintaining the physical hardware or virtual machines that host the service. Those responsibilities belong entirely to the cloud provider.

Step-by-Step Solution

1
Identify the cloud service model described in the scenario.
The scenario describes a Software as a Service (SaaS) solution.
Understanding the specific cloud service model is necessary to determine the distribution of shared responsibilities.
2
Evaluate the management responsibility for physical hardware and virtual machines in a SaaS model.
In SaaS, the cloud service provider manages the entire application stack, including the underlying physical hardware and virtual machines.
Determining who manages the infrastructure components helps evaluate the accuracy of the statement.

Key Concept

Under the cloud shared responsibility model, Software as a Service (SaaS) offloads the management of all physical infrastructure, operating systems, and application hosting to the cloud provider.
Estimated Time:45s
Question 747Question

An organization implements a cloud-based Human Resources (HR) portal to track employee performance, benefits, and payroll. The HR staff accesses the portal daily via web browsers. Under the cloud shared responsibility model, which of the following tasks is the responsibility of the organization?

Show answer & explanation

Answer: Configuring user access permissions and managing employee identity registries.

Answer

Configuring user access permissions and managing employee identity registries.
In a Software as a Service (SaaS) model, the cloud provider manages the physical infrastructure, operating systems, database middleware, and the application itself. However, the customer is always responsible for configuring user access permissions and managing employee identity registries to ensure only authorized users access the system.

Step-by-Step Solution

1
Identify the cloud service model described in the scenario.
The HR portal is a web-based, fully managed application, which represents a Software as a Service (SaaS) model.
Determining the service model is essential to applying the correct shared responsibility boundaries.
2
Evaluate the customer's responsibility boundaries in a SaaS model.
Under a SaaS model, the cloud provider manages physical hosts, network, datacenter, OS, middleware, and application runtime. The customer retains responsibility for data, endpoints, and identity/access management.
To separate tasks managed by the provider from those managed by the customer.
3
Match the options to find the customer's duty.
Configuring user access permissions maps directly to identity/access management, which is a customer responsibility.
To select the correct choice.

Key Concept

Software as a Service (SaaS)
Estimated Time:1m 0s
Question 748Question

A business transitions its legacy human resources (HR) portal to a cloud-based Software as a Service (SaaS) solution. Under the shared responsibility model, the cloud provider manages the physical infrastructure, virtualization, operating systems, and the application software. Which of the following responsibilities remains with the customer?

Show answer & explanation

Answer: Configuring user access permissions and managing identity data

Answer

Configuring user access permissions and managing identity data
Under the Software as a Service (SaaS) model, the cloud provider manages the entire application, middleware, operating systems, and physical infrastructure. However, the customer always retains responsibility for managing their own data, user accounts, identities, and access configurations. Therefore, configuring user access permissions and managing identity data remains the customer's responsibility.

Step-by-Step Solution

1
Analyze the cloud service model referenced in the scenario.
The scenario describes Software as a Service (SaaS), where the cloud provider manages almost the entire stack including hardware, operating systems, database management systems, and application software.
Identifying the service model determines the division of responsibility between the customer and the cloud provider.
2
Apply the shared responsibility model rules for SaaS to identify the customer's duties.
Under SaaS, the customer's responsibilities are limited to information and data, devices (mobile and PCs), and accounts and identities.
This determines which of the provided choices represents a task still owned by the customer.

Key Concept

Under the SaaS shared responsibility model, the customer retains responsibility for managing their own data, devices, and user accounts/identities, while the provider manages everything else.
Question 749Question

A company is deploying an application in Azure. The company needs to ensure that the application remains accessible even during localized hardware failures, and that it can automatically scale resources up and down to match fluctuating daily demand. Which two cloud benefits directly address these requirements? (Select two)

Select all that apply

Show answer & explanation

Answer: High availability; Elasticity

Answer

High availability and Elasticity
High availability is correct because it ensures service uptime by providing redundancy to handle localized component failures. Elasticity is correct because it allows resources to scale out or in dynamically in response to changing demand.

Step-by-Step Solution

1
Analyze the requirement for continuous application accessibility during localized hardware failures.
Identify that High Availability is the cloud benefit designed to maximize service uptime and tolerate local component failures.
High availability ensures redundant systems are in place within a region to keep the application accessible.
2
Analyze the requirement to automatically adjust resources based on daily demand fluctuations.
Identify that Elasticity represents the ability to dynamically scale resources in and out automatically to match user load.
Elasticity allows systems to allocate more resources during peak times and deallocate them when demand drops, preventing unnecessary costs.

Key Concept

High Availability, Scalability, and Elasticity
Estimated Time:1m 0s
Question 750Question

A company is migrating its operations to Azure. They deploy virtual machines for a legacy reporting tool, use Azure SQL Database for their transactional database, and adopt Microsoft 365 for corporate email. The IT director wants to clarify the boundaries of the Shared Responsibility Model. Match each administrative task to the correct classification of responsibility under its respective cloud service model.

Click a left item, then click its matching right item

Items

Updating the guest operating system for the legacy reporting tool running on Azure Virtual Machines
Securing the physical hardware and datacenter hosting the transactional database in Azure SQL Database
Managing user identity accounts and access permissions within Microsoft 365

Matches

Show answer & explanation

Answer

Updating the guest operating system on Azure Virtual Machines matches Customer responsibility under IaaS. Securing the physical hardware for Azure SQL Database matches Microsoft responsibility under PaaS. Managing user accounts in Microsoft 365 matches Customer responsibility under SaaS.
The correct pairings align the administrative tasks with the correct responsibility models. Guest OS patching under IaaS belongs to the customer; physical infrastructure security under PaaS belongs to Microsoft; and identity management under SaaS remains the customer's responsibility.

Step-by-Step Solution

1
Identify the cloud service model for each resource.
Azure Virtual Machines is IaaS, Azure SQL Database is PaaS, and Microsoft 365 is SaaS.
Correctly identifying the service model is essential to applying the Shared Responsibility Model rules.
2
Determine who is responsible for the guest operating system in IaaS.
The customer is responsible for guest OS updates.
Under IaaS, the cloud provider only manages physical infrastructure and the hypervisor.
3
Determine who is responsible for the physical host security in PaaS.
Microsoft is responsible for physical datacenter security.
Microsoft always manages physical security across all service models (IaaS, PaaS, and SaaS).
4
Determine who is responsible for identity and access management in SaaS.
The customer is responsible for managing accounts and identities.
Under the Shared Responsibility Model, the customer always retains responsibility for accounts and data, even in SaaS.

Key Concept

Under the Microsoft Shared Responsibility Model, responsibility for security tasks shifts between the customer and Microsoft depending on whether the service is classified as IaaS, PaaS, or SaaS. However, physical security is always Microsoft's responsibility, and accounts, identities, and data are always the customer's responsibility.
Estimated Time:1m 30s
Question 751Question

A software development company is migrating its testing environments to Azure. These environments are only active for approximately 10 hours per week. The company chooses to utilize a consumption-based pricing model for the Azure Virtual Machines. Which of the following is a key financial characteristic of this model?

Show answer & explanation

Answer: The company is billed only for the specific duration that the virtual machines are running, classifying the cost as an Operational Expenditure (OpEx).

Answer

The company is billed only for the specific duration that the virtual machines are running, classifying the cost as an Operational Expenditure (OpEx).
In a consumption-based model, there are no upfront infrastructure costs. Instead, users pay only for the resources they consume (in this case, the hours the virtual machines are active). These ongoing, usage-based fees are classified as Operational Expenditure (OpEx).

Step-by-Step Solution

1
Analyze the usage pattern and the pricing model chosen.
The testing environments run for a limited time (10 hours per week) and use a consumption-based model.
This helps determine how billing and cost structures are applied to the cloud resources.
2
Differentiate between CapEx and OpEx in the context of consumption-based pricing.
Consumption-based pricing has no upfront costs, is billed based on actual usage, and is categorized as Operational Expenditure (OpEx).
To identify which option correctly describes the financial classification and billing behavior.

Key Concept

Consumption-Based Model (CapEx vs OpEx)
Question 752Question

An organization is planning to migrate its workloads to Microsoft Azure and has identified two key storage requirements:
1. A shared file system that can be mounted simultaneously by multiple Azure Virtual Machines and on-premises servers using the SMB protocol.
2. A cost-effective storage tier for infrequently accessed logs that must remain immediately readable without any rehydration delay.

Which two of the following Azure Storage features or tiers should the organization select to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Azure Files to host the shared file system.; The Cool access tier to store the logs.

Answer

To meet the requirements, the organization should select Azure Files for the shared file system and the Cool access tier for the storage of infrequently accessed logs.
Azure Files is the correct choice for the shared folder because it natively supports the SMB protocol for concurrent access across multiple systems. The Cool access tier is correct for the logs because it provides a cost-effective option for infrequently accessed data while maintaining online status for immediate reads.

Step-by-Step Solution

1
Analyze the first requirement: a shared file system accessible via the SMB protocol.
Identify Azure Files as the native managed file share service in Azure that supports SMB and can be concurrently mounted.
Azure Files is designed for shared file storage, whereas Azure Disk Storage is block storage dedicated to a single virtual machine.
2
Analyze the second requirement: a cost-effective storage tier for infrequently accessed logs that must be immediately readable.
Identify the Cool access tier as the appropriate tier.
The Cool tier offers lower storage costs than the Hot tier with immediate access. The Archive tier offers the lowest storage costs but requires a time-consuming rehydration process before data can be read.
3
Evaluate and eliminate incorrect service configurations.
Eliminate the Archive access tier due to rehydration latency, and eliminate Disk Storage managed database configurations since database patching is a customer responsibility in IaaS.
Under the shared responsibility model, IaaS VM resources like Disk Storage place the configuration and patching of application software (like databases) on the customer.

Key Concept

Understanding the differences between Azure storage services (Azure Files, Azure Disk Storage) and storage access tiers (Hot, Cool, Archive), as well as the shared responsibility model's application to virtual machine storage.
Question 753Question

A research institute needs to deploy a custom data-processing system that requires a customized Linux kernel configuration and the installation of specialized kernel-level modules. The institute wants to avoid the overhead of procuring, installing, and maintaining physical servers, but must retain full administrative control over the environment.

Which cloud service model must the institute adopt, and which party is responsible for patching the guest operating system?

Show answer & explanation

Answer: Infrastructure as a Service (IaaS), and the customer is responsible for patching the guest operating system.

Answer

Infrastructure as a Service (IaaS), and the customer is responsible for patching the guest operating system.
The correct option is the one stating that Infrastructure as a Service (IaaS) is required and the customer is responsible for patching the guest operating system. Kernel customization and specialized module installations require full administrative access to the operating system, which is only provided by IaaS. In the IaaS shared responsibility model, the customer owns and maintains the guest operating system, which includes applying security patches.

Step-by-Step Solution

1
Analyze the system requirements
The system requires Linux kernel configuration changes and kernel-level modules.
To select the correct cloud service model, we must identify the level of administrative control required over the operating system.
2
Map requirements to cloud service categories
IaaS provides full administrative access to the guest operating system, whereas PaaS and SaaS abstract the operating system layer, preventing kernel modifications.
Only IaaS offers the control needed to configure the kernel and install custom modules.
3
Determine patching responsibility in the selected model
Under the IaaS shared responsibility model, Microsoft manages the physical servers and hypervisor, while the customer is responsible for the guest operating system, including patching.
Applying the shared responsibility matrix identifies who maintains the guest operating system.

Key Concept

Shared responsibility and OS control boundaries in Infrastructure as a Service (IaaS)
Question 754Question

A financial institution migrates its on-premises transactional database to an Azure SQL Database elastic pool. A security auditor asserts that under the Platform as a Service (PaaS) model, Microsoft assumes full liability and operational responsibility for implementing network isolation, configuring database-level firewall rules, and managing database users, thereby completely eliminating the customer's security administration tasks for these resources. Is this statement true or false?

Show answer & explanation

Answer: False

Answer

False
The statement is false because the shared responsibility model for Platform as a Service (PaaS) dictates that the customer is still responsible for configuring database firewalls and managing database-level users and access permissions, even though Microsoft manages the underlying operating system and hardware.

Step-by-Step Solution

1
Analyze the service model described in the scenario.
The service is Azure SQL Database, which is a Platform as a Service (PaaS) offering.
PaaS services offload infrastructure management but retain shared responsibilities for security and configuration.
2
Evaluate the division of responsibilities for network controls and user management in PaaS.
Under the Azure shared responsibility model, network controls (firewalls, endpoints) are shared, and identity/directory infrastructure is shared, while accounts/identities (database users) and data remain the customer's sole responsibility.
This determines whether the auditor's assertion that Microsoft handles all network firewall configuration and user management is correct.
3
Determine the truth value of the auditor's statement.
The statement claims Microsoft is fully responsible for database firewalls and user management, which is false.
Since the customer must still configure firewall rules and manage database users, the statement is incorrect.

Key Concept

PaaS Shared Responsibility Model
Estimated Time:1m 30s
Question 755Question

Transitioning a disaster recovery solution from a physical, on-premises secondary datacenter to Azure virtual machines that are kept in a deallocated state until a failover drill or outage occurs shifts the associated compute costs from a Capital Expenditure (CapEx) to an Operational Expenditure (OpEx) consumption-based model.

Show answer & explanation

Answer: True

Answer

The statement is true because migrating a physical secondary disaster recovery datacenter to Azure virtual machines that are deallocated until needed shifts the costs from upfront capital expenditures (CapEx) to a consumption-based operational expenditure (OpEx) model.
On-premises datacenters require upfront hardware purchases (CapEx). By using Azure virtual machines that are deallocated until needed, the organization avoids upfront physical hardware costs and only pays for compute resources when they are active, shifting the cost to an operational expense (OpEx) under a consumption-based model.

Step-by-Step Solution

1
Analyze the on-premises disaster recovery cost structure.
Maintaining a secondary physical datacenter requires purchasing hardware upfront, which is classified as Capital Expenditure (CapEx).
CapEx involves upfront spending on physical infrastructure that is depreciated over time.
2
Analyze the Azure virtual machine disaster recovery cost structure.
Azure virtual machines that are deallocated only incur storage costs and do not incur compute charges until they are started during a drill or outage.
Cloud compute resources are billed under a consumption-based model, which is an Operational Expenditure (OpEx).
3
Compare the change in cost model after migration.
The shift from physical hardware ownership to paying for compute power only when consumed represents a transition from CapEx to OpEx.
Consumption-based billing aligns expenses directly with active resource utilization, a core aspect of OpEx.

Key Concept

Consumption-Based Model (CapEx vs OpEx)
Question 756Question

A company stores application logs in Azure Blob Storage. These logs are analyzed frequently during the first 30 days. After 30 days, the logs are rarely accessed but must be kept for three years. If a security incident occurs, the security team must be able to query these logs immediately with millisecond latency. Which storage tier configuration should the company use to minimize costs while meeting these requirements?

Show answer & explanation

Answer: Store the logs in the Hot tier, and transition them to the Cool tier after 30 days.

Answer

Store the logs in the Hot tier, and transition them to the Cool tier after 30 days.
The Hot access tier is ideal for data that is active and frequently accessed, satisfying the initial 30-day requirement. The Cool access tier is optimized for infrequently accessed data that must be stored for at least 30 days, while still offering immediate, millisecond-level read latency. Transitioning the logs to the Cool tier after 30 days minimizes storage costs while ensuring they remain queryable immediately in the event of a security incident.

Step-by-Step Solution

1
Analyze the access frequency requirements for the first 30 days.
The logs are analyzed frequently during this period, which matches the characteristics of the Hot access tier.
The Hot tier offers the lowest access costs for frequently read data.
2
Analyze the access frequency and latency requirements after 30 days.
The logs are rarely accessed but must be available immediately (millisecond latency) if queried.
This rules out the Archive tier, which requires hours for data rehydration, and points to the Cool tier, which offers lower storage costs and immediate retrieval.
3
Evaluate the storage service types.
Azure Blob Storage lifecycle management handles transitions between Hot and Cool tiers automatically.
Azure Disk Storage is block storage for VMs and does not support automatic lifecycle management of Blob objects.

Key Concept

Azure Blob Storage tiers and lifecycle management guidelines
Estimated Time:1m 0s
Question 757Question

A food delivery service experiences unpredictable spikes in customer order volume during severe weather events. The service utilizes a configuration that automatically provisions additional virtual servers during these spikes and decommissions them once the order volume drops. Which cloud concept does this configuration represent?

Show answer & explanation

Answer: Elasticity

Answer

Elasticity
The correct answer is elasticity because the scenario highlights the automatic addition and removal of virtual servers in response to unpredictable traffic spikes. This dynamic adjustment of resource capacity to closely match actual demand is the primary definition of cloud elasticity.

Step-by-Step Solution

1
Analyze the scenario details: the food delivery service experiences temporary, unpredictable spikes in demand and automatically adds and removes virtual servers to handle this fluctuation.
The scenario describes dynamic, automatic resource scaling (both scaling out and scaling in).
Understanding the key operational requirement helps match it to the correct cloud characteristic.
2
Evaluate the definition of the correct cloud concepts.
Elasticity is defined as the ability of a cloud infrastructure to dynamically provision and release resources automatically based on demand, which matches the behavior described.
Differentiating between elasticity, scalability, and high availability ensures the correct selection.

Key Concept

Elasticity allows cloud resources to automatically scale out (add resources) or scale in (remove resources) in response to real-time fluctuations in demand, optimizing performance and cost.
Estimated Time:45s
Question 758Question

A global supply chain logistics platform is being migrated to Microsoft Azure. The system must satisfy two key requirements:

1. The tracking API must remain available even if a single data center in the primary region experiences a hardware or power failure.
2. The order database must be restorable in a separate geographical region if the primary region suffers a complete, long-term outage.

Which two deployment strategies should the system architect implement to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Deploy the tracking API across multiple Availability Zones in the primary region.; Configure geo-replication for the order database to an Azure paired region.

Answer

Deploy the tracking API across multiple Availability Zones in the primary region, and configure geo-replication for the order database to an Azure paired region.
To protect against a single data center outage within a region, resources should be deployed across multiple Availability Zones, which provide isolation and reliability. To protect against a regional disaster, data must be replicated to a different geographical region (a paired region) to enable disaster recovery.

Step-by-Step Solution

1
Analyze the first requirement regarding data center level resilience.
Identify that protection against a single data center failure within a region is achieved using Availability Zones, which are physically separate locations within the same region.
This directly maps to the cloud concept of High Availability and Reliability within a regional boundary.
2
Analyze the second requirement regarding regional level disaster recovery.
Identify that recovering from a complete regional outage requires replicating data to a separate geographic region, which is achieved through geo-replication (often to a paired region).
This directly maps to the cloud concept of Disaster Recovery (DR).

Key Concept

Reliability in Azure is achieved through High Availability (using Availability Zones within a region) and Disaster Recovery (using Geo-replication to a paired region).
Estimated Time:2m 0s
Question 759Question

Is the following statement true or false? Under the Microsoft Azure Shared Responsibility Model, when deploying a database server inside an Azure Virtual Machine (an Infrastructure as a Service (IaaS) deployment), Microsoft is responsible for maintaining the underlying physical hardware and hypervisor, while the customer is responsible for database configuration, database engine patching, and guest operating system updates.

Show answer & explanation

Answer: True

Answer

True
In an Infrastructure as a Service (IaaS) setup, the customer maintains control over the operating system, middleware, and application layers. When running a database on a VM, the customer must manage all aspects of the database installation and the guest OS itself, while Microsoft only manages the physical hosts, network, storage hardware, and virtualization hypervisor.

Step-by-Step Solution

1
Analyze the service model context.
The scenario describes deploying a database inside an Azure Virtual Machine, which represents an Infrastructure as a Service (IaaS) model.
Identifying the correct service model is essential for determining boundaries within the Shared Responsibility Model.
2
Evaluate the infrastructure provider's responsibilities under IaaS.
Under IaaS, Microsoft manages the physical servers, networking, storage hardware, and the hypervisor layer.
The cloud provider always retains responsibility for the physical infrastructure and virtualization layer in IaaS.
3
Evaluate the customer's responsibilities under IaaS.
The customer is responsible for the guest operating system, applications, middleware, and data. This includes patching the guest OS, installing the database engine, and managing database updates.
In an IaaS VM deployment, the customer maintains administrative access and responsibility for all software running inside the virtual machine.
4
Confirm the alignment of the statement with these rules.
The statement correctly states that Microsoft manages physical hardware/hypervisors and the customer manages database configuration, database patching, and guest OS updates.
Comparing the statement's breakdown of responsibilities to the IaaS model confirms the statement is true.

Key Concept

Shared responsibility model in Infrastructure as a Service (IaaS)
Question 760Question

A company is designing a disaster recovery solution for an application hosted in the East US region. To protect the application from a region-wide disaster while complying with data residency regulations, the company plans to replicate its database to East US 2, stating that East US 2 is the default Azure region pair for East US and that Azure automatically performs synchronous replication across paired regions to guarantee zero data loss. Is the company's statement regarding this disaster recovery design true or false?

Show answer & explanation

Answer: False

Answer

The statement is false because East US is paired with West US, not East US 2, and cross-region replication between paired regions is asynchronous, which does not guarantee zero data loss.
The correct evaluation of this statement is false because the default region pair for East US is West US, and cross-region replication is asynchronous to prevent latency issues over large physical distances.

Step-by-Step Solution

1
Identify the default region pair for East US.
The default region pair for East US is West US.
Azure region pairs are pre-defined by Microsoft. East US is paired with West US, while East US 2 is paired with Central US.
2
Analyze the replication mechanism between Azure region pairs.
Replication between paired regions is asynchronous.
Paired regions are separated by a physical distance of at least 300 miles. Synchronous replication over this distance would introduce high network latency, so Azure uses asynchronous replication for cross-region data transfer.
3
Evaluate the statement's validity based on these findings.
The proposed architecture is incorrect.
Since the wrong region pair is identified and synchronous replication is incorrectly assumed, the statement is false.

Key Concept

Azure Region Pairs and cross-region replication characteristics
PreviousPage 38 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin