INTRODUCTION – Exam Prep 2
During this module, you shall be oriented concerning a multitude of tools and services provided by Microsoft Azure. Besides, it will orient you back to several Azure services designed for the safety, security, and trust of your cloud resources.
The practice test will also test for competence in the areas of core solutions, management tools on Azure, as well as general security and network security features. This is part of the aforementioned comprehensive approach towards better preparation and confidence about the most important topics within the exam.
Learning Objectives:
- Evaluate your knowledge of general security and network security features on Microsoft Azure.
- Assess your competence in core solutions and management tools on Microsoft Azure.
PRACTICE EXAM COVERING AZURE MANAGEMENT TOOLS & SECURITY SOLUTIONS
1. Tailwind Traders have recently migrated to Azure cloud services from a Linux-based on-premises environment. The existing administrators want to continue using scripting to configure and create resources. Which of the following tools would you recommend to administrators as the easiest environment for them to use based on their current knowledge?
- Azure Portal
- Azure PowerShell
- Azure CLI (CORRECT)
- ARM Templates
Correct: An Azure CLI is specifically for people with a Linux administrative and scripting background who have to perform onetime management or administrative tasks. Its command line interface offers very powerful and efficient way to interact with Azure resources. It’s definitely an added benefit for the user who is well versed with a scripting language or has an environment with Linux-based setups.
2. Tradewind Traders has recently migrated to Azure cloud services and management wants to start benefiting from DevOps. DevOps is a new approach that helps to align technical teams to work towards their common goal. Which of the following provides a suite of services that address each stage of the software development lifecycle (SDL)?
- Azure DevOps Services (CORRECT)
- Azure DevTest Labs
- GitHub and GitHub Actions
Correct: Azure DevOps is a full-stack suite for SDLC and software development. It has tools for planning, developing, testing, delivery, support and monitoring of software projects. Azure DevOps describes the way teams manage delivery of applications through collaboration, automated workflows, along with setting up the rules that govern their efficient yet reliable way of delivering applications.
3. Tailwind Traders has recently moved to Azure cloud services. Management is concerned that they may be spending too much and are also concerned about how well their new environment meets security best practices. They would like to analyze their use of the cloud against industry best practices. Which monitoring tool would you recommend using for this?
- Azure Advisor (CORRECT)
- Azure Monitor
- Azure Service Health
Correct: Personalized cloud consultant, Azure Advisor evaluates your Azure resources to provide customized recommendations. These recommendations guide improvements in reliability, security, performance, and operational excellence, while also identifying possibilities for cost savings. Azure Advisor helps optimize the Azure environment according to best practices and individual usage patterns.
4. Tradewind Traders is planning to migrate to Azure cloud services and management wants to start developing AI solutions. You have been asked to research what AI features are available in Azure. Based on your research, what service can you use to build a virtual agent that can understand and reply to questions just like a human?
- Azure Bot Service (CORRECT)
- Azure Cognitive Services
- Azure Machine Learning
Correct: In fact, the Azure Bot Service and Bot Framework are a source where one can construct intelligent virtual agents or chatbots that understand questions and respond conversationally just like an understanding of human interaction. With these tools, one can develop, test, and deploy the bots to integrate into different communication channels and enliven client interaction, thereby automating processes.
5. Tradewind Traders has recently migrated to Azure cloud services. Management requires you to research the available monitoring solutions available to them within Azure. A specific requirement is the ability to be able to evaluate the Azure resources and make recommendations that could improve reliability, security, and performance. Which of the following would you recommend to do this?
- Azure Monitor
- Azure Service Health
- Azure Advisor (CORRECT)
Correct: Azure Advisor is an excellent service to evaluate your Azure resources for personalized recommendations. Such suggestions are aimed at improving your reliability, security, performance, and operational excellence, while also finding opportunities to cut costs. Such recommendations can further optimize your Azure environment and align it to best practices for efficiency and effectiveness.
6. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. Management is planning on implementing an Apache Spark engine for large-scale data processing. Which of the following will provide a compatible analytics platform the Apache Spark engine?
- Azure HDInsight
- Azure Data Factory
- Azure DevOps
- Azure Databricks. (CORRECT)
7. Tradewind Traders has recently migrated to Azure cloud services and management wants to start developing AI solutions. Management requires the development of an app that will include both a virtual agent that interfaces with humans through natural language and understands the content and meaning of images, video, audio. What two Azure Services do you think are most suitable for developing this app?
Select all options that apply.
- Azure Machine Learning
- Azure Cognitive Services (CORRECT)
- Azure Bot Service (CORRECT)
Correct: Azure Cognitive Services brings a set of ready-to-use machine learning models that allow applications to see, hear, speak, understand, and even begin reasoning. These complete services have easy-to-integrate APIs for computer vision, speech to text, natural language processing, and decision-making activities to integrate into their applications without the need for specialized knowledge of their working or functioning.
Correct: This technology refers, of course, to Azure Bot Service and Bot Framework, a comprehensive toolkit for building virtual agents or bot solutions that understand, interact, and respond to questions as if they are natural and human-like. With these tools, developers can empower the intelligent agent to communicate with users, automate work, or even assist in different communication channels of the user’s choice, for instance, a web site, a mobile application, or a messaging platform. That’s the part of the framework that suits natural language processing, to have bots tailor more because of personalized and dynamic responses.
8. Tradewind Traders has recently migrated some of their data and resources to Azure cloud services, you are familiarising yourself with the various mechanisms to create resources in Azure. You have been asked to create some resources in Azure using PowerShell. You currently have a Windows 10 computer that has the Azure PowerShell module installed. Does this configuration support the creation of resources in Azure?
- Yes (CORRECT)
- No
Correct: PowerShell scripts are simply PowerShell cmdlets and codes file to run within the PowerShell environment. If the computer runs a compatible operating system with an Azure PowerShell module, then the architecture is capable of creating resources in Azure.
9. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. The company is very proactive in IoT (Internet of Things) and they require a solution that will allow millions of IoT sensors to upload and store data in Azure. This solution must support very large quantities of data. Which of the following Azure resources should be deployed to support the planned solution?
Select 2 options.
- Azure Notification Hubs
- Azure Queue storage
- Azure Data Lake (CORRECT)
- Azure IoT Hub (CORRECT)
Correct: IoT Hub allows the routing of messages to two storage services, namely Azure Blob Storage and Azure Data Lake Storage Gen2. Unlike Azure Blob Storage, Azure Data Lake Storage Gen2 is a hierarchical namespace-enabled extension storage account, which uses both of these services for blob storage of data.
Correct: The IoT Hub represents a managed cloud service that will meet your requirements as a central message hub for bi-directional communication with your IoT application and the devices that the application manages. This includes the building of IoT solutions with reliable and secure communications, including integration with Azure File Storage.
10. Tradewind Traders is planning to migrate to Azure cloud services and management wants to start developing AI solutions. You have been asked to research what AI features are available with Azure with specific emphasis on Azure Cognitive Services. Which of the following features are offered by Cognitive Services?
Select all options that apply.
- The ability to add recognition and identification capabilities when analyzing pictures, videos, and other visual content. (CORRECT)
- The ability to train and evaluate predictive models using tools and programming languages familiar to data scientists.
- The ability to create virtual agents that understand and reply to questions just like a human.
- The ability to convert speech into text and text into natural-sounding speech. Translate from one language to another and enable speaker verification and recognition. (CORRECT)
Correct: When it comes to Speech services in Azure Cognitive Services, they help in converting speech to text and then the same written text can later be synthesized back to natural-sounding speech. Other features include language translation, speaker verification, and speaker recognition.
11. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. Management plans to automate the deployment of new servers to Azure but is concerned that this process may expose administrative credentials during the deployment. Which of the following can be used to encrypt the credentials that will be used in the automated process?
- Azure Key Vault (CORRECT)
- Azure Multi-Factor Authentication (MFA)
- Azure Security Center
- Azure Information Protection
Correct: Speech services included in Azure Cognitive Services are capable of converting speech to text, as well as text to synthesized human-sounding voices. These services allow for translating into different languages and speaker verification and recognition.
12. Tradewind Traders is planning to migrate to Azure cloud services and management wants to start developing AI solutions. You have been asked to research what AI features are available with Azure with specific emphasis on using existing data to train and test a model and then apply that model to new data to forecast future behaviors, outcomes, and trends. Which of the following terms best describe this?
- Machine Learning (CORRECT)
- Deep Learning
Correct: Machine learning is considered method of data science whereby stable data is collected and used to train a model. Once trained, it is tested with real data. After training, this model can be applied to new data to predict orders, consequences, and trends.
13. Tradewind Traders has recently migrated some of their data and resources to Azure cloud services, Management has asked you to research what service is most appropriate to provide for the collection of events from multiple resources into a centralized repository. Based on your research which of the following solutions should you recommend?
- Azure Stream Analytics
- Azure Analysis Services
- Azure Monitor
- Azure Event Hubs (CORRECT)
14. Tradewind Traders has migrated its data and resources to Azure cloud services. They currently have multiple subscriptions and virtual networks in place. Management has asked you to research the ability to filter traffic across subscriptions and virtual networks. Based on your research, which of the following will assist with this filtering?
- Azure Firewall (CORRECT)
- Azure DDoS Protection
- Network Security Group (NSG)
- Application Security Group
Correct: Azure Firewall refers to a managed, cloud-enabled network security that protects resources within Azure Virtual Networks. It is possible to use a single firewall to filter traffic to several different virtual networks across subscriptions.
- Yes (CORRECT)
- No
Correct: An NSG works similar to a firewall. You can then link this NSG to the virtual network or an individual subnet within that network. In order to allow a connection to a virtual machine on port 80 (HTTP), you will have to create an inbound rule in NSG that allows traffic coming into port 80.
- Intrusion detection system (IDS) tool
- Security information and event management (SIEM) tool (CORRECT)
- Playbook
- Intrusion prevention system (IPS) tool
SIEM tools accumulate and scrutinize log data to survey significant activities within an organization. An intrusion detection system, on the other hand, is an application that supervises system activity and produces potential intrusion alerts.
16. Tailwind Traders has recently migrated to Azure cloud services. The development departments are currently working on a new IoT application that will be used to capture and transmit personal data back to a cloud service. Management is concerned that this personal data may be exposed in transit. Which of the following services can the company implement to ensure the highest level of security?
- Azure Sphere (CORRECT)
- IoT Central
- IoT Hub
Correct: Azure Sphere offers an end-to-end highly secure IoT solution for customers, which is targeted from the hardware and operating system all the way through to the highly secure communication method used to send messages from the devices into the message hub. It’s an overall security framework that guarantees the protectiveness of devices, data, and communication channels across the entire ecosystem of IoT.
17. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. The company has developed an Azure web app. They require that the settings for the app be configurable if needed from an iPhone. What are two Azure management tools that you can use from the iPhone?
Select all options that apply.
- Azure CLI (Command Line Interface)
- Azure Mobile App (CORRECT)
- Azure portal (CORRECT)
- Windows PowerShell
Correct: Using Azure Mobile App, you can observe the health of your Azure resources and diagnose their status, troubleshoot issues quickly, and finally run commands for Azure resource management. The app is essential for the application to keep its data safe and encrypt it. You may also want to read up on Microsoft AI Services and Solutions through which you can see how the various capabilities will help you use Azure better.
Correct: The web-based interface present in the Azure portal encompasses its features and attributes for managing and administering Azure resources. Accessibility becomes really easy since the portal is web-based as it can be accessed by any other device, such as an iPhone or Android mobile phone, with an internet connection and allows one to manage Azure services without restrictions from anywhere.
18. Tradewind Traders has recently migrated to Azure cloud services. Their software development teams work on many different projects. The company wants to publish an open-source API that allows third-parties to integrate their inventories of new and used items. They also want to use the API to offer a wider variety of products directly from their e-commerce site. They will need a platform to share example code, collect feedback on the API, allow contributors to report issues, and build communities around feature requests.
Which of the following would you recommend they implement?
- Azure DevTest Labs
- Azure DevOps Services
- GitHub and GitHub Actions (CORRECT)
Correct: Enable development with GitHub: publish your code, receive contributions from people to improve code examples, collect feedback, and manage bug reports. It is basically an open-source software scenario. And another advantage of using GitHub is that it is a well-known collaborative platform for open-source projects, hosting and sharing codes.
19. Tailwind Traders has recently migrated to Azure cloud services. The development departments are currently working on new IoT applications and require a managed service hosted in the cloud that acts as a central message point for bi-directional communication between their IoT application and the devices it manages.
Which of the following will provide this solution?
- Azure IoT Central
- Azure Sphere
- Azure IoT Hub (CORRECT)
Correct: With GitHub, your organization can host its code, accept contributions from the community to enhance code examples, gather feedback, and manage bug reports. Since this scenario necessarily involves open-source code, GitHub is ideal because it is the most popular platform for hosting, sharing, and collaborating on open-source projects.
20. Tradewind Traders has recently migrated some of their data and resources to Azure cloud services, Management is concerned about external attacks against their websites, they also want you to generate reports that will provide information on attempted attacks. Which of the following should you include when implementing this solution?
- Azure Firewall
- DDoS protection (CORRECT)
- Azure Information Protection
- Network security groups (NSG)
Correct: It becomes possible for your company to publish its code at GitHub, receive contributions from the community in improving code examples, elicit feedback, and manage bug reports. In a case of this kind involving open-source code, it, therefore, stands to reason that GitHub is the most appropriate venue, being popular as it is for hosting, sharing, and collaborating on open-source projects.
21. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. Management requires that users can create virtual machines by using their Android tablets. You recommend that they use the PowerShell feature in Azure Cloud Shell. Will this recommendation work?
- Yes (CORRECT)
- No
Correct: Azure Cloud Shell, as the name indicates, is a shell in the browser that allows one to manage and develop different resources from Azure, providing a pre-configured experience in a browser-accessible shell that makes Azure resource management so handy-from anywhere without local setups. Because it is browser-based, Azure Cloud Shell can be run on a browser coming up from devices, such as tablets running the Android operating system, to allow flexibility and ease of access.
22. Tradewind Traders has migrated its data and resources to Azure cloud services. They currently have multiple subscriptions and virtual networks in place. Management has asked you to research the ability to securely store certificates in Azure. Which of the following services should you configure to enable this feature?
- Azure Information Protection
- Azure Security Center
- Azure Key Vault (CORRECT)
- Azure Storage account
Correct: Azure Key Vault is a secure storage facility aimed at holding sensitive material in the form of passwords, certificates, tokens, API keys, and other secrets. It centralizes and securitizes these secrets for control and access, meaning that only authorized people or applications will be able to reach the data and therefore help to secure sensitive information that is planned to be kept in cloud environments.
23. Tradewind Traders has recently migrated to Azure cloud services. Their software development teams work on many different projects and they are required to provide project sponsors and managers with reports, progress tracking, bug reports, etc. Management now wants to ensure that individuals will only have access to information they need to do their work. Which of the following in your opinion would be the most suitable solution to meet this requirement?
- GitHub and GitHub Actions
- Azure DevTest Labs
- Azure DevOps Services (CORRECT)
Correct: Azure DevOps gives permission with a great granularity, so that definitely organizations can understand from whom certain actions can be carried out against the whole toolset. However, it is highly configurable – administrators can create custom fields. These will take metadata and additional information on each work item. Contrarily, GitHub Issues uses tags to categorize and manage issues, providing a somewhat easier, yet less granule and customizable way to organize work than Azure DevOps.
24. Tradewind Traders has recently migrated to Azure cloud services and management wants their developers to start utilizing solutions such as using shared source code repositories and tools that enable developers to perform code reviews by adding comments and questions in a web-view of the source code before it is merged into the main codebase. Which of the following solutions would be most suitable?
- Azure DevOps Services
- Azure DevTest Labs
- GitHub and GitHub Actions (CORRECT)
Correct: GitHub is one of the largest repositories for housing open source software. Other than being a storehouse for code, GitHub has a range of services that give collaborative support, such as coordinating, tracking, reporting of issues, discussing ideas, and even documentation. All these features convert GitHub to a complex platform of open-source project management. Thus, it has a strong backing by the community in collaboration.
25. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. Management plans on deploying several web servers and database servers to Azure but want to limit the types of connections that will be available between the web servers and the databases servers. Which of the following will assist in controlling the connection types?
- network security groups (NSGs) (CORRECT)
- Azure Service Bus
- Local network gateway
- Route filter
Correct: Network security groups are similar to firewalls. If you would like to, attach NSG to virtual networks or even a single subnet within that network. By defining the rules for the control of inbound and outbound traffic, you can then filter network traffic to and from Azure resources within a virtual network. These rules can be based on such parameters as IP address, port, and protocol. This way, access to Azure resources is secured further since only approved traffic is allowed.
26. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. Management now plans on deploying additional virtual machines, however, they are concerned about locking down the ports on these machines to prevent access from devices on the internet. Which of the following can be used to help protect access to the ports on these machines?
- Azure Active Directory (Azure AD) roles
- Azure Active Directory groups
- Network security groups (NSG) (CORRECT)
- Azure key vault
Correct: A Network Security Group serves as a virtual Systems Firewall. An NSG can be attached to a virtual network and, in turn, the subnets within that virtual network. This type of networking common expects security rules, through which conditional inbound and outbound network traffic to and from various Azure resources is permitted or denied based on the IP address, port, and protocol used by the resources. Control access to the Azure resources by using NSGs, as they facilitate security in-network. It is, however, quite helpful to review general security and network security topics in Microsoft Azure for a more detailed view.
27. Tailwind Traders has recently migrated to Azure cloud services. Management requires alerts to be generated that will send notifications to the IT department whenever Azure outages occur. Which Azure monitoring tool would you recommend for this?
- Azure Service Health
- Azure Advisor (CORRECT)
- Azure Monitor
28. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. The company requires a solution that will allow for automation of the deployment of similar resources across multiple business units. Which of the following solutions should you recommend?
- Azure Resource Manager templates (CORRECT)
- Azure API Management service
- Management groups
- Virtual machine scale sets
Correct: Azure Resource Manager (ARM) templates can help you automate the creation and deployment of Azure resources. This approach, known as Infrastructure as Code (IaC), enables you to define the infrastructure and its configuration in a declarative JSON format, ensuring that resource deployments are consistent and repeatable across environments.
29. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. As part of their future planning, management has requested information on cloud services that will provide a set of version control tools to manage the developer’s code. Which of the following will satisfy this requirement?
- Azure DevOps Repos (CORRECT)
- Azure Cosmos DB
- Azure Storage
- Azure DevTest Labs
Correct: Azure DevOps Repos is an effective repository of version control tools such that one can manage his or her code in an effective way. It provides different repositories for versioning and managing the project code and allows a team to collaborate over the code changes. Azure DevOps Repos provides the ability to know what changes were made in the code and where they had been made, resolve the conflicts, and create history of code versions hence making it easier for team members to come along work as a team on software development projects.
30. Tradewind Traders is planning to migrate to Azure cloud services. Management has asked you to spend some time researching the big data and analytic solutions available in Azure. Based on your research, which of the following provides a fully managed, open-source analytics service for enterprises that makes it easier and more cost-effective to process massive amounts of data while running popular open-source frameworks?
- Azure HDInsight (CORRECT)
- Azure Data Lake Analytics
- Azure Databricks
- Azure Synapse Analytics
Correct: Azure HDInsight is a completely managed open source analytics service tailored for enterprises to process multiple data sets via some Hadoop software like Spark and Hive. The cloud-based service is intended to simplify and accelerate the processing of large amounts of data while cutting expenditure costs for their services. This is an open-source implementation that HDInsight has, which is run primarily by all Hadoop engines. Users can create, run, and manage different groups organized within a cluster model to accommodate specific analysis. This has enabled businesses to analyze big data intelligently and take actions based on it in the cloud.
CONCLUSION – Exam Prep 2
To sum up, this module gives a wide overview of all that concerns the tools and services housed in Microsoft Azure, paying particular attention to security and management. The practice exam further enhances one’s understanding of the core solutions and security features relevant to the AZ-900 Microsoft Certified Azure Fundamentals exam, just the firm foundation for successful attainment of the certification.