Examkin

All practice questions

1186 questions

All types1,186Multiple choice620Multiple select228True / False291Matching47
Question 781Question →

A university needs to deploy a database containing sensitive student records. To comply with strict data privacy laws, the university must maintain complete ownership and control over the physical hardware, and ensure that no other organization shares their physical servers. Which cloud model must the university implement?

Show answer & explanation

Answer: Private cloud

Answer

Private cloud
The private cloud model is the correct answer because it is designed for a single organization's exclusive use, providing full ownership, control, and physical isolation of the underlying hardware resources.

Step-by-Step Solution

1
Analyze the requirements in the scenario.
The university requires complete ownership, control over the physical hardware, and zero sharing of physical servers with other organizations.
This establishes that the solution must use dedicated, isolated physical infrastructure.
2
Evaluate the cloud deployment models against these requirements.
A private cloud environment is dedicated solely to a single organization and is not shared with others, aligning perfectly with the requirement for physical isolation and hardware ownership.
Other models either involve shared multi-tenant physical hardware (public cloud) or represent a service category (PaaS) rather than a deployment model.

Key Concept

Cloud Models (Public, Private, Hybrid, Multi-cloud)
Question 782Question →

A healthcare clinic adopts a cloud-based practice management platform delivered as a Software as a Service (SaaS) solution. The clinic needs to define the security boundaries for its IT staff under the shared responsibility model. Which of the following security tasks is the sole responsibility of the clinic?

Show answer & explanation

Answer: Classifying patient data and configuring user access permissions for the staff.

Answer

Classifying patient data and configuring user access permissions for the staff.
In a Software as a Service (SaaS) model, the cloud provider is responsible for maintaining all physical infrastructure, operating systems, and applications. The customer, however, always retains responsibility for the security and classification of their own data, as well as managing user identities and access permissions.

Step-by-Step Solution

1
Identify the cloud deployment model described in the scenario.
The scenario describes a Software as a Service (SaaS) model.
Knowing the model helps determine the distribution of responsibilities under the shared responsibility model.
2
Evaluate each security task against the SaaS shared responsibility model.
Tasks related to physical security, host operating systems, and application middleware are managed by the cloud provider, while data governance and access control remain with the customer.
This distinguishes customer-owned tasks from provider-owned tasks to determine the correct responsibility.

Key Concept

Under the Software as a Service (SaaS) model, the cloud provider manages the entire application stack, while the customer maintains responsibility for data classification, endpoints, and identity access management.
Estimated Time:1m 0s
Question 783Question →

A multinational financial firm plans to subscribe to a cloud-based enterprise resource planning (ERP) system delivered as a Software as a Service (SaaS) solution. During the security architecture review, the compliance team analyzes the Microsoft Azure shared responsibility model to map security controls. Which of the following responsibilities is shared between the SaaS provider and the financial firm?

Show answer & explanation

Answer: Identity and directory infrastructure

Answer

Identity and directory infrastructure
Identity and directory infrastructure is a shared responsibility in a Software as a Service (SaaS) model. While the cloud provider manages and maintains the identity platform and infrastructure (such as Microsoft Entra ID), the customer is responsible for configuring, managing, and securing their individual user accounts and access credentials.

Step-by-Step Solution

1
Analyze the cloud service model used in the scenario.
The company is using a Software as a Service (SaaS) deployment for its ERP system.
Understanding the service model is necessary because responsibilities vary between IaaS, PaaS, and SaaS.
2
Examine the boundaries for physical infrastructure, operating systems, and data management under SaaS.
Physical infrastructure, hosting, OS, and applications are managed exclusively by the provider, whereas data and information are managed exclusively by the customer.
This step isolates the boundaries of absolute ownership for both the provider and the customer.
3
Determine which management layer involves overlapping or split duties between both parties.
Identity and directory infrastructure is shared, as the provider hosts the identity platform but the customer manages the users, accounts, and policies within it.
This identifies the shared operational responsibilities to determine the correct option.

Key Concept

Shared Responsibility Model in Software as a Service (SaaS)
Question 784Question →

A company is evaluating different cloud deployment models to host its workloads. Match each business scenario to its corresponding cloud model.

Click a left item, then click its matching right item

Items

Public cloud
Private cloud
Hybrid cloud

Matches

Show answer & explanation

Answer

Public cloud matches the municipal government hosting a public forum on shared third-party infrastructure. Private cloud matches the financial firm hosting its ledger on dedicated hardware in its own headquarters. Hybrid cloud matches the retail company hosting its legacy inventory database on-premises while scaling its web front-end on public cloud servers.
The correct pairings map each scenario to the cloud model that governs its infrastructure ownership and sharing. Public cloud uses shared infrastructure managed by a third party; private cloud uses dedicated infrastructure exclusive to one organization; hybrid cloud blends both environments.

Step-by-Step Solution

1
Analyze the municipal government scenario.
The scenario describes using shared infrastructure owned by a third party, which matches the definition of a public cloud.
Public cloud resources are multi-tenant and managed by the cloud provider.
2
Analyze the financial firm scenario.
The scenario describes hosting workloads on dedicated hardware in their own headquarters, which matches the definition of a private cloud.
Private cloud offers dedicated resource usage and complete control over physical hardware.
3
Analyze the retail company scenario.
The scenario describes a mix of on-premises resources (for legacy inventory) and public cloud resources (for the web front-end), which matches the definition of a hybrid cloud.
Hybrid cloud bridges on-premises/private cloud and public cloud environments.

Key Concept

Cloud deployment models define where data is stored and how infrastructure is shared, categorized into public, private, and hybrid models.
Question 785Question →

An organization stores historical audit logs in the Archive tier of an Azure Storage account. An administrator needs to run a compliance report that queries these logs using an application. The application fails because it cannot read the logs in their current state. Which action must the administrator perform to resolve this issue?

Show answer & explanation

Answer: Change the access tier of the blobs to Hot or Cool, or copy the blobs to a new blob in a different tier to initiate rehydration.

Answer

Change the access tier of the blobs to Hot or Cool, or copy the blobs to a new blob in a different tier to initiate rehydration.
The correct answer is to change the access tier of the blobs to Hot or Cool, or copy the blobs to a new blob in a different tier to initiate rehydration. The Archive tier is an offline storage tier designed for data that is rarely accessed. Blobs in the Archive tier cannot be read directly. To make the data readable by an application, the blobs must first undergo rehydration, which moves them back to an online tier (Hot or Cool).

Step-by-Step Solution

1
Identify the storage tier of the historical audit logs.
The logs are stored in the Archive tier, which is an offline tier optimized for rarely accessed data.
Data in the Archive tier is kept offline to reduce costs and cannot be read or modified directly.
2
Determine the requirement for accessing the Archive tier data.
The data must be rehydrated to an online tier (either Hot or Cool) before it can be read.
Rehydration is the process of retrieving offline archive data and moving it back to an online state.
3
Select the appropriate rehydration method.
Change the access tier of the blobs to Hot or Cool, or copy the blobs to a new blob in the Hot or Cool tier.
Both methods initiate the rehydration process, making the logs accessible to the application after the rehydration completes.

Key Concept

Azure Blob Storage Archive tier and the rehydration process
Question 786Question →

An organization is migrating its database servers to Azure Virtual Machines. The database administrators require a centralized dashboard to track CPU usage, memory consumption, and disk I/O metrics. Additionally, they must configure automated alerts to run a script when memory usage exceeds 85%85\%. Which Azure service should they implement to collect these performance metrics and trigger the alert?

Show answer & explanation

Answer: Azure Monitor

Answer

Azure Monitor
Azure Monitor is designed to collect performance metrics (such as CPU, memory, and disk utilization) from Azure resources like virtual machines, and it includes an alerting engine that can trigger automation scripts or webhooks when a metric threshold is crossed.

Step-by-Step Solution

1
Analyze the business and technical requirements of the scenario.
The requirements include a dashboard for CPU, memory, and disk telemetry, along with automated alerts to trigger a script when memory exceeds a specific limit.
This establishes that the solution must support real-time performance tracking and metric-based alerting.
2
Evaluate the capabilities of Azure Monitor.
Azure Monitor provides centralized collection of performance metrics and supports the creation of alert rules to trigger actions such as running a script when thresholds are crossed.
This aligns perfectly with the requirement for metrics collection and automated alerting.

Key Concept

Azure Monitor metrics and alerting capabilities
Question 787Question →

An online education platform hosts a live streaming webinar that attracts ten times the normal number of concurrent students. To maintain performance, the platform's cloud-hosted web servers automatically increase in number during the event, and then automatically decrease back to the baseline count once the webinar finishes.
Which cloud characteristic does this automatic adjustment of resources represent?

Show answer & explanation

Answer: Elasticity

Answer

Elasticity
Elasticity is the characteristic that allows resources to automatically scale out (increase) and scale in (decrease) to match fluctuating workloads, minimizing costs when demand is low.

Step-by-Step Solution

1
Analyze the resource behavior in the scenario.
The web servers are configured to automatically increase in number when user demand spikes and decrease when the demand subsides.
Understanding the dynamic and automated nature of the scaling is necessary to identify the specific cloud characteristic.
2
Match the behavior to the correct cloud definition.
The capability to dynamically scale resources up and down in response to demand fluctuations is defined as elasticity.
This confirms elasticity as the correct concept, distinguishing it from general scalability or high availability.

Key Concept

Elasticity is the ability of a system to dynamically allocate and deallocate resources in response to changing demand.
Estimated Time:45s
Question 788Question →

A logistics corporation is migrating its central fleet routing system to Azure. Due to strict compatibility constraints, the system must run on a specific version of a third-party application server and requires custom network routing rules configured inside the operating system. The corporation deploys the workloads using Azure Virtual Machines (IaaS).

Under the Azure shared responsibility model, which two of the following tasks are the responsibility of the logistics corporation?

Select all that apply

Show answer & explanation

Answer: Configuring network firewall settings within the guest operating system; Managing and patching the third-party application server and middleware

Answer

The logistics corporation is responsible for configuring network firewall settings within the guest operating system, and managing and patching the third-party application server and middleware.
In an Infrastructure as a Service (IaaS) deployment such as Azure Virtual Machines, the cloud provider (Microsoft) is responsible for the physical security of the datacenters, the hardware, and the virtualization layer (hypervisor). The customer is responsible for the administration of the guest operating system (including local firewalls), the installation and configuration of middleware or application servers, and the application code and data.

Step-by-Step Solution

1
Analyze the service category of the deployment.
The deployment uses Azure Virtual Machines, which falls under the Infrastructure as a Service (IaaS) cloud service model.
Identifying the cloud service model is essential to determine the correct division of responsibilities.
2
Apply the Shared Responsibility Model to IaaS.
In IaaS, the cloud provider (Microsoft) manages physical security, hardware, and the virtualization layer. The customer (logistics corporation) is responsible for everything from the guest operating system upward, including middleware, applications, network configurations within the VM, and data.
This determines who is responsible for each resource layer in the deployment.
3
Evaluate each task against the customer's IaaS responsibilities.
Configuring network firewalls in the guest OS and managing third-party application servers/middleware are customer responsibilities. Managing the hypervisor and securing physical access to datacenters are Microsoft responsibilities.
To select the correct options based on the identified model boundaries.

Key Concept

Under the Infrastructure as a Service (IaaS) model, Microsoft manages the physical infrastructure, network, and virtualization layer, while the customer maintains full control and responsibility over the guest operating systems, middleware, database engines, application runtimes, and network configurations inside the virtual machines.
Estimated Time:1m 30s
Question 789Question →

Determine whether the following statement is true or false: Deploying a web application across multiple Availability Zones within a single Azure region guarantees disaster recovery in the event of a region-wide outage, as Azure automatically replicates and fails over virtual machine workloads to a paired region during a regional disaster.

Show answer & explanation

Answer: False

Answer

False
The statement is false because Availability Zones are designed to protect against datacenter failures within a single region, not region-wide disasters. Furthermore, Azure does not automatically replicate or failover virtual machine workloads across regions; this must be explicitly configured as part of a disaster recovery plan.

Step-by-Step Solution

1
Analyze the scope of Availability Zones in Azure.
Availability Zones protect against datacenter failures within a single region, not against an outage affecting the entire region.
Each zone is an isolated location within an Azure region, meaning a region-wide outage will affect all Availability Zones in that region.
2
Evaluate the replication and failover behavior for Azure Virtual Machines.
Azure does not automatically replicate and fail over standard virtual machines to a paired region.
Cross-region disaster recovery must be explicitly configured using tools like Azure Site Recovery, and is not a default or automatic behavior of deploying to multiple zones within a single region.

Key Concept

Disaster recovery protects against regional outages through cross-region replication, whereas Availability Zones provide high availability within a single region.
Question 790Question →

A video game development studio hosts its multiplayer matchmaking servers on Microsoft Azure and its player profiles database on Amazon Web Services (AWS), without using any on-premises infrastructure. Is it true that this deployment represents a hybrid cloud model?

Show answer & explanation

Answer: False

Answer

False (The statement is false because the deployment utilizes multiple public cloud providers without any on-premises or private cloud integration, making it a multi-cloud model rather than a hybrid cloud model.)
The correct answer is False because the studio utilizes two distinct public cloud providers (Azure and AWS) without integrating them with an on-premises datacenter or private cloud, which defines a multi-cloud model.

Step-by-Step Solution

1
Analyze the infrastructure components described in the scenario.
The studio utilizes Microsoft Azure and Amazon Web Services (AWS), both of which are public cloud providers, and has retired all of its on-premises servers.
Identifying the types of cloud environments involved is the first step in classifying the overall cloud model.
2
Compare the identified configuration against the definitions of hybrid cloud and multi-cloud models.
A hybrid cloud model requires combining public cloud resources with private cloud or on-premises infrastructure. A multi-cloud model involves using services from two or more public cloud providers. Because no on-premises or private cloud infrastructure is present, the setup is classified as multi-cloud.
This comparison evaluates whether the statement in the question is true or false.

Key Concept

Distinction between hybrid cloud and multi-cloud models
Estimated Time:1m 0s
Question 791Question →

A software development firm deploys a web application on Azure Virtual Machines. Under the Microsoft Shared Responsibility Model, which task is the responsibility of Microsoft?

Show answer & explanation

Answer: Ensuring the physical security and maintenance of the virtualization host servers

Answer

Ensuring the physical security and maintenance of the virtualization host servers
Ensuring the physical security and maintenance of the virtualization host servers is the responsibility of the cloud provider (Microsoft) in an Infrastructure as a Service (IaaS) model. Microsoft is responsible for managing the physical infrastructure, power, cooling, and the physical host hardware.

Step-by-Step Solution

1
Identify the cloud service model being used in the scenario.
The scenario describes deploying web applications on Azure Virtual Machines, which represents the Infrastructure as a Service (IaaS) model.
Understanding the service model determines the boundary of the Microsoft Shared Responsibility Model.
2
Determine the distribution of responsibilities for the physical infrastructure versus the VM software.
In IaaS, Microsoft retains responsibility for the physical host, physical network, and physical datacenter security, while the customer manages the operating system, applications, and network configuration.
This identifies that physical security and maintenance of the host hardware falls under Microsoft's responsibilities.

Key Concept

Under Infrastructure as a Service (IaaS), Microsoft manages the physical resources (physical security, hosts, and datacenter hardware) while the customer manages the operating systems, applications, and data.
Estimated Time:45s
Question 792Question →

A company deploys a web application to Azure App Service and a database to Azure SQL Database. During a security audit, the following vulnerabilities are identified:
1. The application code is vulnerable to SQL injection attacks.
2. The database connection strings are stored in plain text in the application configuration file.
3. The database firewall is configured to allow all inbound IP addresses.

Under the Azure shared responsibility model for Platform as a Service (PaaS) deployments, who is responsible for resolving these security findings?

Show answer & explanation

Answer: The company is responsible for resolving all three security findings.

Answer

The company is responsible for resolving all three security findings.
The customer is responsible for resolving all three findings. In a Platform as a Service (PaaS) deployment, the cloud provider manages the physical infrastructure, virtualization layer, and operating system. However, the customer retains full responsibility for their applications, database configurations, connection strings, and the network access controls (such as database firewall rules) configured on those resources.

Step-by-Step Solution

1
Identify the cloud deployment model.
Azure App Service and Azure SQL Database are Platform as a Service (PaaS) models.
Understanding the cloud service model is necessary to determine the division of security responsibilities under the shared responsibility model.
2
Evaluate the first finding (SQL injection vulnerability).
Application code security is the customer's responsibility in PaaS.
Microsoft manages the hosting environment but does not write, review, or secure the customer's application code.
3
Evaluate the second finding (plain-text connection strings).
Application configuration and credential management are the customer's responsibility in PaaS.
Securing application secrets, certificates, and connection strings (e.g., using Azure Key Vault) is a customer task.
4
Evaluate the third finding (open database firewall).
Configuring network access controls, such as firewall rules, is the customer's responsibility in PaaS.
PaaS providers supply the firewall capability, but the customer must configure the network security rules to restrict access.

Key Concept

Shared Responsibility Model in Platform as a Service (PaaS)
Estimated Time:1m 30s
Question 793Question →

A development team is setting up a testing environment in Azure. They have created a resource group named Dev-Testing-RG in the East US region. They now need to provision a virtual machine in the West US region and want to keep it in the Dev-Testing-RG resource group. How does Azure handle the location constraints for this setup?

Show answer & explanation

Answer: The virtual machine can be deployed in the West US region and associated with the Dev-Testing-RG resource group.

Answer

The virtual machine can be deployed in the West US region and associated with the Dev-Testing-RG resource group.
The correct option states that the virtual machine can be deployed in the West US region and associated with the Dev-Testing-RG resource group. This is because Azure resource groups can contain resources from different geographical regions; the resource group's location only determines where its own deployment metadata is stored.

Step-by-Step Solution

1
Analyze the resource group location rule.
A resource group's location determines where its metadata is stored, but resources inside it can reside in any supported Azure region.
This shows that the virtual machine can be deployed in West US even if the resource group is in East US.
2
Evaluate the rules for nesting resource groups.
Azure does not support nesting resource groups within other resource groups.
This rules out the nesting option.
3
Evaluate the rules for tag inheritance.
Resources do not inherit tags from their parent resource group by default.
This rules out the option suggesting automatic tag inheritance.

Key Concept

Azure resource groups hold resources, but the resources do not need to share the same region as the resource group, nor can resource groups be nested or automatically pass tags down to resources.
Estimated Time:45s
Question 794Question →

Under the cloud shared responsibility model, when an organization uses a Software as a Service (SaaS) solution, the organization is responsible for patching the underlying operating system. Is this statement true or false?

Show answer & explanation

Answer: False

Answer

The statement is false because the cloud provider is responsible for maintaining and patching the operating system in a Software as a Service (SaaS) deployment.
In a Software as a Service (SaaS) model, the cloud provider takes ownership of the entire application stack, which includes the physical infrastructure, virtualization layer, operating system, runtime, and the application itself. Therefore, the customer has no responsibility for patching the operating system.

Step-by-Step Solution

1
Determine the cloud service model referenced in the statement.
The model is Software as a Service (SaaS).
The question specifies a SaaS solution, which defines the division of management responsibilities between the customer and provider.
2
Identify who is responsible for operating system patching in SaaS.
The cloud provider manages the operating system.
Under SaaS, the cloud provider delivers the fully managed application and handles all underlying infrastructure management, including hardware, virtualization, and operating systems.

Key Concept

Customer vs. Provider responsibilities under SaaS
Question 795Question →

To monitor monthly expenditures, an IT manager establishes a budget of 12001200 USD on an Azure resource group. They configure a notification threshold to trigger when spending reaches 100%100\% of the budget. What is the result when the actual cost of the resources in the group reaches 12501250 USD?

Show answer & explanation

Answer: An email alert is generated and sent to the configured recipients, while all resources in the group continue running and accumulating charges.

Answer

An email alert is generated and sent to the configured recipients, while all resources in the group continue running and accumulating charges.
When a budget threshold in Azure Cost Management is exceeded, Azure triggers the configured alerts (such as sending emails to administrators or billing owners). However, Azure does not stop, deallocate, or limit the resources in any way. The resources continue to run and generate charges normally.

Step-by-Step Solution

1
Analyze the function of Azure Cost Management budgets.
Budgets are designed for monitoring and alerting rather than automated resource lifecycle management or enforcement.
This establishes that exceeding a budget will trigger notifications but will not modify resource operational states.
2
Determine the impact of exceeding the configured budget threshold.
Exceeding the threshold triggers an email notification to the specified recipients, but resources continue to run and generate costs.
This identifies the correct outcome of the scenario.

Key Concept

Azure Cost Management budgets and alert thresholds
Estimated Time:1m 0s
Question 796Question →

An e-commerce company is planning to deploy its web application to Microsoft Azure. The company has two primary requirements:
1. The application must automatically add or remove virtual machines to match traffic fluctuations.
2. The application must remain accessible if a single hardware rack in the datacenter fails.

Which two cloud concepts directly address these requirements? (Select two.)

Select all that apply

Show answer & explanation

Answer: Elasticity; High availability

Answer

Elasticity and high availability
Elasticity allows a system to dynamically allocate and deallocate resources to match demand, satisfying the requirement to add or remove virtual machines automatically. High availability ensures that application workloads remain operational and accessible during localized infrastructure failures, such as a hardware rack failure, satisfying the second requirement.

Step-by-Step Solution

1
Analyze the first requirement: automatically adding or removing virtual machines to match traffic fluctuations.
Identify that dynamic adjustments to resource count based on demand fluctuations correspond to elasticity.
Elasticity deals with matching resource capacity to dynamic demand automatically.
2
Analyze the second requirement: keeping the application accessible during a single local hardware rack failure.
Identify that maintaining availability during minor localized physical faults within a datacenter corresponds to high availability.
High availability ensures minimal service interruption by running workloads with redundancy inside the primary site.
3
Evaluate the choices to find the options matching elasticity and high availability.
Determine that elasticity and high availability are the correct selections.
These terms map directly to the defined scenario requirements.

Key Concept

Understanding High Availability and Elasticity in Microsoft Azure
Question 797Question →

A retail company hosts a customer-facing e-commerce application on Azure virtual machines. The cloud administration team needs to meet the following requirements:
1. Collect and analyze near real-time performance data, such as CPU and memory utilization, and trigger automated alerts when defined thresholds are exceeded.
2. Store and aggregate system event logs from multiple Azure resources in a centralized location where administrators can run custom queries using Kusto Query Language (KQL) for deep analysis.

Which two Azure Monitor features or capabilities should the cloud administration team configure to meet these requirements?

Select all that apply

Show answer & explanation

Answer: Azure Monitor Metrics; Azure Monitor Logs

Answer

To meet the requirements, the team should configure Azure Monitor Metrics and Azure Monitor Logs.
Azure Monitor Metrics is designed to collect and analyze numerical data about resource performance in near real-time, which supports automated alerting. Azure Monitor Logs aggregates log data from various sources into a central Log Analytics workspace, where administrators can perform complex queries using Kusto Query Language (KQL).

Step-by-Step Solution

1
Identify the feature required for near real-time performance alerts.
Azure Monitor Metrics is selected as it collects lightweight numerical performance values at regular intervals.
This matches the requirement to monitor CPU and memory usage and trigger automated alerts.
2
Identify the feature required to store log data and run custom KQL queries.
Azure Monitor Logs is selected as it aggregates log data in a Log Analytics workspace.
This satisfies the requirement to write and run Kusto Query Language queries on event logs across multiple resources.

Key Concept

The core distinction between Azure Monitor Metrics (used for performance data and alerts) and Azure Monitor Logs (used for log aggregation and KQL queries).
Estimated Time:1m 15s
Question 798Question →

An organization is designing a high-availability and disaster recovery architecture in Azure for a regulatory-compliant application. The solution must satisfy the following requirements:

* Active virtual machines (VMs) must remain operational even in the event of a complete data center power outage in the primary hosting location.
* Database backups must replicate to a secondary region located at least 300 miles away for disaster recovery, while ensuring all data and backups remain strictly within the United Kingdom national boundary.
* Resource metadata and deployment logs must be stored in a Resource Group located in the North Europe region.

Which configuration should the organization implement to meet all requirements?

Show answer & explanation

Answer: Deploy the VMs across multiple Availability Zones in UK South, replicate the database to the UK West region, and provision these resources inside the Resource Group located in North Europe.

Answer

Deploy the VMs across multiple Availability Zones in UK South, replicate the database to the UK West region, and provision these resources inside the Resource Group located in North Europe.
Deploying resources across Availability Zones within UK South provides high availability and resilience to data center power outages since Availability Zones are unique physical locations with independent power, cooling, and networking within a single region. Replicating the database to the paired region, UK West, ensures disaster recovery while keeping all data within the United Kingdom national boundary (satisfying data sovereignty). Finally, Azure resources do not have to reside in the same region as the Resource Group containing them; the Resource Group only stores resource metadata and can be in North Europe while the resources themselves reside in the UK.

Step-by-Step Solution

1
Determine the placement of active virtual machines to survive a complete data center power outage.
The VMs must be deployed across multiple Availability Zones within the primary region (UK South).
Availability Zones provide power, cooling, and network isolation within a single region, safeguarding against single data center failures.
2
Identify the appropriate region for disaster recovery that meets the 300-mile and data residency requirements.
UK West must be selected as the replication target.
UK South and UK West are Azure region pairs located in the United Kingdom, satisfying both the minimum distance requirement and the national data sovereignty constraint.
3
Evaluate if resources can be placed in a Resource Group located in a different region (North Europe).
Yes, resources can reside in a different region than their containing Resource Group.
The Resource Group's location only determines where its metadata is stored, not where the deployed resources must be located.

Key Concept

Decoupling of Resource Group locations, boundaries of Azure Availability Zones, and the geography constraints of Azure Region Pairs.
Estimated Time:2m 0s
Question 799Question →

A financial services firm adopts a cloud-based tax compliance and reporting system as a Software as a Service (SaaS) solution. Under the shared responsibility model, which two tasks are the responsibility of the financial services firm? (Select two.)

Select all that apply

Show answer & explanation

Answer: Classifying and protecting the financial data entered into the application.; Managing and securing the user accounts and identities that access the system.

Answer

The correct answers are the classification and protection of the financial data, and the management and security of user accounts and identities.
In a Software as a Service (SaaS) model, the cloud provider manages the physical infrastructure, operating systems, and application software. However, the customer always retains responsibility for their own data (information and data) and the accounts that access it (devices, accounts, and identities). Therefore, classifying and protecting the financial data, as well as managing and securing user accounts, are the customer's responsibility.

Step-by-Step Solution

1
Identify the cloud service model being used in the scenario.
The scenario specifies a Software as a Service (SaaS) deployment.
Different cloud models (IaaS, PaaS, SaaS) partition responsibilities differently between the customer and provider.
2
Recall the customer's responsibilities under the Shared Responsibility Model for SaaS.
In a SaaS model, the customer is responsible for information and data, devices (mobile and PCs), and accounts and identities.
This establishes which parts of the service boundary the customer is accountable for protecting.
3
Evaluate the choices to distinguish customer responsibilities from cloud provider responsibilities.
Data classification and user account management remain with the customer, while application maintenance and operating system updates are managed by the provider.
This isolates the correct options from the distractors based on the SaaS responsibilities identified in Step 2.

Key Concept

SaaS Shared Responsibility Model
Question 800Question →

A manufacturing company adopts a cloud-based supply chain forecasting application delivered under a Software as a Service (SaaS) model. Which of the following responsibilities are managed solely by the cloud provider? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Applying security patches and updates to the forecasting application software; Maintaining the physical servers and virtualization infrastructure that host the application

Answer

Applying security patches and updates to the forecasting application software, and maintaining the physical servers and virtualization infrastructure that host the application
In a Software as a Service (SaaS) model, the cloud provider is responsible for maintaining the entire application stack, which includes applying software patches, security updates, and maintaining the underlying physical servers and virtualization infrastructure. This leaves the customer free from infrastructure management tasks.

Step-by-Step Solution

1
Identify the cloud deployment model described in the scenario.
The model is Software as a Service (SaaS).
The company is using a pre-built application (supply chain forecasting) managed and hosted by the provider.
2
Determine the boundary of the Shared Responsibility Model for SaaS.
In SaaS, the provider manages the physical infrastructure, virtualization, operating system, middleware, and the application itself. The customer is responsible for data, endpoints, and identities/accounts.
This allows the customer to focus purely on using the software without administrative or operational overhead.
3
Evaluate each option against these responsibilities to select the two managed by the provider.
Software patching and physical server maintenance are provider responsibilities, while endpoint management and user accounts configuration are customer responsibilities.
Selecting these ensures correct alignment with the SaaS responsibility matrix.

Key Concept

Shared Responsibility Model in Software as a Service (SaaS)
PreviousPage 40 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin