Examkin

All practice questions

1186 questions

All types1,186Multiple choice620Multiple select228True / False291Matching47
Question 961Question →

An organization is designing a disaster recovery (DR) strategy for a critical transaction database. The solution must protect against a broad-scale regional outage, such as a major natural disaster, while ensuring that the replication data traffic stays on the Microsoft backbone network and adheres to national data residency regulations by remaining within the same country. Which Azure architectural concept should the organization utilize?

Show answer & explanation

Answer: Azure Region Pairs, which provide automatic cross-region replication between two regions located within the same geographic boundary, typically separated by at least 300 miles.

Answer

Azure Region Pairs, which provide automatic cross-region replication between two regions located within the same geographic boundary, typically separated by at least 300 miles.
Azure Region Pairs automatically pair two regions within the same geographic boundary (typically at least 300 miles apart) to enable disaster recovery replication while keeping traffic on the Microsoft backbone network and complying with national data residency requirements.

Step-by-Step Solution

1
Analyze the requirements for disaster recovery (DR) from a broad-scale regional outage while complying with national data residency laws.
Identified that the solution must support regional failover (disaster recovery) and keep data replication within the same country (national border).
This narrows down the candidates to cross-region solutions that respect geographic boundaries.
2
Evaluate the architectural characteristics of Azure Region Pairs against the requirements.
Confirmed that Azure Region Pairs are paired within the same geography (except Brazil South), reside at least 300 miles apart for disaster isolation, and utilize the private Microsoft backbone network for replication.
This directly aligns with the scenario's requirements for DR, regional isolation, private networking, and data residency.

Key Concept

Azure Region Pairs provide automatic cross-region replication and disaster recovery capability within the same geographic boundary.
Question 962Question →

A retail business plans to deploy an inventory application consisting of multiple interconnected containers. The system must support automatic scaling, service discovery between containers, and coordinated rolling updates. Which Azure service should the business use to host this application?

Show answer & explanation

Answer: Azure Kubernetes Service

Answer

Azure Kubernetes Service
Azure Kubernetes Service is correct because it is a managed container orchestration platform designed to scale, coordinate, and update multi-container deployments.

Step-by-Step Solution

1
Analyze the application requirements from the scenario: hosting multiple interconnected containers, automatic scaling, service discovery, and coordinated rolling updates.
These requirements specify container orchestration capabilities.
Simple container runners cannot orchestrate complex interactions, service discovery, or automatic rolling updates across multiple containers.
2
Select the Azure service that provides managed container orchestration.
Azure Kubernetes Service is the dedicated managed Kubernetes service in Azure.
Azure Kubernetes Service manages the orchestration of containerized workloads, making it the most appropriate choice.

Key Concept

Azure Kubernetes Service (AKS) provides fully managed container orchestration, automated scaling, and service discovery for complex containerized workloads.
Estimated Time:45s
Question 963Question →

A company is migrating its primary web application to Azure and needs to ensure that the application remains available even if a complete Azure region experiences an outage. Deploying the application instances across multiple Availability Zones within the same Azure region will protect the application from this type of outage.

Show answer & explanation

Answer: False

Answer

The statement is false. Deploying applications across multiple Availability Zones within the same region does not protect against a complete region outage, as all zones are located within that single region.
The correct answer is false. Availability Zones are designed to protect against local datacenter failures within a single region by providing independent power, cooling, and networking. They do not protect against an outage that impacts the entire region. To mitigate the risk of a regional outage, resources must be deployed across multiple Azure regions.

Step-by-Step Solution

1
Analyze the customer's requirement.
The customer needs protection against a complete Azure region outage.
This establishes the scope of protection required (disaster recovery at the regional level).
2
Examine the scope of Azure Availability Zones.
Availability Zones are isolated locations within a single Azure region.
To determine whether they can provide protection beyond the boundary of a single region.
3
Evaluate the proposed solution against the requirement.
Since all Availability Zones of a region are located within that same region, an outage affecting the entire region will impact all its zones. Therefore, the statement is false.
To arrive at the final evaluation.

Key Concept

Azure Availability Zones vs. Region Pairs
Estimated Time:45s
Question 964Question →

An IT administrator is designing the resource hierarchy for a new Azure environment. The architecture requires deploying virtual machines in multiple geographical locations and applying access control policies across different departments.

Which of the following statements regarding Azure resource groups and resource deployment are true? (Select two.)

Select all that apply

Show answer & explanation

Answer: An Azure resource can only belong to a single resource group at any given time.; A resource can be deployed in a different Azure region than the region specified for its resource group.

Answer

An Azure resource can only belong to a single resource group at any given time, and a resource can be deployed in a different Azure region than the region specified for its resource group.
The correct options are that an Azure resource can only belong to a single resource group at any given time, and a resource can be deployed in a different Azure region than the region specified for its resource group. In Azure, every resource must reside in exactly one resource group to define its lifecycle. Additionally, because the resource group region is only for metadata storage, the resources themselves can be provisioned in any globally supported region.

Step-by-Step Solution

1
Analyze the rule regarding resource group nesting.
Verify that Azure resource groups cannot contain other resource groups. This confirms the nesting statement is incorrect.
Azure resource groups are designed as flat boundaries for resource deployment and lifecycle management, not nested directories.
2
Analyze the rule regarding resource location and resource group location.
Verify that resource groups and the resources they contain can be located in different regions.
The location of a resource group is for metadata storage and compliance logging, whereas the actual resources inside the group run in their respective target regions.
3
Identify the resource group membership constraints.
Confirm that an individual Azure resource is member of exactly one resource group at a time.
Azure enforces that every resource belongs to exactly one resource group to maintain a clean lifecycle and billing boundary.

Key Concept

Azure resource groups act as logical containers for resources, but they do not enforce region alignment for their contents and cannot be nested.
Question 965Question →

An Azure resource group named RG-Prod is deployed in the East US region. An administrator deploys an Azure Virtual Machine named VM-App in the West US region and assigns it to RG-Prod. Evaluate whether the following statement is true or false: If the East US region experiences a complete service outage, VM-App will become unavailable and automatically shut down because its parent resource group is inaccessible.

Show answer & explanation

Answer: False

Answer

The statement is false. An outage in the resource group's region only affects management and control plane operations (such as metadata read/write) for that resource group, but it does not impact the runtime availability of resources deployed in other regions.
The correct answer is false because resource groups only store metadata for control plane tasks. A service outage in the resource group's region (East US) will restrict management capabilities (like creating or modifying resources within the group) but does not disrupt the running state or connectivity of the virtual machine located in the West US region.

Step-by-Step Solution

1
Analyze the relationship between a resource group's location and the resources within it.
The resource group's location specifies where its management metadata is stored, but resources inside it can be deployed to different regions.
This establishes that the control plane (metadata) and data plane (resource runtime) are decoupled in terms of location.
2
Evaluate the impact of a regional outage in the resource group's region (East US) on the control plane.
Management operations (creating, deleting, or modifying resources in the resource group) will be temporarily unavailable.
Because the Azure Resource Manager (ARM) cannot read or write metadata in the affected region.
3
Evaluate the impact of the outage on the resource's region (West US) control and data planes.
The resource (VM-App) remains active and running in West US because its runtime host and infrastructure are unaffected by the East US outage.
Azure resources run independently of the resource group's metadata store once provisioned.

Key Concept

Azure Resource Group location dictates control plane metadata storage, not data plane runtime availability of member resources.
Question 966Question →

A university IT department is setting up a lab environment in Azure. They create a resource group in the East US region. Is it true that they can deploy a virtual machine in the West Europe region and place it in this resource group?

Show answer & explanation

Answer: True

Answer

Yes, it is true that resources can be deployed to a different Azure region than the resource group they belong to.
An Azure resource group is a logical container. Its location is required for metadata storage purposes, but resources inside the group can be deployed across various Azure regions.

Step-by-Step Solution

1
Analyze the region of the resource group (East US) and the region of the proposed virtual machine (West Europe).
The resource group and the virtual machine are in different regions.
To identify if there is a location discrepancy between the resource container and the resource itself.
2
Determine if Azure resource groups restrict resource location.
Resource groups only store resource metadata and do not enforce location restrictions on the resources they contain.
To verify if Azure allows cross-region resource placement within a single resource group.

Key Concept

Resource Group Location Independence
Estimated Time:45s
Question 967Question →

An enterprise logistics company is migrating its workloads to Azure. The company needs to design an architecture that automatically adjusts resources during unpredictable traffic spikes and remains operational if a single datacentre fails. Which of the following statements correctly describe the cloud concepts that meet these architectural goals? (Select TWO).

Select all that apply

Show answer & explanation

Answer: Configuring a Virtual Machine Scale Set to automatically add instances during high-traffic periods and remove them when demand decreases represents elasticity.; Deploying application instances across multiple Availability Zones to ensure the system remains accessible during a localized power outage represents high availability.

Answer

The correct statements are that configuring virtual machine scale sets to automatically scale based on demand represents elasticity, and deploying across multiple Availability Zones to protect against localized power outages represents high availability.
The correct options are those stating that automatic scaling of virtual machine scale sets represents elasticity, and utilizing multiple Availability Zones within a region to survive localized failures represents high availability. Elasticity is defined by automated scaling in response to fluctuating demand. High availability focuses on eliminating single points of failure within a region to maximize uptime.

Step-by-Step Solution

1
Analyze the business requirements of the logistics company.
The company needs automatic resource adjustment (dynamic load handling) and resilience to single datacentre failures (local redundancy).
This establishes the cloud characteristics that are being evaluated.
2
Evaluate the statement regarding automatic scaling and virtual machine scale sets.
This matches the definition of elasticity, which is automatic and dynamic scaling based on real-time demand.
To distinguish elasticity from static or manual scaling.
3
Evaluate the statement regarding Availability Zones and localized power outages.
This matches the definition of high availability, which focuses on localized redundancy to ensure continuous uptime.
To distinguish high availability from disaster recovery.

Key Concept

Understanding the differences between high availability, scalability, and elasticity in Azure.
Estimated Time:1m 30s
Question 968Question →

A university IT department is setting up a new lab environment on Azure to support a course on advanced network security. The environment requires students to install custom firewall applications, configure operating system settings, and run legacy diagnostic tools. The department deploys Azure Virtual Machines for this setup.

Under the Microsoft Azure shared responsibility model for this Infrastructure as a Service (IaaS) deployment, which of the following tasks are the responsibility of the university? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Applying security patches to the guest operating system; Installing and configuring the custom firewall applications

Answer

The customer is responsible for applying security patches to the guest operating system and installing and configuring the custom firewall applications.
Under the shared responsibility model for Infrastructure as a Service (IaaS), the customer assumes responsibility for the guest operating system and all software layer configurations. Therefore, patching the guest operating system and installing the custom firewall applications are tasks managed by the customer. Microsoft retains responsibility for the underlying physical infrastructure, virtualization hypervisor, and physical datacenter facilities.

Step-by-Step Solution

1
Identify the cloud service category for the deployed resource (Azure Virtual Machines).
Azure Virtual Machines represent an Infrastructure as a Service (IaaS) offering.
Understanding the service model is required to apply the corresponding shared responsibility boundaries.
2
Recall the customer's and cloud provider's boundaries of responsibility in an IaaS model.
In IaaS, the customer manages the guest operating system, applications, data, and configurations, whereas the cloud provider manages host virtualization, physical servers, networking, and datacenters.
This division determines which tasks in the options belong to the customer.
3
Evaluate the choices to select the two tasks that fall under customer responsibility.
Patching the guest operating system and configuring the custom firewall applications are customer tasks. Server maintenance and physical datacenter security are cloud provider tasks.
To choose the two correct options matching the customer's duties.

Key Concept

Shared responsibility model in Infrastructure as a Service (IaaS)
Question 969Question →

A company plans to deploy a web application to Azure. The company decides to use a Platform as a Service (PaaS) model instead of an Infrastructure as a Service (IaaS) model. Which of the following is a key characteristic of this PaaS deployment?

Show answer & explanation

Answer: The cloud provider automatically manages and patches the underlying operating system.

Answer

The cloud provider automatically manages and patches the underlying operating system.
In a Platform as a Service (PaaS) model, the cloud provider manages the hardware, virtualization, and the operating system. Consequently, the provider automatically handles operating system patching and updates. This allows the customer to focus purely on deploying their application code and configuring application settings.

Step-by-Step Solution

1
Analyze the differences between the Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) models.
PaaS abstracts the virtual machine and operating system layer from the customer.
This determines who is responsible for managing host software components.
2
Determine which management responsibility shifts to the provider in PaaS.
The cloud provider manages and updates the operating system.
Under the shared responsibility model, OS maintenance is handled by the provider in a PaaS model.

Key Concept

Platform as a Service (PaaS) Shared Responsibility
Estimated Time:45s
Question 970Question →

An enterprise plans to migrate its legacy line-of-business application to Azure. The application requires direct access to the local file system of the operating system and runs on a specific, non-standard port that must be opened at the operating system firewall level. Which cloud service model should the enterprise use to host this application, and who is responsible for managing the operating system firewall settings?

Show answer & explanation

Answer: Infrastructure as a Service (IaaS), and the customer is responsible

Answer

Infrastructure as a Service (IaaS), and the customer is responsible
The correct option is the one stating Infrastructure as a Service (IaaS) and that the customer is responsible. Under the shared responsibility model, IaaS gives the customer full administrative access to the virtual machine's operating system, allowing them to configure custom firewall ports and access local files. Consequently, the customer is responsible for configuring, updating, and securing this guest operating system, including its local firewall.

Step-by-Step Solution

1
Analyze the application requirements
The application requires direct access to the operating system file system and custom OS firewall rules.
This determines which cloud service model is appropriate since PaaS models abstract the operating system level.
2
Identify the correct cloud service model
Infrastructure as a Service (IaaS) is the only model that provides direct access to the guest operating system.
IaaS provides virtual machines where the customer has full administrative control over the OS.
3
Determine responsibility for operating system firewall settings under IaaS
Under the shared responsibility model for IaaS, the customer is responsible for the guest operating system, including its firewall configurations.
Microsoft's responsibility in IaaS ends at the hypervisor level.

Key Concept

Shared responsibility model and operating system management in Infrastructure as a Service (IaaS)
Question 971Question →

An organization needs to deploy a temporary virtual desktop environment for 50 external software engineers. The engineers require individual, persistent Windows 11 desktop environments with local administrative rights to install custom developer tools. The solution must minimize administrative overhead by utilizing a managed control plane for connection brokering and gateway access, while guaranteeing that each engineer has dedicated compute resources that are not shared with other users.

Which Azure deployment option should the organization select to meet these requirements?

Show answer & explanation

Answer: Azure Virtual Desktop configured with a personal host pool

Answer

Azure Virtual Desktop configured with a personal host pool
The correct answer is the option configuring Azure Virtual Desktop with a personal host pool. Azure Virtual Desktop provides a fully managed connection broker and gateway control plane, reducing administrative overhead. The personal host pool allocation ensures that each user receives a dedicated virtual machine with persistent storage and non-shared compute resources, making it safe to grant local administrative privileges.

Step-by-Step Solution

1
Analyze the management requirement.
Identify that the solution must minimize administrative overhead for connection broker and gateway components, which points to a managed service like Azure Virtual Desktop.
Azure Virtual Desktop offloads the broker, gateway, web access, and diagnostics infrastructure to Microsoft, whereas standard Azure VMs with a custom RDS deployment require the customer to manage these components.
2
Analyze the user resource and desktop configuration requirements.
Identify that engineers need individual persistent environments with dedicated (non-shared) resources and local admin rights.
This rules out pooled host pools (which use multi-session sharing of VM resources) and points to a personal host pool where each user gets their own dedicated, persistent VM.

Key Concept

Azure Virtual Desktop Host Pools (Personal vs. Pooled) and Managed Control Plane
Question 972Question →

A city government is launching a new online parking permit application. The public-facing web interface must scale dynamically to handle high traffic during registration periods without upfront hardware purchases. However, local regulations mandate that all resident payment and identity records must remain stored on physical servers owned and operated within the city hall data center. Which cloud model represents this deployment architecture?

Show answer & explanation

Answer: Hybrid cloud

Answer

Hybrid cloud
The correct answer is the hybrid cloud model. This model is characterized by combining public cloud resources (which allow the web interface to scale dynamically without CapEx) with private, on-premises infrastructure (which ensures sensitive resident data remains stored locally under the city's control to comply with regulations).

Step-by-Step Solution

1
Analyze the requirements for the web interface and the data storage.
The web interface needs to scale dynamically without upfront hardware costs (which points to a public cloud feature), while the resident records must remain on physical servers owned and operated within the city hall data center (which points to an on-premises / private infrastructure requirement).
Understanding the individual hosting requirements for each component is necessary to determine the overall deployment model.
2
Identify the cloud deployment model that combines these two environments.
A model that integrates public cloud services with private on-premises infrastructure is a hybrid cloud model.
Determining how the two distinct environments work together allows for selection of the correct deployment architecture.

Key Concept

Cloud Models (Public, Private, Hybrid, Multi-cloud)
Question 973Question →

An IoT company is planning to deploy a real-time data ingestion solution in Azure. Is the following statement true or false? Under the Platform as a Service (PaaS) model, the company is responsible for provisioning, configuring, and managing the underlying virtual machines that scale to handle the incoming telemetry data.

Show answer & explanation

Answer: False

Answer

False
The statement is false because managing the underlying virtual machines, including their provisioning and scaling, is the responsibility of the cloud provider under a Platform as a Service (PaaS) model. The customer is only responsible for the application, data, and configurations.

Step-by-Step Solution

1
Identify the cloud deployment model described in the scenario.
The scenario specifies a Platform as a Service (PaaS) model.
Understanding the deployment model is necessary to determine the shared responsibility boundaries.
2
Determine the division of responsibilities for virtual machine management in PaaS.
In PaaS, the cloud provider manages the operating system, virtualization layer, and physical servers, including provisioning and scaling.
This determines whether the customer or the provider handles the underlying infrastructure.
3
Evaluate the accuracy of the statement against the PaaS responsibility rules.
The statement claims the company (customer) is responsible for the virtual machines, which is incorrect.
Comparing the scenario requirements with the model properties yields the final answer.

Key Concept

Shared responsibility model for Platform as a Service (PaaS) vs. Infrastructure as a Service (IaaS)
Question 974Question →

A company wants to host containerized workloads on Azure. They are deciding between a serverless container hosting option and a full-featured container orchestration service. Which two of the following statements accurately describe these container services?

Select all that apply

Show answer & explanation

Answer: Azure Container Instances allows you to run containers without managing virtual machines, whereas Azure Kubernetes Service provides advanced orchestration features like service discovery and scale management.; Azure Container Instances is designed for running isolated containers without orchestration, while Azure Kubernetes Service is built for managing complex, multi-container deployments.

Answer

The correct statements are that Azure Container Instances allows you to run containers without managing virtual machines and is designed for isolated containers, while Azure Kubernetes Service provides orchestration features and is built for complex, multi-container deployments.
The correct options accurately describe that Azure Container Instances is a serverless offering for running isolated containers without managing virtual machines, while Azure Kubernetes Service is a dedicated orchestrator built for managing complex, multi-container deployments.

Step-by-Step Solution

1
Identify the characteristics of Azure Container Instances.
Azure Container Instances is a serverless platform-as-a-service (PaaS) that runs isolated containers without requiring virtual machine or cluster management.
Understanding the core purpose of Azure Container Instances helps identify its lack of orchestration overhead and managed host VM patching.
2
Identify the characteristics of Azure Kubernetes Service.
Azure Kubernetes Service is a Kubernetes-based container orchestration service designed for complex, multi-container applications.
Understanding the core purpose of Azure Kubernetes Service helps identify that it handles advanced orchestration features like service discovery and deployment management.
3
Compare the two services against the options to find the correct statements.
The statements describing Azure Container Instances as serverless/isolated and Azure Kubernetes Service as an orchestrator are correct, while the statements suggesting Azure Container Instances requires host OS patching or manages Kubernetes clusters are incorrect.
This distinguishes between basic serverless container hosting and advanced container orchestration.

Key Concept

Comparing Azure Container Instances and Azure Kubernetes Service features
Question 975Question →

A digital design studio wants to host a custom-coded portfolio website in the cloud. The studio's development team wants to deploy their own web application code but does not want to manage the underlying operating systems, run updates, or configure web server software. Which cloud service model should the studio select for this website?

Show answer & explanation

Answer: Platform as a Service (PaaS)

Answer

Platform as a Service (PaaS)
Platform as a Service (PaaS) is the correct choice because it provides a managed hosting environment where developers can deploy custom web application code without the administrative overhead of configuring, updating, and patching the underlying virtual machines or operating systems.

Step-by-Step Solution

1
Analyze the requirements: the customer wants to deploy custom code (portfolio website) but does not want to manage operating systems, patching, or the web server configuration.
Identifies that the solution must support hosting custom code while offloading server and operating system management to the cloud provider.
This establishes the boundary between IaaS (customer manages OS/server) and PaaS (provider manages OS/server, customer manages code).
2
Evaluate the service models against the requirement to run custom code without managing the infrastructure.
Platform as a Service (PaaS) meets these criteria, whereas IaaS requires OS management, and SaaS does not support hosting custom applications.
This confirms Platform as a Service (PaaS) is the correct fit.

Key Concept

The Platform as a Service (PaaS) model allows developers to focus on application deployment and code without managing the underlying operating system or hardware infrastructure.
Estimated Time:45s
Question 976Question →

A company is migrating its inventory management database to Azure Virtual Machines. The database requires a legacy version of Microsoft SQL Server that is not supported by Azure SQL Database. In this Infrastructure as a Service (IaaS) environment, which management task is the responsibility of Microsoft?

Show answer & explanation

Answer: Maintaining the physical host hardware and hypervisor layers

Answer

Maintaining the physical host hardware and hypervisor layers
The responsibility for maintaining physical host hardware and the hypervisor layer belongs to Microsoft in an IaaS model. This includes the physical servers, storage, networking systems, and the virtualization layer that hosts the virtual machines.

Step-by-Step Solution

1
Analyze the cloud service model being used in the scenario.
The deployment uses Azure Virtual Machines, which falls under the Infrastructure as a Service (IaaS) model.
Identifying the service model determines the shared responsibility boundaries.
2
Determine the boundary of responsibility for IaaS.
The cloud provider manages the physical datacenters, physical servers, and hypervisors. The customer manages the operating system, network controls, applications, and data.
Differentiating customer vs. provider responsibilities isolates the correct answer.
3
Evaluate the options against the provider responsibilities.
Maintaining the physical host hardware and hypervisor layers is a cloud provider responsibility, whereas patching databases, configuring backups, and managing database permissions are customer tasks.
Validates the correct option and rejects the incorrect distractors.

Key Concept

Under the Infrastructure as a Service (IaaS) model, Microsoft maintains the physical infrastructure and virtualization layer, while the customer manages the operating system, applications, database systems, and data.
Question 977Question →

An organization plans to deploy a multi-tier web application in Azure. The database virtual machine needs to be deployed in the East Asia region for local data residency compliance, while the web server virtual machine needs to be deployed in the West US region. The administration team wants to manage the lifecycle of all these virtual machines together under a single resource group named App-RG, which is created in the West US region. Which of the following statements correctly describes the validity of this deployment?

Show answer & explanation

Answer: The deployment is valid, as Azure resources can be located in a different region than the resource group containing them.

Answer

The deployment is valid, as Azure resources can be located in a different region than the resource group containing them.
The correct option is valid because a resource group's location is only used to store its metadata. The actual resources within the group can be deployed to any supported Azure region based on application architecture and compliance requirements.

Step-by-Step Solution

1
Analyze the relationship between resource locations and resource group locations in Azure.
Confirm that a resource group stores metadata in its own region, but the resources it manages can be deployed in any supported region globally.
To verify if resources are restricted to the location of their resource group.
2
Evaluate the rules for resource group nesting.
Confirm that Azure resource groups are flat collections and cannot be nested.
To check if nesting is a valid structure in Azure.
3
Evaluate the rules for tag inheritance.
Confirm that resources do not automatically inherit tags from their resource group.
To determine if tag inheritance makes the deployment automatically inherit tags.

Key Concept

Azure Resource Group boundaries, location independence, lack of nesting support, and tag inheritance rules.
Estimated Time:1m 0s
Question 978Question →

A retail company is preparing to deploy an online inventory system in Azure. To organize their resources, the administrator attempts to create a resource group named `rg-retail-inventory` and plans to create a sub-resource group named `rg-inventory-database` inside it to isolate the database resources. What will be the outcome of this deployment plan?

Show answer & explanation

Answer: The deployment plan will fail because Azure resource groups cannot contain other resource groups.

Answer

The deployment plan will fail because Azure resource groups cannot contain other resource groups.
The correct answer is that the deployment plan will fail because Azure resource groups cannot contain other resource groups. All resource groups in an Azure subscription exist at the same level and cannot be nested.

Step-by-Step Solution

1
Analyze the proposed resource organization structure involving nested resource groups.
The plan attempts to create a resource group inside another resource group.
To check if this hierarchy is supported by Azure Resource Manager.
2
Recall the rules governing Azure resource groups.
Azure resource groups cannot be nested inside other resource groups.
To determine the final outcome of the deployment configuration.

Key Concept

Azure resource groups are flat logical containers and cannot be nested.
Question 979Question →

An organization is planning to deploy different IT workloads to the cloud. Match each business scenario to the cloud model that best describes its deployment.

Click a left item, then click its matching right item

Items

Public cloud
Private cloud
Hybrid cloud
Multi-cloud

Matches

Show answer & explanation

Answer

Public cloud matches the online booking startup; Private cloud matches the medical research center; Hybrid cloud matches the manufacturing firm; Multi-cloud matches the logistics company.
Matching Public cloud with the online booking startup is correct because it uses third-party public cloud services (Azure App Services). Matching Private cloud with the medical research center is correct because the research center hosts workloads on dedicated hardware in its own datacenter. Matching Hybrid cloud with the manufacturing firm is correct because it combines local physical servers (on-premises) with public cloud analytics (Azure Synapse Analytics). Matching Multi-cloud with the logistics company is correct because it distributes workloads across two distinct public cloud providers (AWS and Azure) without utilizing on-premises infrastructure.

Step-by-Step Solution

1
Analyze the online booking startup scenario where all resources run on Azure App Services without local hardware.
Identify this as the public cloud model because the infrastructure is entirely managed and owned by a third-party provider.
Public cloud resources are shared multi-tenant infrastructures owned by cloud providers.
2
Analyze the medical research center scenario which uses dedicated physical servers inside its own datacenter.
Identify this as the private cloud model because the organization has exclusive use of the dedicated hardware in its own facility.
Private clouds feature dedicated infrastructure owned and used solely by one organization.
3
Analyze the manufacturing firm scenario that combines local physical factory servers with Azure Synapse Analytics.
Identify this as the hybrid cloud model since it integrates on-premises infrastructure with public cloud services.
Hybrid cloud is defined by the coexistence and integration of private/on-premises systems with public cloud platforms.
4
Analyze the logistics company scenario that utilizes two distinct public cloud providers with no local servers.
Identify this as the multi-cloud model because the company distributes services across multiple public cloud vendors.
Multi-cloud refers to deploying assets across multiple public cloud providers to distribute risk or utilize specific services.

Key Concept

Cloud deployment models determine where data is stored and where applications run, categorized into public, private, hybrid, and multi-cloud environments.
Question 980Question →

An Azure administrator applies a policy at a management group level to restrict virtual machine sizes. The administrator claims that a child subscription can override this policy by applying a different policy at the resource group level to allow those restricted sizes. Is this claim true or false?

Show answer & explanation

Answer: False

Answer

The statement is false because Azure Policy inheritance is cumulative and restrictions applied at a higher scope, such as a management group, cannot be overridden or bypassed by policies at a lower scope.
The correct answer is false because Azure Policy uses a cumulative evaluation model. Inherited policies from higher scopes (like management groups) are enforced across all child scopes, and lower-level policies cannot override these restrictions.

Step-by-Step Solution

1
Analyze the policy hierarchy and inheritance rules in Azure.
Policies applied at a parent scope (e.g., Management Group) are inherited by all child scopes (Subscriptions, Resource Groups, and Resources).
Governance and security controls in Azure are designed to flow down the hierarchy to ensure compliance.
2
Evaluate how conflicting policies at different scopes are resolved.
Azure Policy is cumulative. If any policy at any level denies an action, the action is blocked.
Azure does not support a 'permit overrides deny' mechanism for policy inheritance.
3
Determine the validity of the administrator's claim.
The claim that a resource group policy can override a management group policy is false.
Since policies are cumulative, the restriction from the management group remains active and cannot be bypassed at the resource group level.

Key Concept

Azure Policy inheritance and cumulative evaluation
PreviousPage 49 / 60Next
All practice questions — Microsoft Azure Fundamentals (AZ-900) | Examkin