Azure Fundamentals Flashcards by Pedro Junior Vicente Valdez

[Answer choice] are physically separate datacenters within an Azure region.

Geographies
Region pairs
Resource groups
Availability zones

Availability zones

How well did you know this?

Not at all

Perfectly

In a region pair, a region is paired with another region in the same [answer choice].

geography
availability zone
resource group
datacenter

geography

How well did you know this?

Not at all

Perfectly

Which two components are created in an Azure subscription?

resources
resource groups
management groups
Azure AD user accounts

resources and resource groups

How well did you know this?

Not at all

Perfectly

For which resource does Azure generate separate billing reports and invoices by default?

management groups
resource groups
subscriptions
accounts

subscriptions

How well did you know this?

Not at all

Perfectly

Which two Azure resources can make use of availability zones?

Azure SQL databases
virtual machines
Azure subscriptions
resource groups

Azure SQL databases and virtual machines

How well did you know this?

Not at all

Perfectly

Which scenario is a use case for a VPN gateway?

connecting an on-premises datacenter to an Azure virtual network
partitioning a virtual network’s address space
communicating between Azure resources
filtering outbound network traffic

connecting an on-premises datacenter to an Azure virtual network

How well did you know this?

Not at all

Perfectly

You need to allow resources on two different Azure virtual networks to communicate with each other.
What should you configure?

a network security group (NSG)
a point-to-site VPN
peering
service endpoints

peering

How well did you know this?

Not at all

Perfectly

What can you use to provide Mac and Android users with access to a Windows environment that will run Windows-based applications?

Azure Logic Apps
Azure Functions
Azure Virtual Desktop
Azure Container Instances

Azure Virtual Desktop

How well did you know this?

Not at all

Perfectly

Which Azure Blob storage tier stores data offline and offers the lowest storage costs and the highest costs to access data?

Archive
Hot
Cool

Archive

How well did you know this?

Not at all

Perfectly

Which two scenarios are common use cases for Azure Blob storage? Each correct answer presents a complete solution. Select all answers that apply.

storing data for backup and restore
hosting ASPX files for a website
mounting a file storage share to be accessed as a virtual drive on multiple virtual machines
serving images or documents directly to a browser

storing data for backup and restore
serving images or documents directly to a browser

How well did you know this?

Not at all

Perfectly

Which Azure Storage service should you use to store unstructured files, such as images, that will be served on webpages?

Azure Blob storage
Azure Queue Storage
Azure Disk Storage
Azure Table storage

Azure Blob storage

How well did you know this?

Not at all

Perfectly

Which two protocols are used to access Azure file shares? Each correct answer presents a complete solution.

FTP
HTTP
Network File System (NFS)
Server Message Block (SMB)

NFS and SMB

How well did you know this?

Not at all

Perfectly

What can you use to allow a user to manage all the resources in a resource group?

Azure role-based access control (RBAC)
resource tags
resource locks
Azure Key Vault

Azure role-based access control (RBAC)

How well did you know this?

Not at all

Perfectly

To which object or level is an Azure role-based access control (RBAC) role applied?

resource lock
scope
resource tag
policy

scope

How well did you know this?

Not at all

Perfectly

What Azure AD feature can you use to configure security authentication that requires users to use their mobile phone to sign in?

Microsoft Defender for Cloud
Advanced Thread Protection (ATP)
Azure Information Protection (AIP)
multi-factor authentication (MFA)

multi-factor authentication (MFA)

How well did you know this?

Not at all

Perfectly

Which two services are provided by Azure AD? Each correct answer presents a complete solution.

authentication
data encryption
multi-factor authentication (MFA)
single sign-on (SSO)

authentication
SSO

How well did you know this?

Not at all

Perfectly

What Azure AD feature can you use to ensure that users can only access Microsoft Office 365 applications from approved client applications?
Select only one answer.

Azure role-based access control (RBAC)
single sign-on (SSO)
Conditional Access
multi-factor authentication (MFA)

Conditional Access

How well did you know this?

Not at all

Perfectly

What can you use to sync identities between Azure AD and an on-premises deployment of Active Directory Domain Services (AD DS)?

Azure AD Connect
Azure Resource Manager (ARM)
Conditional Access
Azure Key Vault

Azure AD Connect

How well did you know this?

Not at all

Perfectly

What can you use to ensure that users authenticate by using multi-factor authentication (MFA) when they attempt to sign in from a specific location?

Conditional Access
Azure role-based access control (RBAC)
single sign-on (SSO)
administrative units

Conditional Access

How well did you know this?

Not at all

Perfectly

You need to compare the costs of running an application in an on-premises datacenter with the costs of running the application in Azure.
What should you use to assist you?

Azure Pricing calculator
Azure Advisor
Azure Cost Management
Total Cost of Ownership (TCO) Calculator

Total Cost of Ownership (TCO) Calculator

How well did you know this?

Not at all

Perfectly

You have an Azure virtual machine that is accessed only between 9:00 and 17:00 each day.
What should you do to minimize costs but preserve the associated hard disks and data?

Deallocate the virtual machine.
Delete the virtual machine.
Scale down the virtual machine.
Resize the virtual machine.

Deallocate the virtual machine.

How well did you know this?

Not at all

Perfectly

You need to associate the costs of resources to different groups within an organization without changing the location of the resources.
What should you use?

resource tags
resource groups
subscriptions
administrative units

resource tags

How well did you know this?

Not at all

Perfectly

What can you use to ensure that new and existing Azure resources stay in compliance with corporate standards?

Azure Policy
resource locks
resource tags
Azure Advisor

Azure Policy

How well did you know this?

Not at all

Perfectly

You need to recommend a solution for Azure virtual machine deployments. The solution must enforce company standards on the virtual machines.
What should you include in the recommendation?
Select only one answer.

Azure Cost Management
Azure Lock
Azure Policy
Azure Blueprints

Azure Policy

How well did you know this?

Not at all

Perfectly

What allows you to orchestrate the deployment of resource templates and other artifacts? Azure Blueprints Azure Functions Azure App Services Azure Cognitive Services

Azure Blueprints simplifies large scale Azure deployments by packaging key environment artifacts, such as Azure Resource Manager (ARM) templates, role-based access controls (RBAC), and policies, into a single blueprint definition. You can easily apply the blueprint to new subscriptions and environments.

What can you use to ensure that a development team can only create virtual machines of a certain size? Select only one answer. Azure Blueprints Azure Policy Cloud Adoption Framework Conditional Access

Azure Policy

Which two actions can be performed by using the graphical user interface (GUI) in the Azure portal? Create new resources. Review a graphical view of all the services you are using. Change the availability zone of a virtual machine. Repeatedly set up one or more resources and ensure that all the dependencies are created in the proper order.

Create new resources. Review a graphical view of all the services you are using.

What can you use to describe the resources you want to provision in a declarative JSON format? Azure PowerShell Azure CLI Azure Resource Manager (ARM) templates Azure Repos

Azure Resource Manager (ARM) templates

Which management layer accepts requests from any Azure tool or API and enables you to create, update, and delete resources in an Azure account? Azure Resource Manager (ARM) Azure management groups Azure CLI Azure Sphere

Azure Resource Manager (ARM)

Which tool is accessible via Azure Cloud Shell and allows you to write Bash scripts to manage an Azure environment? Azure PowerShell Azure Resource Manager (ARM) templates Azure Repos Azure CLI

Azure CLI

What can you use to create resources in Azure and includes a validation step to ensure that all the resources can be created in the proper order based on dependencies, in parallel and idempotent? Azure Resource Manager (ARM) templates Azure CLI Azure PowerShell Azure REST API

Azure Resource Manager (ARM) templates

You need to use thresholds to trigger autoscaling functionality to scale an app up or down to meet the demand. What should you include in the solution? Azure Service Health Azure Advisor Azure Monitor Log Analytics

Azure Monitor is a platform that collects metric and logging data, such as CPU percentages. The data can be used to trigger autoscaling.

Which issues require that you take action to avoid service interruptions, such as service retirements and breaking changes? health advisories service issues application insights Kusto queries

health advisories

What can you use to monitor outages in a specific Azure region? Select only one answer. Azure Advisor Azure Security Center Azure Monitor Azure Service Health

Azure Service Health

What can you use to create alerts that relate to resource utilization for a specific Azure virtual machine? Azure Advisor Azure Monitor Azure Policy Azure Service Health

Azure Monitor

What can you use to find information about planned maintenance for Azure services that are critical to your organization? Azure Service Health Azure Advisor Azure Monitor Log Analytics

Azure Service Health

Which two attributes are characteristics of the private cloud deployment model? Each correct answer presents a complete solution. Hardware must be purchased. Users have complete control over resources and security. Applications can be provisioned and deprovisioned quickly. Organizations only pay for what they use.

Hardware must be purchased. Users have complete control over resources and security.

What are two characteristics of the public cloud deployment model? Each correct answer presents a complete solution. Services are offered over the internet and are available to anyone who wants to purchase them. Computing resources are used exclusively by users from one organization. Servers and storage are owned and operated by a third-party cloud service provider. Hardware is physically located in an organization's on-site datacenter.

Services are offered over the internet and are available to anyone who wants to purchase them. Servers and storage are owned and operated by a third-party cloud service provider.

What are two characteristics of a consumption-based model? Each correct answer presents a complete solution. no upfront costs requires the purchase and management of the physical infrastructure the ability to stop paying for resources that are no longer needed high capital expenditures

no upfront costs the ability to stop paying for resources that are no longer needed

What is an advantage of cloud computing compared to on-premises deployments? Select only one answer. You can scale more quickly. You own your CPUs. You have full access in case of internet outage. You can work from multiple workstations.

You can scale more quickly.

Select the answer that correctly completes the sentence. [Answer choice] refers to upfront costs incurred one time, such as hardware purchases. Select only one answer. Operational expenditures Capital expenditures Elasticity A consumption-based model

Capital expenditures

Which cloud deployment model are you using if you have servers physically located at your organization’s on-site datacenter, and you migrate a few of the servers to the cloud? Select only one answer. private cloud public cloud hybrid cloud

hybrid cloud

Select the answer that correctly completes the sentence. Increasing compute capacity for an app by adding RAM or CPUs to a virtual machine is called [answer choice]. Select only one answer. vertical scaling horizontal scaling disaster recovery high availability

vertical scaling

Select the answer that correctly completes the sentence. Deploying and configuring cloud-based resources quickly as business requirements change is called [answer choice]. agility scalability elasticity high availability

agility

Select the answer that correctly completes the sentence. Increasing compute capacity for an app by adding instances of resources such as virtual machines is called [answer choice]. Select only one answer. vertical scaling horizontal scaling disaster recovery high availability

horizontal scaling

Select the answer that correctly completes the sentence. An example of [answer choice] is automatically scaling an application to ensure that the application has the resources needed to meet customer demands. Select only one answer. agility high availability geo-distribution elasticity

elasticity

Select the answer that correctly completes the sentence. In cloud computing, [answer choice] allows you to deploy applications to regional datacenters around the world. Select only one answer. high availability disaster recovery geo-location elasticity

geo-location

In which two deployment models are customers responsible for managing operating systems that host applications? Each correct answer presents a complete solution. Select all answers that apply. software as a service (SaaS) platform as a service (PaaS) infrastructure as a service (IaaS) on-premises

infrastructure as a service (IaaS) on-premises

In a platform as a service (PaaS) model, which two components are the responsibility of the cloud service provider? Each correct answer presents a complete solution. Select all answers that apply. operating system physical network user access information and data

operating system physical network

In which cloud service model is the customer responsible for managing the operating system? Select only one answer. Infrastructure as a service (IaaS) platform as a service (PaaS) software as a service (SaaS)

Infrastructure as a service (IaaS)

Select the answer that correctly completes the sentence. [Answer choice] is the logical container used to combine and organize Azure resources. Select only one answer. a resource group Azure Resource Manager (ARM) a management group an Azure region

a resource group

What is an Azure Storage account named storage001 an example of? Select only one answer. a resource a resource group a subscription a resource manager

resource

For which resource does Azure generate separate billing reports and invoices by default? Select only one answer. management groups resource groups subscriptions accounts

subscriptions

Which resource can you use to manage access, policies, and compliance across multiple subscriptions? Select only one answer. management groups resource groups administrative units

management groups

Which Azure resource is a software emulation of a physical computer that includes a virtual processor, memory, storage, and networking resources? Select only one answer. a virtual machine an App Service a function a container

virtual machine

Which Azure compute service can you use to deploy and manage a set of identical virtual machines? Select only one answer. availability sets availability zones Azure Container Instances Azure Virtual Machine Scale Sets

az vm scale sets

What are two services that allow you to run applications in containers? Each correct answer presents a complete solution. Select all answers that apply. Azure Container Instances Azure Kubernetes Service (AKS) Azure Logic Apps Azure Functions

Azure Container Instances Azure Kubernetes Service (AKS)

What is the purpose of defense in depth? Select only one answer. to enable you to locate and act on resources that are associated with specific workloads, environments, business units, and owners to manage policies that control or audit resources so that the configurations stay compliant with corporate standards to protect information and prevent it from being stolen by those who are unauthorized to access it to evaluate resources and make recommendations to help improve reliability and performance

to protect information and prevent it from being stolen by those who are unauthorized to access it

Which type of strategy uses a series of mechanisms to slow the advancement of an attack that aims to gain unauthorized access to data? Select only one answer. defense in depth least privileged access distributed denial-of-service (DDoS) perimeter

defense in depth

Why is cloud computing often less expensive than on-premises datacenters? Each correct answer presents a complete solution. Select only one answer. You are only billed for what you use. Network bandwidth is free. Cloud service offerings have limited functionality. Services are only offered in a single geographic location.

You are only billed for what you use.

What is high availability in a public cloud environment dependent on? Select only one answer. the service-level agreement (SLA) that you choose the vertical scalability of an app cloud-based backup retention limits capital expenditures

the service-level agreement (SLA) that you choose

Select the answer that correctly completes the sentence. Increasing the capacity of an application by adding additional virtual machine is called [answer choice]. Select only one answer. vertical scaling horizontal scaling high availability agility

horizontal scaling

operating system physical network

Which type of cloud service model is typically licensed through a monthly or annual subscription? Select only one answer. Infrastructure as a service (IaaS) platform as a service (PaaS) software as a service (SaaS)

SaaS is software that is centrally hosted and managed for you and your users or customers. Usually, one version of the application is used for all customers, and it is licensed through a monthly or annual subscription. PaaS and IaaS use a consumption-based model, so you only pay for what you use.

What is the customer responsible for in a software as a service (SaaS) model? Select only one answer. storage data and access virtual machines runtime

data and access

Which cloud service model is used by Microsoft Office 365? Select only one answer. infrastructure as a service (IaaS) platform as a service (PaaS) software as a service (SaaS)

saas

What uses the infrastructure as a service (IaaS) cloud service model? Select only one answer. Azure virtual machines Azure App Services Microsoft Office 365 Azure Cosmos DB

az vm

Which type of cloud service are virtual networks? Select only one answer. infrastructure as a service (IaaS) platform as a service (PaaS) software as a service (SaaS)

iaas

Which two factors affect Azure costs? Each correct answer presents a complete solution. Select all answers that apply. availability zone selection resource usage resource location date and time of use

resource usage and location

Which two scenarios are common billing use cases for resource tags? Each correct answer presents a complete solution. Select all answers that apply. categorizing costs by department associating costs with different environments resizing underutilized virtual machines identifying lower cost regions

categorizing costs by department associating costs with different environments

You plan to build a new solution in Azure that will use platform as a service (PaaS) products. What should you use to estimate the monthly costs? Select only one answer. Total Cost of Ownership (TOC) Calculator Azure Pricing calculator Azure Advisor Azure Cost Management

Azure Pricing calculator

Your organization plans to deploy several production virtual machines that will have consistent resource usage throughout the year. What can you use to minimize the costs of the virtual machines without reducing the functionality of the virtual machines? Select only one answer. Azure Monitor alerts Azure Reservations spending limits

Azure Reservations offers discounted prices on certain Azure services. Azure Reservations can save you up to 72 percent compared to pay-as-you-go prices. To receive a discount, you can reserve services and resources by paying in advance.

What can you use to ensure that new and existing Azure resources stay in compliance with corporate standards? Select only one answer. Azure Policy resource locks resource tags Azure Advisor

Azure Policy

You need to ensure that multi-factor authentication (MFA) is enabled on accounts with write permissions in an Azure subscription. What should you implement? Select only one answer. resource tags Cloud Adoption Framework resource locks Azure Policy

az policy

What allows you to orchestrate the deployment of resource templates and other artifacts? Select only one answer. Azure Blueprints Azure Functions Azure App Services Azure Cognitive Services

Which management layer accepts requests from any Azure tool or API and enables you to create, update, and delete resources in an Azure account? Select only one answer. Azure Resource Manager (ARM) Azure management groups Azure CLI Azure Sphere

ARM

What can you use to manage resources, such as virtual machines, across multiple cloud platforms and on-premises environments? Select only one answer. Azure Arc Azure CLI Azure Monitor Azure PowerShell

AZ Arc

What provides recommendations to reduce the cost of Azure resources? Select only one answer. Azure Advisor Azure Security Center Azure Dashboard Azure Service Health

az advisor

You need to be notified when there are new recommendations for reducing Azure costs. Which tool should you use? Select only one answer. Azure Service Health Azure Advisor Azure Monitor Log Analytics

az advisor

You need to identify which Azure services are compliant with ISO 27001 Information Security Management Standards. Where should you go to locate the information? Select only one answer. Microsoft Trust Center Microsoft Privacy Statement the Data Protection Addendum of Microsoft Microsoft Online Services Terms

ms trust senter

Which two tools can you use to create a new Azure virtual machine from a mobile device that runs Android? Each correct answer presents complete solution. Select all answers that apply. the Azure portal SSH Remote Desktop PowerShell in Azure Cloud Shell

azure portal PowerShell in Azure Cloud Shell

You have a team of Linux administrators that need to manage the resources in Azure. The team wants to use the Bash shell to perform the administration. What should you recommend? Select only one answer. Azure Blueprint Azure CLI Azure Powershell Azure Resource Manager (ARM) template

azure cli

Which Azure service evaluates Azure resources and makes recommendations to help improve reliability, security, and performance, achieve operational excellence, and reduce costs? Select only one answer. Azure Monitor Azure Service Health Log Analytics Azure Advisor

az advisor

You need to review the root cause analysis (RCA) report for a service outage that occurred last week. Where should you look for the report? Select only one answer. Azure Service Health Azure Advisor Azure Monitor Log Analytics

azure service health

What can you use to connect Azure resources, such as Azure SQL databases, to an Azure virtual network? Select only one answer. ExpressRoute network security groups (NSGs) peering service endpoints

Service endpoints are used to expose Azure services to a virtual network, providing communication between the two. ExpressRoute is used to connect an on-premises network to Azure. NSGs allow you to configure inbound and outbound rules for virtual networks and virtual machines. Peering allows you to connect virtual networks together.

Which two services can you use to establish network connectivity between an-premises network and Azure resources? Each correct answer presents a complete solution. Select all answers that apply. ExpressRoute Azure VPN Gateway Azure Bastion Azure Firewall

ExpressRoute connections and Azure VPN Gateway are two services that you can use to connect an on-premises network to Azure. Bastion provides a web interface to remotely administer Azure virtual machines by using SSH/RDP. Azure Firewall is a stateful firewall service used to protect virtual networks.

Which storage service offers fully managed file shares in the cloud that are accessible by using industry-standard network protocols? Select only one answer. Azure Disk Storage Azure Table storage Azure Queue Storage Azure Files

az files

What are two basic services provided by all cloud providers? Each correct answer presents a complete solution. Select all answers that apply. application development colocation compute storage

compute storage

elasticity

geolocation

operating system physical network