Question 1: Correct

Your company has a set of resources defined as part of a subscription. If they delete a
resource group, would the resources in the resource group also get deleted?

A. Yes

(Correct)

B. No
Explanation
Answer : A

Yes, if you delete a resource group, all of the underlying resources also get deleted.

For more information on Azure resources , please visit the below URL

 https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/
overview
Question 2: Correct
A company has just set an Azure Free account. Is it TRUE that only Azure virtual machines
and Azure storage accounts can be deployed to the Azure Free Account?

A. Yes

B. No

(Correct)

Explanation
Answer : B

With the Azure Free Account , you can choose to use other Azure services as well. You are
not limited to just the Azure virtual machine or the Azure storage account service.

For more information on the Azure Free account , please visit the below URL

 https://azure.microsoft.com/en-us/free/
 Question 3: Correct
Your company has a set of resources defined as part of a subscription. Is it TRUE that Azure
resources can only access other resources in the same resource group?

A. Yes

B. No

(Correct)

Explanation
Answer : B

Azure resources can access resources that are in other resource groups as well.

For more information on Azure resources , please visit the below URL

 https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/
overview
Question 4: Incorrect
A company wants to create an Azure virtual machine as part of their subscription. Can the
Azure virtual machine be a part of multiple resource groups?

A. Yes

(Incorrect)

B. No

(Correct)

Explanation
Answer : B

A resource in Azure can only be a part of a single resource group. When you define a
resource such as an Azure virtual machine, it would be part of a single resource group.

For more information on Azure resources and resource groups, please visit the below URL
  https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/
overview
Question 5: Incorrect
Your company has a set of resources and resource groups defined as part of a subscription.
Can you nest resource groups in Azure?

A. Yes

(Incorrect)

B. No

(Correct)

Explanation
Answer : B

You cannot nest resource groups together.

For more information on Azure resources and resource groups, please visit the below URL

 https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/
overview
Question 6: Correct
You have to specify whether the following statement is TRUE or FALSE

“General Data Protection Regulation (GDPR) define data protection and privacy rules”

A. True

(Correct)

B. False
Explanation
Answer: A
The entire idea of the General Data Protection Regulation is to define the way personal data
is collected and managed by organizations. Companies are required to perform Data
Protection Impact Assessments to ensure that they comply with the regulation.

For more information on General Data Protection Regulation, please visit the below URL

 https://docs.microsoft.com/en-us/microsoft-365/compliance/gdpr?view=o365-
worldwide
Question 7: Incorrect
You have data that is stored in the Archive access tier of an Azure Storage account. Which of
the following must be done before you can access the data in the storage account?

A. The data must be restored

B. The data must be backed up with Azure Backup

C. The data needs to be copied by using the azcopy.exe tool

(Incorrect)

D. The data needs to be rehydrated

(Correct)

Explanation
Answer : D

When you have an object in the archive access tier, in order to access the object, it needs to
be rehydrated.

 Option A is incorrect because the data needs to be rehydrated and not restored
 Option B is incorrect because we don’t need to back up the data
 Option C is incorrect because we can’t access objects in the archive access tier

For more information on Storage Access tiers, please visit the below URL

 https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?
tabs=azure-portal
 Question 8: Correct
In which of the following services would you enable "just-in-time VM access"?

A. Azure Bastion

B. Azure Firewall

C. Azure Front Door

D. Azure Security Center

(Correct)

Explanation
Answer : D

You can enable JIT VM access with your custom options for one or more VMs
using Defender for Cloud or programmatically. Alternatively, you can enable JIT with
default, hard-coded parameters, from Azure Virtual machines.

Option D is correct: You can enable just-in-time on your VMs from Microsoft Defender
for Cloud, and Azure Virtual Machines, using PowerShell and using REST API.

Option A is Incorrect: Azure Bastion and Just-In-Time (JIT) VM access cannot be used
together. In other words, if you enable Azure Bastion in your virtual network (VNET) with
an existing JIT VM enabled, the Bastion Host won't connect to the target machine

Option B is incorrect: Azure Lighthouse enables multi-tenant management with scalability,

higher automation, and enhanced governance across resources.

Option C is incorrect: Azure Front Door is Microsoft’s modern cloud Content Delivery
Network (CDN) that provides fast, reliable and secure access between your users and your
applications’ static and dynamic web content across the globe.
You can enable this feature in Microsoft Defender for Cloud as shown below. You need to
go to Microsoft Defender and then access the just-in-time feature.

For more information on Just in time VM access, please visit the below URL

 Enable Just-in-Time VM Access I Microsoft Documentation

Question 9: Incorrect
Which of the following is the responsibility of the customer?

A. Maintaining the underlying physical servers

B. Security of data hosted on Azure virtual machines

(Correct)
 

C. Uptime of the Virtual Machine service

D. Cooling in the data center

(Incorrect)

Explanation
Answer : B

The security of the data hosted on the Azure virtual machines. All of the other aspects are the
responsibility of Azure.

For more information on the Shared Responsibility Model, please visit the below URL

 https://docs.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility
Question 10: Correct
A company is planning on hosting virtual machines across multiple Availability zones.
Which of the following is the company trying to achieve with this implementation?

A. Better elasticity

B. Reduction in costs

C. Better Availability

(Correct)

D. Disaster Recovery
Explanation
Answer : C

Here , the company is trying to achieve better availability by hosting their infrastructure
across multiple availability zones.
  Option A is incorrect. Elasticity can be used as a concept used for the ability to
quickly expand or decrease computer processing, memory, and storage resources to
meet demand.
 Option B is incorrect because there will be additional costs for more virtual
machines and the bandwidth communication between the virtual machines.
 Option D is incorrect because this is a concept used to recover against region wide
failures.

For more information on regions and availability zones, please visit the below URL

 https://docs.microsoft.com/en-us/azure/availability-zones/az-overview
Question 11: Incorrect
Which of the following service falls under the category of serverless computing?

A. Azure virtual machines

(Incorrect)

B. Azure SQL database – Elastic pool

C. Azure Functions

(Correct)

D. Availability sets
Explanation
Answer : C

Azure Functions is an example of serverless computing. Here the underlying compute

infrastructure is managed by the service itself.

 Option A is incorrect because the virtual machine service is an Infrastructure as a

service.
 Option B is incorrect because the Azure SQL database – Elastic pool is a platform as
a service.
 Option D is incorrect because this is used to manage the availability of virtual
machines

For more information on serverless computing, please visit the below URL
  https://azure.microsoft.com/en-us/overview/serverless-computing/

Question 12: Correct

You have to specify whether the following statement is TRUE or FALSE

“General Data Protection Regulation (GDPR) only applies to companies that offer goods or
services to individuals in the EU”

A. True

B. False

(Correct)

Explanation
Answer: B

It also applies to EU residents that may not be IN the EU. It applies to countries like the US
that have chosen to adopt GDPR.
For more information on General Data Protection Regulation, please visit the below URL
 https://docs.microsoft.com/en-us/microsoft-365/compliance/gdpr?view=o365-
worldwide

Question 13: Incorrect

Which of the following is used to group subscriptions together?

A. Resource groups

(Incorrect)

B. Region pairs

C. Management Groups

(Correct)

D. Availability sets
Explanation
Answer : C

Management groups is used to organize subscriptions together. You can then manage access
and compliance of the subscriptions that are part of the management group.

 Option A is incorrect because this is used to logical group resources

 Option B is incorrect because this is used by Azure to pair regions together
 Option D is incorrect because this is used to manage the availability of virtual
machines

For more information on management groups, please visit the below URL

 https://docs.microsoft.com/en-us/azure/governance/management-groups/overview

Question 14: Incorrect

Your company is planning on hosting resources using Azure services. You have to decide on
the right service to use for the desired requirement. Which of the following would you use for
the following requirement?

“Provide the ability to host a private network in Azure”

A. Azure App Service

B. Azure Kubernetes

(Incorrect)

C. Windows Virtual Desktop

 

D. Azure Virtual Network

(Correct)

Explanation
Answer : D

The Azure virtual network gives you the ability to host a virtual network in Azure. Here you
can host virtual machines in the virtual network.

 Option A is incorrect because this is used for hosting web applications

 Option B is incorrect because this is used for orchestrating container-based
applications
 Option C is incorrect because this is used for desktop and application virtualization

For more information on Azure virtual networks, please visit the below URL

 https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview

Question 15: Correct

Your company is planning on hosting resources using Azure services. You have to decide on
the right service to use for the desired requirement. Which of the following would you use for
the following requirement?

“Provide the ability to deploy and orchestrate container-based applications”

A. Azure App Service

B. Azure Kubernetes

(Correct)


 C. Windows Virtual Desktop

D. Azure Virtual Network

Explanation
Answer : B

You can use the Azure Kubernetes service to host and orchestrate container-based
applications.

 Option A is incorrect because this is used for hosting web applications

 Option C is incorrect because this is used for desktop and application virtualization
 Option D is incorrect because this is used to host a private network in Azure

For more information on Azure Kubernetes, please visit the below URL

 https://docs.microsoft.com/en-us/azure/aks/intro-kubernetes

Question 16:
Skipped
Your company is planning on hosting resources using Azure services. You have to decide on
the right service to use for the desired requirement. Which of the following would you use for
the following requirement?

“Provide the ability to host web-based applications. The platform should provide the ability
to host applications based on different programming frameworks”

A. Azure App Service

(Correct)


 B. Azure Kubernetes

C. Windows Virtual Desktop

D. Azure Virtual Network

Explanation
Answer : A
 Option B is incorrect because this is used for orchestrating container-based
applications
 Option C is incorrect because this is used for desktop and application virtualization
 Option D is incorrect because this is used to host a private network in Azure

You can use the Azure App service or Web Apps to host web applications. You also have the
ability to host web applications based on different programming languages.

For more information on the App service, please visit the below URL

 https://docs.microsoft.com/en-us/azure/app-service/overview

Question 17:
Skipped
Your company is planning on hosting resources using Azure services. You have to decide on
the right service to use for the desired requirement. Which of the following would you use for
the following requirement?

“Provide an environment for desktop and application virtualization”

A. Azure App Service

B. Azure Kubernetes


 C. Windows Virtual Desktop

(Correct)

D. Azure Virtual Network

Explanation
Answer : C

You can use Windows Virtual Desktop for the purpose of desktop and application
virtualization

 Option A is incorrect because this is used for hosting web applications

 Option B is incorrect because this is used for orchestrating container-based
applications
 Option D is incorrect because this is used to host a private network in Azure

For more information on Windows virtual desktop, please visit the below URL

 https://docs.microsoft.com/en-us/azure/virtual-desktop/overview

Question 18:
Skipped
A company is planning on using the Azure Storage Account service. They are going to create
a General Purpose V2 storage account. They are going to use the Blob service in the storage
account. Can they set the objects to use the Archive access tier at the storage account level?

A. Yes

B. No

(Correct)

Explanation
Answer: B
The Archive Access tier can only be set at the object level and not at the storage account
level.

If you go to the configuration section of a storage account, you can set the Blob access tier to
either hot or Cool.

For more information on the access tiers in Azure Storage accounts, please visit the below
URL

 Hot, Cool, and Archive access tiers for blob data - Azure Storage | Microsoft Docs
 Set a blob's access tier - Azure Storage | Microsoft Docs
Question 19:
Skipped
A company is planning on using the Azure Storage Account service. They are going to create
a General Purpose V2 storage account. They are going to use the Blob service in the storage
account. Can they access each blob object via a URL?

A. Yes

(Correct)

B. No
Explanation
Answer : A

Yes, each object in the blob service can be accessed via a URL. As shown below, in the
Overview of the object, you can access the URL

For more information on the blob service, please visit the below URL

 Introduction to Blob (object) storage - Azure Storage | Microsoft Docs

 Choose how to authorize access to blob data in the Azure portal - Azure Storage |
Microsoft Docs
Question 20:
Skipped
A company is planning on using the Azure Storage Account service. They are going to create
a General Purpose V2 storage account. They are going to use the Blob service in the storage
account. Can they set the objects to use the Archive access tier at the object level itself?

A. Yes

(Correct)

B. No
Explanation
Answer: A

Yes, you can set the object to use the Archive Access tier at the object level.

You can click on the Change tier If you can go to an object.

Then you can change the access tier to use the Archive access tier.

For more information on the access tiers in Azure Storage accounts, please visit the below
URL

 Hot, Cool, and Archive access tiers for blob data - Azure Storage | Microsoft Docs
 Archive a blob - Azure Storage | Microsoft Docs
Question 21:
Skipped
Your company is planning on hosting resources using Azure services. You have to decide on
the right service to use for the desired requirement. Which of the following would you use for
the following requirement?

“Provide a service that can be used to host a data warehouse”

 

A. Azure Cognitive Service

B. Azure DevOps

C. Azure Bot service

D. Azure Synapse Analytics

(Correct)

Explanation
Answer : D

Azure Synapse Analytics can be used to host a data warehouse. You can host your Big Data
warehouse and also perform Big data Analytics

 Option A is incorrect because this is used to build cognitive intelligence in

applications
 Option B is incorrect because this is a set of tools used for implementing DevOps
 Option C is incorrect because this is used to build intelligent bots within applications

For more information on Azure Synapse Analytics, please visit the below URL

 https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-
data-warehouse-overview-what-is

Question 22:
Skipped
Your company is planning on hosting resources using Azure services. You have to decide on
the right service to use for the desired requirement. Which of the following would you use for
the following requirement?

“Provide a service that be used to add artificial intelligence features to applications”


 A. Azure Cognitive Service

(Correct)

B. Azure DevOps

C. Azure Bot service

D. Azure Synapse Analytics

Explanation
Answer : A

You can use the Azure Cognitive service to build applications with artificial intelligence
capabilities.

There are a number of services available in Azure Cognitive services based on the following
categories

 Vision
 Speech
 Language
 Decision
 Search
 Option B is incorrect because this is a set of tools used for implementing DevOps
 Option C is incorrect because this is used to build intelligent bots within applications
 Option D is incorrect because this is used to host a data warehouse

For more information on Azure Cognitive services, please visit the below URL

 https://docs.microsoft.com/en-us/azure/cognitive-services/what-are-cognitive-services

Question 23:
Skipped
Your company is planning on hosting resources using Azure services. You have to decide on
the right service to use for the desired requirement. Which of the following would you use for
the following requirement?

“Provide a service that be used to integrate bots with applications”


 A. Azure Cognitive Service

B. Azure DevOps

C. Azure Bot service

(Correct)

D. Azure Synapse Analytics

Explanation
Answer : C

You can use the Azure Bot service to build bots within applications

 Option A is incorrect because this is used to build cognitive intelligence in

applications
 Option B is incorrect because this is a set of tools used for implementing DevOps
 Option D is incorrect because this is used to host a data warehouse

For more information on the Azure Bot SDK, please visit the below URL

 https://docs.microsoft.com/en-us/azure/bot-service/bot-service-overview-
introduction?view=azure-bot-service-4.0

Question 24:
Skipped
Your company is planning on hosting resources using Azure services. You have to decide on
the right service to use for the desired requirement. Which of the following would you use for
the following requirement?

“Provide a set of tools that can be used for implementing DevOps”

 

A. Azure Cognitive Service

B. Azure DevOps

(Correct)

C. Azure Bot service

D. Azure Synapse Analytics

Explanation
Answer : B

You can use the Azure DevOps set of services for implementing DevOps. The Azure DevOps
services has the following services in place

 Azure Repos
 Azure Pipelines
 Azure Boards
 Azure Test Plans
 Azure Artifacts

 Option A is incorrect because this is used to build cognitive intelligence in

applications
 Option C is incorrect because this is used to build intelligent bots within applications
 Option D is incorrect because this is used to host a data warehouse

For more information on Azure DevOps services, please visit the below URL

 https://azure.microsoft.com/en-us/services/devops/

Question 25:
Skipped
Your company wants to start working with Azure. They want to create and manage resources
in Azure. Would you be able to create resources using the Azure CLI?
 

A. Yes

(Correct)

B. No
Explanation
Answer : A

Yes, the Azure command line interface is meant for creating and managing resources in
Azure

For more information on the Azure CLI, please visit the below URL

 https://docs.microsoft.com/en-us/cli/azure/what-is-azure-cli

Question 26:
Skipped
Your company wants to start working with Azure. They want to create and manage resources
in Azure. Would you be able to create resources using the PowerShell?

A. Yes

(Correct)

B. No
Explanation
Answer : A

With PowerShell, you can install the Azure PowerShell modules and work with resources in
Azure.

For more information on Azure PowerShell, please visit the below URL

 https://docs.microsoft.com/en-us/powershell/azure/?view=azps-5.1.0
Question 27:
Skipped
Your company wants to host a set of Azure virtual machines. But they want to ensure that
only their virtual machines are hosted on the underlying physical server. Which of the
following would you make use of for this requirement?

A. Azure App Service

B. Azure Kubernetes

C. Azure Functions

D. Azure Dedicated Hosts

(Correct)

Explanation
Answer : D
With Azure Dedicated Hosts, you can be allocated the underlying physical server as a
resource. You can then host virtual machines on the underlying physical server.

 Option A is incorrect since this is used for hosting web applications

 Option B is incorrect since this is used for hosting container-based applications
 Option C is incorrect since this is used as a serverless compute service

For more information on Azure Dedicated Hosts, please visit the below URL

 https://docs.microsoft.com/en-us/azure/virtual-machines/dedicated-hosts
Question 28:
Skipped
A company wants to make use of the various security services in Azure. They want to have
the ability to store secrets and certificates in Azure cloud.

They decide to use the Azure Key Vault service.

Would this fulfil the requirement?

A. Yes

(Correct)

B. No
Explanation
Answer : A

Yes, this is the right service to use for this requirement. With the help of the Azure Key Vault
service, they can store secrets , encryption keys and certificates

For more information on the Azure Key Vault service, please visit the below URL

 https://docs.microsoft.com/en-us/azure/key-vault/general/basic-concepts
 Question 29:
Skipped
A company wants to make use of the various security services in Azure. They want get
security recommendations for resources deployed to their Azure subscription.

They decide to use the Azure Key Vault service.

Would this fulfil the requirement?

A. Yes

B. No

(Correct)

Explanation
Answer: B

The Azure Key Vault is a cloud service is used to store secrets, encryption keys, and
certificates

They need to use "Microsoft Defender for Cloud" for this requirement.

With the Microsoft Defender for Cloud, you can get a lot of recommendations. An example is
shown below
For more information on the Microsoft Defender for Cloud, please visit the below URL
 Azure Quickstart - Set and retrieve a secret from Key Vault using Azure portal |
Microsoft Docs
 What is Microsoft Defender for Cloud? - Microsoft Defender for Cloud | Microsoft
Docs
 Implement security recommendations in Microsoft Defender for Cloud | Microsoft
Docs
Question 30:
Skipped
A company wants to make use of the various security services in Azure. They want to restrict
the Inbound traffic to Azure virtual machines.

They decide to use the Azure Security Center service.

Would this fulfil the requirement?

A. Yes

B. No

(Correct)

Explanation
Answer : B
For this requirement, they need to use Network Security Groups

With Network Security Groups, you can add Inbound rules to restrict the Inbound traffic to
virtual machines.

The Azure Security Center service is used to strengthen the security posture of resources
created as part of your Azure subscription.

For more information on the Azure Network Security Groups, please visit the below URL

 https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-
overview

Question 31:
Skipped
A company has just setup an Azure subscription and an Azure tenant. They want to use
services that would fulfil different requirements. Which of the following can be used for the
following requirement?

“Ensure that only virtual machines of a particular SKU size can be launched within an Azure
subscription”

A. Azure resource locks

B. Azure Policies

(Correct)

C. Azure Blueprints

D. Azure resource tags

Explanation
Answer : B

This can be accomplished with the use of Azure Policies. With Azure policies, you can use an
in-built policy to specify the SKU size that can be used to launch an Azure virtual machine.

 Option A is incorrect since this used to protect from the accidental deletion of
resources
 Option C is incorrect since this used to orchestrate the deployment of resources
 Option D is incorrect since this used to logically organize resources

For more information on Azure policies, please visit the below URL

 https://docs.microsoft.com/en-us/azure/governance/policy/overview

Question 32:
Skipped
A company has just setup an Azure subscription and an Azure tenant. They want to use
services that would fulfil different requirements. Which of the following can be used for the
following requirement?

“Ensure that no one can accidentally delete resources that are part of a resource group”

A. Azure resource locks

(Correct)

B. Azure Policies

C. Azure Blueprints

D. Azure resource tags

Explanation
Answer : A

Resource locks can be used to prevent the accidental deletion of resources.

 Option B is incorrect since this used as a governance service for your resources
 Option C is incorrect since this used to orchestrate the deployment of resources
 Option D is incorrect since this used to logically organize resources

For more information on Azure resource locks, please visit the below URL

 https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-
resources

Question 33:
Skipped
A company has just setup an Azure subscription and an Azure tenant. They want to use
services that would fulfil different requirements. Which of the following can be used for the
following requirement?

“Be able to organize resources for billing purposes”

A. Azure resource locks

B. Azure Policies

C. Azure Blueprints

D. Azure resource tags

 (Correct)

Explanation
Answer : D

Azure resource tags can be used to organize resources. You can then view the billing aspect
of the resources based on resource tags.

 Option A is incorrect since this used to protect from the accidental deletion of
resources
 Option B is incorrect since this used as a governance service for your resources
 Option C is incorrect since this used to orchestrate the deployment of resources

For more information on Azure resource tags, please visit the below URL

 https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-
resources

Question 34:
Skipped
A company has just setup an Azure subscription and an Azure tenant. They want to use
services that would fulfil different requirements. Which of the following can be used for the
following requirement?

“Provide a declarative way to orchestrate the deployment of various resources”

A. Azure resource locks

B. Azure Policies

C. Azure Blueprints

(Correct)
 

D. Azure resource tags

Explanation
Answer : C

Azure Blueprints can be used to orchestrate the deployment of various resource templates and
also artifacts that include

 Role Assignments
 Policy Assignments
 Azure Resource Manager templates (ARM templates)
 Resource Groups
 Option A is incorrect since this used to protect from the accidental deletion of
resources
 Option B is incorrect since this used as a governance service for your resources
 Option D is incorrect since this used to logically organize resources

For more information on Azure Blueprints, please visit the below URL

 https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

Question 35:
Skipped
Which of the following service in Azure can be used to enable Multi-Factor authentication
for Azure users?

A. Azure Sentinel

B. Azure Key Vault

C. Azure Security Center

D. Azure Active Directory

 (Correct)

Explanation
Answer : D

There are a couple of ways to enable Azure Multi-Factor Authentication. This can be done
from Azure Active Directory.

You can’t enable Multi-Factor Authentication in the other services, that is why the other
options are incorrect.

For more information on Azure Multi-Factor Authentication, please visit the below URL

 https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-
howitworks

Question 36:
Skipped
Your company wants to use the Total Cost of Ownership calculator to assess the costs of
moving their existing resources to the cloud. Would you be able to see the TCO for server
workloads that need to be migrated to Azure?

A. Yes

(Correct)

B. No
Explanation
Answer: A

With the Total Cost of Ownership (TCO) Calculator, you can see what would the TCO be for
server workloads, and shown below
For more information on the TCO Calculator, please visit the below URL
 Total Cost of Ownership (TCO) Calculator | Microsoft Azure

Question 37:
Skipped
Your company wants to deploy a set of Azure virtual machines. They want to increase the
availability of the underlying machines. You decide to deploy the machines across multiple
resource groups. Would this fulfil the requirement?

A. Yes

B. No

(Correct)

Explanation
Answer : B
Resource groups are used for logical grouping of resources.

For availability you can choose to deploy either across Availability sets or Availability zones

For more information on Azure availability sets and zones, please visit the below URL

 https://docs.microsoft.com/en-us/azure/availability-zones/az-overview
 https://docs.microsoft.com/en-us/azure/virtual-machines/manage-availability

Question 38:
Skipped
Your company wants to deploy a set of Azure virtual machines. They want to increase the
availability of the underlying machines. You decide to deploy the machines across multiple
subscriptions. Would this fulfil the requirement?

A. Yes

B. No

(Correct)

Explanation
Answer : B

Subscriptions are used more from a billing aspect for Azure resources.
For availability you can choose to deploy either across Availability sets or Availability zones

For more information on Azure availability sets and zones, please visit the below URL

 https://docs.microsoft.com/en-us/azure/availability-zones/az-overview
 https://docs.microsoft.com/en-us/azure/virtual-machines/manage-availability
Question 39:
Skipped
Your company wants to deploy a set of Azure virtual machines. They want to increase the
availability of the underlying machines. You decide to deploy the machines across multiple
availability zones. Would this fulfil the requirement?

A. Yes

(Correct)

B. No
Explanation
Answer: A

Yes, this is the right approach. You can use either Availability sets or zones to increase the
availability of your virtual machines.

For more information on Azure availability sets and zones, please visit the below URL

 https://docs.microsoft.com/en-us/azure/availability-zones/az-overview
 https://docs.microsoft.com/en-us/azure/virtual-machines/manage-availability
Question 40:
Skipped
Your company has just setup an Azure account. They also have resources deployed in their
on-premises data center. They want to connect their Azure virtual network to their on-
premises data center. Can they consider using Azure virtual network peering for this
requirement?

A. Yes

B. No

(Correct)
Explanation
Answer : B

Azure virtual network peering is used to connect two Azure virtual networks together.

For this purpose, you should consider a Site-to-Site VPN connection or using Azure
ExpressRoute

For more information on Azure ExpressRoute and Site-to-Site VPN, please visit the below
URL

 https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction
 https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-
resource-manager-portal
Question 41:
Skipped
Your company has just setup an Azure account. They also have resources deployed in their
on-premises data center. They want to connect their Azure virtual network to their on-
premises data center. Can they consider using Azure ExpressRoute for this requirement?

A. Yes

(Correct)

B. No
Explanation
Answer : A

Azure ExpressRoute can be used to connect an Azure virtual network to your on-premises
data center

For more information on Azure ExpressRoute, please visit the below URL

 https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction
Question 42:
Skipped
Your company has just setup an Azure account. They also have resources deployed in their
on-premises data center. They want to connect their Azure virtual network to their on-
premises data center. Can they consider using Azure Site-to-Site VPN for this requirement?

A. Yes
 (Correct)

B. No
Explanation
Answer : A

An Azure Site-to-Site VPN can be used to connect an Azure virtual network to your on-
premises data center

For more information on Azure Site-to-Site VPN, please visit the below URL

 https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-
resource-manager-portal
Question 43:
Skipped
Your company is trying to assess the benefits of using the Azure Cosmos DB service. Can
they migrate their existing MongoDB database onto Azure Cosmos DB?

A. Yes

(Correct)

B. No
Explanation
Answer : A

There are multiple API’s available with Azure Cosmos DB. One of the API’s that can be
used is the MongoDB API. You can migrate your existing MongoDB workloads to Azure
Cosmos DB as well.

For more information on Azure Cosmos DB- MongoDB API, please visit the below URL

 https://docs.microsoft.com/en-us/azure/cosmos-db/mongodb-introduction
Question 44:
Skipped
Your company is trying to assess the benefits of using the Azure Cosmos DB service. Can
they migrate their SQL Server workloads to Azure Cosmos DB?

A. Yes
 (Correct)

B. No
Explanation
Answer: A

The Cosmos DB Data Migration tool is an executable tool, which requires no installation to
start the migration process. So, to launch the Data Migration tool, double-click on the
executable file of the tool, and it will start directly.

When the Data Migration tool launches, the Welcome page will display a piece of
introductory information about that tool, providing external links for the tool documentation
and for suggesting new features for that tool, as shown below:

The Data Migration tool can be used to import data into your Cosmos DB container, from
different data sources. This includes importing data from JSON files, MongoDB, SQL
Server, CSV files, Azure Table storage, Amazon DynamoDB, and Azure Cosmos DB SQL
API containers.

In this demo, we will copy data from a SQL Server instance, by choosing the SQL data
source, as shown below:
In order to connect to the SQL Server data source, provide the Standard SQL Server
connection string that contains the SQL Server name, the database name, and authorized
account credentials to connect to that SQL Server instance. Click on the Verify option to
validate the connecting string and make sure that the connection is opened to that SQL Server
instance, as below:

For more information on Azure Cosmos DB, please visit the below URL

https://docs.microsoft.com/en-us/azure/cosmos-db/import-data

Question 45:
Skipped
Your company wants to make use of the Azure storage account service. They have
provisioned a General Purpose V2 storage account. Which of the following service in the
storage account is used for the storage of hard disk file for Azure virtual machines?

A. File

B. Blob

(Correct)
 

C. Queue

D. Table
Explanation
Answer : B

This can be accomplished with the use of the Blob service. With the Blob service , you can
store hard disk files for your virtual machines.

 Option A is incorrect since this is used for the storage of files that can be accessed
via the server message block protocol
 Option C is incorrect since this is used as messaging service
 Option D is incorrect since this is used for storage of key/value pairs

For more information on the Blob service, please visit the below URL

 https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction
Question 46:
Skipped
Your company wants to make use of the Azure storage account service. They have
provisioned a General Purpose V2 storage account. Which of the following service in the
storage account is used for the storage of objects?

A. File

B. Table

C. Queue

D. Blob

(Correct)

Explanation
Answer : D
This can be accomplished with the use of the Blob service. This is the object level storage
service provided in Azure.

 Option A is incorrect since this is used for the storage of files that can be accessed
via the server message block protocol
 Option B is incorrect since this is used for storage of key/value pairs
 Option C is incorrect since this is used as messaging service

For more information on the Blob service, please visit the below URL

 https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction
Question 47:
Skipped
Your company wants to make use of the Azure storage account service. They have
provisioned a General Purpose V2 storage account. Which of the following service in the
storage account is used for the storage of files that can be accessed via the Server Message
Block protocol?

A.

File

(Correct)

B.

Blob

C.

Queue

D.

Table
Explanation
Answer : A

Using the file service, you can host file shares that can be accessed via the Server Message
Block protocol.

 Option B is incorrect since this is object level storage on Azure

 Option C is incorrect since this is used as messaging service
 Option D is incorrect since this is used for storage of key/value pairs

For more information on the File service, please visit the below URL

 https://docs.microsoft.com/en-us/azure/storage/files/storage-files-introduction
Question 48:
Skipped
A company has a set of Azure virtual machines. These Azure virtual machines will be hosting
web servers. The web servers need to send logs to a central log store. Which of the following
can be used for this requirement?

A. Azure Advisor

B. Azure Monitor

(Correct)

C. Azure Service Health

D.Azure DevOps
Explanation
Answer : B

You can use the Log Analytics workspace feature in Azure Monitor to store the logs.

 Option A is incorrect because this is a recommendation engine in Azure

 Option C is incorrect because this is used to display the health of the underlying
Azure services
 Option D is incorrect because this is used as a tool set for implementing DevOps

For more information on the Log Analytics feature, please visit the below URL
  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/log-analytics-agent

Question 49:
Skipped
Which of the following is used as a secured, high-level application platform with built-in
communication and security features for internet-connected devices?

A. Azure Synapse

B. Azure Sphere

(Correct)

C. Azure Databricks

D. Azure HDInsight
Explanation
Answer : B

Azure Sphere is a secured, high-level application platform with built-in communication and
security features for internet-connected devices

 Option A is incorrect because this is used for hosting a data warehouse

 Option C is incorrect because this is a data analytics platform
 Option D is incorrect because this is an open-source analytics service

For more information on Azure Sphere, please visit the below URL

 https://docs.microsoft.com/en-us/azure-sphere/product-overview/what-is-azure-sphere
 Question 50:
Skipped
A company wants to use Azure for the deployment of various solutions. They want to ensure
that whenever users authenticate to Azure, they have to make use of Multi-Factor
Authentication. Which of the following can help them achieve this?

A. Azure Service Trust Portal

B. Azure Security Centre

C. Azure DDoS protection

D. Azure Privileged Identity Management

(Correct)

Explanation
Answer - D

With Azure Privileged Identity Management, you can use Multi-factor authentication (MFA)
to activate any role for users. The Microsoft documentation mentions the following.

Option A is incorrect since Service Trust Portal provides information about Microsoft Cloud
services compliance with data protection standards and regulatory requirements, such as
International Organization for Standardization (ISO) Service Organization Controls (SOC)
National Institute of Standards and Technology (NIST).
Option B is incorrect since this is a unified infrastructure security management system in
Azure.

Option C is incorrect since this is solely a solution to protect against DDoS attacks.

For more information on how to use MFA policies in Azure Privileged Identity Management,
please visit the below URL-

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-
configure

For more information on MFA and its configuration, please visit below URL-

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-
howitworks

Question 51:
Skipped
An IT administrator for a company has been given a PowerShell script. This PowerShell
script will be used to create several Virtual Machines in Azure. You have to provide a
machine to the IT administrator for running the PowerShell script.

You decide to provide a Linux machine which has the Azure CLI tools with PowerShell 5.x
installed.

Would this solution fit the requirement?

A. Yes

B. No

(Correct)

Explanation
Answer - B

Azure PowerShell works with PowerShell 5.1 on Windows. On other platforms like Linux,
Azure PowerShell 6.2.4 and later versions are compatible. Microsoft recommends
PowerShell 7.x and higher on all platforms.
Azure PowerShell documentation

Azure PowerShell is a set of cmdlets for managing Azure resources directly from the
PowerShell command line. Azure PowerShell is designed to make it easy to learn and get
started with but provides powerful features for automation. Written in .NET Standard, Azure
PowerShell works with PowerShell 5.1 on Windows by installing some additional module
PowerShellGet & .Net framework.

PowerShell 6.2.4 and later is compatible on all OS platforms. However, Microsoft

recommends PowerShell 7.x.

https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-5.4.0

https://docs.microsoft.com/en-us/azure/virtual-machines/linux/run-command

Question 52:
Skipped
An IT administrator for a company has been given a PowerShell script. This PowerShell
script will be used to create several Virtual Machines in Azure. You have to provide a
machine to the IT administrator for running the PowerShell script.

You decide to provide an Azure CLI installed on a computer that has MacOS 10.13 and
PowerShell 7.0.3 also installed.

Would this solution fit the requirement?

A. Yes

(Correct)

B. No
Explanation
Answer - A

Yes, you can install Powershell on MacOS and then run the PowerShell scripts.

For more information on installing PowerShell on MacOS, please visit the below URL-

https://docs.microsoft.com/en-us/powershell/scripting/install/installing-powershell-core-on-
macos?view=powershell-6
 Question 53:
Skipped
A company is planning to set up a solution in Azure. The solution would have the following
key requirement.

A tool that provides guidance and recommendations to improve an Azure environment

Which of the following would be best suited for this requirement?

A. Azure Advisor

(Correct)

B. Azure Cognitive Services

C. Azure Application Insights

D. Azure Devops
Explanation
Answer - A
This is clearly mentioned in the Microsoft documentation.

Since this is a clear feature of the tool, all other options are incorrect.

For more information on Azure Advisor, please visit the below URL-

https://docs.microsoft.com/en-us/azure/advisor/advisor-overview

Question 54:
Skipped
A company is planning to set up a solution in Azure. The solution would have the following
key requirement.

A simplified tool to build intelligent Artificial Intelligence applications

Which of the following would be best suited for this requirement?

A. Azure Advisor

B. Azure Cognitive Services

(Correct)

C. Azure Application Insights


 D. Azure Devops
Explanation
Answer - B

As shown in the Microsoft documentation below, the Azure Cognitive services has an entire
list of features that can be used to build Artificial Intelligent based applications.

Since this is a clear feature of the tool, all other options are incorrect.

For more information on Azure Cognitive services, please visit the below URL-

https://azure.microsoft.com/en-us/services/cognitive-services/

Question 55:
Skipped
Your company is planning on hosting a set of virtual machines in Azure. They want to save
on the running compute costs for the virtual machines. Can they consider using reserved
instances for this requirement?

A. Yes

(Correct)

B. No
Explanation
Answer : A

Yes, this is an option. By using reserved instances, they can get discounts when it comes to
costs for Azure virtual machines.

For more information on Azure Reserved Instances, please visit the below URL

 https://azure.microsoft.com/en-us/pricing/reserved-vm-instances/
Continue
Retake test
Course content
Practice tests
 Lecture completed. Progress cannot be changed for this item.
Start
 Practice Test 1: Simulado 1 / Mock 1
 Lecture incomplete. Progress cannot be changed for this item.
Start
Practice Test 2: Simulado 2 / Mock 2
 Lecture incomplete. Progress cannot be changed for this item.
Start
Practice Test 3: Simulado 3 / Mock 3
 Lecture incomplete. Progress cannot be changed for this item.
Start
Practice Test 4: Simulado 4 / Mock 4
 Lecture incomplete. Progress cannot be changed for this item.
Start
Practice Test 5: Simulado 5 / Mock 5
 Lecture incomplete. Progress cannot be changed for this item.
Start
Practice Test 6: Simulado 6 / Mock 6
Overview