Module 5: Exam Prep 4 – Earn A Cert

Contents hide

Spread the love

INTRODUCTION – Exam Prep 4

In this module, you will complete a practice exam to assess your understanding and application of the key concepts covered in the AZ-900 Microsoft Certified: Azure Fundamentals exam. The practice exam will cover the skills assessed across the six domains of the certification exam: cloud concepts, core Azure services, core solutions and management tools on Azure, general security and network security features, identity, governance, privacy, and compliance features, as well as Azure cost management and Service Level Agreements.

Learning Objectives:

Understand the Microsoft certification program
Prepare for the AZ-900 exam and becoming Microsoft Certified
Evaluate your knowledge of core Microsoft Azure services
Evaluate your understanding of cloud concepts
Evaluate your knowledge of general security and network security features on Microsoft Azure
Evaluate your knowledge of core solutions and management tools on Microsoft Azure
Evaluate your understanding of Microsoft Azure cost management and Service Level Agreements
Evaluate your knowledge of identity, governance, privacy, and compliance features on Microsoft Azure

FULL PRACTICE EXAM

1. Trade wind Traders’ current on-premises datacenter has several hundred servers and available resources in the datacenter are currently very low. Management has asked you to research a solution that will allow for increased resources but will keep expenditure such as capital expenditure and operational expenditure at a minimum. What solution should you recommend?

Create a Hybrid cloud (CORRECT)
A complete migration to the public cloud
Create a new Private cloud
Create an additional Datacenter

Correct: A hybrid cloud is a combination of a private cloud and a public cloud. With a hybrid cloud, you can continue to use the on-premises servers while adding new servers in the public cloud. Adding new servers in Azure minimizes the capital expenditure costs

2. Tailwind Traders has recently moved to Azure cloud services from an on-premises Windows environment and the Chief Financial Officer (CFO) now wants to gain insights into how Azure resources are being used and costed. He wants to see the data displayed visually and be able to run reports on an ongoing basis in real-time. Which tool would you recommend using in this scenario?

Azure CLI
Azure PowerShell
Azure Portal (CORRECT)
ARM Templates

Correct: That’s correct, given the requirement to view data visually and create custom reports the Azure portal is the best choice. You can quickly find answers to questions using a range of reporting options.

3. Trade wind Traders has recently migrated to Azure cloud services. The company has just completed a review of its current configuration and has discovered that there is a selection of unused resources currently in existence including multiple AD accounts, multiple groups, multiple public IP addresses, and multiple network interfaces. The company wants to reduce costs to a minimum. You recommend removing the unused user accounts. Will this reduce the monthly costs?

Yes
No (CORRECT)

Correct: You are not charged for user accounts. Therefore, deleting unused user accounts will not reduce the Azure costs for the company.

4. Trade wind Traders is planning to migrate some of their data and resources to Azure cloud services and will make use of Azure’s pay-as-you-go subscription. What type of expenditure is the pay-as-you-go subscription?

Operational Expenditure (OpEx) (CORRECT)
Capital Expenditure (CapEx)

Correct: One of the major changes that you will face when you move from an on-premises cloud to the public cloud is the switch from capital expenditure (buying hardware) to operating expenditure (paying for service as you use it).

5. Trade wind Traders has recently migrated some of its data and resources to Azure cloud services. Management requires that users can create virtual machines by using their Android tablets. You recommend that they use the PowerShell feature in Azure Cloud Shell. Will this recommendation work?

Yes (CORRECT)
No

6. Trade wind Traders has recently migrated to Azure cloud services. The company is reviewing its support plans. You have been asked to identify the lowest-cost support plan that allows 24 x7 access to support engineers by phone. Which of the following support options allow this at a low cost?

Azure Standard support plan (CORRECT)
Azure Basic support plan
Azure Developer support plan
Azure Professional Direct support plan

7. Trade wind Traders is planning to migrate some of their data and resources to Azure cloud services, Management has decided to only make use of the Platform as a Service (PaaS) offerings in Azure. You have been asked to design a migration plan. As part of this design, you have included the creation of Azure virtual machines, Azure SQL databases, and Azure Storage accounts

Does this design meet the requirements of the organization?

Yes
No (CORRECT)

8. Trade wind Traders is planning to migrate its data and resources to Azure cloud services. As part of this migration, the company wants to create a support plan that will provide its users with access to Azure support engineers by phone and email. You have been asked to research the available support plans and recommend one that will provide this service. You recommend the Professional Direct support plan. Does this meet the company’s requirements?

Yes (CORRECT)
No

9. Trade wind Traders is planning to migrate some of its data and resources to Azure cloud services. Management has asked you to design a deployment plan that will guarantee services running on virtual machines will continue to operate in the event a single datacenter fails. As part of this design, you will deploy virtual machines to two or more resource groups.

Does this design meet the requirements of the organization?

Yes
No (CORRECT)

Correct: A resource group is a logical container for Azure resources. When you create a resource group, you specify which location to create the resource group in. However, when you create a virtual machine and place it in the resource group, the virtual machine can still be in a different location. Therefore, creating multiple resource groups, even if they are in separate datacenters does not ensure that the services running on the virtual machines are available if a single datacenter fails

10. Trade wind Traders has recently migrated some of its data and resources to Azure cloud services. Management plans to automate the deployment of new servers to Azure but is concerned that this process may expose administrative credentials during the deployment. Which of the following can be used to encrypt the credentials that will be used in the automated process?

Azure Key Vault (CORRECT)
Azure Multi-Factor Authentication (MFA)
Azure Security Center
Azure Information Protection

Correct: Azure Key Vault is a cloud service that safeguards encryption keys and secrets like certificates, connection strings, and passwords.

11. Trade wind Traders is planning to migrate its data and resources to Azure cloud services. As part of this migration, you have been asked to research the purpose of Azure Advisor. Based on this research, which of the following can be performed by using Azure Advisor?

Estimate the costs of an Azure solution.
Confirm that Azure subscription security follows best practices. (CORRECT)
Evaluate which on-premises resources can be migrated to Azure.
Integrate Active Directory and Azure Active Directory (Azure AD).

12. Trade wind Traders has migrated its data and resources to Azure cloud services. They currently have multiple subscriptions and virtual networks in place. Management has asked you to research the ability to filter traffic across subscriptions and virtual networks. Based on your research, which of the following will assist with this filtering?

Network Security Group (NSG)
Azure Firewall (CORRECT)
Application Security Group
Azure DDoS Protection

Correct: You can restrict traffic to multiple virtual networks in multiple subscriptions with a single Azure firewall. Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources.

13. Trade wind Traders is planning to migrate its data and resources to Azure cloud services. The company has asked you to research multi-factor authentication. A code that’s sent to a mobile phone is an example of which type of multi-factor authentication?

Something you have (CORRECT)
Something you know
something you are

Correct: That’s correct, something you have might be a code that’s sent to your mobile phone.

14. Trade wind Traders is planning to migrate to Azure cloud services. Management has asked you to spend some time researching the big data and analytic solutions available in Azure. Based on your research, which of the following provides a fully managed, open-source analytics service for enterprises that makes it easier and more cost-effective to process massive amounts of data while running popular open-source frameworks?

Azure HDInsight (CORRECT)
Azure Data Lake Analytics
Azure Databricks
Azure Synapse Analytics

Correct: Azure HDInsight is a fully managed, open-source analytics service for enterprises. It is a cloud service that makes it easier, faster, and more cost-effective to process massive amounts of data. HDInsight allows you to run popular open-source frameworks and create cluster types.

15. Trade wind Traders is planning to migrate to Azure cloud services and management wants to start developing AI solutions. You have been asked to research what AI features are available in Azure. Based on your research, what service can you use to build a virtual agent that can understand and reply to questions just like a human?

Azure Cognitive Services
Azure Bot Service (CORRECT)
Azure Machine Learning

16. Trade wind Traders has recently migrated to Azure cloud services. Their Azure deployment consists of multiple subscriptions and resource groups. You need to restrict the actions that some of your users can carry out. You are required to allow some users to manage VM’s without having permission to make configuration changes to networking etc. Which of the following solutions allows you to do this?

Create multiple Resource Groups.
Use Azure AD Role Based Access Control (Azure RBAC) to create role assignments. (CORRECT)
Create policies in Azure Policy that will audit resource usage.

Correct: Azure RBAC enables you to create roles that define access permissions. You might create one role that limits access only to virtual machines and a second role that provides administrators with access to everything.

17. Tradewinds Traders is planning to migrate to Azure cloud services. Management has asked you to research the main benefits of cloud services. Based on your research you have identified scalability as one of the main benefits. Scalability includes horizontal and vertical scaling. Which of the following is characteristic of vertical scaling?

Computing capacity can be increased by adding instances of a resource
Computing capacity can be increased by adding additional RAM or CPUs to a virtual machine. (CORRECT)
Correct: With vertical scaling, computing capacity can be increased by adding additional RAM or CPUs to a virtual machine.

18. Trade wind Traders has recently migrated to Azure cloud services and management wants their developers to start utilizing solutions such as using shared source code repositories and tools that enable developers to perform code reviews by adding comments and questions in a web-view of the source code before it is merged into the main codebase. Which of the following solutions would be most suitable?

Azure DevOps Services
GitHub and GitHub Actions (CORRECT)
Azure DevTest Labs

Correct: GitHub is one of the most popular code repositories for open-source software. GitHub provides related services for coordinating work, reporting, and discussing issues, providing documentation, and more.

19. Trade wind Traders has recently migrated to Azure cloud services. Management wants access to in-depth information about security, privacy, compliance offerings, policies, features, and practices across Microsoft cloud products. Which tool should you recommend for them to use?

Azure Portal
Azure Monitor (CORRECT)
Microsoft Trust Center
Azure Advisor

20. Tradewinds Traders is planning to migrate to Azure cloud services but before they do you have been asked to do some research on cloud deployment models. Based on your research which of the following deployment models will provide the ability to share data, applications, and resources on-premises and in the Cloud?

Public Cloud
Private Cloud
Hybrid Cloud (CORRECT)

Correct: A hybrid cloud is a computing environment that combines a public cloud and a private cloud by allowing data and applications to be shared between them.

21. Trade wind Traders has recently migrated to Azure cloud services. Their software development teams work on many different projects. The company wants to publish an open-source API that allows third-parties to integrate their inventories of new and used items. They also want to use the API to offer a wider variety of products directly from their ecommerce site. They will need a platform to share example code, collect feedback on the API, allow contributors to report issues, and build communities around feature requests.

Which of the following would you recommend they implement?

Azure DevOps Services
GitHub and GitHub Actions (CORRECT)
Azure DevTest Labs

22. Trade wind Traders is planning to migrate to Azure cloud services however management has asked you to research some of the main features of cloud storage. Which of the following offers fully managed file shares in the cloud that are accessible via the industry standard Server Message Block (SMB) protocol?

Azure Files Storage (CORRECT)
Azure Storage Tiers
Azure Blob Storage
Azure Disk Storage

Correct: Azure Files offers fully managed file shares in the cloud that are accessible via the industry standard Server Message Block (SMB) protocol. Azure file shares can be mounted concurrently by cloud or on-premises deployments of Windows, Linux, and macOS. Diagnostic logs, metrics, and crash dumps are just three examples of data that can be written to a file share and processed or analyzed later.

23. True or False?

Azure China is operated by 21Vianet and is a physically separated instance of cloud services located in China.

True (CORRECT)
False

Correct: Azure China is operated by 21Vianet is a physically separated instance of cloud services located in China. It is independently operated and transacted by Shanghai Blue Cloud Technology Co., Ltd. (“21Vianet”), a wholly-owned subsidiary of Beijing 21Vianet Broadband Data Center Co., Ltd.

24. Tailwind Traders have recently migrated to Azure cloud services from a Linux-based on-premises environment. The existing administrators want to continue using scripting to configure and create resources. Which of the following tools would you recommend to administrators as the easiest environment for them to use based on their current knowledge?

Azure Portal
ARM Templates
Azure PowerShell
Azure CLI (CORRECT)

Correct: Azure CLI is more beneficial to those with a Linux administration and scripting background who wish to perform one-off management or administrative actions.

25. Trade wind Traders has recently migrated to Azure cloud services. Management has asked you to research Azure feature Releases and their availability. Which of the following will allow all Azure customers an opportunity to test the beta and other pre-release features?

Public Preview (CORRECT)
General availability
Private Preview

26. Trade wind Traders is planning to migrate to Azure cloud services but before they do, management has asked you to spend some time researching the Database solutions available in Azure specifically the capability to elastically and independently scale throughput and storage across any number of Azure regions worldwide. Based on your research, which of the following cloud database solutions is most appropriate to provide this feature?

Azure SQL Database
Azure Database for MySQL
Azure Database for PostgreSQL
Azure Cosmos DB (CORRECT)

Correct: Cosmos DB level of flexibility means that as you migrate your company’s databases to Azure Cosmos DB. Cosmos DB enables you to elastically and independently scale throughput and storage across any number of Azure regions worldwide and your developers can stick with the API where they’re most comfortable.

27. Trade wind Traders has migrated its data and resources to Azure cloud services. They currently have multiple subscriptions and virtual networks in place. As part of their ongoing cloud implementation management wants to have the ability to prevent virtual machines from being created in certain resource groups. Which of the following can be used to prevent VM’s being created in specific resource groups?

Lock
Azure policy (CORRECT)
Tag
Azure role

28. Trade wind Traders is planning to migrate to Azure cloud services but before they do, management has asked you to spend some time researching the Database solutions available in Azure specifically the ability to migrate existing on-premises SQL databases to Azure SQL Databases. Based on your research, is it possible to migrate directly?

Yes (CORRECT)
No

Correct: That’s correct, you can migrate your existing SQL Server databases with minimal downtime using the Azure Database Migration Service. The Azure Database Migration Service performs all the required steps. You just change the connection string in your apps.

29. Trade wind Traders has migrated its data and resources to Azure cloud services. They currently have multiple subscriptions and virtual networks across multiple regions. As part of their ongoing cloud implementation management is implementing a policy that limits the creation of additional Azure resources by administrators to a region based on their office location and country. Which of the following can be used to implement this policy?

Management Group
Reservation
Read-only lock
Azure policy (CORRECT)

Correct: Azure policies can be used to define requirements for resource properties during deployment and for already existing resources. Azure Policy controls properties such as the types or locations of resources.

30. Trade wind Traders is planning to migrate to Azure cloud services. Management has asked you to spend some time researching the big data and analytic solutions available in Azure. Based on your research, which of the following provides an on-demand analytics job service that simplifies big data by enabling users to write queries to transform their data and extract valuable insights?

Azure Synapse Analytics
Azure HDInsight
Azure Databricks
Azure Data Lake Analytics (CORRECT)

Correct: Azure Data Lake Analytics is an on-demand analytics job service that simplifies big data. Instead of deploying, configuring, and tuning hardware, you write queries to transform your data and extract valuable insights.

31. Trade wind Traders has recently migrated to Azure cloud services and management wants to start developing AI solutions. Management requires the development of an app that will predict future outcomes based on private historical data. Which Azure service will you recommend to management?

Azure Cognitive Services
Azure Bot Service
Azure Machine Learning (CORRECT)

Correct: Azure Machine Learning is a platform for making predictions. It consists of tools and services that allow you to connect to data to train and test models to accurately predict a future result.

32. Trade wind Traders is planning to migrate to Azure cloud services, however, management has asked you to research some of the main benefits of cloud services. One of these benefits is referred to as agility.

Which of the following benefits of cloud services are characteristic of agility

You can deploy your applications with the confidence that comes from knowing that your data is safe in the event of a disaster.
Cloud-based resources can be deployed and configured quickly as your requirements change. (CORRECT)
Applications and data can be deployed to regional datacenters around the globe.
Your cloud-based applications can provide a continuous user experience with no apparent downtime even when things go wrong.

33. Trade wind Traders has recently migrated to Azure cloud services and management wants to start developing AI solutions. Management requires the development of an app that can understand the content and meaning of images, video, audio, or translate text into a different language. Which Azure services do you think are the most appropriate to use in this scenario?

Azure Bot Service
Azure Machine Learning
Azure Cognitive Services (CORRECT)

Correct: Azure Cognitive Services provides pre-built machine learning models that enable applications to see, hear, speak, understand, and even begin to reason.

34. Tradewinds Traders is planning to migrate to Azure cloud services. Management has questions regarding the expenditure once they migrate. You have been asked to research expenditure types and how they differ. Based on your research, you have identified two types of expenditures that are relevant to Cloud migration. Capital Expenditure (CapEx) and Operational Expenditure (OpEx).

Which of these expenditure types require the upfront spend on physical infrastructure that can then be deducted as an expense over time

Operational Expenditure (OpEx)
Capital Expenditure (CapEx) (CORRECT)

Correct: Capital Expenditure (CapEx) is the upfront spending of money on physical infrastructure and then deducting that upfront expense over time. The upfront cost from CapEx has a value that reduces over time.

35. Trade wind Traders has recently migrated to Azure cloud services and management wants you to research the features of GitHub and Azure DevOps. Based on this research do you agree with the following statement?

GitHub is lighter weight than Azure DevOps, with a focus on individual developers contributing to open source while Azure DevOps, is more focused on enterprise development with heavier project management, planning tools, and fine-grained access control.

Yes (CORRECT)
No

Correct: GitHub has a long and trusted history with public repositories and is trusted by tens of thousands of open-source projects. GitHub is “lighter-weight” than Azure DevOps, with a focus on individual developers contributing to open source. Azure DevOps, on the other hand, is more focused on enterprise development with heavier project management and planning tools, and finer-grained access control.

36. Tradewinds Traders is planning to migrate to Azure cloud services however management has questions regarding the expenditure once they migrate. You have been asked to research expenditure types and how they differ. Based on your research you have identified two types of expenditure that are relevant to Cloud migration. Capital Expenditure (CapEx) and Operational Expenditure (OpEx).

Which of these expenditure types requires no upfront cost and allows you to pay for services as you use them?

Operational Expenditure (OpEx) (CORRECT)
Expenditure (CapEx)

Correct: Operational Expenditure (OpEx) is spending money on services or products now and being billed for them now. You can deduct this expense in the same year you spend it. There is no up-front cost, as you pay for a service or product as you use it.

37. Trade wind Traders has recently migrated to Azure cloud services. Management wants you to research the features of Azure DevTest Labs which they feel may be a good fit for their developers on an ongoing basis.

Based on your research, do you agree with the following definition?

DevTest labs provide automated provisioning of pre-created lab environments with required configurations and tools already installed.

True (CORRECT)
False

Correct: Azure DevTest Labs allows for the provisioning of pre-created lab environments with required configurations and tools already installed. It is a huge timesaver for quality assurance professionals and developers.

38. Tailwind Traders has recently migrated to Azure cloud services. Management now requires ongoing analysis of how well they are using their services compared to industry best practices. Which monitoring tool would you recommend using for this?

Azure Monitor
Azure Service Health
Azure Advisor (CORRECT)

Correct: Azure Advisor evaluates your Azure resources and makes recommendations to help you improve reliability, security, and performance, achieve operational excellence, and reduce costs.

39. Trade wind Traders is planning to migrate to Azure cloud services however management has asked you to research some of the main features of cloud services. One of these features is Geo-distribution.

What does Geo Distribution mean?

You can deploy your applications with the confidence that comes from knowing that your data is safe in the event of a disaster.
Applications and data can be deployed to regional datacenters around the globe. (CORRECT)
Your cloud-based applications can provide a continuous user experience with no apparent downtime even when things go wrong.
Cloud-based resources can be deployed and configured quickly as your requirements change.

40. Trade wind Traders is planning to migrate to Azure cloud services however management has asked you to research some of the main features of cloud storage. Which of the following is the most suitable for the storage of streaming video and audio?

Azure Storage Tiers
Azure Disk Storage
Azure Files Storage
Azure Blob Storage (CORRECT)

41. Tailwind Traders have recently migrated to Azure cloud services. The company has multiple offices around the globe which requires IT staff to travel between them regularly. The IT manager is now hoping to provide a solution that will allow employees to monitor the services remotely. Which service Azure Cloud services do you think is best to use in this scenario?

Azure PowerShell
Azure Mobile App (CORRECT)
Azure CLI

Correct: The Azure mobile app running on a phone or tablet could help key employees keep an eye on the health of the cloud environment. The Azure mobile app is a good compromise in this scenario, it allows employees the freedom to be away from the office while still being able to perform one-off management and administrative tasks.

42. Trade wind Traders is planning to migrate to Azure cloud services however management has asked you to research connectivity features between your on-premises environment and Cloud resources. In your research, you learn that Azure virtual networks enable you to filter traffic between subnets. Which of the following are valid filtering approaches?

Select all options that apply.

Network security groups (CORRECT)
Network virtual appliances (CORRECT)
Border Gateway Protocol

A Network Security Group (NSG) is an Azure resource that contains multiple inbound and outbound security rules. These rules can be configured to allow or deny traffic based on criteria such as the source and destination IP addresses, ports, and protocols.

A Network Virtual Appliance (NVA) is a specialized virtual machine designed to function as a hardened network appliance. NVAs perform specific network-related tasks, such as serving as a firewall or optimizing Wide Area Network (WAN) performance.

19. As the data analyst at Adventure Works, you are responsible for configuring permissions in Power BI to ensure that users can interact with data appropriately. Which of the following permissions in Power BI allow users to interact with data without altering the underlying datasets? Select all that apply.

Build (CORRECT)
Write
Read (CORRECT)
Owner

Correct! The Build permission lets users create reports and dashboards using the data without modifying it.

Correct! The Read permission allows users to view and understand data without changing it.

43. Tailwind Traders has recently migrated to Azure cloud services. Management has asked you to work on optimizing their cloud services for reliability, security, performance, costs, and operations based on expert best practices. Which Azure monitoring tool would you recommend to best satisfy this requirement?

Azure Advisor (CORRECT)
Azure Monitor
Azure Service Health

Correct: Azure Advisor evaluates your Azure resources and makes recommendations to help you improve reliability, security, and performance, achieve operational excellence, and reduce costs.

44. Trade wind Traders is planning to migrate to Azure cloud services however management has asked you to research Policy-based VPN gateways. In your research, you learn that Policy-based VPN Gateways evaluate all data packets against sets of IP addresses to determine the tunnel that the packet is going to be sent through. Which of the following are key features of policy-based VPN gateways in Azure?

Select all options that apply.

Dynamic routing protocols
Support for IKEv2.
Compatibility with legacy on-premises VPN devices (CORRECT)
Use of static routing, (CORRECT)

Correct: Policy-based VPNs must be used in specific scenarios that require them, such as for compatibility with legacy on-premises VPN devices.

Correct: Combinations of address prefixes from both networks control how traffic is encrypted and decrypted through the VPN tunnel. The source and destination of the tunneled networks are declared in the policy and don’t need to be declared in routing tables.

45. Tailwind Traders has recently migrated its data and resources to Azure cloud services. Management has asked you to provide a personalized view of the health of the Azure services, regions, and resources. Which of the following tools would best satisfy these requirements?

Azure Service Health (CORRECT)
Azure Monitor
Azure Advisor

Correct: Azure Service Health provides a personalized view of the health of the Azure services, regions, and resources.

46. Trade wind Traders is planning to migrate some of their data and resources to Azure cloud services, Management has decided to only make use of the Platform as a Service (PaaS) offerings in Azure. You have been asked to design a migration plan. As part of this design, you have included the creation of Azure App Services and Azure virtual machines that will run MySQL Databases.

Does this design meet the requirements of the Organisation?

Yes
No (CORRECT)

47. Trade wind Traders has recently migrated some of its data and resources to Azure cloud services. The company has developed an Azure web app. They require that the settings for the app be configurable if needed from an iPhone. What are two Azure management tools that you can use from the iPhone?

Select all options that apply.

Windows PowerShell
Azure portal (CORRECT)
Azure Mobile App (CORRECT)
Azure CLI (Command Line Interface)

The Azure portal is a web-based interface for managing Azure resources. Since it is web-based, the Azure portal can be accessed using a browser on an iPhone.

The Azure Mobile App allows you to monitor the health and status of your Azure resources, quickly diagnose and resolve issues, and run commands to manage your resources. All data transmitted through the app is secure and encrypted.

48. Trade wind Traders has recently migrated to Azure cloud services. The company has several departments and management has decided that the departmental administrators will be responsible for managing the resources related to their department. Which of the following will allow for the segmentation of the departments?

Select all options that apply.

Multiple Regions
Multiple resource groups (CORRECT)
Multiple subscriptions (CORRECT)
Multiple Azure Active Directory (Azure AD) directories

A resource group is a container that organizes related resources for an Azure solution. It can include all the resources required for the solution or only the resources you want to manage together as a group.

An Azure subscription serves as a container for Azure resources. It also acts as a boundary for resource permissions and billing. Charges are accrued monthly for all resources within a subscription. A single Azure tenant (Azure Active Directory) can host multiple Azure subscriptions.

49. Trade wind Traders currently operate a successful ecommerce site hosted externally. You have recommended that this application should be hosted in Azure, but management is concerned that this will increase the amount of administration required. Which of the following cloud deployment solutions will allow for minimum administrative effort?

Software as a Service (SaaS) (CORRECT)
Infrastructure as a Service (IaaS) X
Platform as a Service (PaaS)
Desktop as a Service (DaaS)

50. Trade wind Traders is planning to migrate some of their data and resources to Azure cloud services, Management has asked you to design a deployment plan that will guarantee services running on virtual machines will continue to operate in the event a single datacenter fails. As part of this design, you will deploy virtual machines to two or more availability zones.

Does this design meet the requirements of the Organisation?

Yes (CORRECT)
No

51. Trade wind Traders has recently migrated some of their data and resources to Azure cloud services, Management has asked you to research what service is most appropriate to provide for the collection of events from multiple resources into a centralized repository. Based on your research which of the following solutions should you recommend?

Azure Stream Analytics
Azure Analysis Services (CORRECT)
Azure Monitor
Azure Event Hubs

52. Trade wind Traders is planning to migrate some of their custom in-house applications to Azure cloud services. These custom applications provide various services to the organization’s customers and have specific prerequisites and services. Which cloud solution should you recommend that will satisfy the organization’s requirements?

Platform as a Service (PaaS)
Infrastructure as a Service (laaS) (CORRECT)
Software as a Service (SaaS)

Correct: Infrastructure as a service (IaaS) is an instant computing infrastructure, provisioned and managed over the internet. The IaaS service provider manages the infrastructure, while you purchase, install, configure, and manage your software.

53. Trade wind Traders has recently migrated some of its data and resources to Azure cloud services. As part of their future planning, management has requested information on high availability. You have spent some time researching this topic. Which of the following do you believe is correct of high availability?

An Availability Zone in Azure resides within a single Azure region. (CORRECT)
An Availability Zone in Azure resides within a single Azure datacenter.
An Availability Zone in Azure resides within multiple Azure regions.
An Availability Zone in Azure has physically separate locations across two continents.

54. Trade wind Traders is planning to migrate its data and resources to Azure cloud services. The company has asked you to research Azure AD. What types of resources can Azure AD help secure?

Only external resources
Both External and Internal Resources (CORRECT)
Only internal resources

Correct: Azure AD helps users access both external and internal resources. External resources might include Microsoft Office 365, the Azure portal, and thousands of other software as a service (SaaS) applications. Internal resources might include apps on your corporate network and intranet, along with any cloud applications developed within your organization.

55. Trade wind Traders has recently migrated some of its data and resources to Azure cloud services. As part of their ongoing migration, management has requested information on the storage of encryption keys and secrets like certificates, connection strings, and passwords. You have spent some time researching this topic. Based on your research, which of the following can be used to store encryption keys and secrets in Azure?

Azure Key Vault (CORRECT)
Azure Active Directory (Azure AD) administrative accounts
Personally Identifiable Information (PII)

56. Trade wind Traders has recently migrated to Azure cloud services and management wishes to chargeback some of the resource costs to various departments every month. Which in your opinion is the best solution to meet these requirements with the least amount of administrative effort?

Create Subscriptions for each department
Tags (CORRECT)
Manually track using a Microsoft Excel spreadsheet

Correct: Tags provide extra information, or metadata, about your resources. You might create a tag that’s named Sales whose value is the name of the billing department. You can use Azure Policy to ensure that the proper tags are assigned when resources are provisioned.

57. Trade wind Traders is planning to migrate to Azure cloud services, Management has asked you to research some of the features of high availability within Azure cloud services. Based on your research, Azure Availability Zones can protect which of the following types of failure?

Azure Storage failure
Azure datacenter failure (CORRECT)
Physical Server failure
Azure Region failure

Correct: Availability zones expand the level of control you have to maintain the availability of the applications and data on your VMs. An Availability Zone is a physically separate zone, within an Azure region. Each Availability Zone has a distinct power source, network, and cooling. By architecting your solutions to use replicated VMs in zones, you can protect your apps and data from the loss of a datacenter. If one zone is compromised, then replicated apps and data are instantly available in another zone.

58. Trade wind Traders has recently migrated to Azure cloud services and management wants to start developing AI solutions. Management requires the development of an app that will include both a virtual agent that interfaces with humans through natural language and understands the content and meaning of images, video, audio. What two Azure Services do you think are most suitable for developing this app?

Select all options that apply.

Azure Bot Service (CORRECT)
Azure Cognitive Services (CORRECT)
Azure Machine Learning

The Azure Bot Service and Bot Framework provide a platform for building virtual agents capable of understanding and responding to questions in a manner similar to human interaction.

Azure Cognitive Services offers pre-built machine learning models that empower applications with capabilities such as vision, speech, language understanding, and reasoning.

59. Trade wind Traders has recently migrated to Azure cloud services. Management wants clarification on their legal agreement between themselves and Microsoft that details the obligations by both parties concerning the processing and security of customer data and personal data. Which of the following should you refer management to?

Microsoft Privacy Statement
Online Services Terms (CORRECT)

Correct: The Online Services Terms (OST) is a legal agreement between Microsoft and the customer that details the obligations by both parties concerning the processing and security of customer data and personal data. The OST applies specifically to Microsoft’s online services that you license through a subscription including Azure, Dynamics 365, Office 365, and Bing Maps

60. Tradewind Traders has recently migrated to Azure cloud services. Management requires you to research the available monitoring solutions available to them within Azure. A specific requirement is the ability to be able to evaluate the Azure resources and make recommendations that could improve reliability, security, and performance. Which of the following would you recommend to do this?

Azure Service Health
Azure Advisor (CORRECT)
Azure Monitor

Correct: Azure Advisor evaluates your Azure resources and makes recommendations to help you improve reliability, security, and performance, achieve operational excellence, and reduce costs.

61. Tradewind Traders is planning to migrate to Azure cloud services however management has asked you to research connectivity features between your on-premises environment and Cloud resources. In your research, you learn that Azure virtual networks enable you to link resources in your on-premises environment with your Azure subscription. In effect, you can create a network that spans both your local and cloud environments. There are three mechanisms for you to achieve this connectivity.

Which of the following is not a valid mechanism?

Site-to-site Virtual Private Networks
Service endpoints (CORRECT)
Azure ExpressRoute
Point-to-site Virtual Private Networks

Correct: You use service endpoints to connect to other Azure resource types, such as Azure SQL databases and storage accounts. This approach enables you to link multiple Azure resources to virtual networks, thereby improving security and providing optimal routing between resources.

62. Tailwind Traders has recently migrated to Azure cloud services. Management requires alerts to be generated that will send notifications to the IT department whenever Azure outages occur. Which Azure monitoring tool would you recommend for this?

Azure Service Health
Azure Monitor (CORRECT)
Azure Advisor

Correct: Azure Monitor is a platform for collecting, analyzing, visualizing, and potentially acting based on the metric and logging data from your entire Azure and on-premises environment.

63. Tradewind Traders has recently migrated to Azure cloud services. The company’s development team creates virtual machines for testing on a regular basis. These test machines are only used during certain times. In your opinion what is the most efficient way to save costs on virtual machines when they are not in use?

Deallocate the virtual machines when they are not in use. (CORRECT)
Delete the virtual machines when they are not in use because once they are deleted, they will not incur any charges.
Use virtual machines that are only chargeable when accessed remotely.

Correct: When you deallocate virtual machines, the associated hard disks and data are kept in Azure. But you don’t pay for CPU or network consumption, which can help save costs.

64. Tradewind Traders is planning to migrate to Azure cloud services however management has asked you to research some of the main benefits of cloud services. Which of the following do you think are some of the benefits of cloud services? Select all options that apply.

Dedicated hardware
Self-service management (CORRECT)
Limited storage
Metered pricing (CORRECT)
Unsecured connections

In the public cloud, you have self-service management, where you are responsible for deploying and configuring cloud resources, such as virtual machines or websites. The underlying hardware hosting these resources is managed by the cloud provider.

The public cloud operates on a pay-as-you-go pricing model, meaning you only pay for the resources you use. There are no upfront capital expenditures (CapEx) involved.

65. Tradewind Traders has recently migrated some of their data and resources to Azure cloud services, Management is concerned about external attacks against their websites, they also want you to generate reports that will provide information on attempted attacks. Which of the following should you include when implementing this solution?

Azure Firewall
DDoS protection (CORRECT)
Network security groups (NSG)
Azure Information Protection

66. Tradewind Traders has recently migrated to Azure cloud services. The company has just completed a review of its current configuration and has discovered that there is a selection of unused resources currently in existence including multiple AD accounts, multiple groups, multiple public IP addresses, and multiple network interfaces. The company wants to reduce costs to a minimum. You recommend removing the unused Public IP addresses. Will this reduce the monthly costs?

Yes (CORRECT)
No

Correct: You are charged for public IP addresses. Therefore, deleting unused public IP addresses will reduce the Azure costs.

67. Tradewind Traders is investigating a possible migration of their data and resources to Azure cloud services. Which of the following is true in respect of the Public Cloud?

The public cloud is a crowd-sourcing solution that provides corporations with the ability to enhance the cloud
All public cloud resources can be freely accessed by every member of the public
The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud (CORRECT)
The public cloud is owned by the public, NOT a private corporation

68. Tailwind Traders has recently migrated to Azure cloud services. The development departments are currently working on a new IoT application that will be used to capture and transmit personal data back to a cloud service. Management is concerned that this personal data may be exposed in transit. Which of the following services can the company implement to ensure the highest level of security?

IoT Hub
Azure Sphere (CORRECT)
IoT Central

Correct: Azure Sphere creates an end-to-end highly secure IoT solution for customers that encompasses everything from the hardware and operating system on the device to the secure method of sending messages from the device to the message hub.

69. Tradewind Traders has recently migrated to Azure cloud services. The company is reviewing its support plans. You have been asked to determine from where support requests can be created. Which of the following statements is correct?

Support.microsoft.com.
The Azure portal (CORRECT)
The Knowledge Center
The Security & Compliance Admin Center

70. Tradewind Traders is planning to migrate to Azure cloud services, and you have been asked to do some research on Infrastructure as a Service. Which of the following is an example of IaaS?

Azure virtual machine (CORRECT)
Azure SQL database
Azure web app
Azure logic app

Correct: An Azure virtual machine is an example of Infrastructure as a Service (IaaS).

71. Tradewind Traders has recently migrated some of their data and resources to Azure cloud services, Management has asked you to research what service is most appropriate to provide for the collection of events from multiple resources into a centralized repository. Based on your research which of the following solutions should you recommend?

Azure Analysis Services
Azure Event Hubs (CORRECT)
Azure Monitor
Azure Stream Analytics

72. Tradewind Traders has recently migrated to Azure cloud services. The company is reviewing its support plans. You have been asked to identify the lowest-cost support plan that allows 24 x7 access to support engineers by phone. Which of the following support options allow this at a low cost?

Azure Developer support plan
Azure Basic support plan
Azure Professional Direct support plan
Azure Standard support plan (CORRECT)

73. Tradewind Traders is planning to migrate some of their data and resources to Azure cloud services, Management has asked you to design a deployment plan that will guarantee services running on virtual machines will continue to operate in the event a single datacenter fails. As part of this design, you will deploy virtual machines to two or more regions.

Does this design meet the requirements of the organization?

Yes
No (CORRECT)

Correct: Each Azure region is paired with another region within the same geography (such as the US, Europe, or Asia). This approach allows for the replication of resources, such as VM storage, across a geography that should reduce the likelihood of natural disasters, civil unrest, power outages, or physical network outages affecting both regions at once. This question specifies a single Datacenter failure, not a region failure. Within each region, multiple datacenters exist to provide for redundancy and availability.

74. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. Management is planning on implementing an Apache Spark engine for large-scale data processing. Which of the following will provide a compatible analytics platform the Apache Spark engine?

Azure Databricks.
Azure HDInsight
Azure DevOps
Azure Data Factory (CORRECT)

75. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has many independent departments and as part of this migration, the company wants to allow each department to use different payment options for the resources allocated to them. Which of the following will allow you to configure different payment options for each department?

Multiple Reservations
Multiple Container Instances
Multiple Subscriptions (CORRECT)
Multiple Resource Groups

Correct: There are different payment options in Azure including pay-as-you-go (PAYG), Enterprise Agreement (EA), and Microsoft Customer Agreement (MCA) accounts. Your Azure costs are per subscription. You are charged monthly for all resources in a subscription. Therefore, to use different payment options per department, you will need to create a separate subscription per department.

76. Tradewind Traders are in the process of migrating their resources to Azure cloud services. Currently, they have several VMs deployed to their Azure subscription. Management has asked you to research how their on-premises users will be able to securely access the resources that have been migrated to Azure. Based on that research, which of the following will you need to create to implement this solution?

Select all options that apply.

A Load Balancer
An Application Gateway
A Virtual network
A Gateway Subnet (CORRECT)
A Virtual Network Gateway (CORRECT)

The virtual network gateway must be placed in a dedicated subnet within the Azure virtual network. This specific subnet is referred to as the gateway subnet.

To enable client computers on your on-premises network to communicate with Azure virtual machines, you need to configure a VPN (Virtual Private Network) to establish a connection between the on-premises network and the Azure virtual network. In this setup, the Azure VPN device is called the Virtual Network Gateway.

77. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. Management now plans on deploying additional virtual machines, however, they are concerned about locking down the ports on these machines to prevent access from devices on the internet. Which of the following can be used to help protect access to the ports on these machines?

Azure Active Directory (Azure AD) roles
Azure Active Directory groups
Network security groups (NSG) (CORRECT)
Azure key vault

Correct: A network security group works as a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.

78. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. As part of this migration, you have been asked to research the purpose of Azure Advisor. Based on this research, which of the following can be performed by using Azure Advisor?

Confirm that Azure subscription security follows best practices.
Integrate Active Directory and Azure Active Directory (Azure AD).
Estimate the costs of an Azure solution. (CORRECT)
Evaluate which on-premises resources can be migrated to Azure.

Correct: Azure Advisor analyses your configurations and usage telemetry and offers personalized, actionable recommendations to help you optimize your Azure resources for reliability, security, operational excellence, performance, and cost.

79. Tradewind Traders is planning to migrate to Azure cloud services but before they do management has asked you to spend some time researching the Database solutions available in Azure with specific regard to schema-less data and always-on applications. Based on your research, which of the following cloud database solutions is most suitable to provide this feature?

Azure Database for PostgreSQL
Azure SQL Database
Azure Database for MySQL
Cosmos DB (CORRECT)

80. Tradewind Traders has migrated its data and resources to Azure cloud services. They currently have multiple subscriptions and virtual networks in place. Management has asked you to research the ability to securely store certificates in Azure. Which of the following services should you configure to enable this feature?

Azure Security Center
Azure Key Vault (CORRECT)
Azure Information Protection
Azure Storage account

Correct: Azure Key Vault is a secure store for storing various types of sensitive information including passwords and certificates. Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.

81. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has asked you to research Azure Single Sign On. Based on your research, is the following statement correct in respect of Single Sign-On in Azure?

Single sign-on enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.

Yes (CORRECT)
No

Correct: Single sign-on enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.

82. Tradewind Traders is planning to migrate to Azure cloud services. The company currently operates multiple database solutions on-premises including PostgreSQL databases. Management has asked you to spend some time researching the high availability features and support levels available for Azure Database for PostgreSQL.

Based on your research, what level of SLA is available for single-server deployments of PostgreSQL in Azure?

90.00%
99.00%
99.90%
99.99% (CORRECT)

83. Tradewind Traders is planning to migrate to Azure cloud services and management wants to start developing AI solutions. You have been asked to research what AI features are available with Azure with specific emphasis on using existing data to train and test a model and then apply that model to new data to forecast future behaviors, outcomes, and trends. Which of the following terms best describe this?

Machine Learning (CORRECT)
Deep Learning

Correct: Machine learning is a data science technique that uses existing data to train and test a model, then apply that model to new data to forecast future behaviors, outcomes, and trends.

84. Tradewind Traders has recently migrated to Azure cloud services Management has asked you to do some research on the Azure Policy service. Based on your research, do you think the following statement is true?

Azure Policy initiatives are a way of grouping related policies into one set.

Yes (CORRECT)
No

Correct: An Azure Policy initiative is a way of grouping related policies into one set. The initiative definition contains all the policy definitions to help track your compliance state for a larger goal.

85. Tradewind Traders is planning to migrate to Azure cloud services, Management has asked you to research some of the features of high availability within Azure cloud services. Based on your research, Azure Availability Zones can protect which of the following types of failure?

Azure datacenter failure (CORRECT)
Azure Storage failure
Azure Region failure
Physical Server failure

86. Tradewind Traders has recently migrated to Azure cloud services and management wants their developers to start utilizing solutions such as using shared source code repositories and tools that enable developers to perform code reviews by adding comments and questions in a web-view of the source code before it is merged into the main codebase. Which of the following solutions would be most suitable?

Azure DevTest Labs
Azure DevOps Services
GitHub and GitHub Actions (CORRECT)

87. Tradewind Traders has recently migrated to Azure cloud services. Management wants access to in-depth information about security, privacy, compliance offerings, policies, features, and practices across Microsoft cloud products. Which tool should you recommend for them to use?

Azure Portal
Azure Advisor
Azure Monitor
Microsoft Trust Center (CORRECT)

88. Tradewind Traders is currently migrating to Azure cloud services, The IT manager has highlighted that one of the on-premises servers that will be migrated has a specific compliance policy that requires it to be placed in its separate virtual network. Which of the following solutions should you implement to comply with this requirement?

Create a virtual network for this server and a separate virtual network for all the other servers. (CORRECT)
Create a VPN for this server and a virtual network gateway for each other server.
Create a resource group for this server and a separate resource group for all the other servers.
Create a single resource group for all the servers but place a resource lock on this server.

Correct: Networks in Azure are known as virtual networks. A virtual network can have multiple IP address spaces and multiple subnets. Azure automatically routes traffic between different subnets within a virtual network. The question states that a specific server must be on a separate network segment. The only way to separate this server from the other servers in networking terms is to place the server in a different virtual network to the other servers.

89. Tradewind Traders is planning to migrate some of their data and resources to Azure cloud services, Management has decided to only make use of the Platform as a Service (PaaS) offerings in Azure. You have been asked to design a migration plan. As part of this design, you have included the creation of Azure App Services and Azure Storage accounts.

Does this design meet the requirements of the Organisation?

Yes
No (CORRECT)

Correct: Azure App Service is a PaaS (Platform as a Service) service. However, Azure Storage accounts are an IaaS (Infrastructure as a Service) service. Therefore, this design does not meet the requirements.

90. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. The company has developed an Azure web app. They require that the settings for the app be configurable if needed from an iPhone. What are two Azure management tools that you can use from the iPhone?

Select all options that apply.

Windows PowerShell
Azure Mobile App (CORRECT)
Azure portal (CORRECT)
Azure CLI (Command Line Interface)

The Azure Mobile App allows you to monitor the health and status of your Azure resources, quickly diagnose and resolve issues, and execute commands to manage your resources. All data is securely encrypted to ensure protection.

The Azure portal is a web-based interface for managing Azure. As it is web-based, you can conveniently access the Azure portal using a browser on an iPhone.

91. Tradewind Traders has recently migrated to Azure cloud services. The company has just completed a review of its current configuration and has discovered that there is a selection of unused resources currently in existence including multiple AD accounts, multiple groups, multiple public IP addresses, and multiple network interfaces. The company wants to reduce costs to a minimum. You recommend removing the network interfaces. Will this reduce the monthly costs?

Yes
No (CORRECT)

92. Tradewind Traders has recently migrated some of their data and resources to Azure cloud services, you are familiarising yourself with the various mechanisms to create resources in Azure. You have been asked to create some resources in Azure using PowerShell. You currently have a Windows 10 computer that has the Azure PowerShell module installed. Does this configuration support the creation of resources in Azure?

Yes (CORRECT)
No

Correct: A PowerShell script is a file that contains PowerShell cmdlets and code and needs to be run in PowerShell. The computer is running a compatible OS and the information states that it has the Azure PowerShell module installed. Therefore, this configuration will support the creation of resources in Azure.

93. Tradewind Traders has recently migrated to Azure cloud services. The company is reviewing its support plans. The company requires their users to be able to open new support requests and you have been asked to determine which support plan will provide this feature. Which of the following statements is correct?

Premier, Professional Direct, Standard, Developer, and Basic
Premier, Professional Direct, and Standard only
Premier and Professional Direct only
Premier, Professional Direct, Standard, and Developer only (CORRECT)

Correct: You can open support cases in the following plans: Premier, Professional Direct, Standard, and Developer only. You cannot open support cases in the Basic support plan.

94. Tradewind Traders is planning to migrate some of their data and resources to Azure cloud services, Management has asked you to design a deployment plan that will guarantee services running on virtual machines will continue to operate in the event a single datacenter fails. As part of this design, you will deploy virtual machines to two or more availability zones. Does this design meet the requirements of the Organisation?

Yes (CORRECT)
No

95. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. The company requires a solution that will allow for automation of the deployment of similar resources across multiple business units. Which of the following solutions should you recommend?

Management groups
Virtual machine scale sets
Azure Resource Manager templates (CORRECT)
Azure API Management service

Correct: You can use Azure Resource Manager templates to automate the creation of the Azure resources. Deploying resources through templates is known as Infrastructure as code.

96. Tradewind Traders has recently migrated to Azure cloud services. The company is reviewing its support plans. Management has asked you to determine what is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines? Select the appropriate option.

Software as a Service (SaaS)
Infrastructure as a Service (laaS) (CORRECT)
Platform as a Service (PaaS)

97. Tradewind Traders is planning to migrate some of their custom in-house applications to Azure cloud services. These custom applications provide various services to the organization’s customers and have specific prerequisites and services. Which cloud solution should you recommend that will satisfy the organization’s requirements?

Highly Confidential
General (CORRECT)
Public

Correct! The General label is used for information intended for the broader internal audience without specific sensitivities.

98. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. As part of their future planning, management has requested information on high availability. You have spent some time researching this topic. Which of the following do you believe is correct of high availability?

An Availability Zone in Azure resides within a single Azure region. (CORRECT)
An Availability Zone in Azure resides within a single Azure datacenter.
An Availability Zone in Azure has physically separate locations across two continents.
An Availability Zone in Azure resides within multiple Azure regions.

Correct: Availability Zones is a high availability offering that protects your applications and data from datacenter failures. Availability Zones are unique physical locations within an Azure region.

99. Tradewind Traders is planning to migrate to Azure cloud services. The majority of their IT department is more familiar with Linux environments than Windows. Will these users be able to continue using Bash commands to create resources such as Virtual Machines once the organization has migrated?

Yes (CORRECT)
No

Correct: With Azure Cloud Shell, you can create virtual machines using Bash or PowerShell.

100. Tradewind Traders has recently migrated to Azure cloud services. Users have deployed multiple resources since the migration however today one of the developers has received a message when creating several SQL database instances stating that that the Azure subscription limits must be increased. What must be done to increase this limit?

Create a service health alert
Modify an Azure policy
Upgrade your support plan
Create a new support request. (CORRECT)

101. Tradewind Traders is planning to migrate some of their data and resources to Azure cloud services, Management has asked you to design a deployment plan that will guarantee services running on virtual machines will continue to operate in the event a single datacenter fails. As part of this design, you will deploy virtual machines to a single scale set.

Does this design meet the requirements of the organization?

Yes
No (CORRECT)

102. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has asked you to research multi-factor authentication. A code that’s sent to a mobile phone is an example of which type of multi-factor authentication?

something you are
Something you have (CORRECT)
Something you know

Correct: That’s correct, something you have might be a code that’s sent to your mobile phone.

103. Tradewind Traders is planning to migrate to Azure cloud services. The company currently operates multiple MySQL database solutions on-premises. Management has asked you to spend some time researching the MySQL features available in Azure specifically the ability to perform automatic backups and point in time restores. You have determined that these features are available for MySQL in Azure.

For how many days are point-in-time restores supported for MySQL in Azure?

15
25
35 (CORRECT)
45

Correct: Azure database for MySQL supports Automatic backups and point-in-time-restore for up to 35 days.

104. Tradewind Traders has recently migrated to Azure cloud services. Their Azure deployment consists of multiple subscriptions and resource groups. You need to restrict the actions that some of your users can carry out. You are required to allow some users to manage VM’s without having permission to make configuration changes to networking etc. Which of the following solutions allows you to do this?

Create multiple Resource Groups.
Create policies in Azure Policy that will audit resource usage.
Use Azure AD Role Based Access Control (Azure RBAC) to create role assignments. (CORRECT)

105. Tradewind Traders has recently migrated to Azure cloud services. Azure has various reporting and monitoring tools built-in. What is the simplest tool to use to create a single report that will show all security information to be collected from all the monitoring tools?

Azure Key Vault
Secure Score
Azure Sentinel (CORRECT)

Correct: Azure Sentinel is Microsoft’s cloud-based SIEM solution and can combine and report on security data from different sources.

106. Tradewind Traders is planning to migrate to Azure cloud services. However, before this happens management requires some comparisons of the costs involved in using cloud services as opposed to an on-premises solution. What would be the first step you could take to provide this comparison information?

Setup some resources in Azure as this is a free service.
Run the Total Cost of Ownership Calculator. (CORRECT)
Assume that the cost of running workloads on Azure is similar to running workloads on-premises.

Correct: Running the Total Cost of Ownership Calculator is a great first step because it can provide an accurate comparison of running workloads in the datacenter versus on Azure and is certified by an independent research company.

107. Tradewind Traders has recently migrated to Azure cloud services and management is in the process of setting up an SLA with Microsoft. They want clarification on the time duration that the service is unavailable based on the percentages listed. How much cumulative downtime per year will an SLA percentage of 99.95 give?

52.56 minutes
4.38 hours (CORRECT)
3.65 days
8.76 hours

108. Tradewind Traders is planning to migrate to Azure cloud services but before they do, management has asked you to spend some time researching the Database solutions available in Azure specifically the capability to elastically and independently scale throughput and storage across any number of Azure regions worldwide. Based on your research, which of the following cloud database solutions is most appropriate to provide this feature?

Azure Database for MySQL
Azure SQL Database
Azure Cosmos DB (CORRECT)
Azure Database for PostgreSQL

109. Tradewind Traders has migrated its data and resources to Azure cloud services. They currently have multiple subscriptions and virtual networks in place. As part of their ongoing cloud implementation management wants to have the ability to prevent virtual machines from being created in certain resource groups. Which of the following can be used to prevent VM’s being created in specific resource groups?

Azure role
Lock
Azure policy (CORRECT)
Tag

Correct: An Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements. In this question, we would create an Azure policy assigned to the resource group that denies the creation of virtual machines in the resource group.

110. Tradewind Traders is planning to migrate to Azure cloud services but before they do, management has asked you to spend some time researching the Database solutions available in Azure specifically the ability to migrate existing on-premises SQL databases to Azure SQL Databases. Based on your research, is it possible to migrate directly?

Yes (CORRECT)
No

111. Tradewind Traders has migrated its data and resources to Azure cloud services. They currently have multiple subscriptions and virtual networks across multiple regions. As part of their ongoing cloud implementation management is implementing a policy that limits the creation of additional Azure resources by administrators to a region based on their office location and country. Which of the following can be used to implement this policy?

Azure policy (CORRECT)
Management Group
Read-only lock
Reservation

112. Tradewind Traders is planning to migrate to Azure cloud services. Management has asked you to spend some time researching the big data and analytic solutions available in Azure. Based on your research, which of the following provides an on-demand analytics job service that simplifies big data by enabling users to write queries to transform their data and extract valuable insights?

Azure Data Lake Analytics (CORRECT)
Azure HDInsight
Azure Synapse Analytics
Azure Databricks

113. Tradewind Traders has recently migrated to Azure cloud services and management wants to start developing AI solutions. Management requires the development of an app that will predict future outcomes based on private historical data. Which Azure service will you recommend to management?

Azure Machine Learning (CORRECT)
Azure Bot Service
Azure Cognitive Services

114. Tradewind Traders is planning to migrate to Azure cloud services, however, management has asked you to research some of the main benefits of cloud services. One of these benefits is referred to as agility.

Which of the following benefits of cloud services are characteristic of agility?

Applications and data can be deployed to regional datacenters around the globe.
You can deploy your applications with the confidence that comes from knowing that your data is safe in the event of a disaster.
Your cloud-based applications can provide a continuous user experience with no apparent downtime even when things go wrong.
Cloud-based resources can be deployed and configured quickly as your requirements change. (CORRECT)

Correct: With agility, cloud-based resources can be deployed and configured quickly as your application requirements change.

115. Tradewind Traders has recently migrated to Azure cloud services and management wants to start developing AI solutions. Management requires the development of an app that can understand the content and meaning of images, video, audio, or translate text into a different language. Which Azure services do you think are the most appropriate to use in this scenario?

Azure Cognitive Services (CORRECT)
Azure Machine Learning
Azure Bot Service

Correct: Azure Cognitive Services provides pre-built machine learning models that enable applications to see, hear, speak, understand, and even begin to reason.

116. Tradewind Traders has recently migrated to Azure cloud services and management wants you to research the features of GitHub and Azure DevOps. Based on this research do you agree with the following statement?

GitHub is lighter weight than Azure DevOps, with a focus on individual developers contributing to open source while Azure DevOps, is more focused on enterprise development with heavier project management, planning tools, and fine-grained access control.

Yes (CORRECT)
No

117. Tradewind Traders has recently migrated to Azure cloud services. Management wants you to research the features of Azure DevTest Labs which they feel may be a good fit for their developers on an ongoing basis.

Based on your research, do you agree with the following definition?

DevTest labs provide automated provisioning of pre-created lab environments with required configurations and tools already installed.

True (CORRECT)
False

118. Tradewind Traders is planning to migrate to Azure cloud services however management has asked you to research some of the main features of cloud services. One of these features is Geo-distribution.

What does Geo Distribution mean?

Applications and data can be deployed to regional datacenters around the globe. (CORRECT)
Your cloud-based applications can provide a continuous user experience with no apparent downtime even when things go wrong.
You can deploy your applications with the confidence that comes from knowing that your data is safe in the event of a disaster.
Cloud-based resources can be deployed and configured quickly as your requirements change.

Correct: With Geo-distribution, applications and data can be deployed to regional datacenters around the globe ensuring that your customers always have the best performance in their region.

119. Tradewind Traders is planning to migrate to Azure cloud services however management has asked you to research some of the main features of cloud storage. Which of the following is the most suitable for the storage of streaming video and audio?

Azure Files Storage
Azure Blob Storage (CORRECT)
Azure Storage Tiers
Azure Disk Storage

Correct: Blob Storage is ideal for serving images or documents directly to a browser, storing files for distributed access, and streaming media.

120. Tradewind Traders is planning to migrate to Azure cloud services however management has asked you to research connectivity features between your on-premises environment and Cloud resources. In your research, you learn that Azure virtual networks enable you to filter traffic between subnets. Which of the following are valid filtering approaches?

Select all options that apply.

Network virtual appliances (CORRECT)
Border Gateway Protocol
Network security groups (CORRECT)

121. Tradewind Traders is planning to migrate to Azure cloud services however management has asked you to research Policy-based VPN gateways. In your research, you learn that Policy-based VPN Gateways evaluate all data packets against sets of IP addresses to determine the tunnel that the packet is going to be sent through.

Which of the following are key features of policy-based VPN gateways in Azure?

Select all options that apply.

Support for IKEv2.
Compatibility with legacy on-premises VPN devices (CORRECT)
Dynamic routing protocols
Use of static routing, (CORRECT)

Policy-based VPNs are required in specific scenarios, such as ensuring compatibility with legacy on-premises VPN devices.

In a policy-based VPN, the combinations of address prefixes from both networks determine how traffic is encrypted and decrypted through the VPN tunnel. The source and destination of the tunneled networks are defined in the policy, eliminating the need to declare them in routing tables.

122. Tradewind Traders has recently migrated to Azure cloud services. The company has several departments and management has decided that the departmental administrators will be responsible for managing the resources related to their department. Which of the following will allow for the segmentation of the departments?

Select all options that apply.

Multiple Azure Active Directory (Azure AD) directories
Multiple Regions
Multiple resource groups (CORRECT)
Multiple subscriptions (CORRECT)

A resource group is a container used to organize and manage related resources for an Azure solution. It can include all the resources required for the solution or only those you want to manage together as a group.

An Azure subscription is a container for Azure resources that also acts as a boundary for resource permissions and billing. Charges for all resources within a subscription are accrued on a monthly basis. A single Azure tenant (Azure Active Directory) can encompass multiple Azure subscriptions.

123. Tradewind Traders’ current on-premises datacenter has several hundred servers and available resources in the datacenter are currently very low. Management has asked you to research a solution that will allow for increased resources but will keep expenditure such as capital expenditure and operational expenditure at a minimum. What solution should you recommend?

Create a Hybrid cloud (CORRECT)
Create a new Private cloud
Create an additional Datacenter
A complete migration to the public cloud

124. Trade wind Traders has recently migrated to Azure cloud services. The company is reviewing its support plans. You have been asked to determine which support plan will provide best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost. Which support plan should you choose?

Premier
Standard support plan
Basic (CORRECT)
Developer

125. Tradewind Traders have recently migrated to Azure cloud services however the development team has expressed frustration at the amount of time it takes to create new virtual machines for test purposes as these machines are created and destroyed on a regular basis. Which of the following would you recommend to minimize the effort required to deploy and remove the virtual machines?

Azure DevTest Labs (CORRECT)
Azure virtual machine scale sets
Azure Reserved Virtual Machine (VM) Instances
Azure Availability Zones

Correct: DevTest Labs allows for the creation of labs consisting of pre-configured bases or Azure Resource Manager templates.

126. Tradewind Traders is planning to migrate some of their data and resources to Azure cloud services, Management has decided to only make use of the Platform as a Service (PaaS) offerings in Azure. You have been asked to design a migration plan. As part of this design, you have included the creation of Azure virtual machines, Azure SQL databases, and Azure Storage accounts

Does this design meet the requirements of the organization?

Yes
No (CORRECT)

Correct: Platform as a service (PaaS) is a complete development and deployment environment in the cloud. PaaS includes infrastructure servers, storage, and networking as well as middleware, development tools, business intelligence (BI) services, database management systems, and more. PaaS is designed to support the complete web application lifecycle: building, testing, deploying, managing, and updating. However, virtual machines are examples of Infrastructure as a service (IaaS). IaaS is an instant computing infrastructure, provisioned and managed over the internet.

127. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. Management wants to implement security that will limit the applications that can run on certain virtual machines. Which of the following approaches provide such a solution?

Connect the virtual machines to Azure Sentinel.
Implement an application control rule in Azure Security Center. (CORRECT)
Administrators periodically review which applications are running on each VMs by creating and running PowerShell scripts.

Correct: With Azure Security Center, you can define a list of allowed applications to ensure that only applications you allow can run. Azure Security Center can also detect and block malware from being installed on your VMs.

128. Tradewind Traders is planning to migrate to Azure cloud services but before they do management has asked you to spend some time exploring Azure features and solutions. Which of the following should be your first step?

Create a virtual network
Create a subscription (CORRECT)
Create a management group
Create a resource group

129. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. Management plans on deploying several web servers and database servers to Azure but want to limit the types of connections that will be available between the web servers and the databases servers. Which of the following will assist in controlling the connection types?

network security groups (NSGs) (CORRECT)
Azure Service Bus
Local network gateway
Route filter

Correct: A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group.

130. Tradewind Traders is planning to migrate to Azure cloud services and management wants to start developing AI solutions. You have been asked to research what AI features are available in Azure. Based on your research, what service can you use to build a virtual agent that can understand and reply to questions just like a human?

Azure Cognitive Services
Azure Machine Learning
Azure Bot Service (CORRECT)

131. Tradewinds Traders is planning to migrate to Azure cloud services. Management has asked you to research the main benefits of cloud services. Based on your research you have identified scalability as one of the main benefits. Scalability includes horizontal and vertical scaling. Which of the following is characteristic of horizontal scaling?

Computing capacity can be increased by adding instances of a resource (CORRECT)
Computing capacity can be increased by adding additional RAM or CPUs to a virtual machine.
Correct: With horizontal scaling, computing capacity can be increased by adding instances of a resource.

132. Tradewind Traders has recently migrated to Azure cloud services and management wants to start benefiting from DevOps. DevOps is a new approach that helps to align technical teams to work towards their common goal. Which of the following provides a suite of services that address each stage of the software development lifecycle (SDL)?

GitHub and GitHub Actions
Azure DevOps Services (CORRECT)
Azure DevTest Labs

133. True or False?

To provide the highest level of security and compliance, Azure Government uses physically isolated datacenters and networks located only in the US.

True (CORRECT)
False

Correct: To provide the highest level of security and compliance, Azure Government uses physically isolated datacenters and networks located only in the US. Azure Government customers, such as the US federal, state, and local government or their partners are subject to validation of eligibility.

134. Tradewinds Traders is planning to migrate to Azure cloud services however management has questions about management and responsibilities once resources are migrated. You have identified three cloud service models. In which cloud service model is the cloud provider responsible for managing the virtual machines, the operating system, and networking resources that the cloud tenant deploys their applications into?

Paas (CORRECT)
IaaS
SaaS

Correct: The PaaS cloud service model is a managed hosting environment. In this model, the cloud provider manages the virtual machines and networking resources. The cloud tenant deploys their applications into this managed hosting environment.

135. Tradewind Traders has recently migrated to Azure cloud services. Their software development teams work on many different projects. The company wants to publish an open-source API that allows third-parties to integrate their inventories of new and used items. They also want to use the API to offer a wider variety of products directly from their ecommerce site. They will need a platform to share example code, collect feedback on the API, allow contributors to report issues, and build communities around feature requests.

Which of the following would you recommend they implement?

Azure DevTest Labs
GitHub and GitHub Actions (CORRECT)
Azure DevOps Services

136. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. They are now planning on building and deploying an Artificial Intelligence (AI) solution in Azure. Which feature should the company avail of to build, test, and deploy predictive analytics solutions?

Azure Machine Learning Designer (CORRECT)
Azure Cosmos DB
Azure Batch
Azure Logic Apps

Correct: Azure Machine Learning designer lets you visually connect datasets and modules on an interactive canvas to create machine learning models.

137. Tradewind Traders currently operate a successful ecommerce site hosted externally. You have recommended that this application should be hosted in Azure, but management is concerned that this will increase the amount of administration required. Which of the following cloud deployment solutions will allow for minimum administrative effort?

Desktop as a Service (DaaS) (CORRECT)
Infrastructure as a Service (IaaS)
Platform as a Service (PaaS)
Software as a Service (SaaS)

138. Tradewind Traders is planning to migrate some of their data and resources to Azure cloud services and will make use of Azure’s pay-as-you-go subscription. What type of expenditure is the pay-as-you-go subscription?

Capital Expenditure (CapEx)
Operational Expenditure (OpEx) (CORRECT)

139. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. As part of this migration, the company wants to create a support plan that will provide its users with access to Azure support engineers by phone and email. You have been asked to research the available support plans and recommend one that will provide this service. You recommend the Professional Direct support plan. Does this meet the company’s requirements?

Yes (CORRECT)
No

140. Tradewind Traders is planning to migrate some of its data and resources to Azure cloud services. Management has asked you to design a deployment plan that will guarantee services running on virtual machines will continue to operate in the event a single datacenter fails. As part of this design, you will deploy virtual machines to two or more resource groups.

Does this design meet the requirements of the organization?

Yes
No (CORRECT)

141. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has asked you to research Azure AD. What types of resources can Azure AD help secure?

Both External and Internal Resources (CORRECT)
Only internal resources
Only external resources

142. Tradewinds Traders is planning to migrate some of its resources to Azure cloud services. Management wants a solution that will require the least amount of administrative effort and responsibility for managing the cloud resources. You have identified three cloud service models. Which model is best suited to satisfy the company’s requirements?

PaaS
SaaS
IaaS (CORRECT)

143. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. As part of their ongoing migration, management has requested information on the storage of encryption keys and secrets like certificates, connection strings, and passwords. You have spent some time researching this topic. Based on your research, which of the following can be used to store encryption keys and secrets in Azure?

Azure Key Vault (CORRECT)
Personally Identifiable Information (PII)
Azure Active Directory (Azure AD) administrative accounts

Correct: Azure Key Vault is a cloud service that safeguards encryption keys and secrets like certificates, connection strings, and passwords.

144. Tradewinds Traders is planning to migrate to Azure cloud services however management has questions about management and responsibilities once resources are migrated. You have identified three cloud service models. In which model does the cloud provider keep the hardware up to date but the operating system maintenance and network configuration are left to the cloud tenant?

IaaS (CORRECT)
PaaS
SaaS

Correct: IaaS is the cloud service model that is closest to managing physical servers. In this model, the cloud provider keeps the hardware up to date, but operating system maintenance and network configuration are left to the cloud tenant.

145. Tradewind Traders is planning to migrate to Azure cloud services however management has asked you to research some of the main features of cloud storage. In your research, you discover that Azure storage offers different access tiers for blob and file storage. This allows you to store object data most cost-effectively. Based on your research, which is the most cost-effective tier to optimize storage for data that is infrequently accessed and stored for at least 30 days?

Hot storage tier
Cool storage tier (CORRECT)
Archive storage tier

Correct: Cool storage tier is optimized for data that is infrequently accessed and stored for at least 30 days.

146. Tradewind Traders is planning to migrate some of their data and resources to Azure cloud services, Management has decided to only make use of the Platform as a Service (PaaS) offerings in Azure. You have been asked to design a migration plan. As part of this design, you have included the creation of Azure App Services and Azure virtual machines that will run MySQL Databases.

Does this design meet the requirements of the Organisation?

Yes
No (CORRECT)

147. Tradewind Traders has recently migrated to Azure cloud services. Management wants clarification as to what will occur if Microsoft plans to end support for an Azure service and does NOT have a successor service. What notification period will Microsoft provide in this scenario?

12 months (CORRECT)
6 months
90 days
30 days

148. Which of the following define performance targets such as uptime?

Azure Storage
Azure DevOps Repos (CORRECT)
Azure DevTest Labs
Azure Cosmos DB

Correct: Azure DevOps Repos is a set of version control tools that you can use to manage your code. Azure DevOps repos are a set of repositories that allow you to version control and manage your project code. It helps to work and coordinate code changes across a team.

149. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. As part of their future planning, management has requested information on cloud services that will provide a set of version control tools to manage the developer’s code. Which of the following will satisfy this requirement?

Azure Storage
Azure DevOps Repos (CORRECT)
Azure DevTest Labs
Azure Cosmos DB

150. Tradewind Traders has migrated its data and resources to Azure cloud services. They currently have multiple subscriptions and virtual networks in place. Management has asked you to research the ability to filter traffic across subscriptions and virtual networks. Based on your research, which of the following will assist with this filtering?

Application Security Group
Network Security Group (NSG)
Azure Firewall (CORRECT)
Azure DDoS Protection

151. Tradewinds Traders is planning to migrate to Azure cloud services. Management has asked you to research the main benefits of cloud services. Your research has shown that cloud service providers operate on a consumption-based model. Which of the following are characteristics of a consumption-based model?

Select all options that apply.

Consumers must pay the costs upfront.
You only pay for additional resources when they are needed. (CORRECT)
There is no need for companies to purchase and manage a costly infrastructure that they may or may not use to its full capacity. (CORRECT)
Resources will be charged for, even when they are not in use.

In a consumption-based model, you only pay for additional resources when they are required.

In a consumption-based model, there is no need to purchase and manage expensive infrastructure that may not be used to its full capacity.

152. Tradewind Traders has recently migrated to Azure cloud services and management wants to start developing AI solutions. Management requires the development of an app that will include both a virtual agent that interfaces with humans through natural language and understands the content and meaning of images, video, audio. What two Azure Services do you think are most suitable for developing this app?

Select all options that apply.

Azure Bot Service (CORRECT)
Azure Cognitive Services (CORRECT)
Azure Machine Learning

The Azure Bot Service and Bot Framework provide a platform for building virtual agents that can understand and respond to questions in a human-like manner.

Azure Cognitive Services offers pre-built machine learning models that enable applications to see, hear, speak, understand, and even reason.

153. Trade wind Traders has recently migrated some of its data and resources to Azure cloud services. Management wants to allow HTTP access from the internet to a specific virtual machine. You modify a DDoS protection plan. Does this meet the requirements of management?

Yes
No (CORRECT)

Correct: DDoS is a form of attack on a network resource. A DDoS protection plan is used to protect against DDoS attacks; it does not provide connectivity to a virtual machine. To ensure that a virtual machine named VM1 is accessible from the Internet over HTTP, you need to modify a network security group or Azure Firewall

154. Tradewind Traders has recently migrated to Azure cloud services. Management has asked you to research Azure feature Releases and their availability. Which of the following will allow all Azure customers an opportunity to test the beta and other pre-release features?

Public Preview (CORRECT)
Private Preview
General availability

Correct: During this phase, all customer with the proper Azure AD license are invited to evaluate the new feature

155. Tradewind Traders is planning to migrate some of their data and resources to Azure cloud services, Management has asked you to design a deployment plan that will guarantee services running on virtual machines will continue to operate in the event a single datacenter fails. As part of this design, you will deploy virtual machines to two or more scale sets.

Does this design meet the requirements of the organization?

Yes
No (CORRECT)

40. Which of the following are benefits of teamwork? Select all that apply.

After a service is made generally available, Microsoft provides support for the service for a minimum of four years.
Microsoft provides a minimum of 12 months’ notice before ending support for a service. (CORRECT)
When a service is retired, you can purchase extended support for the service for up to five years.
Microsoft provides mainstream support for a service for five years.

Correct: For products governed by the Modern Lifecycle Policy, Microsoft will provide a minimum of 12 months’ notification before ending support if no successor product or service is offered, excluding free services or preview releases

156. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. As part of this migration, you have been asked to research the Modern Lifecycle Policy for Azure services. Based on your research Which of the following statements do you think most accurately defines Modern Lifecycle Policy for Azure services?

Encourage contributions from team members of all ranks (CORRECT)
Schedule time for thoughtful, inclusive discussions (CORRECT)

157. Tradewind Traders have recently migrated to Azure cloud services. They operate a fairly complex network infrastructure that contains a large number of virtual networks and hundreds of virtual machines. The IT manager has asked you to research the easiest way to control incoming traffic to all the virtual networks. Which of the following is the simplest way to achieve this?

Create Azure ExpressRoute connections for each virtual network
Create a Virtual Network Gateways for each of the virtual networks
Create a single Application Security Group (ASG)
Create a single Azure firewall (CORRECT)

You can restrict traffic to multiple virtual networks using a single Azure Firewall. Azure Firewall is a fully managed, cloud-based network security service that protects your Azure Virtual Network resources. It is a fully stateful firewall-as-a-service with built-in high availability and unlimited cloud scalability.

158. Tradewind Traders is planning to migrate to Azure cloud services. Management has asked you to spend some time researching the big data and analytic solutions available in Azure. Based on your research, which of the following provides a fully managed, open-source analytics service for enterprises that makes it easier and more cost-effective to process massive amounts of data while running popular open-source frameworks?

Azure Databricks
Azure HDInsight (CORRECT)
Azure Data Lake Analytics
Azure Synapse Analytics

159. Tradewind Traders has recently migrated to Azure cloud services and management wishes to chargeback some of the resource costs to various departments every month. Which in your opinion is the best solution to meet these requirements with the least amount of administrative effort?

Tags (CORRECT)
Manually track using a Microsoft Excel spreadsheet
Create Subscriptions for each department

160. Tradewind Traders has recently migrated to Azure cloud services. Their software development teams work on many different projects and they are required to provide project sponsors and managers with reports, progress tracking, bug reports, etc. Management now wants to ensure that individuals will only have access to information they need to do their work. Which of the following in your opinion would be the most suitable solution to meet this requirement?

GitHub and GitHub Actions
Azure DevOps Services (CORRECT)
Azure DevTest Labs

Correct: Azure DevOps has a much more granular set of permissions that allow organizations to define who can perform most operations across the entire toolset. Also, Azure DevOps is highly customizable, allowing an administrator to add custom fields to capture metadata and other information alongside each work item. By contrast, GitHub Issues uses tags as its primary means of helping a team categorize issues.

161. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. Management wants to allow HTTP access from the internet to a specific virtual machine. You modify the settings on your Azure Firewall. Does this meet the requirements of management?

No
Yes (CORRECT)

162. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has asked you to research the differences between Authorisation and Authentication in Azure. Based on your research, which of the following is the process of establishing the identity of a person or service that wants to access a resource known as?

Authorisation
Authentication (CORRECT)

Correct: Authentication is the process of establishing the identity of a person or service that wants to access a resource. It involves the act of challenging a party for legitimate credentials and provides the basis for creating a security principle for identity and access control. It establishes whether the user is who they say they are.

163. Tradewind Traders has recently migrated to Azure cloud services. Management has asked you to research Azure Blueprints which are composed of artifacts. Which of the following resources as artifacts are currently supported by Azure Blueprints?

Select all options that apply.

Management Groups
Role Assignment (CORRECT)
Policy Assignment (CORRECT)
ARM Templates (CORRECT)

Azure Blueprints currently supports Resource Groups, ARM templates, Policy Assignments, and Role Assignments as artifacts.

164. Tradewind Traders has recently migrated some of its data and resources to Azure cloud services. Management wants to allow HTTP access from the internet to a specific virtual machine. You modify a DDoS protection plan. Does this meet the requirements of management?

Yes
No (CORRECT)

CONCLUSION – Exam Prep 4

In conclusion, this module has allowed you to assess your knowledge and application of the key concepts covered in the AZ-900 Microsoft Certified: Azure Fundamentals exam. The practice exam has tested your skills across six domains: cloud concepts, core Azure services, core solutions and management tools on Azure, general security and network security features, identity, governance, privacy, and compliance features, as well as Azure cost management and Service Level Agreements. By completing this module, you are now more prepared to approach the certification exam with confidence.