What's the best way to implement secure access to Azure Storage for the company's users?

Use access keys for the production applications.

You are reviewing a metric of a VM scale set and need to see the result. What do you need to do?

Apply splitting and select all the instances

Which virtual machine is best for running a network appliance?

Compute-optimized virtual machine

To what extent does a storage account name need to be unique?

The name must be globally unique.

What's included in a custom Azure role definition?

Operations allowed for Azure resources, and scope of permissions

Explain the main differences between Azure roles (AR**) and Azure Active Directory (Azure AD) roles

AR apply to AzureResources. AAD roles apply to AzureADresources e.g users

Suppose Paula can't view resources in a resource group. Where would Joe go to check the team member's access?

Go to the resource group and select Access control (IAM) > Check Access.

What type of user account allows an external organization to access your resources?

A guest user account for each member of the external team.

Which of the following is true about resource groups?

Resources can be in only one resource group.

an admin in another cohort needs access to a VM managed by Us. What's best waytogrant them accesstoJust thatResource?

At the resource scope, assign the role with the appropriate access.

How would you describe blob object replication?

Blob object replication doesn't support blob snapshots.

Which of the following statements correctly describes cloud tiering?

It archives infrequently access files to free upSpaceon the localFileShare.

Uncle Joe needs to generate a Report of the roleAssignments for the last week. Where would they generate that report?

Search for Activity log and filter on the Create role assignment operation.

WhichStorageSolution replicates data to a SecondaryRegion, maintains 6 copies ofTheData & isTheDefaultReplicationOption?

Read-access geo-redundant storage

What's the default network rule when configuring network access to an Azure storage account?

Allow all connections from all networks.

CEO wants to identify which billing department each Azure resource belongs to. Which approach enables this requirement?

Apply aTag to each resource that includes the associated billing department

What feature can support the denial of traffic based on the IP address range?

Statically assigned IP addresses

What statement best describes Azure Blob Storage access tiers?

Admin can switch between hot and cool performance tiers at any time.

studbud

AZ-104: Microsoft Azure Administrator

91 termsStudBud Administration82 plays

Flashcards91 cardsFPractice quizPHost liveL

Questions 91

Answers

1
What types of scaling can you use to increase the CPU capacity for your existing Virtual Machine Scale Sets instances?
Horizontal scaling
Vertical scaling
Diagonal scaling
Load balancing
2
What's the best way to implement secure access to Azure Storage for the company's users?
Use allowance access signature for the production applications.
Use access keys for the production applications.
Use stored access policies for the production applications.
Use shared access signatures for the production applications.
3
Which of the following Azure services provides a secure way to store and manage keys, secrets, and certificates?
Azure Key Vault
Azure Active Directory
Azure Security Center
Azure Information Protection
4
You are reviewing a metric of a VM scale set and need to see the result. What do you need to do?
Apply aggregation and select the sum
Apply sorting and select the highest value
Apply filtering and select one instance
Apply splitting and select all the instances
5
Which virtual machine is best for running a network appliance?
Network-optimized virtual machine
Compute-optimized virtual machine
Memory-optimized virtual machine
Storage-optimized virtual machine
6
Which option preserves data residency, and offers comprehensive compliance and resiliency options?
Subscriptions
Azure Active Directory (Azure AD) Account
Regions
7
How many elements are in an Azure Template?
5
10
3
7
8
To what extent does a storage account name need to be unique?
The name must be unique within the containing resource group.
The name must be globally unique.
The name must be unique within the organization's subscription.
The name must be Regionaly unique.
9
Sales has aSubnet with anAddressRange of 10.3.0.0/16. ForTheSalesSubnet range, which IP address canBe DynamicalAssigned?
10.3.256.0
10.3.0.2
10.3.255.255
10.3.255.254
10
What scaling option provides more CPU, memory, or disk space without adding more virtual machines?
Scale back
Scale deep
Scale up
Scale-Out
11
What's included in a custom Azure role definition?
Operations allowed for Azure resources, and scope of permissions
Assignment of a custom role
Actions and DataActions operations scoped to the tenant level
Assigning admin Contributor roles
12
Explain the main differences between Azure roles (AR**) and Azure Active Directory (Azure AD) roles
Azure roles can be assigned at the root level.
Azure AD roles are used to manage access to Azure resources.
There is nothing like Azure Active Directory (Azure AD) roles
AR apply to AzureResources. AAD roles apply to AzureADresources e.g users
13
Which option is a valid automated deployment source?
SharePoint
Code Repo
JavaScript code
GitHub
14
What type of Azure Firewall rule can allow access to Azure SQL Database from an FQDN address?
SAT rule
NAT rule
Application rule
Network rule
15
Suppose Paula can't view resources in a resource group. Where would Joe go to check the team member's access?
Go to the resources in the resource group and select Role assignments.
Go to the resource group and select Access control (IAM) > Check Access.
Let Paula Cry
Check Paula's permissions by going to their Azure profile > My permissions.
16
Ebube needs to add a custom domain name to a free app but is unable to. What package does he upgrade to?
Free
Basic
Shared
All of the above
17
If you are creating an Azure File Share GRZ and GZRS, what parameter must be removed?
File Share
Subscription
Resource Group
Storage Account
18
Which option can you use to manage governance across multiple Azure subscriptions?
Resource groups
Azure initiatives
Management groups
Create a hierarchical policy initiative
19
What type of user account allows an external organization to access your resources?
A Contributor user account for each member of the team.
A guest user account for each member of the external team.
benefactor group account for every member of the external team.
An administrator account for each member of the team.
20
Which of the following is true about resource groups?
Role-based access control can't be applied to a resource group
Resources can't be in only one resource group.
Resources can be in only one resource group.
Resource groups can be nested.
21
The Azure CLI can be installed on which of the following?
Both Linux and Windows
Linux
Windows
Neither
22
a small application that provides post-deployment configuration and automation tasks for Azure Virtual Machines?
Desired State Configuration
Automation State Configuration
Virtual machine extensions
Load State Configuration
23
There are several Azure policies that need to be applied to a new branch office. What's the best approach?
Create an Azure RBAC role
Create a policy initiative
Create a management group
Create a policy definition
24
What's a valid service tag for network security group rules?
VPN Gateway
Database
VirtualNetwork
a. VM Kubernetes Networker
25
By default, what type of access is allowed on a Web app?
Basic authentication
Mimo authentication
Anonymous authentication
Windows authentication
26
Which Virtual Machine Scale Sets feature can be configured to add more DevOps machines during peak production?
Schedule-based rules
Autoscale
Load balancing
Metric-based rules
27
What's the best storage account solution to support the requirements of a customer's manufacturing division?
Regionally redundant storage
Geo-redundant storage
Zone-redundant storage
Locally redundant storage
28
Your users want to sign-in to devices, apps, and services from anywhere. by using a work account. What the first step?
Enable the device in Azure AD.
Make an account through LDAP.
Join the device to Azure AD.
Register the device with Azure AD.
29
Before registering a server with Sync Service, what must you create first?
Sync Group
Management Group
Resource Group
The Server
30
an admin in another cohort needs access to a VM managed by Us. What's best waytogrant them accesstoJust thatResource?
At the resource group scope, assign the role with the appropriate access.
At the resource scope, assign the role with the appropriate access.
At the resource scope, create a role for them with the appropriate access.
Let him Cry to Mr. Victor
31
How would you describe blob object replication?
Blob object replication doesn't support blob snapshots.
Blob object replication is supported in the archive tier.
Blob object replication doesn't require versioning to be enabled.
Blob object doesnt support replication
32
Which of the following statements correctly describes cloud tiering?
it sets the frequency at which the sync job runs.
It is used for slapping passengers in Onitsha
It archives infrequently access files to free upSpaceon the localFileShare.
it prioritizes the sync order of file shares
33
Which storage approach can help resolve the concerns of the finance team?
The Azure CL
AzCopy
Azure Storage Explorer
Azure Bing Explorer
34
Uncle Joe needs to generate a Report of the roleAssignments for the last week. Where would they generate that report?
go to Access control (IAM) > Role assignments.
Search for Activity log and filter on the Create role assignment operation.
go to Access control (IAM) > Download role assignments.
Search for Access control and filter by role assignment & give Joe one
35
What is the Azure service that provides load balancing of incoming traffic?
Azure Load Balancer
Azure Traffic Manager
Azure DNS
Azure Application Gateway
36
How often can an Azure Virtual Machine be backed up?
Only Hourly
Weekly and Yearly Only
Daily and Weekly Only
Anytime
37
CEO request for billing by department, multiple resource groups have been created& the resource tags applied, next step?
Review the Azure Policy compliance page
create another resource groups
Create an Azure policy
Create a management group
38
WhichStorageSolution replicates data to a SecondaryRegion, maintains 6 copies ofTheData & isTheDefaultReplicationOption?
Zone-redundant storage
Locally redundant storage
Geo-redundant storage
Read-access geo-redundant storage
39
Which is the top level of management scope?
Subscription
Management Group
Resource Group
Virtual Network
40
What component of Azure Kubernetes Service contributes to the monthly Azure charge?
Primary node
Deployed pod VM
Per node virtual machine
Per deployed pod
41
Which Kubernetes component processes orchestration requests and schedules when to run requested containers?
LoadBalancer
container
node
kubelet
42
What's the default network rule when configuring network access to an Azure storage account?
Allow all connections from all networks.
Allow all connection from a private IP address range.
Deny all connections from all networks.
Deny all connections from a private IP address range.
43
What is the minimum number of VMs that should be assigned to an Availability Set in Azure?
4
2
3
1
44
CEO wants to identify which billing department each Azure resource belongs to. Which approach enables this requirement?
Track resource usage in a spreadsheet.
Apply aTag to each resource that includes the associated billing department
Place the resources in different regions.
open Azure Active Directory (Azure AD) Account
45
Which App Service Plan can you implement to support the Production team's requirements?
Basic
Premium
Standard
Ultimate
46
What is the Azure service that provides high availability and automatic scaling of applications?
Azure Functions
Azure Container Instances
Azure Kubernetes Service
Azure App Service
47
What feature can support the denial of traffic based on the IP address range?
Statically assigned IP addresses
Dynamically assigned IP addresses
Explosive assigned IP addresses in the reserved range
IP addresses in the reserved range
48
How many open ports are required when using an open network for your container instance?
None
Two
One
All
49
What statement best describes Azure Blob Storage access tiers?
Cool tier to Hot tier happens immediately
cool access tier is for frequent access of objects in the storage account
HotAccess tier is forStoring largeAmountsOfData that's infrequentlyAccessed
Admin can switch between hot and cool performance tiers at any time.
50
Which one of these is not an element of an Azure Resource Manager template?
parameters
idempotent
schema
51
Trying to select a Virtual Machine in an Azure Backup process, but you are unable to see the VM in the list. Why?
The VM is not running
The VM is not in the same region as the Backup Vault
The VM is not running the latest version of Azure Backup Agent
All of the above
52
What tool will you use to determine if a remote port is close to a specific traffic?
Azure CLI
Port Tester
IP Flow Verify
Network Monitor
53
How can you ensure more virtual machines are deployed for the Admin team when the CPU is 75% consumed?
Manually increase the instance count.
Change the CPU percentage to 50%.
Enable the autoscale option.
54
an Azure storage account must be:
Unique within your Azure subscription.
Regionally unique.
Globally unique.
Unique within the containing resource group.
55
For the security requirements, how can you connect to Azure Linux virtual machines and install software?
Create a custom Azure bulwark.
Configure Azure Bastion.
Create a custom script extension.
Configure a guest configuration on the virtual machine.
56
How soon do Custom Script Extensions time out?
45 minutes
30 minutes
90 minutes
120 minutes
57
How can you ensure that only cost-effective virtual machine SKU sizes are deployed?
Periodically inspect the deployment to see which SKU sizes are used
Create an Azure RBAC role that defines the allowed virtual machine SKU size
Create a policy in Azure Policy that specifies the allowed SKU sizes
Create a Blob Storage policy in Azure
58
Eben needs full access to a resourceGroup, following least-privilege best practices, what scope should you specify?
Subscription
Management Group
Resource group
Resource
59
Joe needs to be able to modify settings on VM3. He shouldn't be able to make changes to VM1 or VM2. How can you do this?
Assign Joe to the Contributor role on VM3.
Assign Joe to the Contributor role on the resource group.
It is Impossible
Move VM3 to a newResource, and then assign Joe to the Owner role on VM3.
60
How does Kubernetes enable internal-only applications to support other workloads within the cluster?
The ClusterIP service
Per deployed pod
The NodePort service
The LoadBalancer service
61
You are attempting to protect 201^st VM using Azure Backup, but you are unable to add it to the vault, why?
The VM is not in the correct region
The VM is not running the correct operating system
The maximum of 200 VMs per vault has been reached
The VM is not the correct size
62
What term defines a dedicated and trusted instance of Azure Active Directory?
Azure Identity
Azure tenant
Azure AD account
Azure Governance
63
What does Microsoft recommend for rule priority?
10
100
200
50
64
Which choice correctly describes Azure Active Directory?
Azure AD can be queried through LDAP.
Azure AD is a dedicated and trusted instance Level Development on Cloud.
Azure AD is primarily an identity solution.
Azure AD uses organizational units (OUs) and group policy objects (GPOs).
65
In a typical project, when would you create your storage account(s)?
during deployment, when the project is running.
After deployment, when the project is running.
At the end, during resource cleanup.
At the beginning, during project setup.
66
You are deploying a public load balancer but you have not yet created a VM that will be in the backend pool.
Create a VM and add it to the backend pool
Create a target group and add it to the backend pool
Create a backend pool with no targets
Select YES on a setting to add a backend pool without a target
67
Which solution is the easiest way to implement secure storage for the company's media files?
Periodically regenerate the account key to control access to the files.
Allow all connections from all networks.
Create a SAS for each user and delete the SAS to prevent access.
Create storedAccessPolicies forEach container to enable revocationOfAccess.
68
What implementation ensures container software runs the same locally and in the cloud on Azure?
Docker
Virtual machine
Container Instances
Container groups
69
launching PowerShell as an Administrator. Which of the following commands should be executed first?
Connect-AzActiveDirectory
Connect-AzAccount
Get-AzSubscription
Get-AzResourceGroup
70
What is an Azure Resource Manager template?
A series of Azure CLI commands to deploy infrastructure to Azure.
script held in Azure Resource Manager to manage your Azure storage account.
Idempotent File holds infrastructure&configuration command shells
JSON file that defines the infrastructure&configuration for your deployment
71
What is the Azure service that provides a scalable and fully managed NoSQL database?
Azure Database for MySQL
Azure Cosmos DB
Azure Database for PostgreSQL
Azure SQL Database
72
What kind of group account can you create so you can apply the same permissions to all group members?
Security group
Azure AD blob group
Microsoft 365 group
Azure AD bulk group
73
Which of the following situations would be good example of when to use a resource lock?
A non-production virtual machine used to test occasional application builds
VM used to test occasional application resource
Storage account used to temporarily storeImages processed in a dev environ
A ExpressRoute circuit with connectivity back to the on-premises network.
74
When managing password, which section lets a user know when the password is reset?
Compliance Manager
Notification
Security Center
Azure Active Directory
75
How can Joe (the admin) move the data in the existing storage account to the new storage account?
Use Azure Storage Explorer
Use the AzCopy command-line tool
Use the Robocopy command-line tool
Use the Azure portal
76
How can you support Golden's requests about research web page usage?
Application logging
Azure Application Insights
Continuous deployment
Azure Storage
77
Which Azure AD role enables a user to manage all groups in your Teams tenants, and also assign other admin roles?
Blob administrator
Security administrator
User administrator
Global administrator
78
The CEO wants to be notified whenever the company is half-way to spending the budget for cloud services, best method?
Create a budget and a spending threshold.
Create an Azure reservation.
Track budget usage in a spreadsheet.
Create a management group.
79
What option can the infrastructure team use for their IIS configuration instead of Custom Script Extensions?
Windows update
Virtual machine extensions
Desired State Configuration
Automation State Configuration
80
Multifactor Authentication is applied to which group?
End-users
All of the above
Guests
Administrators
81
ARM AzureResourceManager templates are idempotent. This means that if you run a template with no changes a second time:
ARM will delete the previously deployed resources and redeploy them.
ARM will deploy new resources as copies of the previously deployedResources
ARM creates an idempotent schema of the deployed resources
ARM won't make any changes to the deployed resources.
82
A new project has several resources that need to be administered together. Which strategy would provide good solution?
Azure templates
Azure subscriptions
Azure Active Directory
Azure resource groups
83
what is the minimum time before an alert to become active?
15 mins
1 min
5 mins
10 mins
84
In order to move data to Azure using the Azure Data Box Disk, what must you do first?
Install the Data Box Disk software
Prepare the disk
Connect to the Internet
Purchase the disk
85
What is an Azure Resource Manager template?
A JSON file that defines the infrastructure and config for the deployment.
A series of Azure CLI commands to deploy infrastructure to Azure.
Azure services provides backup and recovery of data
Script used by the AzureResource Manager to manage the Az storage account
86
Joe added a custom DNS server to the network, but his VMs are not using the DNS Setting. How can he fix this?
Reboot the Virtual Machines
Reboot the DNS server
Restart the Azure network
Update the DNS settings on the Virtual Machines
87
Joe need's to connect a VM to a new log analytical workspace, but the connect option is greyed out. What must he do?
Restart the virtual machine
Install the Log Analytics agent on the virtual machine
Create a new Log Analytics workspace
Start the virtual machine
88
What tool can be used to test Virtual Network Gateway and connections?
VPN Troubleshoot
Azure Portal
Azure CLI
PowerShell
89
Which of the following parameters is an element in the template schema?
CustomRole
Includes
Outputs
Scripts
90
Which of the following statements about Azure Virtual Network is correct?
Azure VN can't be configured to communicate with on-premises resources.
It cant be accessed by people named Paula due to confidential agreement
Azure Virtual Network enables communication between Azure resources.
Outbound communication with theInternet must be configured foreach resource
91
Which of the following Azure services provides backup and recovery of data?
Azure DevOps
Azure Event Grid
Azure Site Recovery
Azure Traffic Manager

AZ-104: Microsoft Azure Administrator Flashcards | StudBud

AZ-104: Microsoft Azure Administrator

91 termsStudBud Administration82 plays

AZ-104: Microsoft Azure Administrator

Flashcards91 cardsFPractice quizPHost liveL

Questions 91

Answers

1
What types of scaling can you use to increase the CPU capacity for your existing Virtual Machine Scale Sets instances?
Horizontal scaling
Vertical scaling
Diagonal scaling
Load balancing
2
What's the best way to implement secure access to Azure Storage for the company's users?
Use allowance access signature for the production applications.
Use access keys for the production applications.
Use stored access policies for the production applications.
Use shared access signatures for the production applications.
3
Which of the following Azure services provides a secure way to store and manage keys, secrets, and certificates?
Azure Key Vault
Azure Active Directory
Azure Security Center
Azure Information Protection
4
You are reviewing a metric of a VM scale set and need to see the result. What do you need to do?
Apply aggregation and select the sum
Apply sorting and select the highest value
Apply filtering and select one instance
Apply splitting and select all the instances
5
Which virtual machine is best for running a network appliance?
Network-optimized virtual machine
Compute-optimized virtual machine
Memory-optimized virtual machine
Storage-optimized virtual machine
6
Which option preserves data residency, and offers comprehensive compliance and resiliency options?
Subscriptions
Azure Active Directory (Azure AD) Account
Regions
7
How many elements are in an Azure Template?
5
10
3
7
8
To what extent does a storage account name need to be unique?
The name must be unique within the containing resource group.
The name must be globally unique.
The name must be unique within the organization's subscription.
The name must be Regionaly unique.
9
Sales has aSubnet with anAddressRange of 10.3.0.0/16. ForTheSalesSubnet range, which IP address canBe DynamicalAssigned?
10.3.256.0
10.3.0.2
10.3.255.255
10.3.255.254
10
What scaling option provides more CPU, memory, or disk space without adding more virtual machines?
Scale back
Scale deep
Scale up
Scale-Out
11
What's included in a custom Azure role definition?
Operations allowed for Azure resources, and scope of permissions
Assignment of a custom role
Actions and DataActions operations scoped to the tenant level
Assigning admin Contributor roles
12
Explain the main differences between Azure roles (AR**) and Azure Active Directory (Azure AD) roles
Azure roles can be assigned at the root level.
Azure AD roles are used to manage access to Azure resources.
There is nothing like Azure Active Directory (Azure AD) roles
AR apply to AzureResources. AAD roles apply to AzureADresources e.g users
13
Which option is a valid automated deployment source?
SharePoint
Code Repo
JavaScript code
GitHub
14
What type of Azure Firewall rule can allow access to Azure SQL Database from an FQDN address?
SAT rule
NAT rule
Application rule
Network rule
15
Suppose Paula can't view resources in a resource group. Where would Joe go to check the team member's access?
Go to the resources in the resource group and select Role assignments.
Go to the resource group and select Access control (IAM) > Check Access.
Let Paula Cry
Check Paula's permissions by going to their Azure profile > My permissions.
16
Ebube needs to add a custom domain name to a free app but is unable to. What package does he upgrade to?
Free
Basic
Shared
All of the above
17
If you are creating an Azure File Share GRZ and GZRS, what parameter must be removed?
File Share
Subscription
Resource Group
Storage Account
18
Which option can you use to manage governance across multiple Azure subscriptions?
Resource groups
Azure initiatives
Management groups
Create a hierarchical policy initiative
19
What type of user account allows an external organization to access your resources?
A Contributor user account for each member of the team.
A guest user account for each member of the external team.
benefactor group account for every member of the external team.
An administrator account for each member of the team.
20
Which of the following is true about resource groups?
Role-based access control can't be applied to a resource group
Resources can't be in only one resource group.
Resources can be in only one resource group.
Resource groups can be nested.
21
The Azure CLI can be installed on which of the following?
Both Linux and Windows
Linux
Windows
Neither
22
a small application that provides post-deployment configuration and automation tasks for Azure Virtual Machines?
Desired State Configuration
Automation State Configuration
Virtual machine extensions
Load State Configuration
23
There are several Azure policies that need to be applied to a new branch office. What's the best approach?
Create an Azure RBAC role
Create a policy initiative
Create a management group
Create a policy definition
24
What's a valid service tag for network security group rules?
VPN Gateway
Database
VirtualNetwork
a. VM Kubernetes Networker
25
By default, what type of access is allowed on a Web app?
Basic authentication
Mimo authentication
Anonymous authentication
Windows authentication
26
Which Virtual Machine Scale Sets feature can be configured to add more DevOps machines during peak production?
Schedule-based rules
Autoscale
Load balancing
Metric-based rules
27
What's the best storage account solution to support the requirements of a customer's manufacturing division?
Regionally redundant storage
Geo-redundant storage
Zone-redundant storage
Locally redundant storage
28
Your users want to sign-in to devices, apps, and services from anywhere. by using a work account. What the first step?
Enable the device in Azure AD.
Make an account through LDAP.
Join the device to Azure AD.
Register the device with Azure AD.
29
Before registering a server with Sync Service, what must you create first?
Sync Group
Management Group
Resource Group
The Server
30
an admin in another cohort needs access to a VM managed by Us. What's best waytogrant them accesstoJust thatResource?
At the resource group scope, assign the role with the appropriate access.
At the resource scope, assign the role with the appropriate access.
At the resource scope, create a role for them with the appropriate access.
Let him Cry to Mr. Victor
31
How would you describe blob object replication?
Blob object replication doesn't support blob snapshots.
Blob object replication is supported in the archive tier.
Blob object replication doesn't require versioning to be enabled.
Blob object doesnt support replication
32
Which of the following statements correctly describes cloud tiering?
it sets the frequency at which the sync job runs.
It is used for slapping passengers in Onitsha
It archives infrequently access files to free upSpaceon the localFileShare.
it prioritizes the sync order of file shares
33
Which storage approach can help resolve the concerns of the finance team?
The Azure CL
AzCopy
Azure Storage Explorer
Azure Bing Explorer
34
Uncle Joe needs to generate a Report of the roleAssignments for the last week. Where would they generate that report?
go to Access control (IAM) > Role assignments.
Search for Activity log and filter on the Create role assignment operation.
go to Access control (IAM) > Download role assignments.
Search for Access control and filter by role assignment & give Joe one
35
What is the Azure service that provides load balancing of incoming traffic?
Azure Load Balancer
Azure Traffic Manager
Azure DNS
Azure Application Gateway
36
How often can an Azure Virtual Machine be backed up?
Only Hourly
Weekly and Yearly Only
Daily and Weekly Only
Anytime
37
CEO request for billing by department, multiple resource groups have been created& the resource tags applied, next step?
Review the Azure Policy compliance page
create another resource groups
Create an Azure policy
Create a management group
38
WhichStorageSolution replicates data to a SecondaryRegion, maintains 6 copies ofTheData & isTheDefaultReplicationOption?
Zone-redundant storage
Locally redundant storage
Geo-redundant storage
Read-access geo-redundant storage
39
Which is the top level of management scope?
Subscription
Management Group
Resource Group
Virtual Network
40
What component of Azure Kubernetes Service contributes to the monthly Azure charge?
Primary node
Deployed pod VM
Per node virtual machine
Per deployed pod
41
Which Kubernetes component processes orchestration requests and schedules when to run requested containers?
LoadBalancer
container
node
kubelet
42
What's the default network rule when configuring network access to an Azure storage account?
Allow all connections from all networks.
Allow all connection from a private IP address range.
Deny all connections from all networks.
Deny all connections from a private IP address range.
43
What is the minimum number of VMs that should be assigned to an Availability Set in Azure?
4
2
3
1
44
CEO wants to identify which billing department each Azure resource belongs to. Which approach enables this requirement?
Track resource usage in a spreadsheet.
Apply aTag to each resource that includes the associated billing department
Place the resources in different regions.
open Azure Active Directory (Azure AD) Account
45
Which App Service Plan can you implement to support the Production team's requirements?
Basic
Premium
Standard
Ultimate
46
What is the Azure service that provides high availability and automatic scaling of applications?
Azure Functions
Azure Container Instances
Azure Kubernetes Service
Azure App Service
47
What feature can support the denial of traffic based on the IP address range?
Statically assigned IP addresses
Dynamically assigned IP addresses
Explosive assigned IP addresses in the reserved range
IP addresses in the reserved range
48
How many open ports are required when using an open network for your container instance?
None
Two
One
All
49
What statement best describes Azure Blob Storage access tiers?
Cool tier to Hot tier happens immediately
cool access tier is for frequent access of objects in the storage account
HotAccess tier is forStoring largeAmountsOfData that's infrequentlyAccessed
Admin can switch between hot and cool performance tiers at any time.
50
Which one of these is not an element of an Azure Resource Manager template?
parameters
idempotent
schema
51
Trying to select a Virtual Machine in an Azure Backup process, but you are unable to see the VM in the list. Why?
The VM is not running
The VM is not in the same region as the Backup Vault
The VM is not running the latest version of Azure Backup Agent
All of the above
52
What tool will you use to determine if a remote port is close to a specific traffic?
Azure CLI
Port Tester
IP Flow Verify
Network Monitor
53
How can you ensure more virtual machines are deployed for the Admin team when the CPU is 75% consumed?
Manually increase the instance count.
Change the CPU percentage to 50%.
Enable the autoscale option.
54
an Azure storage account must be:
Unique within your Azure subscription.
Regionally unique.
Globally unique.
Unique within the containing resource group.
55
For the security requirements, how can you connect to Azure Linux virtual machines and install software?
Create a custom Azure bulwark.
Configure Azure Bastion.
Create a custom script extension.
Configure a guest configuration on the virtual machine.
56
How soon do Custom Script Extensions time out?
45 minutes
30 minutes
90 minutes
120 minutes
57
How can you ensure that only cost-effective virtual machine SKU sizes are deployed?
Periodically inspect the deployment to see which SKU sizes are used
Create an Azure RBAC role that defines the allowed virtual machine SKU size
Create a policy in Azure Policy that specifies the allowed SKU sizes
Create a Blob Storage policy in Azure
58
Eben needs full access to a resourceGroup, following least-privilege best practices, what scope should you specify?
Subscription
Management Group
Resource group
Resource
59
Joe needs to be able to modify settings on VM3. He shouldn't be able to make changes to VM1 or VM2. How can you do this?
Assign Joe to the Contributor role on VM3.
Assign Joe to the Contributor role on the resource group.
It is Impossible
Move VM3 to a newResource, and then assign Joe to the Owner role on VM3.
60
How does Kubernetes enable internal-only applications to support other workloads within the cluster?
The ClusterIP service
Per deployed pod
The NodePort service
The LoadBalancer service
61
You are attempting to protect 201^st VM using Azure Backup, but you are unable to add it to the vault, why?
The VM is not in the correct region
The VM is not running the correct operating system
The maximum of 200 VMs per vault has been reached
The VM is not the correct size
62
What term defines a dedicated and trusted instance of Azure Active Directory?
Azure Identity
Azure tenant
Azure AD account
Azure Governance
63
What does Microsoft recommend for rule priority?
10
100
200
50
64
Which choice correctly describes Azure Active Directory?
Azure AD can be queried through LDAP.
Azure AD is a dedicated and trusted instance Level Development on Cloud.
Azure AD is primarily an identity solution.
Azure AD uses organizational units (OUs) and group policy objects (GPOs).
65
In a typical project, when would you create your storage account(s)?
during deployment, when the project is running.
After deployment, when the project is running.
At the end, during resource cleanup.
At the beginning, during project setup.
66
You are deploying a public load balancer but you have not yet created a VM that will be in the backend pool.
Create a VM and add it to the backend pool
Create a target group and add it to the backend pool
Create a backend pool with no targets
Select YES on a setting to add a backend pool without a target
67
Which solution is the easiest way to implement secure storage for the company's media files?
Periodically regenerate the account key to control access to the files.
Allow all connections from all networks.
Create a SAS for each user and delete the SAS to prevent access.
Create storedAccessPolicies forEach container to enable revocationOfAccess.
68
What implementation ensures container software runs the same locally and in the cloud on Azure?
Docker
Virtual machine
Container Instances
Container groups
69
launching PowerShell as an Administrator. Which of the following commands should be executed first?
Connect-AzActiveDirectory
Connect-AzAccount
Get-AzSubscription
Get-AzResourceGroup
70
What is an Azure Resource Manager template?
A series of Azure CLI commands to deploy infrastructure to Azure.
script held in Azure Resource Manager to manage your Azure storage account.
Idempotent File holds infrastructure&configuration command shells
JSON file that defines the infrastructure&configuration for your deployment
71
What is the Azure service that provides a scalable and fully managed NoSQL database?
Azure Database for MySQL
Azure Cosmos DB
Azure Database for PostgreSQL
Azure SQL Database
72
What kind of group account can you create so you can apply the same permissions to all group members?
Security group
Azure AD blob group
Microsoft 365 group
Azure AD bulk group
73
Which of the following situations would be good example of when to use a resource lock?
A non-production virtual machine used to test occasional application builds
VM used to test occasional application resource
Storage account used to temporarily storeImages processed in a dev environ
A ExpressRoute circuit with connectivity back to the on-premises network.
74
When managing password, which section lets a user know when the password is reset?
Compliance Manager
Notification
Security Center
Azure Active Directory
75
How can Joe (the admin) move the data in the existing storage account to the new storage account?
Use Azure Storage Explorer
Use the AzCopy command-line tool
Use the Robocopy command-line tool
Use the Azure portal
76
How can you support Golden's requests about research web page usage?
Application logging
Azure Application Insights
Continuous deployment
Azure Storage
77
Which Azure AD role enables a user to manage all groups in your Teams tenants, and also assign other admin roles?
Blob administrator
Security administrator
User administrator
Global administrator
78
The CEO wants to be notified whenever the company is half-way to spending the budget for cloud services, best method?
Create a budget and a spending threshold.
Create an Azure reservation.
Track budget usage in a spreadsheet.
Create a management group.
79
What option can the infrastructure team use for their IIS configuration instead of Custom Script Extensions?
Windows update
Virtual machine extensions
Desired State Configuration
Automation State Configuration
80
Multifactor Authentication is applied to which group?
End-users
All of the above
Guests
Administrators
81
ARM AzureResourceManager templates are idempotent. This means that if you run a template with no changes a second time:
ARM will delete the previously deployed resources and redeploy them.
ARM will deploy new resources as copies of the previously deployedResources
ARM creates an idempotent schema of the deployed resources
ARM won't make any changes to the deployed resources.
82
A new project has several resources that need to be administered together. Which strategy would provide good solution?
Azure templates
Azure subscriptions
Azure Active Directory
Azure resource groups
83
what is the minimum time before an alert to become active?
15 mins
1 min
5 mins
10 mins
84
In order to move data to Azure using the Azure Data Box Disk, what must you do first?
Install the Data Box Disk software
Prepare the disk
Connect to the Internet
Purchase the disk
85
What is an Azure Resource Manager template?
A JSON file that defines the infrastructure and config for the deployment.
A series of Azure CLI commands to deploy infrastructure to Azure.
Azure services provides backup and recovery of data
Script used by the AzureResource Manager to manage the Az storage account
86
Joe added a custom DNS server to the network, but his VMs are not using the DNS Setting. How can he fix this?
Reboot the Virtual Machines
Reboot the DNS server
Restart the Azure network
Update the DNS settings on the Virtual Machines
87
Joe need's to connect a VM to a new log analytical workspace, but the connect option is greyed out. What must he do?
Restart the virtual machine
Install the Log Analytics agent on the virtual machine
Create a new Log Analytics workspace
Start the virtual machine
88
What tool can be used to test Virtual Network Gateway and connections?
VPN Troubleshoot
Azure Portal
Azure CLI
PowerShell
89
Which of the following parameters is an element in the template schema?
CustomRole
Includes
Outputs
Scripts
90
Which of the following statements about Azure Virtual Network is correct?
Azure VN can't be configured to communicate with on-premises resources.
It cant be accessed by people named Paula due to confidential agreement
Azure Virtual Network enables communication between Azure resources.
Outbound communication with theInternet must be configured foreach resource
91
Which of the following Azure services provides backup and recovery of data?
Azure DevOps
Azure Event Grid
Azure Site Recovery
Azure Traffic Manager