Examkin

Tüm alıştırma soruları

1186 soru

Tüm türler1,186Çoktan seçmeli620Çoklu seçim228Doğru / Yanlış291Eşleştirme47
Soru 141Soru →

An organization's Azure hierarchy includes a management group named Corp-MG, a subscription named Sales-Sub inside Corp-MG, and a resource group named App-RG inside Sales-Sub. An administrator must implement the following security requirements:

1. Members of a group named Audit-Team must be able to view all resources in Corp-MG, Sales-Sub, and App-RG, but must not be allowed to modify or create any resources outside of App-RG.
2. Members of Audit-Team must also be able to create, start, and delete virtual machines, but only within App-RG.
3. To enforce compliance, no virtual machines deployed within Sales-Sub are permitted to have public IP addresses.

To meet these requirements using the principle of least privilege and native Azure capabilities, which combination of role assignments and governance tools should the administrator configure?

Cevabı ve açıklamayı göster

Cevap: Assign the Reader role to Audit-Team at the Corp-MG scope, assign the Contributor role to Audit-Team at the App-RG scope, and assign an Azure Policy definition to Sales-Sub that denies virtual machines with public IP addresses.

Cevap

Assign the Reader role to Audit-Team at the Corp-MG scope, assign the Contributor role to Audit-Team at the App-RG scope, and assign an Azure Policy definition to Sales-Sub that denies virtual machines with public IP addresses.
The correct configuration assigns the Reader role at the highest required scope (Corp-MG), allowing Audit-Team to view all resources across the entire management group hierarchy due to inheritance. Assigning the Contributor role at the lower resource group scope (App-RG) grants the group permission to create and manage virtual machines within that specific resource group. Since Azure RBAC permissions are additive, the Contributor role at App-RG overrides the inherited Reader role for resources within that group. Enforcing properties on resources, such as preventing virtual machines from having public IP addresses, is the responsibility of Azure Policy rather than Azure RBAC. Applying the Azure Policy definition at the Sales-Sub scope ensures that no resource groups or resources within the subscription can bypass this rule.

Adım Adım Çözüm

1
Determine the scope and role required for read-only access across the entire hierarchy.
Assign the Reader role at the Corp-MG scope.
Since Azure RBAC permissions are inherited by descendant scopes, assigning Reader at the management group level automatically grants view-only access to all underlying subscriptions, resource groups, and resources.
2
Determine how to grant VM management permissions exclusively within the target resource group.
Assign the Contributor role at the App-RG scope.
Azure RBAC permissions are cumulative (additive). Assigning Contributor at the App-RG scope adds the write, delete, and deploy permissions required for virtual machines inside that resource group, overriding the inherited Reader role for those specific resources without elevating privileges elsewhere.
3
Determine how to enforce compliance rules blocking public IPs on virtual machines.
Assign an Azure Policy definition that denies public IPs at the Sales-Sub scope.
Azure RBAC governs identity access (who has permissions), while Azure Policy governs resource properties (compliance and constraints). Restricting VM configurations like public IP addresses requires Azure Policy.

Anahtar Kavram

Azure RBAC scopes, roles, inheritance rules, additive permissions, and distinguishing them from Azure Policy constraints.
Soru 142Soru →

When using Azure Cost Management Cost Analysis to group costs by a specific tag key, the costs of a resource that lacks this tag will still be grouped under that tag value if its parent Resource Group has the tag applied.

Cevabı ve açıklamayı göster

Cevap: False

Cevap

The statement is false. Costs of a resource that lacks a specific tag are categorized as untagged or under a null value in Cost Analysis, even if the parent Resource Group has the tag applied, because tags are not inherited by resources.
The correct answer is false because Azure resources do not inherit tags from their parent Resource Group, and Cost Analysis groups resource costs based on the specific tags applied directly to each resource.

Adım Adım Çözüm

1
Analyze the rule for tag inheritance in Azure.
Azure resources do not inherit tags from their parent Resource Group.
Tags must be applied directly to resources to be present on those resources.
2
Determine how Azure Cost Management Cost Analysis processes tags.
Cost Analysis filters and groups costs based on the tags directly present on each resource at the time usage data is generated.
Billing data is generated per resource and reflects the resource's direct properties.
3
Evaluate the behavior of grouping by tags for untagged resources inside a tagged Resource Group.
Since the resource itself does not have the tag, it does not inherit it from the Resource Group, and its costs are shown as 'Untagged'.
Cost reports do not dynamically inherit resource group tags down to individual resources unless a cost allocation rule is configured.
4
Evaluate the statement's truth value.
The statement is false.
It incorrectly claims that untagged resource costs will be grouped under the parent Resource Group's tag value.

Anahtar Kavram

Tag inheritance boundary and its impact on Cost Analysis grouping.
Soru 143Soru →

You need to evaluate a containerized deployment strategy for Azure. Is the following statement true or false?

To deploy a multi-container application where containers must share local storage and network namespaces in Azure, you must deploy the containers to Azure Kubernetes Service (AKS) because Azure Container Instances (ACI) only supports deploying single, isolated containers.

Cevabı ve açıklamayı göster

Cevap: False

Cevap

False
The correct answer is False because Azure Container Instances supports container groups, enabling multi-container workloads with shared local storage and network namespaces, which means deploying to Azure Kubernetes Service is not mandatory for this deployment model.

Adım Adım Çözüm

1
Analyze the requirement for a multi-container deployment where containers share local storage and network namespaces.
Identify that the containers need to run in a shared context, similar to a Kubernetes pod.
Understanding the architectural requirements is the first step in selecting the correct hosting service.
2
Verify if Azure Container Instances (ACI) supports hosting multiple containers in a shared context.
Confirm that ACI supports container groups, which allow multiple containers to share the host, network, and storage.
This determines whether the limitation claimed in the statement exists in ACI.
3
Evaluate the statement's conclusion that Azure Kubernetes Service (AKS) must be used.
Conclude that AKS is not mandatory because ACI container groups satisfy the requirements.
By comparing the service capabilities with the requirement, the statement's validity can be determined.

Anahtar Kavram

Azure Container Instances supports container groups, which allow multi-container deployments with shared network and storage resources on a single host.
Soru 144Soru →

A global energy company operates offshore wind turbines that run localized containerized applications on Kubernetes clusters. The company also hosts virtual machines in Amazon Web Services (AWS) for data analysis. The IT administration team needs to view all of these external Kubernetes clusters and virtual machines alongside their native Azure resources in the Azure portal, and enforce compliance guidelines using Azure Policy. They want to achieve this without migrating any of the workloads or hardware.

Which Azure service should the company use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Azure Arc

Cevap

Azure Arc
Azure Arc is designed to extend Azure management and governance to resources located outside of Azure, such as on-premises servers, edge environments, and other cloud providers (like Amazon Web Services). By projecting these resources into Azure Resource Manager, organizations can manage them as if they were native Azure resources using tools like Azure Policy and the Azure portal.

Adım Adım Çözüm

1
Identify the core requirement of managing and governing non-Azure resources (Kubernetes clusters on wind turbines and virtual machines in AWS) using Azure native tools like Azure Policy without migration.
The solution must be a service that extends the Azure control plane (Azure Resource Manager) to external environments.
We need a unified management layer that bridges Azure services with resources running in on-premises, edge, or multi-cloud environments.
2
Evaluate the available services based on their capabilities to extend Azure governance outside of Azure.
Azure Arc fits this exact capability. Azure Stack Hub runs Azure services on-premises on specific hardware, Azure Lighthouse handles multi-tenant access, and Azure Automation focuses on task automation rather than control-plane projection.
Selecting Azure Arc allows the company to view and apply policies to non-Azure resources as if they were native Azure resources.

Anahtar Kavram

Azure Arc extends Azure management and services to any infrastructure, allowing organizations to govern and manage resources across on-premises, edge, and multi-cloud environments.
Tahmini Süre:1m 0s
Soru 145Soru →

Is the following statement true or false?

'Azure SQL Database is a non-relational database service designed for storing semi-structured JSON documents.'

Cevabı ve açıklamayı göster

Cevap: False

Cevap

The statement is false.
The statement is false because Azure SQL Database is a relational database service based on the Microsoft SQL Server engine, organizing data into tables with defined schemas. Semi-structured JSON document databases are non-relational, a service class represented in Azure by Azure Cosmos DB.

Adım Adım Çözüm

1
Identify the database category of the service mentioned in the statement.
The statement refers to Azure SQL Database.
Evaluating a database statement requires first identifying the core characteristics of the specified database service.
2
Determine if Azure SQL Database is a relational or non-relational service.
Azure SQL Database is a relational database service utilizing tables, keys, and schemas.
Comparing the service type to the statement's claim of being 'non-relational' determines the truth value of the statement.

Anahtar Kavram

Relational vs. Non-Relational database services in Azure
Soru 146Soru →

An organization with a hybrid cloud infrastructure plans to deploy a new system. They need to connect their on-premises headquarters and a temporary retail kiosk to an Azure Virtual Network.

The headquarters requires a dedicated connection with predictable latency and maximum bandwidth that completely avoids the public internet.

The temporary kiosk requires a low-cost connection that must be established over the public internet within 24 hours.

Which connectivity options should the organization choose for the headquarters and the kiosk?

Cevabı ve açıklamayı göster

Cevap: ExpressRoute for the headquarters, and a VPN Gateway connection for the kiosk

Cevap

ExpressRoute for the headquarters, and a VPN Gateway connection for the kiosk
The correct answer is the option specifying ExpressRoute for the headquarters and a VPN Gateway connection for the kiosk. ExpressRoute satisfies the headquarters' need for a high-bandwidth, low-latency connection that completely bypasses the public internet by routing traffic over a private, dedicated circuit. A VPN Gateway satisfies the kiosk's requirements because it can be established rapidly over the public internet using standard IPsec VPN connections at a low cost.

Adım Adım Çözüm

1
Analyze the requirements for the headquarters connection.
The headquarters needs a dedicated connection, predictable latency, maximum bandwidth, and must completely bypass the public internet. This matches the capabilities of Azure ExpressRoute.
ExpressRoute provides private connectivity to Azure via a connectivity provider, bypassing the public internet entirely.
2
Analyze the requirements for the temporary kiosk connection.
The kiosk needs a low-cost connection established quickly (within 24 hours) over the public internet. This matches the capabilities of an Azure VPN Gateway.
VPN Gateway connections can be deployed rapidly over existing public internet infrastructure at a lower cost than dedicated circuits.
3
Evaluate and eliminate options using Virtual Network (VNet) Peering.
VNet Peering is strictly for connecting Azure VNets to each other and cannot connect on-premises locations directly.
VNet Peering does not apply to hybrid (on-premises to cloud) physical device connectivity.

Anahtar Kavram

Selecting appropriate Azure hybrid connectivity services based on bandwidth, latency, cost, and deployment speed requirements.
Tahmini Süre:2m 0s
Soru 147Soru →

An organization's administration team is planning to use Azure Cloud Shell to perform management tasks. A systems administrator proposes that by choosing the PowerShell environment in Cloud Shell, the team will be able to execute both Azure CLI commands and Azure PowerShell cmdlets interchangeably in the same terminal session without needing to switch environments, install additional modules, or manually start another shell process. Is this proposal correct?

Cevabı ve açıklamayı göster

Cevap: True

Cevap

The proposal is correct.
The proposal is correct because the PowerShell environment in Azure Cloud Shell is a containerized instance of PowerShell Core that includes the pre-installed Azure CLI. This allows administrators to run both Azure CLI commands and PowerShell cmdlets in the same session.

Adım Adım Çözüm

1
Determine the pre-installed tools in the Azure Cloud Shell PowerShell environment.
The PowerShell environment of Cloud Shell is pre-configured with both the Az PowerShell modules and the Azure CLI command-line utility.
To evaluate if both toolsets can be used without installing additional components.
2
Evaluate the cross-platform capabilities of the Azure CLI executable.
Azure CLI is a standard command-line application that runs natively within PowerShell, Bash, or cmd.
To verify if Azure CLI commands can run inside a PowerShell host session.
3
Assess the requirement to switch environments or spawn new processes.
Since both utilities are available in the active session path, they can be executed interchangeably in the same window without calling sub-shells or switching Cloud Shell modes.
To confirm that the administrator's proposal meets the constraint of avoiding process or environment switching.

Anahtar Kavram

Azure Cloud Shell environment capabilities and tool availability
Soru 148Soru →

A telecommunications company deploys its containerized billing applications on Kubernetes clusters hosted across Amazon Web Services (AWS) and Google Cloud Platform (GCP). Additionally, they host their legacy customer databases on bare-metal physical Linux servers within a private on-premises datacenter. The IT governance team wants to enforce resource configuration standards using Azure Policy and monitor security compliance using Microsoft Defender for Cloud across all these external environments from a single dashboard. They must achieve this without migrating any of the workloads or databases to Azure. Which Azure service should the company implement to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Azure Arc

Cevap

Azure Arc
Azure Arc is designed to project external resources—such as virtual or physical servers, Kubernetes clusters, and SQL databases located on-premises or in other public clouds (AWS, GCP)—into the Azure Resource Manager (ARM) control plane. Once registered, these resources can be governed, secured, and monitored using standard Azure services like Azure Policy and Microsoft Defender for Cloud just as if they were native Azure resources, fulfilling the scenario's requirements without requiring any workload migration.

Adım Adım Çözüm

1
Analyze the requirements for governance and security auditing across multi-cloud (AWS, GCP) and on-premises physical servers without workload migration.
Identify that the solution must extend Azure management tools (Azure Policy, Microsoft Defender for Cloud) to non-Azure resources.
This establishes the scope of the required technology as a control plane extension rather than a migration or hardware hosting solution.
2
Evaluate the capabilities of Azure Arc against the requirements.
Azure Arc registers and projects external servers and Kubernetes clusters into Azure Resource Manager (ARM), enabling the use of Azure governance tools natively.
This directly satisfies the requirement of managing multi-cloud Kubernetes and on-premises physical Linux servers under a single dashboard using Azure Policy.

Anahtar Kavram

Azure Arc acts as a bridge that extends the Azure Resource Manager (ARM) control plane to non-Azure resources, allowing centralized management and governance of external servers, Kubernetes clusters, and databases.
Tahmini Süre:1m 30s
Soru 149Soru →

An organization is deploying a new application that requires a relational database. They want a service where Microsoft automatically manages the underlying operating system patching, hardware maintenance, and database engine updates. Which Azure service should the organization choose?

Cevabı ve açıklamayı göster

Cevap: Azure SQL Database

Cevap

Azure SQL Database
Azure SQL Database is a fully managed Platform as a Service (PaaS) database engine that handles database management functions such as upgrading, patching, backups, and monitoring without user involvement. It also natively supports relational database workloads.

Adım Adım Çözüm

1
Identify the database structure requirement from the scenario.
The application requires a relational database.
This rules out non-relational database services such as Azure Cosmos DB.
2
Determine the management model requirement for maintenance tasks like OS patching and database engine updates.
The organization wants Microsoft to handle all patching and engine updates automatically, indicating a Platform as a Service (PaaS) database service.
This rules out Infrastructure as a Service (IaaS) offerings like SQL Server on Azure Virtual Machines, where the customer is responsible for maintaining the operating system and database software.

Anahtar Kavram

Azure PaaS Relational Database Services vs. IaaS and NoSQL
Tahmini Süre:45s
Soru 150Soru →

An organization is deploying a legacy document management system running on Linux virtual machines that requires a shared file system accessible via the NFS protocol. At the same time, they are setting up a database server that requires consistent sub-millisecond latency for its transaction logs. Which TWO of the following Azure storage solutions should the organization deploy to meet these requirements? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: An Azure Files share configured with the Premium performance tier; Azure Ultra Disk Storage to host the database transaction logs

Cevap

The organization should deploy an Azure Files share configured with the Premium performance tier and Azure Ultra Disk Storage.
The Premium tier of Azure Files supports the NFS protocol, which is a requirement for the Linux virtual machine shared storage. Azure Ultra Disk Storage provides sub-millisecond latencies, which is ideal for performance-sensitive transaction logs of a database.

Adım Adım Çözüm

1
Analyze the Linux shared storage requirements.
The requirement demands a shared file system accessible via the NFS protocol.
This determines which Azure Files performance tier and protocol option must be selected.
2
Evaluate Azure Files tier capabilities for NFS support.
Only Premium tier Azure Files support the NFS protocol, whereas Standard tier only supports SMB.
This rules out any Standard tier Azure Files configurations.
3
Analyze the database server performance requirements.
The database transaction logs require consistent sub-millisecond read/write latency.
This helps select the appropriate disk storage tier.
4
Evaluate Azure storage solutions for sub-millisecond latency.
Azure Ultra Disk Storage provides sub-millisecond latency, while standard disks or Archive Blob storage do not.
This identifies Ultra Disk Storage as the correct selection for the transaction logs.

Anahtar Kavram

Selecting appropriate Azure storage services and performance tiers based on protocol, latency, and access requirements.
Soru 151Soru →

An organization has several remote employees who need to connect their individual home computers securely to an Azure Virtual Network. The network connections must be established over the public internet and must encrypt all data in transit. Which connection type should the organization use?

Cevabı ve açıklamayı göster

Cevap: Point-to-Site (P2S) VPN

Cevap

Point-to-Site (P2S) VPN
Point-to-Site (P2S) VPN allows you to create a secure, encrypted connection to your virtual network from an individual client computer. This is ideal for remote workers connecting from home or client locations over the public internet.

Adım Adım Çözüm

1
Identify the source and destination of the connection.
The connection is between individual remote computers (clients) and an Azure Virtual Network.
This rules out solutions meant exclusively for site-level or internal Azure-to-Azure routing.
2
Identify the transit medium and security requirement.
The connection must go over the public internet and must be encrypted.
This points to a VPN-based solution over the internet rather than a private leased line like ExpressRoute.
3
Select the specific connection type designed for individual clients.
Point-to-Site (P2S) VPN is the standard service for connecting individual client computers to an Azure Virtual Network.
Site-to-Site VPN connects whole locations, and VNet peering connects separate Azure Virtual Networks.

Anahtar Kavram

Azure VPN Gateway connection types (Point-to-Site, Site-to-Site, ExpressRoute, and VNet Peering)
Soru 152Soru →

A municipal government department maintains physical and virtual servers across several local administrative offices. The IT department wants to apply security policies and monitor system performance using Azure tools without migrating these servers to the Azure public cloud. Is the statement that Azure Arc can be used to manage and govern these non-Azure servers true or false?

Cevabı ve açıklamayı göster

Cevap: True

Cevap

True
Azure Arc extends Azure governance and management capabilities to resources located outside of Azure, such as on-premises physical or virtual servers, allowing organizations to monitor and apply policies to them without cloud migration.

Adım Adım Çözüm

1
Identify the organization's requirement to manage on-premises physical and virtual servers using Azure tools without migrating them.
The requirement is to extend Azure governance and management to non-Azure resources.
This establishes the core need for hybrid and multi-cloud infrastructure management.
2
Evaluate the capabilities of Azure Arc.
Azure Arc projects external resources (such as servers, Kubernetes clusters, and databases) into Azure Resource Manager, allowing them to be managed as if they were Azure resources.
This directly confirms whether Azure Arc can fulfill the organization's management requirement.

Anahtar Kavram

Azure Arc capabilities for hybrid and multi-cloud management
Soru 153Soru →

A developer is using a local workstation running Linux, while a database administrator is using a local workstation running Windows. Both users need to run automated scripts to manage Azure SQL databases. The developer's script is written in Azure CLI, and the database administrator's script is written in Azure PowerShell. Which statement correctly describes the compatibility of these management tools with the administrators' local operating systems?

Cevabı ve açıklamayı göster

Cevap: Both the Azure CLI script and the Azure PowerShell script can be executed on either the Linux or the Windows workstation, as both management tools are cross-platform.

Cevap

Both the Azure CLI script and the Azure PowerShell script can be executed on either the Linux or the Windows workstation, as both management tools are cross-platform.
The correct answer is that both the Azure CLI script and the Azure PowerShell script can be executed on either operating system. Both Azure CLI and Azure PowerShell are cross-platform tools that can be installed locally on Windows, macOS, and Linux. This allows administrators to run their preferred tool regardless of their local workstation's operating system.

Adım Adım Çözüm

1
Identify the scripting environments and command structures used in the scenario.
The developer uses Azure CLI, and the database administrator uses Azure PowerShell.
Determining the specific tools helps evaluate their cross-platform capabilities.
2
Analyze the cross-platform availability of Azure CLI.
Azure CLI runs on Windows, macOS, and Linux.
To determine if the developer's script is restricted by the operating system.
3
Analyze the cross-platform availability of Azure PowerShell.
Azure PowerShell runs on Windows, macOS, and Linux (via PowerShell Core).
To determine if the database administrator's script is restricted by the operating system.
4
Compare the findings against the provided choices.
Select the option stating that both tools are fully cross-platform and can be run locally on either operating system.
Confirms that neither tool is bound to a single operating system.

Anahtar Kavram

Cross-platform support of Azure management tools
Tahmini Süre:2m 0s
Soru 154Soru →

A team of developers needs to execute a database migration script packaged inside a single container image. The script takes approximately five minutes to complete and runs once a week. The team wants a serverless hosting solution that starts the container immediately, runs it to completion, and stops billing as soon as the container exits, without the need to manage virtual machine infrastructure or deploy a container orchestrator. Which Azure service should the team select for this task?

Cevabı ve açıklamayı göster

Cevap: Azure Container Instances

Cevap

Azure Container Instances
Azure Container Instances is correct because it offers a serverless compute option to run containers on demand. It does not require managing underlying virtual machines or configuring complex orchestration, and it bills only for the duration the container runs (per-second billing), which perfectly aligns with the requirements of a 5-minute weekly script.

Adım Adım Çözüm

1
Analyze the application requirements.
The application requires hosting a single container for a short-lived (5-minute), weekly database migration script with no orchestration requirements.
This helps determine the complexity of the compute service needed.
2
Evaluate the management and billing constraints.
The solution must avoid managing virtual machines, must be serverless, and must stop billing as soon as the container exits.
This eliminates traditional VMs (which require configuration and OS patching) and continuously running PaaS services.
3
Select the service matching these criteria.
Azure Container Instances fits perfectly because it runs single containers on-demand without VMs or orchestrators and charges only for the exact seconds of container execution.
This identifies the most cost-effective and low-overhead option.

Anahtar Kavram

Azure Container Instances provides a serverless, low-overhead solution for running isolated, short-lived containers on demand with per-second billing.
Tahmini Süre:1m 0s
Soru 155Soru →

An administrator applies a ReadOnly resource lock and a resource tag named Dept: Finance to an Azure resource group. The resource group contains an Azure Cosmos DB database account. A developer attempts to read the tags on the Cosmos DB account and modify its default consistency level. What is the outcome of these actions?

Cevabı ve açıklamayı göster

Cevap: The developer can read the tags but is blocked from modifying the consistency level, and the Cosmos DB account does not inherit the Dept: Finance tag.

Cevap

The developer can read the tags but is blocked from modifying the consistency level, and the Cosmos DB account does not inherit the Dept: Finance tag.
A ReadOnly resource lock applied to a resource group is inherited by all resources within that group, preventing any configuration updates (such as changing the database consistency level) but still permitting read actions (such as viewing the resource configuration). Additionally, resource tags applied to a resource group are not inherited by the resources inside that group.

Adım Adım Çözüm

1
Determine the impact of the ReadOnly lock applied to the resource group.
The ReadOnly lock is inherited by the Cosmos DB account, restricting operations to read-only.
Azure resource locks are inherited from parent scopes (subscriptions and resource groups) to child resources.
2
Evaluate the developer's ability to modify the Cosmos DB consistency level.
The modification attempt is blocked.
A ReadOnly lock prevents write, update, and delete configurations. Modifying the consistency level is a write/update operation.
3
Determine the inheritance behavior of the resource tags.
The Cosmos DB account does not inherit the Dept: Finance tag.
Tags applied to a resource group are not automatically inherited by the resources within it.

Anahtar Kavram

Resource Lock and Tag Inheritance
Soru 156Soru →

An Azure administrator applies a ReadOnly resource lock to an Azure SQL Database. Which action can a user still perform on this database?

Cevabı ve açıklamayı göster

Cevap: Read the database configuration settings

Cevap

Read the database configuration settings
The correct answer is reading the database configuration settings. A ReadOnly lock is the most restrictive lock type. It blocks any modifications (writes) and deletions, but allows authorized users to read the configuration, properties, and status of the resource.

Adım Adım Çözüm

1
Identify the type of resource lock applied to the Azure SQL Database.
The applied lock is a ReadOnly lock.
This determines the restrictions placed on the resource.
2
Recall the behavior and restrictions of a ReadOnly resource lock.
A ReadOnly lock prevents all write and delete operations, meaning no configurations can be modified and the resource cannot be deleted, but read-only actions are permitted.
This helps filter which user actions are allowed versus blocked.
3
Evaluate the choices to find the action that is a read-only operation.
Viewing or reading the database configuration settings is a read-operation, whereas changing the pricing tier, modifying firewall rules, or renaming the database are write operations.
Only read operations are allowed under a ReadOnly lock.

Anahtar Kavram

Azure resource locks prevent accidental deletion or modification of resources. A ReadOnly lock restricts all write, modify, and delete operations while permitting read operations.
Soru 157Soru →

A multinational enterprise operates a hybrid and multi-cloud environment consisting of Kubernetes clusters running in an on-premises datacenter, virtual machines hosted in Amazon Web Services (AWS), and database servers on physical hardware in a private datacenter. The IT department wants to apply a single governance model using Azure Policy and centrally monitor system health using Azure Monitor. They must achieve this without migrating any of the workloads to Azure and without purchasing new dedicated hardware. Which of the following solutions should they implement?

Cevabı ve açıklamayı göster

Cevap: Implement Azure Arc to register the external virtual machines and Kubernetes clusters, allowing Azure Resource Manager to manage them as projected Azure resources.

Cevap

The enterprise should implement Azure Arc to register their external virtual machines and Kubernetes clusters, allowing them to be managed and monitored through Azure Resource Manager without migration or hardware purchases.
Implementing Azure Arc is the correct solution because it is designed to project external resources, such as on-premises physical servers, virtual machines, and Kubernetes clusters in other clouds, into the Azure Resource Manager (ARM) control plane. This enables the use of Azure Policy and Azure Monitor on these external resources without migrating the workloads or purchasing dedicated hardware.

Adım Adım Çözüm

1
Identify the requirement to manage and monitor virtual machines and Kubernetes clusters residing outside of Azure (on-premises and AWS) without migration or new hardware.
Limits options to hybrid/multi-cloud management tools that do not require workload migration or local hardware deployments.
Understanding the environmental constraints helps eliminate migration-based or hardware-centric solutions.
2
Evaluate Azure Arc's capabilities regarding non-Azure resources.
Azure Arc projects non-Azure servers and Kubernetes clusters into Azure Resource Manager (ARM) as if they were native Azure resources.
This allows native Azure tools like Azure Policy and Azure Monitor to be applied to these external resources directly.
3
Select the solution that projects these resources into the ARM control plane using agents.
Implementing Azure Arc is selected as the correct management projection solution.
It fulfills all governance and monitoring requirements without violating the constraints of no migration and no new hardware.

Anahtar Kavram

Azure Arc
Tahmini Süre:1m 30s
Soru 158Soru →

An organization is designing a deployment strategy for a containerized application. The application requires two containers to run: a primary web application container and a helper logging container. These containers must share a local network interface and a temporary storage volume, and they must be deployed and scaled together as a single unit. The organization wants to deploy this application with the minimum possible administrative overhead, specifically avoiding the need to provision virtual machines or manage a container orchestration cluster.

Which Azure service should the organization use to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Azure Container Instances

Cevap

Azure Container Instances
Azure Container Instances is the correct choice because it supports container groups, which are collections of containers scheduled on the same host machine. They share a lifecycle, local network interface, and storage volumes. This satisfies the requirement for a primary container and helper container to run together without the overhead of managing a container orchestration cluster like Kubernetes.

Adım Adım Çözüm

1
Analyze the container orchestration and management requirements.
The application requires co-located containers (primary + helper) sharing local storage and network, but the team explicitly wants to avoid managing a container orchestration cluster (like Kubernetes) or provisioning VMs.
This rules out Azure Kubernetes Service (AKS) due to orchestration overhead and Azure Virtual Machines due to VM management overhead.
2
Evaluate the remaining container hosting services in Azure (ACI and App Service) against the multi-container sidecar pattern.
Azure Container Instances supports container groups, which allow scheduling multiple containers on the same host sharing network and storage resources. Azure App Service is a web-focused PaaS and does not support this generic sidecar hosting model with shared local storage as natively as ACI.
Choosing Azure Container Instances satisfies the sidecar container group requirement with zero VM or cluster management overhead.

Anahtar Kavram

Distinguishing between Azure Container Instances (ACI) and Azure Kubernetes Service (AKS) for multi-container deployments.
Tahmini Süre:2m 0s
Soru 159Soru →

A developer is designing a globally distributed application that requires storing semi-structured data. They want to use the Cosmos DB API for NoSQL for some queries and the Cosmos DB API for MongoDB for other queries on the same dataset.

Is it true or false that a single container in Cosmos DB can be accessed and queried using different API types simultaneously?

Cevabı ve açıklamayı göster

Cevap: False

Cevap

False
The statement is false because Cosmos DB API configurations are set at the account level. A container inherits this API and cannot be accessed or queried using another API simultaneously.

Adım Adım Çözüm

1
Analyze how APIs are configured and isolated in Cosmos DB.
Cosmos DB requires you to select a specific API (such as API for NoSQL, API for MongoDB, or API for Cassandra) when creating the account.
The selected API determines the wire protocol and how the database engine interprets and indexes the storage container's documents.
2
Evaluate the capability of accessing a single container through multiple APIs.
Containers created within an account inherit that account's API and cannot be queried using a different API.
Cosmos DB does not support cross-API projection or translation on a single container.
3
Determine the correct answer based on the evaluation.
Since simultaneous access via different APIs on a single container is not supported, the statement is false.
To use different APIs, you must create separate Cosmos DB accounts, which results in separate datasets.

Anahtar Kavram

API isolation at the Cosmos DB account level prevents multi-API access to the same database container.
Soru 160Soru →

An organization is deploying a new web application in Microsoft Azure and needs to store relational data using MySQL. To minimize administrative effort, the organization wants a database solution where Microsoft automatically handles operating system updates and database engine patching. Is the following statement true or false?

'Azure Database for MySQL is a Platform as a Service (PaaS) offering that automatically applies operating system updates and database patches, requiring the organization to manage only the database schema and queries.'

Cevabı ve açıklamayı göster

Cevap: True

Cevap

The statement is true because Azure Database for MySQL is a fully managed Platform as a Service (PaaS) database offering where Microsoft automatically handles operating system updates and database engine patching.
The statement is correct because Azure Database for MySQL is a PaaS database service. Under this model, Microsoft manages the underlying virtual machine, operating system patching, and database engine maintenance, freeing the customer from these administrative tasks.

Adım Adım Çözüm

1
Determine the cloud service model classification for Azure Database for MySQL.
Azure Database for MySQL is a Platform as a Service (PaaS) database offering.
Identifying whether a service is IaaS or PaaS determines the boundary of administrative responsibility under the Azure shared responsibility model.
2
Evaluate the management responsibilities of the cloud provider and the customer for PaaS database services.
Under PaaS, the provider (Microsoft) manages physical servers, virtualization, operating system maintenance, and database patching. The customer maintains control over database schemas, queries, and security configurations.
This allocation of duties confirms that the organization is relieved of OS and database patching, verifying the statement's accuracy.

Anahtar Kavram

Shared responsibility model for Azure PaaS database services
Tahmini Süre:1m 0s
ÖncekiSayfa 8 / 60Sonraki
Tüm alıştırma soruları — Microsoft Azure Fundamentals (AZ-900) | Examkin