Examkin

Describe Cloud Concepts

334 questions

All types334Multiple choice180Multiple select56True / False77Matching21
Question 321Question →

A research laboratory is planning to deploy a custom data-analysis application on Azure. The laboratory requires the ability to configure application-level settings and manage the application code, but wants to avoid the operational overhead of installing, patching, and maintaining the underlying operating system and virtual machines. Which cloud service model fits this scenario?

Show answer & explanation

Answer: Platform as a Service (PaaS)

Answer

Platform as a Service (PaaS)
Platform as a Service (PaaS) allows the customer to focus entirely on application development and data, while the cloud provider manages the underlying infrastructure, physical security, operating systems, and hardware patching. This matches the laboratory's need to deploy a custom application without managing virtual machines or operating systems.

Step-by-Step Solution

1
Analyze the customer requirements for deployment.
The customer needs to host a custom application and manage its code, but wants to avoid managing the operating system, virtual machine, and hardware infrastructure patching.
This establishes the boundary of the customer's desired management scope under the cloud shared responsibility model.
2
Map the requirement to the correct cloud service model.
Platform as a Service (PaaS) is the model where the cloud provider manages the physical hardware, virtualization, operating systems, and middleware, leaving the customer responsible only for the application and data.
By matching the required responsibilities to the cloud service model characteristics, we identify that PaaS perfectly fulfills the requirements.

Key Concept

Platform as a Service (PaaS)
Question 322Question →

A digital publishing company deploys its web application using Azure App Service, which is a Platform as a Service (PaaS) offering. Under the Azure shared responsibility model, the company is responsible for patching the web server software (such as IIS or Apache) and configuring the guest operating system, while Microsoft is responsible for the physical hardware and datacenter security. Is this statement true or false?

Show answer & explanation

Answer: False

Answer

The statement is false. Under the Platform as a Service (PaaS) model, Microsoft is responsible for managing, configuring, and patching the guest operating system and the web server software (such as IIS or Apache). The customer is responsible for the application code and data.
The statement is false because in a Platform as a Service (PaaS) model like Azure App Service, Microsoft (the cloud provider) handles operating system patching and web server maintenance. The customer is only responsible for the application and its data.

Step-by-Step Solution

1
Identify the cloud service model described in the scenario.
The scenario specifies Azure App Service, which is a Platform as a Service (PaaS) offering.
Understanding the service category is necessary to apply the correct shared responsibility rules.
2
Recall the division of responsibilities under the Azure shared responsibility model for PaaS.
Under PaaS, the cloud provider (Microsoft) manages physical servers, virtualization, the operating system, and runtime environments/web server software, while the customer manages applications and data.
This establishes which tasks are handled by the cloud provider versus the customer.
3
Compare the statement's claim with the PaaS division of responsibilities.
The statement claims the customer is responsible for OS configuration and web server patching, which contradicts the PaaS model where Microsoft handles these responsibilities.
Comparing the claim to established rules determines if the statement is true or false.

Key Concept

Shared responsibility model responsibilities for Platform as a Service (PaaS) deployments.
Question 323Question →

A shipping and logistics company is planning to migrate its fleet dispatch portal to Microsoft Azure. The cloud architecture team must meet the following requirements:

1. If a primary Azure region experiences a catastrophic outage, the portal must be restored in a secondary region within two hours.
2. The portal must maintain a consistent user experience with stable latency, even during sudden workload spikes.

Which of the following concepts directly address these requirements? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Disaster recovery, which focuses on recovering from a catastrophic outage and restoring operations in a secondary region to meet the Recovery Time Objective (RTO).; Performance predictability, which ensures that resources scale dynamically to maintain consistent application response times during sudden traffic spikes.

Answer

Disaster recovery (which restores operations in a secondary region after a catastrophic outage) and performance predictability (which maintains consistent latency and resource availability during traffic spikes) are the correct selections.
The requirement to recover the portal in a secondary region within two hours is addressed by disaster recovery, which relies on metrics like Recovery Time Objective (RTO). The requirement to maintain consistent performance and latency during traffic spikes is addressed by performance predictability.

Step-by-Step Solution

1
Analyze Requirement 1: Restoring the portal in a secondary region within two hours after a catastrophic primary region outage.
Match this with disaster recovery, which handles regional outages and defines recovery metrics like Recovery Time Objective (RTO).
Disaster recovery plans involve replication and failover to separate geographical regions to ensure business continuity.
2
Analyze Requirement 2: Maintaining a consistent user experience with stable latency during sudden spikes in workload.
Match this with performance predictability, which ensures application performance remains stable through dynamic scaling.
Performance predictability ensures that resource availability and speed are maintained under varying load levels.

Key Concept

Reliability, Predictability, and Disaster Recovery
Question 324Question →

A multiplayer online gaming company replicates its player-profile database from a primary datacenter region in the United States to a secondary region in Europe. This replication is configured to ensure that if a major natural disaster takes the primary region completely offline, players can still access their accounts with minimal downtime. Which cloud concept is primarily illustrated by this strategy?

Show answer & explanation

Answer: Disaster recovery

Answer

Disaster recovery
Disaster recovery refers to the policies, tools, and procedures that enable the recovery or continuation of vital technology infrastructure and systems following a natural or human-induced disaster. Replicating databases to a geographically distant secondary region to recover from a complete regional outage is a classic disaster recovery strategy.

Step-by-Step Solution

1
Analyze the scenario requirements
The scenario describes replicating data across separate geographical regions (US to Europe) to handle a major natural disaster that takes an entire primary region offline.
This establishes the scope of the event as a catastrophic regional failure.
2
Differentiate between regional uptime (high availability) and regional recovery (disaster recovery)
Disaster recovery is designed to handle full regional failures by recovering data and operations in a different region, whereas high availability keeps systems running despite minor, local issues within a single region.
This allows us to identify the correct cloud concept.

Key Concept

Disaster Recovery vs High Availability
Estimated Time:1m 15s
Question 325Question →

A smart agriculture startup is migrating its IoT telemetry application to Azure. The team selects a Platform as a Service (PaaS) model to deploy their custom web application and database. Under the Azure shared responsibility model, which task must be performed by the startup's development team?

Show answer & explanation

Answer: Configuring the application logic and managing user access to the telemetry data.

Answer

Configuring the application logic and managing user access to the telemetry data.
Under the Platform as a Service (PaaS) model, the cloud provider manages the underlying hardware, virtualization layers, operating systems, and middleware. The customer remains responsible for the application logic and configuration, as well as securing and managing access to the data they store in the service.

Step-by-Step Solution

1
Identify the cloud deployment model specified in the scenario.
The scenario specifies a Platform as a Service (PaaS) model.
Determining the correct model is the starting point for applying the Azure shared responsibility model.
2
Differentiate responsibilities between the cloud provider and the customer in a PaaS model.
The provider handles physical security, virtualization, OS, and runtime middleware. The customer handles application code, configurations, and data/access.
This division allows us to identify which responsibilities fall to the startup's development team.

Key Concept

Shared responsibility model in Platform as a Service (PaaS)
Question 326Question →

An online retail company is planning to migrate its product catalog API to Azure App Service, a Platform as a Service (PaaS) offering. Under the Azure shared responsibility model, which of the following tasks are the responsibility of the customer? (Select two.)

Select all that apply

Show answer & explanation

Answer: Configuring application settings and managing the deployed code; Securing the application data and controlling user access permissions

Answer

Configuring application settings and managing the deployed code, and Securing the application data and controlling user access permissions
In a Platform as a Service (PaaS) deployment, the cloud provider manages the physical hardware, virtualization layer, and the operating system. The customer retains control over the application (including custom code and settings) and the data hosted within the application, along with identity and access management.

Step-by-Step Solution

1
Identify the cloud deployment model described in the scenario.
The scenario specifies Azure App Service, which is a Platform as a Service (PaaS) model.
Understanding the deployment model allows you to determine the split of responsibilities between the customer and Microsoft.
2
Apply the shared responsibility model rules for PaaS deployments.
Under PaaS, Microsoft manages physical infrastructure, virtualization, and the operating system. The customer is responsible for the application, data, and access management.
This isolates which tasks are handled by the customer and which are offloaded to Microsoft.
3
Evaluate the choices to match customer responsibilities.
Configuring application settings/code and securing data/user access are customer responsibilities. OS patching is a provider responsibility, and SaaS application licensing is irrelevant to PaaS custom hosting.
Ensures selection of only correct answers based on the mapped responsibilities.

Key Concept

Division of responsibility under Platform as a Service (PaaS)
Question 327Question →

A financial startup is deploying a custom database backend for a new mobile transaction application. The development team wants to focus exclusively on designing the database schema and writing stored procedures, without managing hardware maintenance, operating system patching, or database engine updates.

Which service model and responsibility division meets these requirements?

Show answer & explanation

Answer: Platform as a Service (PaaS), where the cloud provider manages the operating system patching and database engine updates.

Answer

Platform as a Service (PaaS), where the cloud provider manages the operating system patching and database engine updates.
The correct option is 'Platform as a Service (PaaS), where the cloud provider manages the operating system patching and database engine updates.' This service model allows the customer to focus on application development and database design (like schemas and stored procedures) while the cloud provider handles the underlying infrastructure, operating system, and database software updates.

Step-by-Step Solution

1
Analyze the management requirements of the financial startup.
The startup needs custom database access (schema design, stored procedures) but wants to delegate hardware, OS patching, and database engine updates to the cloud provider.
Identifying what the customer wants to manage versus what they want the provider to manage helps determine the correct cloud service model.
2
Evaluate the cloud service models (IaaS, PaaS, SaaS) against these requirements.
IaaS leaves OS and database engine management to the customer. SaaS does not allow custom database schema design. PaaS allows custom database configurations while the provider manages the OS and database engine.
Comparing requirements to the features of each service model narrows the choices down to Platform as a Service (PaaS).
3
Determine the correct responsibility distribution for the chosen PaaS model.
In PaaS, the cloud provider manages the operating system patching and database engine updates, not the customer.
This filters out the incorrect PaaS option that misassigns OS patching to the customer.

Key Concept

Platform as a Service (PaaS) Shared Responsibility Model
Question 328Question →

A logistics company is migrating its inventory tracking database to Azure SQL Database (a Platform as a Service (PaaS) database solution). Under the Azure shared responsibility model, the logistics company is responsible for configuring database-level firewall rules and managing user database access, while the cloud provider is responsible for applying security patches to the database engine and the underlying operating system. Is this statement true or false?

Show answer & explanation

Answer: True

Answer

True
In a Platform as a Service (PaaS) model, the cloud provider manages the physical hosts, virtualization, operating system, and application runtime (in this case, the database engine, including OS and engine patching). The customer is responsible for configuring network access control at the database level and managing database-level user access.

Step-by-Step Solution

1
Identify the cloud service model being used in the scenario.
The scenario specifies Azure SQL Database, which is a Platform as a Service (PaaS) offering.
This determines the split of responsibilities between the customer and the cloud provider.
2
Determine the customer's responsibilities for a PaaS database solution.
The customer is responsible for managing data, database schemas, database-level firewalls, and user access permissions.
In PaaS, the customer retains control over the application data layer and security settings related to access.
3
Determine the cloud provider's responsibilities for a PaaS database solution.
The cloud provider manages physical hardware, virtualization, the operating system, and the database runtime/engine (including software patching).
PaaS abstracts the underlying operating system and software maintenance from the customer to reduce administrative overhead.
4
Evaluate the statement in the stem based on these responsibilities.
The statement correctly assigns the firewall configuration and user access to the customer, and the database engine and operating system patching to the cloud provider.
The statement matches the actual division of responsibilities in a PaaS database model.

Key Concept

Under Platform as a Service (PaaS), the cloud provider manages the database engine and underlying OS patching, while the customer maintains responsibility for database firewall configuration and user access management.
Question 329Question →

A company is migrating its IT infrastructure to the public cloud. The IT director wants to ensure that all deployed cloud resources automatically comply with corporate security standards, naming conventions, and cost constraints. Which cloud concept or capability best supports this requirement?

Show answer & explanation

Answer: Cloud governance

Answer

Cloud governance
Cloud governance describes the policies, templates, and rules that organizations put in place to ensure cloud resources meet corporate standards, cost guidelines, and compliance requirements.

Step-by-Step Solution

1
Analyze the business scenario and identify the target requirement.
The target requirement is to enforce security standards, naming conventions, and budget limits automatically across all cloud resources.
Understanding the core requirement allows for mapping it to the correct cloud benefit.
2
Evaluate the cloud concepts in the choices to see which matches policy enforcement.
Governance is the management category that handles templates, policies, and resource configurations. Concepts like high availability and elasticity are performance or scaling behaviors, and the consumption-based model is a pricing mechanism.
This isolates the correct cloud concept from operational and pricing features.

Key Concept

Cloud governance provides the capabilities and tools to define, enforce, and audit rules across resources to maintain compliance with organizational standards.
Question 330Question →

An organization is planning to deploy workloads to Azure while ensuring compliance with its security and governance policies. The administration creates a resource group in the East US region. A developer then deploys an Azure Virtual Machine (Infrastructure as a Service) and an Azure SQL Database (Platform as a Service) into this resource group, but specifies the location of both resources as West US. Which of the following statements correctly describes the outcome of this deployment and the allocation of operating system (OS) patching responsibilities?

Show answer & explanation

Answer: The deployment succeeds because resources can reside in a different region than their parent resource group; the customer is responsible for patching the Virtual Machine OS, while Microsoft is responsible for patching the SQL Database OS.

Answer

The deployment succeeds because resources can reside in a different region than their parent resource group; the customer is responsible for patching the Virtual Machine OS, while Microsoft is responsible for patching the SQL Database OS.
The correct option correctly states that Azure resource groups only specify where resource metadata is stored, allowing resources to be deployed in different regions. Additionally, it properly identifies that OS patching for Virtual Machines (IaaS) is the customer's responsibility, while OS patching for Azure SQL Database (PaaS) is managed by Microsoft.

Step-by-Step Solution

1
Determine if the resource group location restricts the location of resources inside it.
Resources do not inherit their resource group's location and can be deployed to different regions.
The resource group location specifies where the metadata of the resource group is stored, not where the actual resources must run.
2
Analyze OS patching responsibility for Azure Virtual Machines (IaaS).
The customer is responsible for managing and patching the OS.
Under the shared responsibility model, IaaS leaves control and management of the OS, middleware, and applications to the customer.
3
Analyze OS patching responsibility for Azure SQL Database (PaaS).
Microsoft is responsible for managing and patching the OS.
Under PaaS, the physical hardware, virtualization, OS, and database engine are fully managed by the cloud provider, shielding the customer from patching tasks.

Key Concept

Azure Resource Group Location vs Resource Location and Shared Responsibility Model across IaaS and PaaS
Estimated Time:2m 0s
Question 331Question →

A retail company is migrating its e-commerce application to Azure. The migration plan includes deploying Azure Virtual Machines (IaaS) for the web servers and Azure SQL Database (PaaS) for data storage. To implement security, governance, and manageability, the cloud administrator proposes the following design:

1. Nest the database resource group inside the web server resource group to maintain a parent-child administrative hierarchy.
2. Deploy the database resources in the East US region, even though the containing resource group is located in the West US region.
3. Delegate all operating system security patching for both the Virtual Machines and the SQL Database to Microsoft under the shared responsibility model.

Which parts of the administrator's proposed design are valid?

Show answer & explanation

Answer: Only the proposal to deploy the database resources in a region different from the resource group's region is valid.

Answer

Only the proposal to deploy the database resources in a region different from the resource group's region is valid.
The correct answer is the option stating that only the proposal to deploy the database resources in a region different from the resource group's region is valid. Azure Resource Manager permits resources to be deployed in any region regardless of the resource group's region (which is solely used to store deployment metadata). Nesting resource groups is not supported in Azure, and guest operating system patching for Azure Virtual Machines (an IaaS model) is the customer's responsibility, not Microsoft's.

Step-by-Step Solution

1
Evaluate the first proposal regarding nesting resource groups.
Resource groups in Azure cannot be nested.
Azure Resource Manager uses a flat structure for resource groups within a subscription; hierarchy is managed via management groups, not by nesting resource groups.
2
Evaluate the second proposal regarding resource group location and resource location.
Resources can reside in a different region than their containing resource group.
A resource group's location specifies where its deployment metadata is stored, not where the actual resources must be provisioned. Deployed resources can reside in any supported Azure region.
3
Evaluate the third proposal regarding operating system patching under the shared responsibility model.
Operating system patching is a customer responsibility for Virtual Machines (IaaS) but a provider responsibility for Azure SQL Database (PaaS).
Under Infrastructure as a Service (IaaS), the customer retains full control and responsibility over the OS, including security patching. Under Platform as a Service (PaaS), Azure manages the underlying infrastructure, operating system, and patching.
4
Combine the evaluations to select the correct governance and responsibility statement.
Only proposal 2 is valid; proposals 1 and 3 are invalid.
Since nesting is unsupported and IaaS OS patching is a customer responsibility, only the statement confirming that resources can reside in different regions than their resource groups is correct.

Key Concept

Azure resource group governance rules, metadata location independence, and the shared responsibility model differences between IaaS and PaaS.
Question 332Question →

An event management company hosts three large-scale virtual conferences per year. During these three-day events, their web application traffic spikes by 10,000%10,000\%, requiring substantial temporary computing resources. For the remaining days of the year, traffic is extremely low. The company decides to migrate its web hosting from on-premises hardware to Microsoft Azure virtual machines. Which of the following statements correctly describes the financial impact of this migration under the Azure consumption-based model?

Show answer & explanation

Answer: The company pays only for the virtual machines during the days they are running, classifying these costs as operational expenditure (OpEx) with no upfront infrastructure investment.

Answer

The company pays only for the virtual machines during the days they are running, classifying these costs as operational expenditure (OpEx) with no upfront infrastructure investment.
Under Azure's consumption-based model, organizations do not need to invest in upfront physical infrastructure (CapEx). Instead, they are billed based on the actual resources consumed. For virtual machines, this means paying only for the runtime, which is categorized as an operational expenditure (OpEx). This model is highly beneficial for companies with variable workloads, as they can scale down or stop resources when not in use to minimize costs.

Step-by-Step Solution

1
Analyze the resource utilization pattern of the event management company.
The company has highly variable utilization, with extreme spikes during virtual conferences and minimal baseline traffic.
Understanding the usage pattern helps determine the appropriate billing structure.
2
Evaluate the financial classification of cloud computing costs under a consumption-based model.
Azure virtual machines billed on usage are classified as Operational Expenditure (OpEx), which has no upfront costs and is paid as you go.
This contrasts with Capital Expenditure (CapEx), which requires purchasing physical hardware upfront and depreciating it over time.
3
Determine which option aligns with OpEx and variable consumption billing.
The option stating that the company pays only when virtual machines are active (OpEx) is correct.
It accurately reflects the consumption-based model where costs scale directly with resource usage.

Key Concept

Consumption-Based Model (CapEx vs OpEx)
Estimated Time:1m 15s
Question 333Question →

A global logistics corporation is evaluating deployment strategies for its various software applications. Match each business requirement to the most appropriate cloud deployment model.

Click a left item, then click its matching right item

Items

Host a legacy inventory database on physical hardware in a local warehouse while utilizing Azure App Service to run the web-based tracking portal.
Deploy analytics workloads across both Microsoft Azure and Google Cloud Platform (GCP) to utilize specific database features of each provider.
Run a customer feedback application that requires rapid, automatic scaling to handle unpredictable traffic spike levels on shared resources.
Operate a proprietary routing algorithm on dedicated servers owned and maintained by the company inside their corporate headquarters.

Matches

Show answer & explanation

Answer

The scenario using a local warehouse database and Azure App Service matches Hybrid cloud. The scenario using both Azure and Google Cloud Platform matches Multi-cloud. The scenario running on shared resources with rapid scaling matches Public cloud. The scenario running on dedicated, locally owned servers matches Private cloud.
The correct matches align each scenario with its definition: combining local servers and public cloud services is hybrid cloud; using both Azure and GCP is multi-cloud; using shared public resources is public cloud; and using dedicated, owned local servers is private cloud.

Step-by-Step Solution

1
Analyze the first scenario involving local physical hardware and Azure App Service.
Since it integrates local physical hardware with public cloud services, it represents a hybrid cloud deployment.
Hybrid cloud combines private infrastructure (like on-premises servers) with public cloud services.
2
Analyze the second scenario involving both Microsoft Azure and Google Cloud Platform.
Since it uses multiple public cloud providers without any on-premises systems, it represents a multi-cloud deployment.
Multi-cloud refers to using two or more public cloud providers to run applications.
3
Analyze the third scenario requiring rapid scaling on shared resources.
Since the resources are shared and scale dynamically over the internet, it represents a public cloud deployment.
Public cloud resources are owned by third-party providers and shared among multiple tenants.
4
Analyze the fourth scenario operating on dedicated, locally owned servers.
Since the infrastructure is dedicated solely to one organization and locally owned, it represents a private cloud deployment.
Private cloud consists of computing resources used exclusively by one business or organization.

Key Concept

Cloud deployment models define the relationship between infrastructure ownership, resource sharing, and integration. Public cloud is shared resources owned by a provider; private cloud is dedicated resources owned/managed by one organization; hybrid cloud connects on-premises environments with public clouds; multi-cloud leverages multiple public cloud providers.
Question 334Question →

A digital news outlet hosts a web application on Azure. The application experiences sudden, unpredictable surges in reader traffic whenever a major breaking story is published. The system is configured to automatically deploy additional virtual machine instances to handle the spikes, and then remove them once traffic returns to normal baseline levels. Which cloud characteristic does this automatic adjustment of resources directly demonstrate?

Show answer & explanation

Answer: Elasticity

Answer

Elasticity
The correct answer is elasticity because the scenario describes a system that automatically adds resource capacity (virtual machines) to handle traffic spikes and then automatically reduces it when demand decreases. This dynamic, automated scaling in response to real-time workload changes is the definition of cloud elasticity.

Step-by-Step Solution

1
Analyze the scenario details regarding workload demand.
The web application experiences sudden, unpredictable spikes in traffic followed by a return to normal baseline levels.
Identifying the nature of the demand (unpredictable, short-lived spikes) is key to determining which cloud capability is required.
2
Examine the resource adjustment behavior implemented.
The platform automatically deploys more virtual machine instances during spikes and automatically removes them when demand drops.
This automated, bi-directional scaling behavior aligns with the definition of elasticity.
3
Compare the behavior against the definition of standard cloud characteristics.
Elasticity represents the dynamic, automated scaling of resources to match current demand, distinguishing it from static or manual scalability, high availability, and disaster recovery.
Ensures the selected term matches the precise cloud characteristic described.

Key Concept

Cloud elasticity is the ability of a system to dynamically adjust its resource capacity by automatically scaling up or down in response to fluctuating workloads.
PreviousPage 17 / 17
Describe Cloud Concepts Practice Questions — Microsoft Azure Fundamentals (AZ-900) — Page 17 | Examkin