Tüm alıştırma soruları

1186 soru

Soru 281Soru

An organization needs to allow remote employees to securely connect to an Azure Virtual Network from their individual home computers. Is the statement that a Site-to-Site (S2S) VPN connection is the correct configuration to enable these individual client connections true or false?

Cevabı ve açıklamayı göster

Cevap: False

Cevap

False
The correct answer is False because a Site-to-Site (S2S) VPN connection is designed to connect an entire on-premises network (like a branch office) to Azure, requiring an on-premises VPN hardware device. For individual remote employees connecting from their home computers, a Point-to-Site (P2S) VPN connection is the correct configuration.

Adım Adım Çözüm

1
Identify the connectivity requirements of the scenario.
Individual remote users (home computers) need to connect securely to an Azure Virtual Network.
Understanding the nature of the connection points (individual devices vs. entire sites) is crucial to selecting the right VPN configuration.
2
Compare Site-to-Site (S2S) and Point-to-Site (P2S) VPN architectures.
S2S connects entire sites using an on-premises VPN device, while P2S allows individual client computers to connect over the internet using client-based VPN software.
This determines which service matches the requirement of individual client connections.
3
Evaluate the statement in the prompt.
The statement claims S2S is the correct configuration for individual client connections, which contradicts the fact that P2S is the correct configuration.
Determining the truth value of the statement.

Anahtar Kavram

Azure VPN Gateway connection types (Site-to-Site vs. Point-to-Site)
Tahmini Süre:1m 0s
Soru 282Soru

An organization plans to automate the deployment of a web application tier, a database tier, and network security groups. The IT team needs to ensure that the deployment is repeatable, prevents configuration drift, automatically handles resource dependencies in the correct order, and validates the configuration structure before any resources are actually provisioned.

Which deployment strategy should the organization implement to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Define the infrastructure in a Bicep or Azure Resource Manager (ARM) template to utilize declarative syntax, allowing the platform to determine dependencies and validate the deployment beforehand.

Cevap

Define the infrastructure in a Bicep or Azure Resource Manager (ARM) template to utilize declarative syntax, allowing the platform to determine dependencies and validate the deployment beforehand.
Defining the infrastructure in a Bicep or Azure Resource Manager (ARM) template is correct because templates use declarative syntax. This means you define the target state of the resources, and Azure Resource Manager automatically evaluates dependencies, validates the configuration structure before deployment, and executes it in an idempotent way.

Adım Adım Çözüm

1
Analyze the requirements for declarative deployment, pre-flight validation, and automatic dependency handling.
Identify that Azure Resource Manager (ARM) templates and Bicep are the standard tools designed for declarative infrastructure as code (IaC) in Azure.
ARM/Bicep templates allow you to define the desired end-state of your resources. The platform handles the deployment sequence automatically.
2
Evaluate why imperative scripting options do not meet the criteria.
Recognize that sequential Azure CLI or PowerShell scripts do not natively perform pre-flight validation or automated dependency tracking.
Imperative scripts execute step-by-step instructions and are prone to partial failures without built-in state management.
3
Evaluate the architectural constraints of Resource Groups.
Verify that Resource Groups cannot be nested and that resources are not restricted to the region of their Resource Group.
This rules out options suggesting nested Resource Groups or region-segregated templates due to resource location inheritance.

Anahtar Kavram

Azure Resource Manager (ARM) templates and Bicep use a declarative syntax to define infrastructure, allowing pre-flight validation, automated dependency management, and idempotent deployments, while operating within flat Resource Group boundaries that support multi-region resources.
Tahmini Süre:2m 0s
Soru 283Soru

A company is planning to migrate an on-premises business application to Azure Virtual Machines. The application has two distinct storage requirements:

1. A shared file system that can be mounted concurrently by multiple virtual machines running Windows Server using the standard SMB protocol.
2. A long-term archiving solution for historical transaction logs that are rarely accessed (less than once a year), where minimizing storage cost is the primary priority and a retrieval latency of several hours is acceptable.

Which two of the following Azure Storage solutions should the company implement? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Files to provide the shared file system using the SMB protocol; Azure Blob Storage using the Archive access tier for long-term log storage

Cevap

The company should implement Azure Files to provide the shared SMB file system and Azure Blob Storage using the Archive access tier for long-term log storage.
Azure Files provides a fully managed SMB file share that can be mounted concurrently by multiple virtual machines, satisfying the first requirement. Azure Blob Storage with the Archive access tier offers the most cost-effective solution for data stored for at least 180 days that is rarely accessed, satisfying the second requirement as it supports retrieval times of several hours through rehydration.

Adım Adım Çözüm

1
Analyze the first requirement: a shared file system supporting the standard SMB protocol that can be concurrently mounted by Windows Server VMs.
Identify that Azure Files is a fully managed cloud file share service that natively supports the SMB protocol, allowing concurrent mounts from multiple VMs without managing underlying cluster infrastructure.
This matches the criteria for a simple, managed shared SMB file share.
2
Analyze the second requirement: long-term archiving of rarely accessed logs with a focus on lowest cost and acceptance of multi-hour retrieval times.
Identify that the Archive access tier of Azure Blob Storage provides the lowest cost storage option for inactive data, with the trade-off that retrieving data requires rehydration taking several hours.
This matches the latency and cost optimization requirements of the second scenario.
3
Evaluate the distractors against the requirements and Azure constraints.
Determine that using shared Azure Disks for SMB requires complex IaaS clustering configuration and management by the customer, and that the Archive access tier does not allow direct read access.
This eliminates the incorrect options based on Azure architecture rules.

Anahtar Kavram

Azure Files provides managed SMB/NFS file shares, while Azure Blob Storage offers multiple access tiers including the low-cost, offline Archive tier for rarely accessed data that requires rehydration before use.
Soru 284Soru

Is the following statement true or false?

Azure Container Instances (ACI) includes built-in container orchestration capabilities, such as service discovery, automated rolling updates, and coordinated scheduling across a cluster of virtual nodes.

Cevabı ve açıklamayı göster

Cevap: False

Cevap

The statement is false because Azure Container Instances (ACI) is a serverless container host that does not provide orchestration features like service discovery or automated rolling updates, which are instead provided by Azure Kubernetes Service (AKS).
The statement is false because Azure Container Instances (ACI) is designed for running individual container workloads without orchestration features. Orchestration capabilities like service discovery, load balancing, and rolling upgrades are provided by Azure Kubernetes Service (AKS).

Adım Adım Çözüm

1
Analyze the service and capabilities mentioned in the statement.
The statement claims that Azure Container Instances (ACI) includes built-in orchestration features like service discovery, rolling updates, and cluster-wide scheduling.
To evaluate the statement, we must identify the core characteristics and limitations of ACI.
2
Compare ACI's characteristics with container orchestration services.
ACI is a basic serverless container hosting service. It does not manage clusters or coordinate containers across nodes. Those full orchestration capabilities are provided by Azure Kubernetes Service (AKS).
Distinguishing between simple container hosting (ACI) and full container orchestration (AKS) is essential for correct service selection in Azure.
3
Determine the correctness of the statement.
Since ACI lacks these orchestration capabilities, the statement is false.
Combining the analysis of ACI's actual features with the statement's claim yields the final answer.

Anahtar Kavram

Azure Container Instances (ACI) provides a quick and simple way to run isolated containers without managing virtual machines, but it does not offer container orchestration features such as service discovery, rolling updates, or automated scaling across a cluster; those features are offered by Azure Kubernetes Service (AKS).
Tahmini Süre:45s
Soru 285Soru

An organization has an Azure resource group named RG-Production that contains ten existing virtual machines. None of these virtual machines have any tags. An administrator assigns an Azure Policy definition to RG-Production that denies the deployment of any resource that does not contain a tag named 'CostCenter'.

A developer who is assigned the Owner role for RG-Production attempts to perform two tasks:
1. Deploy a new virtual machine without specifying any tags.
2. Start one of the existing virtual machines.

What is the outcome of these tasks?

Cevabı ve açıklamayı göster

Cevap: The deployment of the new virtual machine is blocked, but the existing virtual machine starts successfully.

Cevap

The deployment of the new virtual machine is blocked, but the existing virtual machine starts successfully.
The option stating that the deployment of the new virtual machine is blocked, but the existing virtual machine starts successfully is correct. Azure Policy evaluates resource compliance during deployment. Since the new virtual machine lacks the required tag, the Deny policy blocks its creation. However, Azure Policy does not retroactively delete or stop existing non-compliant resources, nor does it block operational state changes like starting an existing VM.

Adım Adım Çözüm

1
Evaluate the deployment of the new virtual machine without the required tag.
The deployment request is intercepted by Azure Resource Manager and blocked.
The Azure Policy assignment has a 'Deny' effect for resources lacking the 'CostCenter' tag, which prevents the creation of any new non-compliant resources.
2
Evaluate the attempt to start the existing virtual machine.
The virtual machine starts successfully.
Azure Policy's 'Deny' effect does not retroactively block actions on existing resources, and starting an existing virtual machine is a state transition that does not change the resource definition evaluated by the deny policy.
3
Verify if the Owner RBAC role allows bypassing the policy.
The deployment remains blocked despite the Owner role.
Azure RBAC determines what actions a user can perform, whereas Azure Policy determines resource properties. RBAC permissions do not override Azure Policy evaluation.

Anahtar Kavram

Azure Policy evaluation timing, enforcement, and interaction with RBAC
Tahmini Süre:2m 0s
Soru 286Soru

An Azure administrator applies a ReadOnly resource lock to an Azure resource group named rg-marketing. The resource group contains an Azure SQL Database logical server named sql-campaigns.

An operator who has the Owner role at the subscription level attempts to perform the following two tasks:
- Task 1: Add a new IP firewall rule to the sql-campaigns logical server.
- Task 2: Connect to a database on the sql-campaigns server and run a SQL query to retrieve data.

Which of the tasks will be permitted?

Cevabı ve açıklamayı göster

Cevap: Only Task 2

Cevap

Only Task 2 is permitted.
The option stating that only Task 2 is permitted is correct. A ReadOnly resource lock prevents authorized users from deleting or modifying resources in the control plane. Adding a firewall rule is an update operation on the control plane, so it is blocked. However, resource locks do not affect data plane operations (the internal functions of a resource). Querying data within the SQL database is a data plane operation and is therefore allowed.

Adım Adım Çözüm

1
Analyze the scope and type of the lock.
A ReadOnly lock is applied at the resource group level, which inherits to all child resources, including the logical SQL server.
Azure Resource Locks inherit from parent scopes down to all resources inside those scopes.
2
Evaluate the control plane vs. data plane nature of Task 1.
Adding an IP firewall rule modifies the logical server's configuration, which is a control plane write/update operation.
A ReadOnly lock blocks all delete and update operations on the control plane, making Task 1 blocked.
3
Evaluate the control plane vs. data plane nature of Task 2.
Connecting to the database and querying table data interacts with the database engine itself, representing a data plane operation.
Azure Resource Locks do not restrict data plane operations, meaning Task 2 is permitted.

Anahtar Kavram

Azure Resource Locks apply to control plane (management) operations but do not restrict data plane (resource function) operations. A ReadOnly lock blocks all update and delete actions on the control plane.
Soru 287Soru

A company is choosing command-line utilities for managing Azure resources. The development team uses a mix of Windows, macOS, and Linux workstations. Which two statements correctly describe the operating system compatibility of Azure CLI and Azure PowerShell?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure CLI can be installed and run locally on Windows, macOS, and Linux operating systems.; Azure PowerShell can be installed and run locally on Windows, macOS, and Linux operating systems.

Cevap

Azure CLI and Azure PowerShell are both cross-platform tools that can be installed locally on Windows, macOS, and Linux.
Both Azure CLI and Azure PowerShell are cross-platform tools. Azure CLI is written in Python and is supported on Windows, macOS, and Linux. Azure PowerShell is built on PowerShell Core (cross-platform .NET), making it fully compatible with Windows, macOS, and Linux as well.

Adım Adım Çözüm

1
Analyze the operating system compatibility of Azure CLI.
Azure CLI is cross-platform and runs on Windows, macOS, and Linux.
Azure CLI is designed to work across all major operating systems.
2
Analyze the operating system compatibility of Azure PowerShell.
Azure PowerShell runs on PowerShell Core, which is supported on Windows, macOS, and Linux.
Azure PowerShell is no longer limited to Windows since the release of PowerShell Core.

Anahtar Kavram

Azure CLI and Azure PowerShell are cross-platform command-line tools that can be installed on Windows, macOS, and Linux.
Soru 288Soru

An enterprise needs to design a serverless solution that executes a custom C# data validation routine when a new file is uploaded to Azure Blob Storage, and then orchestrates a multi-step sequence that includes waiting for an administrator's email approval.

Is it correct to use Azure Logic Apps to run the C# data validation routine and Azure Functions to orchestrate the email approval workflow?

Cevabı ve açıklamayı göster

Cevap: False

Cevap

The statement is incorrect (False). Azure Functions should be used for the custom C# validation code, and Azure Logic Apps should be used for the orchestration and approval workflow.
The proposed configuration is incorrect because Azure Functions is optimized for code-first tasks like custom C# processing, whereas Azure Logic Apps is optimized for connector-first workflow orchestrations including human approvals.

Adım Adım Çözüm

1
Analyze the custom C# data validation requirement.
Requires running custom code on demand.
Azure Functions is code-first and allows developers to write custom code in languages like C# that run in response to storage triggers.
2
Analyze the multi-step workflow orchestration and email approval requirement.
Requires managing state, integrating systems, and waiting for external human approval.
Azure Logic Apps provides a visual designer and out-of-the-box connectors specifically designed for orchestrating workflows and managing human-in-the-loop approvals.
3
Evaluate the statement's proposed mapping against the capabilities.
The proposed mapping is reversed.
The statement incorrectly suggests using the visual orchestration tool (Logic Apps) for custom code and the code execution tool (Functions) for visual workflow orchestration.

Anahtar Kavram

Azure Functions is code-first serverless compute for custom logic, while Azure Logic Apps is designer-first serverless orchestration for workflows and integrations.
Tahmini Süre:1m 30s
Soru 289Soru

A company implements Azure Policy to ensure that resources deployed to their main subscription comply with corporate security standards. The company needs to prevent a specific development resource group from being evaluated by a newly assigned policy.

Is the following statement true or false: Azure Policy allows you to exclude specific resource groups or individual resources from a policy assignment scope?

Cevabı ve açıklamayı göster

Cevap: True

Cevap

The statement is true because Azure Policy allows exclusions to be configured at granular scopes, including resource groups and individual resources.
The statement is true because Azure Policy supports configuring exclusions (notScopes) at the management group, subscription, resource group, or individual resource level.

Adım Adım Çözüm

1
Analyze the statement to identify the core claim regarding Azure Policy exclusion capability.
The statement asserts that Azure Policy allows excluding specific resource groups or individual resources from a policy assignment scope.
To evaluate the truth value of the statement, we must recall the supported scopes for policy exclusions.
2
Recall the configuration options for policy assignments and exclusions (notScopes) in Azure Policy.
Azure Policy assignments support excluding specific scopes, known as notScopes, which can be as granular as a single resource group or an individual resource.
Comparing the recalled Azure capability with the statement's claim determines if the statement is correct.
3
Determine the final truth value based on the alignment between Azure Policy capabilities and the statement.
Since Azure Policy does allow exclusions at these granular levels, the statement is true.
This completes the evaluation process.

Anahtar Kavram

Azure Policy Assignment Scopes and Exclusions
Tahmini Süre:1m 0s
Soru 290Soru

An enterprise administrator manages resources across multiple Azure subscriptions. The administrator needs to implement a monitoring and alerting strategy to address the following three requirements:

1. Receive notifications when a widespread outage affects the Azure App Service in a region where their subscriptions host active web apps.
2. Troubleshoot a single Virtual Machine that has become unavailable due to an underlying Azure platform host hardware failure.
3. View the general status of all Azure services globally without logging into an Azure account.

Which combination of Azure features should the administrator use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: 1. Azure Service Health; 2. Azure Resource Health; 3. Azure Status

Cevap

1. Azure Service Health; 2. Azure Resource Health; 3. Azure Status
The correct option correctly maps each requirement to its corresponding tool: Azure Service Health is subscription-tailored for regional service outages; Azure Resource Health handles individual platform-level resource availability; and Azure Status provides the public, global overview of all Azure services without requiring login.

Adım Adım Çözüm

1
Analyze requirement 1 for regional outages impacting specific subscriptions.
Identify Azure Service Health as the service that provides personalized dashboards and alerts for regional service issues affecting the active subscription resources.
Unlike global status, Azure Service Health is tailored to specific subscriptions.
2
Analyze requirement 2 for troubleshooting a single resource's platform-level availability.
Identify Azure Resource Health as the tool that provides detailed diagnostics on whether a specific resource (such as a VM) is available or experiencing platform host issues.
Resource Health is designed for resource-level platform diagnostics.
3
Analyze requirement 3 for a public, non-authenticated overview of service health.
Identify Azure Status as the public web page that tracks the health of all Azure services in all regions.
Azure Status does not require authentication.

Anahtar Kavram

Azure Service Health, Resource Health, and Azure Status serve different scopes of platform monitoring, distinct from the custom resource telemetry tracked by Azure Monitor.
Soru 291Soru

A municipal power grid operator runs containerized grid monitoring software on local Kubernetes clusters located in physical substations. By onboarding these clusters to Azure Arc, the operator can use Azure Policy to manage and enforce compliance configurations directly on these Kubernetes clusters.

Cevabı ve açıklamayı göster

Cevap: True

Cevap

True
Azure Arc extends Azure Resource Manager (ARM) capabilities, allowing organizations to apply Azure Policy and manage compliance for Kubernetes clusters and servers operating in external, on-premises, or multi-cloud environments.

Adım Adım Çözüm

1
Analyze the scenario infrastructure
The operator has Kubernetes clusters running locally in physical substations (outside Azure).
To determine which hybrid management solution is appropriate.
2
Evaluate the capabilities of Azure Arc
Azure Arc registers non-Azure resources (like external Kubernetes clusters) into the Azure Resource Manager (ARM) plane.
To verify if Azure Arc supports managing external Kubernetes clusters.
3
Evaluate policy application capabilities
Once registered via Azure Arc, these clusters can be target resource scopes for Azure Policy, enforcing governance and compliance configurations.
To confirm if Azure Policy can be applied to govern the clusters as stated in the scenario.

Anahtar Kavram

Using Azure Arc to extend Azure Policy governance to external Kubernetes clusters
Tahmini Süre:1m 0s
Soru 292Soru

An organization needs to allow a new security auditor to view the configuration of all resources within a specific Azure subscription. However, the auditor must not be able to make any modifications or delete any resources.

Which Azure configuration should the administrator implement to meet this requirement?

Cevabı ve açıklamayı göster

Cevap: Assign the Reader role to the auditor at the subscription scope.

Cevap

Assign the Reader role to the auditor at the subscription scope.
Assigning the Reader role to the auditor at the subscription scope is the correct solution. Azure Role-Based Access Control (RBAC) is designed to manage user permissions. The Reader role allows viewing all resources without making modifications, and assigning it at the subscription level ensures the access inherits to all nested resources.

Adım Adım Çözüm

1
Identify the required level of access and the target scope.
The auditor requires read-only access (no modifications or deletions) across the entire Azure subscription.
This establishes the scope as the subscription and the access level as read-only.
2
Evaluate the appropriate Azure management tool for managing user permissions.
Azure Role-Based Access Control (RBAC) is the correct service for authorizing specific user actions on resources.
Azure Policy is for compliance and resource properties, while resource locks apply globally to all users, making RBAC the only tool designed for user-specific authorization.
3
Select the built-in RBAC role that provides read-only permissions.
The Reader role allows viewing resources without allowing any modifications or deletions.
Assigning the Reader role at the subscription scope ensures that these permissions inherit down to all resource groups and resources within that subscription.

Anahtar Kavram

Azure Role-Based Access Control (RBAC) is used to manage user authorization and access to resources, with permissions inheriting from higher scopes (like Subscriptions) down to lower scopes (like Resource Groups).
Tahmini Süre:45s
Soru 293Soru

A company plans to automate the deployment of its cloud infrastructure using Azure Resource Manager (ARM) templates to achieve consistency across dev, test, and prod environments. Which TWO statements describe valid capabilities or characteristics of ARM templates?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: They use a declarative syntax, allowing you to define the desired end-state infrastructure without writing the sequence of programming commands.; They support deploying resources across multiple resource groups or subscriptions through nested or linked templates.

Cevap

ARM templates use a declarative syntax and allow resource deployment across multiple resource groups or subscriptions.
ARM templates are declarative files (JSON or Bicep) that describe the target state of your resources without needing imperative sequencing commands. Furthermore, they are flexible enough to deploy resources to multiple different resource groups and subscriptions, even within the same deployment orchestration.

Adım Adım Çözüm

1
Analyze the nature of ARM templates (declarative vs. imperative).
Confirm that ARM templates use a declarative syntax rather than imperative scripts, meaning you define what to create rather than how to create it.
This establishes that templates automatically handle orchestration, dependencies, and sequencing.
2
Evaluate resource group and regional deployment constraints.
Identify that resources in a template can be deployed to different regions than the resource group, and deployments can span multiple resource groups or subscriptions using nested templates.
This validates the scope of deployment flexibility inherent to Azure Resource Manager.

Anahtar Kavram

Azure Resource Manager (ARM) templates are declarative configurations that support multi-scope deployments independent of resource group regional boundaries.
Soru 294Soru

A company is developing a new web application that needs to store product catalog data with flexible schemas. They require a fully managed, globally distributed NoSQL database service where Microsoft handles all server management and software updates. Which Azure service meets these requirements?

Cevabı ve açıklamayı göster

Cevap: Azure Cosmos DB

Cevap

Azure Cosmos DB
Azure Cosmos DB is a fully managed NoSQL database service that supports flexible schemas (semi-structured JSON data) and provides global distribution with single-digit millisecond latency, meeting all the requirements of the scenario.

Adım Adım Çözüm

1
Identify the data model and deployment requirements.
The application requires a NoSQL database with flexible schemas that is globally distributed and fully managed (Platform as a Service).
This narrows down the choices to Azure database offerings that support NoSQL and global distribution.
2
Match the requirements to the correct Azure database service.
Azure Cosmos DB is the premier multi-model, globally distributed NoSQL database service in Azure where Microsoft manages the underlying infrastructure and scaling.
Other options either focus on relational data models (such as Azure SQL Database), require manual virtual machine patching (such as SQL Server on Azure VMs), or are Software as a Service products (such as Microsoft 365).

Anahtar Kavram

Azure Cosmos DB is a fully managed, globally distributed NoSQL database service.
Tahmini Süre:45s
Soru 295Soru

A company plans to connect its on-premises office to Azure. The IT director suggests using Azure ExpressRoute because they believe it will encrypt all traffic sent over the public internet. Which of the following statements correctly addresses the IT director's suggestion?

Cevabı ve açıklamayı göster

Cevap: ExpressRoute provides a private, dedicated connection to Azure that does not traverse the public internet.

Cevap

ExpressRoute provides a private, dedicated connection to Azure that does not traverse the public internet.
The correct answer is correct because ExpressRoute is specifically designed to provide a private, dedicated connection to Azure that does not use the public internet. It bypasses the public internet completely to offer higher reliability, faster speeds, and lower latencies.

Adım Adım Çözüm

1
Analyze the suggestion made by the IT director regarding Azure ExpressRoute.
The suggestion incorrectly assumes ExpressRoute routes encrypted traffic over the public internet.
Identifying the assumptions in the scenario is necessary to evaluate which statement is correct.
2
Evaluate the architectural characteristics of Azure ExpressRoute.
ExpressRoute provides a dedicated, private connection to Azure via a connectivity provider, which completely bypasses the public internet.
Understanding that ExpressRoute is a private connection, not an internet-based VPN, resolves the misconception.

Anahtar Kavram

Azure ExpressRoute private connectivity
Tahmini Süre:1m 0s
Soru 296Soru

A company plans to deploy a containerized web application to Azure. The application must run continuously and scale automatically in response to HTTP traffic demands. The development team wants to minimize administrative overhead and avoid managing container orchestrators or virtual machine operating systems. Which Azure service should the company use to host this application?

Cevabı ve açıklamayı göster

Cevap: Azure App Service

Cevap

Azure App Service
The correct option is Azure App Service. This service is a fully managed Platform as a Service (PaaS) that allows developers to deploy containerized web applications. It automates operating system patching, provides built-in auto-scaling based on HTTP traffic, and requires no orchestration platform management.

Adım Adım Çözüm

1
Analyze the application requirements.
The application is containerized, must run continuously, requires automatic scaling based on HTTP traffic, and needs minimal management overhead (no OS patching or orchestrator management).
This establishes the constraints needed to rule out IaaS and complex container orchestrators.
2
Evaluate the hosting options against the management constraint.
Azure Virtual Machines is eliminated because it requires the customer to manage OS patching.
Virtual Machines are IaaS, putting OS maintenance on the customer.
3
Evaluate the remaining container hosting options against the scaling and complexity constraints.
Azure Kubernetes Service (AKS) is eliminated due to its orchestrator management complexity. Azure Container Instances (ACI) is eliminated because it does not feature native HTTP-based auto-scaling. Azure App Service is selected as it satisfies all constraints.
Azure App Service provides a fully managed PaaS environment specifically optimized for web applications and APIs, handling scaling and OS maintenance automatically.

Anahtar Kavram

Azure App Service container hosting capability with built-in auto-scaling and minimal management overhead.
Soru 297Soru

A retail organization stores daily transaction logs in an Azure Blob storage container. These logs must be retained for five years to meet regulatory compliance standards. While the logs are rarely accessed, any retrieval request must be processed immediately to resolve customer disputes. To minimize storage costs, an IT administrator proposes modifying the lifecycle management policy to transition the logs to the Archive access tier immediately after creation. Which of the following statements correctly evaluates the administrator's proposal?

Cevabı ve açıklamayı göster

Cevap: The proposal is invalid because data in the Archive tier is stored offline and cannot be read immediately, as it requires several hours to rehydrate to the Hot or Cool tier.

Cevap

The proposal is invalid because data in the Archive tier is stored offline and cannot be read immediately, as it requires several hours to rehydrate to the Hot or Cool tier.
The correct option is that the proposal is invalid because data in the Archive tier is offline and requires several hours to rehydrate. The Archive access tier offers the lowest storage costs but does not support direct or immediate read operations. To read data, it must first be rehydrated to an online tier (Hot or Cool), which takes hours.

Adım Adım Çözüm

1
Analyze the business requirements for data access speed.
The scenario states that access to the transaction logs must be immediate when a dispute arises.
This establishes the latency requirement for retrieval operations.
2
Evaluate the technical characteristics of the Archive access tier.
The Archive access tier has the lowest storage costs but is an offline tier with retrieval latency of several hours (rehydration process).
This checks if the selected tier satisfies the access speed constraint determined in Step 1.
3
Compare the requirements against the characteristics of the Archive tier.
Since the Archive tier cannot meet the 'immediate' retrieval requirement, the proposal to move logs to this tier is invalid.
This determines the validity of the administrator's proposal.

Anahtar Kavram

Azure Blob Storage Access Tiers (Hot, Cool, Cold, Archive) and Rehydration
Tahmini Süre:2m 0s
Soru 298Soru

A company is planning to establish a hybrid network connection to link their on-premises office to resources in an Azure Virtual Network (VNet). They are evaluating Azure ExpressRoute and Azure VPN Gateway. Which two statements regarding these connectivity options are correct? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure VPN Gateway sends encrypted traffic across the public internet to connect the on-premises network to the Azure Virtual Network.; Azure ExpressRoute provides a dedicated, private connection to Azure that completely bypasses the public internet.

Cevap

The correct options are: 'Azure VPN Gateway sends encrypted traffic across the public internet to connect the on-premises network to the Azure Virtual Network' and 'Azure ExpressRoute provides a dedicated, private connection to Azure that completely bypasses the public internet'.
Azure VPN Gateway encrypts traffic and sends it over the public internet, whereas Azure ExpressRoute provides a private, dedicated connection that bypasses the public internet entirely.

Adım Adım Çözüm

1
Analyze the features of Azure VPN Gateway.
Confirm that Azure VPN Gateway uses the public internet to send encrypted traffic between on-premises and Azure VNets.
This is a key characteristic of Azure VPN Gateway, establishing its correctness.
2
Analyze the features of Azure ExpressRoute.
Confirm that Azure ExpressRoute uses a private, dedicated physical connection that bypasses the public internet.
This is a key characteristic of Azure ExpressRoute, establishing its correctness and disproving the option claiming it uses the internet.
3
Evaluate the hybrid cloud capability.
Identify that Azure VPN Gateway connects on-premises environments to Azure, which is by definition a hybrid cloud scenario.
This shows the option claiming it cannot be used in hybrid configurations is incorrect.

Anahtar Kavram

Azure VPN Gateway and ExpressRoute hybrid connectivity characteristics
Tahmini Süre:1m 0s
Soru 299Soru

A company deletes several development virtual machines at the end of a project. The virtual machines had a tag named Project with a value of Alpha applied directly to them.

Is the following statement true or false?

In Azure Cost Management, the historical cost data associated with the deleted virtual machines can no longer be filtered or grouped by the Project: Alpha tag because the resources no longer exist.

Cevabı ve açıklamayı göster

Cevap: False

Cevap

False
The correct answer is False because historical cost records are preserved in Azure Cost Management with the tags that were active at the time of resource usage. Deleting the resources does not affect past billing data.

Adım Adım Çözüm

1
Analyze how Azure Cost Management stores cost data.
Azure Cost Management stores historical consumption data along with the resource metadata, including tags, that existed at the moment the cost was incurred.
This is necessary to ensure that historical billing and reporting remain accurate regardless of subsequent changes to the resources.
2
Determine the impact of resource deletion on historical billing records.
Deleting a resource stops new cost generation but does not alter or purge past billing records stored in Azure Cost Management.
Historical records are immutable billing data, meaning the associated tags remain queryable for the period during which the resource existed.

Anahtar Kavram

Historical tag data persistence in Azure Cost Management
Soru 300Soru

A cloud administrator needs to check the global, public status of all Azure services across all regions to determine if there is a widespread outage. Is the following statement true or false? The administrator should use Azure Service Health to view this public, global status.

Cevabı ve açıklamayı göster

Cevap: False

Cevap

The statement is false because global service health is monitored using Azure Status, whereas Azure Service Health is personalized to the administrator's own subscriptions and resources.
The statement is false. To view the global, public status of all Azure services across all regions, an administrator must use the Azure Status page. Azure Service Health is a personalized service that only alerts you about issues affecting the services and regions you actually use. Azure Monitor is a separate tool used to collect and analyze telemetry data from your specific running resources.

Adım Adım Çözüm

1
Analyze the administrator's requirement.
The administrator needs to view the global, public status of all services across all regions.
Understanding the target goal helps differentiate between global and personalized monitoring tools.
2
Evaluate the capability of Azure Service Health.
Azure Service Health provides personalized alerts regarding service issues, planned maintenance, and health advisories that specifically impact the deployed resources and subscriptions of the tenant.
Determining that Azure Service Health is personalized helps rule it out as the tool for viewing global, public status.
3
Identify the correct tool for public global status.
The public Azure Status page provides the global status of all Azure services across all regions.
This confirms that the statement is false because Azure Status, not Azure Service Health, fulfills the requirement.

Anahtar Kavram

Azure Service Health versus Azure Status
ÖncekiSayfa 15 / 60Sonraki
Tüm alıştırma soruları — Microsoft Azure Fundamentals (AZ-900) | Examkin