Tüm alıştırma soruları

1186 soru

Soru 301Soru

An administrator needs to manage Azure resources by running Azure PowerShell commands locally. On which of the following operating systems can the administrator install and run Azure PowerShell?

Cevabı ve açıklamayı göster

Cevap: Windows, macOS, and Linux

Cevap

Azure PowerShell can be installed and run locally on Windows, macOS, and Linux.
Azure PowerShell is cross-platform and built on PowerShell Core. It can be installed and executed locally on Windows, macOS, and Linux operating systems.

Adım Adım Çözüm

1
Recall the architecture of Azure PowerShell.
Azure PowerShell is built on PowerShell Core, which is a cross-platform version of PowerShell.
To determine which operating systems are supported by the underlying shell.
2
Identify the supported platforms for PowerShell Core.
PowerShell Core supports Windows, macOS, and Linux.
Since Azure PowerShell runs on PowerShell Core, it inherits compatibility with all three operating systems.

Anahtar Kavram

Cross-platform compatibility of Azure management tools
Soru 302Soru

When a ReadOnly resource lock is applied directly to an Azure resource group, an administrator with Owner permissions on the subscription is blocked from starting any virtual machines located within that resource group.

Cevabı ve açıklamayı göster

Cevap: True

Cevap

The statement is true because ReadOnly resource locks apply to all users, including subscription Owners, and prevent starting virtual machines due to the write action required by the control plane.
The statement is correct because a ReadOnly lock prevents all updates and deletions on inherited resources for all users, including Owners. Starting a VM is a write operation at the control plane level and is therefore blocked.

Adım Adım Çözüm

1
Determine lock inheritance.
The ReadOnly lock applied at the resource group level is inherited by all resources within it, including the virtual machines.
Azure resource locks are inherited by child resources from their parent scopes (Subscription -> Resource Group -> Resource).
2
Evaluate the effect of a ReadOnly lock on virtual machine operations.
Starting or restarting a virtual machine is blocked.
ReadOnly locks block control plane operations that write or modify resource states (which include starting a VM via a POST request).
3
Assess if the Owner role can bypass the lock.
The Owner is blocked from starting the virtual machine.
Resource locks apply to all users, regardless of their role-based access control (RBAC) permissions. To start the VM, the lock must first be deleted.

Anahtar Kavram

Azure resource locks (ReadOnly) prevent all users, including Owners, from modifying resource states, and are inherited by child resources.
Soru 303Soru

An administrator is configuring access control and compliance for an Azure resource group named 'Dev-RG'. A team of developers must be able to create, delete, and modify virtual machines within 'Dev-RG', but they must not be able to delegate access permissions to other users. Additionally, the organization wants to ensure that all virtual machines in 'Dev-RG' are deployed only in the East US region.

Which configuration should the administrator use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Assign the Contributor role to the developers at the 'Dev-RG' scope, and assign an Azure Policy definition to 'Dev-RG'.

Cevap

Assign the Contributor role to the developers at the 'Dev-RG' scope, and assign an Azure Policy definition to 'Dev-RG'.
The combination of assigning the Contributor role at the resource group scope and applying an Azure Policy definition correctly satisfies the requirements. The Contributor role grants full access to manage resources within the resource group but does not allow assigning roles to other users. Azure Policy is designed to enforce resource compliance rules, such as restricting deployments to a specific region.

Adım Adım Çözüm

1
Determine the correct Azure RBAC role to allow resource creation and management without delegation capabilities.
The Contributor role allows managing all resources but cannot assign roles in Azure RBAC, which satisfies the restriction on access delegation.
The Owner role allows role delegation, which is forbidden by the scenario, while the Reader role only allows viewing resources.
2
Determine the correct feature to enforce compliance rules (such as location/region restrictions).
Azure Policy is the service used to enforce rules and compliance constraints on resource properties.
Azure RBAC manages user permissions (who can do what), not resource compliance properties (what rules resources must follow).
3
Combine the RBAC assignment and policy definition to satisfy both requirements.
Assigning the Contributor role to the developer team at the resource group scope and assigning an Azure Policy definition restricting deployment to East US meets all specified requirements.
Combining Contributor (for permissions) and Azure Policy (for compliance) solves both administrative needs.

Anahtar Kavram

Azure Role-Based Access Control (RBAC) manages access permissions, while Azure Policy enforces resource property compliance.
Soru 304Soru

A company is planning to migrate an on-premises database to Microsoft Azure and requires a fully managed relational database engine. Is the statement that Azure Database for PostgreSQL is an Infrastructure as a Service (IaaS) offering that requires the customer to manage operating system updates and database engine patching true or false?

Cevabı ve açıklamayı göster

Cevap: False

Cevap

The statement is false because Azure Database for PostgreSQL is a Platform as a Service (PaaS) offering, which means Microsoft is responsible for managing operating system updates and database engine patching.
The statement is false because Azure Database for PostgreSQL is a fully managed Platform as a Service (PaaS) offering. Microsoft handles hardware management, operating system updates, backups, and database engine patching, allowing the user to focus solely on database design and application development.

Adım Adım Çözüm

1
Identify the service model classification for Azure Database for PostgreSQL.
Azure Database for PostgreSQL is classified as a Platform as a Service (PaaS) offering.
Understanding the cloud service model is necessary to determine the division of management responsibilities.
2
Determine the management responsibilities associated with PaaS database offerings.
In a PaaS database offering, the cloud provider (Microsoft) handles underlying infrastructure, virtualization, operating system updates, backups, high availability, and software patching.
This contrasts with IaaS where the customer must manually perform operating system and software maintenance.
3
Evaluate the statement to see if it correctly matches the PaaS model.
The statement claims the service is an IaaS offering and that the customer must manage patching. This is incorrect since the service is a PaaS offering where Microsoft manages patching.
To verify if the statement is true or false.

Anahtar Kavram

Azure Database for PostgreSQL is a fully managed Platform as a Service (PaaS) offering where Microsoft handles operating system and database engine updates, backups, and security patching.
Tahmini Süre:1m 0s
Soru 305Soru

An administrator manages several Azure subscriptions and wants to set up proactive alerts for any upcoming planned maintenance that might impact their Azure App Service plans.

Statement: Because Azure Service Health is a diagnostic-only dashboard, the administrator must configure Azure Monitor metric alerts to trigger notifications for these upcoming Microsoft-initiated maintenance events.

Is this statement true or false?

Cevabı ve açıklamayı göster

Cevap: False

Cevap

False
The correct answer is False because Azure Service Health supports native alerting for planned maintenance, service issues, and health advisories. These alerts are configured using activity logs rather than Azure Monitor metrics, which are reserved for numeric performance metrics.

Adım Adım Çözüm

1
Identify the service responsible for tracking platform-initiated maintenance events in Azure.
Azure Service Health (specifically the Service Health component) tracks planned maintenance, service issues, and health advisories.
Microsoft publishes maintenance schedules and service health state changes as log events within the Azure Service Health service.
2
Evaluate the alerting capabilities of Azure Service Health versus Azure Monitor metrics.
Azure Service Health allows direct configuration of Service Health alerts (which run as activity log alerts), whereas Azure Monitor metric alerts monitor resource performance metrics like CPU or memory utilization.
Platform events like planned maintenance do not generate numeric performance metrics; they are logged events that must be monitored via activity log alerts.

Anahtar Kavram

Azure Service Health alerting vs Azure Monitor metric alerts
Soru 306Soru

An administrator assigns a developer the built-in Contributor role for an Azure resource group. Which of the following tasks can the developer perform within this resource group? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Create new resources, such as virtual machines and storage accounts; Delete existing resources, such as virtual machines and storage accounts

Cevap

The developer can create new resources and delete existing resources within the resource group.
The Contributor role allows users to perform full resource management tasks, which include creating new resources and deleting existing resources within the resource group where they hold the role.

Adım Adım Çözüm

1
Determine the permissions associated with the Contributor role in Azure RBAC.
The Contributor role allows full access to create, update, and delete resources, but does not allow assigning roles or enforcing governance policies.
This establishes what resources the developer can manage.
2
Distinguish between Azure RBAC and Azure Policy.
Creating and deleting resources are RBAC actions. Restricting regions and enforcing tags are compliance actions handled by Azure Policy.
This filters out the distractors that confuse RBAC with Azure Policy.

Anahtar Kavram

Azure Role-Based Access Control (RBAC) grants specific permissions to manage Azure resources, whereas Azure Policy enforces compliance and resource properties.
Soru 307Soru

Your organization is planning to migrate three distinct database workloads to Azure. Each workload requires a specific database service.

Match each database workload requirement to the most appropriate Azure database service.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

A workload that requires a fully managed relational database service based on the open-source MySQL Community Edition.
A workload that requires a globally distributed, multi-model NoSQL database service with single-digit millisecond latency.
A workload that requires a fully managed relational database service built on Microsoft SQL Server technology.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Match the open-source MySQL workload to Azure Database for MySQL, the globally distributed NoSQL workload to Azure Cosmos DB, and the Microsoft SQL Server workload to Azure SQL Database.
The correct matches align each specific database requirement with its corresponding Azure service: the open-source MySQL requirement aligns with Azure Database for MySQL, the globally distributed NoSQL requirement aligns with Azure Cosmos DB, and the Microsoft SQL Server relational requirement aligns with Azure SQL Database.

Adım Adım Çözüm

1
Identify the database type and technology for the open-source MySQL requirement.
Azure Database for MySQL is the dedicated PaaS offering for MySQL.
This is a direct relational service matching MySQL Community Edition.
2
Identify the database service that provides global distribution, low latency, and NoSQL capabilities.
Azure Cosmos DB is the primary multi-model NoSQL database service in Azure.
Cosmos DB natively supports document, key-value, graph, and column-family data structures with global replication.
3
Identify the fully managed database service aligned with enterprise SQL Server workloads.
Azure SQL Database is the managed PaaS database based on SQL Server.
It offers built-in high availability, backups, and compatibility with standard SQL Server workloads.

Anahtar Kavram

Azure Database Services (Relational, Non-Relational, and Cosmos DB)
Soru 308Soru

A health department is designing a network architecture to connect its on-premises clinics to Azure. They need a primary connection for database replication that avoids the public internet entirely, and a secondary, cost-effective backup connection that encrypts data in transit.

Which two statements correctly describe how Azure hybrid networking services should be deployed for this scenario?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure ExpressRoute should be used for the primary connection because it provides a dedicated, private connection that bypasses the public internet.; An Azure Site-to-Site VPN gateway can be deployed to provide an encrypted tunnel over the public internet for the backup connection.

Cevap

The primary database replication connection should use Azure ExpressRoute because it is a private connection that bypasses the public internet. The backup connection should use an Azure Site-to-Site VPN gateway because it provides encrypted data transit over the public internet at a lower cost.
The option stating that Azure ExpressRoute should be used for the primary connection is correct because ExpressRoute provides a private connection that does not traverse the public internet. The option stating that a Site-to-Site VPN gateway can be deployed for the backup connection is correct because VPN gateways encrypt traffic in transit over the public internet, offering a cost-effective backup option.

Adım Adım Çözüm

1
Analyze the requirement for the primary connection.
The primary connection requires replicating databases without traversing the public internet.
Azure ExpressRoute is the only hybrid connectivity option that bypasses the public internet entirely by using a dedicated private connection.
2
Analyze the requirement for the backup connection.
The backup connection needs to be cost-effective and encrypt traffic in transit.
An Azure VPN Gateway creates an encrypted tunnel over the public internet, which is highly cost-effective and secures data in transit.
3
Evaluate the distractors against the hybrid model definition and ExpressRoute features.
ExpressRoute does not run over the public internet, and hybrid cloud architectures do not require all databases to be migrated to the public cloud.
This rules out the incorrect options regarding public internet routing for ExpressRoute and database location requirements for hybrid clouds.

Anahtar Kavram

Azure hybrid networking offers ExpressRoute for private, high-speed connections and VPN Gateways for encrypted connections over the public internet.
Tahmini Süre:1m 30s
Soru 309Soru

A logistics company hosts multiple testing workloads on virtual machines in Azure. After running a baseline check, the cloud administrator finds that several virtual machines are consistently underutilized, with CPU consumption remaining below 5% for two weeks. The company wants to find specific, automated recommendations on how to optimize their spending by either downscaling or shutting down these specific resources. Which Azure tool or service should the administrator use to obtain these recommendations?

Cevabı ve açıklamayı göster

Cevap: Azure Advisor

Cevap

Azure Advisor
Azure Advisor provides personalized recommendations to optimize Azure deployments. Under its Cost category, Azure Advisor analyzes virtual machine usage telemetry over the past 14 days to identify underutilized resources, recommending that the administrator either downscale or shut them down to save money.

Adım Adım Çözüm

1
Determine the cloud management objective from the scenario.
The objective is to analyze historical telemetry of deployed virtual machines and receive actionable recommendations to reduce expenditures.
Clarifying the requirement allows selection of a tool designed for post-deployment optimization.
2
Evaluate the specialized capabilities of each Azure tool.
Azure Advisor continuously monitors resource telemetry and offers recommendations across categories, specifically identifying underutilized virtual machines under the Cost category.
This matches the requirement to find optimization recommendations for active resources.

Anahtar Kavram

Azure Advisor Cost Recommendations
Tahmini Süre:1m 0s
Soru 310Soru

A financial services company is planning to migrate its applications to Microsoft Azure. The development team has the following hosting constraints:

* They need to run a web application that must automatically scale based on CPU usage and support continuous deployment from GitHub, but the team does not want to package the application as a container.
* They also need to run a small, isolated containerized task that executes a custom script for 10 minutes every night, and they want to avoid provisioning or managing any container orchestrators.

Which of the following Azure services should the team select to meet these constraints? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure App Service; Azure Container Instances

Cevap

The team should select Azure App Service to host the web application and Azure Container Instances to host the nightly containerized task.
The correct choices are the options representing Azure App Service and Azure Container Instances. Azure App Service allows hosting web applications without requiring containerization, and provides built-in auto-scaling and continuous deployment integrations. Azure Container Instances is a serverless container platform suited for running individual, short-lived containerized workloads without the overhead of provisioning or managing an orchestrator like Kubernetes.

Adım Adım Çözüm

1
Analyze the web application workload requirements.
The web application requires automatic scaling, continuous deployment, and no containerization, while minimizing infrastructure management. Azure App Service fits this as a PaaS compute service.
Choosing the service that matches the development team's preferences for packaging and deployment model.
2
Analyze the nightly container task workload requirements.
The nightly task is a short-lived containerized script that runs for 10 minutes. The team wants to avoid orchestrator management. Azure Container Instances is the serverless container service that runs containers on demand without cluster overhead.
Matching the container workload pattern to the right level of management and orchestration overhead.

Anahtar Kavram

Distinguishing features and use cases of Azure Container Instances, Azure Kubernetes Service, and Azure App Service.
Soru 311Soru

A logistics warehouse needs to establish a network connection from its local inventory servers to Azure resources. The technical requirements specify that the network traffic must be dedicated, private, and must not travel over the public internet.

Which service should the warehouse deploy to satisfy this requirement?

Cevabı ve açıklamayı göster

Cevap: Azure ExpressRoute

Cevap

Azure ExpressRoute
Azure ExpressRoute establishes a private, dedicated connection between on-premises infrastructure and Azure datacenters. Because this connection bypasses the public internet, it provides higher reliability, faster speeds, and lower latencies compared to typical internet-based connections.

Adım Adım Çözüm

1
Analyze the connectivity requirements of the logistics warehouse.
The requirements specify a dedicated, private connection that does not travel over the public internet.
This rules out services that route traffic over the public internet, such as standard VPN connections.
2
Evaluate the capabilities of Azure ExpressRoute.
Azure ExpressRoute establishes a direct, private connection to Azure datacenters, completely bypassing the public internet.
This directly aligns with the security and privacy needs of the warehouse.

Anahtar Kavram

Azure ExpressRoute provides private, dedicated network connections that bypass the public internet.
Soru 312Soru

You are managing a critical web application in Azure and need to check whether an active service outage in the Azure cloud infrastructure is currently affecting your deployment region. Which Azure tool should you use to check the status of Azure services across different regions and receive notifications about planned maintenance?

Cevabı ve açıklamayı göster

Cevap: Azure Service Health

Cevap

Azure Service Health
Azure Service Health provides a personalized dashboard of the health of your Azure services and regions, notifying you about service outages, planned maintenance, and health advisories.

Adım Adım Çözüm

1
Identify the goal of the administrator, which is to check for active Azure service outages and upcoming planned maintenance events.
Understanding that this requires monitoring Microsoft Azure's global infrastructure status.
Different Azure tools are designed for infrastructure-level health versus resource-specific performance telemetry.
2
Select the service designed for tracking personalized Azure service health, service issues, planned maintenance, and health advisories.
Azure Service Health matches these requirements.
Azure Service Health provides a customizable dashboard showing the health of the services in the regions that the user actually uses.

Anahtar Kavram

Azure Service Health is a service that monitors the health of your Azure services and regions, providing insights into active incidents, planned maintenance, and other advisories.
Soru 313Soru

A systems administrator is reviewing a draft architecture document that outlines the deployment of a new environment using Azure Bicep templates. The draft makes the following assumptions:
1. A database resource group can be nested inside a virtual network resource group to consolidate management.
2. Every resource deployed by the template must share the same physical location as the containing resource group.
3. Bicep templates operate as imperative, step-by-step execution scripts that specify the order of resource creation.

Which of the following statements correctly evaluates the feasibility of these three assumptions in Azure?

Cevabı ve açıklamayı göster

Cevap: None of the assumptions are feasible because resource groups cannot be nested, resources can reside in a different region than their resource group, and Bicep templates are declarative.

Cevap

None of the assumptions are feasible because resource groups cannot be nested, resources can reside in a different region than their resource group, and Bicep templates are declarative.
None of the assumptions are feasible. In Azure, resource groups cannot be nested inside other resource groups. Furthermore, the location of a resource group only dictates where its metadata is stored, meaning resources inside it can reside in different geographical regions. Lastly, Bicep and ARM templates are declarative configurations defining the desired state of infrastructure, rather than imperative, step-by-step scripting tools.

Adım Adım Çözüm

1
Evaluate the first assumption regarding resource group nesting.
Resource groups cannot be nested; they are flat logical containers directly under subscriptions.
Azure Resource Manager (ARM) does not support hierarchical nesting of resource groups.
2
Evaluate the second assumption regarding resource location requirements.
Resources do not need to match their resource group's location; they can be deployed to any supported region.
A resource group's location is only used to store metadata about the resources, not to restrict the deployment region of the resources themselves.
3
Evaluate the third assumption regarding the execution style of Bicep templates.
Bicep and ARM templates are declarative configurations that specify the target end-state, not imperative scripts.
Azure Resource Manager reads the declarative template and orchestrates the resource creation process automatically, making imperative scripting unnecessary.

Anahtar Kavram

Azure Resource Manager (ARM) template structure, deployment behaviors, and Resource Group properties.
Tahmini Süre:2m 0s
Soru 314Soru

An organization is planning to use Azure Blob Storage to store historical compliance data that will rarely be accessed. Is the following statement true: you can upload files directly to the Archive storage tier without first storing them in the Hot or Cool tiers?

Cevabı ve açıklamayı göster

Cevap: True

Cevap

True
Evaluating the statement as True is correct because Azure Blob Storage allows direct ingestion into the Archive tier. You do not need to stage files in the Hot or Cool tiers first.

Adım Adım Çözüm

1
Analyze the capabilities of Azure Blob Storage tiers.
Azure Blob Storage supports Hot, Cool, Cold, and Archive tiers for storing blob data.
Understanding the tier options helps determine how data can be onboarded.
2
Evaluate the upload pathways for the Archive tier.
Blobs can be uploaded directly to the Archive tier using the Azure Portal, AzCopy, PowerShell, Azure CLI, or storage SDKs by setting the access tier property during the upload operation.
This determines if a transition step from another tier is mandatory.
3
Verify if a prerequisite staging tier is required.
No staging tier is required; direct writes to the Archive tier are fully supported.
This directly confirms whether the statement is true or false.

Anahtar Kavram

Azure Blob Storage allows direct upload to the Archive storage tier, bypassing the need to transition data from the Hot or Cool tiers.
Tahmini Süre:1m 30s
Soru 315Soru

An administrator assigns an Azure Policy definition with the Deny effect to a resource group to prevent the creation of virtual machines that lack a 'CostCenter' tag. A user who holds the Owner role for the Azure subscription attempts to deploy a new virtual machine without this tag to the resource group. What is the result of this deployment attempt?

Cevabı ve açıklamayı göster

Cevap: The deployment is blocked, and the virtual machine is not created.

Cevap

The deployment is blocked, and the virtual machine is not created.
The correct option is that the deployment is blocked and the virtual machine is not created. Azure Policy evaluates resource creation requests before they are deployed. When a resource does not meet the policy criteria and the policy is configured with the Deny effect, the deployment is stopped immediately at the API level, preventing the resource from ever being created.

Adım Adım Çözüm

1
Identify the Azure Policy effect assigned.
The policy uses the Deny effect.
The Deny effect is designed to prevent resource creation requests that do not comply with the policy rules.
2
Evaluate the compliance of the deployment request.
The deployment request lacks the required 'CostCenter' tag, making it non-compliant.
The policy requires the 'CostCenter' tag to be present on all virtual machines.
3
Determine the impact of the user's role on policy enforcement.
The Owner role does not bypass policy enforcement.
Azure Policy rules are enforced at the resource provider level for all users, including those with elevated RBAC roles like Owner.
4
Determine the final outcome of the deployment request.
The deployment request is rejected, and the virtual machine is not created.
Because the resource is non-compliant and the policy effect is Deny, Azure Resource Manager blocks the deployment before it is initiated.

Anahtar Kavram

Azure Policy Deny Effect Enforcement
Tahmini Süre:45s
Soru 316Soru

A company's finance department wants to track and limit cloud spending for a new data warehousing project. The project's resources are deployed inside an Azure resource group named rg-data-warehouse. An administrator applies a tag named Project with a value of DataWarehouse directly to rg-data-warehouse, but does not apply any tags to the individual resources inside the group. To monitor this project's costs, the administrator configures a monthly budget in Azure Cost Management filtered by the tag Project: DataWarehouse. What is the result of this budget configuration on the tracking of the virtual machines and databases inside rg-data-warehouse?

Cevabı ve açıklamayı göster

Cevap: The budget will not track the costs of the virtual machines or databases because resources do not inherit tags from their resource group.

Cevap

The budget will not track the costs of the virtual machines or databases because resources do not inherit tags from their resource group.
The correct answer is correct because Azure resources do not inherit tags applied to their containing resource group. Since the budget is filtered by the tag Project: DataWarehouse and the resources inside the group do not have this tag, their costs will not be tracked by the budget.

Adım Adım Çözüm

1
Analyze where the tag is applied in the resource hierarchy.
The tag Project: DataWarehouse is applied to the resource group level only, not directly to the resources inside.
To identify which resources carry the filtering criteria.
2
Evaluate the tag inheritance rule for Azure resources.
Azure resources do not inherit tags from their parent resource group or subscription.
To determine if the virtual machines and databases are considered tagged.
3
Determine the behavior of the Azure Cost Management budget filter.
Because the budget is filtered by the tag, and the individual resources lack that tag, their resource costs are excluded from the budget evaluation.
To find the overall tracking result.

Anahtar Kavram

Azure resource tags are not inherited from resource groups or subscriptions, and Azure Cost Management filters based on these tags will exclude untagged child resources.
Soru 317Soru

A support specialist needs to monitor Azure resource health and perform basic management tasks while away from their office. Is it true or false that the Azure Portal experience is available as a mobile application for iOS and Android devices?

Cevabı ve açıklamayı göster

Cevap: True

Cevap

True
The statement is true because Microsoft offers a dedicated Azure mobile app for iOS and Android devices, bringing portal features and Cloud Shell access directly to mobile users.

Adım Adım Çözüm

1
Analyze the scenario requiring mobile access to monitor and manage Azure resources.
The administrator needs a mobile-compatible interface for Azure management.
To identify if a suitable tool exists for mobile platforms.
2
Evaluate the availability of the Azure Portal as a dedicated application on iOS and Android platforms.
Microsoft offers the official Azure mobile app, which delivers key Portal capabilities to these mobile operating systems.
To determine the truth value of the statement.

Anahtar Kavram

Azure Portal Mobile App
Tahmini Süre:45s
Soru 318Soru

An IT administrator needs to run a custom Bash script containing Azure CLI commands to automate the shutdown of non-essential resources. The administrator is currently away from their office and only has a personal tablet running iPadOS. Which Azure management tool should the administrator use to run this script without installing any command-line tools locally?

Cevabı ve açıklamayı göster

Cevap: Azure Cloud Shell

Cevap

Azure Cloud Shell
Azure Cloud Shell is a browser-accessible, cloud-hosted terminal that allows users to run Azure CLI commands without installing any local command-line tools. Since it is hosted in the cloud, it can be accessed from web browsers or the Azure Mobile App on tablet operating systems like iPadOS.

Adım Adım Çözüm

1
Identify that the script is a Bash script utilizing Azure CLI commands.
Requires an environment capable of interpreting Bash and executing Azure CLI commands.
Determines the execution requirements of the user script.
2
Evaluate the capabilities of the administrator's local device, which runs iPadOS.
iPadOS does not support the local installation of command-line tools like Azure CLI or Azure PowerShell.
Filters out tools that require local command-line environments on mobile/tablet platforms.
3
Determine which tool runs command-line scripts without needing a local command-line installation.
Azure Cloud Shell is cloud-hosted and accessible via a web browser or the Azure Mobile App, providing pre-installed command-line tools.
Identifies the correct browser-accessible, zero-install solution.

Anahtar Kavram

Azure Cloud Shell provides a browser-accessible, cloud-hosted shell for managing resources without local installation.
Tahmini Süre:1m 15s
Soru 319Soru

Your company has an Azure environment with a management group named MG1, a subscription named Sub1 under MG1, and a resource group named RG1 in Sub1. You need to assign permissions to your security and operations teams using Azure built-in roles.

Which of the following statements regarding the behavior of Azure Role-Based Access Control (RBAC) in this environment are correct? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A user assigned the Reader role at the MG1 management group level will have read-only access to all resource groups and resources in Sub1 due to role inheritance.; A user assigned the Contributor role at the Sub1 subscription level can manage resources within RG1, but cannot grant permissions to other users.

Cevap

The correct statements are that assigning the Reader role at the management group level grants read-only access to child subscriptions and resources due to role inheritance, and that a user with the Contributor role at the subscription level can manage resources within child resource groups but cannot grant permissions to other users.
Role assignments in Azure RBAC inherit down the resource hierarchy. Because MG1 is the parent of Sub1, assigning the Reader role at MG1 grants read-only access to all child resources within Sub1. Additionally, the Contributor role permits full resource management capabilities but explicitly lacks permissions to assign roles or delegate access to others. Therefore, a user with Contributor rights on Sub1 can create and modify resources within RG1 but cannot grant access to other identities.

Adım Adım Çözüm

1
Analyze role inheritance in the Azure hierarchy.
Permissions assigned at a parent scope (Management Group) inherit down to child scopes (Subscription, Resource Group, Resources). Thus, the Reader role at MG1 propagates to Sub1 and RG1.
To determine how assigning roles at different levels affects access down the hierarchy.
2
Evaluate the permissions of the Contributor role.
The Contributor role allows creating and managing resources but does not permit writing role assignments (delegating permissions). These permissions inherit from Sub1 down to RG1.
To verify if the Contributor role can manage resources and delegate access.
3
Distinguish between Azure RBAC and Azure Policy.
Enforcing resource compliance rules (like geographic region constraints or mandatory tags) requires Azure Policy. Azure RBAC only manages user access control.
To identify and eliminate options that incorrectly describe Azure Policy capabilities as RBAC functions.

Anahtar Kavram

Azure Role-Based Access Control (RBAC) scopes, inheritance, and distinction from Azure Policy.
Soru 320Soru

During an audit of a multi-region deployment, a security and compliance officer requires a solution to track upcoming Microsoft-planned security updates that will affect the specific database and compute instances deployed within the company's enterprise subscriptions. The solution must provide a personalized dashboard showing only the services and regions they currently use, rather than a general public status page or individual OS-level performance metrics. Which Azure service should the officer use to view these personalized upcoming maintenance events?

Cevabı ve açıklamayı göster

Cevap: Azure Service Health

Cevap

Azure Service Health
The correct service is the one that offers a personalized view of the health of Azure services and regions you are using. This dashboard covers service issues, planned maintenance, and health advisories that could impact your specific subscription resources. Thus, the option specifying the service health dashboard is correct.

Adım Adım Çözüm

1
Analyze the requirements: the solution must track upcoming Microsoft-planned updates (planned maintenance) affecting specific database and compute instances inside the company's subscriptions.
This requires a tool that provides information about planned maintenance and platform issues rather than application-level performance metrics.
This requirement rules out tools focused on user-configured workloads or guest-level metrics.
2
Evaluate the need for a personalized dashboard showing only used services and regions rather than global status.
This rules out the global Azure Status page, which is public and not filtered by subscription or active resource footprint.
A personalized view is required to focus only on services actually deployed by the customer.
3
Distinguish between subscription-level service health and individual resource health.
Azure Service Health is the dashboard that tracks service-wide issues, planned maintenance, and health advisories affecting subscriptions, whereas Azure Resource Health monitors individual resource availability.
The scenario asks to view upcoming planned maintenance across databases and compute instances within the subscription, which is handled centrally by Azure Service Health.

Anahtar Kavram

Azure Service Health provides personalized alerts and status updates regarding planned maintenance, service outages, and advisories affecting only the resources and regions in use within a subscription.
ÖncekiSayfa 16 / 60Sonraki
Tüm alıştırma soruları — Microsoft Azure Fundamentals (AZ-900) | Examkin