Tüm alıştırma soruları

Soru 21Soru →

An organization is establishing governance and operational procedures for its Microsoft Azure environment. The administration team needs to align specific operational requirements with the correct Azure management tools. Match each operational requirement on the left to the corresponding Azure service or tool on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Analyzing utilization for recommendations matches Azure Advisor; defining rules for compliance matches Azure Policy; collecting telemetry matches Azure Monitor; and monitoring security posture matches Microsoft Defender for Cloud.

Matching the operational requirements to the tools correctly identifies the unique function of each tool. Azure Advisor is the correct match for analyzing resources to provide optimization recommendations across the five pillars. Azure Policy is the correct match for enforcing standards and blocking non-compliant resources. Azure Monitor is the correct match for logging and telemetry collection. Microsoft Defender for Cloud is the correct match for threat protection and generating a secure score.

Adım Adım Çözüm

1

Identify the service that evaluates active resources against five pillars (cost, security, reliability, performance, operational excellence) to give personalized recommendations.

This aligns directly with Azure Advisor.

Azure Advisor is designed specifically to provide optimization recommendations across these core domains.

2

Identify the service used to enforce rules and prevent non-compliant deployments.

This aligns with Azure Policy.

Azure Policy evaluates resources and blocks non-compliant resource creation or updates.

3

Identify the service that acts as the central hub for collecting logs and metrics.

This aligns with Azure Monitor.

Azure Monitor gathers telemetry data from resources and allows querying and alerting.

4

Identify the service focused on hybrid threat detection, security posture, and the secure score.

This aligns with Microsoft Defender for Cloud.

Microsoft Defender for Cloud is dedicated to security posture assessment and threat protection.

Anahtar Kavram

Azure Management and Governance Service Boundaries

Soru 22Soru →

An organization is evaluating database migration options and new application deployments in Microsoft Azure. How should the organization match each application workload requirement to the most appropriate Azure database service?

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

The correct pairings match Azure Cosmos DB with the globally distributed NoSQL workload, Azure SQL Database with the fully managed relational SQL Server workload without OS access, SQL Server on Azure Virtual Machines with the legacy SQL Server workload requiring OS access, and Azure Database for PostgreSQL with the open-source PostgreSQL workload.

The pairings are correct because Azure Cosmos DB provides globally distributed NoSQL capabilities. Azure SQL Database provides a managed PaaS experience for SQL Server relational databases. SQL Server on Azure Virtual Machines provides full OS access under the IaaS model. Azure Database for PostgreSQL provides a managed database service for open-source PostgreSQL workloads.

Adım Adım Çözüm

1

Analyze the requirements for the first workload: a globally distributed NoSQL database with multi-model API support.

Identify that Azure Cosmos DB is the only Azure NoSQL database offering global distribution and multiple API compatibilities (such as MongoDB, Cassandra).

Cosmos DB is designed for horizontal scale-out NoSQL workloads across regions.

2

Analyze the requirements for the second workload: a fully managed relational database using the SQL Server engine without OS access.

Identify that Azure SQL Database is the Platform as a Service (PaaS) offering for SQL Server that abstracts the underlying OS.

PaaS database services like Azure SQL Database handle patching and administration without exposing the operating system.

3

Analyze the requirements for the third workload: a legacy database needing SQL Server with host-level OS access.

Identify that SQL Server on Azure Virtual Machines (IaaS) provides complete administrative control over both the SQL Server instance and the underlying operating system.

Host-level configurations and custom third-party agents require the Infrastructure as a Service (IaaS) model.

4

Analyze the requirements for the fourth workload: a managed relational database for open-source PostgreSQL.

Identify that Azure Database for PostgreSQL is the dedicated fully managed relational service for PostgreSQL engines.

It matches the relational open-source requirements of PostgreSQL.

Anahtar Kavram

Selecting appropriate Azure database services based on relational vs. non-relational, PaaS vs. IaaS, and engine requirements.

Tahmini Süre:1m 30s

Soru 23Soru →

An organization is evaluating several Microsoft Azure tools to manage, optimize, and estimate costs. Match each business scenario to the most appropriate Azure tool. What is the correct tool mapping for each scenario?

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Migrating physical servers and storage area networks to Azure matches Azure Total Cost of Ownership (TCO) Calculator; estimating consumption for planned App Services and SQL Database matches Azure Pricing Calculator; analyzing current spend and setting budget alerts matches Azure Cost Management and Billing; receiving recommendations for underutilized virtual machines matches Azure Advisor.

The correct matches align each business requirement to the specific service designed for it: the TCO Calculator evaluates migration savings; the Pricing Calculator estimates monthly costs for future cloud configurations; Azure Cost Management handles budgeting and monitoring of existing spend; and Azure Advisor suggests cost-reduction optimizations on active resources.

Adım Adım Çözüm

1

Analyze the core requirements of each business scenario to determine whether the objective is pre-migration comparison, pre-deployment estimation, active spending control, or active resource optimization.

Scenario 1 focuses on comparing local physical infrastructure costs to Azure. Scenario 2 focuses on estimating costs for a future cloud architecture. Scenario 3 involves tracking active spending. Scenario 4 involves optimizing active resources.

This establishes the logical boundaries between pre-migration, pre-deployment, and post-deployment operations.

2

Match each operational objective to the specific tool built for that lifecycle phase.

Pre-migration comparison maps to the TCO Calculator. Pre-deployment estimation maps to the Pricing Calculator. Active spending control maps to Azure Cost Management. Active resource optimization maps to Azure Advisor.

Matching the lifecycle phase of the workloads with the correct tool capabilities yields the correct associations.

Anahtar Kavram

Distinguishing between Azure cost estimation, cost management, and cost optimization tools.

Tahmini Süre:1m 30s

Soru 24Soru →

An organization is planning to optimize and estimate costs for different phases of their cloud journey. Match each business scenario to the most appropriate Azure cost tool.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Match the scenario of estimating VMware migration savings to the Azure Total Cost of Ownership (TCO) Calculator; match the scenario of estimating monthly costs of a new App Service and SQL Database application before deployment to the Azure Pricing Calculator; and match the scenario of resizing underutilized Virtual Machines to Azure Advisor.

The matching aligns each scenario to its correct tool based on the lifecycle stage and data source. The Total Cost of Ownership (TCO) Calculator compares existing on-premises infrastructure costs to equivalent Azure services. The Azure Pricing Calculator estimates the costs of newly planned Azure services before deployment. Azure Advisor provides cost-saving recommendations for already running resources.

Adım Adım Çözüm

1

Analyze the migration scenario which involves comparing existing on-premises infrastructure costs to equivalent Azure services.

Identify that comparing on-premises costs to Azure is the primary purpose of the Total Cost of Ownership (TCO) Calculator.

The TCO Calculator accepts details about servers, storage, databases, and bandwidth currently on-premises to output a cost comparison report.

2

Analyze the new application deployment scenario which requires estimating monthly consumption costs for cloud-native services.

Identify that estimating the cost of new configurations of Azure services prior to deployment is the primary purpose of the Azure Pricing Calculator.

The Azure Pricing Calculator allows users to select specific Azure services, configure their parameters (region, tier, size), and see an estimated monthly cost.

3

Analyze the optimization scenario for active resources in an existing Azure subscription.

Identify that Azure Advisor analyzes running resource usage telemetry to provide optimization recommendations, including cost savings.

Azure Advisor evaluates configuration and usage telemetry of active resources to suggest actions like shutting down or resizing underutilized VMs.

Anahtar Kavram

Azure cost estimation and optimization tools differ based on whether they evaluate on-premises migrations (TCO Calculator), new cloud service deployments (Pricing Calculator), or active resource configurations (Azure Advisor).

Soru 25Soru →

Match each business requirement to the appropriate Azure tool. To answer, drag the correct tool from the column on the right to its corresponding requirement on the left.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Matching the on-premises datacenter comparison to the Azure TCO Calculator; matching the proposed architecture monthly cost estimation to the Azure Pricing Calculator; and matching the active workload cost optimization recommendation to Azure Advisor.

Matching the on-premises datacenter comparison to the Azure TCO Calculator; matching the proposed architecture monthly cost estimation to the Azure Pricing Calculator; and matching the active workload cost optimization recommendation to Azure Advisor is correct because each tool serves a distinct phase of cloud management: TCO Calculator for pre-migration comparison, Pricing Calculator for pre-deployment estimation, and Azure Advisor for post-deployment optimization.

Adım Adım Çözüm

1

Analyze the first requirement: comparing on-premises datacenter costs to Azure migration costs.

Identified that comparing existing on-premises infrastructure costs against Azure cloud costs is the purpose of the Total Cost of Ownership (TCO) Calculator.

The TCO Calculator helps build a business case by contrasting hardware, software, electricity, and labor costs of an on-premises setup with equivalent Azure cloud costs.

2

Analyze the second requirement: estimating monthly costs of a new, proposed architecture with VMs and database.

Identified that estimating monthly costs for specific Azure services prior to deployment is the purpose of the Azure Pricing Calculator.

The Pricing Calculator allows users to select specific configurations (e.g., VM sizes, regions, storage tiers) to calculate estimated hourly or monthly costs of planned Azure deployments.

3

Analyze the third requirement: finding recommendations to optimize costs for active, underutilized resources.

Identified that analyzing active resources for cost optimization recommendations is the purpose of Azure Advisor.

Azure Advisor evaluates running resources and offers actionable recommendations across categories like Cost, Security, Reliability, Operational Excellence, and Performance.

Anahtar Kavram

Azure Cost Estimation and Management Tools

Tahmini Süre:1m 30s

Soru 26Soru →

An organization is migrating several workloads to Microsoft Azure. To ensure proper operational governance, the IT team must define responsibility boundaries. Match each operational task to its correct responsibility assignment under the Azure Shared Responsibility Model.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Data classification in Microsoft 365 matches Customer's sole responsibility; Network firewall configuration in Azure App Service matches Shared responsibility; Physical host maintenance matches Microsoft's sole responsibility.

The correct pairings map the tasks as follows: Data classification and governance for Microsoft 365 is a customer-only responsibility because the customer always owns their data. Configuring network controls for Azure App Service is a shared responsibility because both parties play a role in network security configuration. Maintaining the physical hypervisors and datacenters is a Microsoft-only responsibility as the customer has no physical access to Azure's hardware.

Adım Adım Çözüm

1

Analyze the service model for each task.

Microsoft 365 is Software as a Service (SaaS), Azure App Service is Platform as a Service (PaaS), and physical infrastructure applies across all models.

Identifying the cloud service model is the first step to applying the Shared Responsibility Model rules.

2

Determine ownership for physical security.

Physical infrastructure security is always Microsoft's responsibility.

Microsoft manages the physical facilities and hardware, meaning the customer has no access to or responsibility for physical security.

3

Determine ownership for data security in SaaS.

Information and data governance is always the customer's responsibility.

Even in SaaS, the customer owns their data and must classify and control access to it.

4

Determine ownership for network controls in PaaS.

Network controls in PaaS represent a shared responsibility.

Microsoft manages the network infrastructure, but the customer is responsible for configuring access rules and firewalls.

Anahtar Kavram

Shared Responsibility Model

Tahmini Süre:1m 30s

Soru 27Soru →

A company is migrating its operations to Microsoft Azure. To ensure proper administration, the IT team needs to map specific tasks to their correct ownership classification under the Azure Shared Responsibility Model. How should the team pair each administrative task with its corresponding responsibility classification?

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Patching the guest operating system for an Azure Virtual Machine (IaaS) matches with a responsibility that remains solely with the customer. Upgrading the database engine software for Azure SQL Database (PaaS) matches with a responsibility shifted to Microsoft. Configuring identity and access management for Microsoft 365 (SaaS) matches with a customer responsibility even in a fully managed SaaS solution.

Patching the guest operating system of an Azure Virtual Machine is a customer responsibility because IaaS leaves OS control to the user. Upgrading database engine software for Azure SQL Database is Microsoft's responsibility since PaaS abstracts platform management. Configuring identity and access management for Microsoft 365 is the customer's responsibility because user access and identities are always managed by the customer regardless of the cloud model.

Adım Adım Çözüm

1

Analyze the virtual machine task

Patching a guest OS on an Azure Virtual Machine (IaaS) is identified as a customer duty, because IaaS gives the customer control over the operating system.

To determine ownership of operating system maintenance in Infrastructure as a Service.

2

Analyze the database service task

Upgrading the database engine for Azure SQL Database (PaaS) is identified as a Microsoft duty, as PaaS removes the platform maintenance burden from the customer.

To determine ownership of database platform management in Platform as a Service.

3

Analyze the SaaS application task

Configuring identity and access policies for Microsoft 365 (SaaS) is identified as a customer duty, as user access control is never transferred to the cloud provider.

To determine ownership of identity and access management in Software as a Service.

Anahtar Kavram

Under the Azure Shared Responsibility Model, physical infrastructure management shifts to Microsoft, while data, endpoints, accounts, and access management always remain the responsibility of the customer. Responsibility for applications, network controls, and operating systems shifts between Microsoft and the customer depending on the service model (IaaS, PaaS, or SaaS).

Soru 28Soru →

Match each business scenario to its corresponding cloud deployment model.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Match the hospital using Azure Web Apps and local servers to Hybrid cloud; match the gaming platform using Azure AKS and GCP Spanner to Multi-cloud; match the national security agency using isolated hardware managed by a third party to Private cloud; and match the analytics firm using shared Synapse pools to Public cloud.

The correct matches align with the definitions of cloud models: combining public cloud and on-premises is Hybrid cloud; using multiple public cloud providers is Multi-cloud; using isolated, dedicated resources (even third-party hosted) is Private cloud; and using shared resources from a cloud provider is Public cloud.

Adım Adım Çözüm

1

Analyze the hospital scenario (left_1).

It combines Azure Web Apps (public cloud) with physical servers in the hospital's datacenter (on-premises/private).

Identifying the combination of public cloud and private/on-premises resources determines a hybrid cloud deployment.

2

Analyze the gaming platform scenario (left_2).

It distributes workloads across Microsoft Azure (AKS) and Google Cloud (Spanner) without any on-premises footprint.

Identifying the use of multiple public cloud providers without on-premises integration determines a multi-cloud deployment.

3

Analyze the national security agency scenario (left_3).

It uses physically isolated, dedicated hardware owned/managed by a third-party hoster for exclusive access.

Identifying that the environment is single-tenant and isolated (regardless of location) determines a private cloud deployment.

4

Analyze the analytics firm scenario (left_4).

It runs serverless queries where hardware resources are dynamically shared across multiple clients.

Identifying dynamic resource sharing (multi-tenancy) provided by a cloud vendor determines a public cloud deployment.

Anahtar Kavram

Cloud Models (Public, Private, Hybrid, Multi-cloud)

Tahmini Süre:2m 0s

Soru 29Soru →

A financial organization is planning to migrate its on-premises systems to Microsoft Azure. They will deploy legacy line-of-business applications on Azure Virtual Machines (IaaS), host their transactional databases on Azure SQL Database (PaaS), and migrate their collaboration tools to Microsoft 365 (SaaS). To maintain regulatory compliance, the IT security team must classify their operational tasks according to the Azure Shared Responsibility Model.

Match each operational task on the left with the correct responsibility classification under the Azure Shared Responsibility Model on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

The correct matches pair: 'Patching the guest operating system' with 'Solely the customer's responsibility in IaaS, but managed by Microsoft in PaaS and SaaS'; 'Securing the physical server racks' with 'Solely Microsoft's responsibility across all cloud models'; 'Configuring network controls' with 'Shared in PaaS, but solely the customer's in IaaS'; and 'Classifying corporate data assets' with 'Solely the customer's responsibility across all cloud models'.

The correct matching aligns tasks to their appropriate owners based on cloud service models: guest OS patching is customer-managed in IaaS only; physical security is always Microsoft's job; network controls are shared in PaaS but customer-only in IaaS; data and identity management are always the customer's responsibility.

Adım Adım Çözüm

1

Identify the service model for each task.

Operating system patching applies to IaaS Virtual Machines; physical security applies to the datacenter; firewall configurations apply to PaaS SQL Database; data and accounts apply to the general cloud environment including SaaS.

This separates the tasks into their corresponding service categories (IaaS, PaaS, SaaS, or infrastructure-wide).

2

Apply the Shared Responsibility Model rules.

Note that physical security is always Microsoft's responsibility, whereas data and accounts are always the customer's responsibility.

This resolves the static boundaries that do not shift between service models.

3

Analyze transition boundaries for operating systems and network controls.

OS patching shifts from customer (IaaS) to Microsoft (PaaS/SaaS). Network controls are shared in PaaS, customer-controlled in IaaS, and provider-managed in SaaS.

This resolves the dynamic boundaries that shift depending on the level of cloud service management.

Anahtar Kavram

Shared Responsibility Model

Soru 30Soru →

An organization planning a cloud migration needs to estimate future costs, compare potential savings, and optimize active resource spending. Match each operational task to the appropriate Azure tool or configuration step. To answer, drag each task on the left to its correct tool or step on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Inputting current on-premises infrastructure details matches TCO Calculator: Define your workloads. Configuring electricity, labor, and facility overhead costs matches TCO Calculator: Adjust assumptions. Selecting specific Azure service parameters matches Pricing Calculator: Estimate products. Reviewing recommendations for active subscriptions matches Azure Advisor: Optimize costs.

Defining workloads is the initial step of the TCO Calculator where on-premises server and storage specifications are entered. Adjusting assumptions is the second step, where ongoing operational costs like labor and electricity are customized. The Pricing Calculator is used to estimate monthly Azure product consumption by configuring specific service parameters. Azure Advisor analyzes active resource usage to provide optimization recommendations.

Adım Adım Çözüm

1

Identify whether the task relates to comparing current on-premises costs to Azure or estimating new cloud deployments.

On-premises inventory and assumptions map to the TCO Calculator, whereas new Azure services map to the Pricing Calculator.

This establishes the correct primary tool context.

2

Determine the specific phase within the TCO Calculator for infrastructure vs. overhead costs.

Physical servers and storage map to the 'Define your workloads' phase, while power, cooling, and salaries map to the 'Adjust assumptions' phase.

This resolves the TCO Calculator internal workflow mappings.

3

Differentiate between pre-deployment estimation and active resource monitoring.

Selecting hypothetical VM sizes maps to the Pricing Calculator, while optimizing already deployed, idle VMs maps to Azure Advisor.

This separates pre-deployment planning from active post-deployment management.

Anahtar Kavram

Azure Pricing Calculator and TCO Calculator

Soru 31Soru →

An organization is migrating its workloads to Microsoft Azure. Match each management task to the party responsible for its execution under the Azure Shared Responsibility Model. (Each option is used once.)

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Securing the physical hardware and datacenter facilities is solely Microsoft's responsibility. Patching the guest operating system on an Azure Virtual Machine is solely the Customer's responsibility. Configuring identity access control and user permissions is solely the Customer's responsibility.

Physical security is always managed by Microsoft because they own the physical facilities. Guest operating system patching on Azure Virtual Machines belongs solely to the customer because virtual machines are IaaS. Identity access management is a constant customer responsibility across all cloud models.

Adım Adım Çözüm

1

Determine who manages physical datacenter security.

Microsoft owns and secures the physical datacenters.

Regardless of the cloud service model, physical security of the infrastructure is always handled by Microsoft.

2

Determine responsibilities for virtual machines (IaaS).

The customer manages the guest OS, including patching and updates.

Virtual machines represent an IaaS deployment, where the operating system and applications are managed by the customer.

3

Determine identity and access management responsibility.

The customer configures access controls and user roles.

The customer is always responsible for managing user accounts and securing identity access, no matter the cloud model.

Anahtar Kavram

Under the Shared Responsibility Model, physical infrastructure security is always Microsoft's responsibility, guest operating system maintenance in IaaS is the customer's responsibility, and identity access control is always the customer's responsibility.

Soru 32Soru →

A company is migrating its operations to Azure and deploying three different workloads: legacy applications on Azure Virtual Machines (IaaS), database workloads on Azure SQL Database (PaaS), and productivity tools on Microsoft 365 (SaaS). To ensure proper governance, the IT team must define operational boundaries. Match each operational task to the correct responsibility classification under the Azure Shared Responsibility Model.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Patching the guest operating system in IaaS is solely the responsibility of the Customer. Configuring network firewalls in PaaS is a shared responsibility between the Customer and Microsoft. Securing physical server hardware in SaaS is solely the responsibility of Microsoft.

Under the Azure Shared Responsibility Model: 1. Guest OS patching in IaaS is solely the customer's responsibility since they control the virtual machine. 2. Network controls configuration in PaaS is a shared responsibility because the customer manages the resource-level network settings while Microsoft secures the network infrastructure. 3. Physical host and datacenter security is always solely Microsoft's responsibility across all cloud models.

Adım Adım Çözüm

1

Identify the service model for each task.

Task 1 is in IaaS (Virtual Machines), Task 2 is in PaaS (SQL Database), and Task 3 is in SaaS (Microsoft 365).

The shared responsibility model shifts tasks between the cloud provider and customer depending on whether IaaS, PaaS, or SaaS is used.

2

Determine the owner of the guest operating system in IaaS.

The customer is solely responsible.

In IaaS, the customer manages the OS, middleware, and applications, which includes patching the guest OS.

3

Determine the owner of network controls in PaaS.

It is a shared responsibility.

In PaaS, network controls are shared because Microsoft secures the platform's infrastructure and network connectivity, but the customer is responsible for configuring access restrictions and firewalls.

4

Determine the owner of the physical security and host hardware in SaaS.

Microsoft is solely responsible.

Physical security, including the physical hosts, network, and datacenter, remains the cloud provider's sole responsibility across all models.

Anahtar Kavram

The Shared Responsibility Model defines which security and operational tasks are handled by the cloud provider (Microsoft) and which are handled by the customer, varying across IaaS, PaaS, and SaaS deployments.

Tahmini Süre:1m 30s

Soru 33Soru →

A retail company is planning its cloud migration strategy to Microsoft Azure. The IT director wants to clarify the boundaries of the Shared Responsibility Model to ensure the team knows what tasks they must perform versus what Microsoft manages.

Match each administrative task on the left to the correct responsibility boundary on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Patching the guest operating system of a web server matches with Customer responsibility only in Infrastructure as a Service (IaaS). Securing and managing customer data stored in the cloud matches with Customer responsibility in all cloud models (IaaS, PaaS, and SaaS). Maintaining physical datacenter security and hardware hosts matches with Microsoft's responsibility in all cloud models (IaaS, PaaS, and SaaS).

The correct pairings map the administrative duties to their respective boundaries under the Shared Responsibility Model. Guest operating system patching is managed by the customer only in IaaS, data security is always a customer responsibility across all models, and physical security is always Microsoft's responsibility.

Adım Adım Çözüm

1

Analyze the responsibility for guest operating system patching.

In IaaS, the customer manages the operating system. In PaaS and SaaS, the cloud provider manages it. This matches the definition of customer responsibility only in IaaS.

This helps isolate tasks that transition ownership between IaaS and PaaS.

2

Analyze the responsibility for securing and managing customer data.

Information and data security is always retained by the customer across all cloud deployment models.

This establishes the absolute boundary of customer data ownership.

3

Analyze the responsibility for physical security and hardware hosts.

Microsoft, as the cloud provider, is solely responsible for physical security and infrastructure maintenance.

This defines the foundational physical layer responsibility of the cloud provider.

Anahtar Kavram

Shared Responsibility Model

Soru 34Soru →

An enterprise is evaluating deployment options for several new IT workloads. Which cloud model corresponds to each of the business scenarios described?

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

The startup's tenant-shared web analytics platform matches the public cloud model. The government organization's dedicated servers in a third-party datacenter match the private cloud model. The financial institution's combined on-premises database and public cloud simulations match the hybrid cloud model. The software firm's use of two different public cloud providers matches the multi-cloud model.

The correct matches align each scenario to the cloud model that matches its hosting ownership, tenancy, and structure: public cloud is represented by tenant-shared environments; private cloud is represented by dedicated physical servers rented from a third-party provider; hybrid cloud is represented by integrating on-premises hardware with public cloud simulations; and multi-cloud is represented by distributing workloads across two distinct public cloud providers.

Adım Adım Çözüm

1

Analyze the startup's scenario involving tenant-shared environments managed by a third-party vendor over the internet.

Identify this as the public cloud model.

Public cloud resources are owned by a third-party provider, shared among multiple tenants, and accessed over the internet.

2

Analyze the government organization's scenario involving rented, dedicated physical servers inside a third-party datacenter with no shared hardware.

Identify this as the private cloud model.

Private cloud consists of computing resources used exclusively by one business or organization, which can be physically located at the organization's on-site datacenter or hosted by a third-party service provider.

3

Analyze the financial institution's scenario combining local on-premises hardware with public cloud risk-modeling simulations.

Identify this as the hybrid cloud model.

Hybrid cloud combines public and private cloud environments (such as on-premises infrastructure), allowing data and applications to be shared between them.

4

Analyze the software firm's scenario deploying database services on one public cloud and machine learning on another public cloud.

Identify this as the multi-cloud model.

Multi-cloud refers to the use of multiple public cloud services from different cloud providers, without necessarily integrating them into a hybrid model.

Anahtar Kavram

Characteristics and distinctions of public, private, hybrid, and multi-cloud deployment models.

Soru 35Soru →

An organization is migrating its workloads to Azure and wants to align its security operations with the Microsoft Azure Shared Responsibility Model. Match each administrative responsibility to its correct ownership profile under the cloud service models.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Physical infrastructure security is always Microsoft's responsibility; operating system patching on Azure Virtual Machines shifts to the customer in IaaS; and data classification and governance always remain with the customer in all cloud models.

The matches align with the Shared Responsibility Model: physical security is always Microsoft's responsibility across all models; guest OS patching is the customer's responsibility in IaaS; and data governance is always the customer's responsibility in all models.

Adım Adım Çözüm

1

Identify the ownership boundary for physical security.

Physical infrastructure is always maintained by Microsoft across all service models (IaaS, PaaS, SaaS).

The customer has no physical access to the cloud datacenters, so Microsoft manages all physical security.

2

Determine who is responsible for operating system maintenance in Infrastructure as a Service (IaaS).

The customer is responsible for guest operating system configuration, updates, and patching.

In IaaS, Microsoft only provides the hypervisor and host; the guest OS is managed by the customer.

3

Determine who is responsible for document and data governance in Software as a Service (SaaS).

The customer is always responsible for the security of their data, information, and identity.

In all cloud models, including SaaS (e.g., Microsoft 365), data classification and access management remain the customer's responsibility.

Anahtar Kavram

Shared Responsibility Model

Soru 36Soru →

Match each Microsoft Azure cloud model to its corresponding deployment description.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Public cloud matches with shared resources and no capital expenditure; Private cloud matches with dedicated hardware and highest control; Hybrid cloud matches with the combination of on-premises and public cloud resources.

Public cloud corresponds to shared resources and zero capital expenditure for physical hardware. Private cloud corresponds to dedicated infrastructure providing the highest control and security. Hybrid cloud corresponds to combining on-premises datacenters with public cloud services.

Adım Adım Çözüm

1

Identify the characteristic of Public cloud

Public cloud is characterized by shared multi-tenant resources and zero capital expenditure for physical hardware.

This matches the description of resources being shared among multiple tenants with no capital expenditure.

2

Identify the characteristic of Private cloud

Private cloud is characterized by dedicated infrastructure that provides maximum control and security.

This matches the description of resources dedicated exclusively to a single organization.

3

Identify the characteristic of Hybrid cloud

Hybrid cloud is characterized by combining local/on-premises resources with a public cloud provider.

This matches the description of combining private/on-premises infrastructure with a public cloud.

Anahtar Kavram

Cloud deployment models (Public, Private, and Hybrid)

Tahmini Süre:1m 0s

Soru 37Soru →

A financial company is migrating its operations to Azure. They deploy virtual machines for legacy accounting software, use Azure SQL Database for their transactional database, and adopt Microsoft 365 for employee collaboration. Under the Microsoft Azure Shared Responsibility Model, match each operational management task to its corresponding responsibility boundary.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

The correct mapping pairs virtual machine guest operating system patching to IaaS customer responsibility; SQL database firewall and access settings to PaaS customer responsibility; physical host and datacenter security to Microsoft responsibility; and Microsoft 365 data classification and user access to SaaS customer responsibility.

Under the Azure Shared Responsibility Model, ownership transitions between the customer and Microsoft depending on the service model type. Guest operating system patching belongs to the customer in IaaS (virtual machines). Configuring network firewall rules and user permissions for Azure SQL Database belongs to the customer in PaaS. Physical security of datacenters remains with Microsoft across all models. Data classification and identity management remain a customer responsibility in SaaS (Microsoft 365).

Adım Adım Çözüm

1

Analyze each workload to identify its cloud service model category.

Virtual machines are Infrastructure as a Service (IaaS). Azure SQL Database is Platform as a Service (PaaS). Microsoft 365 is Software as a Service (SaaS). Datacenter operations represent the underlying physical infrastructure.

Understanding the service model is necessary to apply the corresponding rules of the Shared Responsibility Model.

2

Map the specific management tasks to either the customer or Microsoft based on the service model boundaries.

In IaaS, the customer manages the OS. In PaaS, the customer manages database-level firewall rules and user access. In SaaS, the customer still manages identity and data. Physical security of the servers is always handled by Microsoft.

This establishes the correct alignment between tasks and their responsibility boundaries under the Azure model.

Anahtar Kavram

Shared Responsibility Model

Tahmini Süre:1m 30s

Soru 38Soru →

An organization is evaluating how different cloud models align with various business requirements. Match each business scenario to the corresponding cloud model.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

The startup using shared cloud services matches Public cloud; the hospital using local servers connected to Azure matches Hybrid cloud; the company using dedicated hardware in a private datacenter matches Private cloud; the media company using Azure and Google Cloud Platform matches Multi-cloud.

Each scenario maps directly to its defining cloud deployment model. The startup using shared, on-demand public cloud services maps to the Public cloud. The hospital combining an on-premises database with Azure services maps to the Hybrid cloud. The company using dedicated physical hardware in a private datacenter maps to the Private cloud. The media company using two public cloud providers (Azure and Google Cloud Platform) maps to Multi-cloud.

Adım Adım Çözüm

1

Analyze the startup scenario.

The startup uses third-party services over the internet without owning any hardware, which represents the Public cloud model.

Public cloud resources are shared among multiple tenants and owned by a cloud provider.

2

Analyze the hospital scenario.

The hospital combines its on-premises patient database with public cloud resources in Azure, which represents the Hybrid cloud model.

Hybrid cloud bridges private/local infrastructure with public cloud environments.

3

Analyze the company scenario using dedicated hardware.

The organization uses dedicated hardware exclusively for its own workloads in a private environment, representing the Private cloud model.

Private cloud offers dedicated infrastructure that is not shared with other organizations.

4

Analyze the media company scenario.

The media company uses two distinct public cloud providers (Azure and Google Cloud Platform) to host its workloads, which represents the Multi-cloud model.

Multi-cloud refers to the use of services from multiple different public cloud vendors.

Anahtar Kavram

Cloud Models (Public, Private, Hybrid, Multi-cloud)

Soru 39Soru →

An organization is evaluating different cloud models to determine the best approach for hosting its services. Match each cloud model to the description that best represents its typical implementation.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Public cloud matches the description of running web applications on shared hardware infrastructure owned by a third-party provider. Private cloud matches hosting legacy applications on dedicated physical servers within a secure on-premises datacenter. Hybrid cloud matches connecting a local Active Directory server with Azure Active Directory. Multi-cloud matches distributing microservices across Microsoft Azure and Amazon Web Services (AWS) without connecting them.

Public cloud uses shared hardware from a third-party provider. Private cloud utilizes dedicated, single-tenant hardware on-premises. Hybrid cloud connects on-premises assets to public cloud resources. Multi-cloud uses multiple independent public cloud providers.

Adım Adım Çözüm

1

Analyze the description involving third-party shared infrastructure.

This aligns with the public cloud model where resources are multi-tenant and managed by a cloud provider.

Public cloud is characterized by shared resources accessed via the internet without ownership of physical hardware.

2

Analyze the description of dedicated physical servers located in an on-premises datacenter.

This aligns with the private cloud model.

Private cloud provides exclusive use of resources by a single organization, often on-premises for maximum control and security.

3

Analyze the description of syncing on-premises Active Directory with Azure Active Directory.

This aligns with the hybrid cloud model.

A hybrid model connects private (on-premises) infrastructure to public cloud services to allow joint operation.

4

Analyze the description of using both Azure and AWS independently.

This aligns with the multi-cloud model.

Multi-cloud refers to using two or more public cloud providers simultaneously for distinct workloads without bridging them in a hybrid configuration.

Anahtar Kavram

Cloud deployment models (public, private, hybrid, and multi-cloud) determine resource ownership, accessibility, and integration levels.

Tahmini Süre:1m 0s

Soru 40Soru →

A company is migrating its operations to Azure. They deploy virtual machines for a legacy reporting tool, use Azure SQL Database for their transactional database, and adopt Microsoft 365 for corporate email. The IT director wants to clarify the boundaries of the Shared Responsibility Model. Match each administrative task to the correct classification of responsibility under its respective cloud service model.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

Updating the guest operating system on Azure Virtual Machines matches Customer responsibility under IaaS. Securing the physical hardware for Azure SQL Database matches Microsoft responsibility under PaaS. Managing user accounts in Microsoft 365 matches Customer responsibility under SaaS.

The correct pairings align the administrative tasks with the correct responsibility models. Guest OS patching under IaaS belongs to the customer; physical infrastructure security under PaaS belongs to Microsoft; and identity management under SaaS remains the customer's responsibility.

Adım Adım Çözüm

1

Identify the cloud service model for each resource.

Azure Virtual Machines is IaaS, Azure SQL Database is PaaS, and Microsoft 365 is SaaS.

Correctly identifying the service model is essential to applying the Shared Responsibility Model rules.

2

Determine who is responsible for the guest operating system in IaaS.

The customer is responsible for guest OS updates.

Under IaaS, the cloud provider only manages physical infrastructure and the hypervisor.

3

Determine who is responsible for the physical host security in PaaS.

Microsoft is responsible for physical datacenter security.

Microsoft always manages physical security across all service models (IaaS, PaaS, and SaaS).

4

Determine who is responsible for identity and access management in SaaS.

The customer is responsible for managing accounts and identities.

Under the Shared Responsibility Model, the customer always retains responsibility for accounts and data, even in SaaS.

Anahtar Kavram

Under the Microsoft Shared Responsibility Model, responsibility for security tasks shifts between the customer and Microsoft depending on whether the service is classified as IaaS, PaaS, or SaaS. However, physical security is always Microsoft's responsibility, and accounts, identities, and data are always the customer's responsibility.

Tahmini Süre:1m 30s

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram