Examkin

Soru

Zorluk: ZorAzure Advisor

A financial services firm hosts a critical transactional system on Azure. The system consists of multiple Azure Virtual Machines (IaaS) and an Azure SQL Database (PaaS).

To align with corporate governance policies, the operations team must satisfy the following three requirements:
1. Prevent administrators from deploying any new resources outside the 'East US 2' region.
2. Identify which of the currently running virtual machines are underutilized so they can be shut down or resized to save costs.
3. Prevent the accidental deletion of the production Azure SQL Database by any user, including administrators.

Which combination of Azure services and features should the operations team use to meet these requirements?

  1. A
    Azure Role-Based Access Control (RBAC) to restrict deployment regions, Azure Monitor to identify underutilized virtual machines, and Azure Policy to prevent database deletion.
  2. B
    Azure Policy to restrict deployment regions, Azure Monitor to identify underutilized virtual machines, and Azure Role-Based Access Control (RBAC) to prevent database deletion.
  3. Azure Policy to restrict deployment regions, Azure Advisor to identify underutilized virtual machines, and resource locks to prevent database deletion.Cevap
  4. D
    Azure Resource Locks to restrict deployment regions, Azure Advisor to identify underutilized virtual machines, and Azure Policy to prevent database deletion.

Cevap

The correct combination requires using Azure Policy to restrict deployment regions, Azure Advisor to identify underutilized virtual machines, and resource locks to prevent database deletion.
The correct option matches the requirements to their respective Azure services: Azure Policy enforces deployment compliance (e.g., allowed locations), Azure Advisor identifies cost-optimization opportunities such as underutilized virtual machines, and resource locks (CanNotDelete) prevent the database from being deleted.

Adım Adım Çözüm

1
Analyze the first requirement: preventing resource deployment outside the 'East US 2' region.
Identify that Azure Policy is the correct tool because it enforces compliance and configuration rules, such as allowed locations, on resources.
Azure Policy allows organizations to define rules for resource properties, preventing non-compliant resource creation.
2
Analyze the second requirement: identifying underutilized virtual machines to optimize cost.
Identify that Azure Advisor is the correct tool because its Cost recommendation category evaluates resource utilization data and suggests right-sizing or shutting down idle virtual machines.
Azure Advisor provides personalized, actionable best practices across cost, security, reliability, performance, and operational excellence.
3
Analyze the third requirement: preventing accidental deletion of the production database.
Identify that Resource Locks (specifically a CanNotDelete lock) are the correct mechanism to protect critical resources from deletion.
Resource locks apply a restriction that prevents deletion or modification by any user, including resource owners and administrators.

Anahtar Kavram

Azure Management and Governance boundaries including Azure Advisor, Azure Policy, and Resource Locks.
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Azure Advisor

Bu konudan daha fazla soru