Examkin

All practice questions

1186 questions

All types1,186Multiple choice620Multiple select228True / False291Matching47
Question 861Question →

A financial planning firm adopts a cloud-based video conferencing and collaboration platform under a Software as a Service (SaaS) model. Under the shared responsibility model, the cloud provider is responsible for managing user accounts and access permissions for the firm's employees. Is this statement true or false?

Show answer & explanation

Answer: False

Answer

False
Under the cloud shared responsibility model, the customer always retains responsibility for accounts, identities, and access management, regardless of whether the service is deployed as IaaS, PaaS, or SaaS.

Step-by-Step Solution

1
Analyze the cloud service model referenced in the scenario.
The scenario describes a Software as a Service (SaaS) model for a video conferencing and collaboration platform.
Identifying the cloud model (SaaS) determines the division of duties under the shared responsibility model.
2
Evaluate the responsibility of managing user accounts and access permissions.
Under the shared responsibility model, the customer is always responsible for information, data, devices, and accounts/identities across all cloud models (IaaS, PaaS, and SaaS).
The cloud provider manages the application and physical infrastructure in SaaS, but access control configuration remains the customer's duty.

Key Concept

SaaS Shared Responsibility Model
Question 862Question →

An administrator manages an Azure subscription and is planning the following deployment activities:

1. Create an Azure resource group named `App-RG` in the `North Europe` region, and then create a nested resource group named `DB-RG` inside `App-RG` to store database resources.
2. Deploy an Azure Virtual Machine named `Web-VM` to the `West Europe` region, and place it inside the `App-RG` resource group.

Which of the planned deployment activities can be successfully completed?

Show answer & explanation

Answer: Only activity 2

Answer

Only activity 2
In Azure, resource groups are flat namespaces and cannot be nested inside one another, which makes activity 1 impossible. However, resources do not inherit or depend on the region of their resource group. A resource group in one region can contain resources located in completely different regions, which makes activity 2 valid.

Step-by-Step Solution

1
Evaluate the first activity regarding nested resource groups.
Activity 1 fails.
Azure Resource Manager does not support nesting resource groups. All resource groups exist directly under an Azure subscription.
2
Evaluate the second activity regarding resource and resource group region mismatch.
Activity 2 succeeds.
The location of a resource group defines where its deployment metadata is stored. Individual resources within the resource group can be deployed in any supported region, regardless of the resource group's location.
3
Combine the evaluations to select the correct choice.
Only activity 2 can be successfully completed.
Combining the failure of activity 1 and success of activity 2 leaves 'Only activity 2' as the only valid outcome.

Key Concept

Azure Resource Group limitations (no nesting) and resource region independence.
Question 863Question →

An organization is deploying a custom web application on Azure Virtual Machines. The cloud administration team needs to establish a monitoring solution that accomplishes the following goals:
1. Collect and analyze performance data, usage patterns, and exception logs directly from the web application's code.
2. Aggregate operating system event logs from all virtual machines into a central repository and perform custom search queries across this data.

Which two features of Azure Monitor must be configured to meet these requirements? (Select two.)

Select all that apply

Show answer & explanation

Answer: Application Insights; Log Analytics workspaces

Answer

Application Insights and Log Analytics workspaces
The correct options are Application Insights and Log Analytics workspaces. Application Insights provides application performance monitoring (APM) to track metrics, usage, and code-level exceptions. Log Analytics workspaces serve as the central repository where logs are aggregated and queried using Kusto Query Language (KQL).

Step-by-Step Solution

1
Analyze the first requirement: Monitoring application code performance, usage patterns, and exception logs.
This requires an Application Performance Monitoring (APM) tool. In Azure Monitor, this feature is Application Insights.
Application Insights is designed specifically to instrument application code, trace requests, detect anomalies, and log runtime exceptions.
2
Analyze the second requirement: Aggregating operating system event logs from multiple VMs into a central location and performing custom queries.
This requires a centralized log store that supports querying. In Azure Monitor, this is a Log Analytics workspace.
Log Analytics workspaces collect and store log data from various sources (including VM diagnostic agents) and support Kusto Query Language (KQL) for querying and analyzing that data.

Key Concept

Azure Monitor features and their specific use cases
Question 864Question →

An administrator creates an Azure resource group named RG-Finance in the West US region. The administrator needs to deploy a virtual machine to the East US region.

Which of the following is true regarding the location of the virtual machine and the resource group?

Show answer & explanation

Answer: The virtual machine can be deployed to the East US region while its resource group is in the West US region.

Answer

The virtual machine can be deployed to the East US region while its resource group is in the West US region.
The correct answer is correct because Azure resources can reside in a different region than the resource group that contains them. The resource group's location specifies where the metadata for the resources is stored, but it does not enforce a regional boundary for the resources themselves.

Step-by-Step Solution

1
Analyze the relationship between a resource group's location and the resources within it.
A resource group stores metadata about the resources it contains. The location of the resource group specifies where that metadata is stored, but it does not restrict the location of the resources themselves.
Understanding this decoupling is fundamental to designing multi-region architectures in Azure.
2
Determine if a virtual machine can be deployed to a different region than its resource group.
Yes, resources can be deployed to any supported Azure region regardless of the resource group's location.
To verify that resources can be placed in different geographical regions under a single resource group container.

Key Concept

Resource Group and Resource Location Independence
Estimated Time:45s
Question 865Question →

A company is planning to deploy a highly available web application and its database in Azure. The primary infrastructure must be protected against localized datacenter failures (such as power, cooling, or networking outages) within the primary region. Additionally, a disaster recovery plan must replicate database backups to a secondary region located at least 300 miles away. An administrator creates a resource group named rg-prod-app and sets its location to East US.

Which of the following configurations correctly implements these resiliency requirements while adhering to Azure resource group rules?

Show answer & explanation

Answer: Deploy the application virtual machines across multiple Availability Zones in East US, replicate the database backups to West US, and place all resources—including those in West US—within the rg-prod-app resource group.

Answer

Deploy the application virtual machines across multiple Availability Zones in East US, replicate the database backups to West US, and place all resources—including those in West US—within the rg-prod-app resource group.
The correct configuration uses Availability Zones within the primary East US region to protect VMs from local datacenter outages. It uses West US (the regional pair for East US) for disaster recovery replication, meeting the 300-mile separation requirement. Finally, it correctly utilizes the rg-prod-app resource group to contain resources from both East US and West US regions, as Azure resource groups can store resources from different regions.

Step-by-Step Solution

1
Analyze the high availability (HA) requirement for localized datacenter failures.
Identify that Azure Availability Zones are physically separate datacenters within a single region (East US) that protect against local failures (power, cooling, network).
This satisfies the requirement to protect the application VMs within the primary region.
2
Analyze the disaster recovery (DR) requirement for replication to a secondary region at least 300 miles away.
Identify that West US is the default regional pair for East US, providing the necessary distance for DR replication.
This satisfies the database backup replication requirement.
3
Analyze the resource group location constraint.
Recall that a resource group acts as a logical container and its location does not restrict the location of the resources it contains.
This allows resources in both East US and West US to be managed under the single rg-prod-app resource group.

Key Concept

Azure Regions, Availability Zones, and Region Pairs
Question 866Question →

A digital media company is designing its resource governance strategy in Microsoft Azure. The company creates a resource group named media-prod-rg in the East US region to contain its production resources. Which of the following describes the relationship between this resource group and the resources deployed inside it?

Show answer & explanation

Answer: Resources deployed inside the resource group can be located in any supported Azure region, regardless of the resource group's location.

Answer

Resources deployed inside the resource group can be located in any supported Azure region, regardless of the resource group's location.
A resource group requires a location to define where its configuration and deployment metadata is stored. However, the resources themselves can be deployed in any supported region, allowing organizations to group resources logically (e.g., by application lifecycle) rather than being constrained by geography.

Step-by-Step Solution

1
Identify the function of the resource group's location property.
The location specifies where the metadata about the resources in the group is stored.
To determine whether the group's location restricts the placement of the actual resources.
2
Evaluate the regional constraints of resources placed inside a resource group.
Resources in Azure can be deployed to different regions than their containing resource group.
To identify the correct relationship and rule out location inheritance misconceptions.

Key Concept

Resource Group Location and Nesting Rules
Estimated Time:1m 0s
Question 867Question →

Azure Availability Zones are physically separate datacenters located in different Azure regions to protect applications from a complete regional outage.

Show answer & explanation

Answer: False

Answer

The statement is false because Availability Zones are isolated datacenters within a single Azure region.
The statement is false because Availability Zones are restricted to a single Azure region and do not cross regional boundaries. High availability within a region is achieved using Availability Zones, while regional disaster recovery requires deploying resources to a different Azure region entirely.

Step-by-Step Solution

1
Analyze the geographical scope of Azure Availability Zones.
Availability Zones are physically isolated datacenters located within the boundary of a single Azure region.
To verify if they span across different regions as described in the statement.
2
Identify the feature used for protection against region-wide outages.
Deploying resources across multiple regions or utilizing Region Pairs protects against region-wide outages.
To confirm that Availability Zones protect against datacenter failures within a region, not entire regional outages.

Key Concept

Azure Availability Zones provide high availability within a single region, whereas multi-region deployments or Region Pairs protect against region-wide disasters.
Question 868Question →

An organization is planning to migrate their existing on-premises application servers directly to Microsoft Azure virtual machines without making any changes to the application code or server operating systems. Which cloud service model best describes this migration approach?

Show answer & explanation

Answer: Infrastructure as a Service (IaaS)

Answer

Infrastructure as a Service (IaaS)
Infrastructure as a Service (IaaS) provides the customer with complete control over the operating system, middleware, and application layers of the virtual machines, making it the correct choice for migrating existing servers directly to the cloud without modifying their configurations.

Step-by-Step Solution

1
Identify the key requirement of the scenario.
The organization needs to migrate existing on-premises application servers directly to Azure virtual machines without changing the application code or operating systems (often called 'lift-and-shift').
This establishes the level of control and configuration access required by the customer.
2
Evaluate the cloud service models based on the required level of control.
Infrastructure as a Service (IaaS) provides virtual machines, giving the customer control over the operating system, middleware, and applications, whereas PaaS and SaaS shift operating system management to the cloud provider.
Matching the requirements to the correct service model ensures a successful migration strategy.

Key Concept

Infrastructure as a Service (IaaS)
Estimated Time:45s
Question 869Question →

A municipal library system migrates its catalog searching application to Microsoft Azure. The library administrators need to ensure that the application delivers consistent response times to patrons, even during peak hours, and that monthly operational costs can be forecasted accurately. Which cloud benefit is described by these requirements?

Show answer & explanation

Answer: Predictability

Answer

Predictability
Predictability is the cloud benefit that allows organizations to expect consistent application performance (performance predictability) and accurately estimate and control monthly cloud resources costs (cost predictability).

Step-by-Step Solution

1
Analyze the business requirements specified in the scenario.
The requirements are: (1) consistent performance/response times for users (performance predictability) and (2) accurate forecasting of monthly operational costs (cost predictability).
Identifying the core objectives helps map them to the correct cloud benefit.
2
Match the identified requirements to the standard Microsoft Azure cloud benefits.
Predictability represents both the capability to run applications with consistent performance and the ability to project cloud expenditures accurately.
This confirms that predictability is the cloud benefit that directly encompasses both of these aspects.

Key Concept

Predictability
Question 870Question →

An organization implements an Azure governance structure. Under the root management group, they have a management group named Production-MG that contains a single subscription named Prod-Sub.

A cloud administrator performs the following actions in sequence:
1. Assigns an Azure Policy to Production-MG that denies the creation of any resource without a tag named Environment set to Production.
2. Creates a resource group named rg-services in Prod-Sub in the East US region, and applies the Environment: Production tag directly to the resource group.
3. Attempts to deploy a new virtual network in the West US region inside rg-services without adding any tags to the virtual network.
4. Attempts to create a new resource group named rg-data inside rg-services to isolate database resources.

Which of the following outcomes will occur?

Show answer & explanation

Answer: The virtual network deployment fails because resources do not inherit tags from their resource group, and the creation of the child resource group fails because resource groups cannot be nested.

Answer

The virtual network deployment fails because resources do not inherit tags from their resource group, and the creation of the child resource group fails because resource groups cannot be nested.
The correct option identifies that the virtual network deployment fails because resources do not automatically inherit tags from their resource groups, meaning the deployment violates the policy applied at the management group. Furthermore, resource groups cannot be nested, so the attempt to create a child resource group inside an existing one fails.

Step-by-Step Solution

1
Analyze Azure Policy inheritance from Management Groups.
Policies applied to a management group are inherited by all subscriptions under it, and consequently, apply to all resources created within those subscriptions.
Governance controls like Azure Policy propagate down the management hierarchy.
2
Analyze resource tag inheritance behavior.
Tags applied to a resource group are not inherited by the resources inside that resource group.
Azure resources do not automatically copy or inherit tags from their parent resource groups.
3
Evaluate the virtual network deployment against the policy.
The virtual network deployment is blocked/denied because it has no tags, violating the inherited policy requiring the Environment: Production tag.
The policy requires the tag on all resources, and since the virtual network did not have the tag applied and does not inherit it, the creation is denied.
4
Evaluate resource group nesting capabilities.
The creation of rg-data inside rg-services fails.
Azure does not support nesting resource groups under other resource groups.

Key Concept

Azure Policy inheritance, resource group nesting rules, tag inheritance behavior, and resource region independence.
Question 871Question →

An organization is designing a multi-tier web application to be hosted in Azure. The architecture must achieve two main goals: protect against localized datacenter failures within the primary region (North Europe) and ensure a recovery path in the event of a catastrophic regional outage, while keeping all resources within the European Union. The resource group containing the deployment is located in North Europe.

Which two statements correctly describe how Azure's structural components should be implemented to satisfy these requirements?

Select all that apply

Show answer & explanation

Answer: Deploying virtual machines across multiple Availability Zones in North Europe protects against localized power, cooling, or network failures at the datacenter level.; Disaster recovery resources can be deployed to West Europe, the paired region of North Europe, even if the parent resource group is configured with a North Europe location.

Answer

Deploying virtual machines across multiple Availability Zones in the primary region provides localized protection, and disaster recovery resources can be deployed to the paired region regardless of the resource group's location.
Deploying virtual machines across multiple Availability Zones in the primary region provides localized protection, and disaster recovery resources can be deployed to the paired region regardless of the resource group's location. Availability Zones are physically separate datacenters within an Azure region, equipped with independent power, cooling, and networking. A resource group's location only dictates where its metadata is stored; resources inside it can be deployed to different regions, allowing the disaster recovery resources to reside in the paired region.

Step-by-Step Solution

1
Evaluate the requirement for protection against localized datacenter failures.
Determine that Azure Availability Zones provide physical isolation (independent power, cooling, and networking) within a single region (North Europe) to protect against datacenter outages.
This confirms that deploying virtual machines across multiple Availability Zones is the correct approach for high availability within the primary region.
2
Evaluate the requirement for regional disaster recovery and resource group placement.
Identify that resource groups do not restrict resource locations, allowing secondary resources to be deployed to the paired region (West Europe) for disaster recovery.
This confirms that resources can reside in a different region than their containing resource group, enabling regional disaster recovery setup.

Key Concept

Azure Regions, Availability Zones, and Region Pairs
Estimated Time:2m 0s
Question 872Question →

An enterprise is migrating its web APIs to Azure App Service and its relational data to Azure SQL Database. To prepare for an upcoming security audit, the compliance officer is creating a matrix mapping the operational duties of the enterprise against those of Microsoft under the shared responsibility model. Which of the following correctly identifies the distribution of responsibilities for these Platform as a Service (PaaS) deployments?

Show answer & explanation

Answer: The enterprise is responsible for configuring application settings, managing data, and controlling user access, while Microsoft is responsible for patching the operating system and updating the database engine.

Answer

The enterprise is responsible for configuring application settings, managing data, and controlling user access, while Microsoft is responsible for patching the operating system and updating the database engine.
In Platform as a Service (PaaS), the cloud provider (Microsoft) manages the underlying infrastructure, operating systems, and database engine software. This includes patching and updating. The customer (enterprise) is only responsible for the data stored, user access policies, and application configurations.

Step-by-Step Solution

1
Analyze the cloud deployment models being used in the scenario.
Azure App Service and Azure SQL Database are both classified as Platform as a Service (PaaS) offerings.
Identifying the cloud service model is necessary to apply the correct shared responsibility rules.
2
Determine customer responsibilities in the PaaS model.
The customer (enterprise) manages application settings, data, and user access permissions.
PaaS shifts infrastructure management to the provider, but the customer retains control over application-level components and data security.
3
Determine cloud provider (Microsoft) responsibilities in the PaaS model.
Microsoft manages physical security, hardware, operating system patching, and database engine maintenance.
The provider handles the platform runtime, middleware, OS, and underlying virtualization layers.

Key Concept

Under the Azure shared responsibility model for Platform as a Service (PaaS), Microsoft manages physical infrastructure, operating system patching, and middleware/database runtime maintenance, whereas the customer remains responsible for application configuration, data governance, and user access management.
Question 873Question →

A health-tech company hosts a patient health telemetry API on Azure. The API experiences unpredictable traffic spikes when fitness influencers launch live workouts, requiring resources to be automatically added and then removed when demand drops to minimize costs. The company also requires the API to remain operational if a local hardware failure occurs within a single datacenter. Which cloud concepts directly address these two requirements, respectively?

Show answer & explanation

Answer: Elasticity and high availability

Answer

Elasticity and high availability
The requirement to dynamically add and remove resources to optimize cost based on traffic spikes is met by elasticity. The requirement to stay operational during local hardware failure within a datacenter is met by high availability.

Step-by-Step Solution

1
Analyze the requirement for handling unpredictable spikes and automatically removing resources when demand drops to reduce costs.
This matches elasticity, which dynamically adjusts resources to demand in both directions.
Scalability allows handling more load, but elasticity focuses on the automation and efficiency of scaling down when demand is low.
2
Analyze the requirement to remain operational during a local hardware failure in a single datacenter.
This matches high availability, which provides localized redundancy and fault tolerance.
Disaster recovery is designed to restore services after a major regional outage, whereas high availability prevents downtime from local component failures.

Key Concept

High Availability, Scalability, and Elasticity
Question 874Question →

A logistics company adopts a cloud-based fleet tracking application delivered as a Software as a Service (SaaS) solution. The company's IT department is defining the roles and responsibilities for maintaining the new system. According to the cloud shared responsibility model, which of the following tasks is the sole responsibility of the logistics company?

Show answer & explanation

Answer: Managing user accounts and access permissions for the dispatchers.

Answer

Managing user accounts and access permissions for the dispatchers.
Under the cloud shared responsibility model for Software as a Service (SaaS), the customer always retains responsibility for managing their own data, devices, and identities/accounts. Managing user accounts and access permissions for the dispatchers directly falls under the accounts and identities responsibility.

Step-by-Step Solution

1
Identify the service model from the scenario.
The logistics company is using a Software as a Service (SaaS) application.
Different cloud service models (IaaS, PaaS, SaaS) have different shared responsibility boundaries.
2
Apply the shared responsibility model rules for SaaS.
In SaaS, the provider manages the physical hosts, network, hypervisor, OS, databases, and application software. The customer remains responsible for data, devices, and accounts/identities.
This determines the dividing line between provider and customer tasks.
3
Evaluate the choices to find the customer responsibility.
Managing user accounts and permissions matches the 'accounts and identities' responsibility of the customer.
Other tasks like OS patching, database scaling, and hardware purchasing are managed by the provider.

Key Concept

Software as a Service (SaaS) Shared Responsibility
Estimated Time:1m 0s
Question 875Question →

A company is planning a resource governance and cost management strategy for their Azure environment. They want to use resource tags to categorize costs and Azure Cost Management budgets to monitor spending at the subscription level. Which two statements describe the behavior of resource tags and budgets in Azure? (Select two.)

Select all that apply

Show answer & explanation

Answer: Resources do not automatically inherit tags that are applied to their parent resource group.; Azure Cost Management budgets can trigger alerts when spending reaches configured thresholds based on actual or forecasted costs.

Answer

Resources do not automatically inherit tags that are applied to their parent resource group, and Azure Cost Management budgets can trigger alerts when spending reaches configured thresholds based on actual or forecasted costs.
The correct answers identify that resources do not inherit tags from their resource groups, and that Azure Cost Management budgets support alerts based on actual or forecasted costs.

Step-by-Step Solution

1
Analyze the inheritance behavior of Azure tags.
Confirm that tags applied to a resource group do not propagate to the resources inside it.
Azure resource tags do not support inheritance from resource groups by default.
2
Evaluate the capabilities of Azure Cost Management budgets.
Verify that budgets can generate alert notifications based on actual spending or forecasted trends.
This enables administrators to proactively manage budgets before they are exceeded.

Key Concept

Azure resource tagging inheritance rules and Cost Management budget alert capabilities.
Question 876Question →

Your team needs to run a simple, isolated application within a container. You want to use Azure Container Instances (ACI). Which two of the following statements are characteristics of Azure Container Instances? (Select two.)

Select all that apply

Show answer & explanation

Answer: It starts in seconds without the need to provision or manage virtual machines.; Microsoft automatically manages the operating system patching for the host environment.

Answer

The correct characteristics of Azure Container Instances are that it starts in seconds without virtual machine provisioning and that Microsoft manages host OS patching.
The correct options are that Azure Container Instances starts in seconds without needing virtual machine provisioning, and that Microsoft automatically manages host operating system patching.

Step-by-Step Solution

1
Identify the service in the scenario.
The scenario specifies Azure Container Instances (ACI).
To evaluate the statements correctly, we must focus on the capabilities and characteristics of ACI.
2
Evaluate the management overhead and hosting model of the service.
ACI is a serverless (PaaS) offering, meaning there is no virtual machine management or OS patching responsibility for the customer.
This confirms that fast startup without VM configuration and automated host patching are correct characteristics, while manual OS updates is incorrect.
3
Determine if container orchestration is required.
The scenario requires running a simple, isolated container, and ACI does not provide advanced orchestration features like service discovery, which is a key differentiator from Azure Kubernetes Service (AKS).
This confirms that the option describing advanced orchestration is incorrect.

Key Concept

Azure Container Instances (ACI) characteristics and its distinction from virtual machines and orchestration services
Estimated Time:1m 0s
Question 877Question →

A company hosts a database workload on Azure Virtual Machines in the West US region. The cloud operations team must set up automated notifications for the following scenarios:

- Situation 1: Microsoft experiences a platform-level infrastructure failure that affects all Azure Virtual Machines in the West US region.
- Situation 2: The memory utilization of the company's specific database virtual machines exceeds 85%.

Which combination of Azure services should the team use to monitor these scenarios?

Show answer & explanation

Answer: Azure Service Health for Situation 1, and Azure Monitor for Situation 2

Answer

Azure Service Health for Situation 1, and Azure Monitor for Situation 2
The correct answer accurately distinguishes between platform-level health tracking and individual resource-level telemetry tracking. Azure Service Health is the designated service to receive notifications about regional outages, planned maintenance, and health advisories affecting Azure infrastructure. Azure Monitor is designed to gather, analyze, and alert on performance telemetry data (such as CPU, disk, and memory metrics) from individual resources like Azure Virtual Machines.

Step-by-Step Solution

1
Analyze the scope of Situation 1.
Situation 1 involves a platform-level regional infrastructure outage managed by Microsoft that impacts all users in a region.
Identifying that this is a global cloud provider event helps map it to Azure Service Health, which reports service outages and planned maintenance.
2
Analyze the scope of Situation 2.
Situation 2 involves measuring internal resource performance (memory utilization over 85%) on a specific set of virtual machines.
Identifying that this is a localized resource performance metric helps map it to Azure Monitor, which collects telemetry data from Azure resources.
3
Select the option that combines these two mappings correctly.
Azure Service Health corresponds to Situation 1, and Azure Monitor corresponds to Situation 2.
This combination ensures both platform availability notifications and resource performance alerts are properly monitored.

Key Concept

Distinction between Azure Monitor (resource performance monitoring) and Azure Service Health (global platform availability status)
Estimated Time:1m 30s
Question 878Question →

A manufacturing corporation operates specialized computer systems directly on its factory floors to control robotic assembly lines in real-time. To perform long-term predictive maintenance analysis on the collected telemetry data, the corporation plans to connect these factory systems to Microsoft Azure virtual machines. Which cloud deployment model is represented by this integration of on-premises infrastructure and shared cloud resources?

Show answer & explanation

Answer: A hybrid cloud model

Answer

A hybrid cloud model is represented by this integration because it combines local, on-premises factory floor systems with public cloud resources (Azure Virtual Machines) to share telemetry data.
The hybrid cloud model is correct because it specifically describes an environment that integrates on-premises systems (the factory floor computers) with public cloud resources (Azure Virtual Machines) to coordinate data analysis.

Step-by-Step Solution

1
Analyze the infrastructure components described in the scenario.
The architecture contains local factory floor systems (on-premises/private infrastructure) and Microsoft Azure virtual machines (public cloud services).
Identifying the types of infrastructure environments is the first step in determining the cloud deployment model.
2
Evaluate how these environments interact.
The local systems are connected to the Azure VMs to transmit telemetry data for predictive maintenance.
An integrated setup that allows data and applications to be shared between on-premises and public cloud environments defines a hybrid cloud.

Key Concept

Cloud deployment models (hybrid, public, private)
Estimated Time:1m 0s
Question 879Question →

An organization has three Azure subscriptions. Resources for the HR department are distributed across multiple resource groups in all three subscriptions. The finance team needs to analyze the combined monthly costs specifically for the HR department using Azure Cost Management. Which action should the organization take to achieve this requirement?

Show answer & explanation

Answer: Apply a common tag to the HR-related resources, and then filter or group the data in Cost Analysis by that tag.

Answer

Apply a common tag to the HR-related resources, and then filter or group the data in Cost Analysis by that tag.
Applying a common tag directly to all HR resources allows the organization to group and filter costs across different subscriptions and resource groups in the Cost Analysis tool of Azure Cost Management.

Step-by-Step Solution

1
Identify the resource distribution.
The target resources are distributed across multiple resource groups and subscriptions.
Understanding where resources are located helps determine how to aggregate their costs, since standard subscription or resource group scopes are too narrow.
2
Tag the resources directly.
Each individual HR resource receives a common tag, such as Department: HR.
Because Azure does not support tag inheritance from resource groups to individual resources, tags must be applied directly to the resources for cost tracking.
3
Group costs in Cost Analysis.
Use Azure Cost Management to group the aggregated subscription costs by the applied tag key.
Grouping by tag consolidates cost data from multiple scopes (resource groups and subscriptions) into a single unified view in the Cost Analysis portal.

Key Concept

Azure Resource Tags and Cost Analysis Grouping
Question 880Question →

An administrator plans to deploy a new solution consisting of an Azure Virtual Machine in the East US region and an Azure SQL Database in the West US region. Both resources must share the same lifecycle, and they must both be labeled with the tag 'Environment: Production' for billing analysis. The administrator creates a resource group named App-Prod-RG in the East US region and applies the 'Environment: Production' tag to it.

Which of the following is the correct configuration and behavior for deploying these resources?

Show answer & explanation

Answer: Deploy both the virtual machine and the database into App-Prod-RG, and manually apply the 'Environment: Production' tag to both resources.

Answer

Deploy both the virtual machine and the database into App-Prod-RG, and manually apply the 'Environment: Production' tag to both resources.
The correct option is correct because Azure resources can reside in a different region than their containing resource group, and resource group tags are not inherited by the resources inside them.

Step-by-Step Solution

1
Determine the resource group placement for resources in different regions.
Both the East US virtual machine and the West US database can be placed in the same App-Prod-RG resource group.
Azure resource groups are logical containers, and resources within a resource group do not have to share the same region/location as the resource group itself.
2
Verify if resource groups can be nested.
Resource groups cannot be nested.
Azure does not support hierarchical nesting of resource groups; they exist as flat containers directly under a subscription.
3
Determine how tag application works between resource groups and resources.
Tags must be manually applied to the individual resources.
Resources do not inherit tags from the resource group they belong to.

Key Concept

Azure resource groups are logical containers that can hold resources from different regions, cannot be nested, and do not pass down their tags to contained resources through inheritance.
PreviousPage 44 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin