Tüm alıştırma soruları

An administrator is configuring diagnostics for an Azure Container Registry named acr1. Diagnostic logs are configured to send repository events to a Log Analytics workspace.

You need to write a Kusto Query Language (KQL) query to count the number of successful image pull operations (where the operation is RepositoryPull and the result is Success) initiated from IP addresses outside of the corporate subnet 192.168.0.0/16 during the last 48 hours. The results must be grouped by the repository name and the caller's IP address.

Which KQL query should you run?

An administrator manages an Azure virtual machine named VM-AppDb01 that runs Windows Server 2022. The virtual machine has Azure Disk Encryption (ADE) enabled, with keys stored in an Azure Key Vault. VM-AppDb01 is backed up to a Recovery Services vault named Vault01.

Following a database corruption event, you need to restore the entire virtual machine to its last known good state. When navigating to the restore options in Vault01, you must select the appropriate recovery configuration.

Which restore option is supported and must be selected to recover the virtual machine?

A company manages document storage in an Azure Storage account named stcorplegal. You need to allow members of a Microsoft Entra ID group named LegalAuditors to view and download blobs in a container named case-files. The auditors will navigate to the container using the Azure portal. The solution must follow the principle of least privilege.

Which two role assignments should you configure?

You have an Azure subscription that contains a Standard storage account named sa-prod-files-01. The storage account contains an SMB file share named corp-shared-docs. You need to configure backup for corp-shared-docs using an existing Recovery Services vault. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have an Azure subscription containing a Log Analytics workspace named Workspace1. Multiple Azure virtual machines in different resource groups send their performance metrics and diagnostic logs to Workspace1. You need to allow a user named User1 to run Kusto Query Language (KQL) queries to analyze the CPU usage of only the virtual machines located in a resource group named RG-Prod. User1 must not be able to view logs for virtual machines in other resource groups. Which configuration should you implement?

An administrator is configuring a monitoring solution for a set of Azure Virtual Machines that send diagnostics to a central Log Analytics workspace. The administrator must meet the following requirements:
1. Ensure that developers can only view diagnostic logs for the specific virtual machines they own (resource-context access), without granting them access to view logs of other resources in the workspace.
2. Write a query to retrieve the most recent CPU utilization percentage (using the `% Processor Time` counter from the `Processor` object) for each virtual machine, returning only the records where this latest CPU utilization value exceeds 80%.

Which of the following configurations and Kusto Query Language (KQL) queries should the administrator implement? (Select TWO.)

An organization's Azure infrastructure is organized under a management group named MG-Enterprise, which contains an Azure subscription named Sub-Operations. Within this subscription, there is a resource group named RG-AppPlatform containing virtual machines, storage accounts, and web apps. You need to assign the appropriate roles to various users and identities to meet their administrative requirements. Match each user or identity requirement to the most appropriate Azure RBAC or Microsoft Entra ID role to enforce the principle of least privilege.

An administrator is configuring Azure App Service plans for two new applications:

* AppA is a marketing website that requires custom domain support, custom SSL bindings, and manual scaling up to $3$ instances.
* AppB is a business-critical API that requires regional virtual network (VNet) integration, $15$ deployment slots for testing environments, and auto-scaling up to $25$ instances.

You need to select the most cost-effective App Service plan pricing tier for each application. Which two pricing tiers should you select?

An administrator manages a Microsoft Entra ID tenant that contains two Azure subscriptions named `sub-dev` and `sub-prod`. A virtual machine named `vm-backend-01` resides in `sub-dev` and is backed up to a Recovery Services vault. The administrator needs to recover `vm-backend-01` and place the restored resources directly into `sub-prod`.

Which of the following actions is a prerequisite that must be completed on the target subscription before performing this recovery operation?

Your company has an Azure subscription containing a virtual network named `vnet-finance-prod` with an address space of $10.100.0.0/22$. You plan to deploy the following resources:

- A pool of virtual machines in a subnet named `snet-application` that requires at least $27$ usable IP addresses.
- An Azure Bastion host to secure access to the virtual machines.
- A Virtual Network Gateway to enable hybrid connectivity with the on-premises network.

You need to configure the subnets for these resources while minimizing the address space allocated to each subnet.

Which two subnets should you create? (Select two.)

An Azure subscription contains a virtual network named `VNet1` ($10.10.0.0/16$). `VNet1` contains three subnets: `Subnet-Web` ($10.10.1.0/24$), `Subnet-App` ($10.10.2.0/24$), and `Subnet-DMZ` ($10.10.0.0/24$). A Network Virtual Appliance (NVA) named `NVA1` is deployed in `Subnet-DMZ` and has the IP address $10.10.0.4$. You need to ensure that all traffic from `Subnet-Web` destined for `Subnet-App` is routed through `NVA1`. Which two actions should you perform? (Select two.)

An administrator needs to back up a virtual machine named AppServer-West-VM that is deployed in the West US region. A Recovery Services Vault named Vault-East-RSV is located in the East US region. Which configuration should the administrator use to back up AppServer-West-VM?

You need to recover individual application configuration files from a backup of an Azure Linux virtual machine named `VM-AppLinux`. You are using a local Windows 11 client machine, and a healthy Linux virtual machine named `VM-Helper` is running in the same virtual network as `VM-AppLinux`.

Which sequence of actions should you perform to complete the item-level recovery? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your company has an Azure subscription containing multiple resource groups. You need to ensure that the security team receives an SMS notification whenever a resource group is deleted. You have configured an activity log alert rule for this event. What should you configure next to specify the SMS recipient details and trigger the notification?

Your company has a strict security policy requiring Microsoft Entra ID authorization for all data plane operations on Azure Storage accounts. The use of Storage Account Access Keys and Shared Access Signatures (SAS) is disabled.

An administrator needs to upload files from an on-premises workstation to a blob container named `archive` in a storage account named `stdatafiles2026`. The storage account's network routing is configured to restrict access to selected networks.

Which of the following configurations are required to ensure the administrator can upload the files using AzCopy? (Select three.)

A company requires a lightweight compute solution to run a batch utility in Azure. The utility connects to a database, processes transaction records, and then exits. If the utility encounters a database connection error during its run, it must automatically attempt to rerun. However, if the process finishes successfully, it must terminate and remain stopped until the next scheduled run. You also need to protect the database credentials used by the utility from being exposed in plain text in the deployment configuration.

Which two options should you configure for the Azure Container Instances (ACI) deployment? (Select two.)

An administrator is configuring an Azure Application Gateway v2 named `AppGW1` in a dedicated subnet named `Subnet-GW` within `VNet-Hub`. To comply with security policies, the administrator associates a Network Security Group (NSG) named `NSG-GW` to `Subnet-GW`. The NSG contains a custom inbound rule (Rule1) with a priority of 300 that denies all inbound traffic from any source. To allow client HTTPS traffic, the administrator creates another inbound rule (Rule2) with a priority of 200 that allows traffic from the `Internet` service tag to destination port 443. After applying these rules, the backend health status of all backend pools shows as 'Unknown' and client communication fails. Which configuration change should the administrator implement on `NSG-GW` to restore backend health monitoring and allow the Application Gateway to function?

An administrator manages a premium storage account named `saengshared` in the West US 2 region. The storage account hosts an SMB file share named `projectshares`. To protect the file share, a Recovery Services vault named `rsv-westus2-01` is deployed in the same region. The firewalls and virtual networks settings on `saengshared` are configured to restrict access to selected networks only. When configuring backup for the file share, the operation fails because the vault cannot access the storage account. What must be configured on `saengshared` to resolve the issue?

An organization has an Azure subscription containing a resource group named rg-resources. The resource group contains a storage account named stcontentprod, which has a blob container named assets. A user named Alex needs to view and download blobs in the assets container using the Azure portal. Alex is already assigned the Reader role for the rg-resources resource group. When Alex attempts to view the blobs in the container, the Azure portal displays an authorization error. You need to resolve the access issue while following the principle of least privilege. Which action should you perform?

An administrator needs to monitor a set of Azure virtual machines that report to a Log Analytics workspace. The administrator must identify virtual machines that have not sent a heartbeat in the last $15$ minutes, but were active and sent a heartbeat within the last $24$ hours.

Which of the following Kusto Query Language (KQL) queries should the administrator run? (Select two.)