Tüm alıştırma soruları

1186 soru

Soru 361Soru

A developer is evaluating database services in Microsoft Azure for a new application. Is the following statement true? Azure Cosmos DB is classified as a relational database service because its default API uses SQL query syntax to retrieve semi-structured data?

Cevabı ve açıklamayı göster

Cevap: False

Cevap

False
The statement is false because Azure Cosmos DB is a non-relational (NoSQL) database service. It is schema-agnostic and designed to handle unstructured or semi-structured data. The use of SQL-like query syntax in its default API does not impose relational constraints or schemas on the database.

Adım Adım Çözüm

1
Determine the database classification of Azure Cosmos DB.
Azure Cosmos DB is a non-relational (NoSQL) database service.
It is designed to scale horizontally and handle semi-structured data without a fixed schema.
2
Analyze how the query interface relates to the database type.
The SQL query interface provides a familiar syntax for developers but does not change the database into a relational database.
A relational database enforces constraints such as tables, relations, and foreign keys, which Azure Cosmos DB does not enforce.

Anahtar Kavram

Azure Cosmos DB is a non-relational (NoSQL) database service, even though its default API uses SQL syntax for querying.
Soru 362Soru

A retail company operates physical servers at their store locations to run their point-of-sale systems. The finance team wants to compare the costs of maintaining this on-premises hardware with the costs of migrating these workloads to Microsoft Azure. Which tool should they use?

Cevabı ve açıklamayı göster

Cevap: Azure Total Cost of Ownership (TCO) Calculator

Cevap

Azure Total Cost of Ownership (TCO) Calculator
The Azure Total Cost of Ownership (TCO) Calculator is the correct tool because it helps organizations compare the costs of keeping their workloads on-premises with the costs of migrating those workloads to Azure, providing a side-by-side financial comparison report.

Adım Adım Çözüm

1
Identify the core requirement of the scenario, which is to compare the financial costs of running on-premises servers (CapEx model) against running them in Azure (OpEx model).
On-premises vs. cloud cost comparison is required.
Understanding the starting point (on-premises) and the destination (Azure) helps determine the right tool for comparison.
2
Evaluate the available tools. The TCO Calculator allows inputting current on-premises server, database, storage, and networking parameters to produce a detailed cost comparison report against Azure services.
Azure Total Cost of Ownership (TCO) Calculator is selected.
The TCO Calculator is explicitly built for comparing current on-premises datacenter costs to future Azure costs.

Anahtar Kavram

Azure Total Cost of Ownership (TCO) Calculator
Soru 363Soru

An IT manager wants to ensure that developers cannot create public IP addresses in a development subscription, but they should still be able to create all other resource types. Which Azure feature should be used to enforce this restriction?

Cevabı ve açıklamayı göster

Cevap: Azure Policy

Cevap

Azure Policy
Azure Policy is correct because it allows administrators to define rules that enforce resource properties, such as blocking the creation of specific resource types (like public IP addresses) or limiting deployments to allowed SKUs and locations.

Adım Adım Çözüm

1
Analyze the requirement to block the creation of a specific resource type (public IP addresses) while allowing other deployments.
Identify that the restriction is based on resource configuration properties rather than user identity.
This helps distinguish between user-based authorization and resource-based compliance.
2
Evaluate the capabilities of Azure Policy and Azure Role-Based Access Control (RBAC).
Determine that RBAC controls 'who' has access, whereas Azure Policy controls 'what' can be created based on resource properties.
This rules out RBAC as it cannot block specific resource types if the user has overall contributor rights.
3
Select the governance feature designed to enforce resource compliance and prevent the creation of non-conforming resources.
Azure Policy is the correct service because it can evaluate resource properties during deployment and deny non-compliant actions.
Azure Policy provides the exact capability needed to enforce resource-level restrictions.

Anahtar Kavram

Azure Policy is used to enforce resource compliance and restrict resource properties during deployment.
Soru 364Soru

A university IT department is planning to shut down their physical server rooms and migrate all student portals to Azure. They need to generate a financial report comparing the overall costs of their current physical hardware, electricity, and licensing against equivalent Azure services.

Is the statement that the Total Cost of Ownership (TCO) Calculator is the appropriate tool for this comparison true or false?

Cevabı ve açıklamayı göster

Cevap: True

Cevap

True
The correct answer is True because the Total Cost of Ownership (TCO) Calculator is the correct tool to estimate cost savings when migrating existing workloads from an on-premises environment to Azure, taking into account physical infrastructure, energy, and labor costs.

Adım Adım Çözüm

1
Identify the organization's requirement, which is to compare existing on-premises datacenter costs (hardware, power, licensing) against equivalent Azure services.
The requirement focuses on a migration comparison between on-premises and cloud models.
This determines whether a comparison tool or a new service estimation tool is needed.
2
Evaluate the purpose of the Total Cost of Ownership (TCO) Calculator.
The TCO Calculator is designed specifically to compare the costs of running on-premises infrastructure against Azure.
To verify if the tool mentioned in the statement matches the identified requirement.

Anahtar Kavram

The Total Cost of Ownership (TCO) Calculator is used to compare the costs of on-premises infrastructure with equivalent Azure services to estimate migration savings, whereas the Azure Pricing Calculator is used to estimate the configuration costs of individual new Azure services.
Soru 365Soru

A company stores rarely accessed files in the Archive storage tier of Azure Blob Storage. An administrator needs to access one of these files. What must the administrator do before they can read the file?

Cevabı ve açıklamayı göster

Cevap: Rehydrate the blob to either the Hot or Cool storage tier

Cevap

Rehydrate the blob to either the Hot or Cool storage tier
The correct answer is to rehydrate the blob to either the Hot or Cool storage tier. The Archive tier is an offline tier used for storing data that is rarely accessed. Because the data is offline, it cannot be read directly. To read the blob, you must change its tier to Hot or Cool, which initiates a rehydration process.

Adım Adım Çözüm

1
Identify the current storage tier of the blob.
The blob is currently in the Archive tier, which is an offline tier.
Knowing the tier status helps determine why it cannot be read directly.
2
Initiate the rehydration process by changing the tier of the blob.
The blob's tier is changed to Hot or Cool, and the rehydration process begins.
Rehydration copies the offline archived data to an online tier.
3
Wait for the rehydration process to complete.
The blob becomes online and is accessible for read operations.
Once the blob is fully rehydrated, the standard APIs can read its content.

Anahtar Kavram

Azure Blob Storage Archive tier data must be rehydrated to an online tier (Hot or Cool) before it can be read.
Soru 366Soru

A company is planning to deploy Azure virtual machines (IaaS) and configure storage solutions for different workloads. Which two statements describe the correct configuration or behavior of Azure storage? (Select two)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Disk Storage is used to host the operating system disks for Azure virtual machines.; Blobs stored in the Archive access tier must be rehydrated to an active tier before they can be read.

Cevap

Azure Disk Storage is used to host the operating system disks for Azure virtual machines, and blobs stored in the Archive access tier must be rehydrated to an active tier before they can be read.
Azure Disk Storage is the correct service for hosting virtual machine operating system disks because it provides persistent block storage. Additionally, the Archive tier of Azure Blob Storage is an offline storage tier designed for rarely accessed data, which requires a rehydration process to either the Hot or Cool tier before it can be read or accessed.

Adım Adım Çözüm

1
Identify the storage requirements for Virtual Machine OS disks.
Azure Disk Storage provides block storage volumes that are attached to virtual machines.
Virtual machines require persistent block storage (disks) for their operating systems rather than object or file storage.
2
Evaluate the behavior of the Archive storage tier.
Data in the Archive tier is stored offline and cannot be read directly without being moved back to an online tier.
The Archive tier is optimized for rare access and lower costs, requiring a rehydration process that can take several hours.
3
Verify shared responsibility boundaries for Infrastructure as a Service (IaaS).
The customer retains full administrative control and responsibility over the VM operating system and data.
IaaS shifts physical hardware management to the cloud provider, but operating system patching and data management remain the customer's responsibility.

Anahtar Kavram

Azure storage options differ by latency, access tier capability, and shared responsibility bounds.
Soru 367Soru

An enterprise is optimizing its cloud infrastructure and wants to understand the operational boundaries of various Azure management tools. Which of the following scenarios describes a task that is performed by Azure Advisor rather than Azure Policy or Azure Monitor?

Cevabı ve açıklamayı göster

Cevap: Generating personalized recommendations to right-size or shut down underutilized virtual machines to optimize monthly spending

Cevap

Generating personalized recommendations to right-size or shut down underutilized virtual machines to optimize monthly spending
The correct answer describes a key feature of Azure Advisor, which evaluates resource telemetry and configuration to suggest optimizations such as resizing or shutting down underutilized virtual machines to save costs. Unlike other management tools, Advisor provides recommendations but does not directly enforce compliance or collect real-time metrics for direct scaling actions.

Adım Adım Çözüm

1
Analyze the role of Azure Advisor.
Identify that Azure Advisor acts as a personalized cloud consultant, providing proactive, actionable recommendations across cost, security, reliability, performance, and operational excellence by analyzing resource configuration and telemetry.
This establishes the core capability of the tool being tested.
2
Evaluate the choices against the operational boundaries of Azure management tools.
Determine that right-sizing recommendations are advisor-driven, whereas active policy enforcement is done by Azure Policy, telemetry collection/auto-scaling is done by Azure Monitor, and service outages are tracked by Azure Service Health.
This eliminates the distractors and identifies the correct choice.

Anahtar Kavram

Azure Advisor provides non-intrusive, personalized recommendations to optimize Azure resources based on best practices across five core categories.
Tahmini Süre:1m 30s
Soru 368Soru

An enterprise is designing a centralized operations strategy to manage their Azure deployments. The operations team needs to distinguish between tracking the health and performance of their deployed resources versus tracking global outages and planned maintenance of the Azure platform itself. Which of the following statements correctly identify the features or use cases of Azure Monitor compared to Azure Service Health? Select two.

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Monitor collects and analyzes telemetry data, such as resource metrics and activity logs, from your specific Azure resources to maximize their availability and performance.; Azure Service Health notifies you about Azure service incidents, planned maintenance, and resource health degradation caused by issues in the underlying Azure infrastructure.

Cevap

The correct statements are that Azure Monitor collects and analyzes telemetry data from your specific Azure resources to maximize their availability and performance, and Azure Service Health notifies you about Azure service incidents, planned maintenance, and resource health degradation caused by issues in the underlying Azure infrastructure.
The statement regarding Azure Monitor is correct because Azure Monitor is the core tool for collecting, analyzing, and alerting on performance telemetry from resources you deploy. The statement regarding Azure Service Health is correct because it informs you about platform-level events, outages, and maintenance that impact your subscriptions.

Adım Adım Çözüm

1
Identify the primary purpose of Azure Monitor.
Azure Monitor is designed for collecting, analyzing, and acting on telemetry from your own applications and resources (like virtual machine metrics or application logs).
This helps determine which statements correctly describe Azure Monitor.
2
Identify the primary purpose of Azure Service Health.
Azure Service Health notifies you about Azure service incidents, planned maintenance, and other events that affect the underlying Azure platform itself.
This helps determine which statements correctly describe Azure Service Health.
3
Evaluate the options against these definitions.
The statement about Azure Monitor collecting telemetry is correct. The statement about Azure Service Health notifying you of platform incidents is correct. The statement about using Azure Service Health for KQL queries is incorrect. The statement about Azure Monitor alerting on global platform outages is incorrect.
This isolates the correct options.

Anahtar Kavram

Distinction between Azure Monitor and Azure Service Health
Soru 369Soru

An enterprise is planning to establish a hybrid cloud environment by connecting its on-premises headquarters to an Azure Virtual Network. They require a high-speed, reliable primary connection that does not traverse the public internet. They also require a secondary, encrypted backup connection that utilizes their existing public internet infrastructure. Which two of the following statements correctly describe the connectivity services the enterprise should implement? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure ExpressRoute should be used for the primary connection because it provides a dedicated, private connection to Azure that does not traverse the public internet.; Azure VPN Gateway should be used for the backup connection because it establishes an encrypted tunnel over the public internet.

Cevap

The correct statements are that Azure ExpressRoute should be used for the primary connection because it provides a dedicated, private connection to Azure that does not traverse the public internet, and Azure VPN Gateway should be used for the backup connection because it establishes an encrypted tunnel over the public internet.
The correct options are the statements regarding Azure ExpressRoute for the primary connection and Azure VPN Gateway for the backup connection. ExpressRoute provides a private, dedicated path that avoids the public internet, satisfying the high-speed and security requirements. VPN Gateway provides encrypted site-to-site tunnels over the public internet, serving as a cost-effective backup path.

Adım Adım Çözüm

1
Analyze the primary connection requirements
The primary connection must be high-speed, reliable, and bypass the public internet. This aligns with the capabilities of Azure ExpressRoute.
ExpressRoute uses dedicated private connections to connect on-premises environments to Azure without using the public internet.
2
Analyze the backup connection requirements
The backup connection must be encrypted and utilize the existing public internet. This aligns with the capabilities of Azure VPN Gateway.
VPN Gateways establish secure, encrypted Site-to-Site tunnels over the public internet to connect on-premises sites to Azure VNets.
3
Evaluate the distractors
The statement about ExpressRoute routing over the internet is false because ExpressRoute uses private paths. The statement about Virtual Network Peering is false because Peering connects VNets in Azure, not on-premises networks to Azure.
Differentiating these services prevents misconfiguring the architecture.

Anahtar Kavram

Azure hybrid networking options including Azure ExpressRoute for private connectivity and Azure VPN Gateway for encrypted public internet connectivity.
Soru 370Soru

A logistics company is planning to deploy two workloads on Azure with specific deployment requirements:

* Workload 1: A simple background task that processes queue messages inside a container for a few minutes daily, with no need for multi-container orchestration.
* Workload 2: A client-facing web application that requires deployment slots and automated operating system patching managed entirely by Microsoft.

Which two Azure services should the company select to satisfy these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Container Instances; Azure App Service

Cevap

Azure Container Instances and Azure App Service
Azure Container Instances is the correct service for Workload 1 because it allows running a simple container without orchestrator overhead. Azure App Service is the correct service for Workload 2 because it is a managed PaaS offering that provides deployment slots and automated operating system patching.

Adım Adım Çözüm

1
Identify the requirements of the first workload
Workload 1 requires running a simple, short-lived container task without multi-container orchestration. Azure Container Instances is the appropriate service because it provides simple, serverless container execution without VM management.
Matching workload needs to the correct service type ensures operational efficiency and avoids unnecessary overhead.
2
Identify the requirements of the second workload
Workload 2 requires hosting a web application with deployment slots and automated OS-level patching. Azure App Service, as a Platform as a Service (PaaS) offering, fully manages operating system updates and natively supports deployment slots.
Aligning PaaS features with development and operational constraints minimizes management responsibility.
3
Evaluate and eliminate incorrect options
Azure Kubernetes Service is eliminated because it is designed for complex container orchestration and adds unnecessary management overhead. Azure Virtual Machines is eliminated because it is an IaaS service where the customer must manage and patch the operating system.
Ensuring the selected services do not violate constraints like OS patching ownership or introduce unnecessary complexity.

Anahtar Kavram

Selecting container and web hosting services based on management overhead and orchestration requirements
Soru 371Soru

An administrator needs to grant a user named Pat the ability to manage all resources within a resource group named RG-Compute, including the ability to assign permissions to other users. The administrator also wants to ensure that all resources deployed within RG-Compute comply with a corporate rule that restricts deployments to the 'West US' region.

Which combination of Azure features should the administrator use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Assign Pat the Owner role for RG-Compute, and assign an Azure Policy to RG-Compute to restrict the deployment region.

Cevap

Assign Pat the Owner role for RG-Compute, and assign an Azure Policy to RG-Compute to restrict the deployment region.
Assigning Pat the Owner role for the resource group provides the necessary permissions to manage resources and delegate access control to others. Since Azure RBAC cannot enforce resource property restrictions, an Azure Policy must be applied to the resource group to restrict resource deployments to the 'West US' region.

Adım Adım Çözüm

1
Analyze the access control requirements for Pat.
Pat requires full resource management capabilities and the ability to assign permissions to others.
This determines which Azure RBAC role needs to be assigned.
2
Evaluate the built-in RBAC roles for the resource group scope.
The Owner role provides full resource management and role delegation capabilities. The Contributor role lacks role delegation, and the User Access Administrator role lacks resource management.
Only the Owner role satisfies all access control requirements.
3
Analyze the resource compliance requirement.
Resources must be restricted to the 'West US' region.
This determines which Azure governance feature should be applied.
4
Select the governance tool for resource property enforcement.
Azure Policy is designed to enforce resource properties (like location compliance). Azure RBAC controls access and cannot enforce resource properties.
Azure Policy must be used to restrict resource deployment regions.

Anahtar Kavram

Understanding the difference between Azure RBAC (identity-based access management) and Azure Policy (resource property compliance and enforcement), and how scopes and built-in roles inherit permissions.
Tahmini Süre:1m 0s
Soru 372Soru

A systems administrator needs to run a script containing Azure PowerShell cmdlets locally on a workstation running Linux. Which statement correctly describes the capability of Azure PowerShell for this task?

Cevabı ve açıklamayı göster

Cevap: Azure PowerShell can be installed and run locally on Linux because it supports cross-platform execution via PowerShell Core.

Cevap

Azure PowerShell can be installed and run locally on Linux because it supports cross-platform execution via PowerShell Core.
Azure PowerShell is cross-platform. By installing PowerShell Core on Linux, administrators can install the Az PowerShell module and run Azure PowerShell cmdlets natively on a Linux machine.

Adım Adım Çözüm

1
Identify the operating system requirements for the administrative task.
The target workstation is running Linux.
Understanding the local environment is necessary to determine tool compatibility.
2
Evaluate the cross-platform capabilities of Azure PowerShell.
Azure PowerShell is compatible with Windows, macOS, and Linux operating systems via PowerShell Core.
This determines whether the local script execution is supported on Linux.

Anahtar Kavram

Azure command-line management tools, including Azure CLI and Azure PowerShell, are cross-platform and can be run locally on Windows, macOS, and Linux.
Tahmini Süre:1m 0s
Soru 373Soru

A company has migrated several applications to Microsoft Azure. The IT director wants to ensure that the administration team receives email notifications whenever there is an infrastructure outage in a region where their resources are deployed, without receiving alerts for regions they do not use. Which feature should they configure to achieve this?

Cevabı ve açıklamayı göster

Cevap: Azure Service Health alerts

Cevap

Azure Service Health alerts
Azure Service Health alerts allow users to create customized alerts that notify them when Azure service issues, planned maintenance, or other advisories affect their specific subscriptions and resources.

Adım Adım Çözüm

1
Analyze the requirement to receive notifications for Azure infrastructure outages and maintenance that affect specific subscriptions.
The requirement is specifically about platform-level health events that affect tenant resources.
Distinguishing between resource-level telemetry and platform-level infrastructure health is critical for choosing the right tool.
2
Compare Azure Monitor and Azure Service Health capabilities.
Azure Service Health is the dedicated service for tracking platform-level issues and maintenance, whereas Azure Monitor tracks user-deployed resource performance.
Selecting the service designed for tenant-specific platform notifications ensures alerts are correctly filtered.

Anahtar Kavram

Azure Service Health alerts provide personalized notifications about Azure service issues, planned maintenance, and other health advisories that impact your specific resources.
Soru 374Soru

A university needs to establish a hybrid connection between its local campus network and an Azure Virtual Network to access administrative databases. The connection must use the university's existing public internet connection, provide encrypted data transit, and keep setup costs to a minimum. Which Azure service should the university implement to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Azure VPN Gateway

Cevap

Azure VPN Gateway
Azure VPN Gateway is correct because it uses an encrypted tunnel to connect an on-premises network to an Azure Virtual Network over the public internet, keeping costs low compared to dedicated private lines.

Adım Adım Çözüm

1
Identify the hybrid connectivity requirements: use of the existing public internet connection, encrypted transit, and minimal setup costs.
Eliminate options that do not connect on-premises environments or that bypass the public internet.
Azure ExpressRoute bypasses the public internet and requires a dedicated circuit, while Azure Virtual Network Peering connects virtual networks within Azure itself rather than connecting on-premises networks to Azure.
2
Select the service that establishes a secure connection over the public internet to complete the hybrid connectivity setup.
Azure VPN Gateway is identified as the correct service.
An Azure VPN Gateway uses a Site-to-Site VPN connection to send encrypted traffic over the public internet, matching all university requirements.

Anahtar Kavram

Azure VPN Gateway hybrid connectivity over the public internet
Tahmini Süre:1m 30s
Soru 375Soru

A company plans to migrate a custom web API to Azure. The development team wants to deploy the application code directly without packaging it into container images or managing the underlying web server software. Additionally, the team requires that Microsoft automatically handles operating system updates and security patches.

Which Azure service should the company select to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Azure App Service

Cevap

Azure App Service
Azure App Service is a Platform as a Service (PaaS) offering designed to host web applications, REST APIs, and mobile backends. In a PaaS model, Microsoft manages the hardware, operating system, and web server software, including all updates and security patching. Developers can deploy their application code directly to the service without having to containerize it first.

Adım Adım Çözüm

1
Identify the deployment format and infrastructure management constraints from the scenario.
The application code must be deployed directly without containerization, and the operating system must be patched automatically by Microsoft.
This establishes the requirements needed to distinguish between IaaS, PaaS, and container hosting options.
2
Evaluate the capabilities of each option against the constraints.
Azure Virtual Machines requires manual OS management. Azure Kubernetes Service requires containerization. Microsoft 365 is a SaaS product and cannot host custom APIs. Azure App Service is a PaaS solution that supports direct code deployment and automates OS updates.
Matching the requirements to the correct service model determines the appropriate target service.

Anahtar Kavram

Distinguishing the management responsibilities and deployment constraints of Azure App Service from Infrastructure as a Service (IaaS) and container-based offerings.
Tahmini Süre:1m 0s
Soru 376Soru

A company plans to deploy a multi-tier web application to Azure. The operations team must implement a monitoring solution that meets the following requirements:

1. Track CPU utilization metrics of the Virtual Machine Scale Sets hosting the application and automatically scale resources when load increases.
2. Run complex queries on application log files to analyze traffic patterns over the past 30 days.
3. Receive automated notifications and updates regarding planned maintenance events and service outages affecting the Azure region where the application is hosted.

Which of the following configurations should the operations team implement to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Azure Monitor to track CPU metrics and trigger autoscaling, Azure Log Analytics to run queries on application log files, and Azure Service Health to receive notifications about planned maintenance and service outages

Cevap

The correct configuration is to use Azure Monitor to track CPU metrics and trigger autoscaling, Azure Log Analytics to run queries on application log files, and Azure Service Health to receive notifications about planned maintenance and service outages.
The correct configuration uses Azure Monitor to collect and act on resource-level metrics (CPU utilization and autoscaling), Azure Log Analytics to run queries (using KQL) on application logs, and Azure Service Health to notify the team of platform-level events (planned maintenance and regional outages).

Adım Adım Çözüm

1
Identify the tool required for tracking resource-specific metrics (CPU utilization) and triggering autoscaling.
Azure Monitor is designed for collecting and analyzing resource-level telemetry (metrics and logs) and can trigger alerts or autoscaling rules based on these metrics.
Resource-level monitoring and actions are within the scope of Azure Monitor, not Azure Service Health.
2
Identify the tool required for querying and analyzing application log files over a 30-day period.
Azure Log Analytics (a feature of Azure Monitor) uses Kusto Query Language (KQL) to query log data stored in a Log Analytics workspace.
Log Analytics provides the storage and querying interface for custom application logs.
3
Identify the tool required for receiving notifications about planned maintenance and service outages at the Azure platform level.
Azure Service Health provides personalized alerts and guidance when Azure service issues, planned maintenance, or health advisories affect your subscriptions and regions.
Platform-level health events are tracked by Azure Service Health, distinct from the resource-level health monitored by Azure Monitor.

Anahtar Kavram

Azure Monitor collects and analyzes telemetry data from specific Azure resources, whereas Azure Service Health provides notifications about global Azure platform outages and planned maintenance events affecting your subscription and region.
Tahmini Süre:2m 0s
Soru 377Soru

A company needs to automate the deployment of multiple virtual networks and storage accounts. The IT team wants to define the desired end-state of the infrastructure in a file and let Azure handle the creation order of the resources, rather than writing step-by-step execution scripts. Which Azure feature should the team use?

Cevabı ve açıklamayı göster

Cevap: Azure Resource Manager (ARM) templates

Cevap

Azure Resource Manager (ARM) templates
Azure Resource Manager (ARM) templates use a declarative syntax, which allows you to define the resources you want to deploy (such as virtual networks and storage accounts) without needing to write sequence commands. Azure Resource Manager coordinates the deployment and resolves dependencies automatically.

Adım Adım Çözüm

1
Identify the requirement of deploying Azure resources using a file that defines the desired end-state (declarative approach) rather than writing step-by-step scripts (imperative approach).
The requirement points to a declarative infrastructure as code (IaC) tool native to Azure.
Declarative tools allow users to describe what resources they need without writing the procedural code to create them.
2
Select the Azure feature designed for declarative template-based deployments.
Azure Resource Manager (ARM) templates provide this declarative deployment capability.
ARM templates use JSON (or Bicep syntax) to define infrastructure declaratively, letting Azure orchestrate the creation and dependencies automatically.

Anahtar Kavram

Azure Resource Manager templates are declarative configuration files used to define and deploy infrastructure in a consistent, repeatable manner.
Tahmini Süre:45s
Soru 378Soru

An enterprise is designing a cost reporting structure to track their Azure spending. The finance team wants to ensure that all virtual machine costs are tracked as operational expenditure (OpEx) and grouped by department. An administrator applies a tag named Department with a value of Finance to a resource group. The resource group contains a virtual machine that has no tags. How are the costs of the virtual machine classified in Azure Cost Management when running a cost analysis report?

Cevabı ve açıklamayı göster

Cevap: They are classified as operational expenditure (OpEx) and are categorized as untagged.

Cevap

They are classified as operational expenditure (OpEx) and are categorized as untagged.
The correct answer states that the costs are classified as operational expenditure (OpEx) and are categorized as untagged. Under the consumption-based cloud model, ongoing costs for running virtual machines are classified as OpEx. Additionally, because Azure resource tags are not inherited from resource groups, the virtual machine does not receive the 'Department' tag, resulting in its costs being categorized as untagged when running a grouped cost report.

Adım Adım Çözüm

1
Determine the billing classification of the Azure Virtual Machine.
Since Azure virtual machines run on a consumption-based model where you pay for what you use, their costs represent ongoing operational costs and are classified as operational expenditure (OpEx).
This establishes the basic financial classification under Azure's consumption model.
2
Determine if the tag applied to the resource group is inherited by the virtual machine.
Tags applied to a resource group are not inherited by the resources inside that resource group. The virtual machine remains untagged.
This evaluates the governance and tagging inheritance behavior in Azure.
3
Identify how the untagged virtual machine's costs appear in the Cost Analysis report.
Because the virtual machine has no tags, grouping by the 'Department' tag key will list its costs under the 'Untagged' category.
This determines the final categorization in the Azure Cost Management report.

Anahtar Kavram

Azure resource tags do not inherit from resource groups, and consumption-based cloud resources are categorized as operational expenditure (OpEx).
Tahmini Süre:2m 0s
Soru 379Soru

An organization assigns a newly hired auditor the built-in Reader role at the subscription scope. The auditor needs to verify access and compliance settings across all resource groups. Which of the following capabilities will the auditor have? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: View the configurations of all virtual machines and storage accounts in the subscription.; View which users, groups, and service principals have access permissions assigned to resources.

Cevap

The auditor can view the configurations of all virtual machines and storage accounts in the subscription, and they can view which users, groups, and service principals have access permissions assigned to resources.
The built-in Reader role allows users to view all resources within the scope of the assignment and read their properties, configurations, and the access control settings (IAM) showing who has role assignments on those resources.

Adım Adım Çözüm

1
Analyze the built-in Azure Reader role capabilities.
The Reader role grants read-only access to resources and access control lists (IAM) but does not grant modification permissions or access management capabilities.
This establishes what the Reader role is allowed to do at the assigned scope.
2
Determine if viewing configurations and permissions falls under the Reader role's capabilities.
Viewing virtual machine/storage configurations and viewing role assignments are both read-only actions, so they are allowed.
This identifies the correct capabilities for the scenario.
3
Evaluate the other options against Azure administration concepts.
Restricting deployment regions is an Azure Policy function, and assigning roles to others requires Owner or User Access Administrator permissions, which are not included in the Reader role.
This rules out the incorrect options.

Anahtar Kavram

Azure Role-Based Access Control (RBAC)
Tahmini Süre:1m 30s
Soru 380Soru

An educational institution hosts its online learning management system (LMS) on Azure virtual machines. The IT department wants to leverage Azure Advisor to optimize their cloud resources. Which of the following optimization tasks can the IT department accomplish by following Azure Advisor recommendations? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Identify virtual machines with low CPU utilization and recommend right-sizing or shutting them down to reduce costs.; Identify virtual machines that do not have Azure Backup enabled and recommend enabling it to improve reliability.

Cevap

Azure Advisor can identify underutilized virtual machines to suggest cost-saving measures, and identify virtual machines lacking backup configurations to recommend reliability improvements.
Azure Advisor provides personalized recommendations based on your resource usage. It helps optimize deployments under five pillars. For Cost, it identifies underutilized virtual machines to suggest resizing or shutting them down. For Reliability, it identifies virtual machines without Azure Backup to recommend enabling protection.

Adım Adım Çözüm

1
Analyze the scope of Azure Advisor capabilities.
Azure Advisor is a personalized cloud consultant that helps follow best practices across five pillars: Cost, Security, Reliability, Performance, and Operational Excellence by providing recommendations.
Understanding what Azure Advisor does is necessary to filter out features of other Azure management tools.
2
Evaluate the correct options based on Advisor pillars.
Identifying underutilized VMs belongs to the Cost pillar. Recommending Azure Backup for VMs belongs to the Reliability pillar. Both are native Advisor recommendations.
To select the two correct recommendations that Azure Advisor provides.
3
Evaluate the incorrect options to identify misaligned management tools.
Automatic tag inheritance is a policy enforcement action (Azure Policy / governance). Real-time telemetry monitoring and regional service outage alerts are handled by Azure Monitor and Azure Service Health.
To verify that the other options describe functionalities of other Azure management and monitoring services.

Anahtar Kavram

Azure Advisor recommendation categories and tool boundaries
Tahmini Süre:1m 30s
ÖncekiSayfa 19 / 60Sonraki
Tüm alıştırma soruları — Microsoft Azure Fundamentals (AZ-900) | Examkin