Tüm alıştırma soruları

1186 soru

Soru 201Soru

An administrator with the Owner role can delete an Azure Key Vault named vault-prod, which is located in a resource group that has an active CanNotDelete resource lock, without first removing the lock.

Cevabı ve açıklamayı göster

Cevap: False

Cevap

False
The statement is false because the CanNotDelete lock applied to the resource group is inherited by the Key Vault. The lock must be deleted before any administrator, including an Owner, can delete the Key Vault.

Adım Adım Çözüm

1
Analyze the lock inheritance scope.
The CanNotDelete lock applied to the resource group is inherited by all resources inside it, including the Key Vault named vault-prod.
Azure resource locks flow down the resource hierarchy from subscription to resource group to individual resources.
2
Check the permissions enforced by the lock.
The CanNotDelete lock prevents any user or process from deleting the locked resources.
Locks restrict control plane delete operations.
3
Evaluate the bypass rules for administrative roles.
Even users with the Owner role cannot bypass a resource lock.
Resource locks apply to all users, regardless of their Role-Based Access Control permissions, to prevent accidental deletions.

Anahtar Kavram

Resource locks are inherited by child resources and apply to all users, including Owners, blocking deletion operations.
Soru 202Soru

A healthcare provider needs to replicate backup data from its local data center to Azure Storage. Because the data contains sensitive records, the transmission must be encrypted. To minimize operational costs, the provider wants to leverage their existing office internet connection instead of leasing dedicated telecommunication lines. Which Azure service should be deployed to handle this connection?

Cevabı ve açıklamayı göster

Cevap: Azure VPN Gateway

Cevap

Azure VPN Gateway
Azure VPN Gateway is correct because it sends encrypted traffic between an on-premises location and an Azure Virtual Network over the public internet, leveraging the existing network infrastructure and minimizing costs.

Adım Adım Çözüm

1
Analyze the business and technical constraints of the scenario.
The solution requires encrypted transport over the public internet, using the existing internet connection, and must minimize costs.
This rules out dedicated, private connectivity options like ExpressRoute.
2
Identify the Azure service that provides encrypted connectivity over the public internet.
Azure VPN Gateway establishes a secure Site-to-Site VPN tunnel over the public internet to connect on-premises networks to Azure.
This matches all stated requirements, including using the existing internet connection and reducing costs.

Anahtar Kavram

Azure Virtual Network Gateways and Hybrid Connectivity options
Soru 203Soru

An organization configures an Azure Policy assignment at a management group scope. The policy specifies that only virtual machines of the 'Standard_D2s_v3' size can be deployed, using the Deny effect. The subscription governed by this management group already contains several running virtual machines of the 'Standard_F4s' size. A developer who holds the Owner role for the subscription attempts to deploy a new virtual machine of the 'Standard_F4s' size.

Which of the following describes the status of the existing virtual machines and the outcome of the developer's deployment attempt?

Cevabı ve açıklamayı göster

Cevap: The existing virtual machines continue to run but are marked as non-compliant, while the developer's attempt to deploy the new virtual machine is blocked.

Cevap

The correct answer is the option stating that existing virtual machines continue to run but are marked as non-compliant, while the developer's attempt to deploy the new virtual machine is blocked.
Azure Policy evaluations do not retroactively alter, shut down, or delete existing resources that are already deployed when a new policy is assigned. Instead, these existing resources are evaluated and reported as non-compliant in the compliance dashboard. For new resources, the 'Deny' policy effect actively blocks deployment requests, even if the user initiating the deployment has high-level permissions like the Owner role. RBAC controls who has access, while Azure Policy controls resource properties.

Adım Adım Çözüm

1
Identify the impact of Azure Policy on existing resources.
Existing resources that violate a newly assigned policy are not deleted, stopped, or modified; they continue to run but are marked as non-compliant in reports.
Azure Policy evaluations are non-destructive and retroactive changes are not automatically applied to run-time operations for the Deny effect.
2
Identify the impact of Azure Policy on new resource deployments.
The 'Deny' policy effect blocks the creation or update of any resource that does not match the policy criteria.
The Deny effect prevents deployment requests at the resource provider evaluation stage before resources are provisioned.
3
Determine if RBAC roles can bypass the policy.
The deployment is blocked regardless of the user holding the Owner role.
Azure RBAC determines who can perform actions (authorization), whereas Azure Policy defines resource properties that must be met. RBAC permissions do not override Azure Policy rules.

Anahtar Kavram

Azure Policy evaluation behavior for existing resources versus new deployments, and its relationship with Azure RBAC.
Tahmini Süre:2m 0s
Soru 204Soru

An administrator manages a fleet of virtual machines and Azure SQL databases in the East US region. The administrator needs to configure notifications and view status reports for two specific scenarios:

1. When Microsoft schedules a host infrastructure upgrade that will temporarily impact the virtual machines in East US.
2. When a specific virtual machine instance becomes unavailable due to an unexpected hardware failure on the physical host.

Which of the following Azure features should the administrator use to address these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Service Health to track and configure alerts for the upcoming host infrastructure upgrades; Azure Resource Health to view the status and configure alerts for the specific virtual machine hardware failures

Cevap

The administrator should use Azure Service Health to track and configure alerts for planned host upgrades, and Azure Resource Health to monitor and receive alerts for individual virtual machine failures.
The correct options are the ones referring to Azure Service Health and Azure Resource Health. Azure Service Health is correct because it informs you about planned maintenance (such as scheduled host upgrades) affecting your subscription's resources. Azure Resource Health is correct because it provides diagnostics and alerting for individual resource instances when they fail due to platform-level issues (like physical host hardware failure).

Adım Adım Çözüm

1
Analyze the first requirement: tracking and alerting on scheduled host infrastructure upgrades.
Identify that scheduled maintenance affecting subscription resources is managed by Azure Service Health, which provides notifications and alerts about planned maintenance.
Azure Service Health offers personalized tracking for planned maintenance events that impact your specific services and regions.
2
Analyze the second requirement: monitoring and alerting on specific virtual machine failures due to physical host issues.
Identify that diagnostic info and status alerts for specific, individual resource instances (like a single VM going offline) are handled by Azure Resource Health.
Azure Resource Health monitors individual resources to check if they are running as expected and helps diagnose platform-level failures affecting them.
3
Evaluate the distractors against the requirements.
Exclude Azure Monitor logs, Azure Advisor, and Azure Status because they do not match the correct scope of platform service health or resource-specific diagnostics.
Azure Monitor tracks resource telemetry, Azure Advisor provides optimization recommendations, and Azure Status is a global public dashboard.

Anahtar Kavram

Distinguishing between the scopes of Azure Service Health (for subscription/service wide planned maintenance and service issues) and Azure Resource Health (for individual resource status and platform-induced failures), and separating them from general monitoring tools like Azure Monitor.
Soru 205Soru

An enterprise organization is preparing a business case for migrating its legacy on-premises datacenter to Microsoft Azure. The Chief Financial Officer (CFO) requires a comparative financial analysis over a three-year period. The analysis must evaluate on-premises capital expenses (CapEx)—such as physical server chassis, storage arrays, network switches, and virtualization licensing—against the projected operational expenses (OpEx) of running equivalent workloads on Azure infrastructure, including the cost offsets from reduced power, cooling, real estate, and administrative staff labor. Which tool should the organization use to generate this comparative cost analysis?

Cevabı ve açıklamayı göster

Cevap: Total Cost of Ownership (TCO) Calculator

Cevap

Total Cost of Ownership (TCO) Calculator
The Total Cost of Ownership (TCO) Calculator is specifically designed to help organizations compare the cost of running their existing on-premises infrastructure against the cost of hosting equivalent workloads in Azure. It allows users to enter details about their physical server hardware, virtualization software, storage networks, labor, and datacenter utility costs (power and cooling) to produce a detailed comparative report showing estimated savings over a defined multi-year period.

Adım Adım Çözüm

1
Analyze the business scenario to determine the core objective of the cost estimation.
The goal is to compare current on-premises capital and operational costs (servers, storage, power, labor) against cloud hosting costs to show savings over three years.
This separates pre-migration comparative analysis from post-migration optimization.
2
Compare the specific functions of the Pricing Calculator and the TCO Calculator.
The Pricing Calculator estimates cloud costs for a net-new deployment. The TCO Calculator incorporates on-premises assumptions to model cost comparisons and savings.
This identifies the tool that supports on-premises cost inputs.
3
Select the tool designed for on-premises-to-cloud comparison and savings reporting.
The Total Cost of Ownership (TCO) Calculator is chosen.
Only the TCO Calculator accepts infrastructure parameters such as physical hardware, power, labor, and virtualization licenses to generate a comparative financial report.

Anahtar Kavram

Distinguishing between the Azure Pricing Calculator and the Total Cost of Ownership (TCO) Calculator for pre-migration cost analysis.
Tahmini Süre:2m 0s
Soru 206Soru

An organization has an Azure subscription containing a resource group named 'SecOps-RG'. An administrator needs to configure access permissions for an auditor named User1 to meet the following requirements:
- User1 must be able to view the configuration of all resources across the entire subscription.
- User1 must be able to delegate permissions to other users, but this capability must be restricted only to resources within the 'SecOps-RG' resource group.
- The principle of least privilege must be followed.

Which of the following configuration steps should the administrator perform? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Assign User1 the Reader role at the subscription scope.; Assign User1 the User Access Administrator role at the 'SecOps-RG' resource group scope.

Cevap

Assign User1 the Reader role at the subscription scope, and assign User1 the User Access Administrator role at the 'SecOps-RG' resource group scope.
To satisfy the requirements with the least privilege, User1 needs the Reader role at the subscription scope to view all resources across the entire subscription. To delegate permissions (role assignments) restricted only to the 'SecOps-RG' resource group, the User Access Administrator role must be assigned at the resource group scope. This combination allows reading the entire subscription and managing role assignments specifically within 'SecOps-RG' without giving permissions to delete or modify the actual resources.

Adım Adım Çözüm

1
Analyze the read-only requirement.
User1 needs to view configurations across the entire subscription. The Reader role at the subscription scope grants this access with the least privilege.
The Reader role allows viewing resource configurations but does not allow any modifications.
2
Analyze the access delegation requirement.
User1 must delegate permissions only within 'SecOps-RG'. The User Access Administrator role assigned at the resource group scope grants access-management permissions restricted to that resource group.
Assigning User Access Administrator at the resource group scope allows role assignment (RBAC management) within that boundary while obeying the principle of least privilege, as it does not grant resource-modification rights (unlike the Owner role).

Anahtar Kavram

Azure RBAC Scopes and Built-in Roles
Soru 207Soru

A biotechnology company operates a mix of physical Windows servers in their local laboratories and Linux virtual machines on Amazon Web Services (AWS). The company wants to enforce security compliance guidelines using Azure Policy and view the compliance status of all these servers in a single pane of glass within the Azure portal, without migrating the workloads. Which Azure service should the company use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Azure Arc

Cevap

Azure Arc is the correct service because it projects non-Azure infrastructure into Azure Resource Manager (ARM), allowing governance tools like Azure Policy to be applied directly to on-premises servers and virtual machines running in other cloud providers.
The correct service is Azure Arc. It serves as a management bridge that projects resources outside Azure (such as on-premises virtual or physical servers and virtual machines in AWS) into Azure Resource Manager. Once projected, these resources can be governed, monitored, and secured using native Azure tools like Azure Policy and Microsoft Defender for Cloud.

Adım Adım Çözüm

1
Identify the primary goal of the scenario.
The goal is to apply Azure Policy and view compliance for physical on-premises servers and virtual machines in Amazon Web Services (AWS) without migrating them.
This establishes that we need a management bridge between Azure and non-Azure environments.
2
Evaluate the capabilities of the proposed Azure management tools.
Azure Arc is designed specifically to extend Azure Resource Manager (ARM) capabilities to resources outside Azure (on-premises and multi-cloud).
This allows resources like Windows/Linux servers and Kubernetes clusters running outside of Azure to be managed as if they were native Azure resources.

Anahtar Kavram

Azure Arc enables hybrid and multi-cloud management by projecting external resources into Azure Resource Manager.
Soru 208Soru

An administrator wants to run Azure PowerShell cmdlets locally on a personal laptop running macOS to manage Azure virtual machines. Which action should the administrator take to run these cmdlets?

Cevabı ve açıklamayı göster

Cevap: Install PowerShell and the Az PowerShell module on the macOS laptop.

Cevap

Install PowerShell and the Az PowerShell module on the macOS laptop.
Azure PowerShell is cross-platform. Installing PowerShell (PowerShell Core) and the Az PowerShell module allows the administrator to run Azure PowerShell cmdlets locally on macOS, Windows, and Linux.

Adım Adım Çözüm

1
Determine the administrator's operating system and management tool preference.
The administrator is using macOS and wants to run Azure PowerShell cmdlets locally.
This establishes the environment constraints and the target command-line interface.
2
Recall the compatibility of Azure PowerShell across different operating systems.
Azure PowerShell is cross-platform because it relies on PowerShell Core, which runs on Windows, macOS, and Linux.
To verify if the requested configuration is supported on macOS.
3
Identify the required components to enable Azure PowerShell on macOS.
Installing PowerShell (the cross-platform version of PowerShell) and the Az PowerShell module is required.
To determine the practical action required to run the cmdlets locally.

Anahtar Kavram

Cross-platform support of Azure management tools
Tahmini Süre:45s
Soru 209Soru

An administrator needs to improve the resilience of their cloud application deployments in Azure using Azure Advisor recommendations.

Which of the following actions are categorized under the Reliability recommendation category in Azure Advisor? Select two.

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Enable virtual machine backup to protect applications from data loss; Deploy virtual machines across multiple Availability Zones to ensure high availability

Cevap

The correct recommendations are enabling virtual machine backup and deploying virtual machines across multiple Availability Zones.
The correct recommendations are enabling virtual machine backup and deploying virtual machines across multiple Availability Zones because both recommendations focus on improving application durability, disaster recovery, and high availability, which are the core objectives of the Reliability category in Azure Advisor.

Adım Adım Çözüm

1
Identify the purpose of the Azure Advisor Reliability category.
The Reliability category focuses on improving the continuity and uptime of business-critical applications.
This helps filter recommendations related to backups, redundancy, and disaster recovery.
2
Evaluate each option against the Reliability category and Azure Advisor capabilities.
Virtual machine backup and Availability Zone deployments directly address high availability and disaster recovery. Automatically deleting resources is not a function of Azure Policy or Azure Advisor, and global service outage tracking is a function of Azure Service Health.
To select the correct options based on the tool's classification and functionality.

Anahtar Kavram

Azure Advisor Reliability recommendations focus on service continuity, backups, and redundancy.
Soru 210Soru

An organization wants to obtain personalized best-practice recommendations for reducing cost and improving the security of their deployed Azure resources. Which Azure service should the organization use?

Cevabı ve açıklamayı göster

Cevap: Azure Advisor

Cevap

Azure Advisor
Azure Advisor is designed specifically to analyze deployed resources and provide personalized recommendations across five categories: cost, security, reliability, performance, and operational excellence.

Adım Adım Çözüm

1
Identify the organization's goal.
The organization needs personalized recommendations to optimize costs and security for their active Azure resources.
Understanding the core requirement allows selection of the appropriate Azure management tool.
2
Evaluate the capabilities of the available Azure management tools.
Azure Advisor specifically analyzes usage telemetry to offer personalized best-practice recommendations, whereas Azure Policy enforces compliance, Azure Monitor gathers operational telemetry, and Azure Arc extends management to hybrid environments.
Distinguishing the primary use cases of each management tool identifies the correct solution.

Anahtar Kavram

Azure Advisor provides personalized recommendations to optimize Azure deployments across cost, security, reliability, performance, and operational excellence.
Soru 211Soru

You are migrating several workloads to Microsoft Azure. You need to identify the correct Azure database service for each workload requirement.

Match each workload requirement to the most appropriate Azure database service.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Azure Cosmos DB
Azure SQL Database
Azure SQL Managed Instance

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Azure Cosmos DB matches the globally distributed NoSQL service; Azure SQL Database matches the fully managed relational database for modern cloud applications; Azure SQL Managed Instance matches the relational database with near-total SQL Server instance compatibility.
Azure Cosmos DB is the NoSQL option offering global distribution and API flexibility. Azure SQL Database provides a scalable, single relational database for modern cloud apps. Azure SQL Managed Instance offers instance-level SQL Server features to simplify migration of legacy workloads.

Adım Adım Çözüm

1
Identify the service that supports schema-agnostic data and APIs like MongoDB.
This is Azure Cosmos DB, which is a NoSQL database service.
Cosmos DB is Azure's multi-model NoSQL solution.
2
Identify the service optimized for modern cloud applications requiring a single, highly scalable relational database.
This is Azure SQL Database.
Azure SQL Database is a cloud-native relational service.
3
Identify the service that offers instance-level features like SQL Server Agent for migrating legacy workloads.
This is Azure SQL Managed Instance.
Managed Instance provides instance-scoped compatibility for SQL Server migrations.

Anahtar Kavram

Azure Database Services (Relational, Non-Relational, and Cosmos DB)
Tahmini Süre:1m 30s
Soru 212Soru

An administrator needs to delegate access across multiple Azure resources. Evaluate the following statement: Assigning an Azure Role-Based Access Control (RBAC) role to a user at the management group scope automatically propagates that role assignment down to all subscriptions, resource groups, and resources nested within that management group hierarchy.

Cevabı ve açıklamayı göster

Cevap: True

Cevap

True
Azure RBAC is designed with a hierarchical structure where permissions flow downwards. A role assigned at the management group level will be inherited by all resource scopes nested under it, including subscriptions, resource groups, and resources.

Adım Adım Çözüm

1
Identify the scope where the role is being assigned.
The role assignment is initiated at the management group level, which is a high-level container in the Azure resource hierarchy.
Determining the point of assignment helps evaluate how permissions will propagate.
2
Determine the rules of Azure RBAC permission propagation.
Azure RBAC uses inheritance, meaning permissions applied at a parent scope automatically apply to all child scopes.
Understanding inheritance is necessary to determine if child scopes receive the permissions.
3
Apply the inheritance rules to the target resources.
Since subscriptions, resource groups, and resources are child scopes of a management group, they will all inherit the assigned role.
This confirms that the statement is correct.

Anahtar Kavram

Azure RBAC Scope and Inheritance
Soru 213Soru

An administrator frequently switches between the Bash and PowerShell environments in Azure Cloud Shell to execute scripts. Is the following statement true or false?

Switching the shell environment from Bash to PowerShell within Azure Cloud Shell automatically deletes all files stored in the user's home directory because the two environments mount separate Azure Files shares.

Cevabı ve açıklamayı göster

Cevap: False

Cevap

The statement is false.
The statement is false because Azure Cloud Shell uses a single persistent Azure Files share for a given user profile, preserving the home directory across both Bash and PowerShell environments.

Adım Adım Çözüm

1
Analyze the storage behavior of Azure Cloud Shell.
Cloud Shell requires an Azure Files share to persist files across sessions.
To understand how files are kept between different sessions.
2
Evaluate the impact of switching environments (Bash vs. PowerShell).
Both environments run in separate container instances but mount the exact same Azure Files share.
To determine if files in the home directory are shared and accessible.
3
Determine the validity of the statement.
Files in the home directory are preserved, meaning the statement is false.
To finalize the answer.

Anahtar Kavram

Azure Cloud Shell persistent storage and environment behavior
Tahmini Süre:1m 30s
Soru 214Soru

A financial company needs to design a serverless solution that triggers when a message is received in an Azure Service Bus queue, performs complex data transformations using proprietary Python libraries, and then sends an email notification. The company should use Azure Logic Apps to run the data transformation steps because Logic Apps natively supports custom Python code execution and external library imports.

Cevabı ve açıklamayı göster

Cevap: False

Cevap

False
The correct answer is False because Azure Logic Apps is a visual, connector-first service meant for orchestrating workflows and integrating applications. It does not natively support running custom Python scripts or importing proprietary libraries. For code-first tasks like custom Python data transformations, Azure Functions is the appropriate serverless compute service.

Adım Adım Çözüm

1
Identify the development requirements of the scenario
The workload requires running custom Python code and importing proprietary libraries to perform complex data transformations.
Determining if a requirement is code-first or connector-first is the primary factor in choosing between Azure Functions and Azure Logic Apps.
2
Evaluate Azure Logic Apps capabilities
Azure Logic Apps is a designer-first orchestration service. It does not provide native support for custom Python environments or importing custom packages.
Logic Apps is designed to orchestrate workflows using pre-built connectors rather than executing raw application code.
3
Evaluate Azure Functions capabilities
Azure Functions is a code-first serverless compute service that natively supports various programming languages, including Python, and allows importing custom libraries.
Functions are built to run custom scripts, algorithms, and data processing tasks in a serverless model.
4
Determine if the statement is correct
The statement asserts that Logic Apps should be used because it natively supports custom Python execution, which is incorrect.
Since Azure Functions is the service that supports custom Python execution, the statement is false.

Anahtar Kavram

Azure Serverless Compute (Functions and Logic Apps)
Soru 215Soru

Is the following statement true or false?

Azure Database for PostgreSQL is a non-relational (NoSQL) database service.

Cevabı ve açıklamayı göster

Cevap: False

Cevap

The statement is false.
The statement is false because Azure Database for PostgreSQL is a managed relational database service. It is designed for relational data structures that use schemas, tables, columns, and foreign keys.

Adım Adım Çözüm

1
Identify the database category for PostgreSQL.
PostgreSQL is an open-source relational database management system (RDBMS).
To determine whether the service is relational or non-relational.
2
Compare the identified category with the claim in the statement.
The statement claims it is a non-relational (NoSQL) database service, which contradicts the fact that PostgreSQL is relational.
To evaluate the truth value of the statement.

Anahtar Kavram

Relational vs. Non-Relational Databases in Azure
Soru 216Soru

An Azure administrator configures a ReadOnly resource lock on a resource group named rg-finance. The resource group contains an Azure Virtual Network named vnet-prod. Another administrator then applies a CanNotDelete lock directly to vnet-prod. Which of the following statements describe the resulting effects of these locks? Select two.

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Users are prevented from adding a new subnet to vnet-prod.; Users are prevented from deploying new resources into rg-finance.

Cevap

Users are prevented from adding a new subnet to vnet-prod and users are prevented from deploying new resources into rg-finance.
The correct statements are that users are blocked from adding a subnet to the virtual network and blocked from deploying new resources to the resource group. This is because a ReadOnly lock is inherited by child resources, and when multiple locks exist, the most restrictive lock (ReadOnly) takes precedence over the less restrictive lock (CanNotDelete). A ReadOnly lock on a resource group also prevents any new resources from being created within that group.

Adım Adım Çözüm

1
Determine the inheritance of the resource locks.
The resource group rg-finance has a ReadOnly lock, which is inherited by all resources within it, including the virtual network vnet-prod.
Azure resource locks are inherited from parent scopes (subscriptions, resource groups) to child resources.
2
Evaluate the precedence when multiple locks apply.
vnet-prod has both an inherited ReadOnly lock and a direct CanNotDelete lock. The ReadOnly lock is more restrictive, so it takes precedence.
When multiple locks are applied, the most restrictive lock applies.
3
Determine the impact on resource modification and creation.
Adding a subnet to vnet-prod is blocked due to the active ReadOnly restriction. Additionally, creating new resources in rg-finance is blocked because the resource group itself has a ReadOnly lock.
A ReadOnly lock prevents all write and delete operations, including modifying resources and adding new resources to the locked scope.

Anahtar Kavram

Azure resource lock inheritance and precedence rules, specifically how ReadOnly locks restrict both resource modification and the creation of new resources within a resource group.
Tahmini Süre:1m 30s
Soru 217Soru

By default, Azure Virtual Network peering is transitive, meaning that if VNet A is peered with VNet B, and VNet B is peered with VNet C, resources in VNet A can communicate with resources in VNet C without requiring a direct peering connection or a transit gateway.

Is this statement true or false?

Cevabı ve açıklamayı göster

Cevap: False

Cevap

The statement is false because Azure Virtual Network peering is non-transitive by default.
The statement is false because Virtual Network peering in Azure is non-transitive. Resources in VNet A cannot communicate with resources in VNet C through VNet B unless there is a direct peering connection between VNet A and VNet C, or a routing mechanism (such as a VPN Gateway with gateway transit or a Network Virtual Appliance) is configured in VNet B to forward the traffic.

Adım Adım Çözüm

1
Analyze the peering relationship described in the scenario: VNet A is peered with VNet B, and VNet B is peered with VNet C.
Two separate, direct peering links exist (VNet A-B and VNet B-C), but there is no direct link between VNet A and VNet C.
To determine connectivity between VNet A and VNet C, we must evaluate whether traffic can pass through VNet B (transitivity).
2
Evaluate the default behavior of Azure Virtual Network peering regarding transitivity.
Azure Virtual Network peering is strictly non-transitive. Traffic cannot pass through a peered VNet to reach another peered VNet unless explicit routing mechanisms (like gateway transit or user-defined routes with an NVA) are configured.
This is a core security and routing boundary design principle in Azure networking.
3
Determine the truth value of the statement.
The statement asserts that peering is transitive by default and allows communication between VNet A and VNet C without direct peering or a gateway, which is incorrect.
Since peering is non-transitive, the statement is false.

Anahtar Kavram

Azure Virtual Network Peering Transitivity
Soru 218Soru

A healthcare provider hosts sensitive patient applications across virtual machines running in Google Cloud Platform (GCP) and legacy database servers running on-premises. The provider needs to centralize compliance auditing and performance monitoring across all environments without migrating these workloads to the Azure public cloud.

Which of the following statements correctly describe how Azure Arc can be used to meet these requirements? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: It registers the external virtual machines and database servers as resources in Azure Resource Manager (ARM), enabling centralized compliance governance.; It enables the extension of Azure Monitor and Azure Policy to the virtual machines running in GCP and on-premises without migrating the workloads.

Cevap

The correct options are: registering the external virtual machines and database servers as resources in Azure Resource Manager (ARM), and extending Azure Monitor and Azure Policy to the virtual machines running in GCP and on-premises.
Azure Arc allows organizations to extend Azure Resource Manager (ARM) capabilities to resources outside Azure, such as on-premises servers or VMs running in other cloud providers like GCP. By registering these machines as Arc-enabled resources, administrators can apply Azure Policy and deploy monitoring tools like Azure Monitor without migrating any data or workloads.

Adım Adım Çözüm

1
Analyze the organization's requirements for centralizing compliance auditing and performance monitoring across Google Cloud Platform (GCP) and on-premises without migrating workloads.
Identified that the organization needs a solution to manage non-Azure resources using Azure's management tools (Azure Policy, Azure Monitor).
This establishes the need for Azure Arc, which extends Azure management capabilities to hybrid and multi-cloud environments.
2
Evaluate the capabilities of Azure Arc regarding resource registration.
Azure Arc registers servers, Kubernetes clusters, and databases outside Azure as Azure Resource Manager (ARM) resources.
This enables native Azure governance tools like Azure Policy to be applied directly to these non-Azure resources.
3
Evaluate the capabilities of Azure Arc regarding monitoring and extensions.
Azure Arc allows installing agents on external machines to collect logs, run diagnostics, and enforce policies.
This enables Azure Monitor to track performance metrics of the virtual machines on GCP and on-premises.

Anahtar Kavram

Azure Arc extends Azure governance and management capabilities to resources running outside Azure (on-premises, edge, and multi-cloud) without requiring workload migration.
Tahmini Süre:2m 0s
Soru 219Soru

An organization needs to deploy a complex microservices application composed of dozens of containers that require service discovery, load balancing, and coordinated scaling.

Is the statement that Azure Container Instances (ACI) is the primary Azure service designed to manage these orchestration requirements true or false?

Cevabı ve açıklamayı göster

Cevap: False

Cevap

The statement is false because Azure Kubernetes Service (AKS) is the primary service for complex container orchestration, while Azure Container Instances (ACI) is designed for running simple, isolated container workloads without orchestration features.
The correct answer is false because Azure Container Instances (ACI) does not provide container orchestration features like service discovery, load balancing, and coordinated scaling. These orchestration capabilities are provided by Azure Kubernetes Service (AKS).

Adım Adım Çözüm

1
Analyze the application requirements in the scenario.
The application is a complex microservices architecture requiring service discovery, load balancing, and coordinated scaling across multiple containers.
These requirements correspond to full container orchestration capabilities.
2
Evaluate the capabilities of Azure Container Instances (ACI).
ACI provides serverless container hosting for isolated container groups, but does not natively provide advanced orchestration features like service discovery, load balancing, or coordinated scaling for complex microservice clusters.
ACI is meant for quick, simple containers, not complex multi-container orchestration.
3
Identify the correct service for container orchestration and determine the statement's validity.
Azure Kubernetes Service (AKS) is the service designed for container orchestration. Therefore, the statement naming ACI is false.
Matching the requirements to the correct service confirms that the statement is incorrect.

Anahtar Kavram

Azure Container Instances (ACI) vs Azure Kubernetes Service (AKS) orchestration capabilities
Tahmini Süre:1m 0s
Soru 220Soru

An organization wants to connect its on-premises headquarters to an Azure Virtual Network. They require an encrypted connection that runs over the public internet to minimize setup costs. Which Azure service should the organization use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Azure VPN Gateway

Cevap

Azure VPN Gateway
Azure VPN Gateway is the correct choice because it establishes a secure, encrypted tunnel over the public internet to connect an on-premises network to an Azure Virtual Network. This is the most cost-effective option for hybrid connectivity.

Adım Adım Çözüm

1
Identify the hybrid connectivity requirement.
The organization needs to connect its on-premises network to an Azure Virtual Network.
This establishes the scope of hybrid networking services.
2
Evaluate the connectivity constraints.
The connection must use the public internet, encrypt traffic, and minimize costs.
This differentiates between VPN Gateway (encrypted over public internet, lower cost) and ExpressRoute (private, dedicated, higher cost).

Anahtar Kavram

Azure hybrid networking options, specifically comparing VPN Gateway and ExpressRoute connectivity models.
Tahmini Süre:45s
ÖncekiSayfa 11 / 60Sonraki
Tüm alıştırma soruları — Microsoft Azure Fundamentals (AZ-900) | Examkin