Tüm alıştırma soruları

An administrator manages an Azure subscription named sub-engineering-prod. The subscription contains a resource group named rg-core-databases. To control costs, the administrator configures a monthly budget at the subscription scope. The budget includes a threshold alert set to trigger when actual spending reaches 90% of the budgeted amount. During the billing cycle, the spending exceeds the threshold, but no email notifications are sent to the administration team. You need to identify the reason why the notifications were not sent. Which of the following is the most likely cause of this issue?

You have an Azure subscription that contains a virtual machine named VM1 and a Basic Load Balancer named LB1. VM1 is currently associated with the backend pool of LB1. You need to assign a public IP address directly to the primary network interface (NIC) of VM1 to allow direct external access for management. Which configuration should you select for the new public IP address?

You are configuring two new Azure Web Apps that have the following requirements:

* App1 requires a custom domain name and SSL bindings, but only needs manual scaling.
* App2 requires deployment slots for staging environments.

You need to select the most cost-effective App Service plan pricing tier for each web app.

Which two pricing tiers should you select?

You manage an Azure environment that contains a virtual network named `VNet1` ($10.200.0.0/16$). `VNet1` contains three subnets:
* `Subnet-Web` ($10.200.1.0/24$)
* `Subnet-App` ($10.200.2.0/24$)
* `Subnet-Secure` ($10.200.3.0/24$)

An Azure ExpressRoute gateway is connected to `VNet1` and propagates BGP routes from an on-premises network ($192.168.10.0/24$) to all subnets.

You deploy a network virtual appliance (NVA) in `Subnet-Secure` that has the private IP address of $10.200.3.4$.

You create a custom route table named `RT1` and associate it with `Subnet-Web`. `RT1` has a single user-defined route for $0.0.0.0/0$ with the next hop set to the NVA at $10.200.3.4$.

You have the following routing requirements for traffic originating from `Subnet-Web`:
* All traffic destined for the internet must be routed through the NVA.
* All traffic destined for `Subnet-App` must route directly, bypassing the NVA.
* All traffic destined for the on-premises network ($192.168.10.0/24$) must be routed through the NVA.

What should you do on `RT1` to meet these requirements?

An organization has a Microsoft Entra ID tenant. You create an Administrative Unit named Operations-AU, then add all user accounts for the operations department and a security group named Operations-Group to Operations-AU. You assign a user named Admin1 the User Administrator role scoped to Operations-AU. Admin1 needs to assign Microsoft 365 E3 licenses to all operations department users. Admin1 attempts to assign the licenses to Operations-Group, but the operation fails due to insufficient permissions. Which action should Admin1 take to successfully assign the licenses to the operations department users?

You have an Azure Storage account named stcopy104 that has its firewall configured to 'Enabled from selected virtual networks and IP addresses'. An administrator named Admin1 is assigned the Storage Blob Data Contributor role for stcopy104. From an on-premises virtual machine, Admin1 runs the 'azcopy login' command and authenticates successfully using Microsoft Entra ID. Admin1 then attempts to upload files to a blob container in stcopy104 by running 'azcopy copy', but the command fails with an HTTP 403 (Authorization Failure) error. Which configuration change is required to resolve this issue?

Your company has an Azure subscription containing a resource group named `RG-Operations` and a virtual network named `VNet-Core` with an address space of $172.16.0.0/12$. You need to create a new subnet named `Subnet-App` to deploy 28 virtual machines that require individual private IP addresses. What is the smallest subnet size (CIDR prefix) you can configure for `Subnet-App` to support these virtual machines?

You are planning the deployment of Azure File Sync. You have an on-premises Windows Server 2022 named FS01 and an Azure Storage account named storage1. The storage1 account contains an Azure file share named share1.

For security reasons, the firewall on storage1 is enabled and configured to allow access only from selected virtual networks and IP addresses.

You need to configure the environment to allow FS01 to synchronize files with share1.

Which of the following actions can you perform to allow FS01 to connect to storage1? (Select two.)

An administrator is configuring a custom domain named portal.contoso.com for an Azure App Service web app named app-portal-prod. To secure the backend databases, the administrator configures a Private Endpoint for the web app and disables public network access. The administrator needs to secure the custom domain portal.contoso.com using a TLS/SSL certificate. The certificate must support automatic renewal to minimize administrative overhead. Which configuration should the administrator implement to secure the custom domain while meeting the security and renewal requirements?

Vanguard Systems is deploying a critical database workload in the East Asia region. You need to configure four virtual machines (VMs) to host the application. The deployment must meet the following requirements:
- Guarantee a virtual machine uptime SLA of $99.99\%$.
- Protect the application from datacenter-wide power or cooling failures.
- Distribute incoming traffic across the virtual machines.

Which of the following actions should you perform to meet the requirements? (Select two.)

An administrator deploys an e-commerce application to an Azure App Service web app named `app-checkout-prod` that runs on a Standard S1 App Service plan. The App Service plan is configured to run on 5 active instances. The application stores shopping cart data in-memory within each instance. During initial user testing, testers notice that their active shopping carts are periodically lost and reset to empty as they navigate between different pages of the website. Which setting under the General settings configuration of the web app must the administrator enable to resolve this issue?

You deploy a containerized web API to Azure Container Instances (ACI). The API must run continuously to process incoming client requests. Which restart policy should you configure for the container instance?

An administrator manages a Windows web app named App1 that runs on an Azure App Service plan named ASP-Prod. Currently, ASP-Prod is configured on the Basic (B1) pricing tier.

You need to configure the hosting environment and backup solution to meet the following requirements:
* Enable autoscale to automatically scale the application up to 15 instances during high-traffic events.
* Support up to 6 deployment slots for staging, testing, and pre-production builds.
* Configure daily automated backups of App1 to an Azure storage account named store1.
* Secure traffic to store1 by enabling its firewall to restrict access to selected networks only.

Which TWO actions should you perform to meet these requirements while minimizing costs?

An administrator manages an Azure environment that contains a management group named MG-Engineering and a subscription named Sub-Dev-01. Sub-Dev-01 contains a resource group named rg-shared-testing. Inside rg-shared-testing, you have a storage account named storedata99 and five virtual machines used for daily testing. You need to configure the environment to meet the following requirements:
1. Automatically deallocate the virtual machines when the monthly cost of Sub-Dev-01 exceeds 100% of its budgeted limit.
2. Prevent users from deleting storedata99, while allowing them to create, modify, and delete the virtual machines.
Which two actions should you perform?

An administrator is deploying a web application to Azure App Service. The application must meet the following requirements:
- Use a custom DNS domain name.
- Scale manually up to three instances.

You need to recommend the most cost-effective App Service plan pricing tier that meets the requirements.

Which App Service plan pricing tier should you select?

You are configuring the deployment settings for an Azure virtual machine named VM1 in the East US region. VM1 will host a database server that has the following requirements:
- High-speed storage capability supporting up to $80,000$ IOPS.
- Zero storage costs for the operating system drive, with minimal write latency.
- Resiliency against datacenter-wide failures within the region.

Which two options should you select when creating VM1? (Select two.)

A team needs to provision a virtual machine named SalesVM in the North Europe region. The virtual machine must remain accessible even if a power outage or natural disaster affects an entire datacenter facility in that region. Furthermore, the virtual machine requires daily automated backups. Which configuration options should be selected to meet these requirements?

An administrator is configuring a virtual machine named VM-Prod1 in the East US region. The virtual machine hosts a web application that requires two separate public IP addresses. VM-Prod1 has a single network interface named NIC-Prod1. You need to configure NIC-Prod1 to support this requirement. Which of the following actions should you perform? Select two.

An organization has an Azure subscription containing a virtual network named `VNet-Prod` ($192.168.0.0/16$) with three subnets:

* `Subnet-A`: $192.168.1.0/24$, delegated to `Microsoft.Web/serverFarms`
* `Subnet-B`: $192.168.2.0/24$, delegated to `Microsoft.Sql/managedInstances`
* `Subnet-C`: $192.168.3.0/24$, which has no subnet delegation

An administrator wants to perform the following deployments:
1. Integrate an Azure App Service Web App with `Subnet-A`.
2. Deploy a new Azure Virtual Machine (`VM-Admin`) into `Subnet-A` to manage the Web App.
3. Deploy an Azure Bastion host into `Subnet-C`.

Based on this scenario, is the statement 'The administrator can successfully complete all three deployments using the existing subnets' true or false?

You are deploying an Azure Virtual Machine named VM-WebProd. You create a Standard SKU public IP address to associate with the network interface of VM-WebProd. Which two characteristics describe this Standard SKU public IP address? (Select two.)