Tüm alıştırma soruları

An administrator is planning to deploy a new Azure Kubernetes Service (AKS) cluster named `aks-finance`. The cluster must integrate with an on-premises network, and pods must be directly reachable from the on-premises network using their own IP addresses from the Azure Virtual Network (VNet) without any network address translation (NAT). The network security team has allocated a small subnet with a $/24$ prefix for the cluster nodes, but wants to ensure that pod deployments do not quickly exhaust the IP addresses in this node subnet.

Which two configuration options should the administrator select to meet these requirements? (Select two.)

You have an Azure subscription that contains an Azure Storage account named storage1. You need to configure a Log Search alert rule that triggers when there are more than 100 failed access attempts within 5 minutes. When the alert triggers, you must meet the following requirements:
1. Automatically disable public network access on storage1 to mitigate the security risk.
2. Send an email notification to the Security Operations team.

Which two actions should you configure in the Azure Monitor Action Group associated with the alert rule? (Select two.)

You are deploying a new Azure Kubernetes Service (AKS) cluster named `aks-finance` into an existing Azure virtual network. The deployment must meet the following requirements:

* The Kubernetes pods must receive IP addresses directly from a dedicated subnet in the virtual network, distinct from the subnet used by the cluster nodes.
* User application workloads must not run on the same virtual machines as the cluster's system pods.

Which two actions should you perform? (Select two.)

Aetheris Logistics is planning the deployment of a new line-of-business application in the East US 2 region. The architecture consists of three web tier virtual machines (VM-Web-Prod1, VM-Web-Prod2, and VM-Web-Prod3) and two database tier virtual machines (VM-DB-Prod1 and VM-DB-Prod2).

The deployment must satisfy the following requirements:
- The web tier must achieve a service level agreement (SLA) of at least $99.99\%$ virtual machine uptime and be resilient against datacenter-wide failures.
- The database tier must be protected against localized hardware failures, such as server rack or power outages, within a single datacenter. The database tier does not require zone-wide redundancy.
- All high availability configurations must be applied during the initial deployment phase.

Which two configuration actions should you perform? (Select two.)

You manage the network security for an Azure environment. You have a storage account named `corpdata2026` with its firewall configured to deny all public network traffic by default. The environment contains a virtual network named `VNet1` with two subnets: `SubnetA` and `SubnetB`. You must implement a solution that satisfies the following requirements:
- Virtual machines in `SubnetA` must be able to securely transfer data to `corpdata2026` over its public endpoint without routing traffic over the public internet.
- Virtual machines in `SubnetB` must not have any network access to `corpdata2026`.
- The Azure Backup service must be able to perform scheduled backups of the file shares in `corpdata2026`.
- No private endpoints can be deployed due to IP address space constraints in `VNet1`.

Which two configuration actions should you perform to meet these requirements?

Your organization uses the following Azure resource hierarchy:
* A Management Group named Corp-MG.
* Two subscriptions under Corp-MG named Prod-Sub and Dev-Sub.
* Prod-Sub contains two resource groups: RG-Core and RG-Data.
* Dev-Sub contains a resource group named RG-Dev.

The following Azure Policy configurations are in place:

You need to identify which resource deployment attempts will succeed.

Which two deployment attempts will complete successfully? (Select two.)

An organization has the following Azure resource hierarchy:
* Tenant Root Group (Management Group)
* MG-Platform (Management Group)
* Sub-Connectivity (Subscription)
* RG-HubNet (Resource Group)
* MG-Apps (Management Group)
* Sub-App01 (Subscription)
* RG-AppLogic (Resource Group)
* RG-AppData (Resource Group)

You have a security group named DatabaseOps-SG. The members of this group must be able to perform the following tasks:
* Manage Azure SQL servers and databases within RG-AppData.
* Read and write database backup blobs directly in a storage account located in RG-AppData.
* View virtual networks and subnet configurations within RG-HubNet to assist with database private endpoint configuration.

The solution must follow the principle of least privilege.

Which three role assignments should you configure? (Select three).

An administrator is configuring secure access to a blob container named compliance-records in an Azure Storage account named auditstoreprod. An external auditing application requires read-only access to the blobs. Security policy dictates that storage account access keys must not be used, and access must be authenticated using Microsoft Entra ID credentials. The connection must be restricted to the IP range 198.51.100.0/24 and must use HTTPS only. Which two configuration actions should you perform to meet these requirements?

An administrator is configuring autoscaling for an Azure Virtual Machine Scale Set named `vmss-api`. The scale set must meet the following requirements:
- Maintain a baseline of $2$ instances under normal conditions.
- Scale out by $2$ instances if CPU usage exceeds $80\%$ for $10$ minutes.
- Maintain a fixed count of $6$ instances every weekday (Monday through Friday) between $09:00$ and $17:00$ to handle business traffic.

Which two configurations should the administrator implement to meet these requirements? (Select two.)

You manage an Azure environment containing a virtual network named VNet1. VNet1 has two subnets: SubnetA and SubnetB. SubnetA has the Microsoft.Storage service endpoint enabled. You have an Azure Storage Account named storage1. You need to implement a network security configuration for storage1 to meet the following requirements:

1. Virtual machines in SubnetA must be able to access storage1 over the public endpoint of the storage account using the Azure backbone network.
2. Virtual machines in SubnetB must be able to access storage1 using a private IP address within VNet1.
3. Azure Backup must be able to back up the data stored in storage1 successfully.

Which three actions should you perform? (Choose three.)

Apex Genomics plans to deploy a new critical genomic sequencing analysis portal. The application tier will consist of four virtual machines. The design must meet the following requirements:
- Protect the application tier from datacenter-level failures.
- Provide a $99.99\%$ SLA for the virtual machines.
- Support load balancing using an Azure Load Balancer.

You need to configure the virtual machines for high availability.

Which two configurations should you implement? (Select two.)

An administrator is managing a standard general-purpose v2 storage account named storage1. The storage account currently uses Locally Redundant Storage (LRS) and contains a blob container named archive.

The administrator needs to meet the following requirements:
1. Ensure the storage account is replicated to a secondary region to protect against regional outages.
2. Automatically move blobs in the archive container to the Archive storage tier if they have not been modified for more than 90 days.

Which two actions should the administrator perform? (Select TWO.)

You are planning the replication configuration for a new Azure Storage account. The storage account must meet the following requirements:

* Provide protection against a datacenter failure within the primary region by replicating data across three availability zones.
* Provide protection against a regional disaster by replicating data to a secondary region.

Which two replication options should you select to meet these requirements?

An administrator is configuring a General Purpose v2 (GPv2) storage account named corpstore01 in the East US region. The storage account currently uses Locally Redundant Storage (LRS) and hosts critical application logs. The administrator must meet the following requirements:

- Replicate the storage account to the West US region to protect against regional outages while allowing read access to the replicated data in West US under normal operations.
- Automatically move block blobs inside the container named telemetry that begin with the prefix daily/ to the Archive storage tier if they have not been modified for more than 90 days.
- Ensure that the storage account is prepared for customer-managed failover, and understand the redundancy state of the account after a failover is executed.

Which of the following configurations and statements are correct for this scenario? (Select TWO.)

You manage two General Purpose v2 (GPv2) storage accounts in the East US region:

* `storage1`: Configured with Locally Redundant Storage (LRS).
* `storage2`: Configured with Zone-Redundant Storage (ZRS).

You need to update the replication configuration of both storage accounts to meet the following requirements:

* Replicate all data to a secondary region (West US).
* Maintain zone redundancy in the primary region.
* Ensure there is no downtime or data loss during the configuration change.
* Avoid manual data replication.

Which two actions should you perform?

An organization is designing its Azure Management Group hierarchy to manage multiple subscriptions. Which of the following statements regarding the structure and inheritance behavior of Azure Management Groups are correct? (Select TWO.)

Your organization has $15\text{ TB}$ of archival data stored on-premises that needs to be transferred to Azure. You decide to employ the Azure Import/Export service. Before shipping the physical hard drives to the Azure datacenter, you must prepare them on-premises.

Which of the following requirements must be met during the drive preparation phase? (Select TWO)

Your company has a requirement to copy on-premises archival data to Microsoft Azure by shipping physical hard drives. You decide to use the Azure Import/Export service. Which two Azure storage services can you specify as direct destinations for the import job? (Select two.)

An organization has the following Azure resource hierarchy and configuration:

* A management group named `MG-Finance`.
* An Azure subscription named `Sub-FinanceProd` that is associated with `MG-Finance`.
* A resource group named `RG-Payments` within `Sub-FinanceProd`.
* A virtual machine named `vm-pay1` and a storage account named `sa-paylogs` within `RG-Payments`.

The following role assignments are configured:

* `User1` is assigned the Microsoft Entra ID `Global Administrator` role. The directory setting Access management for Azure resources is set to No.
* `User2` is assigned the `Reader` role at the `MG-Finance` management group level, and the `Contributor` role at the `RG-Payments` resource group level.
* `User3` is assigned the `User Access Administrator` role at the `Sub-FinanceProd` subscription level.

Which TWO actions can be performed based on the configured permissions? (Select two.)

Your company has an Azure environment with a subscription named Sub1. Inside Sub1, there is a resource group named RG-Dev that contains several virtual machines.

You need to grant a user named User1 the permission to restart the virtual machines and to delegate role assignments to other team members within RG-Dev. The solution must use the principle of least privilege.

Which two of the following role assignments should you configure? (Select two.)