Examkin

Describe Cloud Concepts

334 questions

All types334Multiple choice180Multiple select56True / False77Matching21
Question 141Question →

A research institute needs to run a temporary data simulation that requires high compute power for one week. The institute rents virtual machines from Microsoft Azure for the duration of the simulation and deletes them afterward. The physical servers hosting these virtual machines are shared with other Azure customers. Which cloud model is the institute using?

Show answer & explanation

Answer: Public cloud

Answer

Public cloud
The public cloud model is correct because the resources (virtual machines) are owned and operated by a third-party cloud service provider (Microsoft) and provisioned over the internet using shared physical hardware.

Step-by-Step Solution

1
Analyze resource ownership and sharing details in the scenario.
The infrastructure is owned by a third-party cloud provider (Microsoft) and the physical hardware is shared with other customers (multi-tenancy).
These are key characteristics of the public cloud model.
2
Check for local data center integration or dedicated single-tenant hardware.
There is no mention of local on-premises hardware or dedicated physical infrastructure.
This rules out both hybrid and private cloud models.

Key Concept

Public cloud model characteristics
Estimated Time:45s
Question 142Question →

A financial services company is deploying a new application. The administrator creates a resource group named prod-rg in the East US region to organize the application's resources. A developer needs to deploy a virtual machine (VM) that must reside in the West US region for latency reasons, and the finance team requires a 'CostCenter' tag to be applied to all resources for billing. Which of the following statements correctly describes how the resource group's configuration affects this deployment?

Show answer & explanation

Answer: The virtual machine can be deployed in the West US region within prod-rg, but it will not automatically inherit the 'CostCenter' tag from the resource group.

Answer

The virtual machine can be deployed in the West US region within the resource group, but it will not automatically inherit the tag from the resource group.
The correct answer is correct because Azure allows resources to be deployed in a different region than their resource group, and resources do not automatically inherit tags applied to their resource group. The resource group's location is only used to store metadata about the resources.

Step-by-Step Solution

1
Evaluate whether Azure resources must reside in the same region as their containing resource group.
Resources can be deployed in any supported region, independent of the resource group's location.
The resource group location is only used to store deployment metadata, not to restrict the geographic location of the resources themselves.
2
Determine if resource groups can be nested in Azure.
Nesting resource groups is not supported.
Azure resource groups are a single-level logical grouping mechanism.
3
Analyze whether resource tags are automatically inherited by resources from their resource group.
Resources do not inherit tags from their parent resource group.
Tags must be applied directly to individual resources, or enforced automatically using Azure Policy.

Key Concept

Resource Group Boundaries and Tagging Inheritance
Estimated Time:1m 30s
Question 143Question →

A retail company adopts a cloud-based inventory management system that is delivered as a Software as a Service (SaaS) solution. Under the SaaS model, the retail company is responsible for maintaining the physical hardware and virtual machines hosting the system. Is this statement true or false?

Show answer & explanation

Answer: False

Answer

False
The correct answer is False because the customer of a Software as a Service (SaaS) application is not responsible for managing or maintaining the physical hardware or virtual machines that host the service. Those responsibilities belong entirely to the cloud provider.

Step-by-Step Solution

1
Identify the cloud service model described in the scenario.
The scenario describes a Software as a Service (SaaS) solution.
Understanding the specific cloud service model is necessary to determine the distribution of shared responsibilities.
2
Evaluate the management responsibility for physical hardware and virtual machines in a SaaS model.
In SaaS, the cloud service provider manages the entire application stack, including the underlying physical hardware and virtual machines.
Determining who manages the infrastructure components helps evaluate the accuracy of the statement.

Key Concept

Under the cloud shared responsibility model, Software as a Service (SaaS) offloads the management of all physical infrastructure, operating systems, and application hosting to the cloud provider.
Estimated Time:45s
Question 144Question →

An organization implements a cloud-based Human Resources (HR) portal to track employee performance, benefits, and payroll. The HR staff accesses the portal daily via web browsers. Under the cloud shared responsibility model, which of the following tasks is the responsibility of the organization?

Show answer & explanation

Answer: Configuring user access permissions and managing employee identity registries.

Answer

Configuring user access permissions and managing employee identity registries.
In a Software as a Service (SaaS) model, the cloud provider manages the physical infrastructure, operating systems, database middleware, and the application itself. However, the customer is always responsible for configuring user access permissions and managing employee identity registries to ensure only authorized users access the system.

Step-by-Step Solution

1
Identify the cloud service model described in the scenario.
The HR portal is a web-based, fully managed application, which represents a Software as a Service (SaaS) model.
Determining the service model is essential to applying the correct shared responsibility boundaries.
2
Evaluate the customer's responsibility boundaries in a SaaS model.
Under a SaaS model, the cloud provider manages physical hosts, network, datacenter, OS, middleware, and application runtime. The customer retains responsibility for data, endpoints, and identity/access management.
To separate tasks managed by the provider from those managed by the customer.
3
Match the options to find the customer's duty.
Configuring user access permissions maps directly to identity/access management, which is a customer responsibility.
To select the correct choice.

Key Concept

Software as a Service (SaaS)
Estimated Time:1m 0s
Question 145Question →

A business transitions its legacy human resources (HR) portal to a cloud-based Software as a Service (SaaS) solution. Under the shared responsibility model, the cloud provider manages the physical infrastructure, virtualization, operating systems, and the application software. Which of the following responsibilities remains with the customer?

Show answer & explanation

Answer: Configuring user access permissions and managing identity data

Answer

Configuring user access permissions and managing identity data
Under the Software as a Service (SaaS) model, the cloud provider manages the entire application, middleware, operating systems, and physical infrastructure. However, the customer always retains responsibility for managing their own data, user accounts, identities, and access configurations. Therefore, configuring user access permissions and managing identity data remains the customer's responsibility.

Step-by-Step Solution

1
Analyze the cloud service model referenced in the scenario.
The scenario describes Software as a Service (SaaS), where the cloud provider manages almost the entire stack including hardware, operating systems, database management systems, and application software.
Identifying the service model determines the division of responsibility between the customer and the cloud provider.
2
Apply the shared responsibility model rules for SaaS to identify the customer's duties.
Under SaaS, the customer's responsibilities are limited to information and data, devices (mobile and PCs), and accounts and identities.
This determines which of the provided choices represents a task still owned by the customer.

Key Concept

Under the SaaS shared responsibility model, the customer retains responsibility for managing their own data, devices, and user accounts/identities, while the provider manages everything else.
Question 146Question →

A company is deploying an application in Azure. The company needs to ensure that the application remains accessible even during localized hardware failures, and that it can automatically scale resources up and down to match fluctuating daily demand. Which two cloud benefits directly address these requirements? (Select two)

Select all that apply

Show answer & explanation

Answer: High availability; Elasticity

Answer

High availability and Elasticity
High availability is correct because it ensures service uptime by providing redundancy to handle localized component failures. Elasticity is correct because it allows resources to scale out or in dynamically in response to changing demand.

Step-by-Step Solution

1
Analyze the requirement for continuous application accessibility during localized hardware failures.
Identify that High Availability is the cloud benefit designed to maximize service uptime and tolerate local component failures.
High availability ensures redundant systems are in place within a region to keep the application accessible.
2
Analyze the requirement to automatically adjust resources based on daily demand fluctuations.
Identify that Elasticity represents the ability to dynamically scale resources in and out automatically to match user load.
Elasticity allows systems to allocate more resources during peak times and deallocate them when demand drops, preventing unnecessary costs.

Key Concept

High Availability, Scalability, and Elasticity
Estimated Time:1m 0s
Question 147Question →

A company is migrating its operations to Azure. They deploy virtual machines for a legacy reporting tool, use Azure SQL Database for their transactional database, and adopt Microsoft 365 for corporate email. The IT director wants to clarify the boundaries of the Shared Responsibility Model. Match each administrative task to the correct classification of responsibility under its respective cloud service model.

Click a left item, then click its matching right item

Items

Updating the guest operating system for the legacy reporting tool running on Azure Virtual Machines
Securing the physical hardware and datacenter hosting the transactional database in Azure SQL Database
Managing user identity accounts and access permissions within Microsoft 365

Matches

Show answer & explanation

Answer

Updating the guest operating system on Azure Virtual Machines matches Customer responsibility under IaaS. Securing the physical hardware for Azure SQL Database matches Microsoft responsibility under PaaS. Managing user accounts in Microsoft 365 matches Customer responsibility under SaaS.
The correct pairings align the administrative tasks with the correct responsibility models. Guest OS patching under IaaS belongs to the customer; physical infrastructure security under PaaS belongs to Microsoft; and identity management under SaaS remains the customer's responsibility.

Step-by-Step Solution

1
Identify the cloud service model for each resource.
Azure Virtual Machines is IaaS, Azure SQL Database is PaaS, and Microsoft 365 is SaaS.
Correctly identifying the service model is essential to applying the Shared Responsibility Model rules.
2
Determine who is responsible for the guest operating system in IaaS.
The customer is responsible for guest OS updates.
Under IaaS, the cloud provider only manages physical infrastructure and the hypervisor.
3
Determine who is responsible for the physical host security in PaaS.
Microsoft is responsible for physical datacenter security.
Microsoft always manages physical security across all service models (IaaS, PaaS, and SaaS).
4
Determine who is responsible for identity and access management in SaaS.
The customer is responsible for managing accounts and identities.
Under the Shared Responsibility Model, the customer always retains responsibility for accounts and data, even in SaaS.

Key Concept

Under the Microsoft Shared Responsibility Model, responsibility for security tasks shifts between the customer and Microsoft depending on whether the service is classified as IaaS, PaaS, or SaaS. However, physical security is always Microsoft's responsibility, and accounts, identities, and data are always the customer's responsibility.
Estimated Time:1m 30s
Question 148Question →

A software development company is migrating its testing environments to Azure. These environments are only active for approximately 10 hours per week. The company chooses to utilize a consumption-based pricing model for the Azure Virtual Machines. Which of the following is a key financial characteristic of this model?

Show answer & explanation

Answer: The company is billed only for the specific duration that the virtual machines are running, classifying the cost as an Operational Expenditure (OpEx).

Answer

The company is billed only for the specific duration that the virtual machines are running, classifying the cost as an Operational Expenditure (OpEx).
In a consumption-based model, there are no upfront infrastructure costs. Instead, users pay only for the resources they consume (in this case, the hours the virtual machines are active). These ongoing, usage-based fees are classified as Operational Expenditure (OpEx).

Step-by-Step Solution

1
Analyze the usage pattern and the pricing model chosen.
The testing environments run for a limited time (10 hours per week) and use a consumption-based model.
This helps determine how billing and cost structures are applied to the cloud resources.
2
Differentiate between CapEx and OpEx in the context of consumption-based pricing.
Consumption-based pricing has no upfront costs, is billed based on actual usage, and is categorized as Operational Expenditure (OpEx).
To identify which option correctly describes the financial classification and billing behavior.

Key Concept

Consumption-Based Model (CapEx vs OpEx)
Question 149Question →

A research institute needs to deploy a custom data-processing system that requires a customized Linux kernel configuration and the installation of specialized kernel-level modules. The institute wants to avoid the overhead of procuring, installing, and maintaining physical servers, but must retain full administrative control over the environment.

Which cloud service model must the institute adopt, and which party is responsible for patching the guest operating system?

Show answer & explanation

Answer: Infrastructure as a Service (IaaS), and the customer is responsible for patching the guest operating system.

Answer

Infrastructure as a Service (IaaS), and the customer is responsible for patching the guest operating system.
The correct option is the one stating that Infrastructure as a Service (IaaS) is required and the customer is responsible for patching the guest operating system. Kernel customization and specialized module installations require full administrative access to the operating system, which is only provided by IaaS. In the IaaS shared responsibility model, the customer owns and maintains the guest operating system, which includes applying security patches.

Step-by-Step Solution

1
Analyze the system requirements
The system requires Linux kernel configuration changes and kernel-level modules.
To select the correct cloud service model, we must identify the level of administrative control required over the operating system.
2
Map requirements to cloud service categories
IaaS provides full administrative access to the guest operating system, whereas PaaS and SaaS abstract the operating system layer, preventing kernel modifications.
Only IaaS offers the control needed to configure the kernel and install custom modules.
3
Determine patching responsibility in the selected model
Under the IaaS shared responsibility model, Microsoft manages the physical servers and hypervisor, while the customer is responsible for the guest operating system, including patching.
Applying the shared responsibility matrix identifies who maintains the guest operating system.

Key Concept

Shared responsibility and OS control boundaries in Infrastructure as a Service (IaaS)
Question 150Question →

A financial institution migrates its on-premises transactional database to an Azure SQL Database elastic pool. A security auditor asserts that under the Platform as a Service (PaaS) model, Microsoft assumes full liability and operational responsibility for implementing network isolation, configuring database-level firewall rules, and managing database users, thereby completely eliminating the customer's security administration tasks for these resources. Is this statement true or false?

Show answer & explanation

Answer: False

Answer

False
The statement is false because the shared responsibility model for Platform as a Service (PaaS) dictates that the customer is still responsible for configuring database firewalls and managing database-level users and access permissions, even though Microsoft manages the underlying operating system and hardware.

Step-by-Step Solution

1
Analyze the service model described in the scenario.
The service is Azure SQL Database, which is a Platform as a Service (PaaS) offering.
PaaS services offload infrastructure management but retain shared responsibilities for security and configuration.
2
Evaluate the division of responsibilities for network controls and user management in PaaS.
Under the Azure shared responsibility model, network controls (firewalls, endpoints) are shared, and identity/directory infrastructure is shared, while accounts/identities (database users) and data remain the customer's sole responsibility.
This determines whether the auditor's assertion that Microsoft handles all network firewall configuration and user management is correct.
3
Determine the truth value of the auditor's statement.
The statement claims Microsoft is fully responsible for database firewalls and user management, which is false.
Since the customer must still configure firewall rules and manage database users, the statement is incorrect.

Key Concept

PaaS Shared Responsibility Model
Estimated Time:1m 30s
Question 151Question →

Transitioning a disaster recovery solution from a physical, on-premises secondary datacenter to Azure virtual machines that are kept in a deallocated state until a failover drill or outage occurs shifts the associated compute costs from a Capital Expenditure (CapEx) to an Operational Expenditure (OpEx) consumption-based model.

Show answer & explanation

Answer: True

Answer

The statement is true because migrating a physical secondary disaster recovery datacenter to Azure virtual machines that are deallocated until needed shifts the costs from upfront capital expenditures (CapEx) to a consumption-based operational expenditure (OpEx) model.
On-premises datacenters require upfront hardware purchases (CapEx). By using Azure virtual machines that are deallocated until needed, the organization avoids upfront physical hardware costs and only pays for compute resources when they are active, shifting the cost to an operational expense (OpEx) under a consumption-based model.

Step-by-Step Solution

1
Analyze the on-premises disaster recovery cost structure.
Maintaining a secondary physical datacenter requires purchasing hardware upfront, which is classified as Capital Expenditure (CapEx).
CapEx involves upfront spending on physical infrastructure that is depreciated over time.
2
Analyze the Azure virtual machine disaster recovery cost structure.
Azure virtual machines that are deallocated only incur storage costs and do not incur compute charges until they are started during a drill or outage.
Cloud compute resources are billed under a consumption-based model, which is an Operational Expenditure (OpEx).
3
Compare the change in cost model after migration.
The shift from physical hardware ownership to paying for compute power only when consumed represents a transition from CapEx to OpEx.
Consumption-based billing aligns expenses directly with active resource utilization, a core aspect of OpEx.

Key Concept

Consumption-Based Model (CapEx vs OpEx)
Question 152Question →

A food delivery service experiences unpredictable spikes in customer order volume during severe weather events. The service utilizes a configuration that automatically provisions additional virtual servers during these spikes and decommissions them once the order volume drops. Which cloud concept does this configuration represent?

Show answer & explanation

Answer: Elasticity

Answer

Elasticity
The correct answer is elasticity because the scenario highlights the automatic addition and removal of virtual servers in response to unpredictable traffic spikes. This dynamic adjustment of resource capacity to closely match actual demand is the primary definition of cloud elasticity.

Step-by-Step Solution

1
Analyze the scenario details: the food delivery service experiences temporary, unpredictable spikes in demand and automatically adds and removes virtual servers to handle this fluctuation.
The scenario describes dynamic, automatic resource scaling (both scaling out and scaling in).
Understanding the key operational requirement helps match it to the correct cloud characteristic.
2
Evaluate the definition of the correct cloud concepts.
Elasticity is defined as the ability of a cloud infrastructure to dynamically provision and release resources automatically based on demand, which matches the behavior described.
Differentiating between elasticity, scalability, and high availability ensures the correct selection.

Key Concept

Elasticity allows cloud resources to automatically scale out (add resources) or scale in (remove resources) in response to real-time fluctuations in demand, optimizing performance and cost.
Estimated Time:45s
Question 153Question →

A global supply chain logistics platform is being migrated to Microsoft Azure. The system must satisfy two key requirements:

1. The tracking API must remain available even if a single data center in the primary region experiences a hardware or power failure.
2. The order database must be restorable in a separate geographical region if the primary region suffers a complete, long-term outage.

Which two deployment strategies should the system architect implement to meet these requirements? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Deploy the tracking API across multiple Availability Zones in the primary region.; Configure geo-replication for the order database to an Azure paired region.

Answer

Deploy the tracking API across multiple Availability Zones in the primary region, and configure geo-replication for the order database to an Azure paired region.
To protect against a single data center outage within a region, resources should be deployed across multiple Availability Zones, which provide isolation and reliability. To protect against a regional disaster, data must be replicated to a different geographical region (a paired region) to enable disaster recovery.

Step-by-Step Solution

1
Analyze the first requirement regarding data center level resilience.
Identify that protection against a single data center failure within a region is achieved using Availability Zones, which are physically separate locations within the same region.
This directly maps to the cloud concept of High Availability and Reliability within a regional boundary.
2
Analyze the second requirement regarding regional level disaster recovery.
Identify that recovering from a complete regional outage requires replicating data to a separate geographic region, which is achieved through geo-replication (often to a paired region).
This directly maps to the cloud concept of Disaster Recovery (DR).

Key Concept

Reliability in Azure is achieved through High Availability (using Availability Zones within a region) and Disaster Recovery (using Geo-replication to a paired region).
Estimated Time:2m 0s
Question 154Question →

Is the following statement true or false? Under the Microsoft Azure Shared Responsibility Model, when deploying a database server inside an Azure Virtual Machine (an Infrastructure as a Service (IaaS) deployment), Microsoft is responsible for maintaining the underlying physical hardware and hypervisor, while the customer is responsible for database configuration, database engine patching, and guest operating system updates.

Show answer & explanation

Answer: True

Answer

True
In an Infrastructure as a Service (IaaS) setup, the customer maintains control over the operating system, middleware, and application layers. When running a database on a VM, the customer must manage all aspects of the database installation and the guest OS itself, while Microsoft only manages the physical hosts, network, storage hardware, and virtualization hypervisor.

Step-by-Step Solution

1
Analyze the service model context.
The scenario describes deploying a database inside an Azure Virtual Machine, which represents an Infrastructure as a Service (IaaS) model.
Identifying the correct service model is essential for determining boundaries within the Shared Responsibility Model.
2
Evaluate the infrastructure provider's responsibilities under IaaS.
Under IaaS, Microsoft manages the physical servers, networking, storage hardware, and the hypervisor layer.
The cloud provider always retains responsibility for the physical infrastructure and virtualization layer in IaaS.
3
Evaluate the customer's responsibilities under IaaS.
The customer is responsible for the guest operating system, applications, middleware, and data. This includes patching the guest OS, installing the database engine, and managing database updates.
In an IaaS VM deployment, the customer maintains administrative access and responsibility for all software running inside the virtual machine.
4
Confirm the alignment of the statement with these rules.
The statement correctly states that Microsoft manages physical hardware/hypervisors and the customer manages database configuration, database patching, and guest OS updates.
Comparing the statement's breakdown of responsibilities to the IaaS model confirms the statement is true.

Key Concept

Shared responsibility model in Infrastructure as a Service (IaaS)
Question 155Question →

A company plans to migrate its customer support team to a cloud-based customer ticketing solution under a Software as a Service (SaaS) model. Which of the following responsibilities will remain with the customer after the migration? (Select two.)

Select all that apply

Show answer & explanation

Answer: Managing the endpoint devices used to access the ticketing application; Securing the data and files uploaded to the ticketing application

Answer

Managing the endpoint devices used to access the ticketing application, and securing the data and files uploaded to the ticketing application
In a Software as a Service (SaaS) model, the customer is always responsible for managing their own data (such as securing the data and files uploaded to the ticketing system) and managing their own endpoint devices (such as managing the endpoint devices used to access the ticketing application). The SaaS provider manages the application, operating systems, and infrastructure.

Step-by-Step Solution

1
Identify the cloud service model in the scenario.
The ticketing system is deployed as a Software as a Service (SaaS) solution.
This establishes the shared responsibility model boundaries for the question.
2
Determine customer responsibilities in SaaS.
In a SaaS model, the customer is responsible for information and data, devices (mobile and PCs), and accounts and identities.
This allows filtering of the choices to identify the options that represent data management and device management.

Key Concept

Software as a Service (SaaS) customer responsibilities
Question 156Question →

A logistics company is setting up its development environment in Microsoft Azure. The administrator creates a resource group named dev-logistics-rg in the Central US region. A developer needs to deploy a new storage account in the East US region to store transit logs. Which of the following describes the correct configuration for this deployment?

Show answer & explanation

Answer: Deploy the storage account in the East US region and associate it with the dev-logistics-rg resource group, as resources can reside in a different region than their resource group.

Answer

Deploy the storage account in the East US region and associate it with the dev-logistics-rg resource group, as resources can reside in a different region than their resource group.
The correct option is correct because Azure resource groups are logical containers designed to group related resources for lifecycle management. The location of the resource group specifies where its metadata is stored, but the resources placed within that group can be deployed to any supported Azure region based on application requirements.

Step-by-Step Solution

1
Determine if Azure resource groups restrict the deployment region of the resources they contain.
Identify that a resource group stores metadata in its specified region, but the actual resources inside the group can be deployed to any supported Azure region.
This establishes the regional independence between a resource and its containing resource group.
2
Verify if resource groups can be nested to manage different regions.
Confirm that Azure does not support resource group nesting.
This rules out solutions that suggest creating a resource group inside another resource group.

Key Concept

Resource Group Region Independence
Estimated Time:1m 0s
Question 157Question →

A company is implementing a new cloud-based Human Resources (HR) portal for employee self-service. The company subscribes to a fully functional cloud solution where the cloud provider hosts, maintains, and updates the application software, operating systems, and underlying hardware. The company is evaluating the shared responsibility model for this deployment.

Which of the following responsibilities is retained by the company under this cloud service model?

Show answer & explanation

Answer: Managing user identities, device access permissions, and the information stored within the application

Answer

Managing user identities, device access permissions, and the information stored within the application
Under the shared responsibility model for Software as a Service (SaaS), the customer always retains sole responsibility for managing and securing their own data, configuring user identities/accounts, and managing device access. The cloud provider handles all other layers, including physical infrastructure, virtual machines, operating systems, and application software.

Step-by-Step Solution

1
Identify the cloud service model described in the scenario.
The scenario describes a subscription to a fully functional cloud application where the provider manages all underlying layers (hardware, OS, middleware, application code). This corresponds to Software as a Service (SaaS).
Determining the correct service model is essential to applying the correct shared responsibility framework.
2
Apply the shared responsibility model rules for Software as a Service (SaaS).
In SaaS, the cloud provider manages the physical security, host hardware, hypervisor, operating system, network controls, and application software. The customer remains responsible only for information/data, devices (mobile and PC), and accounts/identities.
Mapping responsibilities ensures correct identification of customer obligations.
3
Evaluate the choices to find which responsibility belongs to the customer under SaaS.
Managing user identities, device access permissions, and data is a customer responsibility. Other choices involve managing middleware, OS patching, or CapEx, which are incorrect.
Verifying the correct responsibility leads to the final selection.

Key Concept

Shared responsibility model in Software as a Service (SaaS)
Estimated Time:1m 30s
Question 158Question →

Determine if the following statement is true or false: In a public cloud model, the underlying physical hardware is shared among multiple organizations, while each organization's resources are isolated from other tenants.

Show answer & explanation

Answer: True

Answer

True
In a public cloud, physical infrastructure is shared (multi-tenant) but logically isolated via virtualization.

Step-by-Step Solution

1
Identify the cloud model described in the statement.
The statement describes a public cloud model.
To establish the baseline rules of the deployment model.
2
Analyze resource sharing and isolation characteristics.
Public clouds use shared physical infrastructure with logical isolation between tenants.
To determine if the statement's description of shared hardware and isolated resources is correct.

Key Concept

Public Cloud Multi-Tenancy
Question 159Question →

A company deploys several Azure Virtual Machines to host a custom database application. Which two of the following management tasks are the responsibility of Microsoft in this Infrastructure as a Service (IaaS) deployment? (Select two)

Select all that apply

Show answer & explanation

Answer: Maintaining the physical hardware and virtualization hypervisors hosting the virtual machines; Securing physical access to the datacenters where the virtual machines are located

Answer

The correct responsibilities of Microsoft are maintaining the physical hardware and virtualization hypervisors hosting the virtual machines, and securing physical access to the datacenters where the virtual machines are located.
In an Infrastructure as a Service (IaaS) deployment, Microsoft is responsible for managing the underlying physical infrastructure, which includes the physical servers, networking hardware, and virtualization hypervisors, as well as maintaining physical security at the datacenters. The customer is responsible for managing everything inside the virtual machine, including the operating system, middleware, databases, and application configuration.

Step-by-Step Solution

1
Identify the cloud service model being used in the scenario.
The scenario specifies Azure Virtual Machines, which belongs to the Infrastructure as a Service (IaaS) category.
Understanding the service model is necessary to determine the boundaries of the shared responsibility model.
2
Differentiate between the responsibilities of the customer and the cloud provider (Microsoft) in an IaaS model.
In IaaS, Microsoft manages the physical infrastructure (hardware, network, datacenter security) and the virtualization layer. The customer is responsible for everything from the guest operating system upward (OS patching, middleware, databases, applications, and data).
This allows for the correct classification of each listed option.

Key Concept

Shared responsibility model in Infrastructure as a Service (IaaS)
Question 160Question →

A medical device manufacturer is designing an IT architecture. The plan is to host the public-facing marketing website on Microsoft Azure to minimize upfront capital costs and scale resources dynamically. However, due to strict regulatory compliance, all patient telemetry data must be stored and processed on dedicated, physical servers owned by the manufacturer inside their own secure facility.

Which cloud model represents this combined deployment strategy?

Show answer & explanation

Answer: Hybrid cloud

Answer

Hybrid cloud
The correct answer is the hybrid cloud. This model allows an organization to combine public cloud resources (such as Microsoft Azure for the marketing website) with private resources (such as dedicated on-premises servers for patient telemetry data), enabling control over sensitive data while benefiting from public cloud scale.

Step-by-Step Solution

1
Analyze the resource requirements and ownership in the scenario.
The website uses Microsoft Azure (shared infrastructure owned by a cloud provider), and the patient telemetry data uses dedicated physical servers owned by the manufacturer.
Identifying the ownership and location of the infrastructure determines the component cloud deployment models involved.
2
Determine the cloud deployment model that combines these infrastructure types.
A model that integrates public cloud services with private on-premises infrastructure is defined as a hybrid cloud.
Matching the combined deployment environment to the definitions of public, private, and hybrid cloud models resolves the correct answer.

Key Concept

Cloud deployment models, specifically the integration of public cloud resources and on-premises private infrastructure.
Estimated Time:1m 0s
PreviousPage 8 / 17Next
Describe Cloud Concepts Practice Questions — Microsoft Azure Fundamentals (AZ-900) — Page 8 | Examkin