100 Free AZ-900 Practice Questions and Answers
100 questions for the AZ-900 exam, each answer explained. Watch it here, try the questions yourself, or read the transcript.
Questions in this video
Tap an answer to see why it is right or wrong. Tap it again to reset.
Question 1 Play from 00:00
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Virtual Desktop is for remote desktop sessions, not container management.
Not this one. Try another answer.
Why B is wrong
Azure Virtual Machines can run containers but are not dedicated container management services.
Not this one. Try another answer.
Why C is wrong
Azure Functions is a serverless compute service for event-driven workloads, not a container management service.
Right, D is one of the answers.
Why D is right
Azure Container Instances and Azure Kubernetes Service (AKS) are both dedicated container management services. Container Instances provides serverless container execution, while AKS provides orchestrated Kubernetes-based container management.
Right, E is one of the answers.
Why E is right
Azure Container Instances and Azure Kubernetes Service (AKS) are both dedicated container management services. Container Instances provides serverless container execution, while AKS provides orchestrated Kubernetes-based container management.
Question 2 Play from 01:41
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Storage accounts are separate resources, not containers for virtual machines.
Right, B is the answer.
Why B is right
Virtual machines are placed within resource groups, which are the fundamental organizational containers in Azure. Resource groups hold related resources and provide the scope for access control, billing, and lifecycle management.
Not this one. Try another answer.
Why C is wrong
Administrative units are used for Azure AD management of user and group access, not for placing compute resources.
Not this one. Try another answer.
Why D is wrong
Application groups are used in Azure Virtual Desktop for publishing applications, not for placing VMs.
Question 3 Play from 03:07
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
In a SaaS model, the customer provides only the application data. The cloud provider manages the application software, infrastructure, compute resources, storage, and all underlying systems. The customer simply uses the application and manages their own data.
Not this one. Try another answer.
Why B is wrong
Data storage is provided and managed by the SaaS provider, not the customer.
Not this one. Try another answer.
Why C is wrong
Compute resources are provided and managed by the SaaS provider as part of the service.
Not this one. Try another answer.
Why D is wrong
Application software is provided by the SaaS vendor; the customer does not develop or provide it.
Question 4 Play from 04:31
Tap an answer. The reason for that answer shows here.
Right, A is one of the answers.
Why A is right
Availability Zones (option A) distribute VMs across physically separate data centers within a single region, protecting against data center failure. Multiple regions (option D) protect against entire region failures, providing geographic redundancy. Both are complete solutions for data center failure protection. Resource groups (B) are logical containers providing no fault tolerance. Scale sets (C) provide auto-scaling and load balancing but not protection against data center failures unless combined with zones or regions.
Not this one. Try another answer.
Why B is wrong
Resource groups are management containers only and provide no fault tolerance or data center failure protection.
Not this one. Try another answer.
Why C is wrong
Scale sets provide auto-scaling within a data center but do not protect against data center failures.
Right, D is one of the answers.
Why D is right
Availability Zones (option A) distribute VMs across physically separate data centers within a single region, protecting against data center failure. Multiple regions (option D) protect against entire region failures, providing geographic redundancy. Both are complete solutions for data center failure protection. Resource groups (B) are logical containers providing no fault tolerance. Scale sets (C) provide auto-scaling and load balancing but not protection against data center failures unless combined with zones or regions.
Question 5 Play from 06:30
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Monitor is for monitoring and collecting metrics/logs, not for best practice comparisons.
Not this one. Try another answer.
Why B is wrong
Azure Service Health tracks service incidents and planned maintenance, not best practices.
Not this one. Try another answer.
Why C is wrong
Application Insights monitors application performance but does not compare to best practices across the subscription.
Right, D is the answer.
Why D is right
Azure Advisor is specifically designed to analyze cloud usage and provide recommendations based on Azure best practices. It evaluates your subscription and resources against Microsoft's best practice guidelines, offering actionable recommendations to improve performance, security, reliability, operational excellence, and cost optimization. This directly addresses comparing usage to industry standards.
Question 6 Play from 08:05
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Application security groups manage traffic between resources within networks, not across all 10 virtual networks centrally.
Not this one. Try another answer.
Why B is wrong
Virtual network gateways are for connecting networks and on-premises systems, not for limiting inbound traffic across all networks.
Not this one. Try another answer.
Why C is wrong
ExpressRoute circuits are for dedicated network connections, not for limiting inbound traffic to virtual networks.
Right, D is the answer.
Why D is right
Azure Firewall is a centralized, managed firewall service that can limit inbound traffic to all virtual networks in the subscription. A single Azure Firewall instance can protect multiple virtual networks and virtual machines, making it the most efficient solution.
Question 7 Play from 09:47
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Network Security Groups (NSGs) are the correct solution for limiting connection types between resources within Azure virtual networks. NSGs operate at the network interface and subnet level, allowing you to create inbound and outbound rules that filter traffic between web servers and database servers. Azure Service Bus is a messaging service, not for network filtering. A local network gateway is for hybrid connectivity, and a route filter is for BGP advertisement filtering in ExpressRoute scenarios.
Not this one. Try another answer.
Why B is wrong
Azure Service Bus is a messaging service for asynchronous communication, not for network traffic filtering.
Not this one. Try another answer.
Why C is wrong
A local network gateway is used for site-to-site VPN or ExpressRoute connectivity, not for filtering connections between Azure resources.
Not this one. Try another answer.
Why D is wrong
A route filter is used to filter BGP advertisements in ExpressRoute, not for controlling connections between servers.
Question 8 Play from 11:49
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Kubernetes Service (AKS) is for container orchestration, not on-premises Windows Server management.
Right, B is the answer.
Why B is right
Azure Arc extends Azure management and governance to on-premises servers running Windows Server, allowing you to manage them through the Azure portal as if they were Azure resources. This enables unified management of hybrid infrastructure across on-premises and cloud environments.
Not this one. Try another answer.
Why C is wrong
Docker is a containerization platform unrelated to managing on-premises servers through Azure.
Not this one. Try another answer.
Why D is wrong
RBAC controls access permissions but doesn't provide the hybrid server management capability.
Question 9 Play from 13:21
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Read-only locks prevent modifications but do not restrict which regions resources can be created in.
Right, B is the answer.
Why B is right
Azure Policy allows administrators to create and enforce rules that restrict resource creation to specific regions. Policies can evaluate resources against defined rules and prevent non-compliant deployments.
Not this one. Try another answer.
Why C is wrong
Management groups help organize subscriptions hierarchically but do not enforce regional restrictions.
Not this one. Try another answer.
Why D is wrong
Reservations are for purchasing Azure services at a discount and do not control resource location.
Question 10 Play from 14:49
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Security Center is a security monitoring and threat management tool, not a certificate storage service.
Not this one. Try another answer.
Why B is wrong
Azure Storage accounts are designed for general-purpose data storage, not for secure certificate management.
Right, C is the answer.
Why C is right
Azure Key Vault is the dedicated service for storing and managing certificates, keys, and secrets securely in Azure. It provides secure storage, access control, and audit logging for sensitive cryptographic material. Azure Security Center is for security monitoring and threat detection. Azure Storage accounts are for general data storage, not for certificate management. Azure Information Protection is for data classification and protection.
Not this one. Try another answer.
Why D is wrong
Azure Information Protection is for data classification and encryption of sensitive information, not for certificate storage.
Show all 100 questionsShow fewer questions
Question 11 Play from 16:29
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
The Data Protection Addendum addresses data processing obligations but does not explain what personal data is collected or how it is used.
Not this one. Try another answer.
Why B is wrong
The Microsoft Online Services Terms covers service conditions and legal terms, not personal data collection practices.
Right, C is the answer.
Why C is right
The Microsoft Privacy Statement details the personal data collected by Microsoft, how it is used, and the purposes of collection. It provides transparency about Microsoft's data practices and is the primary document for understanding privacy-related information.
Not this one. Try another answer.
Why D is wrong
Azure Security Center provides security recommendations and threat detection, not privacy policy information.
Question 12 Play from 18:10
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
A network security group (NSG) is an Azure resource that contains security rules to allow or deny inbound and outbound network traffic. NSGs are specifically designed to control which ports and protocols devices on the Internet can use to access virtual machines. Azure AD roles control identity-based access, Azure AD groups organize users, and Key Vaults manage secrets-none of these control network port access.
Not this one. Try another answer.
Why B is wrong
Azure AD roles control identity and access management, not network port access.
Not this one. Try another answer.
Why C is wrong
Azure AD groups organize users for access management, not network traffic control.
Not this one. Try another answer.
Why D is wrong
Azure Key Vault stores and manages cryptographic keys and secrets, not network ports.
Question 13 Play from 20:01
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Billing readers do not need special status; the tool is publicly available.
Not this one. Try another answer.
Why B is wrong
Subscription owners do not need special status; the tool is publicly available.
Right, C is the answer.
Why C is right
The Azure Total Cost of Ownership calculator is a publicly accessible tool that anyone can use without requiring an Azure subscription, Azure AD account, or specific role permissions. It is designed to help prospects and customers estimate cloud migration costs.
Not this one. Try another answer.
Why D is wrong
An Azure AD account is not required; the tool is publicly accessible.
Question 14 Play from 21:26
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
The statement is correct. The Azure Standard support plan is indeed the lowest-cost option that provides 24x7 access to support engineers by phone. While Basic support is free, it does not include phone support; Standard is the cheapest paid tier offering phone support around the clock. The underlined text accurately describes this feature.
Not this one. Try another answer.
Why B is wrong
Developer support does not offer 24x7 phone support.
Not this one. Try another answer.
Why C is wrong
Basic support does not include phone support access.
Not this one. Try another answer.
Why D is wrong
Professional Direct is more expensive than Standard while offering the same 24x7 phone support.
Question 15 Play from 23:11
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Layer 2 is the data link layer; ExpressRoute uses Layer 3 routing protocols like BGP.
Right, B is the answer.
Why B is right
ExpressRoute operates at Layer 3 (Network layer) of the OSI model. It provides a private, dedicated network connection between on-premises infrastructure and Azure data centers using Border Gateway Protocol (BGP) routing, which is a Layer 3 protocol.
Not this one. Try another answer.
Why C is wrong
Layer 5 is the session layer, which is not relevant to ExpressRoute's core functionality.
Not this one. Try another answer.
Why D is wrong
Layer 7 is the application layer, not where ExpressRoute operates.
Question 16 Play from 24:31
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Adopt the cloud is the fourth stage, coming after strategy, planning, and readiness.
Not this one. Try another answer.
Why B is wrong
Make a plan is the second stage, following the strategy definition phase.
Not this one. Try another answer.
Why C is wrong
Ready your organization is the third stage, after strategy and planning are established.
Right, D is the answer.
Why D is right
The Microsoft Cloud Adoption Framework for Azure begins with 'Define your strategy' as the first stage. This stage involves understanding business objectives, defining cloud strategy, and establishing governance models before any implementation begins. The five stages follow in order: Strategy, Plan, Ready, Adopt, and Govern/Manage.
Question 17 Play from 26:00
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Monitor is for performance metrics and diagnostics, not maintenance notifications.
Right, B is the answer.
Why B is right
Azure Service Health is the dedicated service for receiving notifications about planned maintenance, service incidents, and health advisories that affect your Azure resources and subscriptions. It provides proactive communication about maintenance windows. Azure Monitor tracks resource performance metrics. Azure Advisor provides optimization recommendations. Microsoft Trust Center provides compliance and security information but not maintenance notifications.
Not this one. Try another answer.
Why C is wrong
Azure Advisor provides optimization recommendations, not maintenance notifications.
Not this one. Try another answer.
Why D is wrong
Trust Center provides compliance documentation, not personalized maintenance notifications.
Question 18 Play from 27:38
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Active Directory integration is handled by Azure AD Connect, not Azure Advisor.
Not this one. Try another answer.
Why B is wrong
Cost estimation is done by Azure Cost Management and the pricing calculator, not primarily by Advisor.
Right, C is the answer.
Why C is right
Azure Advisor is a personalized cloud consultant that helps optimize Azure deployments by analyzing resource configurations and usage patterns. It provides recommendations across five categories including Security, and specifically confirms that Azure subscription security follows best practices by identifying security vulnerabilities and gaps. Option A relates to identity integration tools, B relates to cost estimation (which Advisor does inform but is not its primary task), and D relates to migration assessment tools like Azure Migrate.
Not this one. Try another answer.
Why D is wrong
Migration assessment is performed by Azure Migrate, not Azure Advisor.
Question 19 Play from 29:36
Tap an answer. The reason for that answer shows here.
Right, A is one of the answers.
Why A is right
Multiple subscriptions and multiple resource groups are both valid techniques to segment Azure for different departments with separate management. Multiple subscriptions provide complete isolation and independent billing, allowing department administrators to manage resources separately with distinct identity and access control. Multiple resource groups within subscriptions also allow logical separation of department resources. Multiple Azure AD directories and multiple regions are not practical segmentation solutions for department-level resource management.
Not this one. Try another answer.
Why B is wrong
Multiple Azure AD directories would overcomplicate identity management and is not a standard approach for departmental segmentation.
Not this one. Try another answer.
Why C is wrong
Multiple regions are used for geographic distribution and disaster recovery, not for departmental segmentation.
Right, D is one of the answers.
Why D is right
Multiple subscriptions and multiple resource groups are both valid techniques to segment Azure for different departments with separate management. Multiple subscriptions provide complete isolation and independent billing, allowing department administrators to manage resources separately with distinct identity and access control. Multiple resource groups within subscriptions also allow logical separation of department resources. Multiple Azure AD directories and multiple regions are not practical segmentation solutions for department-level resource management.
Question 20 Play from 31:34
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Azure Advisor is a personalized cloud consultant that analyzes your Azure resources and configurations, then provides recommendations for optimizing costs, performance, security, and reliability. It specifically identifies unused resources, right-sizing opportunities, and reserved instance recommendations to reduce expenses.
Not this one. Try another answer.
Why B is wrong
Log Analytics is used for monitoring and analyzing logs; it doesn't provide cost recommendations.
Not this one. Try another answer.
Why C is wrong
Azure Service Health tracks service incidents and planned maintenance, not cost optimization.
Not this one. Try another answer.
Why D is wrong
The Azure pricing calculator estimates costs for hypothetical configurations but doesn't analyze existing resources for savings.
Question 21 Play from 33:06
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A web app requires server management and is not a serverless solution.
Not this one. Try another answer.
Why B is wrong
A server image in Azure Marketplace still requires virtual machine management and is not serverless.
Right, C is the answer.
Why C is right
Azure Logic Apps is a serverless computing solution designed specifically for automating workflows and integrating systems, including sending email notifications based on rules. Logic Apps provides a visual workflow designer, built-in email connectors, and rule-based triggering, making it ideal for migrating rule-based email notification applications.
Not this one. Try another answer.
Why D is wrong
An API app is used for building APIs, not for automating email notifications based on rules.
Question 22 Play from 34:44
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Physical server failures are typically handled by Azure's internal redundancy within a data center, not by Availability Zones specifically.
Not this one. Try another answer.
Why B is wrong
Availability Zones protect against data center failures within a region, not region-level failures; for region failures, you need geo-redundancy across regions.
Not this one. Try another answer.
Why C is wrong
Storage failures are handled by storage redundancy options, not by Availability Zones.
Right, D is the answer.
Why D is right
Azure Availability Zones protect against data center failures by distributing resources across physically separate data centers within a region. When you deploy services across multiple Availability Zones, if one data center fails, services running in other zones remain available. This provides protection specifically against isolated data center outages, not broader region failures or individual server issues.
Question 23 Play from 36:32
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Application Gateway is a Layer 7 load balancer for routing HTTP/HTTPS traffic, not for optimizing video delivery.
Not this one. Try another answer.
Why B is wrong
ExpressRoute provides dedicated private connectivity to Azure but doesn't cache or optimize content delivery for global users.
Right, C is the answer.
Why C is right
Azure Content Delivery Network (CDN) is specifically designed to cache and deliver large media files like videos to users worldwide with low latency. CDN edge servers cache content closer to end users, providing the best video playback experience globally.
Not this one. Try another answer.
Why D is wrong
Traffic Manager performs DNS-level routing between endpoints but doesn't cache content or optimize video streaming performance.
Question 24 Play from 38:26
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Azure Advisor provides personalized recommendations including identification of underutilized virtual machines based on usage patterns and configuration. It analyzes resource metrics and offers specific guidance for optimization and cost savings. Cost Management + Billing tracks spending but doesn't specifically identify underutilized resources, reservations are for commitment purchases, and Policy enforces compliance rules.
Not this one. Try another answer.
Why B is wrong
Azure Cost Management shows spending but does not specifically identify underutilized or unused virtual machines.
Not this one. Try another answer.
Why C is wrong
Azure Reservations are for purchasing discounted compute capacity, not for identifying underutilized resources.
Not this one. Try another answer.
Why D is wrong
Azure Policy enforces compliance and governance rules but does not analyze resource utilization patterns.
Question 25 Play from 40:07
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SaaS is pre-built software that may not meet custom web application requirements.
Right, B is the answer.
Why B is right
Platform as a Service (PaaS) minimizes administrative effort for web applications by handling infrastructure management, patches, scaling, and deployment frameworks. The vendor manages the underlying platform, allowing developers to focus on application code rather than server management. This reduces operational overhead compared to IaaS while providing more control than SaaS.
Not this one. Try another answer.
Why C is wrong
IaaS requires significant administrative effort for managing virtual machines, operating systems, and infrastructure.
Not this one. Try another answer.
Why D is wrong
DaaS (Database as a Service) is not a standard cloud model and addresses only database needs, not web application hosting.
Question 26 Play from 41:57
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Event Hubs is designed for high-throughput event streaming rather than general-purpose centralized monitoring.
Not this one. Try another answer.
Why B is wrong
Analysis Services is for analytical processing of data, not collection of events.
Right, C is the answer.
Why C is right
Azure Monitor is the centralized service for collecting events, metrics, logs, and diagnostic data from multiple Azure resources into a unified repository. It provides comprehensive monitoring and diagnostics capabilities. Azure Event Hubs is for high-throughput event streaming but is more specialized for specific streaming scenarios. Azure Analysis Services is for data analysis. Azure Stream Analytics is for real-time stream processing, not centralized event collection.
Not this one. Try another answer.
Why D is wrong
Stream Analytics is for processing streaming data, not for collecting events from resources.
Question 27 Play from 43:41
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Service Tags alone are insufficient; IP addresses and Application Security Groups are also valid sources.
Right, B is the answer.
Why B is right
Network Security Group inbound rules can accept three types of sources: IP addresses (including IP ranges in CIDR notation), Service Tags (predefined identifiers for Azure services), and Application Security Groups (logical groupings of VMs). All three options are valid source specifications for NSG inbound security rules, providing flexibility in defining traffic policies.
Not this one. Try another answer.
Why C is wrong
Application Security Groups alone are insufficient; IP addresses and Service Tags are also valid sources.
Not this one. Try another answer.
Why D is wrong
IP addresses alone are insufficient; Service Tags and Application Security Groups are also valid sources.
Question 28 Play from 45:27
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Service Health monitors Azure service status, not individual VM events.
Not this one. Try another answer.
Why B is wrong
Azure Service Bus is a messaging service, not designed for event collection and analysis.
Right, C is one of the answers.
Why C is right
Azure Monitor collects event and performance data from multiple virtual machines, while Log Analytics provides the querying and analysis capability to compare and correlate event details across all five machines. Together, they form the standard solution for multi-resource event collection and comparative analysis.
Not this one. Try another answer.
Why D is wrong
Azure Advisor provides optimization recommendations, not event data collection or analysis.
Right, E is one of the answers.
Why E is right
Azure Monitor collects event and performance data from multiple virtual machines, while Log Analytics provides the querying and analysis capability to compare and correlate event details across all five machines. Together, they form the standard solution for multi-resource event collection and comparative analysis.
Question 29 Play from 47:15
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Agility refers to rapid deployment and development speed, not continuous availability.
Not this one. Try another answer.
Why B is wrong
Scalability is the ability to handle increased load, not specifically about minimizing downtime.
Not this one. Try another answer.
Why C is wrong
Elasticity allows dynamic resource adjustment but does not inherently provide continuous availability during failures.
Right, D is the answer.
Why D is right
High availability is the cloud computing benefit that ensures continuous user access to cloud-based applications with minimal downtime. It is achieved through redundancy, fault tolerance, and failover mechanisms that keep services running even when failures occur. Agility refers to speed of deployment, scalability to handling increased load, and elasticity to dynamic resource adjustment-none of which directly address minimizing downtime.
Question 30 Play from 48:56
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
High availability ensures systems remain operational but does not directly address adapting to changing requirements.
Not this one. Try another answer.
Why B is wrong
Predictability relates to consistent performance and costs, not the ability to adapt quickly.
Not this one. Try another answer.
Why C is wrong
Manageability is about ease of management but is not the primary driver of adapting to changing requirements.
Right, D is the answer.
Why D is right
Agility is the cloud characteristic that enables rapid adaptation to changing requirements by allowing quick provisioning and scaling of resources. While high availability and manageability are important, agility specifically refers to the speed and flexibility needed to respond to business changes.
Question 31 Play from 50:24
Tap an answer. The reason for that answer shows here.
Right, A is one of the answers.
Why A is right
The volume of outbound data (egress charges apply), the service tier (determines pricing level), and the Azure region (pricing varies by region) are three primary factors that directly affect resource costs. Outbound data transfer incurs charges, different service tiers have different pricing models, and regional pricing varies significantly.
Not this one. Try another answer.
Why B is wrong
Inbound data transfer is typically free in Azure, so inbound volume doesn't affect costs.
Right, C is one of the answers.
Why C is right
The volume of outbound data (egress charges apply), the service tier (determines pricing level), and the Azure region (pricing varies by region) are three primary factors that directly affect resource costs. Outbound data transfer incurs charges, different service tiers have different pricing models, and regional pricing varies significantly.
Right, D is one of the answers.
Why D is right
The volume of outbound data (egress charges apply), the service tier (determines pricing level), and the Azure region (pricing varies by region) are three primary factors that directly affect resource costs. Outbound data transfer incurs charges, different service tiers have different pricing models, and regional pricing varies significantly.
Not this one. Try another answer.
Why E is wrong
The type of processed data is not a standard cost factor; pricing is based on volume, region, and tier rather than data classification.
Question 32 Play from 52:14
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Availability sets protect against planned maintenance and hardware failures within a single datacenter, not datacenter failures.
Not this one. Try another answer.
Why B is wrong
Proximity placement groups optimize network latency between VMs but do not provide datacenter failure protection.
Not this one. Try another answer.
Why C is wrong
Host groups are used to control the physical host placement of VMs and do not protect against datacenter failures.
Right, D is the answer.
Why D is right
Availability zones provide protection against datacenter failures by distributing resources across physically separate datacenters within a region. VMs deployed across multiple availability zones will remain available if one zone fails.
Question 33 Play from 53:51
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Virtual Machines require users to manage and provision virtual infrastructure, which is not serverless.
Right, B is the answer.
Why B is right
Azure Functions is Azure's serverless computing service that allows execution of code without managing infrastructure. Users only pay for compute resources consumed during execution. Virtual Machines require managing the underlying infrastructure, storage accounts are for data storage, and dedicated hosts are for dedicated physical servers.
Not this one. Try another answer.
Why C is wrong
Azure Storage Accounts are for data storage and do not provide serverless computing capabilities.
Not this one. Try another answer.
Why D is wrong
Azure Dedicated Hosts are dedicated physical servers and require infrastructure management, contrary to serverless principles.
Question 34 Play from 55:21
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Premier is more expensive than necessary for the stated requirement.
Not this one. Try another answer.
Why B is wrong
Developer plan does not include architectural reviews.
Right, C is the answer.
Why C is right
Architectural reviews from Microsoft require Professional Direct support plan as the minimum tier that includes this benefit. While Premier would also work, the question asks to minimize costs, making Professional Direct the correct answer. Developer and Standard plans do not include architectural reviews.
Not this one. Try another answer.
Why D is wrong
Standard plan does not include architectural reviews.
Question 35 Play from 56:52
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Agility refers to the ability to quickly provision and deploy resources, not to adding capacity to existing machines.
Right, B is the answer.
Why B is right
Vertical scaling refers to increasing the computing capacity of an existing virtual machine by adding resources such as memory (RAM) or CPUs to a single instance. This is also called 'scaling up' and involves making a single server more powerful.
Not this one. Try another answer.
Why C is wrong
Horizontal scaling involves adding more instances or servers to distribute the load, not upgrading a single machine.
Not this one. Try another answer.
Why D is wrong
Elasticity is the ability to automatically scale resources up or down based on demand, not the specific mechanism of adding CPUs or memory.
Question 36 Play from 58:30
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Fault tolerance is the ability of a system to continue operating and remain available even when one or more components fail. To ensure that servers remain available if a single Azure data center goes offline, the solution must include fault tolerance through mechanisms like redundancy across availability zones or multiple data centers. This guarantees continued service availability despite infrastructure failures.
Not this one. Try another answer.
Why B is wrong
Elasticity refers to scaling resources up or down based on demand, not to maintaining availability during data center outages.
Not this one. Try another answer.
Why C is wrong
Scalability refers to the ability to increase capacity to handle more load, not to maintaining availability during infrastructure failures.
Not this one. Try another answer.
Why D is wrong
Low latency refers to minimizing network delay, not to ensuring availability during data center failures.
Question 37 Play from 1:00:19
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Policy enforces compliance rules but doesn't create or deploy resources.
Not this one. Try another answer.
Why B is wrong
Azure Arc manages hybrid resources but isn't designed for repeatable infrastructure deployment patterns.
Not this one. Try another answer.
Why C is wrong
A resource group is just a logical container for organizing resources, not a deployment mechanism.
Right, D is the answer.
Why D is right
Azure Resource Manager (ARM) templates define infrastructure as code and enable repeatable, reliable, and consistent deployments across multiple resource groups and business units. Templates can be reused and parameterized to apply the same configurations reliably.
Question 38 Play from 1:02:02
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
3 copies represents only LRS in a single region, not the full GRS coverage across regions.
Not this one. Try another answer.
Why B is wrong
4 copies does not match any standard Azure Storage redundancy configuration.
Right, C is the answer.
Why C is right
Geo-redundant storage (GRS) maintains 6 copies of data total: 3 copies in the primary region (via LRS) and 3 copies in a secondary geographically distant region. This provides protection against regional outages while maintaining the local redundancy in each location.
Not this one. Try another answer.
Why D is wrong
9 copies would only be present in geo-redundant storage with read access across multiple regions, which is not standard GRS.
Question 39 Play from 1:03:29
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Analysis Services is a data analytics platform, not a SIEM solution.
Right, B is the answer.
Why B is right
Microsoft Sentinel is Azure's native Security Information and Event Management (SIEM) solution, providing threat detection, investigation, and automated response capabilities. This is functionally identical to Azure Sentinel from Question #222. Azure Analysis Services is for data analytics. Azure Information Protection is for data classification. Azure Cognitive Services provides AI and machine learning capabilities but is not a SIEM solution.
Not this one. Try another answer.
Why C is wrong
Azure Information Protection is for data classification and protection, not for SIEM functionality.
Not this one. Try another answer.
Why D is wrong
Azure Cognitive Services provides AI and ML capabilities, not SIEM functionality.
Question 40 Play from 1:05:14
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Information Protection focuses on data classification and protection, not resource locking.
Right, B is the answer.
Why B is right
Azure Blueprints can automatically reapply and enforce resource configurations, including locks, across subscriptions. If a lock is removed from a resource, Blueprints can detect this and automatically restore the lock as part of its governance and compliance enforcement mechanism.
Not this one. Try another answer.
Why C is wrong
Azure Backup recovers deleted or corrupted data, not resource locks.
Not this one. Try another answer.
Why D is wrong
Azure Advisor provides recommendations but cannot automatically enforce or reapply locks.
Question 41 Play from 1:06:45
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Azure Cloud Shell is started directly from the Azure portal using the Cloud Shell icon in the top navigation bar. The portal provides the integrated interface to launch and interact with Cloud Shell. While Cloud Shell supports both Bash and PowerShell, you must first access it through the Azure portal to begin a session.
Not this one. Try another answer.
Why B is wrong
Azure CLI is a tool used within Cloud Shell, not a way to start it.
Not this one. Try another answer.
Why C is wrong
Azure PowerShell is a tool used within Cloud Shell, not a way to start it.
Not this one. Try another answer.
Why D is wrong
ARM templates are for infrastructure deployment, not for starting Cloud Shell.
Question 42 Play from 1:08:13
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Quickstart templates are deployment tools for creating resources, not for tracking costs.
Right, B is the answer.
Why B is right
Tags are metadata labels applied to resources that allow you to organize, categorize, and track costs by department, project, environment, or other business dimensions. When combined with cost analysis tools, tags enable detailed cost tracking and allocation to specific departments or cost centers.
Not this one. Try another answer.
Why C is wrong
Budgets alert you when spending reaches limits but don't track costs by resource category.
Not this one. Try another answer.
Why D is wrong
Usage and quotas show consumption metrics but don't provide the organizational framework for cost attribution.
Question 43 Play from 1:09:40
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Azure Repos is the Azure service that provides version control tools for managing code. It offers both Git and Team Foundation Version Control (TFVC) repositories, allowing teams to store, manage, and collaborate on source code. It integrates with Azure DevOps and provides features like pull requests, branch policies, and code review capabilities.
Not this one. Try another answer.
Why B is wrong
Azure DevTest Labs is for creating and managing test environments, not for version control of code.
Not this one. Try another answer.
Why C is wrong
Azure Storage is for storing blobs, files, queues, and tables, not for version control management.
Not this one. Try another answer.
Why D is wrong
Azure Cosmos DB is a globally distributed NoSQL database service, not a version control system.
Question 44 Play from 1:11:14
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
An Azure virtual machine requires a virtual network to communicate and connect to other resources. The virtual network is a fundamental networking component that must be created or selected when deploying a VM; it cannot function without one.
Not this one. Try another answer.
Why B is wrong
Service endpoints are optional features for specific use cases and not required for all VMs.
Not this one. Try another answer.
Why C is wrong
Azure Firewall is optional; network security groups provide firewall functionality by default.
Not this one. Try another answer.
Why D is wrong
A public IP address is optional; VMs can function with only private IP addresses in many scenarios.
Question 45 Play from 1:12:40
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Tags are metadata labels used for organization and billing, not for granting permissions.
Right, B is the answer.
Why B is right
Role-based access control (RBAC) roles are the mechanism used to grant permissions to Azure Virtual Desktop resources. RBAC allows administrators to assign specific roles with defined permissions for managing and accessing AVD resources.
Not this one. Try another answer.
Why C is wrong
Resource groups are containers for organizing resources but do not directly grant permissions to specific resources.
Not this one. Try another answer.
Why D is wrong
Application security groups are used for network filtering and do not manage permissions to AVD resources.
Question 46 Play from 1:14:17
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
One year is a shorter option, not the longest available.
Not this one. Try another answer.
Why B is wrong
Five years is not a valid purchase term for Azure Reserved VM Instances.
Not this one. Try another answer.
Why C is wrong
Four years is not a valid purchase term for Azure Reserved VM Instances.
Right, D is the answer.
Why D is right
Azure Reserved VM Instances can be purchased with commitment terms of either one year or three years. The three-year term represents the longest commitment period available for Reserved VM Instances, offering greater discounts than one-year terms in exchange for longer commitment.
Question 47 Play from 1:15:35
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Government is not available to Canadian government contractors; it is restricted to U.S. entities.
Not this one. Try another answer.
Why B is wrong
Azure Government is not available to European government contractors; it serves only U.S. government customers.
Right, C is one of the answers.
Why C is right
Azure Government is available to United States government entities and United States government contractors. The service is designed specifically for U.S. federal, state, and local government agencies, and qualified contractors working with them. It is not available to Canadian or European government entities or contractors, as it is a U.S.-focused government cloud offering.
Right, D is one of the answers.
Why D is right
Azure Government is available to United States government entities and United States government contractors. The service is designed specifically for U.S. federal, state, and local government agencies, and qualified contractors working with them. It is not available to Canadian or European government entities or contractors, as it is a U.S.-focused government cloud offering.
Not this one. Try another answer.
Why E is wrong
Azure Government is not available to European government entities; it is exclusively for U.S. government use.
Question 48 Play from 1:17:30
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Deallocating VMs reduces compute costs but does not address SQL Server licensing.
Right, B is the answer.
Why B is right
Azure Hybrid Benefit allows you to use existing Software Assurance-covered SQL Server licenses on Azure virtual machines, significantly reducing licensing costs. This directly applies to the stated scenario and is the most cost-effective solution.
Not this one. Try another answer.
Why C is wrong
Cost Management budgets help track spending but do not reduce SQL Server licensing costs.
Not this one. Try another answer.
Why D is wrong
Reservations help with compute costs but do not apply to licensing savings from Software Assurance.
Question 49 Play from 1:19:08
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Service Health tracks service availability and incidents, not regulatory compliance evaluation.
Not this one. Try another answer.
Why B is wrong
Azure Knowledge Center is a documentation and learning resource, not a compliance assessment tool.
Right, C is the answer.
Why C is right
Azure Security Center (now Microsoft Defender for Cloud) provides compliance assessments and recommendations to help evaluate whether your Azure environment meets regulatory requirements such as HIPAA, PCI-DSS, and ISO standards. It offers compliance scores and tracks your compliance posture. Azure Service Health shows service status, Azure Knowledge Center is a documentation resource, and Azure Advisor provides performance and cost optimization recommendations-none specifically assess regulatory compliance.
Not this one. Try another answer.
Why D is wrong
Azure Advisor provides recommendations for performance, cost, and reliability, not regulatory compliance assessment.
Question 50 Play from 1:20:54
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Dev/Test subscriptions are not required for Cost Management access.
Not this one. Try another answer.
Why B is wrong
Software Assurance is not a requirement for Cost Management.
Not this one. Try another answer.
Why C is wrong
While EA accounts can use Cost Management, it is not the only option or minimum requirement.
Right, D is the answer.
Why D is right
Azure Cost Management is available to users with pay-as-you-go subscriptions, along with several other subscription types. It reflects the actual requirements, since Cost Management is broadly available and not restricted to Enterprise Agreements.
Question 51 Play from 1:22:16
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Resource cost analysis is a feature of Azure Cost Management, not Virtual Networks.
Not this one. Try another answer.
Why B is wrong
Packet inspection is a function of firewalls and security appliances, not a primary feature of virtual networks themselves.
Not this one. Try another answer.
Why C is wrong
Geo-redundancy is a feature of Azure Storage and database services, not Virtual Networks.
Right, D is the answer.
Why D is right
Isolation and segmentation is a core feature of Azure Virtual Networks. They allow you to create isolated network environments, segment traffic using subnets and network security groups, and control communication between resources, providing security and organizational boundaries.
Question 52 Play from 1:23:46
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Storage configuration is the customer's responsibility in IaaS; the provider only maintains the physical hardware.
Not this one. Try another answer.
Why B is wrong
Operating system installation and configuration is entirely the customer's responsibility in IaaS.
Right, C is one of the answers.
Why C is right
In the IaaS model, the cloud provider is responsible for managing the physical infrastructure and datacenter operations. This includes maintaining the hardware (servers, networking equipment, storage devices) and ensuring physical security of the datacenter (access controls, surveillance, environmental controls). The customer is responsible for the operating system, storage configuration, and network configuration within their virtual environment.
Not this one. Try another answer.
Why D is wrong
Network configuration of virtual networks and resources is the customer's responsibility in IaaS.
Right, E is one of the answers.
Why E is right
In the IaaS model, the cloud provider is responsible for managing the physical infrastructure and datacenter operations. This includes maintaining the hardware (servers, networking equipment, storage devices) and ensuring physical security of the datacenter (access controls, surveillance, environmental controls). The customer is responsible for the operating system, storage configuration, and network configuration within their virtual environment.
Question 53 Play from 1:25:47
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Locks prevent all modifications to a resource group, not selective resource creation.
Not this one. Try another answer.
Why B is wrong
Azure roles control access permissions but cannot selectively block specific resource types from being created.
Not this one. Try another answer.
Why C is wrong
Tags are metadata labels for organization and billing, not enforcement mechanisms.
Right, D is the answer.
Why D is right
Azure Policy allows you to create specific rules that prevent certain resource types (like virtual machines) from being created while permitting other resources. You can create a policy that denies VM creation at the RG1 scope while allowing other resources to be created freely.
Question 54 Play from 1:27:23
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Adaptive network hardening in Azure Security Center automatically hardens network configurations but is not specifically designed for Azure Sentinel threat response automation.
Not this one. Try another answer.
Why B is wrong
Azure Service Health provides service status and incident information, not threat response automation.
Right, C is the answer.
Why C is right
Of the options listed, only Azure Monitor workbooks is part of Azure Sentinel: Sentinel is built on Azure Monitor and uses its workbooks and Log Analytics workspace. The other three are Azure Security Center or Service Health features that do not act on Sentinel detections. Inside Sentinel, the automated responses themselves are built as playbooks, which run on Azure Logic Apps.
Not this one. Try another answer.
Why D is wrong
Adaptive application controls in Azure Security Center manage application whitelisting, not automated threat responses from Azure Sentinel.
Question 55 Play from 1:29:15
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Blob Storage can store monitoring data exports but is not where Azure Monitor natively stores event data.
Not this one. Try another answer.
Why B is wrong
Azure Storage Queue is for message queuing, not monitoring data storage.
Not this one. Try another answer.
Why C is wrong
Azure SQL Database could store monitoring data via integration but is not the native storage for Azure Monitor.
Right, D is the answer.
Why D is right
Azure Monitor stores event and metric data in Log Analytics workspaces. Log Analytics is the central repository for all monitoring data collected by Azure Monitor, where it can be queried using KQL (Kusto Query Language) and used for analysis, alerts, and dashboards.
Question 56 Play from 1:30:44
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Reserved VM Instances are for cost optimization of long-running VMs, not for frequent temporary deployments.
Right, B is the answer.
Why B is right
Azure DevTest Labs is specifically designed for rapid provisioning and deprovisioning of development and test environments using templates, making it ideal for scenarios where 50 VMs are deployed and removed weekly with minimal administrative overhead.
Not this one. Try another answer.
Why C is wrong
Virtual machine scale sets are for auto-scaling production workloads, not for managing temporary development/test environments.
Not this one. Try another answer.
Why D is wrong
Azure Virtual Desktop is for hosting user desktops and applications, not for managing temporary development infrastructure.
Question 57 Play from 1:32:36
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
High availability ensures uptime but does not specifically address cost management for variable usage patterns.
Not this one. Try another answer.
Why B is wrong
High latency is a performance problem, not a cost management benefit.
Right, C is the answer.
Why C is right
Elasticity is the cloud's ability to automatically scale resources up or down based on demand. For an application with low usage during the first three weeks and high usage in the final week, elasticity allows automatic provisioning of additional resources during peak periods and scaling down during low-usage periods, directly optimizing costs by matching resource allocation to actual demand.
Not this one. Try another answer.
Why D is wrong
Load balancing distributes traffic across resources but does not automatically scale resources based on demand to manage costs.
Question 58 Play from 1:34:27
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Advisor provides recommendations for optimization but doesn't generate alerts for specific resource state changes.
Not this one. Try another answer.
Why B is wrong
Azure Service Health monitors Azure service availability and incidents, not individual resource state changes.
Right, C is the answer.
Why C is right
Azure Monitor is the comprehensive monitoring service that can track resource state changes and automatically send alerts based on configured conditions, such as when a virtual machine is stopped by an administrator.
Not this one. Try another answer.
Why D is wrong
Azure Network Watcher monitors and diagnoses network issues, not virtual machine power states.
Question 59 Play from 1:35:54
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure status shows service health across regions but is not integrated as a feature within Azure Monitor.
Right, B is one of the answers.
Why B is right
Application Insights and Log Analytics are both core services that integrate with and feed into Azure Monitor. Application Insights collects application telemetry while Log Analytics stores and queries monitoring data-both are native integrations with Azure Monitor for comprehensive observability.
Not this one. Try another answer.
Why C is wrong
Azure Advisor provides recommendations but is not integrated as a monitoring feature within Azure Monitor.
Right, D is one of the answers.
Why D is right
Application Insights and Log Analytics are both core services that integrate with and feed into Azure Monitor. Application Insights collects application telemetry while Log Analytics stores and queries monitoring data-both are native integrations with Azure Monitor for comprehensive observability.
Not this one. Try another answer.
Why E is wrong
Azure Service Health monitors subscription-level health but operates separately from Azure Monitor integration.
Question 60 Play from 1:37:32
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Conditional access policies evaluate device compliance (including security patch status) before granting access to Azure AD-integrated applications. You can create a policy requiring that devices meet compliance requirements with the latest security patches installed before allowing sign-in.
Not this one. Try another answer.
Why B is wrong
Azure Bastion provides secure RDP/SSH access to virtual machines, not device compliance validation.
Not this one. Try another answer.
Why C is wrong
Azure Firewall is a network security service, not a device compliance enforcement mechanism.
Not this one. Try another answer.
Why D is wrong
Azure Policy manages resource governance and compliance, not user device compliance for application access.
Question 61 Play from 1:39:17
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Two copies is the minimum for basic redundancy but insufficient for GZRS protection.
Not this one. Try another answer.
Why B is wrong
Three copies represents only the primary region copies without geographic redundancy.
Right, C is the answer.
Why C is right
Geo-zone-redundant storage (GZRS) maintains 6 data copies total: 3 copies within the primary region across different availability zones for zone redundancy, and 3 additional copies replicated to a secondary geographic region for disaster recovery. This provides both high availability and geographic resilience.
Not this one. Try another answer.
Why D is wrong
Twelve copies exceeds the GZRS specification of 6 total copies.
Question 62 Play from 1:40:42
Tap an answer. The reason for that answer shows here.
Right, A is one of the answers.
Why A is right
Bash in Cloud Shell, PowerShell in Cloud Shell, and the Azure portal all provide browser-based access and can be used from an Android tablet to create virtual machines. Cloud Shell uses Bash or PowerShell in a browser, and the Azure portal is a complete graphical management interface.
Right, B is one of the answers.
Why B is right
Bash in Cloud Shell, PowerShell in Cloud Shell, and the Azure portal all provide browser-based access and can be used from an Android tablet to create virtual machines. Cloud Shell uses Bash or PowerShell in a browser, and the Azure portal is a complete graphical management interface.
Not this one. Try another answer.
Why C is wrong
PowerApps portal is for building and running business applications, not for creating Azure virtual machines.
Not this one. Try another answer.
Why D is wrong
The Security & Compliance admin center is for Microsoft 365 security settings, not for Azure resource management.
Right, E is one of the answers.
Why E is right
Bash in Cloud Shell, PowerShell in Cloud Shell, and the Azure portal all provide browser-based access and can be used from an Android tablet to create virtual machines. Cloud Shell uses Bash or PowerShell in a browser, and the Azure portal is a complete graphical management interface.
Question 63 Play from 1:42:30
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
The statement is correct as written. Azure SQL Data Warehouse (now Azure Synapse Analytics) includes built-in high availability features such as geo-redundant backups and automatic failover capabilities, making high availability an inherent platform benefit.
Not this one. Try another answer.
Why B is wrong
Automatic scaling is a feature but is not the primary benefit being referenced in the statement.
Not this one. Try another answer.
Why C is wrong
Data compression is a storage optimization feature, not a high availability benefit.
Not this one. Try another answer.
Why D is wrong
Versioning is not a standard benefit of Azure SQL Data Warehouse.
Question 64 Play from 1:44:12
Tap an answer. The reason for that answer shows here.
Right, A is one of the answers.
Why A is right
For 20 TB of infrequently accessed data that will be visualized with Power BI, both Azure Data Lake (A) and Azure SQL Data Warehouse (C) are appropriate. Data Lake provides scalable storage for big data analytics, and SQL Data Warehouse is designed for large-scale data analytics and Power BI integration. Both support Power BI visualization and handle large data volumes efficiently.
Not this one. Try another answer.
Why B is wrong
Azure Cosmos DB is optimized for operational transactional workloads, not for large-scale infrequent data access and analytics.
Right, C is one of the answers.
Why C is right
For 20 TB of infrequently accessed data that will be visualized with Power BI, both Azure Data Lake (A) and Azure SQL Data Warehouse (C) are appropriate. Data Lake provides scalable storage for big data analytics, and SQL Data Warehouse is designed for large-scale data analytics and Power BI integration. Both support Power BI visualization and handle large data volumes efficiently.
Not this one. Try another answer.
Why D is wrong
Azure SQL Database is designed for transactional workloads, not for 20 TB analytics scenarios with Power BI.
Not this one. Try another answer.
Why E is wrong
Azure Database for PostgreSQL is a relational database service suited for transactional applications, not large-scale analytics storage.
Question 65 Play from 1:46:15
Tap an answer. The reason for that answer shows here.
Right, A is one of the answers.
Why A is right
Cloud computing enables rapid provisioning of resources because infrastructure is already available and can be deployed quickly without physical hardware procurement. It also shifts capital expenditures (CAPEX) to operating expenditures (OPEX), meaning organizations pay for usage rather than investing in expensive hardware purchases upfront.
Not this one. Try another answer.
Why B is wrong
Cloud computing actually reduces administrative complexity by offloading management tasks to the cloud provider, not increasing it.
Not this one. Try another answer.
Why C is wrong
Cloud computing provides more flexible and diverse configuration options than typical on-premises environments, not the same options.
Right, D is one of the answers.
Why D is right
Cloud computing enables rapid provisioning of resources because infrastructure is already available and can be deployed quickly without physical hardware procurement. It also shifts capital expenditures (CAPEX) to operating expenditures (OPEX), meaning organizations pay for usage rather than investing in expensive hardware purchases upfront.
Question 66 Play from 1:48:08
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
An Azure subscription is the foundational requirement and must be created first before any other Azure resources can be deployed. A subscription is the billing and access control boundary for all Azure resources. Resource groups are created within subscriptions, virtual networks are created within resource groups, and management groups organize subscriptions, so all come after the subscription is established.
Not this one. Try another answer.
Why B is wrong
Resource groups are created within a subscription and cannot exist without one.
Not this one. Try another answer.
Why C is wrong
Virtual networks are created within resource groups, which require a subscription first.
Not this one. Try another answer.
Why D is wrong
Management groups organize subscriptions but a subscription must exist to be managed.
Question 67 Play from 1:49:43
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A ReadOnly lock would prevent container creation, which violates the requirement.
Right, B is the answer.
Why B is right
A delete lock (CanNotDelete) prevents deletion of a resource while still allowing modifications and creation of new resources. This meets the requirement perfectly-containers can be created but not deleted. A ReadOnly lock would prevent all modifications including creation. Soft delete options recover deleted items but don't prevent deletion in the first place.
Not this one. Try another answer.
Why C is wrong
Container soft delete allows containers to be deleted; it only enables recovery within a retention period.
Not this one. Try another answer.
Why D is wrong
Blob soft delete applies to individual blobs, not containers, and still permits deletion.
Question 68 Play from 1:51:24
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Tags are key-value metadata applied to Azure resources that enable organization, billing tracking, and reporting by business dimensions like office location, department, or cost center. By tagging resources from each office, you can generate billing reports filtered by office, making tags the ideal feature for organizing resources by office for reporting purposes.
Not this one. Try another answer.
Why B is wrong
Templates are used to deploy resources, not to organize existing resources for reporting.
Not this one. Try another answer.
Why C is wrong
Locks prevent accidental deletion or modification but do not help organize resources for reporting.
Not this one. Try another answer.
Why D is wrong
Policies enforce compliance rules but are not used to organize resources for reporting purposes.
Question 69 Play from 1:53:04
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Monitor is for collecting and analyzing telemetry data, not for security scoring.
Not this one. Try another answer.
Why B is wrong
Azure Advisor provides general optimization recommendations but not security scoring.
Not this one. Try another answer.
Why C is wrong
Help + support is for getting customer support, not for reviewing security metrics.
Right, D is the answer.
Why D is right
Microsoft Defender for Cloud is the Azure service that provides secure score functionality, which helps you understand your security posture and recommendations to improve it. It displays a numerical representation of your security health across your Azure resources.
Question 70 Play from 1:54:29
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Desktop applications interact with Azure through APIs, either directly via REST APIs or through Azure SDKs that wrap those APIs. This allows programmatic resource management and interaction from any desktop platform. ARM templates and CLI are infrastructure-as-code tools for declarative deployment, while Cloud Shell is a browser-based tool.
Not this one. Try another answer.
Why B is wrong
ARM templates are declarative infrastructure-as-code files, not what applications use for runtime interaction.
Not this one. Try another answer.
Why C is wrong
Azure CLI is a command-line tool primarily for human operators, not the standard integration method for desktop applications.
Not this one. Try another answer.
Why D is wrong
Azure Cloud Shell is a browser-based interactive shell, not a mechanism for desktop applications to interact with Azure.
Question 71 Play from 1:56:08
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A read-only lock prevents modifications but does not enforce policy requirements.
Right, B is the answer.
Why B is right
An Azure policy is the resource specifically designed to meet policy requirements across resources in multiple regions. Azure policies allow you to define and enforce standards, such as naming conventions, allowed resource types, and compliance requirements, that apply consistently across your Azure subscription.
Not this one. Try another answer.
Why C is wrong
A management group is used for organizing subscriptions and applying policies at scale, but the direct answer for meeting policy requirements is the policy itself.
Not this one. Try another answer.
Why D is wrong
A reservation is for purchasing compute capacity at a discount, unrelated to policy requirements.
Question 72 Play from 1:57:42
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Locally-redundant storage (LRS) maintains 3 copies of data within a single data center. These copies are distributed across different fault domains and update domains to protect against hardware failures within that single location.
Not this one. Try another answer.
Why B is wrong
4 copies is not the standard for LRS; this would be more typical of other redundancy options.
Not this one. Try another answer.
Why C is wrong
6 copies represents geo-redundant storage with read access (RA-GRS), not LRS.
Not this one. Try another answer.
Why D is wrong
9 copies is not used in Azure Storage redundancy models.
Question 73 Play from 1:59:00
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
An Azure web app is a Platform as a Service (PaaS) offering where the platform handles infrastructure and OS management.
Right, B is the answer.
Why B is right
An Azure virtual machine is a classic example of Infrastructure as a Service (IaaS). IaaS provides virtualized computing resources over the internet where customers manage the OS, applications, and data while the cloud provider manages the infrastructure.
Not this one. Try another answer.
Why C is wrong
An Azure logic app is a Platform as a Service (PaaS) offering for workflow automation.
Not this one. Try another answer.
Why D is wrong
An Azure SQL database is a Platform as a Service (PaaS) offering where the service manages database infrastructure and maintenance.
Question 74 Play from 2:00:35
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Migrate is used to assess and migrate workloads to Azure, not to manage non-Azure resources in ARM.
Not this one. Try another answer.
Why B is wrong
Azure AD Connect synchronizes on-premises identities with Azure AD but doesn't manage non-Azure resources in ARM.
Right, C is the answer.
Why C is right
Azure Arc extends Azure Resource Manager capabilities to manage resources outside of Azure, including on-premises servers, multi-cloud environments, and edge devices. It provides a unified way to project and manage non-Azure resources as if they were Azure resources.
Not this one. Try another answer.
Why D is wrong
Azure Front Door is a content delivery and load balancing service, not a resource management solution.
Question 75 Play from 2:02:09
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Dedicated hardware is a private cloud characteristic, not public cloud.
Not this one. Try another answer.
Why B is wrong
Unsecured connections are not a characteristic of public clouds; security depends on implementation.
Not this one. Try another answer.
Why C is wrong
Public clouds typically offer virtually unlimited scalable storage, not limited storage.
Right, D is one of the answers.
Why D is right
Public clouds are characterized by metered pricing, where customers pay only for resources consumed, and self-service management, allowing users to provision and manage resources independently without vendor intervention. Dedicated hardware is a private cloud characteristic, unsecured connections are not inherent to public clouds (security depends on implementation), and storage limitations are not a defining feature of public clouds.
Right, E is one of the answers.
Why E is right
Public clouds are characterized by metered pricing, where customers pay only for resources consumed, and self-service management, allowing users to provision and manage resources independently without vendor intervention. Dedicated hardware is a private cloud characteristic, unsecured connections are not inherent to public clouds (security depends on implementation), and storage limitations are not a defining feature of public clouds.
Question 76 Play from 2:03:52
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Standard, Developer, and Basic plans also allow support requests to be opened.
Not this one. Try another answer.
Why B is wrong
Developer and Basic plans also allow support requests to be opened.
Not this one. Try another answer.
Why C is wrong
The Basic plan also allows support requests to be opened.
Right, D is the answer.
Why D is right
All Azure support plans, including Premier, Professional Direct, Standard, Developer, and Basic, allow customers to open new support requests. Even the Basic plan, which is free, permits opening support requests, though with limitations on response times and support channels. There are no restrictions that limit support request creation to only certain premium plans.
Question 77 Play from 2:05:36
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Azure Sentinel is Microsoft's cloud-native SIEM (Security Information and Event Management) solution that collects, detects, investigates, and responds to security events across Azure AD and other sources. It automatically analyzes security events and provides threat intelligence. Azure Synapse Analytics is for data warehousing, Azure AD Connect synchronizes on-premises identity data, and Key Vault manages secrets-none are designed for security event analysis.
Not this one. Try another answer.
Why B is wrong
Azure Synapse Analytics is a data warehousing platform, not a security event analysis tool.
Not this one. Try another answer.
Why C is wrong
Azure AD Connect synchronizes on-premises and cloud identities, not for analyzing security events.
Not this one. Try another answer.
Why D is wrong
Azure Key Vault manages cryptographic keys and secrets, not security event analysis.
Question 78 Play from 2:07:20
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Physical server failures are addressed at a level below zones through built-in redundancy.
Not this one. Try another answer.
Why B is wrong
Region failures are beyond the scope of Availability Zones, which operate within a single region.
Not this one. Try another answer.
Why C is wrong
Storage failures are typically addressed through storage replication, not Availability Zones.
Right, D is the answer.
Why D is right
An Azure Availability Zone can protect against an Azure data center failure, which is the most severe failure it addresses. Availability Zones are three or more physically separate data centers within a single region. Physical server failures (A) are addressed by other mechanisms like redundancy. Storage failures (C) are handled by replication. Region failures (B) cannot be protected by zones since they are within a single region; region-level protection requires multi-region deployment.
Question 79 Play from 2:09:08
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Azure Service Level Agreements guarantee uptime for virtual machines. Azure typically guarantees 99.9% uptime for VMs with premium storage or 99.95% for VMs across availability zones. Uptime is the measurable, contractual commitment that Azure provides in its SLAs.
Not this one. Try another answer.
Why B is wrong
Feature availability is not guaranteed in SLAs; features may change or be modified.
Not this one. Try another answer.
Why C is wrong
Bandwidth is not specified in VM SLAs as a guaranteed metric.
Not this one. Try another answer.
Why D is wrong
Performance metrics are not directly guaranteed in SLAs; uptime is the primary guarantee.
Question 80 Play from 2:10:32
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Azure services in public preview do not have a standard SLA guarantee. Instead, each service that is in public preview defines its own specific Service Level Agreement terms, which may vary significantly from service to service. Some preview services may have no SLA at all, while others might define specific terms. This is why each service must be evaluated individually rather than applying a uniform SLA percentage.
Not this one. Try another answer.
Why B is wrong
A fixed 99% SLA is not applied universally to public preview services.
Not this one. Try another answer.
Why C is wrong
There is no standard formula of reducing GA SLA by 1% for preview services.
Not this one. Try another answer.
Why D is wrong
A fixed 99.95% SLA is not guaranteed for public preview services.
Question 81 Play from 2:12:19
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Mainstream support duration varies by service and is not fixed at five years.
Right, B is the answer.
Why B is right
The Modern Lifecycle Policy guarantees that Microsoft will provide a minimum of 12 months' notice before ending support for an Azure service. This is a key component of the policy that ensures customers have adequate time to plan migrations.
Not this one. Try another answer.
Why C is wrong
While there is a minimum support period, four years is not the accurate guaranteed minimum for all services.
Not this one. Try another answer.
Why D is wrong
Extended support cannot typically be purchased as an option for retired Azure services.
Question 82 Play from 2:14:07
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Service Fabric is for building and managing microservices applications, not for monitoring service health notifications.
Right, B is the answer.
Why B is right
Azure Monitor is the correct service to use for viewing service failure notifications and service health alerts that can affect VM availability. It provides comprehensive health monitoring, alerts, and notifications about platform-level issues and service disruptions. Azure Monitor displays Azure Service Health, which specifically tracks service failures and maintenance events that could impact your resources.
Not this one. Try another answer.
Why C is wrong
The Azure virtual machines blade manages VM instances but does not provide service-wide failure notifications.
Not this one. Try another answer.
Why D is wrong
Azure Advisor provides recommendations for optimization and best practices, not real-time service failure notifications.
Question 83 Play from 2:16:04
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Azure Resource Manager (ARM) templates enable infrastructure-as-code, allowing automated creation and deployment of identical sets of resources. Templates can be reused across multiple business units to consistently provision the same 20 resources. Virtual machine scale sets manage VM instances rather than diverse resource types, API Management is for API governance, and management groups organize subscriptions.
Not this one. Try another answer.
Why B is wrong
Virtual machine scale sets are specifically for managing multiple identical VMs, not for provisioning diverse resource types needed across business units.
Not this one. Try another answer.
Why C is wrong
Azure API Management is for managing APIs and integration, not for automating the creation of general Azure resources.
Not this one. Try another answer.
Why D is wrong
Management groups organize subscriptions hierarchically but do not automate resource creation or deployment.
Question 84 Play from 2:18:06
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Monitor alerts are for triggering notifications based on threshold conditions, not for measuring page load times.
Right, B is the answer.
Why B is right
Application Insights in Azure Monitor specifically tracks client-side browser performance metrics including page load times, client-side exceptions, and AJAX dependencies. It uses JavaScript instrumentation to measure actual user experience and browser rendering times, which is exactly what the question asks for.
Not this one. Try another answer.
Why C is wrong
Log Analytics is a query engine for log data but doesn't specifically track browser page load performance metrics.
Not this one. Try another answer.
Why D is wrong
Azure Network Watcher monitors network connectivity and traffic patterns, not browser-side page rendering times.
Question 85 Play from 2:19:50
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Storage accounts are for data storage, not token issuance.
Right, B is the answer.
Why B is right
Applications connect to Azure Active Directory (Azure AD) to retrieve security tokens for authentication and authorization. Azure AD acts as the identity provider and issues tokens that applications use to authenticate users and validate their identities.
Not this one. Try another answer.
Why C is wrong
Certificate stores hold certificates locally but are not the central source for security tokens in Azure cloud scenarios.
Not this one. Try another answer.
Why D is wrong
Azure Key Vault stores secrets and keys but is not the primary service for retrieving authentication tokens; that is Azure AD's role.
Question 86 Play from 2:21:19
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Reservations are for prepaying for resources, not for managing department payment methods.
Right, B is the answer.
Why B is right
Each Azure subscription has its own billing and payment method. Creating separate subscriptions for each department allows them to use different payment options independently while maintaining separate cost tracking and billing.
Not this one. Try another answer.
Why C is wrong
Resource groups share the same subscription and billing method.
Not this one. Try another answer.
Why D is wrong
Container instances are compute resources, not billing entities.
Question 87 Play from 2:22:46
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
support.microsoft.com is not the correct location for creating Azure support requests.
Right, B is the answer.
Why B is right
Azure support requests are created through the Azure portal, not through support.microsoft.com. The Azure portal provides the official interface for managing support requests, accessing support history, and managing your Azure subscription. While support.microsoft.com exists for general support information, the actual request creation happens in the portal.
Not this one. Try another answer.
Why C is wrong
The Knowledge Center is for finding information, not creating support requests.
Not this one. Try another answer.
Why D is wrong
The Security & Compliance admin center is unrelated to Azure support request creation.
Question 88 Play from 2:24:35
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Resource Manager is an Azure service framework, not a means to access Cloud Shell.
Not this one. Try another answer.
Why B is wrong
While Visual Studio can integrate with Azure, it's not the primary method for accessing Cloud Shell.
Not this one. Try another answer.
Why C is wrong
Windows command prompt cannot directly access Cloud Shell; a browser is required.
Right, D is the answer.
Why D is right
Azure Cloud Shell is a browser-based shell accessible directly through the Azure Portal or any standard web browser. Users navigate to portal.azure.com and access Cloud Shell without installing additional software. It's designed for cloud-native access without requiring local tools.
Question 89 Play from 2:25:59
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
The Knowledge Center provides general Azure documentation but not detailed regional compliance information.
Not this one. Try another answer.
Why B is wrong
Azure Marketplace is for purchasing third-party solutions and services, not for reviewing regional compliance.
Not this one. Try another answer.
Why C is wrong
The MyApps portal is for accessing assigned cloud applications, unrelated to regional compliance verification.
Right, D is the answer.
Why D is right
The Trust Center is the appropriate resource for identifying whether Azure complies with regional requirements and data residency standards. It provides detailed information about Microsoft's compliance certifications, data residency options, regional availability, and how Azure meets various regulatory requirements by region.
Question 90 Play from 2:27:42
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure AD Connect Health monitors the health of on-premises AD infrastructure, not user sign-in risk detection.
Not this one. Try another answer.
Why B is wrong
Privileged Identity Management manages access to privileged roles, not general user authentication risks.
Not this one. Try another answer.
Why C is wrong
Advanced Threat Protection focuses on threat detection in the hybrid environment but is not the primary service for anonymous IP sign-in remediation.
Right, D is the answer.
Why D is right
Azure AD Identity Protection is the service designed to detect risky sign-ins (such as those from anonymous IP addresses) and automatically prompt users to change their passwords or complete additional verification. It uses machine learning to identify risk events and enforce remediation policies.
Question 91 Play from 2:29:36
• 20 user accounts in Azure Active Directory (Azure AD)
• Five groups in Azure AD
• 10 public IP addresses
• 10 network interfaces You need to reduce the Azure costs for the company. Which unused resources should you remove?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Network interfaces are necessary for virtual machine connectivity and should not be removed.
Right, B is the answer.
Why B is right
Unused public IP addresses incur charges even when not associated with resources. Removing them directly reduces Azure costs. User accounts and groups in Azure AD are typically free, and network interfaces attached to resources are necessary for operation.
Not this one. Try another answer.
Why C is wrong
Azure AD groups do not typically incur direct costs.
Not this one. Try another answer.
Why D is wrong
Azure AD user accounts do not typically incur direct costs.
Question 92 Play from 2:31:17
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
NSGs filter traffic but don't prevent routing through the internet; they work at a different layer of network control.
Not this one. Try another answer.
Why B is wrong
Public endpoints expose storage to the internet, which is the opposite of what's needed.
Not this one. Try another answer.
Why C is wrong
VPN Gateway encrypts traffic but doesn't prevent it from routing via the internet.
Right, D is the answer.
Why D is right
Service endpoints enable you to secure Azure service resources to only your virtual network, preventing internet routing. When you configure a service endpoint for Azure Storage, traffic from your VNet to the storage account stays within the Azure backbone network rather than routing through the internet. This is the specific mechanism designed for this security requirement.
Question 93 Play from 2:32:55
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Vertical scaling involves adding more resources (CPU, RAM, etc.) to an existing machine to increase its capacity. Adding a CPU to an existing Azure VM is a classic example of making a single resource more powerful rather than adding more resources.
Not this one. Try another answer.
Why B is wrong
Adding another VM is horizontal scaling, not vertical scaling.
Not this one. Try another answer.
Why C is wrong
Adding another Virtual Desktop session host is horizontal scaling, adding more instances rather than upgrading a single instance.
Not this one. Try another answer.
Why D is wrong
Adding an additional App Service instance automatically is horizontal scaling through auto-scale functionality.
Question 94 Play from 2:34:32
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Complete migration to public cloud eliminates capital expenditure but increases operational costs and may not be necessary.
Not this one. Try another answer.
Why B is wrong
Building an additional data center requires significant capital expenditure and ongoing operational costs.
Not this one. Try another answer.
Why C is wrong
A private cloud requires substantial capital investment in infrastructure and specialized staff for management.
Right, D is the answer.
Why D is right
A hybrid cloud combines on-premises infrastructure with public cloud resources, minimizing both capital and operational expenditure. It allows the company to keep existing on-premises servers while extending capacity with public cloud resources as needed, avoiding the high costs of building a new data center or complete migration, while managing costs more efficiently than a private cloud.
Question 95 Play from 2:36:19
• Secures websites from attacks
• Generates reports that contain details of attempted attacks What should you include in the solution?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Azure Firewall filters traffic but is not primarily designed for DDoS attack protection and reporting.
Not this one. Try another answer.
Why B is wrong
Network security groups filter traffic at the network level but do not provide DDoS-specific protection or detailed attack reports.
Not this one. Try another answer.
Why C is wrong
Azure Information Protection is for data classification and protection, not for website attack defense.
Right, D is the answer.
Why D is right
DDoS protection secures websites from Distributed Denial of Service attacks and generates detailed reports of attempted attacks. It provides both protection against volumetric, protocol, and application-layer attacks, along with comprehensive attack analytics.
Question 96 Play from 2:38:02
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Azure Firewall provides centralized network traffic filtering and protection across multiple Azure subscriptions and virtual networks. It operates at the network layer and can be deployed as a managed service to protect traffic across subscriptions. Network Security Groups work at individual subnet/NIC level and are subscription-specific. Application Security Groups organize resources for rule management but don't filter across subscriptions. Azure DDoS protection focuses on DDoS mitigation, not general traffic filtering.
Not this one. Try another answer.
Why B is wrong
Application Security Groups are used to group resources for simplified rule management within a subscription, not for cross-subscription filtering.
Not this one. Try another answer.
Why C is wrong
Azure DDoS protection specifically protects against DDoS attacks, not for general network traffic filtering across subscriptions.
Not this one. Try another answer.
Why D is wrong
Network Security Groups operate at the individual subnet and NIC level and are scoped to a single subscription.
Question 97 Play from 2:39:56
Tap an answer. The reason for that answer shows here.
Right, A is one of the answers.
Why A is right
For millions of sensors uploading data to Azure, you need Azure IoT Hub to ingest and manage the IoT device connections and telemetry data, and Azure Data Lake to store the massive volumes of structured and unstructured data collected from the sensors.
Not this one. Try another answer.
Why B is wrong
Queue Storage is for message queuing between services, not the primary storage for sensor data.
Not this one. Try another answer.
Why C is wrong
File Storage is for shared file access via SMB protocol, not optimized for IoT sensor data ingestion.
Right, D is one of the answers.
Why D is right
For millions of sensors uploading data to Azure, you need Azure IoT Hub to ingest and manage the IoT device connections and telemetry data, and Azure Data Lake to store the massive volumes of structured and unstructured data collected from the sensors.
Not this one. Try another answer.
Why E is wrong
Notification Hubs is for sending push notifications to mobile apps, not for collecting IoT sensor data.
Question 98 Play from 2:41:47
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A service health alert monitors the status of Azure services but does not increase subscription limits.
Not this one. Try another answer.
Why B is wrong
Upgrading your support plan may improve support response time but does not directly increase resource limits.
Not this one. Try another answer.
Why C is wrong
Azure policies are used to enforce compliance and resource governance, not to increase subscription limits.
Right, D is the answer.
Why D is right
To increase Azure subscription limits, you must create a new support request. Azure subscription limits are set quotas that can only be modified by Microsoft support after review of your request and justification. Support requests are the official mechanism for requesting limit increases on resources like managed SQL Server instances, compute cores, and other Azure services.
Question 99 Play from 2:43:31
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
In SaaS, identity and directory infrastructure management is a shared responsibility. Microsoft provides Azure AD and manages the core infrastructure, but customers are responsible for configuring policies, managing user assignments, and integrating with their organizational requirements.
Not this one. Try another answer.
Why B is wrong
Application management is solely the customer's responsibility in SaaS; Microsoft manages the platform.
Not this one. Try another answer.
Why C is wrong
Information and data management is the customer's responsibility; they control their data in SaaS.
Not this one. Try another answer.
Why D is wrong
Operating system updates are Microsoft's responsibility; customers never manage OS updates in SaaS.
Question 100 Play from 2:45:12
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
An Azure Storage account is not required for Azure Disk Encryption.
Right, B is the answer.
Why B is right
Azure Key Vault must be created first before implementing Azure Disk Encryption. The Key Vault stores the encryption keys used to encrypt the VM's disks. Azure Storage accounts are not required for disk encryption. Azure Information Protection is for data classification, not disk encryption. While an encryption key is needed, it is generated and stored within the Key Vault, so the vault must exist first.
Not this one. Try another answer.
Why C is wrong
Azure Information Protection policy is for data classification and protection, not for disk encryption.
Not this one. Try another answer.
Why D is wrong
An encryption key must be stored in a Key Vault, so the vault must be created first before the key can be generated.
Transcript
Play from 00:00 Question 1. You need to manage containers. Which two services can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Here are the options. Option A. Azure Virtual Desktop. Option B. Azure virtual machines. Option C. Azure Functions. Option D. Azure Container Instances. Option E. Azure Kubernetes Service (AKS). Pause the video now if you want time to think about the answer.
The correct answers are D. Azure Container Instances, and E. Azure Kubernetes Service (AKS). Azure Container Instances and Azure Kubernetes Service (AKS) are both dedicated container management services. Container Instances provides serverless container execution, while AKS provides orchestrated Kubernetes-based container management. Now, why are the other options incorrect? Option A is incorrect. Azure Virtual Desktop is for remote desktop sessions, not container management. Option B is incorrect. Azure Virtual Machines can run containers but are not dedicated container management services. Option C is incorrect. Azure Functions is a serverless compute service for event-driven workloads, not a container management service. Therefore, D and E are the correct answers.
Play from 01:41 Question 2. You have an Azure subscription. You plan to create a virtual machine. Where will the virtual machine be placed in Azure? Here are the options. Option A. In a storage account. Option B. In a resource group. Option C. In an administrative unit. Option D. In an application group. Pause the video now if you want time to think about the answer.
The correct answer is B. In a resource group. Virtual machines are placed within resource groups, which are the fundamental organizational containers in Azure. Resource groups hold related resources and provide the scope for access control, billing, and lifecycle management. Now, why are the other options incorrect? Option A is incorrect. Storage accounts are separate resources, not containers for virtual machines. Option C is incorrect. Administrative units are used for Azure AD management of user and group access, not for placing compute resources. Option D is incorrect. Application groups are used in Azure Virtual Desktop for publishing applications, not for placing VMs. Therefore, B, In a resource group, is the correct answer.
Play from 03:07 Question 3. What does a customer provide in a software as a service (SaaS) model? Here are the options. Option A. application data. Option B. data storage. Option C. compute resources. Option D. application software. Pause the video now if you want time to think about the answer.
The correct answer is A. application data. In a SaaS model, the customer provides only the application data. The cloud provider manages the application software, infrastructure, compute resources, storage, and all underlying systems. The customer simply uses the application and manages their own data. Now, why are the other options incorrect? Option B is incorrect. Data storage is provided and managed by the SaaS provider, not the customer. Option C is incorrect. Compute resources are provided and managed by the SaaS provider as part of the service. Option D is incorrect. Application software is provided by the SaaS vendor; the customer does not develop or provide it. Therefore, A, application data, is the correct answer.
Show full transcriptShow less
Play from 04:31 Question 4. You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines remain available if a single data center fails. What are two possible solutions? Each correct answer presents a complete solution. Here are the options. Option A. Deploy the virtual machines to two or more availability zones. Option B. Deploy the virtual machines to two or more resource groups. Option C. Deploy the virtual machines to a scale set. Option D. Deploy the virtual machines to two or more regions. Pause the video now if you want time to think about the answer.
The correct answers are A. Deploy the virtual machines to two or more availability zones, and D. Deploy the virtual machines to two or more regions. Availability Zones (option A) distribute VMs across physically separate data centers within a single region, protecting against data center failure. Multiple regions (option D) protect against entire region failures, providing geographic redundancy. Both are complete solutions for data center failure protection. Resource groups (B) are logical containers providing no fault tolerance. Scale sets (C) provide auto-scaling and load balancing but not protection against data center failures unless combined with zones or regions. Now, why are the other options incorrect? Option B is incorrect. Resource groups are management containers only and provide no fault tolerance or data center failure protection. Option C is incorrect. Scale sets provide auto-scaling within a data center but do not protect against data center failures. Therefore, A and D are the correct answers.
Play from 06:30 Question 5. You need to compare a company's cloud usage to industry standard best practices. What should you use? Here are the options. Option A. Azure Monitor. Option B. Azure Service Health. Option C. Application Insights in Azure Monitor. Option D. Azure Advisor. Pause the video now if you want time to think about the answer.
The correct answer is D. Azure Advisor. Azure Advisor is specifically designed to analyze cloud usage and provide recommendations based on Azure best practices. It evaluates your subscription and resources against Microsoft's best practice guidelines, offering actionable recommendations to improve performance, security, reliability, operational excellence, and cost optimization. This directly addresses comparing usage to industry standards. Now, why are the other options incorrect? Option A is incorrect. Azure Monitor is for monitoring and collecting metrics/logs, not for best practice comparisons. Option B is incorrect. Azure Service Health tracks service incidents and planned maintenance, not best practices. Option C is incorrect. Application Insights monitors application performance but does not compare to best practices across the subscription. Therefore, D, Azure Advisor, is the correct answer.
Play from 08:05 Question 6. You have an Azure environment that contains 10 virtual networks and 100 virtual machines. You need to limit the amount of inbound traffic to all the Azure virtual networks. What should you create? Here are the options. Option A. one application security group (ASG). Option B. 10 virtual network gateways. Option C. 10 Azure ExpressRoute circuits. Option D. one Azure firewall. Pause the video now if you want time to think about the answer.
The correct answer is D. one Azure firewall. Azure Firewall is a centralized, managed firewall service that can limit inbound traffic to all virtual networks in the subscription. A single Azure Firewall instance can protect multiple virtual networks and virtual machines, making it the most efficient solution. Now, why are the other options incorrect? Option A is incorrect. Application security groups manage traffic between resources within networks, not across all 10 virtual networks centrally. Option B is incorrect. Virtual network gateways are for connecting networks and on-premises systems, not for limiting inbound traffic across all networks. Option C is incorrect. ExpressRoute circuits are for dedicated network connections, not for limiting inbound traffic to virtual networks. Therefore, D, one Azure firewall, is the correct answer.
Play from 09:47 Question 7. Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation? Here are the options. Option A. network security groups (NSGs). Option B. Azure Service Bus. Option C. a local network gateway. Option D. a route filter. Pause the video now if you want time to think about the answer.
The correct answer is A. network security groups (NSGs). Network Security Groups (NSGs) are the correct solution for limiting connection types between resources within Azure virtual networks. NSGs operate at the network interface and subnet level, allowing you to create inbound and outbound rules that filter traffic between web servers and database servers. Azure Service Bus is a messaging service, not for network filtering. A local network gateway is for hybrid connectivity, and a route filter is for BGP advertisement filtering in ExpressRoute scenarios. Now, why are the other options incorrect? Option B is incorrect. Azure Service Bus is a messaging service for asynchronous communication, not for network traffic filtering. Option C is incorrect. A local network gateway is used for site-to-site VPN or ExpressRoute connectivity, not for filtering connections between Azure resources. Option D is incorrect. A route filter is used to filter BGP advertisements in ExpressRoute, not for controlling connections between servers. Therefore, A, network security groups (NSGs), is the correct answer.
Play from 11:49 Question 8. You have on-premises servers that run Windows Server. What should you implement to manage the servers by using the Azure portal? Here are the options. Option A. Azure Kubernetes Service (AKS). Option B. Azure Arc. Option C. Docker. Option D. role-based access control (RBAC). Pause the video now if you want time to think about the answer.
The correct answer is B. Azure Arc. Azure Arc extends Azure management and governance to on-premises servers running Windows Server, allowing you to manage them through the Azure portal as if they were Azure resources. This enables unified management of hybrid infrastructure across on-premises and cloud environments. Now, why are the other options incorrect? Option A is incorrect. Azure Kubernetes Service (AKS) is for container orchestration, not on-premises Windows Server management. Option C is incorrect. Docker is a containerization platform unrelated to managing on-premises servers through Azure. Option D is incorrect. RBAC controls access permissions but doesn't provide the hybrid server management capability. Therefore, B, Azure Arc, is the correct answer.
Play from 13:21 Question 9. Your company has an Azure subscription that contains resources in several regions. You need to ensure that administrators can only create resources in those regions. What should you use? Here are the options. Option A. a read-only lock. Option B. an Azure policy. Option C. a management group. Option D. a reservation. Pause the video now if you want time to think about the answer.
The correct answer is B. an Azure policy. Azure Policy allows administrators to create and enforce rules that restrict resource creation to specific regions. Policies can evaluate resources against defined rules and prevent non-compliant deployments. Now, why are the other options incorrect? Option A is incorrect. Read-only locks prevent modifications but do not restrict which regions resources can be created in. Option C is incorrect. Management groups help organize subscriptions hierarchically but do not enforce regional restrictions. Option D is incorrect. Reservations are for purchasing Azure services at a discount and do not control resource location. Therefore, B, an Azure policy, is the correct answer.
Play from 14:49 Question 10. Which Azure service should you use to store certificates? Here are the options. Option A. Azure Security Center. Option B. an Azure Storage account. Option C. Azure Key Vault. Option D. Azure Information Protection. Pause the video now if you want time to think about the answer.
The correct answer is C. Azure Key Vault. Azure Key Vault is the dedicated service for storing and managing certificates, keys, and secrets securely in Azure. It provides secure storage, access control, and audit logging for sensitive cryptographic material. Azure Security Center is for security monitoring and threat detection. Azure Storage accounts are for general data storage, not for certificate management. Azure Information Protection is for data classification and protection. Now, why are the other options incorrect? Option A is incorrect. Azure Security Center is a security monitoring and threat management tool, not a certificate storage service. Option B is incorrect. Azure Storage accounts are designed for general-purpose data storage, not for secure certificate management. Option D is incorrect. Azure Information Protection is for data classification and encryption of sensitive information, not for certificate storage. Therefore, C, Azure Key Vault, is the correct answer.
Play from 16:29 Question 11. You have an Azure subscription. Where will you find details on the personal data collected by Microsoft, how Microsoft uses the data, and what the data is used for? Here are the options. Option A. the Data Protection Addendum. Option B. the Microsoft Online Services Terms. Option C. the Microsoft Privacy Statement. Option D. Azure Security Center. Pause the video now if you want time to think about the answer.
The correct answer is C. the Microsoft Privacy Statement. The Microsoft Privacy Statement details the personal data collected by Microsoft, how it is used, and the purposes of collection. It provides transparency about Microsoft's data practices and is the primary document for understanding privacy-related information. Now, why are the other options incorrect? Option A is incorrect. The Data Protection Addendum addresses data processing obligations but does not explain what personal data is collected or how it is used. Option B is incorrect. The Microsoft Online Services Terms covers service conditions and legal terms, not personal data collection practices. Option D is incorrect. Azure Security Center provides security recommendations and threat detection, not privacy policy information. Therefore, C, the Microsoft Privacy Statement, is the correct answer.
Play from 18:10 Question 12. You plan to deploy several Azure virtual machines. You need to control the ports that devices on the Internet can use to access the virtual machines. What should you use? Here are the options. Option A. a network security group (NSG). Option B. an Azure Active Directory (Azure AD) role. Option C. an Azure Active Directory group. Option D. an Azure key vault. Pause the video now if you want time to think about the answer.
The correct answer is A. a network security group (NSG). A network security group (NSG) is an Azure resource that contains security rules to allow or deny inbound and outbound network traffic. NSGs are specifically designed to control which ports and protocols devices on the Internet can use to access virtual machines. Azure AD roles control identity-based access, Azure AD groups organize users, and Key Vaults manage secrets-none of these control network port access. Now, why are the other options incorrect? Option B is incorrect. Azure AD roles control identity and access management, not network port access. Option C is incorrect. Azure AD groups organize users for access management, not network traffic control. Option D is incorrect. Azure Key Vault stores and manages cryptographic keys and secrets, not network ports. Therefore, A, a network security group (NSG), is the correct answer.
Play from 20:01 Question 13. Who can use the Azure Total Cost of Ownership (TCO) calculator? Here are the options. Option A. billing readers for an Azure subscription only. Option B. owners for an Azure subscription only. Option C. anyone. Option D. all users who have an account in Azure Active Directory (Azure AD) that is linked to an Azure subscription only. Pause the video now if you want time to think about the answer.
The correct answer is C. anyone. The Azure Total Cost of Ownership calculator is a publicly accessible tool that anyone can use without requiring an Azure subscription, Azure AD account, or specific role permissions. It is designed to help prospects and customers estimate cloud migration costs. Now, why are the other options incorrect? Option A is incorrect. Billing readers do not need special status; the tool is publicly available. Option B is incorrect. Subscription owners do not need special status; the tool is publicly available. Option D is incorrect. An Azure AD account is not required; the tool is publicly accessible. Therefore, C, anyone, is the correct answer.
Play from 21:26 Question 14. This question requires that you evaluate the underlined text to determine if it is correct. The Azure Standard support plan is the lowest cost option to receive 24x7 access to support engineers by phone. Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed`. If the statement is incorrect, select the answer choice that makes the statement correct. Here are the options. Option A. No change is needed. Option B. Developer. Option C. Basic. Option D. Professional Direct. Pause the video now if you want time to think about the answer.
The correct answer is A. No change is needed. The statement is correct. The Azure Standard support plan is indeed the lowest-cost option that provides 24x7 access to support engineers by phone. While Basic support is free, it does not include phone support; Standard is the cheapest paid tier offering phone support around the clock. The underlined text accurately describes this feature. Now, why are the other options incorrect? Option B is incorrect. Developer support does not offer 24x7 phone support. Option C is incorrect. Basic support does not include phone support access. Option D is incorrect. Professional Direct is more expensive than Standard while offering the same 24x7 phone support. Therefore, A, No change is needed, is the correct answer.
Play from 23:11 Question 15. At which OSI layer does ExpressRoute operate? Here are the options. Option A. Layer 2. Option B. Layer 3. Option C. Layer 5. Option D. Layer 7. Pause the video now if you want time to think about the answer.
The correct answer is B. Layer 3. ExpressRoute operates at Layer 3 (Network layer) of the OSI model. It provides a private, dedicated network connection between on-premises infrastructure and Azure data centers using Border Gateway Protocol (BGP) routing, which is a Layer 3 protocol. Now, why are the other options incorrect? Option A is incorrect. Layer 2 is the data link layer; ExpressRoute uses Layer 3 routing protocols like BGP. Option C is incorrect. Layer 5 is the session layer, which is not relevant to ExpressRoute's core functionality. Option D is incorrect. Layer 7 is the application layer, not where ExpressRoute operates. Therefore, B, Layer 3, is the correct answer.
Play from 24:31 Question 16. What is the first stage in the Microsoft Cloud Adoption Framework for Azure? Here are the options. Option A. Adopt the cloud. Option B. Make a plan. Option C. Ready your organization. Option D. Define your strategy. Pause the video now if you want time to think about the answer.
The correct answer is D. Define your strategy. The Microsoft Cloud Adoption Framework for Azure begins with 'Define your strategy' as the first stage. This stage involves understanding business objectives, defining cloud strategy, and establishing governance models before any implementation begins. The five stages follow in order: Strategy, Plan, Ready, Adopt, and Govern/Manage. Now, why are the other options incorrect? Option A is incorrect. Adopt the cloud is the fourth stage, coming after strategy, planning, and readiness. Option B is incorrect. Make a plan is the second stage, following the strategy definition phase. Option C is incorrect. Ready your organization is the third stage, after strategy and planning are established. Therefore, D, Define your strategy, is the correct answer.
Play from 26:00 Question 17. You need to be notified when Microsoft plans to perform maintenance that can affect the resources deployed to an Azure subscription. What should you use? Here are the options. Option A. Azure Monitor. Option B. Azure Service Health. Option C. Azure Advisor. Option D. Microsoft Trust Center. Pause the video now if you want time to think about the answer.
The correct answer is B. Azure Service Health. Azure Service Health is the dedicated service for receiving notifications about planned maintenance, service incidents, and health advisories that affect your Azure resources and subscriptions. It provides proactive communication about maintenance windows. Azure Monitor tracks resource performance metrics. Azure Advisor provides optimization recommendations. Microsoft Trust Center provides compliance and security information but not maintenance notifications. Now, why are the other options incorrect? Option A is incorrect. Azure Monitor is for performance metrics and diagnostics, not maintenance notifications. Option C is incorrect. Azure Advisor provides optimization recommendations, not maintenance notifications. Option D is incorrect. Trust Center provides compliance documentation, not personalized maintenance notifications. Therefore, B, Azure Service Health, is the correct answer.
Play from 27:38 Question 18. Which task can you perform by using Azure Advisor? Here are the options. Option A. Integrate Active Directory and Azure Active Directory (Azure AD). Option B. Estimate the costs of an Azure solution. Option C. Confirm that Azure subscription security follows best practices. Option D. Evaluate which on-premises resources can be migrated to Azure. Pause the video now if you want time to think about the answer.
The correct answer is C. Confirm that Azure subscription security follows best practices. Azure Advisor is a personalized cloud consultant that helps optimize Azure deployments by analyzing resource configurations and usage patterns. It provides recommendations across five categories including Security, and specifically confirms that Azure subscription security follows best practices by identifying security vulnerabilities and gaps. Option A relates to identity integration tools, B relates to cost estimation (which Advisor does inform but is not its primary task), and D relates to migration assessment tools like Azure Migrate. Now, why are the other options incorrect? Option A is incorrect. Active Directory integration is handled by Azure AD Connect, not Azure Advisor. Option B is incorrect. Cost estimation is done by Azure Cost Management and the pricing calculator, not primarily by Advisor. Option D is incorrect. Migration assessment is performed by Azure Migrate, not Azure Advisor. Therefore, C, Confirm that Azure subscription security follows best practices, is the correct answer.
Play from 29:36 Question 19. Your company plans to migrate to Azure. The company has several departments. All the Azure resources used by each department will be managed by a department administrator. What are two possible techniques to segment Azure for the departments? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Here are the options. Option A. multiple subscriptions. Option B. multiple Azure Active Directory (Azure AD) directories. Option C. multiple regions. Option D. multiple resource groups. Pause the video now if you want time to think about the answer.
The correct answers are A. multiple subscriptions, and D. multiple resource groups. Multiple subscriptions and multiple resource groups are both valid techniques to segment Azure for different departments with separate management. Multiple subscriptions provide complete isolation and independent billing, allowing department administrators to manage resources separately with distinct identity and access control. Multiple resource groups within subscriptions also allow logical separation of department resources. Multiple Azure AD directories and multiple regions are not practical segmentation solutions for department-level resource management. Now, why are the other options incorrect? Option B is incorrect. Multiple Azure AD directories would overcomplicate identity management and is not a standard approach for departmental segmentation. Option C is incorrect. Multiple regions are used for geographic distribution and disaster recovery, not for departmental segmentation. Therefore, A and D are the correct answers.
Play from 31:34 Question 20. What can you use to make recommendations that will reduce Azure costs? Here are the options. Option A. Azure Advisor. Option B. Log Analytics. Option C. Azure Service Health. Option D. the Azure pricing calculator. Pause the video now if you want time to think about the answer.
The correct answer is A. Azure Advisor. Azure Advisor is a personalized cloud consultant that analyzes your Azure resources and configurations, then provides recommendations for optimizing costs, performance, security, and reliability. It specifically identifies unused resources, right-sizing opportunities, and reserved instance recommendations to reduce expenses. Now, why are the other options incorrect? Option B is incorrect. Log Analytics is used for monitoring and analyzing logs; it doesn't provide cost recommendations. Option C is incorrect. Azure Service Health tracks service incidents and planned maintenance, not cost optimization. Option D is incorrect. The Azure pricing calculator estimates costs for hypothetical configurations but doesn't analyze existing resources for savings. Therefore, A, Azure Advisor, is the correct answer.
Play from 33:06 Question 21. You have an on-premises application that sends email notifications automatically based on a rule. You plan to migrate the application to Azure. You need to recommend a serverless computing solution for the application. What should you include in the recommendation? Here are the options. Option A. a web app. Option B. a server image in Azure Marketplace. Option C. a logic app. Option D. an API app. Pause the video now if you want time to think about the answer.
The correct answer is C. a logic app. Azure Logic Apps is a serverless computing solution designed specifically for automating workflows and integrating systems, including sending email notifications based on rules. Logic Apps provides a visual workflow designer, built-in email connectors, and rule-based triggering, making it ideal for migrating rule-based email notification applications. Now, why are the other options incorrect? Option A is incorrect. A web app requires server management and is not a serverless solution. Option B is incorrect. A server image in Azure Marketplace still requires virtual machine management and is not serverless. Option D is incorrect. An API app is used for building APIs, not for automating email notifications based on rules. Therefore, C, a logic app, is the correct answer.
Play from 34:44 Question 22. You need to identify the type of failure for which an Azure Availability Zone can be used to protect access to Azure services. What should you identify? Here are the options. Option A. a physical server failure. Option B. an Azure region failure. Option C. a storage failure. Option D. an Azure data center failure. Pause the video now if you want time to think about the answer.
The correct answer is D. an Azure data center failure. Azure Availability Zones protect against data center failures by distributing resources across physically separate data centers within a region. When you deploy services across multiple Availability Zones, if one data center fails, services running in other zones remain available. This provides protection specifically against isolated data center outages, not broader region failures or individual server issues. Now, why are the other options incorrect? Option A is incorrect. Physical server failures are typically handled by Azure's internal redundancy within a data center, not by Availability Zones specifically. Option B is incorrect. Availability Zones protect against data center failures within a region, not region-level failures; for region failures, you need geo-redundancy across regions. Option C is incorrect. Storage failures are handled by storage redundancy options, not by Availability Zones. Therefore, D, an Azure data center failure, is the correct answer.
Play from 36:32 Question 23. You plan to deploy a website to Azure. The website will be accessed by users worldwide and will host large video files. You need to recommend which Azure feature must be used to provide the best video playback experience. What should you recommend? Here are the options. Option A. an application gateway. Option B. an Azure ExpressRoute circuit. Option C. a content delivery network (CDN). Option D. an Azure Traffic Manager profile. Pause the video now if you want time to think about the answer.
The correct answer is C. a content delivery network (CDN). Azure Content Delivery Network (CDN) is specifically designed to cache and deliver large media files like videos to users worldwide with low latency. CDN edge servers cache content closer to end users, providing the best video playback experience globally. Now, why are the other options incorrect? Option A is incorrect. Application Gateway is a Layer 7 load balancer for routing HTTP/HTTPS traffic, not for optimizing video delivery. Option B is incorrect. ExpressRoute provides dedicated private connectivity to Azure but doesn't cache or optimize content delivery for global users. Option D is incorrect. Traffic Manager performs DNS-level routing between endpoints but doesn't cache content or optimize video streaming performance. Therefore, C, a content delivery network (CDN), is the correct answer.
Play from 38:26 Question 24. What can you use to identify underutilized or unused Azure virtual machines? Here are the options. Option A. Azure Advisor. Option B. Azure Cost Management + Billing. Option C. Azure reservations. Option D. Azure Policy. Pause the video now if you want time to think about the answer.
The correct answer is A. Azure Advisor. Azure Advisor provides personalized recommendations including identification of underutilized virtual machines based on usage patterns and configuration. It analyzes resource metrics and offers specific guidance for optimization and cost savings. Cost Management + Billing tracks spending but doesn't specifically identify underutilized resources, reservations are for commitment purchases, and Policy enforces compliance rules. Now, why are the other options incorrect? Option B is incorrect. Azure Cost Management shows spending but does not specifically identify underutilized or unused virtual machines. Option C is incorrect. Azure Reservations are for purchasing discounted compute capacity, not for identifying underutilized resources. Option D is incorrect. Azure Policy enforces compliance and governance rules but does not analyze resource utilization patterns. Therefore, A, Azure Advisor, is the correct answer.
Play from 40:07 Question 25. You plan to migrate a web application to Azure. The web application is accessed by external users. You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application. What should you include in the recommendation? Here are the options. Option A. Software as a Service (SaaS). Option B. Platform as a Service (PaaS). Option C. Infrastructure as a Service (IaaS). Option D. Database as a Service (DaaS). Pause the video now if you want time to think about the answer.
The correct answer is B. Platform as a Service (PaaS). Platform as a Service (PaaS) minimizes administrative effort for web applications by handling infrastructure management, patches, scaling, and deployment frameworks. The vendor manages the underlying platform, allowing developers to focus on application code rather than server management. This reduces operational overhead compared to IaaS while providing more control than SaaS. Now, why are the other options incorrect? Option A is incorrect. SaaS is pre-built software that may not meet custom web application requirements. Option C is incorrect. IaaS requires significant administrative effort for managing virtual machines, operating systems, and infrastructure. Option D is incorrect. DaaS (Database as a Service) is not a standard cloud model and addresses only database needs, not web application hosting. Therefore, B, Platform as a Service (PaaS), is the correct answer.
Play from 41:57 Question 26. Which Azure service should you use to collect events from multiple resources into a centralized repository? Here are the options. Option A. Azure Event Hubs. Option B. Azure Analysis Services. Option C. Azure Monitor. Option D. Azure Stream Analytics. Pause the video now if you want time to think about the answer.
The correct answer is C. Azure Monitor. Azure Monitor is the centralized service for collecting events, metrics, logs, and diagnostic data from multiple Azure resources into a unified repository. It provides comprehensive monitoring and diagnostics capabilities. Azure Event Hubs is for high-throughput event streaming but is more specialized for specific streaming scenarios. Azure Analysis Services is for data analysis. Azure Stream Analytics is for real-time stream processing, not centralized event collection. Now, why are the other options incorrect? Option A is incorrect. Event Hubs is designed for high-throughput event streaming rather than general-purpose centralized monitoring. Option B is incorrect. Analysis Services is for analytical processing of data, not collection of events. Option D is incorrect. Stream Analytics is for processing streaming data, not for collecting events from resources. Therefore, C, Azure Monitor, is the correct answer.
Play from 43:41 Question 27. Which resources can be used as a source for a Network security group inbound security rule? Here are the options. Option A. Service Tags only. Option B. IP Addresses, Service tags and Application security groups. Option C. Application security groups only. Option D. IP Addresses only. Pause the video now if you want time to think about the answer.
The correct answer is B. IP Addresses, Service tags and Application security groups. Network Security Group inbound rules can accept three types of sources: IP addresses (including IP ranges in CIDR notation), Service Tags (predefined identifiers for Azure services), and Application Security Groups (logical groupings of VMs). All three options are valid source specifications for NSG inbound security rules, providing flexibility in defining traffic policies. Now, why are the other options incorrect? Option A is incorrect. Service Tags alone are insufficient; IP addresses and Application Security Groups are also valid sources. Option C is incorrect. Application Security Groups alone are insufficient; IP addresses and Service Tags are also valid sources. Option D is incorrect. IP addresses alone are insufficient; Service Tags and Application Security Groups are also valid sources. Therefore, B, IP Addresses, Service tags and Application security groups, is the correct answer.
Play from 45:27 Question 28. You plan to collect and analyze event details for five Azure virtual machines. You need to run queries to compare the event details collected from all the virtual machines. Which two tools should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Here are the options. Option A. Azure Service Health. Option B. Azure Service Bus. Option C. Azure Monitor. Option D. Azure Advisor. Option E. Log Analytics. Pause the video now if you want time to think about the answer.
The correct answers are C. Azure Monitor, and E. Log Analytics. Azure Monitor collects event and performance data from multiple virtual machines, while Log Analytics provides the querying and analysis capability to compare and correlate event details across all five machines. Together, they form the standard solution for multi-resource event collection and comparative analysis. Now, why are the other options incorrect? Option A is incorrect. Azure Service Health monitors Azure service status, not individual VM events. Option B is incorrect. Azure Service Bus is a messaging service, not designed for event collection and analysis. Option D is incorrect. Azure Advisor provides optimization recommendations, not event data collection or analysis. Therefore, C and E are the correct answers.
Play from 47:15 Question 29. Which cloud computing benefit provides continuous user access to a cloud-based application with minimal downtime? Here are the options. Option A. agility. Option B. scalability. Option C. elasticity. Option D. high availability. Pause the video now if you want time to think about the answer.
The correct answer is D. high availability. High availability is the cloud computing benefit that ensures continuous user access to cloud-based applications with minimal downtime. It is achieved through redundancy, fault tolerance, and failover mechanisms that keep services running even when failures occur. Agility refers to speed of deployment, scalability to handling increased load, and elasticity to dynamic resource adjustment-none of which directly address minimizing downtime. Now, why are the other options incorrect? Option A is incorrect. Agility refers to rapid deployment and development speed, not continuous availability. Option B is incorrect. Scalability is the ability to handle increased load, not specifically about minimizing downtime. Option C is incorrect. Elasticity allows dynamic resource adjustment but does not inherently provide continuous availability during failures. Therefore, D, high availability, is the correct answer.
Play from 48:56 Question 30. What enables a cloud service to adapt quickly to changing requirements? Here are the options. Option A. high availability. Option B. predictability. Option C. manageability. Option D. agility. Pause the video now if you want time to think about the answer.
The correct answer is D. agility. Agility is the cloud characteristic that enables rapid adaptation to changing requirements by allowing quick provisioning and scaling of resources. While high availability and manageability are important, agility specifically refers to the speed and flexibility needed to respond to business changes. Now, why are the other options incorrect? Option A is incorrect. High availability ensures systems remain operational but does not directly address adapting to changing requirements. Option B is incorrect. Predictability relates to consistent performance and costs, not the ability to adapt quickly. Option C is incorrect. Manageability is about ease of management but is not the primary driver of adapting to changing requirements. Therefore, D, agility, is the correct answer.
Play from 50:24 Question 31. You plan to reduce ongoing Azure expenditures. You need to identify which factors affect the costs of a resource. Which three factors should you identify? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Here are the options. Option A. the volume of outbound data. Option B. the volume of inbound data. Option C. the service tier. Option D. the Azure region. Option E. the type of processed data. Pause the video now if you want time to think about the answer.
The correct answers are A. the volume of outbound data, and C. the service tier, and D. the Azure region. The volume of outbound data (egress charges apply), the service tier (determines pricing level), and the Azure region (pricing varies by region) are three primary factors that directly affect resource costs. Outbound data transfer incurs charges, different service tiers have different pricing models, and regional pricing varies significantly. Now, why are the other options incorrect? Option B is incorrect. Inbound data transfer is typically free in Azure, so inbound volume doesn't affect costs. Option E is incorrect. The type of processed data is not a standard cost factor; pricing is based on volume, region, and tier rather than data classification. Therefore, A and C and D are the correct answers.
Play from 52:14 Question 32. You plan to deploy a service to Azure virtual machines. You need to ensure that the service will be available if a datacenter fails. What should you use as part of the virtual machine deployment? Here are the options. Option A. availability sets. Option B. proximity placement groups. Option C. host groups. Option D. availability zones. Pause the video now if you want time to think about the answer.
The correct answer is D. availability zones. Availability zones provide protection against datacenter failures by distributing resources across physically separate datacenters within a region. VMs deployed across multiple availability zones will remain available if one zone fails. Now, why are the other options incorrect? Option A is incorrect. Availability sets protect against planned maintenance and hardware failures within a single datacenter, not datacenter failures. Option B is incorrect. Proximity placement groups optimize network latency between VMs but do not provide datacenter failure protection. Option C is incorrect. Host groups are used to control the physical host placement of VMs and do not protect against datacenter failures. Therefore, D, availability zones, is the correct answer.
Play from 53:51 Question 33. Which service provides serverless computing in Azure? Here are the options. Option A. Azure Virtual Machines. Option B. Azure Functions. Option C. Azure storage account. Option D. Azure dedicated hosts. Pause the video now if you want time to think about the answer.
The correct answer is B. Azure Functions. Azure Functions is Azure's serverless computing service that allows execution of code without managing infrastructure. Users only pay for compute resources consumed during execution. Virtual Machines require managing the underlying infrastructure, storage accounts are for data storage, and dedicated hosts are for dedicated physical servers. Now, why are the other options incorrect? Option A is incorrect. Azure Virtual Machines require users to manage and provision virtual infrastructure, which is not serverless. Option C is incorrect. Azure Storage Accounts are for data storage and do not provide serverless computing capabilities. Option D is incorrect. Azure Dedicated Hosts are dedicated physical servers and require infrastructure management, contrary to serverless principles. Therefore, B, Azure Functions, is the correct answer.
Play from 55:21 Question 34. Your company plans to request an architectural review of an Azure environment from Microsoft. The company currently has a Basic support plan. You need to recommend a new support plan for the company. The solution must minimize costs. Which support plan should you recommend? Here are the options. Option A. Premier. Option B. Developer. Option C. Professional Direct. Option D. Standard. Pause the video now if you want time to think about the answer.
The correct answer is C. Professional Direct. Architectural reviews from Microsoft require Professional Direct support plan as the minimum tier that includes this benefit. While Premier would also work, the question asks to minimize costs, making Professional Direct the correct answer. Developer and Standard plans do not include architectural reviews. Now, why are the other options incorrect? Option A is incorrect. Premier is more expensive than necessary for the stated requirement. Option B is incorrect. Developer plan does not include architectural reviews. Option D is incorrect. Standard plan does not include architectural reviews. Therefore, C, Professional Direct, is the correct answer.
Play from 56:52 Question 35. Which term represents the ability to increase the computing capacity of a virtual machine by adding memory or CPUs? Here are the options. Option A. agility. Option B. vertical scaling. Option C. horizontal scaling. Option D. elasticity. Pause the video now if you want time to think about the answer.
The correct answer is B. vertical scaling. Vertical scaling refers to increasing the computing capacity of an existing virtual machine by adding resources such as memory (RAM) or CPUs to a single instance. This is also called 'scaling up' and involves making a single server more powerful. Now, why are the other options incorrect? Option A is incorrect. Agility refers to the ability to quickly provision and deploy resources, not to adding capacity to existing machines. Option C is incorrect. Horizontal scaling involves adding more instances or servers to distribute the load, not upgrading a single machine. Option D is incorrect. Elasticity is the ability to automatically scale resources up or down based on demand, not the specific mechanism of adding CPUs or memory. Therefore, B, vertical scaling, is the correct answer.
Play from 58:30 Question 36. You have an on-premises network that contains several servers. You plan to migrate all the servers to Azure. You need to recommend a solution to ensure that some of the servers are available if a single Azure data center goes offline for an extended period. What should you include in the recommendation? Here are the options. Option A. fault tolerance. Option B. elasticity. Option C. scalability. Option D. low latency. Pause the video now if you want time to think about the answer.
The correct answer is A. fault tolerance. Fault tolerance is the ability of a system to continue operating and remain available even when one or more components fail. To ensure that servers remain available if a single Azure data center goes offline, the solution must include fault tolerance through mechanisms like redundancy across availability zones or multiple data centers. This guarantees continued service availability despite infrastructure failures. Now, why are the other options incorrect? Option B is incorrect. Elasticity refers to scaling resources up or down based on demand, not to maintaining availability during data center outages. Option C is incorrect. Scalability refers to the ability to increase capacity to handle more load, not to maintaining availability during infrastructure failures. Option D is incorrect. Low latency refers to minimizing network delay, not to ensuring availability during data center failures. Therefore, A, fault tolerance, is the correct answer.
Play from 1:00:19 Question 37. Your company has an Azure subscription and three business units. You plan to deploy new resources for each business unit. You need to ensure that the new resources are deployed by using a repeatable and reliable method that applies the same configurations to each resource. What should you use? Here are the options. Option A. Azure Policy. Option B. Azure Arc. Option C. a resource group. Option D. Azure Resource Manager (ARM) templates. Pause the video now if you want time to think about the answer.
The correct answer is D. Azure Resource Manager (ARM) templates. Azure Resource Manager (ARM) templates define infrastructure as code and enable repeatable, reliable, and consistent deployments across multiple resource groups and business units. Templates can be reused and parameterized to apply the same configurations reliably. Now, why are the other options incorrect? Option A is incorrect. Azure Policy enforces compliance rules but doesn't create or deploy resources. Option B is incorrect. Azure Arc manages hybrid resources but isn't designed for repeatable infrastructure deployment patterns. Option C is incorrect. A resource group is just a logical container for organizing resources, not a deployment mechanism. Therefore, D, Azure Resource Manager (ARM) templates, is the correct answer.
Play from 1:02:02 Question 38. How many copies of data are maintained by an Azure Storage account that uses geo-redundant storage (GRS)? Here are the options. Option A. 3. Option B. 4. Option C. 6. Option D. 9. Pause the video now if you want time to think about the answer.
The correct answer is C. 6. Geo-redundant storage (GRS) maintains 6 copies of data total: 3 copies in the primary region (via LRS) and 3 copies in a secondary geographically distant region. This provides protection against regional outages while maintaining the local redundancy in each location. Now, why are the other options incorrect? Option A is incorrect. 3 copies represents only LRS in a single region, not the full GRS coverage across regions. Option B is incorrect. 4 copies does not match any standard Azure Storage redundancy configuration. Option D is incorrect. 9 copies would only be present in geo-redundant storage with read access across multiple regions, which is not standard GRS. Therefore, C, 6, is the correct answer.
Play from 1:03:29 Question 39. Which Azure service can you use as a security information and event management (SIEM) solution? Here are the options. Option A. Azure Analysis Services. Option B. Microsoft Sentinel. Option C. Azure Information Protection. Option D. Azure Cognitive Services. Pause the video now if you want time to think about the answer.
The correct answer is B. Microsoft Sentinel. Microsoft Sentinel is Azure's native Security Information and Event Management (SIEM) solution, providing threat detection, investigation, and automated response capabilities. This is functionally identical to Azure Sentinel from Question #222. Azure Analysis Services is for data analytics. Azure Information Protection is for data classification. Azure Cognitive Services provides AI and machine learning capabilities but is not a SIEM solution. Now, why are the other options incorrect? Option A is incorrect. Azure Analysis Services is a data analytics platform, not a SIEM solution. Option C is incorrect. Azure Information Protection is for data classification and protection, not for SIEM functionality. Option D is incorrect. Azure Cognitive Services provides AI and ML capabilities, not SIEM functionality. Therefore, B, Microsoft Sentinel, is the correct answer.
Play from 1:05:14 Question 40. Which service can replace a resource lock automatically if the lock is removed? Here are the options. Option A. Azure Information Protection (AIP). Option B. Azure Blueprints. Option C. Azure Backup. Option D. Azure Advisor. Pause the video now if you want time to think about the answer.
The correct answer is B. Azure Blueprints. Azure Blueprints can automatically reapply and enforce resource configurations, including locks, across subscriptions. If a lock is removed from a resource, Blueprints can detect this and automatically restore the lock as part of its governance and compliance enforcement mechanism. Now, why are the other options incorrect? Option A is incorrect. Azure Information Protection focuses on data classification and protection, not resource locking. Option C is incorrect. Azure Backup recovers deleted or corrupted data, not resource locks. Option D is incorrect. Azure Advisor provides recommendations but cannot automatically enforce or reapply locks. Therefore, B, Azure Blueprints, is the correct answer.
Play from 1:06:45 Question 41. You need to start Azure Cloud Shell. What should you use? Here are the options. Option A. the Azure portal. Option B. Azure Command-Line Interface (CLI). Option C. Azure PowerShell. Option D. an Azure Resource Manager (ARM) template. Pause the video now if you want time to think about the answer.
The correct answer is A. the Azure portal. Azure Cloud Shell is started directly from the Azure portal using the Cloud Shell icon in the top navigation bar. The portal provides the integrated interface to launch and interact with Cloud Shell. While Cloud Shell supports both Bash and PowerShell, you must first access it through the Azure portal to begin a session. Now, why are the other options incorrect? Option B is incorrect. Azure CLI is a tool used within Cloud Shell, not a way to start it. Option C is incorrect. Azure PowerShell is a tool used within Cloud Shell, not a way to start it. Option D is incorrect. ARM templates are for infrastructure deployment, not for starting Cloud Shell. Therefore, A, the Azure portal, is the correct answer.
Play from 1:08:13 Question 42. What should you use to track the costs of Azure resources? Here are the options. Option A. Azure Quickstart templates. Option B. tags. Option C. budgets. Option D. usage and quotas. Pause the video now if you want time to think about the answer.
The correct answer is B. tags. Tags are metadata labels applied to resources that allow you to organize, categorize, and track costs by department, project, environment, or other business dimensions. When combined with cost analysis tools, tags enable detailed cost tracking and allocation to specific departments or cost centers. Now, why are the other options incorrect? Option A is incorrect. Quickstart templates are deployment tools for creating resources, not for tracking costs. Option C is incorrect. Budgets alert you when spending reaches limits but don't track costs by resource category. Option D is incorrect. Usage and quotas show consumption metrics but don't provide the organizational framework for cost attribution. Therefore, B, tags, is the correct answer.
Play from 1:09:40 Question 43. Which Azure service provides a set of version control tools to manage code? Here are the options. Option A. Azure Repos. Option B. Azure DevTest Labs. Option C. Azure Storage. Option D. Azure Cosmos DB. Pause the video now if you want time to think about the answer.
The correct answer is A. Azure Repos. Azure Repos is the Azure service that provides version control tools for managing code. It offers both Git and Team Foundation Version Control (TFVC) repositories, allowing teams to store, manage, and collaborate on source code. It integrates with Azure DevOps and provides features like pull requests, branch policies, and code review capabilities. Now, why are the other options incorrect? Option B is incorrect. Azure DevTest Labs is for creating and managing test environments, not for version control of code. Option C is incorrect. Azure Storage is for storing blobs, files, queues, and tables, not for version control management. Option D is incorrect. Azure Cosmos DB is a globally distributed NoSQL database service, not a version control system. Therefore, A, Azure Repos, is the correct answer.
Play from 1:11:14 Question 44. What additional resource is required by an Azure virtual machine? Here are the options. Option A. a virtual network. Option B. a service endpoint. Option C. Azure Firewall. Option D. a public IP address. Pause the video now if you want time to think about the answer.
The correct answer is A. a virtual network. An Azure virtual machine requires a virtual network to communicate and connect to other resources. The virtual network is a fundamental networking component that must be created or selected when deploying a VM; it cannot function without one. Now, why are the other options incorrect? Option B is incorrect. Service endpoints are optional features for specific use cases and not required for all VMs. Option C is incorrect. Azure Firewall is optional; network security groups provide firewall functionality by default. Option D is incorrect. A public IP address is optional; VMs can function with only private IP addresses in many scenarios. Therefore, A, a virtual network, is the correct answer.
Play from 1:12:40 Question 45. What is used to grant permission to Azure Virtual Desktop resources? Here are the options. Option A. tags. Option B. role-based access control (RBAC) roles. Option C. resource groups. Option D. application security groups. Pause the video now if you want time to think about the answer.
The correct answer is B. role-based access control (RBAC) roles. Role-based access control (RBAC) roles are the mechanism used to grant permissions to Azure Virtual Desktop resources. RBAC allows administrators to assign specific roles with defined permissions for managing and accessing AVD resources. Now, why are the other options incorrect? Option A is incorrect. Tags are metadata labels used for organization and billing, not for granting permissions. Option C is incorrect. Resource groups are containers for organizing resources but do not directly grant permissions to specific resources. Option D is incorrect. Application security groups are used for network filtering and do not manage permissions to AVD resources. Therefore, B, role-based access control (RBAC) roles, is the correct answer.
Play from 1:14:17 Question 46. What is the longest term you can purchase for Azure Reserved VM instances? Here are the options. Option A. one year. Option B. five years. Option C. four years. Option D. three years. Pause the video now if you want time to think about the answer.
The correct answer is D. three years. Azure Reserved VM Instances can be purchased with commitment terms of either one year or three years. The three-year term represents the longest commitment period available for Reserved VM Instances, offering greater discounts than one-year terms in exchange for longer commitment. Now, why are the other options incorrect? Option A is incorrect. One year is a shorter option, not the longest available. Option B is incorrect. Five years is not a valid purchase term for Azure Reserved VM Instances. Option C is incorrect. Four years is not a valid purchase term for Azure Reserved VM Instances. Therefore, D, three years, is the correct answer.
Play from 1:15:35 Question 47. Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Here are the options. Option A. a Canadian government contractor. Option B. a European government contractor. Option C. a United States government entity. Option D. a United States government contractor. Option E. a European government entity. Pause the video now if you want time to think about the answer.
The correct answers are C. a United States government entity, and D. a United States government contractor. Azure Government is available to United States government entities and United States government contractors. The service is designed specifically for U.S. federal, state, and local government agencies, and qualified contractors working with them. It is not available to Canadian or European government entities or contractors, as it is a U.S.-focused government cloud offering. Now, why are the other options incorrect? Option A is incorrect. Azure Government is not available to Canadian government contractors; it is restricted to U.S. entities. Option B is incorrect. Azure Government is not available to European government contractors; it serves only U.S. government customers. Option E is incorrect. Azure Government is not available to European government entities; it is exclusively for U.S. government use. Therefore, C and D are the correct answers.
Play from 1:17:30 Question 48. Your company has a Software Assurance agreement that includes Microsoft SQL Server licenses. You plan to deploy SQL Server on Azure virtual machines. What should you do to minimize licensing costs for the deployment? Here are the options. Option A. Deallocate the virtual machines during off hours. Option B. Use Azure Hybrid Benefit. Option C. Configure Azure Cost Management budgets. Option D. Use Azure reservations. Pause the video now if you want time to think about the answer.
The correct answer is B. Use Azure Hybrid Benefit. Azure Hybrid Benefit allows you to use existing Software Assurance-covered SQL Server licenses on Azure virtual machines, significantly reducing licensing costs. This directly applies to the stated scenario and is the most cost-effective solution. Now, why are the other options incorrect? Option A is incorrect. Deallocating VMs reduces compute costs but does not address SQL Server licensing. Option C is incorrect. Cost Management budgets help track spending but do not reduce SQL Server licensing costs. Option D is incorrect. Reservations help with compute costs but do not apply to licensing savings from Software Assurance. Therefore, B, Use Azure Hybrid Benefit, is the correct answer.
Play from 1:19:08 Question 49. What should you use to evaluate whether your company's Azure environment meets regulatory requirements? Here are the options. Option A. Azure Service Health. Option B. Azure Knowledge Center. Option C. Azure Security Center. Option D. Azure Advisor. Pause the video now if you want time to think about the answer.
The correct answer is C. Azure Security Center. Azure Security Center (now Microsoft Defender for Cloud) provides compliance assessments and recommendations to help evaluate whether your Azure environment meets regulatory requirements such as HIPAA, PCI-DSS, and ISO standards. It offers compliance scores and tracks your compliance posture. Azure Service Health shows service status, Azure Knowledge Center is a documentation resource, and Azure Advisor provides performance and cost optimization recommendations-none specifically assess regulatory compliance. Now, why are the other options incorrect? Option A is incorrect. Azure Service Health tracks service availability and incidents, not regulatory compliance evaluation. Option B is incorrect. Azure Knowledge Center is a documentation and learning resource, not a compliance assessment tool. Option D is incorrect. Azure Advisor provides recommendations for performance, cost, and reliability, not regulatory compliance assessment. Therefore, C, Azure Security Center, is the correct answer.
Play from 1:20:54 Question 50. What is required to use Azure Cost Management? Here are the options. Option A. a Dev/Test subscription. Option B. Software Assurance. Option C. an Enterprise Agreement (EA). Option D. a pay-as-you-go subscription. Pause the video now if you want time to think about the answer.
The correct answer is D. a pay-as-you-go subscription. Azure Cost Management is available to users with pay-as-you-go subscriptions, along with several other subscription types. It reflects the actual requirements, since Cost Management is broadly available and not restricted to Enterprise Agreements. Now, why are the other options incorrect? Option A is incorrect. Dev/Test subscriptions are not required for Cost Management access. Option B is incorrect. Software Assurance is not a requirement for Cost Management. Option C is incorrect. While EA accounts can use Cost Management, it is not the only option or minimum requirement. Therefore, D, a pay-as-you-go subscription, is the correct answer.
Play from 1:22:16 Question 51. What is a feature of an Azure virtual network? Here are the options. Option A. resource cost analysis. Option B. packet inspection. Option C. geo-redundancy. Option D. isolation and segmentation. Pause the video now if you want time to think about the answer.
The correct answer is D. isolation and segmentation. Isolation and segmentation is a core feature of Azure Virtual Networks. They allow you to create isolated network environments, segment traffic using subnets and network security groups, and control communication between resources, providing security and organizational boundaries. Now, why are the other options incorrect? Option A is incorrect. Resource cost analysis is a feature of Azure Cost Management, not Virtual Networks. Option B is incorrect. Packet inspection is a function of firewalls and security appliances, not a primary feature of virtual networks themselves. Option C is incorrect. Geo-redundancy is a feature of Azure Storage and database services, not Virtual Networks. Therefore, D, isolation and segmentation, is the correct answer.
Play from 1:23:46 Question 52. In the infrastructure as a service (IaaS) cloud service model, which two components are the responsibility of the cloud service provider? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Here are the options. Option A. the configuration and maintenance of storage. Option B. the installation and configuration of the operating system. Option C. maintaining the hardware. Option D. the network configuration. Option E. physical security of the datacenter infrastructure. Pause the video now if you want time to think about the answer.
The correct answers are C. maintaining the hardware, and E. physical security of the datacenter infrastructure. In the IaaS model, the cloud provider is responsible for managing the physical infrastructure and datacenter operations. This includes maintaining the hardware (servers, networking equipment, storage devices) and ensuring physical security of the datacenter (access controls, surveillance, environmental controls). The customer is responsible for the operating system, storage configuration, and network configuration within their virtual environment. Now, why are the other options incorrect? Option A is incorrect. Storage configuration is the customer's responsibility in IaaS; the provider only maintains the physical hardware. Option B is incorrect. Operating system installation and configuration is entirely the customer's responsibility in IaaS. Option D is incorrect. Network configuration of virtual networks and resources is the customer's responsibility in IaaS. Therefore, C and E are the correct answers.
Play from 1:25:47 Question 53. You have a resource group named RG1. You need to prevent the creation of virtual machines in RG1. The solution must ensure that other objects can be created in RG1. What should you use? Here are the options. Option A. a lock. Option B. an Azure role. Option C. a tag. Option D. an Azure policy. Pause the video now if you want time to think about the answer.
The correct answer is D. an Azure policy. Azure Policy allows you to create specific rules that prevent certain resource types (like virtual machines) from being created while permitting other resources. You can create a policy that denies VM creation at the RG1 scope while allowing other resources to be created freely. Now, why are the other options incorrect? Option A is incorrect. Locks prevent all modifications to a resource group, not selective resource creation. Option B is incorrect. Azure roles control access permissions but cannot selectively block specific resource types from being created. Option C is incorrect. Tags are metadata labels for organization and billing, not enforcement mechanisms. Therefore, D, an Azure policy, is the correct answer.
Play from 1:27:23 Question 54. You have an Azure Sentinel workspace. You need to automate responses to threats detected by Azure Sentinel. What should you use? Here are the options. Option A. adaptive network hardening in Azure Security Center. Option B. Azure Service Health. Option C. Azure Monitor workbooks. Option D. adaptive application controls in Azure Security Center. Pause the video now if you want time to think about the answer.
The correct answer is C. Azure Monitor workbooks. Of the options listed, only Azure Monitor workbooks is part of Azure Sentinel: Sentinel is built on Azure Monitor and uses its workbooks and Log Analytics workspace. The other three are Azure Security Center or Service Health features that do not act on Sentinel detections. Inside Sentinel, the automated responses themselves are built as playbooks, which run on Azure Logic Apps. Now, why are the other options incorrect? Option A is incorrect. Adaptive network hardening in Azure Security Center automatically hardens network configurations but is not specifically designed for Azure Sentinel threat response automation. Option B is incorrect. Azure Service Health provides service status and incident information, not threat response automation. Option D is incorrect. Adaptive application controls in Azure Security Center manage application whitelisting, not automated threat responses from Azure Sentinel. Therefore, C, Azure Monitor workbooks, is the correct answer.
Play from 1:29:15 Question 55. Where does Azure Monitor store event data? Here are the options. Option A. an Azure Blob Storage account. Option B. Azure Storage Queue. Option C. Azure SQL Database. Option D. a Log Analytics workspace. Pause the video now if you want time to think about the answer.
The correct answer is D. a Log Analytics workspace. Azure Monitor stores event and metric data in Log Analytics workspaces. Log Analytics is the central repository for all monitoring data collected by Azure Monitor, where it can be queried using KQL (Kusto Query Language) and used for analysis, alerts, and dashboards. Now, why are the other options incorrect? Option A is incorrect. Azure Blob Storage can store monitoring data exports but is not where Azure Monitor natively stores event data. Option B is incorrect. Azure Storage Queue is for message queuing, not monitoring data storage. Option C is incorrect. Azure SQL Database could store monitoring data via integration but is not the native storage for Azure Monitor. Therefore, D, a Log Analytics workspace, is the correct answer.
Play from 1:30:44 Question 56. A team of developers at your company plans to deploy, and then remove, 50 virtual machines each week. All the virtual machines are configured by using Azure Resource Manager templates. You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines. What should you recommend? Here are the options. Option A. Azure Reserved Virtual Machine (VM) Instances. Option B. Azure DevTest Labs. Option C. Azure virtual machine scale sets. Option D. Azure Virtual Desktop. Pause the video now if you want time to think about the answer.
The correct answer is B. Azure DevTest Labs. Azure DevTest Labs is specifically designed for rapid provisioning and deprovisioning of development and test environments using templates, making it ideal for scenarios where 50 VMs are deployed and removed weekly with minimal administrative overhead. Now, why are the other options incorrect? Option A is incorrect. Reserved VM Instances are for cost optimization of long-running VMs, not for frequent temporary deployments. Option C is incorrect. Virtual machine scale sets are for auto-scaling production workloads, not for managing temporary development/test environments. Option D is incorrect. Azure Virtual Desktop is for hosting user desktops and applications, not for managing temporary development infrastructure. Therefore, B, Azure DevTest Labs, is the correct answer.
Play from 1:32:36 Question 57. Your company hosts an accounting application named App1 that is used by all the customers of the company. App1 has low usage during the first three weeks of each month and very high usage during the last week of each month. Which benefit of Azure Cloud Services supports cost management for this type of usage pattern? Here are the options. Option A. high availability. Option B. high latency. Option C. elasticity. Option D. load balancing. Pause the video now if you want time to think about the answer.
The correct answer is C. elasticity. Elasticity is the cloud's ability to automatically scale resources up or down based on demand. For an application with low usage during the first three weeks and high usage in the final week, elasticity allows automatic provisioning of additional resources during peak periods and scaling down during low-usage periods, directly optimizing costs by matching resource allocation to actual demand. Now, why are the other options incorrect? Option A is incorrect. High availability ensures uptime but does not specifically address cost management for variable usage patterns. Option B is incorrect. High latency is a performance problem, not a cost management benefit. Option D is incorrect. Load balancing distributes traffic across resources but does not automatically scale resources based on demand to manage costs. Therefore, C, elasticity, is the correct answer.
Play from 1:34:27 Question 58. What can you use to automatically send an alert if an administrator stops an Azure virtual machine? Here are the options. Option A. Azure Advisor. Option B. Azure Service Health. Option C. Azure Monitor. Option D. Azure Network Watcher. Pause the video now if you want time to think about the answer.
The correct answer is C. Azure Monitor. Azure Monitor is the comprehensive monitoring service that can track resource state changes and automatically send alerts based on configured conditions, such as when a virtual machine is stopped by an administrator. Now, why are the other options incorrect? Option A is incorrect. Azure Advisor provides recommendations for optimization but doesn't generate alerts for specific resource state changes. Option B is incorrect. Azure Service Health monitors Azure service availability and incidents, not individual resource state changes. Option D is incorrect. Azure Network Watcher monitors and diagnoses network issues, not virtual machine power states. Therefore, C, Azure Monitor, is the correct answer.
Play from 1:35:54 Question 59. Which two features or services can be integrated with Azure Monitor? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point. Here are the options. Option A. Azure status. Option B. Application Insights. Option C. Azure Advisor. Option D. Log Analytics. Option E. Azure Service Health. Pause the video now if you want time to think about the answer.
The correct answers are B. Application Insights, and D. Log Analytics. Application Insights and Log Analytics are both core services that integrate with and feed into Azure Monitor. Application Insights collects application telemetry while Log Analytics stores and queries monitoring data-both are native integrations with Azure Monitor for comprehensive observability. Now, why are the other options incorrect? Option A is incorrect. Azure status shows service health across regions but is not integrated as a feature within Azure Monitor. Option C is incorrect. Azure Advisor provides recommendations but is not integrated as a monitoring feature within Azure Monitor. Option E is incorrect. Azure Service Health monitors subscription-level health but operates separately from Azure Monitor integration. Therefore, B and D are the correct answers.
Play from 1:37:32 Question 60. You have an Azure subscription and 100 Windows 10 devices. You need to ensure that only users whose devices have the latest security patches installed can access Azure Active Directory (Azure AD)integrated applications. What should you implement? Here are the options. Option A. a conditional access policy. Option B. Azure Bastion. Option C. Azure Firewall. Option D. Azure Policy. Pause the video now if you want time to think about the answer.
The correct answer is A. a conditional access policy. Conditional access policies evaluate device compliance (including security patch status) before granting access to Azure AD-integrated applications. You can create a policy requiring that devices meet compliance requirements with the latest security patches installed before allowing sign-in. Now, why are the other options incorrect? Option B is incorrect. Azure Bastion provides secure RDP/SSH access to virtual machines, not device compliance validation. Option C is incorrect. Azure Firewall is a network security service, not a device compliance enforcement mechanism. Option D is incorrect. Azure Policy manages resource governance and compliance, not user device compliance for application access. Therefore, A, a conditional access policy, is the correct answer.
Play from 1:39:17 Question 61. How many data copies are stored in gee-zone-redundant storage (GZRS)? Here are the options. Option A. 2. Option B. 3. Option C. 6. Option D. 12. Pause the video now if you want time to think about the answer.
The correct answer is C. 6. Geo-zone-redundant storage (GZRS) maintains 6 data copies total: 3 copies within the primary region across different availability zones for zone redundancy, and 3 additional copies replicated to a secondary geographic region for disaster recovery. This provides both high availability and geographic resilience. Now, why are the other options incorrect? Option A is incorrect. Two copies is the minimum for basic redundancy but insufficient for GZRS protection. Option B is incorrect. Three copies represents only the primary region copies without geographic redundancy. Option D is incorrect. Twelve copies exceeds the GZRS specification of 6 total copies. Therefore, C, 6, is the correct answer.
Play from 1:40:42 Question 62. You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system. What are three possible solutions? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Here are the options. Option A. Use Bash in Azure Cloud Shell. Option B. Use PowerShell in Azure Cloud Shell. Option C. Use the PowerApps portal. Option D. Use the Security & Compliance admin center. Option E. Use the Azure portal. Pause the video now if you want time to think about the answer.
The correct answers are A. Use Bash in Azure Cloud Shell, and B. Use PowerShell in Azure Cloud Shell, and E. Use the Azure portal. Bash in Cloud Shell, PowerShell in Cloud Shell, and the Azure portal all provide browser-based access and can be used from an Android tablet to create virtual machines. Cloud Shell uses Bash or PowerShell in a browser, and the Azure portal is a complete graphical management interface. Now, why are the other options incorrect? Option C is incorrect. PowerApps portal is for building and running business applications, not for creating Azure virtual machines. Option D is incorrect. The Security & Compliance admin center is for Microsoft 365 security settings, not for Azure resource management. Therefore, A and B and E are the correct answers.
Play from 1:42:30 Question 63. This question requires that you evaluate the underlined text to determine if it is correct. One of the benefits of Azure SQL Data Warehouse is that high availability is built into the platform. Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed`. If the statement is incorrect, select the answer choice that makes the statement correct. Here are the options. Option A. No change is needed. Option B. automatic scaling. Option C. data compression. Option D. versioning. Pause the video now if you want time to think about the answer.
The correct answer is A. No change is needed. The statement is correct as written. Azure SQL Data Warehouse (now Azure Synapse Analytics) includes built-in high availability features such as geo-redundant backups and automatic failover capabilities, making high availability an inherent platform benefit. Now, why are the other options incorrect? Option B is incorrect. Automatic scaling is a feature but is not the primary benefit being referenced in the statement. Option C is incorrect. Data compression is a storage optimization feature, not a high availability benefit. Option D is incorrect. Versioning is not a standard benefit of Azure SQL Data Warehouse. Therefore, A, No change is needed, is the correct answer.
Play from 1:44:12 Question 64. You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized by using Microsoft Power BI. You need to recommend a storage solution for the data. Which two solutions should you recommend? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Here are the options. Option A. Azure Data Lake. Option B. Azure Cosmos DB. Option C. Azure SQL Data Warehouse. Option D. Azure SQL Database. Option E. Azure Database for PostgreSQL. Pause the video now if you want time to think about the answer.
The correct answers are A. Azure Data Lake, and C. Azure SQL Data Warehouse. For 20 TB of infrequently accessed data that will be visualized with Power BI, both Azure Data Lake (A) and Azure SQL Data Warehouse (C) are appropriate. Data Lake provides scalable storage for big data analytics, and SQL Data Warehouse is designed for large-scale data analytics and Power BI integration. Both support Power BI visualization and handle large data volumes efficiently. Now, why are the other options incorrect? Option B is incorrect. Azure Cosmos DB is optimized for operational transactional workloads, not for large-scale infrequent data access and analytics. Option D is incorrect. Azure SQL Database is designed for transactional workloads, not for 20 TB analytics scenarios with Power BI. Option E is incorrect. Azure Database for PostgreSQL is a relational database service suited for transactional applications, not large-scale analytics storage. Therefore, A and C are the correct answers.
Play from 1:46:15 Question 65. What are two benefits of cloud computing? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Here are the options. Option A. enables the rapid provisioning of resources. Option B. has increased administrative complexity. Option C. has the same configuration options as on-premises. Option D. shifts capital expenditures (CAPEX) to operating expenditures (OPEX). Pause the video now if you want time to think about the answer.
The correct answers are A. enables the rapid provisioning of resources, and D. shifts capital expenditures (CAPEX) to operating expenditures (OPEX). Cloud computing enables rapid provisioning of resources because infrastructure is already available and can be deployed quickly without physical hardware procurement. It also shifts capital expenditures (CAPEX) to operating expenditures (OPEX), meaning organizations pay for usage rather than investing in expensive hardware purchases upfront. Now, why are the other options incorrect? Option B is incorrect. Cloud computing actually reduces administrative complexity by offloading management tasks to the cloud provider, not increasing it. Option C is incorrect. Cloud computing provides more flexible and diverse configuration options than typical on-premises environments, not the same options. Therefore, A and D are the correct answers.
Play from 1:48:08 Question 66. Your company plans to start using Azure and will migrate all its network resources to Azure. You need to start the planning process by exploring Azure. What should you create first? Here are the options. Option A. a subscription. Option B. a resource group. Option C. a virtual network. Option D. a management group. Pause the video now if you want time to think about the answer.
The correct answer is A. a subscription. An Azure subscription is the foundational requirement and must be created first before any other Azure resources can be deployed. A subscription is the billing and access control boundary for all Azure resources. Resource groups are created within subscriptions, virtual networks are created within resource groups, and management groups organize subscriptions, so all come after the subscription is established. Now, why are the other options incorrect? Option B is incorrect. Resource groups are created within a subscription and cannot exist without one. Option C is incorrect. Virtual networks are created within resource groups, which require a subscription first. Option D is incorrect. Management groups organize subscriptions but a subscription must exist to be managed. Therefore, A, a subscription, is the correct answer.
Play from 1:49:43 Question 67. You have an Azure Storage account named storage1. You need to ensure that containers can be created in, but not deleted from, storage1. What should you do? Here are the options. Option A. Create a ReadOnly lock for storage1. Option B. Create a delete lock for storage1. Option C. Enable container soft delete. Option D. Enable blob soft delete. Pause the video now if you want time to think about the answer.
The correct answer is B. Create a delete lock for storage1. A delete lock (CanNotDelete) prevents deletion of a resource while still allowing modifications and creation of new resources. This meets the requirement perfectly-containers can be created but not deleted. A ReadOnly lock would prevent all modifications including creation. Soft delete options recover deleted items but don't prevent deletion in the first place. Now, why are the other options incorrect? Option A is incorrect. A ReadOnly lock would prevent container creation, which violates the requirement. Option C is incorrect. Container soft delete allows containers to be deleted; it only enables recovery within a retention period. Option D is incorrect. Blob soft delete applies to individual blobs, not containers, and still permits deletion. Therefore, B, Create a delete lock for storage1, is the correct answer.
Play from 1:51:24 Question 68. Your company has 10 offices. You plan to generate several billing reports from the Azure portal. Each report will contain the Azure resource utilization of each office. Which Azure Resource Manager feature should you use before you generate the reports? Here are the options. Option A. tags. Option B. templates. Option C. locks. Option D. policies. Pause the video now if you want time to think about the answer.
The correct answer is A. tags. Tags are key-value metadata applied to Azure resources that enable organization, billing tracking, and reporting by business dimensions like office location, department, or cost center. By tagging resources from each office, you can generate billing reports filtered by office, making tags the ideal feature for organizing resources by office for reporting purposes. Now, why are the other options incorrect? Option B is incorrect. Templates are used to deploy resources, not to organize existing resources for reporting. Option C is incorrect. Locks prevent accidental deletion or modification but do not help organize resources for reporting. Option D is incorrect. Policies enforce compliance rules but are not used to organize resources for reporting purposes. Therefore, A, tags, is the correct answer.
Play from 1:53:04 Question 69. You have an Azure subscription. You need to review your secure score. What should you use? Here are the options. Option A. Azure Monitor. Option B. Azure Advisor. Option C. Help + support. Option D. Microsoft Defender for Cloud. Pause the video now if you want time to think about the answer.
The correct answer is D. Microsoft Defender for Cloud. Microsoft Defender for Cloud is the Azure service that provides secure score functionality, which helps you understand your security posture and recommendations to improve it. It displays a numerical representation of your security health across your Azure resources. Now, why are the other options incorrect? Option A is incorrect. Azure Monitor is for collecting and analyzing telemetry data, not for security scoring. Option B is incorrect. Azure Advisor provides general optimization recommendations but not security scoring. Option C is incorrect. Help + support is for getting customer support, not for reviewing security metrics. Therefore, D, Microsoft Defender for Cloud, is the correct answer.
Play from 1:54:29 Question 70. What should a desktop application use to interact with Azure and manage resources? Here are the options. Option A. APIs. Option B. Azure Resource Manager (ARM) templates. Option C. Azure Command-Line Interface (CLI). Option D. Azure Cloud Shell. Pause the video now if you want time to think about the answer.
The correct answer is A. APIs. Desktop applications interact with Azure through APIs, either directly via REST APIs or through Azure SDKs that wrap those APIs. This allows programmatic resource management and interaction from any desktop platform. ARM templates and CLI are infrastructure-as-code tools for declarative deployment, while Cloud Shell is a browser-based tool. Now, why are the other options incorrect? Option B is incorrect. ARM templates are declarative infrastructure-as-code files, not what applications use for runtime interaction. Option C is incorrect. Azure CLI is a command-line tool primarily for human operators, not the standard integration method for desktop applications. Option D is incorrect. Azure Cloud Shell is a browser-based interactive shell, not a mechanism for desktop applications to interact with Azure. Therefore, A, APIs, is the correct answer.
Play from 1:56:08 Question 71. Your company has an Azure subscription that contains resources in several regions. You need to create the Azure resource that must be used to meet the policy requirement. What should you create? Here are the options. Option A. a read-only lock. Option B. an Azure policy. Option C. a management group. Option D. a reservation. Pause the video now if you want time to think about the answer.
The correct answer is B. an Azure policy. An Azure policy is the resource specifically designed to meet policy requirements across resources in multiple regions. Azure policies allow you to define and enforce standards, such as naming conventions, allowed resource types, and compliance requirements, that apply consistently across your Azure subscription. Now, why are the other options incorrect? Option A is incorrect. A read-only lock prevents modifications but does not enforce policy requirements. Option C is incorrect. A management group is used for organizing subscriptions and applying policies at scale, but the direct answer for meeting policy requirements is the policy itself. Option D is incorrect. A reservation is for purchasing compute capacity at a discount, unrelated to policy requirements. Therefore, B, an Azure policy, is the correct answer.
Play from 1:57:42 Question 72. How many copies of data are maintained by an Azure Storage account that uses locally-redundant storage (LRS)? Here are the options. Option A. 3. Option B. 4. Option C. 6. Option D. 9. Pause the video now if you want time to think about the answer.
The correct answer is A. 3. Locally-redundant storage (LRS) maintains 3 copies of data within a single data center. These copies are distributed across different fault domains and update domains to protect against hardware failures within that single location. Now, why are the other options incorrect? Option B is incorrect. 4 copies is not the standard for LRS; this would be more typical of other redundancy options. Option C is incorrect. 6 copies represents geo-redundant storage with read access (RA-GRS), not LRS. Option D is incorrect. 9 copies is not used in Azure Storage redundancy models. Therefore, A, 3, is the correct answer.
Play from 1:59:00 Question 73. You plan to provision Infrastructure as a Service (IaaS) resources in Azure. Which resource is an example of IaaS? Here are the options. Option A. an Azure web app. Option B. an Azure virtual machine. Option C. an Azure logic app. Option D. an Azure SQL database. Pause the video now if you want time to think about the answer.
The correct answer is B. an Azure virtual machine. An Azure virtual machine is a classic example of Infrastructure as a Service (IaaS). IaaS provides virtualized computing resources over the internet where customers manage the OS, applications, and data while the cloud provider manages the infrastructure. Now, why are the other options incorrect? Option A is incorrect. An Azure web app is a Platform as a Service (PaaS) offering where the platform handles infrastructure and OS management. Option C is incorrect. An Azure logic app is a Platform as a Service (PaaS) offering for workflow automation. Option D is incorrect. An Azure SQL database is a Platform as a Service (PaaS) offering where the service manages database infrastructure and maintenance. Therefore, B, an Azure virtual machine, is the correct answer.
Play from 2:00:35 Question 74. What provides a unified way to project and manage non-Azure resources in Azure Resource Manager (ARM)? Here are the options. Option A. Azure Migrate. Option B. Azure AD Connect. Option C. Azure Arc. Option D. Azure Front Door. Pause the video now if you want time to think about the answer.
The correct answer is C. Azure Arc. Azure Arc extends Azure Resource Manager capabilities to manage resources outside of Azure, including on-premises servers, multi-cloud environments, and edge devices. It provides a unified way to project and manage non-Azure resources as if they were Azure resources. Now, why are the other options incorrect? Option A is incorrect. Azure Migrate is used to assess and migrate workloads to Azure, not to manage non-Azure resources in ARM. Option B is incorrect. Azure AD Connect synchronizes on-premises identities with Azure AD but doesn't manage non-Azure resources in ARM. Option D is incorrect. Azure Front Door is a content delivery and load balancing service, not a resource management solution. Therefore, C, Azure Arc, is the correct answer.
Play from 2:02:09 Question 75. What are two characteristics of the public cloud? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Here are the options. Option A. dedicated hardware. Option B. unsecured connections. Option C. limited storage. Option D. metered pricing. Option E. self-service management. Pause the video now if you want time to think about the answer.
The correct answers are D. metered pricing, and E. self-service management. Public clouds are characterized by metered pricing, where customers pay only for resources consumed, and self-service management, allowing users to provision and manage resources independently without vendor intervention. Dedicated hardware is a private cloud characteristic, unsecured connections are not inherent to public clouds (security depends on implementation), and storage limitations are not a defining feature of public clouds. Now, why are the other options incorrect? Option A is incorrect. Dedicated hardware is a private cloud characteristic, not public cloud. Option B is incorrect. Unsecured connections are not a characteristic of public clouds; security depends on implementation. Option C is incorrect. Public clouds typically offer virtually unlimited scalable storage, not limited storage. Therefore, D and E are the correct answers.
Play from 2:03:52 Question 76. In which Azure support plans can you open a new support request? Here are the options. Option A. Premier and Professional Direct only. Option B. Premier, Professional Direct, and Standard only. Option C. Premier, Professional Direct, Standard, and Developer only. Option D. Premier, Professional Direct, Standard, Developer, and Basic. Pause the video now if you want time to think about the answer.
The correct answer is D. Premier, Professional Direct, Standard, Developer, and Basic. All Azure support plans, including Premier, Professional Direct, Standard, Developer, and Basic, allow customers to open new support requests. Even the Basic plan, which is free, permits opening support requests, though with limitations on response times and support channels. There are no restrictions that limit support request creation to only certain premium plans. Now, why are the other options incorrect? Option A is incorrect. Standard, Developer, and Basic plans also allow support requests to be opened. Option B is incorrect. Developer and Basic plans also allow support requests to be opened. Option C is incorrect. The Basic plan also allows support requests to be opened. Therefore, D, Premier, Professional Direct, Standard, Developer, and Basic, is the correct answer.
Play from 2:05:36 Question 77. You need to collect and automatically analyze security events from Azure Active Directory (Azure AD). What should you use? Here are the options. Option A. Azure Sentinel. Option B. Azure Synapse Analytics. Option C. Azure AD Connect. Option D. Azure Key Vault. Pause the video now if you want time to think about the answer.
The correct answer is A. Azure Sentinel. Azure Sentinel is Microsoft's cloud-native SIEM (Security Information and Event Management) solution that collects, detects, investigates, and responds to security events across Azure AD and other sources. It automatically analyzes security events and provides threat intelligence. Azure Synapse Analytics is for data warehousing, Azure AD Connect synchronizes on-premises identity data, and Key Vault manages secrets-none are designed for security event analysis. Now, why are the other options incorrect? Option B is incorrect. Azure Synapse Analytics is a data warehousing platform, not a security event analysis tool. Option C is incorrect. Azure AD Connect synchronizes on-premises and cloud identities, not for analyzing security events. Option D is incorrect. Azure Key Vault manages cryptographic keys and secrets, not security event analysis. Therefore, A, Azure Sentinel, is the correct answer.
Play from 2:07:20 Question 78. What is the most severe failure from which an Azure Availability Zone can be used to protect access to Azure service? Here are the options. Option A. a physical server failure. Option B. an Azure region failure. Option C. a storage failure. Option D. an Azure data center failure. Pause the video now if you want time to think about the answer.
The correct answer is D. an Azure data center failure. An Azure Availability Zone can protect against an Azure data center failure, which is the most severe failure it addresses. Availability Zones are three or more physically separate data centers within a single region. Physical server failures (A) are addressed by other mechanisms like redundancy. Storage failures (C) are handled by replication. Region failures (B) cannot be protected by zones since they are within a single region; region-level protection requires multi-region deployment. Now, why are the other options incorrect? Option A is incorrect. Physical server failures are addressed at a level below zones through built-in redundancy. Option B is incorrect. Region failures are beyond the scope of Availability Zones, which operate within a single region. Option C is incorrect. Storage failures are typically addressed through storage replication, not Availability Zones. Therefore, D, an Azure data center failure, is the correct answer.
Play from 2:09:08 Question 79. What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines? Here are the options. Option A. uptime. Option B. feature availability. Option C. bandwidth. Option D. performance. Pause the video now if you want time to think about the answer.
The correct answer is A. uptime. Azure Service Level Agreements guarantee uptime for virtual machines. Azure typically guarantees 99.9% uptime for VMs with premium storage or 99.95% for VMs across availability zones. Uptime is the measurable, contractual commitment that Azure provides in its SLAs. Now, why are the other options incorrect? Option B is incorrect. Feature availability is not guaranteed in SLAs; features may change or be modified. Option C is incorrect. Bandwidth is not specified in VM SLAs as a guaranteed metric. Option D is incorrect. Performance metrics are not directly guaranteed in SLAs; uptime is the primary guarantee. Therefore, A, uptime, is the correct answer.
Play from 2:10:32 Question 80. Which Service Level Agreement (SLA) is provided for Azure services in public preview? Here are the options. Option A. Each service defines its own SLA. Option B. The SLA will be 99%. Option C. The SLA will be 1% less than the general availability (GA) SLA. Option D. The SLA will be 99.95%. Pause the video now if you want time to think about the answer.
The correct answer is A. Each service defines its own SLA. Azure services in public preview do not have a standard SLA guarantee. Instead, each service that is in public preview defines its own specific Service Level Agreement terms, which may vary significantly from service to service. Some preview services may have no SLA at all, while others might define specific terms. This is why each service must be evaluated individually rather than applying a uniform SLA percentage. Now, why are the other options incorrect? Option B is incorrect. A fixed 99% SLA is not applied universally to public preview services. Option C is incorrect. There is no standard formula of reducing GA SLA by 1% for preview services. Option D is incorrect. A fixed 99.95% SLA is not guaranteed for public preview services. Therefore, A, Each service defines its own SLA, is the correct answer.
Play from 2:12:19 Question 81. Which statement accurately describes the Modern Lifecycle Policy for Azure services? Here are the options. Option A. Microsoft provides mainstream support for a service for five years. Option B. Microsoft provides a minimum of 12 months' notice before ending support for a service. Option C. After a service is made generally available, Microsoft provides support for the service for a minimum of four years. Option D. When a service is retired, you can purchase extended support for the service for up to five years. Pause the video now if you want time to think about the answer.
The correct answer is B. Microsoft provides a minimum of 12 months' notice before ending support for a service. The Modern Lifecycle Policy guarantees that Microsoft will provide a minimum of 12 months' notice before ending support for an Azure service. This is a key component of the policy that ensures customers have adequate time to plan migrations. Now, why are the other options incorrect? Option A is incorrect. Mainstream support duration varies by service and is not fixed at five years. Option C is incorrect. While there is a minimum support period, four years is not the accurate guaranteed minimum for all services. Option D is incorrect. Extended support cannot typically be purchased as an option for retired Azure services. Therefore, B, Microsoft provides a minimum of 12 months' notice before ending support for a service, is the correct answer.
Play from 2:14:07 Question 82. You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region. Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1? Here are the options. Option A. Azure Service Fabric. Option B. Azure Monitor. Option C. Azure virtual machines. Option D. Azure Advisor. Pause the video now if you want time to think about the answer.
The correct answer is B. Azure Monitor. Azure Monitor is the correct service to use for viewing service failure notifications and service health alerts that can affect VM availability. It provides comprehensive health monitoring, alerts, and notifications about platform-level issues and service disruptions. Azure Monitor displays Azure Service Health, which specifically tracks service failures and maintenance events that could impact your resources. Now, why are the other options incorrect? Option A is incorrect. Azure Service Fabric is for building and managing microservices applications, not for monitoring service health notifications. Option C is incorrect. The Azure virtual machines blade manages VM instances but does not provide service-wide failure notifications. Option D is incorrect. Azure Advisor provides recommendations for optimization and best practices, not real-time service failure notifications. Therefore, B, Azure Monitor, is the correct answer.
Play from 2:16:04 Question 83. Your company has several business units. Each business unit requires 20 different Azure resources for daily operation. All the business units require the same type of Azure resources. You need to recommend a solution to automate the creation of the Azure resources. What should you include in the recommendations? Here are the options. Option A. Azure Resource Manager templates. Option B. virtual machine scale sets. Option C. the Azure API Management service. Option D. management groups. Pause the video now if you want time to think about the answer.
The correct answer is A. Azure Resource Manager templates. Azure Resource Manager (ARM) templates enable infrastructure-as-code, allowing automated creation and deployment of identical sets of resources. Templates can be reused across multiple business units to consistently provision the same 20 resources. Virtual machine scale sets manage VM instances rather than diverse resource types, API Management is for API governance, and management groups organize subscriptions. Now, why are the other options incorrect? Option B is incorrect. Virtual machine scale sets are specifically for managing multiple identical VMs, not for provisioning diverse resource types needed across business units. Option C is incorrect. Azure API Management is for managing APIs and integration, not for automating the creation of general Azure resources. Option D is incorrect. Management groups organize subscriptions hierarchically but do not automate resource creation or deployment. Therefore, A, Azure Resource Manager templates, is the correct answer.
Play from 2:18:06 Question 84. You have a web app that runs in Azure. You need to identify the amount of time it takes for web pages to load in a user's browser. What should you use? Here are the options. Option A. Azure Monitor alerts. Option B. Application Insights in Azure Monitor. Option C. Log Analytics. Option D. Azure Network Watcher. Pause the video now if you want time to think about the answer.
The correct answer is B. Application Insights in Azure Monitor. Application Insights in Azure Monitor specifically tracks client-side browser performance metrics including page load times, client-side exceptions, and AJAX dependencies. It uses JavaScript instrumentation to measure actual user experience and browser rendering times, which is exactly what the question asks for. Now, why are the other options incorrect? Option A is incorrect. Azure Monitor alerts are for triggering notifications based on threshold conditions, not for measuring page load times. Option C is incorrect. Log Analytics is a query engine for log data but doesn't specifically track browser page load performance metrics. Option D is incorrect. Azure Network Watcher monitors network connectivity and traffic patterns, not browser-side page rendering times. Therefore, B, Application Insights in Azure Monitor, is the correct answer.
Play from 2:19:50 Question 85. To what should an application connect to retrieve security tokens? Here are the options. Option A. an Azure Storage account. Option B. Azure Active Directory (Azure AD). Option C. a certificate store. Option D. an Azure key vault. Pause the video now if you want time to think about the answer.
The correct answer is B. Azure Active Directory (Azure AD). Applications connect to Azure Active Directory (Azure AD) to retrieve security tokens for authentication and authorization. Azure AD acts as the identity provider and issues tokens that applications use to authenticate users and validate their identities. Now, why are the other options incorrect? Option A is incorrect. Azure Storage accounts are for data storage, not token issuance. Option C is incorrect. Certificate stores hold certificates locally but are not the central source for security tokens in Azure cloud scenarios. Option D is incorrect. Azure Key Vault stores secrets and keys but is not the primary service for retrieving authentication tokens; that is Azure AD's role. Therefore, B, Azure Active Directory (Azure AD), is the correct answer.
Play from 2:21:19 Question 86. Your company has 10 departments. The company plans to implement an Azure environment. You need to ensure that each department can use a different payment option for the Azure services it consumes. What should you create for each department? Here are the options. Option A. a reservation. Option B. a subscription. Option C. a resource group. Option D. a container instance. Pause the video now if you want time to think about the answer.
The correct answer is B. a subscription. Each Azure subscription has its own billing and payment method. Creating separate subscriptions for each department allows them to use different payment options independently while maintaining separate cost tracking and billing. Now, why are the other options incorrect? Option A is incorrect. Reservations are for prepaying for resources, not for managing department payment methods. Option C is incorrect. Resource groups share the same subscription and billing method. Option D is incorrect. Container instances are compute resources, not billing entities. Therefore, B, a subscription, is the correct answer.
Play from 2:22:46 Question 87. This question requires that you evaluate the underlined text to determine if it is correct. You can create an Azure support request from support.microsoft.com. Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed.` If the statement is incorrect, select the answer choice that makes the statement correct. Here are the options. Option A. No change is needed. Option B. the Azure portal. Option C. the Knowledge Center. Option D. the Security & Compliance admin center. Pause the video now if you want time to think about the answer.
The correct answer is B. the Azure portal. Azure support requests are created through the Azure portal, not through support.microsoft.com. The Azure portal provides the official interface for managing support requests, accessing support history, and managing your Azure subscription. While support.microsoft.com exists for general support information, the actual request creation happens in the portal. Now, why are the other options incorrect? Option A is incorrect. support.microsoft.com is not the correct location for creating Azure support requests. Option C is incorrect. The Knowledge Center is for finding information, not creating support requests. Option D is incorrect. The Security & Compliance admin center is unrelated to Azure support request creation. Therefore, B, the Azure portal, is the correct answer.
Play from 2:24:35 Question 88. You have an Azure subscription. You need to use Azure Cloud Shell to run a deployment script. What should you use to access Cloud Shell? Here are the options. Option A. Azure Resource Manager (ARM). Option B. Microsoft Visual Studio. Option C. a Windows command prompt. Option D. a web browser. Pause the video now if you want time to think about the answer.
The correct answer is D. a web browser. Azure Cloud Shell is a browser-based shell accessible directly through the Azure Portal or any standard web browser. Users navigate to portal.azure.com and access Cloud Shell without installing additional software. It's designed for cloud-native access without requiring local tools. Now, why are the other options incorrect? Option A is incorrect. Azure Resource Manager is an Azure service framework, not a means to access Cloud Shell. Option B is incorrect. While Visual Studio can integrate with Azure, it's not the primary method for accessing Cloud Shell. Option C is incorrect. Windows command prompt cannot directly access Cloud Shell; a browser is required. Therefore, D, a web browser, is the correct answer.
Play from 2:25:59 Question 89. Your company plans to migrate all on-premises data to Azure. You need to identify whether Azure complies with the company's regional requirements. What should you use? Here are the options. Option A. the Knowledge Center. Option B. Azure Marketplace. Option C. the MyApps portal. Option D. the Trust Center. Pause the video now if you want time to think about the answer.
The correct answer is D. the Trust Center. The Trust Center is the appropriate resource for identifying whether Azure complies with regional requirements and data residency standards. It provides detailed information about Microsoft's compliance certifications, data residency options, regional availability, and how Azure meets various regulatory requirements by region. Now, why are the other options incorrect? Option A is incorrect. The Knowledge Center provides general Azure documentation but not detailed regional compliance information. Option B is incorrect. Azure Marketplace is for purchasing third-party solutions and services, not for reviewing regional compliance. Option C is incorrect. The MyApps portal is for accessing assigned cloud applications, unrelated to regional compliance verification. Therefore, D, the Trust Center, is the correct answer.
Play from 2:27:42 Question 90. You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password. Which Azure service should you use? Here are the options. Option A. Azure AD Connect Health. Option B. Azure AD Privileged Identity Management. Option C. Azure Advanced Threat Protection (ATP). Option D. Azure AD Identity Protection. Pause the video now if you want time to think about the answer.
The correct answer is D. Azure AD Identity Protection. Azure AD Identity Protection is the service designed to detect risky sign-ins (such as those from anonymous IP addresses) and automatically prompt users to change their passwords or complete additional verification. It uses machine learning to identify risk events and enforce remediation policies. Now, why are the other options incorrect? Option A is incorrect. Azure AD Connect Health monitors the health of on-premises AD infrastructure, not user sign-in risk detection. Option B is incorrect. Privileged Identity Management manages access to privileged roles, not general user authentication risks. Option C is incorrect. Advanced Threat Protection focuses on threat detection in the hybrid environment but is not the primary service for anonymous IP sign-in remediation. Therefore, D, Azure AD Identity Protection, is the correct answer.
Play from 2:29:36 Question 91. Your company has an Azure subscription that contains the following unused resources: • 20 user accounts in Azure Active Directory (Azure AD) • Five groups in Azure AD • 10 public IP addresses • 10 network interfaces You need to reduce the Azure costs for the company. Which unused resources should you remove? Here are the options. Option A. the network interfaces. Option B. the public IP addresses. Option C. the groups. Option D. the user accounts. Pause the video now if you want time to think about the answer.
The correct answer is B. the public IP addresses. Unused public IP addresses incur charges even when not associated with resources. Removing them directly reduces Azure costs. User accounts and groups in Azure AD are typically free, and network interfaces attached to resources are necessary for operation. Now, why are the other options incorrect? Option A is incorrect. Network interfaces are necessary for virtual machine connectivity and should not be removed. Option C is incorrect. Azure AD groups do not typically incur direct costs. Option D is incorrect. Azure AD user accounts do not typically incur direct costs. Therefore, B, the public IP addresses, is the correct answer.
Play from 2:31:17 Question 92. What should you use to prevent traffic from an Azure virtual network from being routed to an Azure Storage account via the internet? Here are the options. Option A. a network security group (NSG). Option B. a public endpoint. Option C. Azure VPN Gateway. Option D. a service endpoint. Pause the video now if you want time to think about the answer.
The correct answer is D. a service endpoint. Service endpoints enable you to secure Azure service resources to only your virtual network, preventing internet routing. When you configure a service endpoint for Azure Storage, traffic from your VNet to the storage account stays within the Azure backbone network rather than routing through the internet. This is the specific mechanism designed for this security requirement. Now, why are the other options incorrect? Option A is incorrect. NSGs filter traffic but don't prevent routing through the internet; they work at a different layer of network control. Option B is incorrect. Public endpoints expose storage to the internet, which is the opposite of what's needed. Option C is incorrect. VPN Gateway encrypts traffic but doesn't prevent it from routing via the internet. Therefore, D, a service endpoint, is the correct answer.
Play from 2:32:55 Question 93. What is an example of vertical scaling in a cloud environment? Here are the options. Option A. adding an additional CPU to an existing Azure virtual machine. Option B. adding an additional Azure virtual machine. Option C. adding an additional Azure Virtual Desktop session host. Option D. adding an additional Azure App Service instance automatically. Pause the video now if you want time to think about the answer.
The correct answer is A. adding an additional CPU to an existing Azure virtual machine. Vertical scaling involves adding more resources (CPU, RAM, etc.) to an existing machine to increase its capacity. Adding a CPU to an existing Azure VM is a classic example of making a single resource more powerful rather than adding more resources. Now, why are the other options incorrect? Option B is incorrect. Adding another VM is horizontal scaling, not vertical scaling. Option C is incorrect. Adding another Virtual Desktop session host is horizontal scaling, adding more instances rather than upgrading a single instance. Option D is incorrect. Adding an additional App Service instance automatically is horizontal scaling through auto-scale functionality. Therefore, A, adding an additional CPU to an existing Azure virtual machine, is the correct answer.
Play from 2:34:32 Question 94. You have an on-premises network that contains 100 servers. You need to recommend a solution that provides additional resources to your users. The solution must minimize capital and operational expenditure costs. What should you include in the recommendation? Here are the options. Option A. a complete migration to the public cloud. Option B. an additional data center. Option C. a private cloud. Option D. a hybrid cloud. Pause the video now if you want time to think about the answer.
The correct answer is D. a hybrid cloud. A hybrid cloud combines on-premises infrastructure with public cloud resources, minimizing both capital and operational expenditure. It allows the company to keep existing on-premises servers while extending capacity with public cloud resources as needed, avoiding the high costs of building a new data center or complete migration, while managing costs more efficiently than a private cloud. Now, why are the other options incorrect? Option A is incorrect. Complete migration to public cloud eliminates capital expenditure but increases operational costs and may not be necessary. Option B is incorrect. Building an additional data center requires significant capital expenditure and ongoing operational costs. Option C is incorrect. A private cloud requires substantial capital investment in infrastructure and specialized staff for management. Therefore, D, a hybrid cloud, is the correct answer.
Play from 2:36:19 Question 95. You need to configure an Azure solution that meets the following requirements: • Secures websites from attacks • Generates reports that contain details of attempted attacks What should you include in the solution? Here are the options. Option A. Azure Firewall. Option B. a network security group (NSG). Option C. Azure Information Protection. Option D. DDoS protection. Pause the video now if you want time to think about the answer.
The correct answer is D. DDoS protection. DDoS protection secures websites from Distributed Denial of Service attacks and generates detailed reports of attempted attacks. It provides both protection against volumetric, protocol, and application-layer attacks, along with comprehensive attack analytics. Now, why are the other options incorrect? Option A is incorrect. Azure Firewall filters traffic but is not primarily designed for DDoS attack protection and reporting. Option B is incorrect. Network security groups filter traffic at the network level but do not provide DDoS-specific protection or detailed attack reports. Option C is incorrect. Azure Information Protection is for data classification and protection, not for website attack defense. Therefore, D, DDoS protection, is the correct answer.
Play from 2:38:02 Question 96. Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks? Here are the options. Option A. Azure Firewall. Option B. an application security group. Option C. Azure DDoS protection. Option D. a network security group (NSG). Pause the video now if you want time to think about the answer.
The correct answer is A. Azure Firewall. Azure Firewall provides centralized network traffic filtering and protection across multiple Azure subscriptions and virtual networks. It operates at the network layer and can be deployed as a managed service to protect traffic across subscriptions. Network Security Groups work at individual subnet/NIC level and are subscription-specific. Application Security Groups organize resources for rule management but don't filter across subscriptions. Azure DDoS protection focuses on DDoS mitigation, not general traffic filtering. Now, why are the other options incorrect? Option B is incorrect. Application Security Groups are used to group resources for simplified rule management within a subscription, not for cross-subscription filtering. Option C is incorrect. Azure DDoS protection specifically protects against DDoS attacks, not for general network traffic filtering across subscriptions. Option D is incorrect. Network Security Groups operate at the individual subnet and NIC level and are scoped to a single subscription. Therefore, A, Azure Firewall, is the correct answer.
Play from 2:39:56 Question 97. Your company plans to deploy several million sensors that will upload data to Azure. You need to identify which Azure resources must be created to support the planned solution. Which two Azure resources should you identify? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Here are the options. Option A. Azure Data Lake. Option B. Azure Queue storage. Option C. Azure File Storage. Option D. Azure IoT Hub. Option E. Azure Notification Hubs. Pause the video now if you want time to think about the answer.
The correct answers are A. Azure Data Lake, and D. Azure IoT Hub. For millions of sensors uploading data to Azure, you need Azure IoT Hub to ingest and manage the IoT device connections and telemetry data, and Azure Data Lake to store the massive volumes of structured and unstructured data collected from the sensors. Now, why are the other options incorrect? Option B is incorrect. Queue Storage is for message queuing between services, not the primary storage for sensor data. Option C is incorrect. File Storage is for shared file access via SMB protocol, not optimized for IoT sensor data ingestion. Option E is incorrect. Notification Hubs is for sending push notifications to mobile apps, not for collecting IoT sensor data. Therefore, A and D are the correct answers.
Play from 2:41:47 Question 98. You attempt to create several managed Microsoft SQL Server instances in an Azure environment and receive a message that you must increase your Azure subscription limits. What should you do to increase the limits? Here are the options. Option A. Create a service health alert. Option B. Upgrade your support plan. Option C. Modify an Azure policy. Option D. Create a new support request. Pause the video now if you want time to think about the answer.
The correct answer is D. Create a new support request. To increase Azure subscription limits, you must create a new support request. Azure subscription limits are set quotas that can only be modified by Microsoft support after review of your request and justification. Support requests are the official mechanism for requesting limit increases on resources like managed SQL Server instances, compute cores, and other Azure services. Now, why are the other options incorrect? Option A is incorrect. A service health alert monitors the status of Azure services but does not increase subscription limits. Option B is incorrect. Upgrading your support plan may improve support response time but does not directly increase resource limits. Option C is incorrect. Azure policies are used to enforce compliance and resource governance, not to increase subscription limits. Therefore, D, Create a new support request, is the correct answer.
Play from 2:43:31 Question 99. In the software as a service (SaaS) cloud service, which responsibility is shared between Microsoft and the customer? Here are the options. Option A. identity and directory infrastructure management. Option B. application management. Option C. information and data management. Option D. operating system updates. Pause the video now if you want time to think about the answer.
The correct answer is A. identity and directory infrastructure management. In SaaS, identity and directory infrastructure management is a shared responsibility. Microsoft provides Azure AD and manages the core infrastructure, but customers are responsible for configuring policies, managing user assignments, and integrating with their organizational requirements. Now, why are the other options incorrect? Option B is incorrect. Application management is solely the customer's responsibility in SaaS; Microsoft manages the platform. Option C is incorrect. Information and data management is the customer's responsibility; they control their data in SaaS. Option D is incorrect. Operating system updates are Microsoft's responsibility; customers never manage OS updates in SaaS. Therefore, A, identity and directory infrastructure management, is the correct answer.
Play from 2:45:12 Question 100. You have an Azure virtual machine named VM1. You plan to encrypt VM1 by using Azure Disk Encryption. Which Azure resource must you create first? Here are the options. Option A. an Azure Storage account. Option B. an Azure Key Vault. Option C. an Azure Information Protection policy. Option D. an Encryption key. Pause the video now if you want time to think about the answer.
The correct answer is B. an Azure Key Vault. Azure Key Vault must be created first before implementing Azure Disk Encryption. The Key Vault stores the encryption keys used to encrypt the VM's disks. Azure Storage accounts are not required for disk encryption. Azure Information Protection is for data classification, not disk encryption. While an encryption key is needed, it is generated and stored within the Key Vault, so the vault must exist first. Now, why are the other options incorrect? Option A is incorrect. An Azure Storage account is not required for Azure Disk Encryption. Option C is incorrect. Azure Information Protection policy is for data classification and protection, not for disk encryption. Option D is incorrect. An encryption key must be stored in a Key Vault, so the vault must be created first before the key can be generated. Therefore, B, an Azure Key Vault, is the correct answer.
