Describe Azure Architecture and Services

An organization is designing a hybrid network architecture to connect its on-premises datacenter to an Azure Virtual Network (VNet). The primary connection must be a private, dedicated, high-speed connection that does not traverse the public internet. For redundancy, the organization requires a cost-effective backup connection that can be routed over the public internet. Which two Azure connectivity options should the organization implement to meet these requirements?

A company is establishing connectivity between its on-premises headquarters and an Azure Virtual Network. The connection must bypass the public internet to ensure predictable performance and security. Additionally, the company's internal compliance policy mandates that all data in transit must be encrypted at the network layer using IPsec. Which solution satisfies all of these requirements?

A company plans to connect its local office to an Azure virtual network. The connection must be secure, encrypted, and established quickly over the public internet. Which Azure service should the company use?

A company is deploying an application on Azure Virtual Machines. The deployment has the following requirements:
- A storage solution to host the operating system disks for the virtual machines, where the company maintains full administrative control over operating system patching and configurations.
- A shared storage volume that can be mounted simultaneously by multiple virtual machines using the Server Message Block (SMB) protocol.

Which combination of Azure storage services should the company select?

A company is planning to migrate its operations to Azure. The migration requirements specify:

- The finance team must run a legacy desktop application that requires local administrative rights and a dedicated, persistent operating system state where changes are saved across sessions.
- The customer support team needs access to shared desktop sessions where multiple users run concurrent sessions on the same underlying virtual machine resources to optimize licensing and compute costs.

Which configuration should the company implement to meet these requirements?

An enterprise is designing its Azure governance model. The compliance department requires that a specific security policy be applied to all resources deployed across the company's 12 Azure subscriptions. The IT team wants to apply this policy efficiently without configuring it on each subscription individually. Which Azure management boundary should the IT team use to group these subscriptions and apply the policy?

An administrator needs to deploy a new Azure Virtual Machine in the West Europe region. The administrator wants to organize this virtual machine under an existing resource group named RG-Finance, which is located in the North Europe region.

Which of the following statements correctly describes how the administrator should proceed?

An administrator is planning the deployment of a new application in Azure. The application requires virtual machines to be deployed in the East US region and a storage account to be deployed in the West US region. The administrator wants to manage all of these resources together as a single logical unit and is considering nesting resource groups to represent different application tiers. Which of the following statements correctly describes how Azure resource groups can be used to meet these requirements?

An organization has an Azure environment with a Management Group hierarchy where a parent Management Group named Corp-MG contains two subscriptions: Sub-Prod and Sub-Dev.

An administrator must design a deployment for a new application. The deployment must meet the following requirements:
1. The application's database and web server resources must be managed together as a single lifecycle unit.
2. The database must be physically located in the West US region, and the web server must be physically located in the East US region.
3. A security compliance policy must be applied at a level that automatically enforces compliance across both the Sub-Prod and Sub-Dev subscriptions.

Which configuration should the administrator implement to meet these requirements?

An administrator is planning the deployment of a new multi-tier application in Azure and proposes the following resource configuration:

1. Create a parent resource group named RG-Prod in the North Europe region.
2. Create a child resource group named RG-DB nested inside RG-Prod to isolate database resources.
3. Deploy an Azure SQL Database to the West Europe region, but place it within the RG-DB resource group.
4. Apply cost-center tags to RG-DB and rely on the database to automatically inherit these tags.

Which statement correctly identifies the validity of this proposed configuration?

A company plans to deploy a standard web application to Azure. The company wants to minimize administrative effort by ensuring that the cloud provider automatically manages the operating system patching, hardware provisioning, and software runtime environment. The application does not require containerization. Which Azure service should the company use to host the web application?

An organization is designing a hybrid cloud network to connect its on-premises database to resources in Azure. The network connection must support database replication with predictable, low-latency performance and must ensure that data is never routed over the public internet. Which Azure service should the organization deploy to meet these requirements?

A company is planning to deploy a web application and needs a database service. The application requires a non-relational (NoSQL) database to store unstructured user profile documents. A developer proposes using Azure SQL Database to meet this requirement. Why is this proposal incorrect?

A company wants to connect its on-premises head office to an Azure virtual network. The network traffic must be encrypted during transit, setup costs must be kept minimal, and the connection can run over the public internet. Which Azure service should the company use to meet these requirements?

An organization needs to connect its on-premises datacenter to an Azure virtual network to support a hybrid cloud model. The connection must provide high reliability, support a bandwidth of up to $10\text{ Gbps}$, and bypass the public internet entirely for security reasons. Which service should the organization implement?

A company is migrating a financial ledger application to Azure. The application requires a database engine that enforces a strict relational schema, supports ACID-compliant transactions, and allows querying via standard SQL. To minimize administrative overhead, Microsoft must manage the operating system patching, database engine updates, and backups. Which service should the company select to meet these requirements?

A development team has packaged a data processing task into a single Docker container. This task runs once a week for approximately two hours. The team wants to execute this containerized task without provisioning or managing virtual machines, and they want to avoid the administrative overhead of configuring a container orchestration platform. Which Azure service should the team choose to meet these requirements?

An organization is planning to migrate a relational database to Azure. To minimize administrative overhead, the database solution must support automatic operating system patching, database software updates, and automated backups. Additionally, the database administrators require full administrative control over the underlying operating system to install custom third-party monitoring agents. The organization's cloud architect recommends deploying Azure SQL Database. Is this recommendation correct?

An organization is designing a migration strategy for a critical application composed of multiple containerized microservices. The architecture requires pod-level co-scheduling of helper containers, internal service discovery, and automated horizontal scaling of container groups. Additionally, the operations team wants to ensure that the operating system patching of the underlying nodes is managed automatically by the cloud provider, while still retaining declarative control over the container deployment configuration. Which Azure service should the organization select to meet these requirements?

A company is developing a custom accounting application that requires a relational database with strict schema enforcement and transactional integrity (ACID compliance). The solution must minimize administrative overhead, and Microsoft must be responsible for operating system patching and database engine updates. Which Azure service should the company select?