Examkin

Tüm alıştırma soruları

1186 soru

Tüm türler1,186Çoktan seçmeli620Çoklu seçim228Doğru / Yanlış291Eşleştirme47
Soru 161Soru →

A retail firm is migrating some of its inventory services to Azure. The firm needs to establish a connection between its physical warehouse database and an Azure Virtual Network. The connection must not traverse the public internet and must provide a dedicated, reliable link. Which Azure networking service should the firm implement, and which cloud model does this configuration represent?

Cevabı ve açıklamayı göster

Cevap: ExpressRoute, operating under a hybrid cloud model

Cevap

ExpressRoute, operating under a hybrid cloud model
ExpressRoute provides a private, dedicated physical connection to Azure that completely bypasses the public internet. Furthermore, the combination of physical on-premises infrastructure (the local warehouse database) and Azure services represents a hybrid cloud model.

Adım Adım Çözüm

1
Identify the network connection requirement.
The requirement specifies a dedicated link that does not traverse the public internet.
This points to Azure ExpressRoute as it provides private, dedicated bandwidth bypassing the public internet, unlike VPN connections.
2
Identify the cloud deployment model.
The environment combines physical on-premises assets (a warehouse database) with Azure public cloud resources.
A setup combining local datacenters/infrastructure with public cloud environments is defined as a hybrid cloud model.

Anahtar Kavram

ExpressRoute private connectivity and hybrid cloud architecture
Soru 162Soru →

An Azure administrator assigns a user the Reader role at a management group level and the Contributor role on a specific resource group within a subscription in that management group. If a new resource group is created in the same subscription, is the statement true or false that the user will automatically inherit Contributor permissions for the new resource group?

Cevabı ve açıklamayı göster

Cevap: False

Cevap

The statement is false. The user will only inherit the Reader role on the new resource group because the Contributor role was assigned only at the scope of a different resource group, and permissions do not propagate horizontally to other resource groups.
The correct answer is false because permissions in Azure RBAC inherit downwards through the management hierarchy. Since the Contributor role is scoped specifically to another resource group, it has no effect on the new resource group, which only inherits the Reader role from the management group level.

Adım Adım Çözüm

1
Analyze the scope of the Reader role assignment.
The Reader role is assigned at the management group level, which is a parent scope of the subscription and all resource groups within it.
To identify which permissions will inherit down the entire resource hierarchy.
2
Evaluate the inheritance of the Reader role on the new resource group.
The new resource group inherits the Reader role assignment from the management group.
Azure RBAC inheritance flows downwards from parent scopes to child scopes.
3
Analyze the scope of the Contributor role assignment.
The Contributor role is assigned at the scope of a specific, pre-existing resource group, not at the subscription or management group level.
To determine if the Contributor role has a scope that covers the new resource group.
4
Evaluate if the Contributor role applies to the new resource group.
The Contributor role does not apply to the new resource group because roles assigned at a resource group level do not propagate horizontally to other resource groups.
Azure RBAC assignments only apply to the target resource and its descendants, not to sibling resources.

Anahtar Kavram

Azure RBAC inheritance and scoping rules
Soru 163Soru →

An administrator wants to optimize their Azure environment using Azure Advisor. Which two of the following tasks can be accomplished based on recommendations provided by Azure Advisor?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Identify virtual machines with low CPU utilization and receive recommendations to right-size or shut them down to reduce costs; Receive recommendations to improve the availability of applications by enabling virtual machine backups

Cevap

Identify virtual machines with low CPU utilization and receive recommendations to right-size or shut them down to reduce costs, and receive recommendations to improve the availability of applications by enabling virtual machine backups
Azure Advisor provides personalized recommendations to optimize your deployments. Under the Cost category, it suggests right-sizing or shutting down underutilized virtual machines. Under the Reliability category, it suggests actions like enabling virtual machine backups to ensure high availability and disaster recovery.

Adım Adım Çözüm

1
Analyze the core function of Azure Advisor.
Azure Advisor is a personalized cloud consultant that helps follow best practices across five categories: Cost, Security, Reliability, Performance, and Operational Excellence.
This establishes the scope of Advisor's capabilities.
2
Evaluate each option against Advisor's categories and other Azure management tools.
Optimizing VM utilization (Cost) and enabling backups (Reliability) match Advisor categories. Blocking deployments (Azure Policy) and tracking global outages (Azure Service Health) are functions of other distinct Azure tools.
This identifies the correct recommendations and distinguishes them from boundary tools.

Anahtar Kavram

Azure Advisor recommendation categories and tool boundaries
Tahmini Süre:1m 0s
Soru 164Soru →

When a CanNotDelete resource lock is applied to an Azure resource group, authorized users can still modify the configuration settings of the resources within that resource group.

Cevabı ve açıklamayı göster

Cevap: True

Cevap

True
A CanNotDelete resource lock prevents deletion of the resource but allows authorized users to perform read and modify operations on it. Thus, modifying configurations remains possible.

Adım Adım Çözüm

1
Identify the type of resource lock applied to the resource group.
The resource lock is a CanNotDelete lock.
Different resource locks have different restriction rules in Azure.
2
Determine the operations restricted by a CanNotDelete lock.
A CanNotDelete lock prevents resource deletion, but permits read and write/modify operations.
This is the fundamental behavior of the CanNotDelete lock type.
3
Evaluate the statement against the lock behavior.
Since writing and modifying configurations are permitted, authorized users can still modify resource settings. The statement is true.
To conclude whether the statement is true or false.

Anahtar Kavram

CanNotDelete resource lock behavior
Soru 165Soru →

An administrator needs to configure access to an Azure resource group named 'App-RG'. A developer named User1 must be able to restart virtual machines and modify storage accounts inside 'App-RG'. However, User1 must not be allowed to delegate resource access permissions to other users.

Which of the following configurations should the administrator implement?

Cevabı ve açıklamayı göster

Cevap: Assign the Contributor role to User1 at the 'App-RG' scope.

Cevap

Assign the Contributor role to User1 at the 'App-RG' scope.
The correct configuration is to assign the Contributor role at the resource group scope. In Azure RBAC, the Contributor role grants full access to manage resources, including restarting virtual machines and modifying storage accounts, but does not allow the user to assign roles to others. This satisfies both requirements of managing the resources and preventing permission delegation.

Adım Adım Çözüm

1
Analyze the access requirements for User1.
User1 needs to manage resources (restart VMs, modify storage accounts) but must not be able to delegate permissions to others.
This determines the scope and the specific Azure built-in role needed for the user.
2
Compare built-in Azure RBAC roles.
The Contributor role grants full management capabilities but restricts authorization actions. The Owner role grants full management capabilities and permits authorization actions (delegation). The Reader role only allows read-only access.
Selecting the correct built-in role ensures least-privilege compliance.
3
Differentiate between Azure RBAC and Azure Policy.
Azure RBAC manages user permissions, while Azure Policy enforces compliance and resource properties (e.g., allowed VM sizes or regions).
This rules out options attempting to use Azure Policy to grant user access.

Anahtar Kavram

Azure Role-Based Access Control (RBAC)
Tahmini Süre:1m 0s
Soru 166Soru →

Your team is planning to migrate several database workloads to Azure. How should you match each Azure database service to its primary description?

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Azure SQL Database
Azure Cosmos DB
Azure Database for PostgreSQL

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Azure SQL Database matches the Microsoft SQL Server engine description. Azure Cosmos DB matches the globally distributed NoSQL description. Azure Database for PostgreSQL matches the community-edition PostgreSQL description.
Azure SQL Database matches the Microsoft SQL Server engine description because it is Azure's fully managed service for SQL Server databases. Azure Cosmos DB matches the globally distributed NoSQL description because it is designed for non-relational workloads and multi-model access. Azure Database for PostgreSQL matches the community-edition PostgreSQL description because it is the managed service for running that specific open-source relational engine.

Adım Adım Çözüm

1
Identify the database engine for Azure SQL Database.
It is based on the Microsoft SQL Server engine.
Azure SQL Database is the primary PaaS offering for SQL Server workloads.
2
Identify the database model for Azure Cosmos DB.
It is a globally distributed NoSQL database.
Azure Cosmos DB is designed for schema-free, globally scaled workloads with multiple API options.
3
Identify the database engine for Azure Database for PostgreSQL.
It runs the community-edition PostgreSQL engine.
Azure Database for PostgreSQL is dedicated to hosting the open-source PostgreSQL database engine.

Anahtar Kavram

Azure Database Services
Tahmini Süre:45s
Soru 167Soru →

To protect a critical production storage account, a `CanNotDelete` lock is configured directly on the storage resource. An IT technician can still rotate the storage account's access keys without removing the lock.

Cevabı ve açıklamayı göster

Cevap: True

Cevap

True
A CanNotDelete lock restricts users from deleting the resource, but allows reading and modifying the resource. Since rotating access keys is a modification operation, it is fully permitted under a CanNotDelete lock.

Adım Adım Çözüm

1
Analyze the lock type applied to the resource.
The resource has a CanNotDelete lock applied.
Understanding the restriction type is critical to determining which operations are blocked.
2
Determine the operations blocked by a CanNotDelete lock.
A CanNotDelete lock prevents deletion but allows reading and modifying resource configurations.
This distinguishes it from a ReadOnly lock, which prevents both deletions and modifications.
3
Evaluate whether rotating storage account keys is a modification or deletion action.
Rotating keys modifies the configuration of the storage account and is not a deletion operation.
Since it is a modification, it is allowed under a CanNotDelete lock.

Anahtar Kavram

Azure Resource Locks prevent accidental deletion or modification of resources. A CanNotDelete lock prevents deletion but allows modification, while a ReadOnly lock prevents both deletion and modification.
Tahmini Süre:45s
Soru 168Soru →

A company is implementing a hybrid networking architecture to connect its on-premises office to resources inside an Azure virtual network. The design requires a primary high-bandwidth private connection and a secondary, encrypted backup connection that runs over the public internet.

Which two statements correctly describe the connectivity options that should be used for this design? (Select two)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: ExpressRoute routes traffic over a dedicated, private connection rather than the public internet.; A Site-to-Site VPN Gateway connection encrypts traffic and transmits it over the public internet.

Cevap

ExpressRoute routes traffic over a dedicated, private connection rather than the public internet, and a Site-to-Site VPN Gateway connection encrypts traffic and transmits it over the public internet.
The correct options are the ones stating that ExpressRoute routes traffic over a dedicated private connection and that a Site-to-Site VPN Gateway encrypts traffic and transmits it over the public internet. ExpressRoute connects local datacenters directly to Azure resources via a private network partner, avoiding the public internet for increased security, speed, and reliability. In contrast, a Site-to-Site VPN Gateway establishes an encrypted tunnel over the public internet, making it an excellent cost-effective backup option.

Adım Adım Çözüm

1
Analyze the requirements for the primary connection.
The primary connection needs high-bandwidth and must bypass the public internet. ExpressRoute meets this by using a private, dedicated connection.
ExpressRoute connections do not go over the public internet, offering reliability and high speed.
2
Analyze the requirements for the secondary/backup connection.
The backup connection must be encrypted and run over the public internet. A Site-to-Site VPN Gateway meets this requirement.
VPN Gateways establish encrypted tunnels (IPsec/IKE) over the public internet, providing a lower-cost secure alternative.

Anahtar Kavram

Azure hybrid networking services including ExpressRoute and VPN Gateways.
Soru 169Soru →

A media broadcasting company operates containerized workloads on Kubernetes clusters running on Google Cloud Platform (GCP). The security team wants to enforce centralized compliance standards and configuration rules across these external workloads using the Azure control plane. Is it true that Azure Arc can be used to extend Azure resource governance tools to these external Kubernetes clusters?

Cevabı ve açıklamayı göster

Cevap: True

Cevap

True
The statement is correct because Azure Arc-enabled Kubernetes allows organizations to connect external clusters (such as those running on GCP) to Azure. This projection into the Azure control plane makes it possible to apply governance and compliance tools, such as Azure Policy, directly to those external workloads.

Adım Adım Çözüm

1
Understand the capabilities of Azure Arc-enabled Kubernetes.
Azure Arc allows registration and projection of external Kubernetes clusters (including those on GCP, AWS, or on-premises) into the Azure Resource Manager (ARM).
To manage external resources, they must first be represented as resources in Azure's control plane.
2
Evaluate the applicability of Azure governance tools to Arc-enabled resources.
Once projected into ARM, external clusters can be governed using Azure Policy, Defender for Cloud, and Azure Monitor.
Azure Arc acts as a bridge that extends Azure's native governance and monitoring capabilities to non-Azure infrastructure.

Anahtar Kavram

Governance of hybrid and multi-cloud resources using Azure Arc
Tahmini Süre:1m 0s
Soru 170Soru →

A game development studio runs its multiplayer matchmaking services on Kubernetes clusters located in an on-premises datacenter and on Amazon Web Services (AWS). The studio wants to use its existing Azure subscription to monitor compliance and enforce security policies across all of these Kubernetes clusters without migrating the underlying workloads to Azure. Which Azure service should the studio use to meet this requirement?

Cevabı ve açıklamayı göster

Cevap: Azure Arc

Cevap

Azure Arc
Azure Arc projects resources located outside of Azure (such as Kubernetes clusters running on-premises or on other clouds like AWS) into Azure Resource Manager (ARM). This enables administrators to apply Azure Policy, monitor health with Azure Monitor, and secure workloads using Microsoft Defender for Cloud from a single dashboard, meeting the studio's exact needs.

Adım Adım Çözüm

1
Analyze the requirements
The studio needs to apply security policies to Kubernetes clusters hosted outside of Azure (on-premises and AWS) without migration.
Understanding the constraint of managing external, non-Azure resources from a centralized control plane is key to selecting the correct governance service.
2
Evaluate the capabilities of Azure Arc
Azure Arc extends Azure Resource Manager (ARM) to manage resources outside Azure, including Kubernetes clusters.
This matches the requirement to use Azure Policy and monitoring for hybrid and multi-cloud environments.
3
Compare against distractors
Azure Stack Hub runs Azure services locally, Azure Automation handles process automation, and Azure Lighthouse manages multiple Azure tenants. None of these extend Azure governance to external multi-cloud clusters.
This rules out the incorrect options and confirms Azure Arc as the correct solution.

Anahtar Kavram

Extending Azure governance and management to hybrid and multi-cloud resources via Azure Arc
Tahmini Süre:1m 30s
Soru 171Soru →

An enterprise is migrating containerized workloads to Azure and wants to minimize operational maintenance. The migration plan mandates that Microsoft must be fully responsible for all operating system patching, and the development team must not manage container orchestrators or virtual machine nodes. Which of the following Azure services meet these requirements? (Select two)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Container Instances; Azure App Service

Cevap

Azure Container Instances and Azure App Service are the correct options because both are Platform as a Service (PaaS) or serverless offerings where Microsoft is responsible for operating system patching, and neither requires the user to manage virtual machines or container orchestrators.
Azure Container Instances and Azure App Service are both Platform as a Service models. In these models, Microsoft handles the physical infrastructure, virtualization, and host operating system patching. Additionally, they do not require the user to configure or manage virtual machine nodes or orchestrator clusters (like Kubernetes). Azure Container Instances provides a simple serverless container run, while Azure App Service provides a managed platform optimized for hosting web applications.

Adım Adım Çözüm

1
Analyze the customer's constraints regarding patching and management.
The customer requires that the cloud provider (Microsoft) fully manages the operating system patching and that the team does not manage container orchestrators or virtual machine nodes.
This helps narrow down the service models from Infrastructure as a Service (IaaS) and complex orchestration to fully managed PaaS or serverless container solutions.
2
Evaluate the responsibility model of Azure Virtual Machines and Azure Kubernetes Service.
Azure Virtual Machines requires the customer to patch the OS. Azure Kubernetes Service requires managing container orchestration and node image updates/reboots.
Eliminating these options rules out IaaS and complex container orchestrators, which do not meet the customer's requirements.
3
Evaluate Azure Container Instances and Azure App Service against the requirements.
Both Azure Container Instances (serverless container compute) and Azure App Service (PaaS) offload OS patching to Microsoft and do not require management of VMs or orchestration engines.
This confirms that Azure Container Instances and Azure App Service satisfy all the specified criteria.

Anahtar Kavram

Shared responsibility model and compute hosting options for containerized workloads in Azure, comparing managed PaaS (Azure App Service), serverless containers (Azure Container Instances), and container orchestration (Azure Kubernetes Service).
Soru 172Soru →

An IT department is establishing administrative guidelines for its cloud management team. The team uses a mix of local workstations running Linux and Windows, as well as thin clients with web-only access. Which two statements accurately describe the requirements, capabilities, or limitations of Azure management tools for this team? Select two.

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Both Azure CLI and Azure PowerShell can be installed and executed locally on Linux, macOS, and Windows operating systems.; To use Azure Cloud Shell, a user must have an associated Azure Storage account configured with a file share to persist files across sessions.

Cevap

The correct statements are that both Azure CLI and Azure PowerShell can be installed and executed locally on Linux, macOS, and Windows operating systems, and that to use Azure Cloud Shell, a user must have an associated Azure Storage account configured with a file share to persist files across sessions.
The correct options are the statements regarding cross-platform support and the storage account requirement for Azure Cloud Shell. Both Azure CLI and Azure PowerShell are cross-platform command-line tools that can be installed on Windows, macOS, and Linux. Additionally, Azure Cloud Shell requires an Azure Storage account to mount a file share, which persists files in the user's home directory across different sessions.

Adım Adım Çözüm

1
Evaluate the cross-platform capabilities of local command-line tools.
Confirm that both Azure CLI and Azure PowerShell (built on PowerShell Core) are cross-platform and run on Windows, macOS, and Linux.
This determines if the statement about local installation is correct and if local PowerShell is restricted to Windows.
2
Evaluate the requirements and architecture of Azure Cloud Shell.
Confirm that Azure Cloud Shell requires an Azure Storage account to map a file share for file persistence, and that it is a browser-accessible, cloud-hosted tool, not a local offline application.
This distinguishes between the cloud-hosted shell requirements and false claims about local pre-installation or offline execution.

Anahtar Kavram

Azure command-line management tools and Cloud Shell compatibility/requirements
Soru 173Soru →

A company is planning to establish a hybrid network connection between their on-premises office and an Azure virtual network. They need to choose the appropriate Azure services for this connection. Which of the following statements about Azure hybrid networking services are correct? (Select two).

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure ExpressRoute provides a private, dedicated connection to Azure that does not traverse the public internet.; Azure VPN Gateway sends encrypted traffic across the public internet to connect on-premises networks to Azure.

Cevap

The correct statements are that Azure ExpressRoute provides a private, dedicated connection that does not traverse the public internet, and Azure VPN Gateway sends encrypted traffic over the public internet.
The correct statements describe the fundamental properties of ExpressRoute and VPN Gateway. Azure ExpressRoute provides a private, dedicated connection to Azure that does not use the public internet, whereas Azure VPN Gateway sends encrypted traffic over the public internet.

Adım Adım Çözüm

1
Analyze the properties of Azure ExpressRoute.
ExpressRoute provides dedicated, private physical connections to Azure, which bypasses the public internet entirely.
To verify if the statement about ExpressRoute is correct.
2
Analyze the properties of Azure VPN Gateway.
VPN Gateway establishes an encrypted IPSec tunnel over the public internet to connect on-premises networks to Azure.
To verify if the statement about VPN Gateway is correct.
3
Evaluate the distractors against the cloud models and networking concepts.
ExpressRoute does not use the public internet (ruling out the incorrect ExpressRoute statement). Connecting on-premises to Azure creates a hybrid cloud, not a public cloud model (ruling out the deployment model statement).
To identify and eliminate the incorrect options.

Anahtar Kavram

Azure hybrid networking options provide different paths and security levels for connecting on-premises datacenters to Azure.
Soru 174Soru →

A company is planning to deploy two different containerized workloads to Azure:

1. A custom web application that requires automatic scaling, custom domains, and SSL/TLS certificates, but does not require container orchestration.
2. A short-running background job that runs on a schedule, processes data, and terminates immediately, without needing persistent container orchestration.

Which two Azure services should the company choose to meet these requirements? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure App Service to host the web application; Azure Container Instances (ACI) to host the short-running background job

Cevap

Azure App Service to host the web application, and Azure Container Instances (ACI) to host the short-running background job
The correct selections are Azure App Service for hosting the web application, and Azure Container Instances (ACI) for running the scheduled background job. Azure App Service is a fully managed Platform as a Service (PaaS) offering that automatically handles OS updates, scaling, and custom domains for web apps. Azure Container Instances (ACI) is a fast, serverless container hosting option that is ideal for running simple, isolated, and short-running containerized tasks without the complexity of managing a container orchestrator.

Adım Adım Çözüm

1
Analyze the requirements for the first workload (the web application).
The web application requires automatic scaling, custom domains, and SSL certificates, but does not need container orchestration.
Azure App Service provides a fully managed platform (PaaS) that handles scaling, custom domains, and certificates with minimal administrative effort.
2
Analyze the requirements for the second workload (the background job).
The background job runs on a schedule, processes data, terminates immediately, and does not require complex container orchestration.
Azure Container Instances (ACI) provides a serverless container platform that allows running isolated containers on demand and billing by the second, without orchestrator overhead.
3
Evaluate and eliminate incorrect compute options.
Azure Kubernetes Service (AKS) and Azure Virtual Machines are eliminated due to excessive complexity and shared responsibility boundaries.
AKS is meant for complex multi-container orchestration. Azure Virtual Machines (IaaS) leaves the responsibility of OS patching and configuration to the customer, violating the requirement for automatic platform-managed patching.

Anahtar Kavram

Distinguishing compute hosting options in Azure based on management overhead, orchestration needs, and workload duration.
Tahmini Süre:1m 30s
Soru 175Soru →

An enterprise is reviewing its cloud deployment configuration against Azure Advisor recommendations. Match each specific optimization task recommended by Azure Advisor to its corresponding Advisor category.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Configure Azure Backup for critical database virtual machines hosting a multi-region web application to ensure restoration capabilities in the event of data corruption.
Upgrade virtual machines hosting high-throughput transactional databases in a production environment from Standard HDD to Premium SSD storage to resolve I/O throttling.
Enable soft delete and purge protection for Azure Key Vaults containing production connection strings to secure cryptographic keys against accidental deletion.
Create Azure Service Health alerts to receive prompt notifications about service issues impacting the enterprise's active subscriptions.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Azure Backup matches Reliability; Premium SSD upgrade matches Performance; Key Vault soft delete matches Security; Azure Service Health alerts match Operational Excellence.
The correct pairings align the specified cloud optimization tasks with their designated Azure Advisor categories: Azure Backup falls under Reliability; Standard HDD to Premium SSD migration falls under Performance; Key Vault soft delete falls under Security; and Azure Service Health alerts fall under Operational Excellence.

Adım Adım Çözüm

1
Analyze each recommendation to determine its primary goal.
Azure Backup is for data recovery; Premium SSD is for storage throughput; Key Vault soft delete is for cryptographic key protection; Service Health is for operational outage alerts.
Understanding the primary objective of each recommended task is key to mapping it to the correct Advisor category.
2
Map the primary goals to the five Azure Advisor pillars.
Data recovery aligns with Reliability; storage throughput aligns with Performance; access and asset protection aligns with Security; operational alerts align with Operational Excellence.
Azure Advisor's categories directly correspond to these core cloud architectural pillars.

Anahtar Kavram

Azure Advisor recommendation categories
Soru 176Soru →

A retail corporation wants to move its local inventory management database to the cloud. The system is built on a relational database structure and relies on internal SQL Server Agent jobs to update stock levels every hour. The corporation wants to eliminate the administrative burden of operating system maintenance and automated security patching. However, they need to keep the instance-level capabilities of their database engine without refactoring the application.

Which Azure service meets these database requirements?

Cevabı ve açıklamayı göster

Cevap: Azure SQL Managed Instance

Cevap

Azure SQL Managed Instance
Azure SQL Managed Instance is correct because it is a fully managed PaaS database service designed to migrate on-premises SQL Server databases with minimal refactoring. It automatically handles operating system patching and maintenance while supporting instance-level features such as SQL Server Agent.

Adım Adım Çözüm

1
Analyze the management requirement
The customer wants to eliminate operating system maintenance and automated security patching, which points to a Platform as a Service (PaaS) model rather than Infrastructure as a Service (IaaS).
This rules out SQL Server on Azure Virtual Machines, which requires the customer to manage and patch the operating system.
2
Analyze the database feature requirement
The database requires instance-level SQL Server features, specifically SQL Server Agent jobs, without application refactoring.
This rules out Azure SQL Database, which is a database-scoped PaaS service and does not natively support SQL Server Agent jobs at the instance level. It also rules out Azure Cosmos DB, which is a NoSQL service.
3
Select the service that satisfies both requirements
Azure SQL Managed Instance provides a fully managed PaaS environment (no OS patching) while supporting instance-level SQL Server features like SQL Server Agent.
It offers the benefits of a fully managed PaaS service combined with high SQL Server instance-level compatibility.

Anahtar Kavram

Azure Database Services (Relational, Non-Relational, and Cosmos DB)
Soru 177Soru →

An IT administrator assigns a user named User1 the Contributor role at the resource group level for a resource group named Dev-RG. Which of the following actions is User1 permitted to perform? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Create new virtual machines within Dev-RG.; Delete existing storage accounts within Dev-RG.

Cevap

Creating new virtual machines within Dev-RG and deleting existing storage accounts within Dev-RG.
The Contributor role allows a user to perform all resource management tasks within the target scope, which includes creating virtual machines and deleting storage accounts. Since the scope is the resource group Dev-RG, these operations are allowed on any resources contained inside it.

Adım Adım Çözüm

1
Analyze the assigned Azure RBAC role and its scope.
User1 is assigned the Contributor role at the resource group level (Dev-RG).
Understanding the role and its scope defines the boundaries of what the user can do and where those actions are applied.
2
Evaluate the capabilities of the Contributor role.
The Contributor role grants full access to manage (create, read, update, delete) all resources within the scope, but it does not allow granting access to others.
This identifies that creating virtual machines and deleting storage accounts are permitted resource management activities.
3
Evaluate compliance and property enforcement actions against Azure governance features.
Enforcing tagging rules and blocking deployments based on resource specifications (like CPU limits) require Azure Policy, not RBAC.
This distinguishes between identity-based authorization (RBAC) and resource compliance/configuration enforcement (Azure Policy).

Anahtar Kavram

Azure Role-Based Access Control (RBAC) vs Azure Policy
Soru 178Soru →

A logistics provider wants to establish a dedicated, private connection between its on-premises datacenter and Azure. This connection must bypass the public internet entirely to ensure maximum reliability. Which Azure service should the provider use?

Cevabı ve açıklamayı göster

Cevap: Azure ExpressRoute

Cevap

Azure ExpressRoute
The service that establishes a dedicated, private connection between on-premises networks and Azure without using the public internet is Azure ExpressRoute. This provides faster speeds, lower latencies, and higher reliability than typical internet connections.

Adım Adım Çözüm

1
Analyze the requirement for a dedicated, private network connection between an on-premises datacenter and Azure that bypasses the public internet.
Identify that the solution must use a private network path and not rely on public internet routing.
This filters out standard VPN connections which encrypt traffic but still use the public internet.
2
Compare the capabilities of Azure ExpressRoute and Azure VPN Gateway.
ExpressRoute provides a private dedicated connection via a connectivity provider, whereas VPN Gateway routes traffic over the public internet.
Selecting ExpressRoute satisfies the requirement of avoiding the public internet.

Anahtar Kavram

Azure ExpressRoute provides private, dedicated, and high-speed hybrid connectivity that bypasses the public internet.
Tahmini Süre:45s
Soru 179Soru →

A company has several virtual machines that have been running with low utilization for the past month. The IT team wants to obtain recommendations on how to reduce costs by resizing or shutting down these virtual machines. Which Azure service should they use to obtain these recommendations?

Cevabı ve açıklamayı göster

Cevap: Azure Advisor

Cevap

Azure Advisor is the correct tool to use for identifying underutilized virtual machines and obtaining cost-reduction recommendations.
Azure Advisor is the correct service because it continuously analyzes resource telemetry and provides personalized recommendations to optimize Azure deployments. One of its core categories is Cost, which includes identifying underutilized virtual machines and recommending that they be right-sized or shut down to save money.

Adım Adım Çözüm

1
Identify the goal of the scenario, which is to analyze virtual machine utilization and receive recommendations for reducing costs (right-sizing or shutting down underutilized resources).
The target requirement is a cost optimization and resource recommendation tool.
This helps narrow down the service to one that analyzes usage patterns and suggests financial savings.
2
Evaluate the capabilities of the listed Azure services to determine which one specializes in cost and resource optimization recommendations.
Azure Advisor is identified as the service that provides personalized recommendations across categories like Cost, Security, Reliability, Performance, and Operational Excellence.
Azure Policy, Azure Monitor, and Microsoft Defender for Cloud serve governance, telemetry collection, and security purposes respectively, and do not directly provide VM resizing cost recommendations.

Anahtar Kavram

Azure Advisor provides personalized recommendations to optimize Azure resources for cost, security, reliability, performance, and operational excellence.
Soru 180Soru →

An administrator is configuring access permissions for a team of developers who need to manage virtual machines in a resource group named Dev-RG. Which of the following statements are correct regarding the behavior and capabilities of Azure Role-Based Access Control (RBAC) in this scenario? (Select TWO options)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Assigning the Owner role to a user at the subscription level automatically grants them Owner permissions for all resources inside Dev-RG through inheritance.; Assigning the Contributor role to a developer at the Dev-RG level allows them to create and manage virtual machines within the resource group.

Cevap

The correct statements are that assigning the Owner role at the subscription level grants owner permissions to all resources in Dev-RG through inheritance, and assigning the Contributor role at the Dev-RG level allows creating and managing virtual machines.
Azure RBAC allows fine-grained access management. Assigning Owner at the subscription level ensures the permissions inherit down to all resource groups within it, including Dev-RG. Assigning Contributor at the resource group level gives users the necessary rights to create and manage virtual machines within that specific resource group.

Adım Adım Çözüm

1
Analyze the built-in RBAC roles and scope rules.
Confirm that Owner and Contributor are valid roles that permit resource management and that permissions inherit down from the subscription to the resource group.
This verifies the validity of the permissions and inheritance statements.
2
Differentiate the capabilities of Azure RBAC and Azure Policy.
Identify that restricting virtual machine sizes or enforcing rules to prevent deletion are governance compliance features managed by Azure Policy rather than RBAC.
This helps eliminate distractors that confuse access management with compliance enforcement.

Anahtar Kavram

Azure Role-Based Access Control (RBAC) built-in roles and scope inheritance
ÖncekiSayfa 9 / 60Sonraki
Tüm alıştırma soruları — Microsoft Azure Fundamentals (AZ-900) | Examkin